PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-24 00:19:01 +00:00
Code Issues Projects Releases Wiki Activity
Files
0ad978d3b81a66c3c4eee97534330e8799558d3d
nmap/scripts
History
patrik 0ad978d3b8 o [NSE] Added the scripts xdmcp-discover, broadcast-xdmcp-discover and the 
X Display Manager Control Protocol (xdmcp) library. The scripts discover
  hosts either using unicast or broadcast and try to detect supported
  authentication and authorization mechanisms. [Patrik]
2012-01-26 19:35:19 +00:00
..
address-info.nse
Exclude ::1 from being an IPv4-compatible address (0.0.0.1) in address-info.
2011-12-23 21:14:53 +00:00
afp-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
afp-ls.nse
o [NSE] Added the afp-ls script that lists files accessible on remote
2011-04-05 08:31:34 +00:00
afp-path-vuln.nse
Updated some of the vulnerability scripts to use the new vulnerability library.
2011-11-09 10:08:19 +00:00
afp-serverinfo.nse
o [NSE] Made the following scripts in the default category:
2011-07-18 09:50:18 +00:00
afp-showmount.nse
o Moved afp.username and afp.password arguments to afp-library.
2011-04-03 12:53:12 +00:00
amqp-info.nse
Update and canonicalize a bunch of script descriptions
2011-11-07 04:08:29 +00:00
asn-query.nse
Fix a bug in dns.lua: ensure that dns.query() always return two values (status and response).
2011-09-22 18:00:44 +00:00
auth-owners.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
auth-spoof.nse
Do copyediting of NSEDoc. This is a first pass up to ms-sql-xp-cmdshell.
2010-07-09 23:32:18 +00:00
backorifice-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
backorifice-info.nse
Adding a dependency for backorifice-brute to backorifice-info
2011-06-30 15:47:32 +00:00
banner.nse
Merge r18689:r19511 from /nmap-exp/djalal/nse-rules.
2010-08-06 16:40:03 +00:00
bitcoin-getaddr.nse
switched capitalization from BitCoin to Bitcoin as the latter seems to be more standard
2012-01-02 02:51:48 +00:00
bitcoin-info.nse
switched capitalization from BitCoin to Bitcoin as the latter seems to be more standard
2012-01-02 02:51:48 +00:00
bitcoinrpc-info.nse
Minor rewording
2011-11-07 06:00:07 +00:00
bittorrent-discovery.nse
o [NSE] check script arguments in the prerule to avoid running the script if they are missing.
2011-11-09 12:31:48 +00:00
broadcast-avahi-dos.nse
o [NSE] Added broadcast-avahi-dos.nse, which tries to detect if the
2011-05-02 23:38:18 +00:00
broadcast-db2-discover.nse
o [NSE] Split script db2-discover into two scripts, adding a new
2011-07-10 08:01:26 +00:00
broadcast-dhcp6-discover.nse
o [NSE] Added script broadcast-dhcp6-discover and supporting DHCPv6 library.
2012-01-24 19:54:50 +00:00
broadcast-dhcp-discover.nse
Added privilege checks to the prerules to prevent scripts from failing at
2012-01-13 14:23:55 +00:00
broadcast-dns-service-discovery.nse
Remove "-p 5353 <target>" from the @usage of
2011-04-03 21:00:37 +00:00
broadcast-dropbox-listener.nse
maxn is deprecated
2011-05-11 15:13:46 +00:00
broadcast-listener.nse
Added privilege checks to the prerules to prevent scripts from failing at
2012-01-13 14:23:55 +00:00
broadcast-ms-sql-discover.nse
o [NSE] Updated the categories of the following scripts:
2011-07-11 22:03:17 +00:00
broadcast-netbios-master-browser.nse
very minor nsedoc improvements
2012-01-07 03:04:18 +00:00
broadcast-novell-locate.nse
trivial nsedoc change
2011-06-30 08:59:30 +00:00
broadcast-pc-anywhere.nse
fix typo
2012-01-02 02:52:22 +00:00
broadcast-pc-duo.nse
o [NSE] Added the script broadcast-pc-anywhere that discovers host running the
2011-12-18 09:33:38 +00:00
broadcast-ping.nse
Be more explicit about how to enable newtargets.
2011-10-07 07:51:51 +00:00
broadcast-pppoe-discover.nse
Added privilege checks to the prerules to prevent scripts from failing at
2012-01-13 14:23:55 +00:00
broadcast-rip-discover.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
broadcast-ripng-discover.nse
o [NSE] Added broadcast-ripng-discover that discovers IPv6 RIPng routers and
2012-01-14 18:44:07 +00:00
broadcast-sybase-asa-discover.nse
o [NSE] Added the script broadcast-sybase-asa-discover that discovers Sybase
2011-11-20 12:33:53 +00:00
broadcast-upnp-info.nse
Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG
2011-01-14 10:20:51 +00:00
broadcast-wake-on-lan.nse
o [NSE] Added the script broadcast-wake-on-lan that wakes systems from sleep
2011-12-16 18:00:34 +00:00
broadcast-wpad-discover.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
broadcast-wsdd-discover.nse
Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG
2011-01-14 10:20:51 +00:00
broadcast-xdmcp-discover.nse
o [NSE] Added the scripts xdmcp-discover, broadcast-xdmcp-discover and the
2012-01-26 19:35:19 +00:00
citrix-brute-xml.nse
Change " \n" to just "\n" where appropriate in NSE. Leading newlines are
2010-09-30 05:03:39 +00:00
citrix-enum-apps-xml.nse
Spell-check NSEDoc.
2010-07-19 16:29:48 +00:00
citrix-enum-apps.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
citrix-enum-servers-xml.nse
Do copyediting of NSEDoc. This is a first pass up to ms-sql-xp-cmdshell.
2010-07-09 23:32:18 +00:00
citrix-enum-servers.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
couchdb-databases.nse
Edit some script descriptions for better line breaks when rendered as
2010-07-17 16:47:31 +00:00
couchdb-stats.nse
Edit some script descriptions for better line breaks when rendered as
2010-07-17 16:47:31 +00:00
creds-summary.nse
very minor nsedoc improvements
2012-01-07 03:04:18 +00:00
cvs-brute-repository.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
cvs-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
daap-get-library.nse
Change " \n" to just "\n" where appropriate in NSE. Leading newlines are
2010-09-30 05:03:39 +00:00
daytime.nse
Add @output sections to these scripts:
2010-03-31 21:45:21 +00:00
db2-das-info.nse
Addressed a condition in db2-das-info.nse where the script would crash
2011-02-16 00:13:38 +00:00
db2-discover.nse
Fix a typo in category name
2011-07-21 05:12:33 +00:00
dhcp-discover.nse
o [NSE] Removed DoS code from dhcp-discover and placed it into the discover and
2011-12-29 08:07:26 +00:00
dns-blacklist.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
dns-brute.nse
o [NSE] added a debug message in the prerule to show that some arguments are missing.
2011-11-09 12:39:01 +00:00
dns-cache-snoop.nse
Do copyediting of NSEDoc. This is a first pass up to ms-sql-xp-cmdshell.
2010-07-09 23:32:18 +00:00
dns-fuzz.nse
Update some script nsedoc descriptions for consistency. The description should almost always start with an active verb and never with the script name or 'this script'. Admittedly that makes the first sentence a fragment. The first sentence should be capitalized
2011-09-11 20:50:56 +00:00
dns-nsec-enum.nse
Change the "name" member of a decoded NSEC record to be called
2011-03-27 05:07:16 +00:00
dns-nsid.nse
o [NSE] Added script dns-nsid by John Bond, that retrieves name server ID and
2012-01-17 11:37:19 +00:00
dns-random-srcport.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
dns-random-txid.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
dns-recursion.nse
Make the set of script "default and intrusive" empty.
2011-04-30 19:21:38 +00:00
dns-service-discovery.nse
Went through all the new (since 5.51) scripts and improved (I hope) the nsedoc descriptions a bit and made some other very minor cleanups
2011-06-29 01:29:14 +00:00
dns-srv-enum.nse
Add support for adding discovered hosts as new targets. Added XMPP client-to-
2012-01-24 17:56:50 +00:00
dns-update.nse
I've been putting periods at the end of these single sentence fragment descriptions for consistency, although I don't really know which way is best. When there are multiple setences in that first paragraph, we obviously need the paragraph even after an initial fragment. So I figured that we might as well include it when the fragment is all there is. But maybe when there is just one fragment, it looks better without a period. Who knows, and I guess it's not a particularly critical decision. But dns-update.nse now has a period in any case :)
2011-01-14 21:06:28 +00:00
dns-zeustracker.nse
typo fix
2012-01-02 02:49:42 +00:00
dns-zone-transfer.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
domcon-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
domcon-cmd.nse
Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry
2011-07-27 03:28:13 +00:00
domino-enum-users.nse
Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry
2011-07-27 03:28:13 +00:00
dpap-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
drda-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
drda-info.nse
changed portrule to include both ibm-db2 and drda
2010-08-14 11:52:18 +00:00
epmd-info.nse
Add epmd-info script from Toni Ruottu.
2011-04-04 18:28:33 +00:00
finger.nse
Add @output to finger.nse and telnet-brute.nse thanks to Gutek.
2010-03-31 23:25:39 +00:00
firewalk.nse
Consistent naming of the address fields between IPv4 and IPv6.
2012-01-21 14:46:00 +00:00
ftp-anon.nse
Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry
2011-07-27 03:28:13 +00:00
ftp-bounce.nse
Make the set of script "default and intrusive" empty.
2011-04-30 19:21:38 +00:00
ftp-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
ftp-libopie.nse
Updated some of the vulnerability scripts to use the new vulnerability library.
2011-11-09 10:08:19 +00:00
ftp-proftpd-backdoor.nse
o [NSE] Updated the categories of the following scripts:
2011-07-11 22:03:17 +00:00
ftp-vsftpd-backdoor.nse
Updated some of the vulnerability scripts to use the new vulnerability library.
2011-11-09 10:08:19 +00:00
ftp-vuln-cve2010-4221.nse
Updated some of the vulnerability scripts to use the new vulnerability library.
2011-11-09 10:08:19 +00:00
ganglia-info.nse
Update and canonicalize a bunch of script descriptions
2011-11-07 04:08:29 +00:00
giop-info.nse
o [NSE] Made the following scripts in the default category:
2011-07-18 09:50:18 +00:00
gopher-ls.nse
Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry
2011-07-27 03:28:13 +00:00
hadoop-datanode-info.nse
Whitespace in hbase-* hadoop-*.
2012-01-14 01:03:18 +00:00
hadoop-jobtracker-info.nse
Make hbase-master-info.nse be silent if it doesn't learn anything.
2012-01-14 01:03:19 +00:00
hadoop-namenode-info.nse
Make hadoop-namenode-info be silent when it doesn't learn anything.
2012-01-14 01:03:21 +00:00
hadoop-secondary-namenode-info.nse
Avoid crashes in hadoop-secondary-namenode-info.nse.
2012-01-14 01:03:20 +00:00
hadoop-tasktracker-info.nse
Whitespace in hbase-* hadoop-*.
2012-01-14 01:03:18 +00:00
hbase-master-info.nse
Make hbase-master-info.nse be silent if it doesn't learn anything.
2012-01-14 01:03:18 +00:00
hbase-region-info.nse
Whitespace in hbase-* hadoop-*.
2012-01-14 01:03:18 +00:00
hddtemp-info.nse
Add gopher-ls and hddtemp-info @usage, adapted from Toni Ruotto.
2011-01-15 16:33:06 +00:00
hostmap.nse
Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG
2011-01-14 10:20:51 +00:00
http-affiliate-id.nse
Went through all the new (since 5.51) scripts and improved (I hope) the nsedoc descriptions a bit and made some other very minor cleanups
2011-06-29 01:29:14 +00:00
http-apache-negotiation.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
http-auth.nse
o [NSE] Added path argument to the http-auth script and changed so that script
2011-12-19 18:39:18 +00:00
http-awstatstotals-exec.nse
Improve some NSEDoc descriptions
2011-09-11 20:44:07 +00:00
http-axis2-dir-traversal.nse
Update some script nsedoc descriptions for consistency. The description should almost always start with an active verb and never with the script name or 'this script'. Admittedly that makes the first sentence a fragment. The first sentence should be capitalized
2011-09-11 20:50:56 +00:00
http-backup-finder.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
http-barracuda-dir-traversal.nse
Went through all the new (since 5.51) scripts and improved (I hope) the nsedoc descriptions a bit and made some other very minor cleanups
2011-06-29 01:29:14 +00:00
http-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
http-cakephp-version.nse
Went through all the new (since 5.51) scripts and improved (I hope) the nsedoc descriptions a bit and made some other very minor cleanups
2011-06-29 01:29:14 +00:00
http-cors.nse
Update and canonicalize a bunch of script descriptions
2011-11-07 04:08:29 +00:00
http-date.nse
Whitespace.
2011-07-25 23:33:16 +00:00
http-default-accounts.nse
Update some script nsedoc descriptions for consistency. The description should almost always start with an active verb and never with the script name or 'this script'. Admittedly that makes the first sentence a fragment. The first sentence should be capitalized
2011-09-11 20:50:56 +00:00
http-domino-enum-passwords.nse
Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry
2011-07-27 03:28:13 +00:00
http-email-harvest.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
http-enum.nse
added documentation for new script-arg
2011-01-03 03:51:11 +00:00
http-favicon.nse
Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry
2011-07-27 03:28:13 +00:00
http-form-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
http-generator.nse
Remove --- from some non-NSEDoc comments.
2012-01-26 17:07:43 +00:00
http-google-malware.nse
Update some script nsedoc descriptions for consistency. The description should almost always start with an active verb and never with the script name or 'this script'. Admittedly that makes the first sentence a fragment. The first sentence should be capitalized
2011-09-11 20:50:56 +00:00
http-grep.nse
o [NSE] Added the script http-grep that attempts to match web pages and urls
2011-12-11 19:44:26 +00:00
http-headers.nse
Updates the script to use stdnse.get_script_args() instead of reading the arguments from the registry and removes extra commented lines.
2011-10-07 07:01:08 +00:00
http-iis-webdav-vuln.nse
Bring in changes from my experimental brange, nmap-http
2010-10-27 03:08:08 +00:00
http-joomla-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
http-litespeed-sourcecode-download.nse
Update some script nsedoc descriptions for consistency. The description should almost always start with an active verb and never with the script name or 'this script'. Admittedly that makes the first sentence a fragment. The first sentence should be capitalized
2011-09-11 20:50:56 +00:00
http-majordomo2-dir-traversal.nse
Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry
2011-07-27 03:28:13 +00:00
http-malware-host.nse
Use shortport.http where appropriate.
2010-08-09 22:30:50 +00:00
http-method-tamper.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
http-methods.nse
Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry
2011-07-27 03:28:13 +00:00
http-open-proxy.nse
Removed declarations of unused variables.
2012-01-19 22:03:06 +00:00
http-open-redirect.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
http-passwd.nse
Add more http-passwd payloads from Ange Gutek.
2010-11-11 19:02:17 +00:00
http-php-version.nse
Added the new hash for PHP 5.3.7 and 5.3.8 credits and extended the elephant logo hash to include the new versions. PHP 5.3.7 contained a nasty bug (https://bugs.php.net/bug.php?id=55439) and was quickly replaced by 5.3.8 after a couple of days.
2011-09-04 14:41:53 +00:00
http-proxy-brute.nse
o [NSE] Added the script http-proxy-brute that performs brute force password
2012-01-02 11:21:57 +00:00
http-put.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
http-robots.txt.nse
Rename a couple http scripts to make it more clear that they use the http protocol and for consistency with other script names
2010-11-20 04:22:51 +00:00
http-robtex-reverse-ip.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
http-title.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
http-trace.nse
Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry
2011-07-27 03:28:13 +00:00
http-unsafe-output-escaping.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
http-userdir-enum.nse
o [NSE] Made changes to the categories of the following scripts. Their new
2011-10-22 19:00:33 +00:00
http-vhosts.nse
Fix an indexing bug in http-vhosts.nse. Found by Daniel Miller.
2011-07-18 20:44:22 +00:00
http-vmware-path-vuln.nse
Remove 3 vuln scripts from default category as discussed at http://seclists.org/nmap-dev/2011/q3/732
2011-09-07 20:40:51 +00:00
http-vuln-cve2009-3960.nse
o [NSE] Added the script http-vuln-cve2009-3960 that detects and exploits the
2012-01-02 19:48:42 +00:00
http-vuln-cve2011-3192.nse
Updated some of the vulnerability scripts to use the new vulnerability library.
2011-11-09 10:08:19 +00:00
http-vuln-cve2011-3368.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
http-waf-detect.nse
Improve some NSEDoc descriptions
2011-09-11 20:44:07 +00:00
http-wordpress-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
http-wordpress-enum.nse
o [NSE] Made changes to the categories of the following scripts. Their new
2011-10-22 19:00:33 +00:00
http-wordpress-plugins.nse
renamed http-wp-enum and http-wp-plugins to http-wordpress-* for consistency with the naming of http-wordpress-brute
2011-09-30 05:49:53 +00:00
iax2-brute.nse
o [NSE] Added script iax2-brute and supporting IAX2 library that performs
2012-01-24 20:55:29 +00:00
iax2-version.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
imap-brute.nse
minor updates to the nsedoc descriptions for some scripts
2011-09-11 18:26:37 +00:00
imap-capabilities.nse
o [NSE] Added the script imap-brute that performs brute force password
2011-07-21 06:14:02 +00:00
informix-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
informix-query.nse
Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry
2011-07-27 03:28:13 +00:00
informix-tables.nse
Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry
2011-07-27 03:28:13 +00:00
ip-geolocation-geobytes.nse
Change CRLF line endings to LF in ip-geolocation-*.nse.
2011-11-02 16:50:38 +00:00
ip-geolocation-geoplugin.nse
Change CRLF line endings to LF in ip-geolocation-*.nse.
2011-11-02 16:50:38 +00:00
ip-geolocation-ipinfodb.nse
Change CRLF line endings to LF in ip-geolocation-*.nse.
2011-11-02 16:50:38 +00:00
ip-geolocation-maxmind.nse
Change CRLF line endings to LF in ip-geolocation-*.nse.
2011-11-02 16:50:38 +00:00
ipidseq.nse
Avoid bloating the registry by using variables to transfer information from
2011-06-20 21:06:14 +00:00
ipv6-node-info.nse
Consistent naming of the address fields between IPv4 and IPv6.
2012-01-21 14:46:00 +00:00
irc-botnet-channels.nse
Minor updates to description text
2011-12-29 10:54:55 +00:00
irc-brute.nse
Fixed a bug where the script would crash if the error code could not be
2012-01-19 00:38:00 +00:00
irc-info.nse
o [NSE] Made irc-info.nse handle the case where the MOTD is missing.
2011-09-21 05:09:26 +00:00
irc-unrealircd-backdoor.nse
Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry
2011-07-27 03:28:13 +00:00
iscsi-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
iscsi-info.nse
o [NSE] Updated the categories of the following scripts:
2011-07-11 22:03:17 +00:00
jdwp-version.nse
Small patch to jdwp-version.nse to address a corner case false positive.
2011-10-02 22:44:21 +00:00
krb5-enum-users.nse
Update and canonicalize a bunch of script descriptions
2011-11-07 04:08:29 +00:00
ldap-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
ldap-novell-getpass.nse
Went through all the new (since 5.51) scripts and improved (I hope) the nsedoc descriptions a bit and made some other very minor cleanups
2011-06-29 01:29:14 +00:00
ldap-rootdse.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
ldap-search.nse
Added support for the LDAP extensibleMatch filter to ldap.lua. LDAP searches using this take the following format:
2011-10-31 00:27:03 +00:00
lexmark-config.nse
Whitespace in lexmark-config.nse.
2010-12-15 18:57:22 +00:00
lltd-discovery.nse
lltd-discovery bug fix
2011-10-04 00:07:10 +00:00
maxdb-info.nse
o [NSE] Added maxdb-info script that tries to enumerate version and database
2011-11-17 22:12:59 +00:00
membase-brute.nse
o [NSE] Added the script membase-brute that performs password brute force
2012-01-10 18:19:21 +00:00
membase-http-info.nse
o [NSE] Added the script membase-brute that performs password brute force
2012-01-10 18:19:21 +00:00
memcached-info.nse
o [NSE] Added the script memcached-info that lists version and statistics
2012-01-02 11:30:18 +00:00
metasploit-xmlrpc-brute.nse
o [NSE] Re-enabled support for guessing the username in addition to password
2011-11-11 05:52:52 +00:00
modbus-discover.nse
Minor NSEDoc summary cleanup
2011-01-21 08:28:38 +00:00
mongodb-databases.nse
o [NSE] Applied patch to add additional version information to Mongodb scripts
2011-12-20 18:54:03 +00:00
mongodb-info.nse
o [NSE] Applied patch to add additional version information to Mongodb scripts
2011-12-20 18:54:03 +00:00
ms-sql-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
ms-sql-config.nse
o [NSE] Merged the ms-sql branch with several improvements and changes to the
2011-02-26 22:41:10 +00:00
ms-sql-dump-hashes.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
ms-sql-empty-password.nse
removed usage of deprecated table.getn
2011-05-11 14:41:06 +00:00
ms-sql-hasdbaccess.nse
o [NSE] Merged the ms-sql branch with several improvements and changes to the
2011-02-26 22:41:10 +00:00
ms-sql-info.nse
In ms-sql-info, change the hostrule conditions
2011-09-12 16:36:06 +00:00
ms-sql-query.nse
o [NSE] Merged the ms-sql branch with several improvements and changes to the
2011-02-26 22:41:10 +00:00
ms-sql-tables.nse
o [NSE] Merged the ms-sql branch with several improvements and changes to the
2011-02-26 22:41:10 +00:00
ms-sql-xp-cmdshell.nse
o [NSE] Merged the ms-sql branch with several improvements and changes to the
2011-02-26 22:41:10 +00:00
mysql-audit.nse
very minor nsedoc improvements
2012-01-07 03:04:18 +00:00
mysql-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
mysql-databases.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
mysql-empty-password.nse
Fixed a number of incorrect receives and replaced them with receive_bytes.
2010-08-24 20:25:46 +00:00
mysql-info.nse
Do copyediting of NSEDoc up through pgsql-brute.
2010-07-12 06:21:03 +00:00
mysql-users.nse
o [NSE] Made changes to the categories of the following scripts. Their new
2011-10-22 19:00:33 +00:00
mysql-variables.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
nat-pmp-info.nse
o [NSE] Added a natpmp library and the script nat-pmp-mapport that allows
2012-01-02 11:41:21 +00:00
nat-pmp-mapport.nse
o [NSE] Added a natpmp library and the script nat-pmp-mapport that allows
2012-01-02 11:41:21 +00:00
nbstat.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
ncp-enum-users.nse
o [NSE] Made changes to the categories of the following scripts. Their new
2011-10-22 19:00:33 +00:00
ncp-serverinfo.nse
o [NSE] Made the following scripts in the default category:
2011-07-18 09:50:18 +00:00
nessus-brute.nse
Update and canonicalize a bunch of script descriptions
2011-11-07 04:08:29 +00:00
nessus-xmlrpc-brute.nse
o [NSE] Added script nessus-xmlrpc-brute that performs brute force password
2012-01-17 11:53:23 +00:00
netbus-auth-bypass.nse
Minor typo fixes
2011-06-03 09:24:51 +00:00
netbus-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
netbus-info.nse
Apply a patch from Toni Ruottu with some small misc. improvements to the netbus-* scripts. Also I changed netbus-auth-bypass to the safe category as recommended by Toni
2011-01-15 21:28:45 +00:00
netbus-version.nse
Apply a patch from Toni Ruottu with some small misc. improvements to the netbus-* scripts. Also I changed netbus-auth-bypass to the safe category as recommended by Toni
2011-01-15 21:28:45 +00:00
nexpose-brute.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
nfs-ls.nse
Fix a typo in a comment.
2011-04-22 22:21:43 +00:00
nfs-showmount.nse
Use the new get_script_args() function to parse script arguments and clean some whitespaces.
2010-08-17 01:58:47 +00:00
nfs-statfs.nse
Normalize tab.lua usage so that a call to tab.nextrow comes after (not
2010-12-30 21:08:25 +00:00
nping-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
nrpe-enum.nse
Fix the nrpe-enum portrule. It was returning a function, thus always
2011-02-01 21:25:46 +00:00
ntp-info.nse
Add a default timeout of 5000 ms to the ntp-info script, and don't try
2009-12-21 20:24:45 +00:00
ntp-monlist.nse
o [NSE] Added ipv6 support to the wsdd, dnssd and upnp libraries. Applied
2011-06-16 05:29:42 +00:00
omp2-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
omp2-enum-targets.nse
Don't add a blank line at the top of the report. Other scripts don't.
2011-07-09 16:39:12 +00:00
openlookup-info.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
openvas-otp-brute.nse
o [NSE] Added the script openvas-otp-brute that performs password auditing
2011-11-10 20:50:04 +00:00
oracle-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
oracle-enum-users.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
oracle-sid-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
ovs-agent-version.nse
Update ovs-agent-version.nse with a signature from version 3.0.1.
2011-09-23 21:42:06 +00:00
p2p-conficker.nse
Fix incorrect (broken) return value in p2p-conficker.nse. Spotted by
2011-07-18 20:40:47 +00:00
path-mtu.nse
fix whitespace inconsistencies from copy-and-pastes
2011-05-06 23:48:41 +00:00
pgsql-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
pjl-ready-message.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
pop3-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
pop3-capabilities.nse
Merge r18689:r19511 from /nmap-exp/djalal/nse-rules.
2010-08-06 16:40:03 +00:00
pptp-version.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
qscan.nse
Avoid bloating the registry by using variables to transfer information from
2011-06-20 21:06:14 +00:00
quake3-info.nse
very minor nsedoc improvements
2012-01-07 03:04:18 +00:00
quake3-master-getservers.nse
Went through all the new (since 5.51) scripts and improved (I hope) the nsedoc descriptions a bit and made some other very minor cleanups
2011-06-29 01:29:14 +00:00
realvnc-auth-bypass.nse
Remove 3 vuln scripts from default category as discussed at http://seclists.org/nmap-dev/2011/q3/732
2011-09-07 20:40:51 +00:00
redis-brute.nse
o [NSE] Added the script redis-info that lists version and statistic information
2012-01-02 11:27:06 +00:00
redis-info.nse
o [NSE] Added the script redis-info that lists version and statistic information
2012-01-02 11:27:06 +00:00
resolveall.nse
o [NSE] Add a final note in the output about the 'newtargets' usage.
2011-11-09 12:29:14 +00:00
reverse-index.nse
Minor updates to description text
2011-12-29 10:54:55 +00:00
rexec-brute.nse
Minor updates to description text
2011-12-29 10:54:55 +00:00
riak-http-info.nse
o [NSE] Added the script riak-http-info that lists version and statistics
2012-01-02 11:37:38 +00:00
rlogin-brute.nse
Minor updates to description text
2011-12-29 10:54:55 +00:00
rmi-dumpregistry.nse
Use java-rmi for the the Java RMI service name. Suggested by martin
2011-06-21 00:03:16 +00:00
rpcinfo.nse
Oops, I forgot to add the comment symbols to my nsedoc @output changes to this script.
2011-03-19 18:58:31 +00:00
rtsp-methods.nse
Removed e-mail address from author variable in rtsp-methods and irc-brute
2011-11-11 15:31:50 +00:00
rtsp-url-brute.nse
Update and canonicalize a bunch of script descriptions
2011-11-07 04:08:29 +00:00
script.db
o [NSE] Added the scripts xdmcp-discover, broadcast-xdmcp-discover and the
2012-01-26 19:35:19 +00:00
servicetags.nse
just added a word to the description
2011-06-29 01:36:34 +00:00
sip-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
sip-enum-users.nse
Went through all the new (since 5.51) scripts and improved (I hope) the nsedoc descriptions a bit and made some other very minor cleanups
2011-06-29 01:29:14 +00:00
skypev2-version.nse
Merge r18160:18278 from nmap-exp/djalal/nmap-nse/ to fix NSE not honoring the exclude directive bug.
2010-06-29 21:56:59 +00:00
smb-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
smb-check-vulns.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
smb-enum-domains.nse
Fixed a bug where a ternary operator meant to prevent a nil pointer exception was outside of a math.floor() call, making it totally worthless. I moved the math.floor() outside the operation, fixing it.
2010-09-24 01:33:01 +00:00
smb-enum-groups.nse
First-pass copyediting on the remaining scripts.
2010-07-12 17:19:26 +00:00
smb-enum-processes.nse
Change " \n" to just "\n" where appropriate in NSE. Leading newlines are
2010-09-30 05:03:39 +00:00
smb-enum-sessions.nse
Lots of little bugfixes throughout several smb scripts, mostly related to bad use of global variables
2010-09-24 00:31:12 +00:00
smb-enum-shares.nse
Merge from Dependencies branch (nmap-exp/patrick/dependencies)
2009-12-30 02:34:05 +00:00
smb-enum-users.nse
o [NSE] Made changes to the categories of the following scripts. Their new
2011-10-22 19:00:33 +00:00
smb-flood.nse
Minor NSEDoc summary cleanup
2011-01-21 08:28:38 +00:00
smb-mbenum.nse
Removed prerule from script [Patrik]
2011-06-23 11:28:14 +00:00
smb-os-discovery.nse
o [NSE] Applied patch from Chris Woodbury that adds the following additional
2011-07-12 06:08:43 +00:00
smb-psexec.nse
Update some script nsedoc descriptions for consistency. The description should almost always start with an active verb and never with the script name or 'this script'. Admittedly that makes the first sentence a fragment. The first sentence should be capitalized
2011-09-11 20:50:56 +00:00
smb-security-mode.nse
o [NSE] Make smb-security-mode run by default.
2011-07-25 21:40:31 +00:00
smb-server-stats.nse
Merge from Dependencies branch (nmap-exp/patrick/dependencies)
2009-12-30 02:34:05 +00:00
smb-system-info.nse
Lots of little bugfixes throughout several smb scripts, mostly related to bad use of global variables
2010-09-24 00:31:12 +00:00
smbv2-enabled.nse
Fixed the same small bug in smbv2-enabled.nse (was still using the wrong variable for an error message)
2010-08-13 20:39:20 +00:00
smtp-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
smtp-commands.nse
o [NSE] Updated the SMTP scripts to use the new SMTP Lua library.
2011-06-13 13:19:26 +00:00
smtp-enum-users.nse
o [NSE] Made changes to the categories of the following scripts. Their new
2011-10-22 19:00:33 +00:00
smtp-open-relay.nse
Duarte Silva asked that his email address be updated in these scripts.
2011-08-22 00:58:19 +00:00
smtp-strangeport.nse
Remove email addresses from scripts as discussed in this thread: http://seclists.org/nmap-dev/2009/q4/466
2009-11-24 08:49:02 +00:00
smtp-vuln-cve2010-4344.nse
Removed an extra unused string.format argument :)
2011-07-11 15:33:52 +00:00
smtp-vuln-cve2011-1720.nse
Updated some of the vulnerability scripts to use the new vulnerability library.
2011-11-09 10:08:19 +00:00
smtp-vuln-cve2011-1764.nse
Updated some of the vulnerability scripts to use the new vulnerability library.
2011-11-09 10:08:19 +00:00
sniffer-detect.nse
o [NSE] Call the new nmap.get_interface_info() function instead of
2011-04-22 22:19:08 +00:00
snmp-brute.nse
o [NSE] Added local port to BPF filter in snmp-brute to fix bug that would
2011-12-29 08:49:38 +00:00
snmp-interfaces.nse
snmp-interfaces patch for interaction with mac-geolocation through nmap.registry[host.ip][mac-geolocation]
2011-05-31 00:13:12 +00:00
snmp-ios-config.nse
o [NSE] Fixed a bug with an undeclared variable in snmp-ios-config.nse [Patrik]
2011-12-25 19:38:08 +00:00
snmp-netstat.nse
Added missing error handling for connection timeouts
2010-08-31 13:38:50 +00:00
snmp-processes.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
snmp-sysdescr.nse
Add @usage to snmp-sysdescr.
2011-09-20 16:12:07 +00:00
snmp-win32-services.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
snmp-win32-shares.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
snmp-win32-software.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
snmp-win32-users.nse
o [NSE] Made changes to the categories of the following scripts. Their new
2011-10-22 19:00:33 +00:00
socks-auth-info.nse
o [NSE] Added the script socks-auth-info that lists supported SOCKS 5
2012-01-02 11:34:27 +00:00
socks-brute.nse
o [NSE] Added the script socks-brute that performs brute force password
2012-01-02 11:15:34 +00:00
socks-open-proxy.nse
Formatting.
2011-07-18 16:29:38 +00:00
sql-injection.nse
Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry
2011-07-27 03:28:13 +00:00
ssh2-enum-algos.nse
Fixed a bug that would prevent the script from displaying any output unless
2011-07-26 06:46:12 +00:00
ssh-hostkey.nse
Sort duplicates output in ssh-hostkey.nse.
2011-12-30 04:05:36 +00:00
sshv1.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
ssl-cert.nse
o [NSE] Applied patch to the ssl-cert script that adds support for getting SSL
2011-12-06 15:49:36 +00:00
ssl-enum-ciphers.nse
Don't redundantly list the NULL compressor in ssl-num-ciphers.nse.
2011-09-14 18:21:23 +00:00
ssl-google-cert-catalog.nse
Light copyediting of NSEDoc in ssl-google-cert-catalog.nse.
2011-12-06 05:01:18 +00:00
ssl-known-key.nse
trivial nsedoc change
2011-06-30 09:11:57 +00:00
sslv2.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
stuxnet-detect.nse
Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG
2011-01-14 10:20:51 +00:00
svn-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
targets-ipv6-multicast-echo.nse
Consistent naming of the address fields between IPv4 and IPv6.
2012-01-21 14:46:00 +00:00
targets-ipv6-multicast-invalid-dst.nse
Consistent naming of the address fields between IPv4 and IPv6.
2012-01-21 14:46:00 +00:00
targets-ipv6-multicast-slaac.nse
Consistent naming of the address fields between IPv4 and IPv6.
2012-01-21 14:46:00 +00:00
targets-sniffer.nse
Use promiscuous mode in targets-sniffer.nse.
2011-11-08 16:10:35 +00:00
targets-traceroute.nse
Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG
2011-01-14 10:20:51 +00:00
telnet-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
telnet-encryption.nse
Added missing license text to telnet-encryption
2011-12-29 11:49:29 +00:00
tftp-enum.nse
Update and canonicalize a bunch of script descriptions
2011-11-07 04:08:29 +00:00
unusual-port.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
upnp-info.nse
applied patch from Thomas Buchanan containing bugfixes and some re-factoring
2010-11-19 19:31:50 +00:00
vmauthd-brute.nse
o [NSE] Added the script vmauthd-brute that performs brute force password
2012-01-02 11:12:46 +00:00
vnc-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
vnc-info.nse
o [NSE] Made the following scripts in the default category:
2011-07-18 09:50:18 +00:00
vuze-dht-info.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
wdb-version.nse
o [NSE] Updated the categories of the following scripts:
2011-07-11 22:03:17 +00:00
whois.nse
Corrected defective handling of etag header which prevented conditional HTTP
2011-09-28 13:02:43 +00:00
wsdd-discover.nse
Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG
2011-01-14 10:20:51 +00:00
x11-access.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
xdmcp-discover.nse
o [NSE] Added the scripts xdmcp-discover, broadcast-xdmcp-discover and the
2012-01-26 19:35:19 +00:00
xmpp-brute.nse
Fixed small NSEDOC error in xmpp-brute.nse [Patrik]
2011-11-02 19:20:19 +00:00
xmpp-info.nse
Added xmpp-info.nse as a replacement for xmpp.nse (script from Vasily Kulikov).
2011-09-04 19:18:22 +00:00