3 Commits

Author	SHA1	Message	Date
batrick	000f6dc4d9	Lua 5.2 upgrade [1] for NSE. ... [1] http://seclists.org/nmap-dev/2012/q2/34	2012-05-27 08:53:32 +00:00
fyodor	2ff08a24a1	Update some script nsedoc descriptions for consistency. The description should almost always start with an active verb and never with the script name or 'this script'. Admittedly that makes the first sentence a fragment. The first sentence should be capitalized	2011-09-11 20:50:56 +00:00
paulino	c43e0bb970	Added http-litespeed-sourcecode-download: ... http-litespeed-sourcecode-download.nse exploits a null-byte poisoning vulnerability in Litespeed Web Servers 4.0.x before 4.0.15 to retrieve the target script's source code by sending a HTTP request with a null byte followed by a .txt file extension (CVE-2010-2333). If the server is not vulnerable it returns an error 400. If index.php is not found, you may try /phpinfo.php which is also shipped with LiteSpeed Web Server. The attack payload looks like this: * <code>/index.php\00.txt</code> References: * http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2333 * http://www.exploit-db.com/exploits/13850/	2011-07-24 20:13:42 +00:00