Re: PR: 1202 new nmap detect script - NagiosXI

George Chatzisofroniou <[email protected]> Mon, 7 May 2018 10:41:28 +0300
Newsgroups gmane.comp.security.nmap.devel
Message-ID <CACeRBzm-B1MKaDzvECeFWPEe942+ZXiM-yuYc2x+LXbm61VykQ@mail.gmail.com>
Hi Cale,

On Thu, Apr 26, 2018 at 11:03 PM, Cale Smith <[email protected]> wrote:
> Hello nmap developers!
> This pull request includes a new detection scripts for vulnerable and
> un-patched versions of the monitoring product NagiosXI.

Personally, I would prefer our exploit scripts to look for RCE by
actually trying to exploit the remote target instead of simply
checking the version of the installed software.

I believe your code currently fits better as a new entry in
http-fingerprints file.

George
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/