1
0
mirror of https://github.com/nmap/nmap.git synced 2025-12-25 00:49:01 +00:00
Commit Graph

6 Commits

Author SHA1 Message Date
david
31935a45d4 o [NSE] Fixed some portrules that used shortport functions incorrectly
and always returned true in dns-zone-transfer and
  ftp-proftpd-backdoor. [Jost Krieger]
2011-02-04 08:46:14 +00:00
fyodor
a84c2e4498 Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
david
77c5cd9d9a Use ftp.read_reply in ftp-proftpd-backdoor. Also, do a read_reply after
sending the magic shell string but before sending a shell command.
Michael Meyer reported that the script would sometimes fail to report a
backdoor; I tracked this down to the sends happening in too-close
succession. The ProFTPD process could receive both sends
("HELP ACIDBITCHEZ\r\nid;\r\n"), read the first line, and execute the
shell, but then the shell would get no input because the "id;\r\n" had
already been read.

This causes a delay up to the timeout when there is a backdoor, but it
still returns right away when there is no backdoor.
2010-12-29 21:24:53 +00:00
david
722fd3a89a Fix script argument name. ftp-proftpd-backdoor.cmd
instead of ftp-proftp-backdoor.cmd.
2010-12-07 22:44:06 +00:00
david
4744f6b747 Patch from Mak Kolybabi: let ftp-proftpd-backdoor bail out early if
version detection has been done and doesn't show a potentially
backdoored version. Also update strings to match the new script name.
2010-12-07 22:44:04 +00:00
david
adc460fc22 o [NSE] Added the ftp-proftpd-backdoor.nse script by mak Kolybabi,
which checks for a backdoor in ProFTPD 1.3.3c.
2010-12-07 00:22:01 +00:00