Nmap Development mailing list archives

Re: [NSE] small improvement to ftp-anon


From: Gutek <ange.gutek () gmail com>
Date: Tue, 17 Aug 2010 23:59:43 +0200

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Le 17/08/2010 02:34, David Fifield a écrit :
This looks pretty good and it works for me. I would like you to make
some changes, though. First, the file listing should be controlled by a
script argument, not verbosity() >= 2. I think I would just make it the
default. There needs to be a limit on the number of lines that it will
retrieve, like nfs-ls. And the code that gets the file listing should be
a separate function, expecially seeing as it creates a new socket and
everything.

David Fifield


Please find attached the new script accordingly.
It now requires --script-args dirlist=<nbr of lines returned> and in the
case of a typo (for example a string instead of a number) the default
output will be 4 lines long.
I've choosen 4 lines because often the listing starts with either/both
.(current) and ..(parent), so we have at least 2 directories names to
get an idea of what kind of ftp server we are facing (mail service,
webcams, other devices...)

Anyway, if the dir listing was truncated it also prints
|_(x more entries)

I've also added the missing @args and @usage blocks accordingly.

A.G.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.12 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/

iEYEARECAAYFAkxrBk8ACgkQ3aDTTO0ha7jwOgCeLJKZgWs0sNQRARFo3b0XWJOE
g/MAoIJEmWrPRpa4lrpMNIzS2u9Yw5CN
=8685
-----END PGP SIGNATURE-----

Attachment: ftp-anon.nse
Description:

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/

Current thread: