Nmap Development mailing list archives

Re: NSE script: HTTP websocket discovery (was: NSE script: HTTP web service discovery)

From: George Chatzisofroniou <sophron () latthi com>
Date: Mon, 6 Oct 2014 14:15:11 +0300

Hey Jacek,

On Sun, Oct 05, 2014 at 11:01:34PM +0200, Jacek Wielemborek wrote:

05.10.2014 21:57, Jacek Wielemborek:

Hello,

I just created a simple NSE script that detects HTTP Web Services.
Please find the first version attached and take a look at this URL for
any updates:

https://gist.github.com/d33tah/b902eb4e10c1e2b8e095


Why don't you let the user specify the directory to check for websockets by
providing an option that defaults to "/"?

I believe it makes more sense to make our http library support the opening
handshake for websockets and then leverage this feature from your script. More
scripts may need to handle websockets in the future.

-- 
George Chatzisofroniou
_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/

Current thread:

NSE script: HTTP web service discovery Jacek Wielemborek (Oct 05)
- Re: NSE script: HTTP websocket discovery (was: NSE script: HTTP web service discovery) Jacek Wielemborek (Oct 05)
  - Re: NSE script: HTTP websocket discovery (was: NSE script: HTTP web service discovery) George Chatzisofroniou (Oct 06)