Changeset 312

Timestamp:

02/04/2010 02:30:58 PM (3 years ago)

Author:

sullo

Message:

Warn if RFIURL is undefined

Location:

trunk

Files:

• docs/CHANGES.txt (modified) (1 diff)
• plugins/nikto_core.plugin (modified) (3 diffs)

trunk/docs/CHANGES.txt

@@ -1 +1 @@
 2010-02-04
         - Match plugin names case-insensitive
+        - Warn if RFIURL is undefined
 2010-01-20 Nikto 2.1.1
         - Ticket 117: Fixed SKIPPORTS

trunk/plugins/nikto_core.plugin

@@ -680 +680 @@
         $VARIABLES{'@RFIURL'} = $NIKTOCONFIG{'RFIURL'};
         }
+ else {
+        nprint("- ***** RFIURL is not defined in nikto.conf, which means no RFI tests will run *****"); 
+        }
  
  # SSL Test
- if (!LW2::ssl_is_available()) { nprint("- ***** SSL support not available (see docs for SSL install instructions) *****"); }
+ if (!LW2::ssl_is_available()) { 
+        nprint("- ***** SSL support not available (see docs for SSL install instructions) *****"); 
+        }
  
  # Notices
@@ -716 +721 @@
    if ($ident =~ /[^0-9\.]/)   # not an IP, assume name
    {
-      if ($CLI{'skiplookup'})
-      {
-         nprint("+ ERROR: -skiplookup set, but given name\n");
-         exit;
-      }
+      if ($CLI{'skiplookup'}) {
+        print("+ ERROR: -skiplookup set, but given name\n");
+        exit;
+        }
       $ip=gethostbyname($ident);
       if (($ip eq "") && ($request{'whisker'}->{'proxy_host'} ne ""))    # can't resolve name to IP, but using proxy
@@ -753 +757 @@
 
       $ip=$ident;
-      if (!$CLI{'skiplookup'}) 
-      {
-         use IO::Socket;
-         my $temp_ip=inet_aton($ip);
-         $name=gethostbyaddr($temp_ip,AF_INET); 
-         # check reverse dns to avoid an inet_aton error
-         my $rdnsip=gethostbyname($name);
-         if ($rdnsip ne "")
-         {
-            $rdnsip=inet_ntoa($rdnsip);
-            if ($ip ne $rdnsip) { $name=$ip; }  # Reverse DNS does not match
-         }
-         else { $name = $ip; }  # Reverse DNS does not exist
+      if (!$CLI{'skiplookup'}) {
+        use IO::Socket;
+        my $temp_ip=inet_aton($ip);
+        $name=gethostbyaddr($temp_ip,AF_INET); 
+        # check reverse dns to avoid an inet_aton error
+        my $rdnsip=gethostbyname($name);
+        if ($rdnsip ne "") {
+                $rdnsip=inet_ntoa($rdnsip);
+                if ($ip ne $rdnsip) { $name=$ip; }  # Reverse DNS does not match
+                }
+        else { $name = $ip; }  # Reverse DNS does not exist
       }
       if ($name eq "") { $name=$ip; }