Nmap Development mailing list archives
Re: New script - http-git.nse
From: David Fifield <david () bamsoftware com>
Date: Thu, 19 Jul 2012 11:20:03 -0700
On Wed, Jun 27, 2012 at 11:15:32PM -0500, Alex Weber wrote:
Hello, I finished the http-git script from the Script Ideas wiki page. It looks for a Git repository in a webserver's root and tries to get as much information about it as possible. Here is two examples of output: PORT STATE SERVICE 80/tcp open http | http-git:· | Potential Git repository found in web root (found 5 of 6 expected files) | Contents of '.git/COMMIT_EDITMSG' matched patterns 'passw' (case-insensitive) | Last commit message: Brought the github repo up-to-date with my private subversio... | Repository description: Unnamed repository; edit this file 'description' to name the... |_ GitHub remote: skullspace/breachdb (accessed over SSH) PORT STATE SERVICE 80/tcp open http | http-git:· | Git repository found in web root | Last commit message: This is my last commit... | Repository description: Unnamed repository; edit this file 'description' to name the... | GitHub remote: AlexWebr/nse (accessed over SSH) | BitBucket remote: AlexWebr/nse (accessed over HTTP, pull-only) |_ Based on the file '.gitignore', this is a Ruby on Rails application
Great job on this script. I think it's going to be well appreciated. I committed it in r29273. If you would, there are some small additional changes I'd like you to make. As Daniel suggested, please add an http-git.path script argument to control the root of the HTTP GETs.
| GitHub remote: AlexWebr/nse (accessed over SSH) | BitBucket remote: AlexWebr/nse (accessed over HTTP, pull-only)
I think everybody would prefer to see URLs that can be copied and pasted to git here. Looking for strings like "github.com" and replacing them with "GitHub remote" makes the output less useful. I would just print the remote URLs verbatim from the config file. You can send future changes as patches to the mailing list, or as a pointer to wherever you have the script in github (as long as the github has merged any nmap.org changes). David Fifield _______________________________________________ Sent through the nmap-dev mailing list http://cgi.insecure.org/mailman/listinfo/nmap-dev Archived at http://seclists.org/nmap-dev/
Current thread:
- Re: New script - http-git.nse Ron (Jul 16)
- Re: New script - http-git.nse Daniel Miller (Jul 16)
- <Possible follow-ups>
- Re: New script - http-git.nse David Fifield (Jul 19)
- Re: New script - http-git.nse Alex Weber (Jul 19)
- Re: New script - http-git.nse David Fifield (Jul 20)
- Re: New script - http-git.nse Alex Weber (Jul 25)
- Re: New script - http-git.nse David Fifield (Jul 25)
- Re: New script - http-git.nse Alex Weber (Jul 19)