Nmap Development mailing list archives

NSE: http-avaya-ipoffice-users - User enumeration in Avaya IP Office systems

From: Paulino Calderon <paulino () calderonpale com>
Date: Sat, 11 Oct 2014 21:53:45 -0500

Hi list,

Today during a pen test engagement when looking at the network traffic, I found an URI that is exchanged after a 
session is established with an Avaya IP Office system that allows unauthenticated user enumeration. 

I googled the string and I couldn’t find any related information so I wrote a quick script to extract the entire 
directory. 

http-avaya-ipoffice-users: 
https://bitbucket.org/cldrn/nmap-nse-scripts/src/eb5f68e3d59148239e3c3a8384f1d734d20fca80/scripts/6.x/http-avaya-ipoffice-users.nse?at=master

Cheers.


_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/

Current thread:

NSE: http-avaya-ipoffice-users - User enumeration in Avaya IP Office systems Paulino Calderon (Oct 11)