Re: [NSE][patch] Load script-args from a file

[Daniel Miller <bonsaiviking () gmail com>]

Fyodor,

I agree that a separate option would probably be better. My main reason for
choosing the file= syntax was that it made for a very simple, Lua-only,
11-line patch.

Pros:

   - already written
   - simple

Cons:

   - I imagine it would be hard to describe in one line for the short-form
   nmap doc output.
   - inconsistent with other option formats

I, too, would be interested in how many others would use this. I think
admins would like to use it to keep passwords off the command line on
long-running scans, especially the ever-useful smb scripts (psexec, etc).

Dan

On Sat, Jun 18, 2011 at 4:42 PM, Fyodor <fyodor () insecure org> wrote:

> Thanks Dan.  That does sound like it might be useful.  It would be
> interesting to hear other people's take on this (e.g. who here is
> likely to use this)?  From a UI perspective, I think it would be
> better to add a separate Nmap option (e.g. --script-args-file) rather
> than to make the "file" script argument name be magic.  That would be
> consistent with the way we offer both --exclude and --excludefile
> rather than providing a syntax to --exclude that causes it to load a
> file.
>
> Cheers,
> Fyodor
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/