tomsellers
644595d077
Modified multiple scripts that operated against HTTP based services so as to remove false positives that were generated when the target service answers with a 200 response to all requests.
...
Some scripts that had been previously modified were updated so that the debug output was consistent.
A few scripts were calling identify_404 with host.ip as opposed to the proper host object. This has been adjusted as well.
2012-07-08 12:41:37 +00:00
batrick
000f6dc4d9
Lua 5.2 upgrade [1] for NSE.
...
[1] http://seclists.org/nmap-dev/2012/q2/34
2012-05-27 08:53:32 +00:00
fyodor
78033599ed
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
fyodor
d13ae6cf25
Minor updates to description text
2011-12-29 10:54:55 +00:00
patrik
25a54f58cb
o [NSE] Applied patch that corrects an issue where the http-method-tamper
...
script would fail to properly detect JBoss servers vulnerable to the
CVE-2010-0738 vulnerability. [Hani Benhabiles]
2011-12-08 19:04:42 +00:00
djalal
5ac9edb7e1
Fix the vulnerability CVE ID in the documentation.
2011-11-09 10:21:08 +00:00
patrik
465594fa87
o [NSE] Added the http-method-tamper script that detects authentication bypass
...
vulnerabilities using the http HEAD method as reported in CVE-2010-738.
[Hani Benhabiles]
2011-11-08 21:18:22 +00:00
