Re: smbv2-dos.nse

[Patrick Donnelly <batrick () batbytes com>]

On Sat, Sep 12, 2009 at 11:19 AM, Ron <ron () skullsecurity net> wrote:
> I couldn't find a good way to check if a server crashed[1], so this script
> simply sends the packet and doesn't check if it works. I added it to the
> 'dos' category, which I don't think should be implied by 'all'.
>
> If anybody knows of a way to fix smb-check-vulns.nse (linked in [1]) such
> that it returns the proper return value for connect() or send(), let me know
> and I'll update that.
>
> Ron
>
> [1] http://seclists.org/nmap-dev/2009/q3/0917.html

Perhaps we should only let this script run if specified by name on
command line (or something similar)? I don't like the idea of
accidentally running a script like this with a poorly added "all". I
feel most people would agree.


-- 
-Patrick Donnelly

"Let all men know thee, but no man know thee thoroughly: Men freely
ford that see the shallows."

- Benjamin Franklin

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org