Nmap Development mailing list archives

Re: PR: 1202 new nmap detect script - NagiosXI


From: George Chatzisofroniou <sophron () latthi com>
Date: Mon, 7 May 2018 10:41:28 +0300

Hi Cale,

On Thu, Apr 26, 2018 at 11:03 PM, Cale Smith <cale () redactedsec net> wrote:
Hello nmap developers!
This pull request includes a new detection scripts for vulnerable and
un-patched versions of the monitoring product NagiosXI.

Personally, I would prefer our exploit scripts to look for RCE by
actually trying to exploit the remote target instead of simply
checking the version of the installed software.

I believe your code currently fits better as a new entry in
http-fingerprints file.

George
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/


Current thread: