dmiller
c98a547104
Check for RealVNC auth bypass even if other auth types are offered
2017-03-15 16:19:55 +00:00
dmiller
1164a8e7df
Update output section for realvnc-auth-bypass
2017-03-03 20:35:08 +00:00
dmiller
2a5b23f025
Make realvnc-auth-bypass a vulns script, store result for other scripts to exploit
2017-03-03 19:39:56 +00:00
dmiller
39915551a4
NSEdoc fixes and cross-references
2017-01-23 20:37:22 +00:00
dmiller
f4619edece
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
dmiller
d36c08dcf5
Re-indent some scripts. Whitespace-only commit
...
https://secwiki.org/w/Nmap/Code_Standards
2014-01-31 13:02:29 +00:00
dmiller
620f9fdb34
Remove trailing whitespace in lua files
...
Whitespace is not significant, so this should not be a problem.
https://secwiki.org/w/Nmap/Code_Standards
2014-01-23 21:51:58 +00:00
batrick
000f6dc4d9
Lua 5.2 upgrade [1] for NSE.
...
[1] http://seclists.org/nmap-dev/2012/q2/34
2012-05-27 08:53:32 +00:00
fyodor
8b88d901a9
Remove 3 vuln scripts from default category as discussed at http://seclists.org/nmap-dev/2011/q3/732
2011-09-07 20:40:51 +00:00
david
ccd901f918
Put realvnc-auth-bypass.nse in "auth" category.
2010-12-13 17:30:06 +00:00
david
c0b8514b4d
In realvnc-auth-bypass, check the status in socket receive operations
...
instead of checking for result == "TIMEOUT".
2010-11-18 22:54:16 +00:00
david
3c89e089fc
Change calls in these forms:
...
socket:connect(host.ip, port.number)
socket:connect(host.ip, port.number, port.protocol)
to this:
socket:connect(host, port)
connect can take host and port tables now, and the default protocol is
taken from the port table if possible.
2010-08-16 18:59:30 +00:00
david
baeb2e8f98
Add @output sections to realvnc-auth-bypass.nse and sql-injection.nse
...
from Gutek. Also documents the @args of sql-injection.nse.
2010-04-02 15:31:24 +00:00
fyodor
785126a4a9
Some minor canonicalization of the author fileds in NSE scripts
2010-01-19 08:28:30 +00:00
fyodor
77ab5c4305
Remove email addresses from scripts as discussed in this thread: http://seclists.org/nmap-dev/2009/q4/466
2009-11-24 08:49:02 +00:00
fyodor
fea1ab7c39
Moved a bunch of scripts to the "safe" category, and some others to "intrusive" after
...
discussion on nmap-dev about how best to handle these. I also updated the docs and
am about to regenerate script.db. See this thread for more info:
http://seclists.org/nmap-dev/2009/q3/1008.html
2009-10-01 19:07:16 +00:00
david
6fbc8868a9
Rename scripts (almost all of them) to make their names more consistent and
...
make them look better in output. The full list of changes is
anonFTP => ftp-anon
ASN => asn-query
brutePOP3 => pop3-brute
bruteTelnet => telnet-brute
daytimeTest => daytime
dns-safe-recursion-port => dns-random-srcport
dns-safe-recursion-txid => dns-random-txid
dns-test-open-recursion => dns-recursion
ftpbounce => ftp-bounce
HTTPAuth => http-auth
HTTP_open_proxy => http-open-proxy
HTTPpasswd => http-passwd
HTTPtrace => http-trace
iax2Detect => iax2-version
ircServerInfo => irc-info
ircZombieTest => irc-zombie
MSSQLm => ms-sql-info
MySQLinfo => mysql-info
popcapa => pop3-capabilities
PPTPversion => pptp-version
promiscuous => sniffer-detect
RealVNC_auth_bypass => realvnc-auth-bypass
robots => robots.txt
showHTMLTitle => html-title
showOwner => identd-owners
skype_v2-version => skypev2-version
smb-enumdomains => smb-enum-domains
smb-enumsessions => smb-enum-sessions
smb-enumshares => smb-enum-shares
smb-enumusers => smb-enum-users
smb-serverstats => smb-server-stats
smb-systeminfo => smb-system-info
SMTPcommands => smtp-commands
SMTP_openrelay_test => smtp-open-relay
SNMPcommunitybrute => snmp-brute
SNMPsysdescr => snmp-sysdescr
SQLInject => sql-injection
SSH-hostkey => ssh-hostkey
SSHv1-support => sshv1
SSLv2-support => sslv2
strangeSMTPport => smtp-strangeport
UPnP-info => upnp-info
xamppDefaultPass => xampp-default-auth
zoneTrans => zone-transfer
2008-11-06 02:52:59 +00:00