Changeset 459

Timestamp:

06/19/2010 04:24:45 AM (3 years ago)

Author:

sullo

Message:

Bug fix & minor tweaks

File:

• trunk/plugins/nikto_core.plugin (modified) (7 diffs)

trunk/plugins/nikto_core.plugin

@@ -125 +125 @@
 
     # print errors to STDERR
-    if ($line =~ /^\+ ERROR\:/) { print STDERR "$line\n"; return; }
+    if ($line =~ /^\+ ERROR:/) { print STDERR "$line\n"; return; }
 
     # don't print to STDOUT if output file is "-"
     if ((defined $CLI{'file'}) && ($CLI{'file'} eq "-")) { return; }
 
-# print to scan details to standard output if the users wants another format and is saving results to a file
     $line =~ s/(CVE\-[12][0-9]{4}-[0-9]{4})/http:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name\=$1/g;
     $line =~ s/(CA\-[12][0-9]{3}-[0-9]{2})/http:\/\/www.cert.org\/advisories\/$1.html/g;
@@ -136 +135 @@
     $line =~
       s/(MS[0-9]{2}\-[0-9]{3})/http:\/\/www.microsoft.com\/technet\/security\/bulletin\/$1.asp/gi;
-    print "$line\n";
+
+    print $line ."\n";
 
     return;
@@ -195 +195 @@
             ($res, $content, $error) = nfetch($mark, "/", "GET", "", \%headers, "", "map_codes");
         }
-        else                                                    # different host... ugh... guess
+        else                                                    # different host... ugh... just guess
         {
             $FoF{'okay'}{'response'} = 200;
@@ -225 +225 @@
 
     # add those generic type holders back as real files
-    $REQS{'/$rs/'} = "DIRECTORY";
-    $REQS{'/$rs'}  = "NONE";
-    $REQS{'/.$rs'} = "DOTFILE";
+    $REQS{"/$rs/"} = "DIRECTORY";
+    $REQS{"/$rs"}  = "NONE";
+    $REQS{"/.$rs"} = "DOTFILE";
 
     foreach my $file (keys %REQS) {
@@ -913 +913 @@
 sub parse_hostfile {
     my ($file) = @_;
-    my $nmap = 0;
-    my (@results, $hostdesc);
+    my (@results, $hostdesc, $nmap);
+    $nmap = 0;
 
     open(IN, $file) || die print STDERR "+ ERROR: Cannot open '$file':$@\n";
@@ -929 +929 @@
 
         # Parse for nmap files
-        if ($nmap == 1) {
+        if ($nmap) {
 
             # First get the host name
@@ -960 +960 @@
 sub load_databases {
     my @dbs = qw/db_404_strings  db_outdated  db_realms  db_tests  db_variables db_content_search/;
-    my $prefix = $_[0];
-
-    unless (defined $prefix) {
-        $prefix = "";
-    }
+    my $prefix = $_[0] || "";
 
     # verify required files