Re: nmap http auth update

[David Fifield <david () bamsoftware com>]

On Wed, Jan 21, 2009 at 08:28:39PM -0500, Vishal Nandwani wrote:
> Thank you for your suggestions to improve the script before it gets
> included.  I apologize for such a late reply, but we are just a group of
> students who stay busy on a constant basis.  We just returned to class from
> winter break and would like to get things rolling again.
>
> In your last reply, you informed me on r10954 from 2008-11-07 as the latest
> build for nmap.  At this point in time, is there anything later we should
> modify the script or should this be the build we work with?

It's good to hear from you again. I was just wondering about progress on
this script. r10954 is still the latest version of http-auth.nse. I
found that out by running

        svn log scripts/http-auth.nse

There were only some very small changes to make to the script. They
were:
        1. Reapply your changes to r10954,
        2. Leave out new user name and passwords, and
        3. Give an explanation for the cnonce variable, or generate it
           randomly.

Let me know if you have any other questions.

David Fifield

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org