PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-02-12 00:16:35 +00:00
Code Issues Projects Releases Wiki Activity
Files
4e3c3f757e91babd0c1b32f06b2ea5d2d8f6f57b
nmap/scripts
History
patrik c7231cf96f Reverted previous http-auth patch. [Patrik]
2011-12-19 06:57:51 +00:00
..
address-info.nse
Add missing datafiles import to address-info.
2011-10-04 19:40:04 +00:00
afp-brute.nse
…
afp-ls.nse
…
afp-path-vuln.nse
…
afp-serverinfo.nse
…
afp-showmount.nse
…
amqp-info.nse
Update and canonicalize a bunch of script descriptions
2011-11-07 04:08:29 +00:00
asn-query.nse
…
auth-owners.nse
…
auth-spoof.nse
…
backorifice-brute.nse
…
backorifice-info.nse
Adding a dependency for backorifice-brute to backorifice-info
2011-06-30 15:47:32 +00:00
banner.nse
…
bitcoin-getaddr.nse
…
bitcoin-info.nse
o [NSE] Added the scripts bitcoin-info, bitcoin-getaddr and a supporting
2011-11-09 18:56:16 +00:00
bitcoinrpc-info.nse
…
bittorrent-discovery.nse
…
broadcast-avahi-dos.nse
o [NSE] Added broadcast-avahi-dos.nse, which tries to detect if the
2011-05-02 23:38:18 +00:00
broadcast-db2-discover.nse
…
broadcast-dhcp-discover.nse
…
broadcast-dns-service-discovery.nse
…
broadcast-dropbox-listener.nse
…
broadcast-listener.nse
…
broadcast-ms-sql-discover.nse
…
broadcast-netbios-master-browser.nse
o [NSE] Added two new scripts broadcast-netbios-master-browser and smb-mbenum:
2011-06-19 18:47:19 +00:00
broadcast-novell-locate.nse
…
broadcast-pc-anywhere.nse
o [NSE] Added the script broadcast-pc-anywhere that discovers host running the
2011-12-18 09:33:38 +00:00
broadcast-pc-duo.nse
…
broadcast-ping.nse
…
broadcast-rip-discover.nse
…
broadcast-sybase-asa-discover.nse
…
broadcast-upnp-info.nse
…
broadcast-wake-on-lan.nse
…
broadcast-wsdd-discover.nse
Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG
2011-01-14 10:20:51 +00:00
citrix-brute-xml.nse
Change " \n" to just "\n" where appropriate in NSE. Leading newlines are
2010-09-30 05:03:39 +00:00
citrix-enum-apps-xml.nse
…
citrix-enum-apps.nse
…
citrix-enum-servers-xml.nse
…
citrix-enum-servers.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
couchdb-databases.nse
…
couchdb-stats.nse
…
creds-summary.nse
…
cvs-brute-repository.nse
…
cvs-brute.nse
…
daap-get-library.nse
…
daytime.nse
…
db2-das-info.nse
…
db2-discover.nse
…
dhcp-discover.nse
…
dns-brute.nse
…
dns-cache-snoop.nse
Do copyediting of NSEDoc. This is a first pass up to ms-sql-xp-cmdshell.
2010-07-09 23:32:18 +00:00
dns-fuzz.nse
…
dns-nsec-enum.nse
…
dns-random-srcport.nse
…
dns-random-txid.nse
…
dns-recursion.nse
…
dns-service-discovery.nse
…
dns-update.nse
…
dns-zeustracker.nse
…
dns-zone-transfer.nse
…
domcon-brute.nse
…
domcon-cmd.nse
…
domino-enum-users.nse
…
dpap-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
drda-brute.nse
…
drda-info.nse
…
epmd-info.nse
Add epmd-info script from Toni Ruottu.
2011-04-04 18:28:33 +00:00
finger.nse
…
firewalk.nse
…
ftp-anon.nse
…
ftp-bounce.nse
…
ftp-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
ftp-libopie.nse
…
ftp-proftpd-backdoor.nse
…
ftp-vsftpd-backdoor.nse
…
ftp-vuln-cve2010-4221.nse
…
ganglia-info.nse
…
giop-info.nse
o [NSE] Made the following scripts in the default category:
2011-07-18 09:50:18 +00:00
gopher-ls.nse
Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry
2011-07-27 03:28:13 +00:00
hadoop-datanode-info.nse
…
hadoop-jobtracker-info.nse
…
hadoop-namenode-info.nse
…
hadoop-secondary-namenode-info.nse
…
hadoop-tasktracker-info.nse
…
hbase-master-info.nse
…
hbase-region-info.nse
…
hddtemp-info.nse
…
hostmap.nse
…
http-affiliate-id.nse
Went through all the new (since 5.51) scripts and improved (I hope) the nsedoc descriptions a bit and made some other very minor cleanups
2011-06-29 01:29:14 +00:00
http-apache-negotiation.nse
…
http-auth.nse
…
http-awstatstotals-exec.nse
…
http-axis2-dir-traversal.nse
…
http-backup-finder.nse
o [NSE] Fixed issue in path encoding in the http-backup-finder script. [Patrik]
2011-12-11 09:17:21 +00:00
http-barracuda-dir-traversal.nse
Went through all the new (since 5.51) scripts and improved (I hope) the nsedoc descriptions a bit and made some other very minor cleanups
2011-06-29 01:29:14 +00:00
http-brute.nse
…
http-cakephp-version.nse
…
http-cors.nse
…
http-date.nse
…
http-default-accounts.nse
…
http-domino-enum-passwords.nse
…
http-email-harvest.nse
added missing license variable to http-email-harvest
2011-12-10 10:16:56 +00:00
http-enum.nse
…
http-favicon.nse
…
http-form-brute.nse
…
http-google-malware.nse
…
http-grep.nse
o [NSE] Added the script http-grep that attempts to match web pages and urls
2011-12-11 19:44:26 +00:00
http-headers.nse
…
http-iis-webdav-vuln.nse
…
http-joomla-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
http-litespeed-sourcecode-download.nse
…
http-majordomo2-dir-traversal.nse
…
http-malware-host.nse
…
http-method-tamper.nse
…
http-methods.nse
…
http-open-proxy.nse
…
http-open-redirect.nse
…
http-passwd.nse
…
http-php-version.nse
…
http-put.nse
…
http-robots.txt.nse
Rename a couple http scripts to make it more clear that they use the http protocol and for consistency with other script names
2010-11-20 04:22:51 +00:00
http-robtex-reverse-ip.nse
…
http-title.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
http-trace.nse
…
http-unsafe-output-escaping.nse
…
http-userdir-enum.nse
…
http-vhosts.nse
…
http-vmware-path-vuln.nse
…
http-vuln-cve2011-3192.nse
…
http-vuln-cve2011-3368.nse
…
http-waf-detect.nse
…
http-wordpress-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
http-wordpress-enum.nse
…
http-wordpress-plugins.nse
…
iax2-version.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
imap-brute.nse
…
imap-capabilities.nse
…
informix-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
informix-query.nse
…
informix-tables.nse
…
ip-geolocation-geobytes.nse
…
ip-geolocation-geoplugin.nse
…
ip-geolocation-ipinfodb.nse
Change CRLF line endings to LF in ip-geolocation-*.nse.
2011-11-02 16:50:38 +00:00
ip-geolocation-maxmind.nse
Change CRLF line endings to LF in ip-geolocation-*.nse.
2011-11-02 16:50:38 +00:00
ipidseq.nse
…
ipv6-node-info.nse
…
irc-botnet-channels.nse
…
irc-brute.nse
…
irc-info.nse
…
irc-unrealircd-backdoor.nse
…
iscsi-brute.nse
…
iscsi-info.nse
…
jdwp-version.nse
Small patch to jdwp-version.nse to address a corner case false positive.
2011-10-02 22:44:21 +00:00
krb5-enum-users.nse
…
ldap-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
ldap-novell-getpass.nse
…
ldap-rootdse.nse
…
ldap-search.nse
…
lexmark-config.nse
…
lltd-discovery.nse
…
maxdb-info.nse
…
metasploit-xmlrpc-brute.nse
o [NSE] Re-enabled support for guessing the username in addition to password
2011-11-11 05:52:52 +00:00
modbus-discover.nse
…
mongodb-databases.nse
…
mongodb-info.nse
…
ms-sql-brute.nse
…
ms-sql-config.nse
…
ms-sql-dump-hashes.nse
…
ms-sql-empty-password.nse
…
ms-sql-hasdbaccess.nse
…
ms-sql-info.nse
…
ms-sql-query.nse
…
ms-sql-tables.nse
…
ms-sql-xp-cmdshell.nse
…
mysql-audit.nse
…
mysql-brute.nse
…
mysql-databases.nse
…
mysql-empty-password.nse
…
mysql-info.nse
Do copyediting of NSEDoc up through pgsql-brute.
2010-07-12 06:21:03 +00:00
mysql-users.nse
o [NSE] Made changes to the categories of the following scripts. Their new
2011-10-22 19:00:33 +00:00
mysql-variables.nse
…
nat-pmp-info.nse
…
nbstat.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
ncp-enum-users.nse
…
ncp-serverinfo.nse
…
nessus-brute.nse
…
netbus-auth-bypass.nse
Minor typo fixes
2011-06-03 09:24:51 +00:00
netbus-brute.nse
…
netbus-info.nse
Apply a patch from Toni Ruottu with some small misc. improvements to the netbus-* scripts. Also I changed netbus-auth-bypass to the safe category as recommended by Toni
2011-01-15 21:28:45 +00:00
netbus-version.nse
…
nexpose-brute.nse
…
nfs-ls.nse
Fix a typo in a comment.
2011-04-22 22:21:43 +00:00
nfs-showmount.nse
…
nfs-statfs.nse
Normalize tab.lua usage so that a call to tab.nextrow comes after (not
2010-12-30 21:08:25 +00:00
nping-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
nrpe-enum.nse
Fix the nrpe-enum portrule. It was returning a function, thus always
2011-02-01 21:25:46 +00:00
ntp-info.nse
…
ntp-monlist.nse
…
omp2-brute.nse
…
omp2-enum-targets.nse
…
openlookup-info.nse
Update and canonicalize a bunch of script descriptions
2011-11-07 04:08:29 +00:00
openvas-otp-brute.nse
…
oracle-brute.nse
…
oracle-enum-users.nse
…
oracle-sid-brute.nse
…
ovs-agent-version.nse
Update ovs-agent-version.nse with a signature from version 3.0.1.
2011-09-23 21:42:06 +00:00
p2p-conficker.nse
Fix incorrect (broken) return value in p2p-conficker.nse. Spotted by
2011-07-18 20:40:47 +00:00
path-mtu.nse
fix whitespace inconsistencies from copy-and-pastes
2011-05-06 23:48:41 +00:00
pgsql-brute.nse
…
pjl-ready-message.nse
…
pop3-brute.nse
…
pop3-capabilities.nse
Merge r18689:r19511 from /nmap-exp/djalal/nse-rules.
2010-08-06 16:40:03 +00:00
pptp-version.nse
…
qscan.nse
…
quake3-info.nse
…
quake3-master-getservers.nse
…
realvnc-auth-bypass.nse
…
resolveall.nse
…
reverse-index.nse
o [NSE] Added the script reverse-index that creates creates a reverse index
2011-11-29 00:48:59 +00:00
rexec-brute.nse
…
rlogin-brute.nse
…
rmi-dumpregistry.nse
…
rpcinfo.nse
…
rtsp-methods.nse
…
rtsp-url-brute.nse
…
script.db
…
servicetags.nse
…
sip-brute.nse
…
sip-enum-users.nse
…
skypev2-version.nse
…
smb-brute.nse
…
smb-check-vulns.nse
…
smb-enum-domains.nse
…
smb-enum-groups.nse
…
smb-enum-processes.nse
…
smb-enum-sessions.nse
…
smb-enum-shares.nse
…
smb-enum-users.nse
…
smb-flood.nse
…
smb-mbenum.nse
Removed prerule from script [Patrik]
2011-06-23 11:28:14 +00:00
smb-os-discovery.nse
…
smb-psexec.nse
…
smb-security-mode.nse
…
smb-server-stats.nse
…
smb-system-info.nse
…
smbv2-enabled.nse
…
smtp-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
smtp-commands.nse
o [NSE] Updated the SMTP scripts to use the new SMTP Lua library.
2011-06-13 13:19:26 +00:00
smtp-enum-users.nse
…
smtp-open-relay.nse
…
smtp-strangeport.nse
…
smtp-vuln-cve2010-4344.nse
…
smtp-vuln-cve2011-1720.nse
…
smtp-vuln-cve2011-1764.nse
…
sniffer-detect.nse
o [NSE] Call the new nmap.get_interface_info() function instead of
2011-04-22 22:19:08 +00:00
snmp-brute.nse
…
snmp-interfaces.nse
…
snmp-ios-config.nse
Went through all the new (since 5.51) scripts and improved (I hope) the nsedoc descriptions a bit and made some other very minor cleanups
2011-06-29 01:29:14 +00:00
snmp-netstat.nse
…
snmp-processes.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
snmp-sysdescr.nse
Add @usage to snmp-sysdescr.
2011-09-20 16:12:07 +00:00
snmp-win32-services.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
snmp-win32-shares.nse
…
snmp-win32-software.nse
…
snmp-win32-users.nse
…
socks-open-proxy.nse
…
sql-injection.nse
…
ssh2-enum-algos.nse
…
ssh-hostkey.nse
…
sshv1.nse
…
ssl-cert.nse
o [NSE] Applied patch to the ssl-cert script that adds support for getting SSL
2011-12-06 15:49:36 +00:00
ssl-enum-ciphers.nse
…
ssl-google-cert-catalog.nse
Light copyediting of NSEDoc in ssl-google-cert-catalog.nse.
2011-12-06 05:01:18 +00:00
ssl-known-key.nse
trivial nsedoc change
2011-06-30 09:11:57 +00:00
sslv2.nse
…
stuxnet-detect.nse
…
svn-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
targets-ipv6-multicast-echo.nse
…
targets-ipv6-multicast-invalid-dst.nse
…
targets-ipv6-multicast-slaac.nse
…
targets-sniffer.nse
Use promiscuous mode in targets-sniffer.nse.
2011-11-08 16:10:35 +00:00
targets-traceroute.nse
…
telnet-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
tftp-enum.nse
…
unusual-port.nse
…
upnp-info.nse
…
vnc-brute.nse
…
vnc-info.nse
…
vuze-dht-info.nse
o [NSE] Added the a Vuze library, port probe and the script vuze-dht-info. The
2011-12-03 09:18:58 +00:00
wdb-version.nse
…
whois.nse
Corrected defective handling of etag header which prevented conditional HTTP
2011-09-28 13:02:43 +00:00
wsdd-discover.nse
…
x11-access.nse
…
xmpp-brute.nse
…
xmpp-info.nse
…