1
0
mirror of https://github.com/nmap/nmap.git synced 2025-12-09 06:01:28 +00:00
Commit Graph

25 Commits

Author SHA1 Message Date
patrik
cbf71a1668 o [NSE] Fixed a bug where the brute library would not abort even after all
retries were exhausted [Patrik]
2011-11-02 09:48:33 +00:00
patrik
6c864bd9f8 Changed command line processing to assume cred mode if credfile was supplied
and no mode was explicitly given [Patrik]
2011-09-02 06:12:39 +00:00
patrik
5e954c65a9 Added support for comments in the credential_iterator [Patrik] 2011-07-25 17:59:05 +00:00
patrik
2faca7aed1 Added support for scripts to report invalid (non-existing) accounts back
to the brute library. This way, they're removed from further guessing.
[Patrik]
2011-07-21 05:56:58 +00:00
patrik
4356fe16a5 * fixed a bug that would result in unnecessary connects and disconnect for
discovered accounts

* documented engine options

* added new engine option (nostore) that instructs the library not to store
  the discovered credentials in the credential database
2011-07-13 20:49:20 +00:00
patrik
aadac7c8d5 * Fixed a bug in the brute library prevented additional passwords from
being found if run in passonly mode.

* Fixed a bug in the brute library preventing detection of duplicate
  credential entries requested from the iterator.
2011-07-12 21:23:12 +00:00
gorjan
25f00f01ec Another possible fix for the NSEDoc arguments in the brute.lua library 2011-07-10 16:20:49 +00:00
patrik
880f927fc0 fixed a statistic bug, cleaned up some code
fixed a setMode bug that wouldn't accept mode 'creds'
changed the creds iterator to take a file handle instead of a table
[Patrik]
2011-07-07 09:58:54 +00:00
gorjan
519d93da6d Fix for the NSEDoc missing @args 2011-07-06 20:19:20 +00:00
patrik
3a3ae7ede1 Added command line support to the creds library
Changed getCredentials to allow a bitmask filter
Changed getCredentials to return an iterator instead of a table
Modified the brute library to support the changes
[Patrik]
2011-07-06 12:16:43 +00:00
patrik
f4bf440b14 o [NSE] Added credential storage library (creds.lua) and modified the brute
library and scripts to make use of it. [Patrik]
2011-06-19 17:18:29 +00:00
patrik
b62cebc7b3 o [NSE] Fixed a problem in oracle-brute that would fail due to connection
exhaustion. Fixed some debugging messages in the brute library [Patrik]
2011-03-19 08:26:33 +00:00
patrik
eaf01310e7 Replaced an empty password with <empty> in a debug message. 2011-03-13 01:22:32 +00:00
david
5d07bded42 Typo fix. 2011-03-12 23:56:43 +00:00
patrik
72b7fcc299 Fixed bug so that empty passwords are printed as <empty> in script results.
Bug reported by Toni Ruottu http://seclists.org/nmap-dev/2011/q1/789
2011-03-12 23:50:57 +00:00
david
9f79aad78f Pass the driver_options whenever constructing a driver in brute.lua. This could
be required, for example, when running the check method.
2010-09-27 01:20:52 +00:00
patrik
e3781bb25d Changed the code to be more iterator oriented. Scripts can now add their own
iterators. Mutliple iterators may be added and the library provides a number
of common ones. [Patrik]
2010-09-14 19:43:53 +00:00
patrik
8cd97c4103 added additional documentation regarding the Error object 2010-08-20 17:58:13 +00:00
patrik
b5f645c2c7 Added more documentation regarding the Account and Error object. 2010-08-19 22:08:08 +00:00
david
66e1254649 Require -d2 to print out each guess in brute.lua, not just -d1. 2010-08-18 17:13:57 +00:00
david
018c6c5171 Remove the brute.emptypass script argument. We already include the
empty password in our password list. If you want to turn it off, it
would be better to provide an interface that allows an iterator to throw
out certain passwords.
2010-08-18 16:01:00 +00:00
david
f7b4d9146c Revise NSEDoc in brute.lua. 2010-08-18 15:52:32 +00:00
david
3c89e089fc Change calls in these forms:
socket:connect(host.ip, port.number)
socket:connect(host.ip, port.number, port.protocol)

to this:

socket:connect(host, port)

connect can take host and port tables now, and the default protocol is
taken from the port table if possible.
2010-08-16 18:59:30 +00:00
patrik
40a66945bb changed so that the error message of the Error object is returned when a
script signals the engine to abort.
2010-08-14 17:14:32 +00:00
patrik
5f58469ba7 o [NSE] Added a new brute library that provides a basic framework and logic
for password guessing scripts. [Patrik]
2010-08-14 14:56:40 +00:00