PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-02-15 18:06:35 +00:00
Code Issues Projects Releases Wiki Activity
Files
33fa3fae76956ebd3ed1cfd47c803a3f45ac76c6
nmap/scripts
History
david 52f0e1b0b5 Exit http-wordpress-plugins if identify_404 fails. 
This is what other scripts that use identify_404 do.
2012-03-03 05:56:20 +00:00
..
address-info.nse
…
afp-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
afp-ls.nse
…
afp-path-vuln.nse
Updated some of the vulnerability scripts to use the new vulnerability library.
2011-11-09 10:08:19 +00:00
afp-serverinfo.nse
o [NSE] Made the following scripts in the default category:
2011-07-18 09:50:18 +00:00
afp-showmount.nse
o Moved afp.username and afp.password arguments to afp-library.
2011-04-03 12:53:12 +00:00
amqp-info.nse
…
asn-query.nse
Fix a bug in dns.lua: ensure that dns.query() always return two values (status and response).
2011-09-22 18:00:44 +00:00
asn-to-prefix.nse
…
auth-owners.nse
…
auth-spoof.nse
…
backorifice-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
backorifice-info.nse
…
banner.nse
…
bitcoin-getaddr.nse
o [NSE] Applied patch from Andrew Orr that fixes the recent changes in the
2012-02-20 19:12:38 +00:00
bitcoin-info.nse
…
bitcoinrpc-info.nse
Minor rewording
2011-11-07 06:00:07 +00:00
bittorrent-discovery.nse
…
broadcast-avahi-dos.nse
…
broadcast-db2-discover.nse
o [NSE] Split script db2-discover into two scripts, adding a new
2011-07-10 08:01:26 +00:00
broadcast-dhcp6-discover.nse
…
broadcast-dhcp-discover.nse
…
broadcast-dns-service-discovery.nse
…
broadcast-dropbox-listener.nse
…
broadcast-listener.nse
…
broadcast-ms-sql-discover.nse
…
broadcast-netbios-master-browser.nse
…
broadcast-networker-discover.nse
o [NSE] Added the script broadcast-networker-discover that discoverer EMC
2012-02-25 16:06:30 +00:00
broadcast-novell-locate.nse
…
broadcast-pc-anywhere.nse
…
broadcast-pc-duo.nse
…
broadcast-ping.nse
Removed svn:execute property from certain .NSE scripts. This was enabling the execute bit on files when they were checked out.
2012-02-08 04:11:10 +00:00
broadcast-pppoe-discover.nse
…
broadcast-rip-discover.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
broadcast-ripng-discover.nse
…
broadcast-sybase-asa-discover.nse
…
broadcast-upnp-info.nse
…
broadcast-wake-on-lan.nse
…
broadcast-wpad-discover.nse
…
broadcast-wsdd-discover.nse
…
broadcast-xdmcp-discover.nse
…
cccam-version.nse
Some minor NSEDoc updates on scripts we completed in January 2012
2012-02-10 08:08:51 +00:00
citrix-brute-xml.nse
…
citrix-enum-apps-xml.nse
…
citrix-enum-apps.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
citrix-enum-servers-xml.nse
…
citrix-enum-servers.nse
…
couchdb-databases.nse
Edit some script descriptions for better line breaks when rendered as
2010-07-17 16:47:31 +00:00
couchdb-stats.nse
Edit some script descriptions for better line breaks when rendered as
2010-07-17 16:47:31 +00:00
creds-summary.nse
…
cvs-brute-repository.nse
…
cvs-brute.nse
…
daap-get-library.nse
…
daytime.nse
…
db2-das-info.nse
…
db2-discover.nse
Fix a typo in category name
2011-07-21 05:12:33 +00:00
dhcp-discover.nse
o [NSE] Removed DoS code from dhcp-discover and placed it into the discover and
2011-12-29 08:07:26 +00:00
dns-blacklist.nse
…
dns-brute.nse
o [NSE] added a debug message in the prerule to show that some arguments are missing.
2011-11-09 12:39:01 +00:00
dns-cache-snoop.nse
…
dns-client-subnet-scan.nse
…
dns-fuzz.nse
Update some script nsedoc descriptions for consistency. The description should almost always start with an active verb and never with the script name or 'this script'. Admittedly that makes the first sentence a fragment. The first sentence should be capitalized
2011-09-11 20:50:56 +00:00
dns-nsec-enum.nse
…
dns-nsid.nse
Some minor NSEDoc updates on scripts we completed in January 2012
2012-02-10 08:08:51 +00:00
dns-random-srcport.nse
…
dns-random-txid.nse
…
dns-recursion.nse
…
dns-service-discovery.nse
…
dns-srv-enum.nse
…
dns-update.nse
I've been putting periods at the end of these single sentence fragment descriptions for consistency, although I don't really know which way is best. When there are multiple setences in that first paragraph, we obviously need the paragraph even after an initial fragment. So I figured that we might as well include it when the fragment is all there is. But maybe when there is just one fragment, it looks better without a period. Who knows, and I guess it's not a particularly critical decision. But dns-update.nse now has a period in any case :)
2011-01-14 21:06:28 +00:00
dns-zeustracker.nse
…
dns-zone-transfer.nse
…
domcon-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
domcon-cmd.nse
…
domino-enum-users.nse
…
dpap-brute.nse
…
drda-brute.nse
…
drda-info.nse
…
epmd-info.nse
…
finger.nse
Add @output to finger.nse and telnet-brute.nse thanks to Gutek.
2010-03-31 23:25:39 +00:00
firewalk.nse
…
ftp-anon.nse
…
ftp-bounce.nse
…
ftp-brute.nse
…
ftp-libopie.nse
…
ftp-proftpd-backdoor.nse
…
ftp-vsftpd-backdoor.nse
…
ftp-vuln-cve2010-4221.nse
…
ganglia-info.nse
…
giop-info.nse
…
gopher-ls.nse
…
hadoop-datanode-info.nse
…
hadoop-jobtracker-info.nse
…
hadoop-namenode-info.nse
…
hadoop-secondary-namenode-info.nse
…
hadoop-tasktracker-info.nse
…
hbase-master-info.nse
…
hbase-region-info.nse
…
hddtemp-info.nse
…
hostmap.nse
…
http-affiliate-id.nse
…
http-apache-negotiation.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
http-auth-finder.nse
…
http-auth.nse
Fixed a bug in http-auth that failed to report errors properly.
2012-01-28 18:13:15 +00:00
http-awstatstotals-exec.nse
…
http-axis2-dir-traversal.nse
Update some script nsedoc descriptions for consistency. The description should almost always start with an active verb and never with the script name or 'this script'. Admittedly that makes the first sentence a fragment. The first sentence should be capitalized
2011-09-11 20:50:56 +00:00
http-backup-finder.nse
Fixed issue where file basename and/or suffix were missing, making the backup finder
2012-02-05 19:40:54 +00:00
http-barracuda-dir-traversal.nse
…
http-brute.nse
…
http-cakephp-version.nse
…
http-cors.nse
Update and canonicalize a bunch of script descriptions
2011-11-07 04:08:29 +00:00
http-date.nse
…
http-default-accounts.nse
Update some script nsedoc descriptions for consistency. The description should almost always start with an active verb and never with the script name or 'this script'. Admittedly that makes the first sentence a fragment. The first sentence should be capitalized
2011-09-11 20:50:56 +00:00
http-domino-enum-passwords.nse
…
http-email-harvest.nse
…
http-enum.nse
…
http-favicon.nse
…
http-form-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
http-generator.nse
…
http-google-malware.nse
…
http-grep.nse
…
http-headers.nse
…
http-iis-webdav-vuln.nse
…
http-joomla-brute.nse
…
http-litespeed-sourcecode-download.nse
…
http-majordomo2-dir-traversal.nse
…
http-malware-host.nse
…
http-method-tamper.nse
…
http-methods.nse
…
http-open-proxy.nse
…
http-open-redirect.nse
* bugfixes to several http scripts related to new redirect code in http
2012-02-11 22:37:14 +00:00
http-passwd.nse
Add more http-passwd payloads from Ange Gutek.
2010-11-11 19:02:17 +00:00
http-php-version.nse
…
http-proxy-brute.nse
…
http-put.nse
…
http-qnap-nas-info.nse
…
http-robots.txt.nse
…
http-robtex-reverse-ip.nse
…
http-title.nse
…
http-trace.nse
…
http-unsafe-output-escaping.nse
…
http-userdir-enum.nse
…
http-vhosts.nse
…
http-vmware-path-vuln.nse
…
http-vuln-cve2009-3960.nse
…
http-vuln-cve2010-2861.nse
…
http-vuln-cve2011-3192.nse
…
http-vuln-cve2011-3368.nse
…
http-waf-detect.nse
Improve some NSEDoc descriptions
2011-09-11 20:44:07 +00:00
http-wordpress-brute.nse
…
http-wordpress-enum.nse
…
http-wordpress-plugins.nse
…
iax2-brute.nse
…
iax2-version.nse
…
imap-brute.nse
minor updates to the nsedoc descriptions for some scripts
2011-09-11 18:26:37 +00:00
imap-capabilities.nse
…
informix-brute.nse
…
informix-query.nse
Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry
2011-07-27 03:28:13 +00:00
informix-tables.nse
…
ip-geolocation-geobytes.nse
Removed svn:execute property from certain .NSE scripts. This was enabling the execute bit on files when they were checked out.
2012-02-08 04:11:10 +00:00
ip-geolocation-geoplugin.nse
…
ip-geolocation-ipinfodb.nse
…
ip-geolocation-maxmind.nse
…
ipidseq.nse
…
ipv6-node-info.nse
Consistent naming of the address fields between IPv4 and IPv6.
2012-01-21 14:46:00 +00:00
irc-botnet-channels.nse
…
irc-brute.nse
Fixed a bug where the script would crash if the error code could not be
2012-01-19 00:38:00 +00:00
irc-info.nse
o [NSE] Made irc-info.nse handle the case where the MOTD is missing.
2011-09-21 05:09:26 +00:00
irc-unrealircd-backdoor.nse
…
iscsi-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
iscsi-info.nse
…
jdwp-version.nse
…
krb5-enum-users.nse
…
ldap-brute.nse
…
ldap-novell-getpass.nse
…
ldap-rootdse.nse
…
ldap-search.nse
Added support for the LDAP extensibleMatch filter to ldap.lua. LDAP searches using this take the following format:
2011-10-31 00:27:03 +00:00
lexmark-config.nse
…
lltd-discovery.nse
Removed svn:execute property from certain .NSE scripts. This was enabling the execute bit on files when they were checked out.
2012-02-08 04:11:10 +00:00
maxdb-info.nse
o [NSE] Added maxdb-info script that tries to enumerate version and database
2011-11-17 22:12:59 +00:00
membase-brute.nse
Some minor NSEDoc updates on scripts we completed in January 2012
2012-02-10 08:08:51 +00:00
membase-http-info.nse
…
memcached-info.nse
…
metasploit-xmlrpc-brute.nse
o [NSE] Re-enabled support for guessing the username in addition to password
2011-11-11 05:52:52 +00:00
modbus-discover.nse
Minor NSEDoc summary cleanup
2011-01-21 08:28:38 +00:00
mongodb-brute.nse
…
mongodb-databases.nse
…
mongodb-info.nse
…
ms-sql-brute.nse
…
ms-sql-config.nse
…
ms-sql-dump-hashes.nse
…
ms-sql-empty-password.nse
…
ms-sql-hasdbaccess.nse
…
ms-sql-info.nse
…
ms-sql-query.nse
…
ms-sql-tables.nse
…
ms-sql-xp-cmdshell.nse
…
mysql-audit.nse
…
mysql-brute.nse
…
mysql-databases.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
mysql-empty-password.nse
…
mysql-info.nse
…
mysql-users.nse
…
mysql-variables.nse
…
nat-pmp-info.nse
…
nat-pmp-mapport.nse
…
nbstat.nse
…
ncp-enum-users.nse
o [NSE] Made changes to the categories of the following scripts. Their new
2011-10-22 19:00:33 +00:00
ncp-serverinfo.nse
o [NSE] Made the following scripts in the default category:
2011-07-18 09:50:18 +00:00
ndmp-fs-info.nse
…
ndmp-version.nse
o [NSE] Added a Network Data Management Protocol (ndmp) library and the
2012-02-19 14:56:17 +00:00
nessus-brute.nse
Update and canonicalize a bunch of script descriptions
2011-11-07 04:08:29 +00:00
nessus-xmlrpc-brute.nse
o [NSE] Added script nessus-xmlrpc-brute that performs brute force password
2012-01-17 11:53:23 +00:00
netbus-auth-bypass.nse
…
netbus-brute.nse
…
netbus-info.nse
…
netbus-version.nse
…
nexpose-brute.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
nfs-ls.nse
…
nfs-showmount.nse
…
nfs-statfs.nse
…
nping-brute.nse
…
nrpe-enum.nse
…
ntp-info.nse
…
ntp-monlist.nse
o [NSE] Added ipv6 support to the wsdd, dnssd and upnp libraries. Applied
2011-06-16 05:29:42 +00:00
omp2-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
omp2-enum-targets.nse
…
openlookup-info.nse
…
openvas-otp-brute.nse
…
oracle-brute.nse
…
oracle-enum-users.nse
…
oracle-sid-brute.nse
…
ovs-agent-version.nse
…
p2p-conficker.nse
…
path-mtu.nse
…
pgsql-brute.nse
…
pjl-ready-message.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
pop3-brute.nse
…
pop3-capabilities.nse
…
pptp-version.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
qscan.nse
…
quake3-info.nse
…
quake3-master-getservers.nse
…
realvnc-auth-bypass.nse
…
redis-brute.nse
Some minor NSEDoc updates on scripts we completed in January 2012
2012-02-10 08:08:51 +00:00
redis-info.nse
…
resolveall.nse
…
reverse-index.nse
…
rexec-brute.nse
…
riak-http-info.nse
…
rlogin-brute.nse
…
rmi-dumpregistry.nse
Use java-rmi for the the Java RMI service name. Suggested by martin
2011-06-21 00:03:16 +00:00
rpcap-brute.nse
…
rpcap-info.nse
o [NSE] Added the library rpcap and the scripts rpcap-brute and rpcap-info
2012-03-02 12:39:18 +00:00
rpcinfo.nse
Oops, I forgot to add the comment symbols to my nsedoc @output changes to this script.
2011-03-19 18:58:31 +00:00
rsync-brute.nse
o [NSE] Added a rsync library and two new script:
2012-02-05 10:10:59 +00:00
rsync-list-modules.nse
…
rtsp-methods.nse
…
rtsp-url-brute.nse
…
script.db
…
servicetags.nse
…
sip-brute.nse
Removed svn:execute property from certain .NSE scripts. This was enabling the execute bit on files when they were checked out.
2012-02-08 04:11:10 +00:00
sip-enum-users.nse
Went through all the new (since 5.51) scripts and improved (I hope) the nsedoc descriptions a bit and made some other very minor cleanups
2011-06-29 01:29:14 +00:00
skypev2-version.nse
…
smb-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
smb-check-vulns.nse
…
smb-enum-domains.nse
…
smb-enum-groups.nse
First-pass copyediting on the remaining scripts.
2010-07-12 17:19:26 +00:00
smb-enum-processes.nse
…
smb-enum-sessions.nse
Lots of little bugfixes throughout several smb scripts, mostly related to bad use of global variables
2010-09-24 00:31:12 +00:00
smb-enum-shares.nse
Merge from Dependencies branch (nmap-exp/patrick/dependencies)
2009-12-30 02:34:05 +00:00
smb-enum-users.nse
o [NSE] Made changes to the categories of the following scripts. Their new
2011-10-22 19:00:33 +00:00
smb-flood.nse
…
smb-mbenum.nse
…
smb-os-discovery.nse
…
smb-psexec.nse
…
smb-security-mode.nse
o [NSE] Make smb-security-mode run by default.
2011-07-25 21:40:31 +00:00
smb-server-stats.nse
Merge from Dependencies branch (nmap-exp/patrick/dependencies)
2009-12-30 02:34:05 +00:00
smb-system-info.nse
Lots of little bugfixes throughout several smb scripts, mostly related to bad use of global variables
2010-09-24 00:31:12 +00:00
smbv2-enabled.nse
…
smtp-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
smtp-commands.nse
…
smtp-enum-users.nse
…
smtp-open-relay.nse
…
smtp-strangeport.nse
…
smtp-vuln-cve2010-4344.nse
…
smtp-vuln-cve2011-1720.nse
…
smtp-vuln-cve2011-1764.nse
…
sniffer-detect.nse
…
snmp-brute.nse
o [NSE] Added local port to BPF filter in snmp-brute to fix bug that would
2011-12-29 08:49:38 +00:00
snmp-interfaces.nse
…
snmp-ios-config.nse
…
snmp-netstat.nse
Added missing error handling for connection timeouts
2010-08-31 13:38:50 +00:00
snmp-processes.nse
…
snmp-sysdescr.nse
…
snmp-win32-services.nse
…
snmp-win32-shares.nse
…
snmp-win32-software.nse
…
snmp-win32-users.nse
…
socks-auth-info.nse
…
socks-brute.nse
…
socks-open-proxy.nse
…
sql-injection.nse
…
ssh2-enum-algos.nse
…
ssh-hostkey.nse
…
sshv1.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
ssl-cert.nse
…
ssl-enum-ciphers.nse
…
ssl-google-cert-catalog.nse
…
ssl-known-key.nse
…
sslv2.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
stuxnet-detect.nse
…
svn-brute.nse
…
targets-ipv6-multicast-echo.nse
…
targets-ipv6-multicast-invalid-dst.nse
…
targets-ipv6-multicast-slaac.nse
…
targets-sniffer.nse
…
targets-traceroute.nse
…
telnet-brute.nse
…
telnet-encryption.nse
…
tftp-enum.nse
…
unusual-port.nse
…
upnp-info.nse
applied patch from Thomas Buchanan containing bugfixes and some re-factoring
2010-11-19 19:31:50 +00:00
url-snarf.nse
…
vmauthd-brute.nse
Some minor NSEDoc updates on scripts we completed in January 2012
2012-02-10 08:08:51 +00:00
vnc-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
vnc-info.nse
…
voldemort-info.nse
…
vuze-dht-info.nse
…
wdb-version.nse
…
whois.nse
…
wsdd-discover.nse
…
x11-access.nse
…
xdmcp-discover.nse
…
xmpp-brute.nse
…
xmpp-info.nse
Added xmpp-info.nse as a replacement for xmpp.nse (script from Vasily Kulikov).
2011-09-04 19:18:22 +00:00