CERBERUS/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-10-21 19:32:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Remove the brute.emptypass script argument. We already include the

Browse source 
empty password in our password list. If you want to turn it off, it
would be better to provide an interface that allows an iterator to throw
out certain passwords.
This commit is contained in:
david 2010-08-18 16:01:00 +00:00
parent f7b4d9146c
commit 018c6c5171
1 changed files with 0 additions and 24 deletions
Download patch file Download diff file Expand all files Collapse all files

24
nselib/brute.lua
View file

@ -101,7 +101,6 @@
-- @author "Patrik Karlsson <patrik@cqure.net>"
--
--
-- @args brute.emptypass guess an empty password for each user (default: true)
-- @args brute.useraspass guess the username as password for each user
-- (default: true)
-- @args brute.unique make sure that each password is only guessed once
@ -143,7 +142,6 @@ Options = {
local o = {}
setmetatable(o, self)
self.__index = self
o.empty_password = self.checkBoolArg("brute.emptypass", true)
o.user_as_password = self.checkBoolArg("brute.useraspass", true)
o.check_unique = self.checkBoolArg("brute.unique", true)
o.firstonly = self.checkBoolArg("brute.firstonly", false)
@ -612,20 +610,6 @@ Engine =
local function next_password_username ()
local tested_creds = {}
-- should we check for empty passwords?
if ( self.options.empty_password ) then
for username in usernames do
if ( not(tested_creds[username]) ) then
tested_creds[username] = {}
end
tested_creds[username][""] = true
if ( not(self.found_accounts) or not(self.found_accounts[username]) ) then
coroutine.yield(username, "")
end
end
end
usernames("reset")
-- should we check for same password as username
if ( self.options.user_as_password ) then
for username in usernames do
@ -674,14 +658,6 @@ Engine =
-- set's up a table to track tested credentials
tested_creds[username] = {}
-- should we check for empty passwords?
if ( self.options.empty_password ) then
tested_creds[username][""] = true
if ( not(self.found_accounts) or not(self.found_accounts[username]) ) then
coroutine.yield(username, "")
end
end
-- should we check for same password as username
if ( self.options.user_as_password and not(self.options.passonly) ) then
tested_creds[username][username:lower()] = true