Re: [NSE] password guessers for vulnerability scanners and exploitation frameworks

[Vlatko Kosturjak <kost () linux hr>]

On Thu, Nov 10, 2011 at 08:23:34AM +0100, Patrik Karlsson wrote:
> Thanks Kost!
>
> I'll check your scripts out later today!
> In regards to Nessus NTP I believe I was seeing that the account could not
> be reliably detected in case the dictionary was big and the brute ran with
> multiple threads for a while. I'll see if I can find that out for you and
> let you know.

Great and Thanks! 

I would like to investigate that behaviour since I did not experience it
with the Perl script and NSE. 

BTW Since you're the NSE master ;) is there any way to force https directly 
from the script when using http.post? That would mitigate the current problem
I mentioned, but not sure if that's the long term solution for this or for 
any other script. 

Thanks!
-- 
Vlatko Kosturjak - KoSt
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/