Nmap Development mailing list archives

[NSE] brute.lua custom iterators


From: Patrik Karlsson <patrik () labb1 com>
Date: Mon, 30 Aug 2010 21:06:52 +0200

Hi,

Here's an attempt to add custom iterators to the brute library as suggested by David.
The new design adds a function called addIterator that adds an iterator to the iterator list.
A script can register multiple iterators that are run in the order in which they were added. The engine removes any 
duplicates.

An iterator function needs to return a username and password pair and the patch adds the following "common" iterators:
* user_pw_iterator - Tries every password for each user (user in outer loop)
* pw_user_iterator - Tries each password for every user (pass in outer loop)
* pw_same_as_user - Tries the username as password
* pw_ucase_iterator - Changes case of each password
* credential_iterator - Tries a known or common set of credentials (username and password pairs)

Let me know what you think and if there are no major objections I would like to commit it.
Once it's in I can add a good list of common/default usernames and passwords for the oracle-brute script.

//Patrik

Attachment: brute_lua-custom-iterator.patch
Description:


--
Patrik Karlsson
http://www.cqure.net
http://www.twitter.com/nevdull77





_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/

Current thread: