Re: smtp-enum-users.nse

[Duarte Silva <duartejcsilva () gmail com>]

> names? On that note, you should allow lower-case versions "rcpt" etc.,
> and raise an error if one of the method names isn't known.

Should the script stop if a method name isn't known? Or just add the
error to the output?

On Tue, Mar 16, 2010 at 8:02 PM, David Fifield <david () bamsoftware com> wrote:
> On Sun, Mar 14, 2010 at 11:15:23AM +0000, Duarte Silva wrote:
> > The script had to change a bit. I think it will need some more testing
> > but from my tests the functionality of the script isn't affected. The
> > user can now specify a list of methods to try.
> >
> > --script-args smtp-enum-users.method={RCPT,EXPN}
>
> Okay, that looks good. The arg name should be changed to
> smtp-enum-users.methods though.
>
> I'm now getting this output, so you should update your @output section.
>
> 25/tcp open  smtp    syn-ack
> | smtp-enum-users:
> |_  RCPT, root
>
> I don't understand why you run the method names through the
> METHOD_IDENTIFIERS table with integer IDs. Why not just use the string
> names? On that note, you should allow lower-case versions "rcpt" etc.,
> and raise an error if one of the method names isn't known.
>
> David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/