14 Commits

Author	SHA1	Message	Date
fyodor	c9d610ccea	Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)	2011-09-30 06:18:55 +00:00
tomsellers	b841ee37b7	a couple more adjustments to account status handling in brute scripts. ... Revert wording in oracle-brute.nse, add support for new category in ldap-brute.nse and reflect new wording in examples in afp-brute.nse	2011-09-13 01:44:30 +00:00
tomsellers	035ae9e9b1	Updated account status text in brute force password discovery scripts in an effort to make the reporting more consistent across all scripts. This will have an impact on any code that parses these values. ... In the case of a few of these scripts the only thing that was updated was the example text as the scripts relied on the creds library which handles the strings internally.	2011-09-11 12:13:13 +00:00
tomsellers	ee676fab14	Added support for specifying a UPN suffix to be appended to usernames when brute forcing Microsoft Active Directory accounts. This should provide more reliable tests against domains that have been heavily organized into OUs or have child domains with a single UPN suffix. The UPN suffix can guessed or found via a null LDAP bind by ldap-rootdse.nse.	2011-09-09 23:57:21 +00:00
tomsellers	e20ea237ef	Added ability to save discovered credentials to a file via the creds nse library.	2011-09-04 18:01:45 +00:00
tomsellers	5b512f0914	ldap-brute: Added feedback to -vv output when a valid ... user/password combination is found.	2011-09-03 04:15:28 +00:00
tomsellers	e7b2ffe7c8	Tweaked ldap-brute.nse to work correctly when the target AD implementation is 2008 R2 and perhaps other sources. ... Added detection of accounts where the credentials are correct, but the account is expired, not allowed to log on at the time of the scan or has been limited to logging in from particular hosts. Notes on these changes were sent to the mailing list.	2011-08-08 00:26:02 +00:00
paulino	26dc09ad43	Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry	2011-07-27 03:28:13 +00:00
patrik	356c1e12a9	fixed the following bug reported by Ron ... ./scripts/ldap-brute.nse:75: attempt to get length of local 'contexts' (a nil value) stack traceback: ./scripts/ldap-brute.nse:75: in function 'get_naming_context' ./scripts/ldap-brute.nse:121: in function <./scripts/ldap-brute.nse:95> (tail call): ?	2010-11-04 18:53:56 +00:00
david	3c89e089fc	Change calls in these forms: ... socket:connect(host.ip, port.number) socket:connect(host.ip, port.number, port.protocol) to this: socket:connect(host, port) connect can take host and port tables now, and the default protocol is taken from the port table if possible.	2010-08-16 18:59:30 +00:00
david	bccb8ead89	Edit some script descriptions for better line breaks when rendered as ... PDF. Some long URLs were replaced by short redirects under http://nmap.org/r/.	2010-07-17 16:47:31 +00:00
david	b9633ed69b	Do copyediting of NSEDoc. This is a first pass up to ms-sql-xp-cmdshell.	2010-07-09 23:32:18 +00:00
david	3915ed94e4	Remove explicit timelimit checking from ms-sql-brute, pgsql-brute, ... mysql-brute, ldap-brute, and afp-brute. The unpwdb library does this automatically now.	2010-04-16 02:11:12 +00:00
patrik	42da3e0ba0	o [NSE] Added a new library for LDAP and two new scripts: ... - ldap-brute uses the unpwdb library to guess credentials for LDAP - ldap-rootdse retrieves the LDAP root DSA-specific Entry (DSE)	2010-02-21 08:52:44 +00:00