Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos

Nmap Development: Re: [Bug]? Script Directories 4.23RC3 on MSWin32

Re: [Bug]? Script Directories 4.23RC3 on MSWin32

From: jah <jah_at_zadkiel.plus.com>
Date: Sun, 09 Dec 2007 22:25:35 +0000

Fyodor wrote:
> On Sun, Dec 09, 2007 at 03:31:19PM +0000, jah wrote:
>
>> David Fifield wrote:
>>
>>> On Fri, Dec 07, 2007 at 09:51:40PM +0000, jah wrote:
>>>
>>>
>> The only other question remaining is that given that nmap will use
>> scripts from it's default script dir in addition to scripts at any
>> supplied paths, should it fail to do any script scanning if the supplied
>> path is in some way incorrect? Or should it indeed not even use it's
>> default scripts if alternative ones are supplied?
>>
>
> If you specify a directory explicitly, I think Nmap should only use
> scripts from that directory. And that what happened when I just
> tested with RC6 on Linux and Windows. Are you sure Nmap is running
> scripts from the default scripts dir when you pass a custom --script
> directory? Can you give us the details to reproduce this?
>
I wasn't very clear when I said default scripts, I meant those from the
version category.
A scan such as the following against a windows machine will (assuming
portrules true) run netbios-smb-os-discovery.nse:

    nmap 192.168.1.1 -sSV -p139,445 -n -PN -d --script-trace --script
    myscripts
    ...
    SCRIPT ENGINE: Will run C:\Program
    Files\Nmap\scripts\netbios-smb-os-discovery.nse against 192.168.1.1
    ...
    Host script results:
    |_ Discover OS Version over NetBIOS and SMB: Windows XP

but specifiying, incorrectly, a script or dir will cause script scanning
to abort

    nmap 192.168.1.1 -sSV -p139,445 -n -PN -d --script-trace --script
    garbage
    ...
    SCRIPT ENGINE: No such category, file or directory: 'garbage'
    SCRIPT ENGINE: Script scanning completed.
    SCRIPT ENGINE: Aborting script scan.
    ...

I wondered if this was a fault because I'm of the opinion that the
garbage shouldn't cause the abortion.

jah

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org
Received on Dec 09 2007

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]