12 Commits

Author	SHA1	Message	Date
ron	c1d48010a1	Added caching for the HTTP fingerprint files. It mimics similar code from http-usedir-enum.nse, storing the fingerprints in the registry and checking if it exists before reading them.	2009-08-25 23:45:48 +00:00
ron	fbf2c3d6a7	Print the http status along with the result, if it isn't 200 OK. This was the original behaviour, but it got lost along the way.	2009-08-23 16:58:53 +00:00
ron	fbc8e180ca	Converted http-userdir-enum.nse to use my http-enum.nse logic (from http.lua). Also moved the 'displayall' script-arg back into the script, not http.lua, because http-userdir-enum.nse actually wants to find non-200 pages (403 Access Denied, for instance).	2009-08-23 00:43:46 +00:00
ron	cf33de55f3	Moved the definition for the 'displayall' argument into http.lua.	2009-08-23 00:24:23 +00:00
ron	77e7738545	Moved the meat of the http-enum.nse code (the 404-detection, HEAD-detection, etc) into http.lua. It may be a better idea to use http-helper.lua or something similar, but for now http.lua works. I'm open to suggestiosn.	2009-08-23 00:22:20 +00:00
ron	4616e62760	Fix some tabs	2009-08-22 23:55:43 +00:00
ron	a546ebc84f	Clean up a lot of the http-enum.nse code; add some comments; abstract the 'is this a 404?' logic into a function (so it can eventually used by other scripts	2009-08-22 23:54:27 +00:00
ron	c9a62acf31	A major overhaul of the http-enum.nse script: ... * Cleaned up and function-ized the code. Planning to move the functions to http.lua or similar to let other scripts (like http-userdir-enum.nse) use them. * Better support for different HTTP error codes * Significantly improved detection of 404 pages to prevent false positives. Some of the techniques used: - Request a non-existent page and check the status code - If it's 200, try to remove anything that may change (times, URI, filenames, etc), md5 it if ssl is available, and store it. Request a second 404 page and do the same. If they don't match, abort. - If it's any other error code, store it, and look for it in addition to 404 Not Found - Request the root folder, / - If it returns a 301 Move Permanently or 401 Authentication Required, abort * Abstracted the fingerprints into files in the nselib/data directory: - http-fingerprints: common files/folders - yokoso-fingerprints: common applications (from the Yokoso project, by InGuardians -- used under the Nmap license with pemission from Kevin Johnson -- http://seclists.org/nmap-dev/2009/q3/0685.html) * Added a script-arg that can display all output (except known 404s), instead of just 200 OK and 401 Authentication Required * Added a lot of debugging messages	2009-08-22 23:19:16 +00:00
batrick	5e362ac43d	Changed a global variable to a local to avoid an error from the strict ... module.	2009-08-15 14:57:52 +00:00
joao	bf4599385e	Added pipeline support to http-enum.nse	2009-08-12 01:52:03 +00:00
joao	8e145d6994	Fixing script categories	2009-08-10 11:17:52 +00:00
joao	53cefe9de0	Included Rob Nicholl's http-enum.nse script	2009-07-24 09:18:34 +00:00