Re: Ncrack discussion

[Lionel Cons <lionel.cons () cern ch>]

ithilgore <ithilgore.ryu.l () gmail com> writes:
> Fyodor also suggested a url-like scheme like this:
> Ex3: $ ncrack ssh://scanme.nmap.org:22, ftp://foo.bar.org:3000, bar.acme.org:21,
> ftp://scanme.nmap.org

This has the added benefit of being able to specify a user name and a
password with the same syntax:

$ ncrack ssh://root:qwerty () scanme nmap org:22

You could also specify a path, for instance when scanning a single web
server that may have different pages offering authentication:

$ ncrack http://joe:bar () scanme nmap org:80/login.php https://root:qwerty () scanme nmap org:443/admin/login.php

And it is standard (RFC 3986) compliant...

Cheers,

Lionel

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org