Nmap Development mailing list archives

GitHub PR 2209


From: Joshua Rogers <joshua.earl.rogers () gmail com>
Date: Thu, 17 Dec 2020 11:48:52 +1030

Hi,

Submitted PR 2209 to modify the http-iis-short-name-brute.nse script to use
OPTIONS method:

Current version of http-iis-short-name-brute.nse only uses GET requests. As
per
https://soroush.secproject.com/blog/2014/08/iis-short-file-name-disclosure-is-back-is-your-server-vulnerable/,
the OPTIONS method can also be used. I have updated the script to
additionally use the OPTIONS method.

Thanks,
Josh
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/

Current thread: