Nmap Development mailing list archives
[NSE] brute.lua custom iterators
From: Patrik Karlsson <patrik () labb1 com>
Date: Mon, 30 Aug 2010 21:06:52 +0200
Hi, Here's an attempt to add custom iterators to the brute library as suggested by David. The new design adds a function called addIterator that adds an iterator to the iterator list. A script can register multiple iterators that are run in the order in which they were added. The engine removes any duplicates. An iterator function needs to return a username and password pair and the patch adds the following "common" iterators: * user_pw_iterator - Tries every password for each user (user in outer loop) * pw_user_iterator - Tries each password for every user (pass in outer loop) * pw_same_as_user - Tries the username as password * pw_ucase_iterator - Changes case of each password * credential_iterator - Tries a known or common set of credentials (username and password pairs) Let me know what you think and if there are no major objections I would like to commit it. Once it's in I can add a good list of common/default usernames and passwords for the oracle-brute script. //Patrik
Attachment:
brute_lua-custom-iterator.patch
Description:
-- Patrik Karlsson http://www.cqure.net http://www.twitter.com/nevdull77
_______________________________________________ Sent through the nmap-dev mailing list http://cgi.insecure.org/mailman/listinfo/nmap-dev Archived at http://seclists.org/nmap-dev/
Current thread:
- [NSE] brute.lua custom iterators Patrik Karlsson (Aug 30)