Re: smbv2-dos.nse

[Fyodor <fyodor () insecure org>]

On Sat, Sep 12, 2009 at 11:14:30AM -0500, Kris Katterjohn wrote:
> We shouldn't butcher a category like "all", when its name describes it
> perfectly in 3 letters.  All is all.

I agree, but I also think Ron makes a great point that users may
(wrongly) assume that --scripts=all is reasonably safe to run since
the documentation mentions the feature in several places but never
mentions any risks.  So I've added a warning to refguide and
scripting.xml that --script=all can be dangerous since Nmap may
contain exploits, denial of service attacks, brute force
authentication crackers, and other dangerous scripts.

Cheers,
-F

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org