From 76df6b2d44fb5d279f45d328c49f50c03f0f17b8 Mon Sep 17 00:00:00 2001 From: "root@NIH-PenTest-L02" Date: Fri, 16 Jun 2023 11:25:49 -0400 Subject: [PATCH] Ensure that username is only used as password once --- scripts/drda-brute.nse | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/scripts/drda-brute.nse b/scripts/drda-brute.nse index 20110ca59..f3fbc40b7 100644 --- a/scripts/drda-brute.nse +++ b/scripts/drda-brute.nse @@ -51,11 +51,16 @@ portrule = shortport.port_or_service({50000,60000}, {"drda","ibm-db2"}, "tcp", { local function new_usrpwd_iterator (usernames, passwords) local function next_username_password () local useraspass = stdnse.get_script_args('drda-brute.useraspass') or false + for username in usernames do + local namenotused = true for password in passwords do + if ( username == password ) then + namenotused = false + end coroutine.yield(username, password) end - if useraspass then + if (useraspass and namenotused) then coroutine.yield(username, username) end passwords("reset")