Guess the default database and The NASL script of the conn. asp brute-force database

The script language is also very powerful. :)

Code:
Include ("http_func.inc ");
Include ("http_keepalive.inc ");
Dir = make_list ("/data/database. mdb ","/data. mdb ","/data/date. mdb ","/data/bbs. mdb ","/data/dvbbs7.mdb ","/data. mdb ","/database. mdb ");
# Display (dir );
Foreach path (dir)
{
If (port = is_cgi_installed (path ))
{
# Display (path );
Report = "Under the cgi path" + path + "found database! Your database is possiblly to be download! ";
Solution = "Solution: you d better rename the database name, or move the database to other cgis ";
Risk_factor = "Risk factor: High ";
Report = report + solution + Risk_factor;
Security_hole (data: string (report), port: port );
 
}
 
}
 
# Conn. asp
 
Port = get_http_port (default: 80 );
If (! Get_port_state (port) exit (0 );
 
Dirs = make_list ("/conn. inc ","/conn. asp ","/connection. asp ","/inc/conn. inc ","/inc/conn. asp ","/inc/connection. asp ");
 
Foreach paths (dirs)
{
Req = http_get (item: paths, port: port );
R = http_keepalive_send_recv (port: port, data: req, bodyonly: 1 );
If (r = NULL) exit (0 );
If (egrep (pattern: "80004005", string: r ))
{
Info = ereg_replace (pattern:. * ([^ 0-9]:. *). *, string: r, replace: \ 1 );
Report = The path + info + maybe is the database physical path! Your databae is possiblly to be download !;
Solution = Solution: Please modify the conn. asp file add on error resume next statement. + Risk factor: Medium;
Report = report + Solution;
Security_hole (data: report, port: port );
Display ("");

}
}
The code is very short.