CERBERUS/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-10-20 19:01:56 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Quits iterating over probes when a valid login for that application has been found. If we don't quit we get the same valid credentials in different paths.

Browse source
This commit is contained in:
paulino 2011-07-08 18:43:51 +00:00
parent f3e5a3f113
commit 7c75967507
1 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
scripts/http-default-accounts.nse
View file

@ -253,11 +253,13 @@ action = function(host, port)
-- Iterate through responses to find a candidate for login routine
local j = 1
for i, fingerprint in ipairs(fingerprints) do
local credentials_found = false
stdnse.print_debug(1, "%s: Processing %s", SCRIPT_NAME, fingerprint.name)
for _, probe in ipairs(fingerprint.paths) do
if (results[j]) then
if (results[j] and not(credentials_found)) then
local path = basepath .. probe['path']
if( http.page_exists(results[j], result_404, known_404, path, true) ) then
@ -272,6 +274,7 @@ action = function(host, port)
fingerprint.name, login_combo["username"], login_combo["password"], path)
-- Add to http credentials table
register_http_credentials(host, port, login_combo["username"], login_combo["password"])
credentials_found = true
end
end
end