Nmap Development mailing list archives

Re: [NSE scripts documentation] "smbauth" library arguments wrongly


From: nnposter <nnposter () users sourceforge net>
Date: Wed, 9 Jan 2019 14:46:57 -0700

It is listing all parameters implemented by the script itself as well as all parameters implemented by libraries on which the script depends.

As an example, script http-methods.nse depends on http.lua so that is why parameter "http.host" is listed. This library in turn depends on smbauth.lua (for emulating browser NTLM authentication) so parameters like "smbpassword" are listed.

Cheers,
nnposter


On 1/8/19 6:39 AM, Clément Notin wrote:
Hi everyone,

In the NSE documentation (https://nmap.org/nsedoc/) I have noticed that for several scripts, under the "Script Arguments" section, there are suggested arguments for the "smbauth" (and sometimes "smb") libraries even for scripts that apparently have nothing to do with these.
For example:
https://nmap.org/nsedoc/scripts/ssl-enum-ciphers.html
https://nmap.org/nsedoc/scripts/http-waf-detect.html
https://nmap.org/nsedoc/scripts/http-methods.html
Etc.

I think this may confuse some users.

I suppose that these pages are automatically generated from script metadata. I could propose a patch but I do not know where to find the code responsible for this.

Happy new year!

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/

Current thread: