cldrn / cldrn/nmap-nse-scripts
http-form-brute
- Dominant language
- Lua
- Stars
- 996
- Forks
- 365
- PR merge metrics
- No merged PRs in 30d
Description
Am trying to brute force a test lab (http://smikta.info) with nmap following command
~$ `nmap --script http-form-brute -p 80 smikta.info`
@output
`Starting Nmap 7.92 ( https://nmap.org ) at 2023-01-05 18:48 WAT
Nmap scan report for http://smikta.info (192.124.249.69)
Host is up (0.28s latency).
rDNS record for 192.124.249.69: http://cloudproxy10069.sucuri.net`
`PORT STATE SERVICE`
`80/tcp open http`
`Nmap done: 1 IP address (1 host up) scanned in 1.89 seconds`
Expected
@output
`-- PORT STATE SERVICE REASON`
`-- 80/tcp open http syn-ack`
`-- | http-form-brute:`
`-- | Accounts`
`-- | Patrik Karlsson:secret - Valid credentials`
`-- | Statistics`
`-- |_ Perfomed 60023 guesses in 467 seconds, average tps: 138`
please what am I doing wrong
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with the http-form-brute NSE script entry point and the exact nmap command shown; compare the invocation with the script's expected inputs and the reported scan output. Done means identifying the missing invocation detail or confirming a reproducible script defect with the relevant output.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- lua
- Domain
- security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100