Re: [nmap-svn] r23421 - nmap/scripts

[David Fifield <david () bamsoftware com>]

On Sat, May 28, 2011 at 10:55:44AM -0700, commit-mailer () insecure org wrote:
> Author: gorjan
> Date: Sat May 28 10:55:44 2011
> New Revision: 23421
>
> Log:
> Separator "," in backorifice-brute.nse instead of ";"
>
> Modified:
>    nmap/scripts/backorifice-brute.nse
>
> Modified: nmap/scripts/backorifice-brute.nse
> ==============================================================================
> --- nmap/scripts/backorifice-brute.nse        (original)
> +++ nmap/scripts/backorifice-brute.nse        Sat May 28 10:55:44 2011
> @@ -8,7 +8,7 @@
>  -- @usage
>  -- nmap -sU --script backorifice-brute <host> --script-args backorifice-brute.ports=<ports>
>  --
> --- @arg backorifice-brute.ports (mandatory) List of UDP ports to run the script against separated with ";" ex. 
> "U:31337;25252;151-222", "U:1024-1512"
> +-- @arg backorifice-brute.ports (mandatory) List of UDP ports to run the script against separated with "," ex. 
> "U:31337,25252,151-222", "U:1024-1512"
>  --
>  -- This script uses the brute library to perform password guessing. A 
>  -- successful password guess is stored in the nmap registry, under the 
> @@ -53,7 +53,7 @@
>               return false
>       end
>       
> -     return port.protocol == "udp" and stdnse.in_port_range(port, ports:gsub(";",",") ) and
> +     return port.protocol == "udp" and stdnse.in_port_range(port, ports:gsub(",",",") ) and
>               not(shortport.port_is_excluded(port.number,port.protocol))

I thought this used ';' to avoid a conflict with a comma, which is used
to separate script args. If I try

--script-args backorifice-brute.ports=U:1024,31337

then nmap.registry.args["backorifice-brute"] contains only "U:1024".

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/