Re: Nmap Erros on URI using NSE

[nnposter () users sourceforge net]

Shritam Bhowmick wrote:
> Okay, at last I modified the code. Nnposter is correct if gives you out the
> credentials, but there's something missing to the script, I ran the test
> over 20 times by now and I hit 5 successful attempts and rest 15 were false
> positives: look at the results here:
>
> Invalid with same code: http://s22.postimg.org/pq7q8x2y9/invalid.png
> Valid with same code: http://s7.postimg.org/6b864ls0b/vlid.png
>
> What's wrong?

Your brute-force run is taking a substantial amount of time, around
270 seconds, while mine was consistently around 45 seconds so you are
experiencing some bottleneck somewhere. I am guessing that the false
hits are generated by receiving incomplete responses from the server.


Cheers,
nnposter
_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/