Nmap Development mailing list archives
GitHub PR 2209
From: Joshua Rogers <joshua.earl.rogers () gmail com>
Date: Thu, 17 Dec 2020 11:48:52 +1030
Hi, Submitted PR 2209 to modify the http-iis-short-name-brute.nse script to use OPTIONS method: Current version of http-iis-short-name-brute.nse only uses GET requests. As per https://soroush.secproject.com/blog/2014/08/iis-short-file-name-disclosure-is-back-is-your-server-vulnerable/, the OPTIONS method can also be used. I have updated the script to additionally use the OPTIONS method. Thanks, Josh
_______________________________________________ Sent through the dev mailing list https://nmap.org/mailman/listinfo/dev Archived at http://seclists.org/nmap-dev/
Current thread:
- GitHub PR 2209 Joshua Rogers (Jan 03)