Nmap Development mailing list archives

[NSE] membase-http-info - detection changes, name change question


From: Tom Sellers <nmap () fadedcode net>
Date: Wed, 04 Jul 2012 11:17:57 -0500

The Membase NoSQL server project has merged with CouchOne and is now called Couchbase [1].  The Membase and CouchDB 
projects are also called CouchBase [2].

As a result some of the service's header strings have changed.  Fortunately, the existing membase-http-info script 
works against the updated target software if the
detection logic on line 89 is updated to include the new server header (Couchbase Server).

I have verified that this works correctly when scanning Membase 1.7.1.1, Couchbase 1.8.0r-55-g80f24f2-community and 
Couchbase 1.8.1-937-rel-enterprise.

The change was implemented in commit #29123.

I have also added version detection match lines for both products in commit #29121.


At this point, both membase-* scripts ( membase-http-info and membase-brute ) are verified to work against Membase and 
the new Couchbase software.
In light of the Membase project changes, should the membase-* scripts be renamed to couchbase-* ?


Thanks much,

Tom Sellers

1. http://blog.couchbase.com/couchone-membase-couchbase
2. http://blog.couchbase.com/membase-server-now-couchbase-server
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/


Current thread: