diff --git a/scripts/clock-skew.nse b/scripts/clock-skew.nse index 1054240ad..57f2e0674 100644 --- a/scripts/clock-skew.nse +++ b/scripts/clock-skew.nse @@ -5,13 +5,33 @@ local nmap = require "nmap" local stdnse = require "stdnse" local table = require "table" +-- These scripts contribute clock skews, so we need them to run first. +-- portrule scripts do not always run before hostrule scripts, and certainly +-- not before the hostrule is evaluated. +dependencies = { + "http-date", + "http-ntlm-info", + "imap-ntlm-info", + "ms-sql-ntlm-info", + "nntp-ntlm-info", + "ntp-info", + "pop3-ntlm-info", + "rfc868-time", + "smb-security-mode", + "smtp-ntlm-info", + "ssl-date", + "telnet-ntlm-info", +} + description = [[ Analyzes the clock skew between the scanner and various services that report timestamps. At the end of the scan, it will show groups of systems that have similar median clock skew among their services. This can be used to identify targets with similar configurations, such as those that share a common time server. -]] + +You must run at least 1 of the following scripts to collect clock data: +* ]] .. table.concat(dependencies, "\n* ") .. "\n" --- -- @output @@ -36,24 +56,6 @@ license = "Same as Nmap--See https://nmap.org/book/man-legal.html" categories = {"default", "safe"} --- These scripts contribute clock skews, so we need them to run first. --- portrule scripts do not always run before hostrule scripts, and certainly --- not before the hostrule is evaluated. -dependencies = { - "http-date", - "http-ntlm-info", - "imap-ntlm-info", - "ms-sql-ntlm-info", - "nntp-ntlm-info", - "ntp-info", - "pop3-ntlm-info", - "rfc868-time", - "smb-security-mode", - "smtp-ntlm-info", - "ssl-date", - "telnet-ntlm-info", -} - hostrule = function(host) return host.registry.datetime_skew and #host.registry.datetime_skew > 0 end diff --git a/scripts/ssl-cert-intaddr.nse b/scripts/ssl-cert-intaddr.nse index f474d050f..23c9e65be 100644 --- a/scripts/ssl-cert-intaddr.nse +++ b/scripts/ssl-cert-intaddr.nse @@ -34,6 +34,7 @@ address itself is not private. Nmap v7.30 or later is required. -- -- -- @see http-internal-ip-disclosure.nse +-- @see ssl-cert author = "Steve Benson" license = "Same as Nmap--See https://nmap.org/book/man-legal.html" diff --git a/scripts/ssl-cert.nse b/scripts/ssl-cert.nse index 725787714..e9d42d8cf 100644 --- a/scripts/ssl-cert.nse +++ b/scripts/ssl-cert.nse @@ -66,6 +66,8 @@ certificate. ]] --- +-- @see ssl-cert-intaddr +-- -- @output -- 443/tcp open https -- | ssl-cert: Subject: commonName=www.paypal.com/organizationName=PayPal, Inc.\