Dirk Wetter

Update

1

Hi @mikesplain, any chance for an update? After managing to update the feed URLs (see #257) the report is full of findings (for each host?):  Cheers, Dirk

Hello, I doubt this is a valid finding (**high**, **firm**) as it looks to me the server banner was just taken and a lookup was performed:  For this the...

Hi, thx for your tremendously useful software. I think there's a misinterpretation of the web server header / banner: ``Server: Apache-Coyote/1.1`` . To my knowledge all version of Tomcat and...

Feature: OPTIONSBLEED

3

### Description ... would be great to get added. Check doesn't seem to be rocket science, to me. ### Links/Info https://blog.fuzzing-project.org/60-Optionsbleed-HTTP-OPTIONS-method-can-leak-Apaches-server-memory.html https://nvd.nist.gov/vuln/detail/CVE-2017-9798

Question: ``ERROR: returned an error: sending request: SSL error: ssl_write_all 29527: 1 - ERROR_SYSCALL``

3

This is not really a bugreport. But I would love to understand what's going on. I have a host (HTTPS) to scan which frequently returns ``` E:Tue Sep 15 20:47:32...

SNI problem?

8

Hello there, when I scan an own host where I set up a default IP, the banner and ports of the scan are ending up not at the virtual host...

Hi, in addition to #509 one can even determine the patch level: https://social.technet.microsoft.com/wiki/contents/articles/240.exchange-server-and-update-rollup-build-numbers.aspx A hint whether the patchlevel is is up to date would be awesome. Cheers, Dirk

Hi, it seems one can do fingerprints from the owa header (see also #308): http://www.slicesofcomputer.com/2014/04/what-exchange-server-version-is-my.html. I would be great to have nikto reporting the Exchange version on the first major...