Fyodor wrote:
> On Sun, Dec 09, 2007 at 03:31:19PM +0000, jah wrote:
>
>> David Fifield wrote:
>>
>>> On Fri, Dec 07, 2007 at 09:51:40PM +0000, jah wrote:
>>>
>>>
>> The only other question remaining is that given that nmap will use
>> scripts from it's default script dir in addition to scripts at any
>> supplied paths, should it fail to do any script scanning if the supplied
>> path is in some way incorrect? Or should it indeed not even use it's
>> default scripts if alternative ones are supplied?
>>
>
> If you specify a directory explicitly, I think Nmap should only use
> scripts from that directory. And that what happened when I just
> tested with RC6 on Linux and Windows. Are you sure Nmap is running
> scripts from the default scripts dir when you pass a custom --script
> directory? Can you give us the details to reproduce this?
>
I wasn't very clear when I said default scripts, I meant those from the
version category.
A scan such as the following against a windows machine will (assuming
portrules true) run netbios-smb-os-discovery.nse:
nmap 192.168.1.1 -sSV -p139,445 -n -PN -d --script-trace --script
myscripts
...
SCRIPT ENGINE: Will run C:\Program
Files\Nmap\scripts\netbios-smb-os-discovery.nse against 192.168.1.1
...
Host script results:
|_ Discover OS Version over NetBIOS and SMB: Windows XP
but specifiying, incorrectly, a script or dir will cause script scanning
to abort
nmap 192.168.1.1 -sSV -p139,445 -n -PN -d --script-trace --script
garbage
...
SCRIPT ENGINE: No such category, file or directory: 'garbage'
SCRIPT ENGINE: Script scanning completed.
SCRIPT ENGINE: Aborting script scan.
...
I wondered if this was a fault because I'm of the opinion that the
garbage shouldn't cause the abortion.
jah
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org
Received on Dec 09 2007