Re: [NSE] new scripts and libraries: svn

[Patrik Karlsson <patrik () cqure net>]

On 19 aug 2010, at 10.15, Patrick Donnelly wrote:

> On Thu, Aug 19, 2010 at 1:17 AM, Patrik Karlsson <patrik () cqure net> wrote:
> > On 19 aug 2010, at 00.07, David Fifield wrote:
> >
> > > On Wed, Aug 18, 2010 at 10:51:33PM +0200, Patrik Karlsson wrote:
> > > > Thanks for the thorough test, I should have done a better initial test, sorry for that.
> > > > Btw, is there a way to discover the repositories a specific service has by using the svn command?
> > > > If not, we could write a brute script for that to I guess.
> > >
> > > Do you mean
> > >
> > > $ svn help ls
> > > list (ls): List directory entries in the repository.
> > > usage: list [TARGET[@REV]...]
> > >
> > >  List each TARGET file and the contents of each TARGET directory as
> > >  they exist in the repository.  If TARGET is a working copy path, the
> > >  corresponding repository URL will be used. If specified, REV determines
> > >  in which revision the target is first looked up.
> > >
> > > David Fifield
> >
> >
> > When I do:
> > svn ls svn://1.2.3.4/
> >
> > I get:
> > svn: No repository found in 'svn://1.2.3.4'
> >
> > I need to add /svnrepos at the end:
> > svn ls svn://1.2.3.4/svnrepos/
> >
> > So, is there a way to determine the name of the repository?
>
> Maybe there is. Perhaps this script should use the results of HTML
> spidering to find repositories mentioned on the target's website. (Yes
> I realize this has not been committed/finished yet...)
>
> -- 
> - Patrick Donnelly


That's one alternative. If the service can't be queried we could also supply a list of common paths such as: /svn 
/svnrepos, (you guys probably have a better clue here).
Guessing a bunch of them would be quite fast.

//Patrik
--
Patrik Karlsson
http://www.cqure.net
http://www.twitter.com/nevdull77





_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/