Re: nmap..... via web

[Lars Marowsky-Bree <lmb () teuto net>]

On 1999-02-19T12:13:31,
   Lamont Granquist <lamontg () raven genome washington edu> said:

> since so many people seem to be trying to use nmap for these kinds of
> things maybe nmap needs these patches in the development tree...

No. IMNSHO, these people need some common sense. Triggering an nmap scan via
WWW ? Hello? *knock knock* Can you say DoS ? Can you say "exploit" ?

The Perl code I have seen so far (shell commandline! argh! you fork the
process as a child, give it a well defined environment and pass the arguments
in directly via ARGV at the very least) has frightened me anyway.

Please be very careful with what you do.

Sincerely,
    Lars Marowsky-Brée
        
--
Lars Marowsky-Brée
Network Management

teuto.net Netzdienste GmbH - DPN Verbund-Partner