Nmap Development mailing list archives

Re: [NSE] http-comments-displayer.nse


From: George Chatzisofroniou <sophron () latthi com>
Date: Sat, 22 Jun 2013 16:28:02 +0300

On Thu, Jun 13, 2013 at 11:52:21PM +0300, George Chatzisofroniou wrote:
The attached script makes use of patterns to extract HTML comments
from HTTP responses. Some times sensitive information is present
within HTML comments. While this does not necessarily represent a
breach in security, it give an attacker useful guidance for future
exploitation.

[...]


Commited as revision 30966. 

Again, sorry for delay in sending this mail.

-- 
George Chatzisofroniou
http://sophron.latthi.com

Attachment: signature.asc
Description: Digital signature

_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/

Current thread: