fyodor
c9d610ccea
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
tomsellers
035ae9e9b1
Updated account status text in brute force password discovery scripts in an effort to make the reporting more consistent across all scripts. This will have an impact on any code that parses these values.
...
In the case of a few of these scripts the only thing that was updated was the example text as the scripts relied on the creds library which handles the strings internally.
2011-09-11 12:13:13 +00:00
gorjan
4ca48ea450
FIX: Added require 'creds' where it was missing; Mostly where creds.State.<some_state> was used.
2011-07-07 16:22:57 +00:00
patrik
f4bf440b14
o [NSE] Added credential storage library (creds.lua) and modified the brute
...
library and scripts to make use of it. [Patrik]
2011-06-19 17:18:29 +00:00
david
de9d0362e0
Treat 5xx errors as success (guessed password) in http-brute.
...
This was suggested by Toni Ruottu in
http://seclists.org/nmap-dev/2011/q1/940 .
2011-04-28 04:14:54 +00:00
fyodor
a84c2e4498
Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG
2011-01-14 10:20:51 +00:00
david
fffe597ece
Typo fix.
2010-12-13 18:16:06 +00:00
david
52d1590c84
Add the script argument http-brute.method. This is so you can do
...
http-brute.method=POST instead of having GET hardcoded in the script.
2010-09-27 01:23:37 +00:00
david
ed48818666
Remove the restriction to one thread in http-brute.lua, as the worker thread
...
bug that required it has been fixed.
2010-09-23 16:33:02 +00:00
patrik
a2c2a3f84c
o [NSE] Added two new scripts http-brute.nse and http-form-brute that attempt
...
to perform password guessing against web servers and applications. [Patrik]
2010-08-19 20:53:40 +00:00
