Re: NSE: http.identify_404 follows redirects

[Tom Sellers <nmap () fadedcode net>]

Hi Johanna,

  The changes have been committed.  There were a few scripts listed in my original email that were not changed either 
due to
their login or, in one case, due to the script no longer existing.  Git PR 251 shows the changes made can be found here:

https://github.com/nmap/nmap/pull/251

If you update from SVN you will have the updated code in addition to a few other semi related NSE script changes that 
fix
a few false positives.



Tom



On 12/4/2015 10:17 AM, Johanna Curiel wrote:
> Hi Tom
>
> If you commit this change if no one objects, I would like to test it and feedback my results to you
>
> Also you can make available the scripts you changed  and I can feedback my results
>
>
> regards
>
> Johanna
>
> On Thu, Dec 3, 2015 at 8:56 AM, Tom Sellers <nmap () fadedcode net <mailto:nmap () fadedcode net>> wrote:
>
>     The change did not appear to be disruptive in my tests. Unless someone objects I will commit the update to 
> http.lua and as well as updates to the related scripts to standardize the call to
>     identify_404.
>
>     Tom
>
>
>     On 11/30/2015 7:46 PM, Tom Sellers wrote:
>     > All,
>     >
>     >   I was going to open a git issue on this, but I decided to toss it at the list for discussion.
>     >
>     > References:
>     >   https://nmap.org/nsedoc/lib/http.html#identify_404
>     >   https://svn.nmap.org/nmap/nselib/http.lua
>     >
>     > http.identify_404 is a function that can be used to determine how an HTTP server responds to unknown pages. It 
> can be used, for example, to detect when an HTTP server responds 200 OK to everything
>     > which can break a script if it is merely checking the status code when requesting something like  
> /MyAppsSpecialPage.


<snip>
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/