Re: Whisker Research
Renaud Deraison <[email protected]>
| Newsgroups | gmane.comp.security.nessus.devel |
|---|---|
| Message-ID | <[email protected]> |
On Thu, Oct 30, 2003 at 10:50:05AM -0700, Erik Stephens wrote: > Make no404.nasl store something in the kb when it gets 403 return > codes. It would have to be a separate key so as to not interfere > with existing plugins that depend on no404.nasl. This would be good. Actually webmirror.nasl stores www/<port>/password_protected if it only get 403 error codes. I found some web servers which would wait 5 seconds before giving you a reply when a page is forbidden, and I'm wondering if it would make sense to disable ALL web checks when we meet such a server. -- Renaud