PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-02-16 02:16:34 +00:00
Code Issues Projects Releases Wiki Activity
Files
110b0d35b0535bc659900c4a7e8f095cf0ff437a
nmap/scripts
History
…
..
address-info.nse
Update address-info to show MAC address related manufacturer.
2011-09-26 22:42:08 +00:00
afp-brute.nse
…
afp-ls.nse
…
afp-path-vuln.nse
…
afp-serverinfo.nse
o [NSE] Made the following scripts in the default category:
2011-07-18 09:50:18 +00:00
afp-showmount.nse
…
asn-query.nse
…
auth-owners.nse
…
auth-spoof.nse
Do copyediting of NSEDoc. This is a first pass up to ms-sql-xp-cmdshell.
2010-07-09 23:32:18 +00:00
backorifice-brute.nse
…
backorifice-info.nse
Adding a dependency for backorifice-brute to backorifice-info
2011-06-30 15:47:32 +00:00
banner.nse
…
bittorrent-discovery.nse
…
broadcast-avahi-dos.nse
…
broadcast-db2-discover.nse
…
broadcast-dhcp-discover.nse
…
broadcast-dns-service-discovery.nse
…
broadcast-dropbox-listener.nse
…
broadcast-listener.nse
…
broadcast-ms-sql-discover.nse
…
broadcast-netbios-master-browser.nse
o [NSE] Added two new scripts broadcast-netbios-master-browser and smb-mbenum:
2011-06-19 18:47:19 +00:00
broadcast-novell-locate.nse
…
broadcast-ping.nse
…
broadcast-upnp-info.nse
…
broadcast-wsdd-discover.nse
…
citrix-brute-xml.nse
Change " \n" to just "\n" where appropriate in NSE. Leading newlines are
2010-09-30 05:03:39 +00:00
citrix-enum-apps-xml.nse
Spell-check NSEDoc.
2010-07-19 16:29:48 +00:00
citrix-enum-apps.nse
…
citrix-enum-servers-xml.nse
…
citrix-enum-servers.nse
…
couchdb-databases.nse
…
couchdb-stats.nse
…
creds-summary.nse
…
cvs-brute-repository.nse
…
cvs-brute.nse
…
daap-get-library.nse
…
daytime.nse
Add @output sections to these scripts:
2010-03-31 21:45:21 +00:00
db2-das-info.nse
Addressed a condition in db2-das-info.nse where the script would crash
2011-02-16 00:13:38 +00:00
db2-discover.nse
…
dhcp-discover.nse
…
dns-brute.nse
…
dns-cache-snoop.nse
Do copyediting of NSEDoc. This is a first pass up to ms-sql-xp-cmdshell.
2010-07-09 23:32:18 +00:00
dns-fuzz.nse
…
dns-nsec-enum.nse
Change the "name" member of a decoded NSEC record to be called
2011-03-27 05:07:16 +00:00
dns-random-srcport.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
dns-random-txid.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
dns-recursion.nse
Make the set of script "default and intrusive" empty.
2011-04-30 19:21:38 +00:00
dns-service-discovery.nse
…
dns-update.nse
I've been putting periods at the end of these single sentence fragment descriptions for consistency, although I don't really know which way is best. When there are multiple setences in that first paragraph, we obviously need the paragraph even after an initial fragment. So I figured that we might as well include it when the fragment is all there is. But maybe when there is just one fragment, it looks better without a period. Who knows, and I guess it's not a particularly critical decision. But dns-update.nse now has a period in any case :)
2011-01-14 21:06:28 +00:00
dns-zone-transfer.nse
…
domcon-brute.nse
…
domcon-cmd.nse
…
domino-enum-users.nse
Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry
2011-07-27 03:28:13 +00:00
dpap-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
drda-brute.nse
…
drda-info.nse
…
epmd-info.nse
Add epmd-info script from Toni Ruottu.
2011-04-04 18:28:33 +00:00
finger.nse
…
firewalk.nse
Cosmetic fix: consistently return 'false' in the hostrule
2011-09-14 10:03:41 +00:00
ftp-anon.nse
…
ftp-bounce.nse
…
ftp-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
ftp-libopie.nse
…
ftp-proftpd-backdoor.nse
…
ftp-vsftpd-backdoor.nse
…
ftp-vuln-cve2010-4221.nse
…
giop-info.nse
o [NSE] Made the following scripts in the default category:
2011-07-18 09:50:18 +00:00
gopher-ls.nse
…
hddtemp-info.nse
…
hostmap.nse
…
http-affiliate-id.nse
…
http-auth.nse
…
http-awstatstotals-exec.nse
Improve some NSEDoc descriptions
2011-09-11 20:44:07 +00:00
http-axis2-dir-traversal.nse
Update some script nsedoc descriptions for consistency. The description should almost always start with an active verb and never with the script name or 'this script'. Admittedly that makes the first sentence a fragment. The first sentence should be capitalized
2011-09-11 20:50:56 +00:00
http-barracuda-dir-traversal.nse
…
http-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
http-cakephp-version.nse
…
http-date.nse
…
http-default-accounts.nse
Update some script nsedoc descriptions for consistency. The description should almost always start with an active verb and never with the script name or 'this script'. Admittedly that makes the first sentence a fragment. The first sentence should be capitalized
2011-09-11 20:50:56 +00:00
http-domino-enum-passwords.nse
…
http-enum.nse
…
http-favicon.nse
…
http-form-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
http-google-malware.nse
…
http-headers.nse
Fixed a bug where http-headers.nse wasn't honouring the 'path' script-arg.
2010-08-29 01:18:08 +00:00
http-iis-webdav-vuln.nse
…
http-joomla-brute.nse
…
http-litespeed-sourcecode-download.nse
…
http-majordomo2-dir-traversal.nse
…
http-malware-host.nse
…
http-methods.nse
…
http-open-proxy.nse
Make the set of script "default and intrusive" empty.
2011-04-30 19:21:38 +00:00
http-passwd.nse
Add more http-passwd payloads from Ange Gutek.
2010-11-11 19:02:17 +00:00
http-php-version.nse
…
http-robots.txt.nse
…
http-title.nse
…
http-trace.nse
…
http-userdir-enum.nse
…
http-vhosts.nse
Fix an indexing bug in http-vhosts.nse. Found by Daniel Miller.
2011-07-18 20:44:22 +00:00
http-vmware-path-vuln.nse
Remove 3 vuln scripts from default category as discussed at http://seclists.org/nmap-dev/2011/q3/732
2011-09-07 20:40:51 +00:00
http-vuln-cve2011-3192.nse
…
http-waf-detect.nse
Improve some NSEDoc descriptions
2011-09-11 20:44:07 +00:00
http-wordpress-brute.nse
…
http-wordpress-enum.nse
…
http-wordpress-plugins.nse
…
iax2-version.nse
…
imap-brute.nse
…
imap-capabilities.nse
…
informix-brute.nse
…
informix-query.nse
…
informix-tables.nse
…
ip-geolocation-geobytes.nse
Went through all the new (since 5.51) scripts and improved (I hope) the nsedoc descriptions a bit and made some other very minor cleanups
2011-06-29 01:29:14 +00:00
ip-geolocation-geoplugin.nse
…
ip-geolocation-ipinfodb.nse
…
ip-geolocation-maxmind.nse
…
ipidseq.nse
Avoid bloating the registry by using variables to transfer information from
2011-06-20 21:06:14 +00:00
irc-info.nse
o [NSE] Made irc-info.nse handle the case where the MOTD is missing.
2011-09-21 05:09:26 +00:00
irc-unrealircd-backdoor.nse
…
iscsi-brute.nse
…
iscsi-info.nse
o [NSE] Updated the categories of the following scripts:
2011-07-11 22:03:17 +00:00
jdwp-version.nse
…
ldap-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
ldap-novell-getpass.nse
…
ldap-rootdse.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
ldap-search.nse
…
lexmark-config.nse
…
lltd-discovery.nse
…
modbus-discover.nse
…
mongodb-databases.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
mongodb-info.nse
…
ms-sql-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
ms-sql-config.nse
…
ms-sql-empty-password.nse
…
ms-sql-hasdbaccess.nse
…
ms-sql-info.nse
…
ms-sql-query.nse
…
ms-sql-tables.nse
…
ms-sql-xp-cmdshell.nse
…
mysql-audit.nse
…
mysql-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
mysql-databases.nse
…
mysql-empty-password.nse
Fixed a number of incorrect receives and replaced them with receive_bytes.
2010-08-24 20:25:46 +00:00
mysql-info.nse
Do copyediting of NSEDoc up through pgsql-brute.
2010-07-12 06:21:03 +00:00
mysql-users.nse
…
mysql-variables.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
nat-pmp-info.nse
…
nbstat.nse
…
ncp-enum-users.nse
…
ncp-serverinfo.nse
…
netbus-auth-bypass.nse
Minor typo fixes
2011-06-03 09:24:51 +00:00
netbus-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
netbus-info.nse
…
netbus-version.nse
Apply a patch from Toni Ruottu with some small misc. improvements to the netbus-* scripts. Also I changed netbus-auth-bypass to the safe category as recommended by Toni
2011-01-15 21:28:45 +00:00
nfs-ls.nse
Fix a typo in a comment.
2011-04-22 22:21:43 +00:00
nfs-showmount.nse
…
nfs-statfs.nse
Normalize tab.lua usage so that a call to tab.nextrow comes after (not
2010-12-30 21:08:25 +00:00
nping-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
nrpe-enum.nse
…
ntp-info.nse
Add a default timeout of 5000 ms to the ntp-info script, and don't try
2009-12-21 20:24:45 +00:00
ntp-monlist.nse
…
omp2-brute.nse
…
omp2-enum-targets.nse
…
oracle-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
oracle-enum-users.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
oracle-sid-brute.nse
…
ovs-agent-version.nse
Update ovs-agent-version.nse with a signature from version 3.0.1.
2011-09-23 21:42:06 +00:00
p2p-conficker.nse
Fix incorrect (broken) return value in p2p-conficker.nse. Spotted by
2011-07-18 20:40:47 +00:00
path-mtu.nse
…
pgsql-brute.nse
…
pjl-ready-message.nse
…
pop3-brute.nse
…
pop3-capabilities.nse
Merge r18689:r19511 from /nmap-exp/djalal/nse-rules.
2010-08-06 16:40:03 +00:00
pptp-version.nse
…
qscan.nse
Avoid bloating the registry by using variables to transfer information from
2011-06-20 21:06:14 +00:00
quake3-info.nse
…
quake3-master-getservers.nse
…
realvnc-auth-bypass.nse
…
resolveall.nse
…
rmi-dumpregistry.nse
…
rpcinfo.nse
…
script.db
…
servicetags.nse
…
sip-brute.nse
…
sip-enum-users.nse
…
skypev2-version.nse
…
smb-brute.nse
…
smb-check-vulns.nse
…
smb-enum-domains.nse
Fixed a bug where a ternary operator meant to prevent a nil pointer exception was outside of a math.floor() call, making it totally worthless. I moved the math.floor() outside the operation, fixing it.
2010-09-24 01:33:01 +00:00
smb-enum-groups.nse
…
smb-enum-processes.nse
Change " \n" to just "\n" where appropriate in NSE. Leading newlines are
2010-09-30 05:03:39 +00:00
smb-enum-sessions.nse
Lots of little bugfixes throughout several smb scripts, mostly related to bad use of global variables
2010-09-24 00:31:12 +00:00
smb-enum-shares.nse
…
smb-enum-users.nse
…
smb-flood.nse
…
smb-mbenum.nse
…
smb-os-discovery.nse
…
smb-psexec.nse
Update some script nsedoc descriptions for consistency. The description should almost always start with an active verb and never with the script name or 'this script'. Admittedly that makes the first sentence a fragment. The first sentence should be capitalized
2011-09-11 20:50:56 +00:00
smb-security-mode.nse
…
smb-server-stats.nse
…
smb-system-info.nse
…
smbv2-enabled.nse
Fixed the same small bug in smbv2-enabled.nse (was still using the wrong variable for an error message)
2010-08-13 20:39:20 +00:00
smtp-brute.nse
…
smtp-commands.nse
o [NSE] Updated the SMTP scripts to use the new SMTP Lua library.
2011-06-13 13:19:26 +00:00
smtp-enum-users.nse
Duarte Silva asked that his email address be updated in these scripts.
2011-08-22 00:58:19 +00:00
smtp-open-relay.nse
…
smtp-strangeport.nse
…
smtp-vuln-cve2010-4344.nse
…
smtp-vuln-cve2011-1720.nse
…
smtp-vuln-cve2011-1764.nse
…
sniffer-detect.nse
o [NSE] Call the new nmap.get_interface_info() function instead of
2011-04-22 22:19:08 +00:00
snmp-brute.nse
…
snmp-interfaces.nse
snmp-interfaces patch for interaction with mac-geolocation through nmap.registry[host.ip][mac-geolocation]
2011-05-31 00:13:12 +00:00
snmp-ios-config.nse
…
snmp-netstat.nse
Added missing error handling for connection timeouts
2010-08-31 13:38:50 +00:00
snmp-processes.nse
…
snmp-sysdescr.nse
…
snmp-win32-services.nse
…
snmp-win32-shares.nse
…
snmp-win32-software.nse
…
snmp-win32-users.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
socks-open-proxy.nse
…
sql-injection.nse
…
ssh2-enum-algos.nse
…
ssh-hostkey.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
sshv1.nse
…
ssl-cert.nse
…
ssl-enum-ciphers.nse
Don't redundantly list the NULL compressor in ssl-num-ciphers.nse.
2011-09-14 18:21:23 +00:00
ssl-google-cert-catalog.nse
…
ssl-known-key.nse
trivial nsedoc change
2011-06-30 09:11:57 +00:00
sslv2.nse
…
stuxnet-detect.nse
…
svn-brute.nse
…
targets-ipv6-multicast-echo.nse
…
targets-ipv6-multicast-invalid-dst.nse
…
targets-ipv6-multicast-slaac.nse
…
targets-sniffer.nse
…
targets-traceroute.nse
…
telnet-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
upnp-info.nse
…
vnc-brute.nse
…
vnc-info.nse
o [NSE] Made the following scripts in the default category:
2011-07-18 09:50:18 +00:00
wdb-version.nse
o [NSE] Updated the categories of the following scripts:
2011-07-11 22:03:17 +00:00
whois.nse
Corrected defective handling of etag header which prevented conditional HTTP
2011-09-28 13:02:43 +00:00
wsdd-discover.nse
…
x11-access.nse
…
xmpp-brute.nse
…
xmpp-info.nse
…