Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Needed enhancements to pop3-brute.nse #2158

Open
5 tasks
dmiller-nmap opened this issue Oct 15, 2020 · 1 comment
Open
5 tasks

Needed enhancements to pop3-brute.nse #2158

dmiller-nmap opened this issue Oct 15, 2020 · 1 comment

Comments

@dmiller-nmap
Copy link

pop3-brute.nse is a very old script, and it's in need of some upgrades.

  • Determine if STLS is required before authenticating and perform it. See https://seclists.org/nmap-dev/2010/q2/156
  • Determine if the auth method being attempted is supported, to avoid doing work when it won't succeed.
  • Attempt to get a list of supported auth methods and choose one automatically. Sending AUTH with no options sometimes works for this, as well as finding supported extensions with CAPA. Maybe extend pop3-capabilities to do this also?
  • Support NTLM authentication (see pop3-ntlm-info and smb-brute)
  • Use extended error codes (RFC 2449 and RFC 3206) to identify when an -ERR might actually mean a successful authentication (e.g. IN-USE), a need to slow down (e.g. LOGIN-DELAY, see ftp-brute), or a need to retry (e.g. SYS/TEMP), among others.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants
@dmiller-nmap and others