PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-02-15 09:56:33 +00:00
Code Issues Projects Releases Wiki Activity
Files
0b7e0b77534474b76d3ca22ecd883e171f83ca3c
nmap/scripts
History
djalal 49774ecf10 o [NSE] Added smtp-vuln-cve2010-4344 script that will check and exploit 
two vulnerabilities in the Exim SMTP Server:
  o CVE-2010-4344: A heap overflow vulnerability.
  o CVE-2010-4345: A privileges escalation vulnerability.
2011-06-24 15:37:53 +00:00
..
afp-brute.nse
Add a missing period to NSEDoc.
2011-01-28 17:54:49 +00:00
afp-ls.nse
…
afp-path-vuln.nse
o Moved afp.username and afp.password arguments to afp-library.
2011-04-03 12:53:12 +00:00
afp-serverinfo.nse
…
afp-showmount.nse
o Moved afp.username and afp.password arguments to afp-library.
2011-04-03 12:53:12 +00:00
asn-query.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
auth-owners.nse
…
auth-spoof.nse
Do copyediting of NSEDoc. This is a first pass up to ms-sql-xp-cmdshell.
2010-07-09 23:32:18 +00:00
backorifice-brute.nse
o [NSE] Added credential storage library (creds.lua) and modified the brute
2011-06-19 17:18:29 +00:00
backorifice-info.nse
Fix for backorifice-info.nse, setting the port.state as "open"
2011-05-08 16:37:41 +00:00
banner.nse
…
broadcast-avahi-dos.nse
…
broadcast-dns-service-discovery.nse
…
broadcast-dropbox-listener.nse
maxn is deprecated
2011-05-11 15:13:46 +00:00
broadcast-ms-sql-discover.nse
…
broadcast-netbios-master-browser.nse
o [NSE] Added two new scripts broadcast-netbios-master-browser and smb-mbenum:
2011-06-19 18:47:19 +00:00
broadcast-novell-locate.nse
o [NSE] Added minimal Service Location Protocol (SLP) library and the script
2011-06-15 06:23:30 +00:00
broadcast-upnp-info.nse
…
broadcast-wsdd-discover.nse
…
citrix-brute-xml.nse
…
citrix-enum-apps-xml.nse
Spell-check NSEDoc.
2010-07-19 16:29:48 +00:00
citrix-enum-apps.nse
…
citrix-enum-servers-xml.nse
…
citrix-enum-servers.nse
…
couchdb-databases.nse
Edit some script descriptions for better line breaks when rendered as
2010-07-17 16:47:31 +00:00
couchdb-stats.nse
…
daap-get-library.nse
…
daytime.nse
…
db2-das-info.nse
Addressed a condition in db2-das-info.nse where the script would crash
2011-02-16 00:13:38 +00:00
db2-discover.nse
…
dhcp-discover.nse
Set the math.randomseed value in nse_main.lua on behalf of scripts.
2011-05-23 21:43:46 +00:00
dns-brute.nse
Remove redundant "Result:" label from dns-brute.nse output. Use the
2011-03-15 17:12:45 +00:00
dns-cache-snoop.nse
Do copyediting of NSEDoc. This is a first pass up to ms-sql-xp-cmdshell.
2010-07-09 23:32:18 +00:00
dns-fuzz.nse
Set the math.randomseed value in nse_main.lua on behalf of scripts.
2011-05-23 21:43:46 +00:00
dns-nsec-enum.nse
…
dns-random-srcport.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
dns-random-txid.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
dns-recursion.nse
Make the set of script "default and intrusive" empty.
2011-04-30 19:21:38 +00:00
dns-service-discovery.nse
…
dns-update.nse
I've been putting periods at the end of these single sentence fragment descriptions for consistency, although I don't really know which way is best. When there are multiple setences in that first paragraph, we obviously need the paragraph even after an initial fragment. So I figured that we might as well include it when the fragment is all there is. But maybe when there is just one fragment, it looks better without a period. Who knows, and I guess it's not a particularly critical decision. But dns-update.nse now has a period in any case :)
2011-01-14 21:06:28 +00:00
dns-zone-transfer.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
domcon-brute.nse
o [NSE] Added credential storage library (creds.lua) and modified the brute
2011-06-19 17:18:29 +00:00
domcon-cmd.nse
…
domino-enum-users.nse
Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG
2011-01-14 10:20:51 +00:00
dpap-brute.nse
o [NSE] Added credential storage library (creds.lua) and modified the brute
2011-06-19 17:18:29 +00:00
drda-brute.nse
…
drda-info.nse
…
epmd-info.nse
…
finger.nse
…
firewalk.nse
trailing whitespace
2011-06-20 21:09:42 +00:00
ftp-anon.nse
…
ftp-bounce.nse
…
ftp-brute.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
ftp-libopie.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
ftp-proftpd-backdoor.nse
…
giop-info.nse
Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG
2011-01-14 10:20:51 +00:00
gopher-ls.nse
…
hddtemp-info.nse
…
hostmap.nse
…
http-affiliate-id.nse
…
http-auth.nse
Put http-auth in "safe" now that it is not in "default".
2011-04-30 19:23:19 +00:00
http-brute.nse
o [NSE] Added credential storage library (creds.lua) and modified the brute
2011-06-19 17:18:29 +00:00
http-cakephp-version.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
http-date.nse
…
http-domino-enum-passwords.nse
…
http-enum.nse
…
http-favicon.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
http-form-brute.nse
o [NSE] Added credential storage library (creds.lua) and modified the brute
2011-06-19 17:18:29 +00:00
http-headers.nse
…
http-iis-webdav-vuln.nse
…
http-malware-host.nse
…
http-methods.nse
…
http-open-proxy.nse
…
http-passwd.nse
Add more http-passwd payloads from Ange Gutek.
2010-11-11 19:02:17 +00:00
http-php-version.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
http-robots.txt.nse
…
http-title.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
http-trace.nse
…
http-userdir-enum.nse
…
http-vhosts.nse
…
http-vmware-path-vuln.nse
…
http-wp-plugins.nse
removed usage of deprecated table.getn
2011-05-11 14:41:06 +00:00
iax2-version.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
imap-capabilities.nse
…
informix-brute.nse
o [NSE] Added credential storage library (creds.lua) and modified the brute
2011-06-19 17:18:29 +00:00
informix-query.nse
…
informix-tables.nse
…
ip-geolocation-geobytes.nse
IP based geolocation using the Geobytes web service
2011-06-20 01:43:44 +00:00
ip-geolocation-geoplugin.nse
IP based geolocation using the Geoplugin web service
2011-06-20 01:44:10 +00:00
ip-geolocation-ipinfodb.nse
IP based geolocation using the IPInfoDB web service
2011-06-20 01:45:35 +00:00
ip-geolocation-maxmind.nse
IP based geolocation using a Maxmind database
2011-06-20 01:42:21 +00:00
ip-geolocation-quova.nse
IP based geolocation using the Quova web service
2011-06-20 01:43:17 +00:00
ipidseq.nse
Avoid bloating the registry by using variables to transfer information from
2011-06-20 21:06:14 +00:00
irc-info.nse
…
irc-unrealircd-backdoor.nse
…
iscsi-brute.nse
o [NSE] Added credential storage library (creds.lua) and modified the brute
2011-06-19 17:18:29 +00:00
iscsi-info.nse
Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG
2011-01-14 10:20:51 +00:00
jdwp-version.nse
…
ldap-brute.nse
fixed the following bug reported by Ron
2010-11-04 18:53:56 +00:00
ldap-novell-getpass.nse
o [NSE] Added ldap-novell-getpass, a script that provides support for
2011-05-28 08:48:26 +00:00
ldap-rootdse.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
ldap-search.nse
Change " \n" to just "\n" where appropriate in NSE. Leading newlines are
2010-09-30 05:03:39 +00:00
lexmark-config.nse
…
mac-geolocation.nse
Cleaning up some residue Skyhook code.
2011-05-30 14:35:43 +00:00
modbus-discover.nse
…
mongodb-databases.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
mongodb-info.nse
…
ms-sql-brute.nse
removed usage of deprecated table.getn
2011-05-11 14:41:06 +00:00
ms-sql-config.nse
…
ms-sql-empty-password.nse
removed usage of deprecated table.getn
2011-05-11 14:41:06 +00:00
ms-sql-hasdbaccess.nse
…
ms-sql-info.nse
…
ms-sql-query.nse
…
ms-sql-tables.nse
…
ms-sql-xp-cmdshell.nse
…
mysql-audit.nse
o [NSE] Added a MySQL audit script and a rulebase that supports auditing a
2011-06-17 06:12:01 +00:00
mysql-brute.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
mysql-databases.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
mysql-empty-password.nse
Fixed a number of incorrect receives and replaced them with receive_bytes.
2010-08-24 20:25:46 +00:00
mysql-info.nse
…
mysql-users.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
mysql-variables.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
nat-pmp-info.nse
…
nbstat.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
ncp-enum-users.nse
o [NSE] Added the Netware Core Protocol (NCP) library and the scripts
2011-05-28 09:01:31 +00:00
ncp-serverinfo.nse
o [NSE] Added the Netware Core Protocol (NCP) library and the scripts
2011-05-28 09:01:31 +00:00
netbus-auth-bypass.nse
Minor typo fixes
2011-06-03 09:24:51 +00:00
netbus-brute.nse
Minor NSEDoc summary cleanup
2011-01-21 08:28:38 +00:00
netbus-info.nse
…
netbus-version.nse
Apply a patch from Toni Ruottu with some small misc. improvements to the netbus-* scripts. Also I changed netbus-auth-bypass to the safe category as recommended by Toni
2011-01-15 21:28:45 +00:00
nfs-ls.nse
Fix a typo in a comment.
2011-04-22 22:21:43 +00:00
nfs-showmount.nse
…
nfs-statfs.nse
…
nping-brute.nse
o [NSE] Added credential storage library (creds.lua) and modified the brute
2011-06-19 17:18:29 +00:00
nrpe-enum.nse
…
ntp-info.nse
Add a default timeout of 5000 ms to the ntp-info script, and don't try
2009-12-21 20:24:45 +00:00
ntp-monlist.nse
o [NSE] Added ipv6 support to the wsdd, dnssd and upnp libraries. Applied
2011-06-16 05:29:42 +00:00
omp2-brute.nse
o [NSE] Added credential storage library (creds.lua) and modified the brute
2011-06-19 17:18:29 +00:00
omp2-enum-targets.nse
…
oracle-brute.nse
o [NSE] Added credential storage library (creds.lua) and modified the brute
2011-06-19 17:18:29 +00:00
oracle-enum-users.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
oracle-sid-brute.nse
…
ovs-agent-version.nse
Add ovs-agent-version.nse, a script to detect the ovs-agent service for
2011-03-02 07:39:31 +00:00
p2p-conficker.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
path-mtu.nse
fix whitespace inconsistencies from copy-and-pastes
2011-05-06 23:48:41 +00:00
pgsql-brute.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
pjl-ready-message.nse
…
pop3-brute.nse
…
pop3-capabilities.nse
…
pptp-version.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
qscan.nse
Avoid bloating the registry by using variables to transfer information from
2011-06-20 21:06:14 +00:00
quake3-master-getservers.nse
…
realvnc-auth-bypass.nse
…
resolveall.nse
…
rmi-dumpregistry.nse
Use java-rmi for the the Java RMI service name. Suggested by martin
2011-06-21 00:03:16 +00:00
rpcinfo.nse
…
script.db
o [NSE] Added smtp-vuln-cve2010-4344 script that will check and exploit
2011-06-24 15:37:53 +00:00
servicetags.nse
…
sip-brute.nse
o [NSE] Added credential storage library (creds.lua) and modified the brute
2011-06-19 17:18:29 +00:00
sip-enum-users.nse
o [NSE] Added a SIP library and two new scripts sip-brute.nse and
2011-05-09 18:00:52 +00:00
skypev2-version.nse
…
smb-brute.nse
Set the math.randomseed value in nse_main.lua on behalf of scripts.
2011-05-23 21:43:46 +00:00
smb-check-vulns.nse
…
smb-enum-domains.nse
Fixed a bug where a ternary operator meant to prevent a nil pointer exception was outside of a math.floor() call, making it totally worthless. I moved the math.floor() outside the operation, fixing it.
2010-09-24 01:33:01 +00:00
smb-enum-groups.nse
First-pass copyediting on the remaining scripts.
2010-07-12 17:19:26 +00:00
smb-enum-processes.nse
Change " \n" to just "\n" where appropriate in NSE. Leading newlines are
2010-09-30 05:03:39 +00:00
smb-enum-sessions.nse
Lots of little bugfixes throughout several smb scripts, mostly related to bad use of global variables
2010-09-24 00:31:12 +00:00
smb-enum-shares.nse
…
smb-enum-users.nse
First-pass copyediting on the remaining scripts.
2010-07-12 17:19:26 +00:00
smb-flood.nse
…
smb-mbenum.nse
Removed prerule from script [Patrik]
2011-06-23 11:28:14 +00:00
smb-os-discovery.nse
…
smb-psexec.nse
Set the math.randomseed value in nse_main.lua on behalf of scripts.
2011-05-23 21:43:46 +00:00
smb-security-mode.nse
…
smb-server-stats.nse
…
smb-system-info.nse
…
smbv2-enabled.nse
Fixed the same small bug in smbv2-enabled.nse (was still using the wrong variable for an error message)
2010-08-13 20:39:20 +00:00
smtp-commands.nse
o [NSE] Updated the SMTP scripts to use the new SMTP Lua library.
2011-06-13 13:19:26 +00:00
smtp-enum-users.nse
o [NSE] Updated the SMTP scripts to use the new SMTP Lua library.
2011-06-13 13:19:26 +00:00
smtp-open-relay.nse
o [NSE] Updated the SMTP scripts to use the new SMTP Lua library.
2011-06-13 13:19:26 +00:00
smtp-strangeport.nse
…
smtp-vuln-cve2010-4344.nse
o [NSE] Added smtp-vuln-cve2010-4344 script that will check and exploit
2011-06-24 15:37:53 +00:00
smtp-vuln-cve2011-1720.nse
o [NSE] Updated the SMTP scripts to use the new SMTP Lua library.
2011-06-13 13:19:26 +00:00
sniffer-detect.nse
…
snmp-brute.nse
NSEDoc fix of snmp-brute.
2011-05-16 18:48:34 +00:00
snmp-interfaces.nse
snmp-interfaces patch for interaction with mac-geolocation through nmap.registry[host.ip][mac-geolocation]
2011-05-31 00:13:12 +00:00
snmp-ios-config.nse
…
snmp-netstat.nse
…
snmp-processes.nse
…
snmp-sysdescr.nse
…
snmp-win32-services.nse
…
snmp-win32-shares.nse
…
snmp-win32-software.nse
…
snmp-win32-users.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
socks-open-proxy.nse
…
sql-injection.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
ssh2-enum-algos.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
ssh-hostkey.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
sshv1.nse
…
ssl-cert.nse
…
ssl-enum-ciphers.nse
Create a shortport.ssl function like shortport.http. Use it in ssl
2011-02-22 00:46:28 +00:00
ssl-known-key.nse
Put ssl-known-key in {"safe", "discovery", "vuln"} (was {"discovery"}).
2011-03-22 19:44:46 +00:00
sslv2.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
stuxnet-detect.nse
…
svn-brute.nse
o [NSE] Added credential storage library (creds.lua) and modified the brute
2011-06-19 17:18:29 +00:00
targets-sniffer.nse
…
targets-traceroute.nse
…
telnet-brute.nse
…
upnp-info.nse
…
vnc-brute.nse
o [NSE] Added credential storage library (creds.lua) and modified the brute
2011-06-19 17:18:29 +00:00
vnc-info.nse
Minor NSEDoc summary cleanup
2011-01-21 08:28:38 +00:00
wdb-version.nse
Minor NSEDoc summary cleanup
2011-01-21 08:28:38 +00:00
whois.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
wsdd-discover.nse
…
x11-access.nse
…
xmpp.nse
o [NSE] Added xmpp.nse, which collects XMPP server information [Vasiliy Kulikov]
2011-05-07 21:14:21 +00:00