Re: [NSE] New scripts vuze-dht-info, vuze-find-nodes

[Patrik Karlsson <patrik () cqure net>]

On Sun, Nov 27, 2011 at 10:35 PM, Toni Ruottu <toni.ruottu () iki fi> wrote:

> I think the vendor id from vuze-dht-info should be added to the
> corresponding version detection field. "product", I think it was
> called.

Good point, I'll add that.


> By looking at the code I get the picture that vuze-find-nodes attempts
> to extract information about any connected nodes by trying out random
> IDs. The bittorrent library does not work like this. Instead it lets
> the user provide an ID as a magnet link or torrent file and uses the
> ID to query the DHT. So the bittorrent library lacks support for
> extracting node information by brute force, where as this script
> doesn't support scans on specific IDs. I'll leave it up for discussion
> which one we need, or if we should have both. I am a bit worried that
> supporting one way for bittorrent dht, and another way for vuze dht
> may confuse users.
To be honest, I don't understand all of this protocol or how it is ment to
work, but as far as I can tell several consecutive requests with the
vuze-find-nodes script gets the same list of nodes.

Cheers,
Patrik

-- 
Patrik Karlsson
http://www.cqure.net
http://twitter.com/nevdull77
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/