Re: [nmap-svn] r23421 - nmap/scripts

[Gorjan Petrovski <mogi57 () gmail com>]

Well I was browsing through the NSE section of Fyodor's book, and I
noticed this:
http://nmap.org/book/nse-usage.html#nse-args

especially the part where the script arguments are passed like this:
nmap -sC --script-args
'user=foo,pass=",{}=bar",whois={whodb=nofollow+ripe},userdb=custom'

So I thought that ^ was the right way. I should have consulted nmap-dev I guess.

Which method is preferred?

On Sat, May 28, 2011 at 8:23 PM, David Fifield <david () bamsoftware com> wrote:
> On Sat, May 28, 2011 at 10:55:44AM -0700, commit-mailer () insecure org wrote:
> > Author: gorjan
> > Date: Sat May 28 10:55:44 2011
> > New Revision: 23421
> >
> > Log:
> > Separator "," in backorifice-brute.nse instead of ";"
> >
> > Modified:
> >    nmap/scripts/backorifice-brute.nse
> >
> > Modified: nmap/scripts/backorifice-brute.nse
> > ==============================================================================
> > --- nmap/scripts/backorifice-brute.nse        (original)
> > +++ nmap/scripts/backorifice-brute.nse        Sat May 28 10:55:44 2011
> > @@ -8,7 +8,7 @@
> >  -- @usage
> >  -- nmap -sU --script backorifice-brute <host> --script-args backorifice-brute.ports=<ports>
> >  --
> > --- @arg backorifice-brute.ports (mandatory) List of UDP ports to run the script against separated with ";" ex. 
> > "U:31337;25252;151-222", "U:1024-1512"
> > +-- @arg backorifice-brute.ports (mandatory) List of UDP ports to run the script against separated with "," ex. 
> > "U:31337,25252,151-222", "U:1024-1512"
> >  --
> >  -- This script uses the brute library to perform password guessing. A
> >  -- successful password guess is stored in the nmap registry, under the
> > @@ -53,7 +53,7 @@
> >               return false
> >       end
> >
> > -     return port.protocol == "udp" and stdnse.in_port_range(port, ports:gsub(";",",") ) and
> > +     return port.protocol == "udp" and stdnse.in_port_range(port, ports:gsub(",",",") ) and
> >               not(shortport.port_is_excluded(port.number,port.protocol))
>
> I thought this used ';' to avoid a conflict with a comma, which is used
> to separate script args. If I try
>
> --script-args backorifice-brute.ports=U:1024,31337
>
> then nmap.registry.args["backorifice-brute"] contains only "U:1024".
>
> David Fifield
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://seclists.org/nmap-dev/
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/