1
0
mirror of https://github.com/nmap/nmap.git synced 2025-12-07 13:11:28 +00:00
Commit Graph

486 Commits

Author SHA1 Message Date
patrik
e10d1bad27 o [NSE] Added new script http-chrono, which measures min, max and average
response times of web servers. [Ange Gutek]
2012-03-23 19:29:44 +00:00
patrik
05d3fa68d9 Renamed http-drupal-users-enum to http-drupal-enum-users and fixed
documentation and arguments accordingly.
2012-03-22 00:09:28 +00:00
patrik
92092f6b0e o [NSE] Added new script http-drupal-users-enum, which enumerates all available
Drupal user accounts by exploiting a vulnerability in the Views module.
  [Hani Benhabiles]
2012-03-21 03:42:42 +00:00
patrik
f592b85e59 o [NSE] Added new script broadcast-ataoe-discover, which discovers ATA over
Ethernet capable devices through LAN ethernet broadcasts. [Patrik Karlsson]
2012-03-17 22:49:40 +00:00
patrik
17247c681a o [NSE] Added a stun library and the scripts stun-version and stun-info, which
extract version information and the external NAT:ed address.
  [Patrik Karlsson]
2012-03-16 11:36:51 +00:00
patrik
523dbc609a o [NSE] Added the script duplicates which attempts to determine duplicate
hosts by analyzing information collected by other scripts. [Patrik Karlsson]
2012-03-12 22:24:58 +00:00
fyodor
a37a2d3139 fix the category typo in the script.db too 2012-03-08 19:03:03 +00:00
patrik
542ed0bf67 o [NSE] Added the script acarsd-info that retrieves information from the acarsd
decoder daemon. [Brendan Coles]
2012-03-08 18:22:00 +00:00
patrik
1384a953a1 o [NSE] Added an EAP library and the script eap-info which discovers supported
EAP authentication methods. [Riccardo Cecolin]
2012-03-08 18:00:35 +00:00
patrik
cde380ea2c o [NSE] Added a Versant object database library and the scripts
broadcast-versant-locate and versant-info. The first discovers Versant
  databases on the LAN and the second queries them for information. [Patrik]
2012-03-08 17:51:48 +00:00
david
095d5e89ac Add http-config-backup.nse from Riccardo Cecolin.
This script checks for text editor backups of web configuration files.
2012-03-06 17:51:26 +00:00
patrik
480e5ac605 o [NSE] Added the library rpcap and the scripts rpcap-brute and rpcap-info
which perform brute force password guessing and extract information from the
  WinPcap Remote Packet Capture daemon. [Patrik]
2012-03-02 12:39:18 +00:00
patrik
43253cea53 o [NSE] Added authentication support to MongoDB library and modified existing
scripts to support it. Added the script mongodb-brute to perform password
  brute force guessing. [Patrik]
2012-03-02 12:28:30 +00:00
patrik
f8784f8829 o [NSE] Added the script broadcast-networker-discover that discoverer EMC
Networker servers on the LAN. [Patrik]
2012-02-25 16:06:30 +00:00
patrik
8f7461b357 o [NSE] Added a Network Data Management Protocol (ndmp) library and the
scripts:
  + ndmp-version - retrieves version information
  + ndmp-fs-info - retrieves information about remote filesystems
  [Patrik]
2012-02-19 14:56:17 +00:00
patrik
13b6b01e21 o [NSE] Added the script http-vuln-cve2010-2861 to detect the Cold Fusion
CVE-2010-2861 directory traversal vulnerability. [Micah Hoffman]
2012-02-19 14:40:01 +00:00
patrik
80e998b91f o [NSE] Added support for edns-client-subnet requests to the DNS library and
the script dns-client-subnet-scan that scans for addresses resolved from
  different subnets. [John Bond]
2012-02-19 13:22:20 +00:00
david
9258c496cd Add asn-to-prefix.nse to "external" and "safe". 2012-02-06 08:20:54 +00:00
david
c68af471b0 Add asn-to-prefix.nse by John Bond. 2012-02-06 08:20:53 +00:00
patrik
908ac61fb0 o [NSE] Added a rsync library and two new script:
+ rsync-list-modules - list available rsync modules
  + rsync-brute - attempts to brute force passwords against a rsync module
  [Patrik]
2012-02-05 10:10:59 +00:00
patrik
f75c3678a0 o [NSE] Added voldemort-info, that retrieves cluster and store information
from the Voldemort distributed key-value store. [Patrik]
2012-01-31 20:32:37 +00:00
patrik
321e63a86d o [NSE] Added http-qnap-nas-info, that retrieves the model, firware version,
and enabled services from a QNAP Network Attached Storage (NAS) device.
  [Brendan Coles]
2012-01-31 20:22:42 +00:00
patrik
5575943ea0 o [NSE] Added url-snarf. The script sniffs the network for URLs in HTTP
traffic and prints the URL together with the originating IP. [Patrik]
2012-01-29 08:23:30 +00:00
patrik
3633c502b6 o [NSE] Added http-auth-finder. The scripts spiders a site looking for URLs
requiring form- or HTTP-based authentication. [Patrik]
2012-01-29 06:23:35 +00:00
david
22c17fa05d Add cccam-version.nse. 2012-01-27 01:13:35 +00:00
patrik
0ad978d3b8 o [NSE] Added the scripts xdmcp-discover, broadcast-xdmcp-discover and the
X Display Manager Control Protocol (xdmcp) library. The scripts discover
  hosts either using unicast or broadcast and try to detect supported
  authentication and authorization mechanisms. [Patrik]
2012-01-26 19:35:19 +00:00
patrik
5b05cbe46e o [NSE] Added script iax2-brute and supporting IAX2 library that performs
brute-force password guessing against the Asterisk IAX2 protocol. [Patrik]
2012-01-24 20:55:29 +00:00
patrik
5ef9f2a70d o [NSE] Added script broadcast-dhcp6-discover and supporting DHCPv6 library.
The script retrieves and prints an IPv6 address and some of the DHCP6
  options. [Patrik]
2012-01-24 19:54:50 +00:00
patrik
1670f59210 o [NSE] Added script dns-srv-enum that enumerates DNS service records for a
given domain. [Patrik]
2012-01-19 00:49:48 +00:00
patrik
2a2f64590a o [NSE] Added script nessus-xmlrpc-brute that performs brute force password
guessing against the Nessus web GUI. [Patrik]
2012-01-17 11:53:23 +00:00
patrik
c579d844ba o [NSE] Added script dns-nsid by John Bond, that retrieves name server ID and
version information.

o [NSE] Applied patch to DNS library by John Bond that adds support for the
  CHAOS class and NSID requests.
2012-01-17 11:37:19 +00:00
patrik
ef4be879e5 o [NSE] Added broadcast-ripng-discover that discovers IPv6 RIPng routers and
displays their routing information. [Patrik]
2012-01-14 18:44:07 +00:00
david
541091eed1 Put http-generator in default. 2012-01-12 19:45:13 +00:00
david
1a9700019f Add http-generator.nse by Michael Kohl. 2012-01-12 19:45:11 +00:00
patrik
956c9ffe53 o [NSE] Added the script broadcast-pppoe-discover that discovers PPPoE servers
on the LAN using the PPPoE Discovery Protocol. [Patrik]
2012-01-10 18:22:39 +00:00
patrik
0267b56a27 o [NSE] Added the script membase-brute that performs password brute force
password guessing against the Membase TAP protocol. [Patrik]

o [NSE] Added the script membase-http-info that retrieves information from the
  Couchbase distributed key-value pair server. [Patrik]
2012-01-10 18:19:21 +00:00
patrik
74d5ff04ef o [NSE] Added the script http-vuln-cve2009-3960 that detects and exploits the
CVE 2009-3960 XML injection vulnerability in Adobe products. [Hani
  Benhabiles]
2012-01-02 19:48:42 +00:00
patrik
2269e76438 o [NSE] Added a natpmp library and the script nat-pmp-mapport that allows
NAT mapping of external TCP and UDP ports to internal addresses. [Patrik]
2012-01-02 11:41:21 +00:00
patrik
f5b14a2099 o [NSE] Added the script riak-http-info that lists version and statistics
information from the Basho Riak distributed database. [Patrik]
2012-01-02 11:37:38 +00:00
patrik
54983f8127 o [NSE] Added the script socks-auth-info that lists supported SOCKS 5
authentication mechanisms. [Patrik]
2012-01-02 11:34:27 +00:00
patrik
b4fcd5e5fa o [NSE] Added the script memcached-info that lists version and statistics
information from the distributed memory object caching service memcached
  [Patrik]
2012-01-02 11:30:18 +00:00
patrik
4118ee064b o [NSE] Added the script redis-info that lists version and statistic information
gathered from the Redis network key-value store. [Patrik]

o [NSE] Added the script redis-brute that performs brute force password
  guessing against the Redis network key-value store. [Patrik]
2012-01-02 11:27:06 +00:00
patrik
3491fdc1fa o [NSE] Added the script http-proxy-brute that performs brute force password
guessing against HTTP proxy servers. [Patrik]
2012-01-02 11:21:57 +00:00
patrik
0ee55f4651 o [NSE] Added the script socks-brute that performs brute force password
guessing against SOCKS 5 servers. [Patrik]
2012-01-02 11:15:34 +00:00
patrik
cac7c27dcb o [NSE] Added the script vmauthd-brute that performs brute force password
guessing against the VMware authentication daemon. [Patrik]
2012-01-02 11:12:46 +00:00
patrik
4e7db06f0c o [NSE] Added script broadcast-wpad-discover which detects proxy servers on the
network by using the Web Proxy Auto Discover Protocol (WPAD). [Patrik]
2011-12-29 14:43:37 +00:00
patrik
1b5518cc63 Updated the script categories for dhcp-discover [Patrik] 2011-12-29 08:19:58 +00:00
fyodor
93c0ae4f44 Add new telnet-encryption script 2011-12-28 00:57:48 +00:00
patrik
bb7d5a526f o [NSE] Added script dns-blacklist that performs DNSBL checks of given or
scanned IP addresses against multiple DNSBL services. [Patrik]
2011-12-26 14:22:25 +00:00
patrik
ca63146635 o [NSE] Added the script http-open-redirect that finds web pages that do not
properly validate parameters used for HTTP redirects. [Martin Swende]
2011-12-18 12:58:56 +00:00