Gyani's Status Report - #5 of 17

[Gyanendra Mishra <anomaly.the () gmail com>]

Hi list,

If you have the time and an instance of WebDAV running do try out
http-webdav-*. You can find them here[1] and here[2]. I would love to shift
the sticky note from the `doing` to the `done` section :P. The NTLM update
in http.lua is very initial, untested and possibly broken, I'll try setting
up a box to do testing any help would be appreciated. :)

Accomplishments :
 * http-webdav-* really looks good now.
 * Added probes to http-methods[3].
 * Added clientaccesspolicy.xml checks to http-crossdomainxml[4].
 * Started work on integrating SLAXML(sax parser written in lua with dom
capabilities) with NSE[5].
 * Modified http-crossdomainxml to work with SLAXML.[6]
 * Started work on adding native NTLM authentication support to http.lua.
[7]

Priorities :
 * Test http-webdav-* on more servers.
 * SLAXML integration.
 * NTLM support.

Gyani

[1]https://svn.nmap.org/nmap-exp/gyani/scripts/http-webdav-scan.nse
[2]https://svn.nmap.org/nmap-exp/gyani/scripts/http-webdav-perms.nse
[3]https://svn.nmap.org/nmap-exp/gyani/scripts/http-methods.nse
[4]https://svn.nmap.org/nmap-exp/gyani/scripts/http-crossdomainxml.nse
[5]https://svn.nmap.org/nmap-exp/gyani/nselib/slaxml.lua
[6]
https://svn.nmap.org/nmap-exp/gyani/scripts/http-crossdomainxml-slaxml.nse
[7]https://svn.nmap.org/nmap-exp/gyani/nselib/http.lua

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/