Re: [NSELIB/NSE] Updates SMB/MSRPC scripts

[Fyodor <fyodor () insecure org>]

On Sat, Oct 04, 2008 at 09:38:18PM +0100, jah wrote:
> Host script results:
> |  MSRPC: List of domains:
> |  Domain: 2KSERV
> |   |_ SID: S-1-5-21-1960408961-1580436667-839522115
> |   |_ Users: Administrator, Guest, IUSR_2KSERV, IWAM_2KSERV, TsInternetUser
> |   |_ Creation time: 2008-09-29 11:55:30
> |   |_ Min password length: 0 characters
> |   |_ Max password age: 42 days
> |   |_ Min password age: 0 days
> |   |_ Password history length: 0 passwords
> |   |_ Lockout threshold: 0 login attempts
> |   |_ Lockout duration: 30 minutes
> |   |_ Lockout window: 30 minutes
> |   |_ Password properties:
> |     |_  Password complexity requirements do not exist
> |_    |_  Administrator account cannot be locked out

Nice!  Thanks for testing.  It is exciting to get a script like this!
It might be nice to make the output a bit more compact though.  For
example, instead of:

|   |_ Min password length: 0 characters
|   |_ Max password age: 42 days
|   |_ Min password age: 0 days
|   |_ Lockout threshold: 0 login attempts
|   |_ Lockout duration: 30 minutes
|   |_ Lockout window: 30 minutes

Maybe it could be two lines, such as:

|   |_ Password min-length: 0; min-age: 0 days; max-age: 42 days
|   |_ Account lockout threshold: 0 attempts; duration: 30 min; window: 30 min

Or maybe it could be even smarter and note that Account lockout is
disabled (I assume that is what a threshold of 0 means).

I don't want this to delay inclusion of the scripts or anything, but
it would still be nice to think of what can be done to reduce the
number of lines printed.  We need to be careful not to let Nmap output
get too bloated.

Cheers,
-F

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org