Re: [NSE] Large recode for nse_main (test please)

[Kris Katterjohn <katterjohn () gmail com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Patrick Donnelly wrote:
> I forgot to mention: Feel free to test this code in my branch on the
> svn (/nmap-exp/patrick).

I'm having some problems.  Here is output from an unpatched Nmap:

SCRIPT ENGINE: Initialized 21 rules
SCRIPT ENGINE: Matching rules.
SCRIPT ENGINE: Will run /usr/local/share/nmap/scripts/SSHv1-support.nse
against 127.0.0.1:22
SCRIPT ENGINE: Will run /usr/local/share/nmap/scripts/HTTPAuth.nse against
127.0.0.1:80
[...]
PORT     STATE SERVICE   REASON
22/tcp   open  ssh       syn-ack
80/tcp   open  http      syn-ack
|_ HTML title: Site doesn't have a title.
443/tcp  open  https     syn-ack
|  SSLv2: server still supports SSLv2
|       SSL2_DES_192_EDE3_CBC_WITH_MD5
|       SSL2_RC2_CBC_128_CBC_WITH_MD5
|       SSL2_RC4_128_WITH_MD5
|       SSL2_DES_64_CBC_WITH_MD5
|       SSL2_RC2_CBC_128_CBC_WITH_MD5
|_      SSL2_RC4_128_EXPORT40_WITH_MD5
|_ HTML title: Site doesn't have a title.
9050/tcp open  tor-socks syn-ack


But here is output from Nmap built from your branch:

SCRIPT ENGINE: Initialized 0 rules
SCRIPT ENGINE: Matching rules.
SCRIPT ENGINE: Will run /usr/local/share/nmap/scripts/SSHv1-support.nse
against 127.0.0.1
SCRIPT ENGINE: Will run /usr/local/share/nmap/scripts/HTTPAuth.nse against
127.0.0.1
[...]
PORT     STATE SERVICE   REASON
22/tcp   open  ssh       syn-ack
80/tcp   open  http      syn-ack
443/tcp  open  https     syn-ack
9050/tcp open  tor-socks syn-ack

Host script results:
|  SSLv2: "server still supports SSLv2
|       SSL2_DES_192_EDE3_CBC_WITH_MD5
|       SSL2_RC2_CBC_128_CBC_WITH_MD5
|       SSL2_RC4_128_WITH_MD5
|       SSL2_DES_64_CBC_WITH_MD5
|       SSL2_RC2_CBC_128_CBC_WITH_MD5
|       SSL2_RC4_128_EXPORT40_WITH_MD5
|_ "

|_ HTML title: "Site doesn't have a title.",
|_ HTML title: "Site doesn't have a title.",


Differences I notice first-hand are:

1) It says it initialized 0 rules, rather than 21
2) The script output is in the wrong place
3) The output is in quotation marks now
4) After the SSLv2 output, there is a strange character
5) There are commas after the HTML title output, maybe related to #4

And if I use a host script:

|_ RIPE query: "IP belongs to: Internet Assigned Numbers Authority"?????m?

This is correctly in the Host Script output section, but there is a bunch of
crap at the end of this one as well.

> Cheers,

Thanks,
Kris Katterjohn

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
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=7O5w
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org