Re: smbv2-dos.nse

[Lane Christiansen <lanec42 () gmail com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

To: nmap-dev
At: Sat Sep 12 16:23:32 CDT 2009

I like it. Here's a dragon.

                             _        _
                         _.-'/   _.:'`/
                      ,'`   ( ,:;.-'`(
                    .'      .:'`      \
                   /       //    _.-';)
                 _/      _//_.-;:-'``/
          //|    \      \  .-'`      \                                 ,
         || /_,-,_|      | `""--..__  \                  .-'```'-.     )\
    _.--'_  '-;_/_)_     |(``""'---.;"/-,.-.  _         /  .---.  \  .'  \
   /6    ^`     ':_/     | "-._    .-'../__ )' ',.-. _ |  /     \  ;/_  _/
  (`-----`--'.    \_)    ;|`"-.;-./        `""--;.__) ',-.      (| |  ||
 __)         {\   |_/\   \\    _.'                  `"-;_ )'-,_(`/ ;_.'/
  /         {=|   |)  \.-"\\  /                          `'-.;_:'  /_.'
            {=|    \_.'    )) '        /                          /
            {=|     ,                 |      ,                _.-'
             {=;     `""--.            \    '.       __,.---'`
              {=\          `\           '._   '._.-"`
   jgs  _,.--"`;{\ '-.._    /        __,..-'-._ '.
       (((/==)/ _`;.--'"` .'--""""```  .--"```    )
        ```  ' (((/====```            ((((/======'
                ```                    ```
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkqsEVQACgkQv5kzl5yG7jc6QQCbBDhypYdx70sjhOUGz9vKkbOB
dv0An3yky7h8I+lS/CcpElerLU9IysHV
=vG0y
-----END PGP SIGNATURE-----


On Sat, Sep 12, 2009 at 4:19 PM,  <bensonk () acm wwu edu> wrote:
> Perhaps an ascii art dragon and a stern warning should go somewhere
> warning the user that nmap is a very powerful tool and that it should be
> used with caution? :-)
>
> Benson
>
> On Sat, Sep 12, 2009 at 11:37:27AM -0500, Kris Katterjohn wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > On 09/12/2009 11:22 AM, Ron wrote:
> > > Hey Kris
> > >
> > > I totally see what you mean, and I do agree.
> > >
> > > That being said, I do worry about people accidentally crashing stuff
> > > using my script. I know the first thing I did was run --script=all
> > > against a test server when I discovered that scripting exists, and
> > > that's fine (crashing test servers is fun :) ). But not everybody is
> > > that smart.
> >
> > I guess it's just the fact that we haven't had a dos or exploit script in the
> > (I think) 3 years that NSE has been part of Nmap proper.  If we had some
> > (especially in the beginning) then there might be more awareness to the
> > potential dangers of using "all".  Or maybe not, I don't know :)
> >
> > > When it comes down to it, I can go either way on the issue.
> > >
> > > Ron
> >
> > Cheers,
> > Kris Katterjohn
> >
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.4.10 (GNU/Linux)
> > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> >
> > iQIcBAEBAgAGBQJKq85GAAoJEEQxgFs5kUfuC4gQAK6EpLIbLuY1ygD3277AlQh4
> > MH/gOK3VBjvnNjO6LLNyVv9o93eHhde4JKN+vKsQPBK/1xaedPK8fDnLByH2wlWS
> > bzRPywkqfNQMG3wyrCCmXHZ+xqn42UnO9Et5Rzb6LbkvwgxftciBTdw4nJlKsxB7
> > d/co91/pNb7KNdKiIUfeH793wBZxwwsDvFBofHTu/poOtfArw+qsCa3jnkgNsbdj
> > WlsaLqSNKFtKrMJnc0AKDOvBCbvYDh2h3dq0nuOmzciZw4suUEtUDqxSXHilKh89
> > P4MTpoydVekjoebIvSqWh6fFcWqXccOglmmjlo+K9PYW8YQc18zOyLWA+KuIeM2W
> > PYl18WiuVCWgWT3F0yNn0JRvJlBNGrg8v3mlVyixwYqTmZchyCaAFfHdwq/8b6Aq
> > RAS6OI3LVy+EyXu3JQYfP6BW5hxpzR265ja0vopYX5CIM+4FdFGHTSOAh+nQIwWf
> > UdORVs8lpDtMaZiszeJA9h3gM78JuUYe38LztERZ3fwi1O/JW0mctP/nvxsbJ8nU
> > woxMGLy45K70ZQDNrZnBkEGUgrBA+QTlEm/LaG27YKUXissWvIHRWG0Ob5jfrFQW
> > QJx593k7KFCyRdOzzcW+Cw0nS7w1nCMENeW6kiXN1wvj8MJSbCgYyAENqlvaango
> > btsC4Ji67SvrlcesutXS
> > =hjWQ
> > -----END PGP SIGNATURE-----
> >
> > _______________________________________________
> > Sent through the nmap-dev mailing list
> > http://cgi.insecure.org/mailman/listinfo/nmap-dev
> > Archived at http://SecLists.Org
>
>
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://SecLists.Org

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org