Re: Sounds like ftp-anon needs work?

[Gutek <ange.gutek () gmail com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

going further :

after a lot or -iR, I did not found any 2xx "maybe"-positive result but
CheckPoint Firewall. This also means that I did not found any
false-positive that was anything *else* but CP-F.

That's why I've chosen my workaround H2 : string.matching to hunt for a
CheckPoint - specific reply.

But with ou without my patch I've also never found any positive 2xx
(mean : which is not CP-F)

Please find attached ftp-anon with R/W test and CP-F detection.
If someone could test it against an host which is spotted as "Anonymous
FTP login allowed (FTP code 2xx) to confirm ?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.12 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/

iEYEARECAAYFAkv6bLkACgkQ3aDTTO0ha7jShQCfRq5qhi0HcGrMHdai5GuUzZFB
P54An3GTF5jl+TjizhGdvPJXi6Nj7i10
=+qdL
-----END PGP SIGNATURE-----

Attachment: ftp-anon-rw-CPsensor.nse
Description:

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/