patrik
e10d1bad27
o [NSE] Added new script http-chrono, which measures min, max and average
...
response times of web servers. [Ange Gutek]
2012-03-23 19:29:44 +00:00
patrik
05d3fa68d9
Renamed http-drupal-users-enum to http-drupal-enum-users and fixed
...
documentation and arguments accordingly.
2012-03-22 00:09:28 +00:00
patrik
92092f6b0e
o [NSE] Added new script http-drupal-users-enum, which enumerates all available
...
Drupal user accounts by exploiting a vulnerability in the Views module.
[Hani Benhabiles]
2012-03-21 03:42:42 +00:00
patrik
f592b85e59
o [NSE] Added new script broadcast-ataoe-discover, which discovers ATA over
...
Ethernet capable devices through LAN ethernet broadcasts. [Patrik Karlsson]
2012-03-17 22:49:40 +00:00
patrik
17247c681a
o [NSE] Added a stun library and the scripts stun-version and stun-info, which
...
extract version information and the external NAT:ed address.
[Patrik Karlsson]
2012-03-16 11:36:51 +00:00
patrik
523dbc609a
o [NSE] Added the script duplicates which attempts to determine duplicate
...
hosts by analyzing information collected by other scripts. [Patrik Karlsson]
2012-03-12 22:24:58 +00:00
fyodor
a37a2d3139
fix the category typo in the script.db too
2012-03-08 19:03:03 +00:00
patrik
542ed0bf67
o [NSE] Added the script acarsd-info that retrieves information from the acarsd
...
decoder daemon. [Brendan Coles]
2012-03-08 18:22:00 +00:00
patrik
1384a953a1
o [NSE] Added an EAP library and the script eap-info which discovers supported
...
EAP authentication methods. [Riccardo Cecolin]
2012-03-08 18:00:35 +00:00
patrik
cde380ea2c
o [NSE] Added a Versant object database library and the scripts
...
broadcast-versant-locate and versant-info. The first discovers Versant
databases on the LAN and the second queries them for information. [Patrik]
2012-03-08 17:51:48 +00:00
david
095d5e89ac
Add http-config-backup.nse from Riccardo Cecolin.
...
This script checks for text editor backups of web configuration files.
2012-03-06 17:51:26 +00:00
patrik
480e5ac605
o [NSE] Added the library rpcap and the scripts rpcap-brute and rpcap-info
...
which perform brute force password guessing and extract information from the
WinPcap Remote Packet Capture daemon. [Patrik]
2012-03-02 12:39:18 +00:00
patrik
43253cea53
o [NSE] Added authentication support to MongoDB library and modified existing
...
scripts to support it. Added the script mongodb-brute to perform password
brute force guessing. [Patrik]
2012-03-02 12:28:30 +00:00
patrik
f8784f8829
o [NSE] Added the script broadcast-networker-discover that discoverer EMC
...
Networker servers on the LAN. [Patrik]
2012-02-25 16:06:30 +00:00
patrik
8f7461b357
o [NSE] Added a Network Data Management Protocol (ndmp) library and the
...
scripts:
+ ndmp-version - retrieves version information
+ ndmp-fs-info - retrieves information about remote filesystems
[Patrik]
2012-02-19 14:56:17 +00:00
patrik
13b6b01e21
o [NSE] Added the script http-vuln-cve2010-2861 to detect the Cold Fusion
...
CVE-2010-2861 directory traversal vulnerability. [Micah Hoffman]
2012-02-19 14:40:01 +00:00
patrik
80e998b91f
o [NSE] Added support for edns-client-subnet requests to the DNS library and
...
the script dns-client-subnet-scan that scans for addresses resolved from
different subnets. [John Bond]
2012-02-19 13:22:20 +00:00
david
9258c496cd
Add asn-to-prefix.nse to "external" and "safe".
2012-02-06 08:20:54 +00:00
david
c68af471b0
Add asn-to-prefix.nse by John Bond.
2012-02-06 08:20:53 +00:00
patrik
908ac61fb0
o [NSE] Added a rsync library and two new script:
...
+ rsync-list-modules - list available rsync modules
+ rsync-brute - attempts to brute force passwords against a rsync module
[Patrik]
2012-02-05 10:10:59 +00:00
patrik
f75c3678a0
o [NSE] Added voldemort-info, that retrieves cluster and store information
...
from the Voldemort distributed key-value store. [Patrik]
2012-01-31 20:32:37 +00:00
patrik
321e63a86d
o [NSE] Added http-qnap-nas-info, that retrieves the model, firware version,
...
and enabled services from a QNAP Network Attached Storage (NAS) device.
[Brendan Coles]
2012-01-31 20:22:42 +00:00
patrik
5575943ea0
o [NSE] Added url-snarf. The script sniffs the network for URLs in HTTP
...
traffic and prints the URL together with the originating IP. [Patrik]
2012-01-29 08:23:30 +00:00
patrik
3633c502b6
o [NSE] Added http-auth-finder. The scripts spiders a site looking for URLs
...
requiring form- or HTTP-based authentication. [Patrik]
2012-01-29 06:23:35 +00:00
david
22c17fa05d
Add cccam-version.nse.
2012-01-27 01:13:35 +00:00
patrik
0ad978d3b8
o [NSE] Added the scripts xdmcp-discover, broadcast-xdmcp-discover and the
...
X Display Manager Control Protocol (xdmcp) library. The scripts discover
hosts either using unicast or broadcast and try to detect supported
authentication and authorization mechanisms. [Patrik]
2012-01-26 19:35:19 +00:00
patrik
5b05cbe46e
o [NSE] Added script iax2-brute and supporting IAX2 library that performs
...
brute-force password guessing against the Asterisk IAX2 protocol. [Patrik]
2012-01-24 20:55:29 +00:00
patrik
5ef9f2a70d
o [NSE] Added script broadcast-dhcp6-discover and supporting DHCPv6 library.
...
The script retrieves and prints an IPv6 address and some of the DHCP6
options. [Patrik]
2012-01-24 19:54:50 +00:00
patrik
1670f59210
o [NSE] Added script dns-srv-enum that enumerates DNS service records for a
...
given domain. [Patrik]
2012-01-19 00:49:48 +00:00
patrik
2a2f64590a
o [NSE] Added script nessus-xmlrpc-brute that performs brute force password
...
guessing against the Nessus web GUI. [Patrik]
2012-01-17 11:53:23 +00:00
patrik
c579d844ba
o [NSE] Added script dns-nsid by John Bond, that retrieves name server ID and
...
version information.
o [NSE] Applied patch to DNS library by John Bond that adds support for the
CHAOS class and NSID requests.
2012-01-17 11:37:19 +00:00
patrik
ef4be879e5
o [NSE] Added broadcast-ripng-discover that discovers IPv6 RIPng routers and
...
displays their routing information. [Patrik]
2012-01-14 18:44:07 +00:00
david
541091eed1
Put http-generator in default.
2012-01-12 19:45:13 +00:00
david
1a9700019f
Add http-generator.nse by Michael Kohl.
2012-01-12 19:45:11 +00:00
patrik
956c9ffe53
o [NSE] Added the script broadcast-pppoe-discover that discovers PPPoE servers
...
on the LAN using the PPPoE Discovery Protocol. [Patrik]
2012-01-10 18:22:39 +00:00
patrik
0267b56a27
o [NSE] Added the script membase-brute that performs password brute force
...
password guessing against the Membase TAP protocol. [Patrik]
o [NSE] Added the script membase-http-info that retrieves information from the
Couchbase distributed key-value pair server. [Patrik]
2012-01-10 18:19:21 +00:00
patrik
74d5ff04ef
o [NSE] Added the script http-vuln-cve2009-3960 that detects and exploits the
...
CVE 2009-3960 XML injection vulnerability in Adobe products. [Hani
Benhabiles]
2012-01-02 19:48:42 +00:00
patrik
2269e76438
o [NSE] Added a natpmp library and the script nat-pmp-mapport that allows
...
NAT mapping of external TCP and UDP ports to internal addresses. [Patrik]
2012-01-02 11:41:21 +00:00
patrik
f5b14a2099
o [NSE] Added the script riak-http-info that lists version and statistics
...
information from the Basho Riak distributed database. [Patrik]
2012-01-02 11:37:38 +00:00
patrik
54983f8127
o [NSE] Added the script socks-auth-info that lists supported SOCKS 5
...
authentication mechanisms. [Patrik]
2012-01-02 11:34:27 +00:00
patrik
b4fcd5e5fa
o [NSE] Added the script memcached-info that lists version and statistics
...
information from the distributed memory object caching service memcached
[Patrik]
2012-01-02 11:30:18 +00:00
patrik
4118ee064b
o [NSE] Added the script redis-info that lists version and statistic information
...
gathered from the Redis network key-value store. [Patrik]
o [NSE] Added the script redis-brute that performs brute force password
guessing against the Redis network key-value store. [Patrik]
2012-01-02 11:27:06 +00:00
patrik
3491fdc1fa
o [NSE] Added the script http-proxy-brute that performs brute force password
...
guessing against HTTP proxy servers. [Patrik]
2012-01-02 11:21:57 +00:00
patrik
0ee55f4651
o [NSE] Added the script socks-brute that performs brute force password
...
guessing against SOCKS 5 servers. [Patrik]
2012-01-02 11:15:34 +00:00
patrik
cac7c27dcb
o [NSE] Added the script vmauthd-brute that performs brute force password
...
guessing against the VMware authentication daemon. [Patrik]
2012-01-02 11:12:46 +00:00
patrik
4e7db06f0c
o [NSE] Added script broadcast-wpad-discover which detects proxy servers on the
...
network by using the Web Proxy Auto Discover Protocol (WPAD). [Patrik]
2011-12-29 14:43:37 +00:00
patrik
1b5518cc63
Updated the script categories for dhcp-discover [Patrik]
2011-12-29 08:19:58 +00:00
fyodor
93c0ae4f44
Add new telnet-encryption script
2011-12-28 00:57:48 +00:00
patrik
bb7d5a526f
o [NSE] Added script dns-blacklist that performs DNSBL checks of given or
...
scanned IP addresses against multiple DNSBL services. [Patrik]
2011-12-26 14:22:25 +00:00
patrik
ca63146635
o [NSE] Added the script http-open-redirect that finds web pages that do not
...
properly validate parameters used for HTTP redirects. [Martin Swende]
2011-12-18 12:58:56 +00:00