Re: [NSE scripts documentation] "smbauth" library arguments wrongly

nnposter <[email protected]> Wed, 9 Jan 2019 14:46:57 -0700
Newsgroups gmane.comp.security.nmap.devel
Message-ID <[email protected]>
It is listing all parameters implemented by the script itself as well as 
all parameters implemented by libraries on which the script depends.

As an example, script http-methods.nse depends on http.lua so that is 
why parameter "http.host" is listed. This library in turn depends on 
smbauth.lua (for emulating browser NTLM authentication) so parameters 
like "smbpassword" are listed.

Cheers,
nnposter


On 1/8/19 6:39 AM, Clément Notin wrote:
> Hi everyone,
> 
> In the NSE documentation (https://nmap.org/nsedoc/) I have noticed that 
> for several scripts, under the "Script Arguments" section, there are 
> suggested arguments for the "smbauth" (and sometimes "smb") libraries 
> even for scripts that apparently have nothing to do with these.
> For example:
> https://nmap.org/nsedoc/scripts/ssl-enum-ciphers.html
> https://nmap.org/nsedoc/scripts/http-waf-detect.html
> https://nmap.org/nsedoc/scripts/http-methods.html
> Etc.
> 
> I think this may confuse some users.
> 
> I suppose that these pages are automatically generated from script 
> metadata. I could propose a patch but I do not know where to find the 
> code responsible for this.
> 
> Happy new year!
> 
> _______________________________________________
> Sent through the dev mailing list
> https://nmap.org/mailman/listinfo/dev
> Archived at http://seclists.org/nmap-dev/
> 
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/