cldrn / cldrn/nmap-nse-scripts

http-form-brute

Open
#18 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Lua
Stars
996
Forks
365
PR merge metrics
No merged PRs in 30d

Description

Am trying to brute force a test lab (http://smikta.info) with nmap following command
~$ `nmap --script http-form-brute -p 80 smikta.info`

@output

`Starting Nmap 7.92 ( https://nmap.org ) at 2023-01-05 18:48 WAT
Nmap scan report for http://smikta.info (192.124.249.69)
Host is up (0.28s latency).
rDNS record for 192.124.249.69: http://cloudproxy10069.sucuri.net`

`PORT STATE SERVICE`
`80/tcp open http`

`Nmap done: 1 IP address (1 host up) scanned in 1.89 seconds`

Expected
@output

`-- PORT STATE SERVICE REASON`
`-- 80/tcp open http syn-ack`
`-- | http-form-brute:`
`-- | Accounts`
`-- | Patrik Karlsson:secret - Valid credentials`
`-- | Statistics`
`-- |_ Perfomed 60023 guesses in 467 seconds, average tps: 138`

please what am I doing wrong

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the http-form-brute NSE script entry point and the exact nmap command shown; compare the invocation with the script's expected inputs and the reported scan output. Done means identifying the missing invocation detail or confirming a reproducible script defect with the relevant output.

Written by the indexing model from the issue text.

Assessment

Tech stack
lua
Domain
security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.