o [NSE] Added the http-method-tamper script that detects authentication bypass

vulnerabilities using the http HEAD method as reported in CVE-2010-738.
  [Hani Benhabiles]
This commit is contained in:
patrik 2011-11-08 21:18:22 +00:00
parent fddfd9b0e6
commit 465594fa87
3 changed files with 75 additions and 0 deletions

View file

@ -101,6 +101,7 @@ Entry { filename = "http-joomla-brute.nse", categories = { "brute", "intrusive",
Entry { filename = "http-litespeed-sourcecode-download.nse", categories = { "exploit", "intrusive", "vuln", } }
Entry { filename = "http-majordomo2-dir-traversal.nse", categories = { "exploit", "intrusive", "vuln", } }
Entry { filename = "http-malware-host.nse", categories = { "malware", "safe", } }
Entry { filename = "http-method-tamper.nse", categories = { "auth", "safe", } }
Entry { filename = "http-methods.nse", categories = { "default", "safe", } }
Entry { filename = "http-open-proxy.nse", categories = { "default", "discovery", "external", "safe", } }
Entry { filename = "http-passwd.nse", categories = { "intrusive", "vuln", } }