Re: Nmap Erros on URI using NSE

[Daniel Miller <bonsaiviking () gmail com>]

On Sat, Aug 9, 2014 at 11:04 PM, Shritam Bhowmick <
shritam.bhowmick () gmail com> wrote:

> It's much easier when you look at the source and the default methods are
> not declared. I take them as a GET since none such methods were declared at
> the source.

Shritam,

The documentation for the script (
http://nmap.org/nsedoc/scripts/http-form-brute.html) states:

"After attempting to authenticate using a HTTP POST request the script
analyzes the response"

I suppose adding a script-arg "http-form-brute.verb" could be useful in odd
cases like this, but as I stated before, passing authentication parameters
in a GET request is unusual because of caching and logging issues.

Dan
_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/