From 03edc190e674bf800f8e2c824afe83fdbcac704f Mon Sep 17 00:00:00 2001 From: Tib3rius <48113936+Tib3rius@users.noreply.github.com> Date: Tue, 18 Jun 2019 10:41:55 -0400 Subject: [PATCH] Fixed bug in nmap-http command where it would run bruteforce scripts. --- config/service-scans.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/service-scans.toml b/config/service-scans.toml index 43914c9..8daffd3 100644 --- a/config/service-scans.toml +++ b/config/service-scans.toml @@ -96,7 +96,7 @@ ignore-service-names = [ [[http.scan]] name = 'nmap-http' - command = 'nmap {nmap_extra} -sV -p {port} --script="(http* or ssl*) and not (broadcast or dos or external or http-slowloris* or fuzzer)" -oN "{scandir}/{protocol}_{port}_http_nmap.txt" -oX "{scandir}/xml/{protocol}_{port}_{scheme}_nmap.xml" {address}' + command = 'nmap {nmap_extra} -sV -p {port} --script="(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "{scandir}/{protocol}_{port}_http_nmap.txt" -oX "{scandir}/xml/{protocol}_{port}_{scheme}_nmap.xml" {address}' [[http.scan.pattern]] description = 'Identified HTTP Server: {match}'