Home page logo

nmap-dev logo Nmap Development mailing list archives

Re: [NSE Script] MySQL Server Information
From: Kris Katterjohn <katterjohn () gmail com>
Date: Tue, 18 Dec 2007 17:30:51 -0600

Thomas Buchanan wrote:
First off, sorry to be so late joining this thread.  I've been wanting 
to contribute, but I'm swamped right now, and just haven't been able to 
find time.

As far as I know, patterns in Lua are case-sensitive, although I can't 
find any specific online references that supports that statement. Here's 
a quick test from a command-line Lua interpreter:

Lua 5.1.2  Copyright (C) 1994-2007 Lua.org, PUC-Rio
 > a = "a"
 > m = string.match(a, "a")
 > print(m)
 > m = string.match(a, "A")
 > print(m)

That's good enough for me ;) Thanks

I hope people find it useful.  I'll look into adding other things, 
like attempting logins, etc.

This was really the main reason I wanted to jump in.  About 3 weeks ago, 
I started working on a MySQL script myself.  Unfortunately, things got 
very busy, and I haven't had time to make significant progress on it. 
However, I was able to successfully login to MySQL servers using the 
extended login capabilities introduced in 4.1.  To login with a password 
requires the ability to create SHA1 hashes of the password and the salt 
received from the server, which was my motivation for the NSE/OpenSSL 
patches I posted to the list recently: 

I'm really busy through the end of the year, but I'd love to be able to 
help with this effort.  I can post the very rough code that I have 
cobbled together for you guys to look at, or I can try to integrate my 
login code into Kris's script once I have time.


It'd be great if you'd post up your code for jah and I to play with.



Kris Katterjohn

Sent through the nmap-dev mailing list
Archived at http://SecLists.Org

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]