Re: [nmap-svn] r30412 - nmap/scripts

[Henri Doreau <henri.doreau () gmail com>]

2012/12/16  <commit-mailer () nmap org>:
> Author: batrick
> Date: Sat Dec 15 16:18:13 2012
> New Revision: 30412
>
> Log:
> This script never ends and seeks to crash the web server... why was this categorized as safe??
>
>
> Modified:
>    nmap/scripts/http-slowloris-check.nse
If I'm not mistaken this was on purpose. This script, unlike its
http-slowloris.nse sibling, doesn't crash the webserver and does end
eventually. The check isn't done by exploiting the vuln.

Regards

-- 
Henri
_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/