I'm using this file to guide myself while working on nmap's code. The words below might not make a lot of sense, since they are a collection of tasks, todos, notes, logs, ideas... If something you are interested in does not make good sense, don't worry about asking it directly to me on joaolivewirecombr *** OPEN PROXY SCRIPTS *** - Modularization implemented - Needs a fine tuning and hard testing - Comments are completely outdated! Needing update too. *** LOCALS/GLOBALS *** Fix global variables to be locals where it is correct. * SCRIPT LIST banner.nse OK dns-zone-transfer OK html-title OK - Fixed line 46 - Committed http-auth OK http-passwd OK http-trace OK - Fixed line 93 - Committed irc-info OK - Fixed lines 120, 62 - Fixed init() function - Committed pop3-brute OK - Fixed lines 50, 88 - Committed pop3-capabilities OK robots.txt OK - Fixed lines 34, 72 - Committed smtp-commands OK smtp-strangeport OK sql-injection OK - Fixed line 66 - telnet-brute OK - Fixed line 191 -> Functions were using a global socket, fixed to pass socket as argument - Committed *** SSL *** * SCRIPT LIST -- http-passwd.nse OK Using http.lua lib -- http-auth.nse OK Using http.lua lib -- irc-info.nse OK Using tryssl @ nmap-exp/dev -- robots.txt.nse OK Using http.lua lib -- html-title.nse OK Using http.lua lib -- http-trace.nse OK Using tryssl -- telnet-brute.nse OK Using tryssl @ nmap-exp/dev -- smtp-strangeport.nse OK No connection -- smtp-commands.nse OK Using tryssl @ nmap-exp/dev -- smtp-open-relay.nse OK Using tryssl @ nmap-exp/dev -- pop3-capabilities.nse OK Using pop3.lua lib @ nmap-exp/dev -- pop3-brute.nse OK Using tryssl @ nmap-exp/dev -- sql-injection.nse OK Using tryssl @ nmap-exp/dev -- banner.nse OK Using tryssl (inside function comm.get_banner) -- ms-sql-info.nse UDP Based script -- mysql-info.nse Using comm.lua (get_banner) NEEDS TESTING! * LIB LIST -- http.lua OK -- pop3.lua OK @ nmap-exp/dev -- comm.lua OK @ nmap-exp/dev *** NEW TABLE ARGUMENT SYNTAX *** * SCRIPT LIST -- http-open-proxy.nse OK -- socks-open-proxy.nse OK -- dns-zone-transfer.nse OK -- whois-nse OK -- Fix nsedoc *** HTTP related *** - Working on basic HTTP optimizations -- POST OK Needs more testing with real app -- HEAD OK -- Cookie Support -- keepalive -- pipelining -- parallelism (waiting for) - HTTP High Speed Brute force auth -- Also use POST/GET/HEAD -- How to modify the libraries to best support it? -- Use local function to route http requests through -> HTTP lib will change, it will avoid huge changes in future