Nmap Development mailing list archives

Re: Bug


From: Justin Powell <jstn.pwll () gmail com>
Date: Fri, 3 Jul 2015 09:19:18 -0400

Hm, okay. I'll try some more.

Another thing: it looks like there might be a problem in the SMTP library?
I was running smtp-enum-users script and got this message:

*587/tcp  open  submission syn-ack ttl 51*
*| smtp-enum-users: *
*|_  SMTP: EHLO 501 NULL characters are not allowed in SMTP commands*

It looks like whatever carriage return/line end character(s) are used are
being interpreted as NULLs.

On Thu, Jul 2, 2015 at 12:35 AM, Daniel Miller <bonsaiviking () gmail com>
wrote:

Justin,

Thanks for the report. http-form-brute can sometimes fail to detect a form
that accepts a username and password. Adding the -d option for debugging
output could show what's going wrong.

Dan

On Wed, Jul 1, 2015 at 2:07 PM, Justin Powell <jstn.pwll () gmail com> wrote:


Actually, I'm hesitant to call this a bug, but I don't know what else to
do. I've tried searching for similar problems to no avail.

I've been running a few NSE scripts, but several of them won't do
anything. I tried running http-form-brute, but nmap only shows results for
an extremely limited port scan...nothing is printed out about the script.

Am I doing something wrong? Here's the command:

*nmap -p <port> --script http-form-brute --script-args
http-form-brute.path=<path to login page> <host>*


And my results:

*Starting Nmap 6.49BETA3 ( https://nmap.org <https://nmap.org> ) at
2015-07-01 13:50 Eastern Daylight Time*

*Nmap scan report for <host> (<IP>)*

*Host is up (0.057s latency).*

*rDNS record for <IP>: <rDNS>*

*PORT    STATE SERVICE*

*443/tcp open  https*



*Nmap done: 1 IP address (1 host up) scanned in 34.78 seconds*


_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/



_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/

Current thread: