12 Commits

Author	SHA1	Message	Date
batrick	000f6dc4d9	Lua 5.2 upgrade [1] for NSE. ... [1] http://seclists.org/nmap-dev/2012/q2/34	2012-05-27 08:53:32 +00:00
paulino	26dc09ad43	Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry	2011-07-27 03:28:13 +00:00
david	a9b75892f5	Use shortport.http where appropriate.	2010-08-09 22:30:50 +00:00
fyodor	46a819b034	changed a URL to use %28 and %29 rather than ( and ) to fix an nsedoc parsing issue noted by Jason DePriest	2010-06-10 05:36:39 +00:00
david	1906c0febd	Don't print out a blank line in http-methods.nse when there's nothing to ... report.	2010-03-02 22:44:10 +00:00
david	a90ba28583	Have http-methods.nse highlight "interesting" methods as "potentially ... risky" methods. Provide a link to the NSEDoc and to the OWASP page on methods for more information.	2010-03-02 22:34:11 +00:00
david	ce18e4bb54	Make http-methods.nse merge the contents of the Allow and Public ... headers, as suggested by Patrik Karlsson.	2010-03-02 20:27:08 +00:00
david	e603eadd96	Remove TRACE from the http-methods.nse "uninteresting" set on a ... recommendation from Daniel Roethlisberger. TRACE is interesting because it can be used to get cookies or authentication data in a cross-site scripting attack. See http://www.owasp.org/index.php/Cross_Site_Tracing.	2010-02-22 21:42:47 +00:00
david	29efe81bf1	Add http-methods.nse to the default category. Make it silent if the only ... methods it discovers are in (GET, HEAD, POST, OPTIONS, TRACE). In verbose mode, or if any other method is discovered, it prints all methods (and optionally retests them). See http://seclists.org/nmap-dev/2010/q1/401.	2010-02-19 05:42:36 +00:00
david	650e639f1f	Rewrite http-methods.nse to use the http.generic_request function ... instead of doing its own socket handling. Also make the output more concise.	2010-02-19 04:55:38 +00:00
david	ffd7a6dba5	Do some cleanup and shortening of http-methods.nse.	2010-02-19 02:34:45 +00:00
david	6643fd3422	o [NSE] Added the script http-methods from Bernd Stroessenreuther. ... This script sends an HTTP OPTIONS request to get the methods supported by the server, and optionally tests each method to see if they are restricted by IP address or something similar.	2010-02-01 19:13:55 +00:00