Nmap Development mailing list archives

Re: [NSE] http-form-brute enhancement


From: Daniel Miller <bonsaiviking () gmail com>
Date: Mon, 13 Oct 2014 12:35:10 -0500

On Mon, Oct 13, 2014 at 11:57 AM, <nnposter () users sourceforge net> wrote:

nnposter wrote:
* The new version has a direct dependency on url.build_query()
performing URL encoding of parameter names and values. It only impacts
GET-based forms. (See http://seclists.org/nmap-dev/2014/q3/427 for
details.)

Daniel Miller wrote:
I committed this (with an minor update for compatibility with a change I
made last night) in r33703.

I have noticed that my patch for http-form-brute got committed without
the above-mentioned dependency. Please let me know if there are any
issues with my proposal (for letting url.parse_query() and
url.build_query() perform automatic URL encoding/decoding).


nnposter,

Thanks for bringing this up! I thought I had committed that, too. I'll look
into it and get it done this afternoon.

Dan
_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/


Current thread: