Index: http-brute.nse =================================================================== --- http-brute.nse (revision 22692) +++ http-brute.nse (working copy) @@ -73,7 +73,7 @@ -- but gave me a number of false positives last time I tried. -- After Davids initial review we decided to change it to not 4xx and -- not 5xx. That would roughly equal the following: - if ( response.status < 400 or response.status > 599 ) then + if ( response.status < 400 or response.status > 599 or response.status == 500 ) then if ( not( nmap.registry['credentials'] ) ) then nmap.registry['credentials'] = {} end