Hi all,
I`ve created small NSE script for testing SQL Injection. It need send correct Host headers in http-requests ( the same hostname like in targets list [which is parsed from google]), but I have no idea how to do it. I tried use host.name, but it`s in almost cases different from scanned hostname.
Is there any chance, how to get it? (If site return HTTP 302 to me, I can get it from Location header, but it is not good solution ;]]
example:
nmap www.nmap.org -> host.ip = '205.217.153.53' and host.name = 'www.insecure.org'
Thus, is in NSE some function to get www.nmap.org? not www.insecure.org ...
Thanks for your help and sorry for my very bad english ;]
Mike
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org
Received on Jun 04 2007