Hani's status report - #7 of 17

[Hani Benhabiles <kroosec () gmail com>]

Hi list,

Achievements:
- Finished firewall-bypass with FTP helper support. This is a script 
that exploits a vulnerability in netfilter and other firewalls that use 
helpers.
More information here: 
https://home.regit.org/2012/06/opensvp-a-new-tool-to-analyse-the-security-of-firewalls-using-algs/

- Written http-waf-fingerprints. This is a script that tries to detect a 
Web Application Firewall and its type and version.

Priorities:
- Adding SIP and FTP over IPv6 helpers support to firewall-bypass.
- Checking some scripts ideas for SAP and see what would be interesting 
to add to Nmap.
- Checking / Working on other ideas from scripts ideas wiki page.

Cheers,
Hani.

--
Hani Benhabiles

Twitter: https://twitter.com/#!/kroosec
Blog: http://kroosec.blogspot.com

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/