Re: [NSE] membase-http-info - detection changes, name change question

[Toni Ruottu <toni.ruottu () iki fi>]

Is there a reason why this script is called membase-http-info? The
standard naming convention would be http-membase-info, right? We also
have riak-http-info. Is this a mistake as well, or are these two
scripts somehow different from the others?

On Wed, Jul 4, 2012 at 7:17 PM, Tom Sellers <nmap () fadedcode net> wrote:
> The Membase NoSQL server project has merged with CouchOne and is now called Couchbase [1].  The Membase and CouchDB 
> projects are also called CouchBase [2].
>
> As a result some of the service's header strings have changed.  Fortunately, the existing membase-http-info script 
> works against the updated target software if the
> detection logic on line 89 is updated to include the new server header (Couchbase Server).
>
> I have verified that this works correctly when scanning Membase 1.7.1.1, Couchbase 1.8.0r-55-g80f24f2-community and 
> Couchbase 1.8.1-937-rel-enterprise.
>
> The change was implemented in commit #29123.
>
> I have also added version detection match lines for both products in commit #29121.
>
>
> At this point, both membase-* scripts ( membase-http-info and membase-brute ) are verified to work against Membase 
> and the new Couchbase software.
> In light of the Membase project changes, should the membase-* scripts be renamed to couchbase-* ?
>
>
> Thanks much,
>
> Tom Sellers
>
> 1. http://blog.couchbase.com/couchone-membase-couchbase
> 2. http://blog.couchbase.com/membase-server-now-couchbase-server
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://seclists.org/nmap-dev/
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/