Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Nmap Development: Re: updated SMTPcommands script

Re: updated SMTPcommands script

From: Kris Katterjohn <katterjohn_at_gmail.com>
Date: Sat, 13 Oct 2007 07:34:23 -0500

On 10/12/07, DePriest, Jason R. <jrdepriest_at_gmail.com> wrote:
>
> I made some minor changes to SMTPcommands.nse (attached).
>
> In addition to querying the mail server with EHLO, it now also queries
> with HELP because the two commands give similar but different results.
>

Cool :)

I have a question, and I hope it doesn't come across as demeaning:

-- ASCII for "HELP\n"
-- for some reason it wouldn't reply unless I did it like this
local query = "\072\069\076\080\013\010"

Did you send "HELP\n" or "HELP\r\n" when you tested this (and it didn't
reply). It looks like you have \r\n in what you send, but you're saying
it's for \n .. or you just forgot the \r in the comment.

Above those lines in another comment (for 250 OK), it appears you're saying
you have to do it in "\0xx" form to get the \r\n, but is that accurate?
Other scripts use \r\n in strings to get that.

Not that using the \0xx form is bad or anything, but I'm just wondering if
it's really a problem or if I'm confused.

But good job with that script ;)

Thanks,
Kris Katterjohn

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org
Received on Oct 13 2007

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]