Changeset 81

Timestamp:

09/24/2008 05:36:14 PM (5 years ago)

Author:

deity

Message:

Allow credentials to be passed on the command line and Ampache tests

Location:

trunk

Files:

• docs/CHANGES.txt (modified) (1 diff)
• plugins/db_tests (modified) (1 diff)
• plugins/nikto_core.plugin (modified) (2 diffs)

trunk/docs/CHANGES.txt

@@ +1 @@
+2008-09-24 plugins/nikto_core.plugin db_tets
+        - Fixed problem with nikto using authentication provided from the
+          command line. It now adds it to the list of realms.
+        - Added extra test to highlight localstart.asp if it is the default
+          page.
+        - Added tests to identify Ampache.
 2008-09-23 plugins/*.plugin
         - Added support for conditional recon and scan plugins.

trunk/plugins/db_tests

@@ -3587 +3587 @@
 "003583","3092","3","/content/sitemap.gz","GET","200","","","","","The sitemap.gz file, used for Google indexing, contains an xml representation of the web site\'s structure.","",""
 "003584","3233","b","/icons/README","GET","Public Domain Icons","","","","","Apache default file found.","",""
+"003585","3092","b","/localstart.asp","GET","Welcome to IIS","","","","","Default IIS install page found, containing version and path of web root.","",""
+"003586","0","b","ampache/update.php","GET","Ampache Update","","","","","Ampache update page is visible.","",""
+"003587","0","b","ampache/login.php","GET","Ampache :: Pour l'Amour de la Musique","","","","","Ampache is installed.","",""
+"003588","0","b","ampache/docs/README","GET","README - Ampache","","","","","Ampache installation documents found.","",""
 

trunk/plugins/nikto_core.plugin

@@ -794 +794 @@
   if (($#x ne 1) || ($x[0] eq ""))
    { nprint("+ ERROR: '$CLI{hostauth}' (-i option) syntax is 'user:password' or 'user:password:domain' for host authentication."); exit;  }
-  $NIKTO{hostid}     = $x[0];
-  $NIKTO{hostpw}     = $x[1];
-  $NIKTO{hostdomain} = $x[2];
  } 
 
@@ -1210 +1207 @@
                 $db_realms_ctr++;
               }
+            # Cheat and add CLI directly to REALMS
+            if (defined $CLI{hostauth})
+            {
+             my @x=split(/:/,$CLI{hostauth});
+
+             $REALMS{$db_realms_ctr}{tid} = "700500";
+             $REALMS{$db_realms_ctr}{realm} = $x[2];
+             $REALMS{$db_realms_ctr}{pw} = $x[1];
+             $REALMS{$db_realms_ctr}{id} = $x[0];
+             $REALMS{$db_realms_ctr}{msg} = "Credentials provided by CLI.";
+            }
            }