[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20110508195800.GA22720@dztty>
Date: Sun, 8 May 2011 20:58:01 +0100
From: Djalal Harouni <tixxdz@...ndz.org>
To: owl-dev@...ts.openwall.com
Subject: Re: Nmap 5.51
On 2011-05-04 02:11:54 +0400, Solar Designer wrote:
> Hi,
>
> I'm sorry for the delayed response. Please see below:
>
> On Mon, Apr 18, 2011 at 02:21:34AM +0100, Djalal Harouni wrote:
> > I was reviewing the Owl Nmap patch [1] to drop privileges, and I've
> > noticed that the Script Pre-scanning phase will run before dropping
> > privileges, actually there are two issues.
> >
> > Some background:
> > The Script Pre-scanning phase is a new NSE (Nmap Scripting Engine)
> > scan phase which occurs before Nmap starts classic scanning. Scripts in
> > this phase can do host/network discovery stuff (broadcast ...) and add
> > the discovered targets to the Nmap scanning queue. There is even a new
> > committed script 'target-sniffer.nse' to push sniffed targets into the
> > Nmap queue. Currently in the nmap-trunk more than 10 scripts will run
> > during this script scan phase.
> >
> >
> > 1) I think that privileges should be dropped before any scan.
>
> Yes. I was not aware of this pre-scanning phase. I thought we were
> merely parsing the scripts before dropping privileges.
Ok.
> > 2) some (perhaps all) Pre-scanning scripts will not work with this patch
> > since they need some info (network interfaces ...) which are not
> > available at that time. The pre-scanning phase should not be moved, but
> > you can move the open_nse() call if you want to initialize NSE before
> > drop_priv().
> >
> >
> > I want to contribute to Owl, so let me know if you want me to adjust the
> > patch, or if you have some other suggestions.
>
> It'd be great if you adjust and submit a patch for our review and likely
> inclusion in Owl.
I'll send a first patch in the next days based on the Owl patch.
> As a possible next step, maybe you could revise the patch such that it
> would be acceptable upstream (perhaps introduce a configure option)?
Yes the patch needs more work, bacause as it is it doesn't take into
account a lot of Nmap features. And yes I'll try to push it upstream.
thanks.
--
tixxdz
http://opendz.org
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
