Re: Updates to http-enum.nse

[Ron <ron () skullsecurity net>]

On 08/22/2009 01:47 AM, Fyodor wrote:
> Sounds reasonable.  If there are cases where we want to show other
> status codes, perhaps the signature line format could be modified to
> permit that.
Sounds good. For now, I'm not going to worry about it, I'll just do the 
200 and stick with the current database format.

I was thinking, besides Nikto, there's a project by OWASP whose name 
totally escapes me, that's designed for finding hidden directories. Even 
their smallest list of common directories is insanely huge. Once I 
figure out what the project was called (somebody want to help me out?) 
I'll add support for parsing their format, as well. We can end up with a 
few different database formats in the end, let people use whatever they 
want.

> That sounds fine to me.  It sounds like you've already tested it quite
> a bit.  The Yokoso file is now fine from a copyright perspective
> (subject to ther permissions text being added).  However, it sounds
> like some of the improvements we've discussed may be warranted before
> inclusion of that part.
All right, I'll do that. I've already made the improvements we talked 
about (the benefits of Friday-night plans being canceled at the last 
minute :) ), but I'm trying to chase down a hard-to-find assertion 
failure in Nsock right now. I'll post that as soon as I can reproduce it 
with a debugger attached. :)

> Cheers,
> -F

Ron

--
Ron Bowes
http://www.skullsecurity.org/

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org