Security-Tools-Alliance / rengine-ng

reNgine-ng is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface.
GNU General Public License v3.0
12 stars 6 forks source link

feat(scan): Import nmap script "http-default-accounts" output as vulnerability #56

Open psyray opened 2 months ago

psyray commented 2 months ago

Is there an existing feature or issue for this?

Expected feature

Submitted by @cpandya2909

Nmap script 'http-default-accounts' provides with default valid accounts. for example, default accounts for tomcat. As we can already run nmap with scripts, it will be better to use this scripts output.

Feature to identify valid accounts for different services or web technologies like tomcat.

Script information scan be found here https://nmap.org/nsedoc/scripts/http-default-accounts.html

Alternative solutions

No response

Anything else?

No response