PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-02-14 09:26:35 +00:00
Code Issues Projects Releases Wiki Activity
Files
60063bbd180d2ea2431617c229e1e079fc1ed107
nmap/scripts
History
patrik 2a2f64590a o [NSE] Added script nessus-xmlrpc-brute that performs brute force password 
guessing against the Nessus web GUI. [Patrik]
2012-01-17 11:53:23 +00:00
..
address-info.nse
Exclude ::1 from being an IPv4-compatible address (0.0.0.1) in address-info.
2011-12-23 21:14:53 +00:00
afp-brute.nse
…
afp-ls.nse
…
afp-path-vuln.nse
…
afp-serverinfo.nse
…
afp-showmount.nse
…
amqp-info.nse
…
asn-query.nse
…
auth-owners.nse
…
auth-spoof.nse
Do copyediting of NSEDoc. This is a first pass up to ms-sql-xp-cmdshell.
2010-07-09 23:32:18 +00:00
backorifice-brute.nse
…
backorifice-info.nse
Adding a dependency for backorifice-brute to backorifice-info
2011-06-30 15:47:32 +00:00
banner.nse
…
bitcoin-getaddr.nse
switched capitalization from BitCoin to Bitcoin as the latter seems to be more standard
2012-01-02 02:51:48 +00:00
bitcoin-info.nse
…
bitcoinrpc-info.nse
…
bittorrent-discovery.nse
…
broadcast-avahi-dos.nse
…
broadcast-db2-discover.nse
…
broadcast-dhcp-discover.nse
…
broadcast-dns-service-discovery.nse
…
broadcast-dropbox-listener.nse
…
broadcast-listener.nse
…
broadcast-ms-sql-discover.nse
…
broadcast-netbios-master-browser.nse
very minor nsedoc improvements
2012-01-07 03:04:18 +00:00
broadcast-novell-locate.nse
…
broadcast-pc-anywhere.nse
…
broadcast-pc-duo.nse
…
broadcast-ping.nse
…
broadcast-pppoe-discover.nse
…
broadcast-rip-discover.nse
…
broadcast-ripng-discover.nse
…
broadcast-sybase-asa-discover.nse
…
broadcast-upnp-info.nse
…
broadcast-wake-on-lan.nse
…
broadcast-wpad-discover.nse
…
broadcast-wsdd-discover.nse
…
citrix-brute-xml.nse
Change " \n" to just "\n" where appropriate in NSE. Leading newlines are
2010-09-30 05:03:39 +00:00
citrix-enum-apps-xml.nse
Spell-check NSEDoc.
2010-07-19 16:29:48 +00:00
citrix-enum-apps.nse
…
citrix-enum-servers-xml.nse
…
citrix-enum-servers.nse
…
couchdb-databases.nse
Edit some script descriptions for better line breaks when rendered as
2010-07-17 16:47:31 +00:00
couchdb-stats.nse
…
creds-summary.nse
…
cvs-brute-repository.nse
…
cvs-brute.nse
…
daap-get-library.nse
…
daytime.nse
Add @output sections to these scripts:
2010-03-31 21:45:21 +00:00
db2-das-info.nse
Addressed a condition in db2-das-info.nse where the script would crash
2011-02-16 00:13:38 +00:00
db2-discover.nse
Fix a typo in category name
2011-07-21 05:12:33 +00:00
dhcp-discover.nse
…
dns-blacklist.nse
…
dns-brute.nse
…
dns-cache-snoop.nse
Do copyediting of NSEDoc. This is a first pass up to ms-sql-xp-cmdshell.
2010-07-09 23:32:18 +00:00
dns-fuzz.nse
…
dns-nsec-enum.nse
…
dns-nsid.nse
…
dns-random-srcport.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
dns-random-txid.nse
…
dns-recursion.nse
Make the set of script "default and intrusive" empty.
2011-04-30 19:21:38 +00:00
dns-service-discovery.nse
…
dns-update.nse
I've been putting periods at the end of these single sentence fragment descriptions for consistency, although I don't really know which way is best. When there are multiple setences in that first paragraph, we obviously need the paragraph even after an initial fragment. So I figured that we might as well include it when the fragment is all there is. But maybe when there is just one fragment, it looks better without a period. Who knows, and I guess it's not a particularly critical decision. But dns-update.nse now has a period in any case :)
2011-01-14 21:06:28 +00:00
dns-zeustracker.nse
…
dns-zone-transfer.nse
…
domcon-brute.nse
…
domcon-cmd.nse
…
domino-enum-users.nse
Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry
2011-07-27 03:28:13 +00:00
dpap-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
drda-brute.nse
…
drda-info.nse
…
epmd-info.nse
…
finger.nse
…
firewalk.nse
…
ftp-anon.nse
…
ftp-bounce.nse
…
ftp-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
ftp-libopie.nse
…
ftp-proftpd-backdoor.nse
…
ftp-vsftpd-backdoor.nse
…
ftp-vuln-cve2010-4221.nse
…
ganglia-info.nse
…
giop-info.nse
o [NSE] Made the following scripts in the default category:
2011-07-18 09:50:18 +00:00
gopher-ls.nse
…
hadoop-datanode-info.nse
…
hadoop-jobtracker-info.nse
…
hadoop-namenode-info.nse
…
hadoop-secondary-namenode-info.nse
…
hadoop-tasktracker-info.nse
…
hbase-master-info.nse
…
hbase-region-info.nse
…
hddtemp-info.nse
…
hostmap.nse
…
http-affiliate-id.nse
…
http-apache-negotiation.nse
…
http-auth.nse
…
http-awstatstotals-exec.nse
…
http-axis2-dir-traversal.nse
Update some script nsedoc descriptions for consistency. The description should almost always start with an active verb and never with the script name or 'this script'. Admittedly that makes the first sentence a fragment. The first sentence should be capitalized
2011-09-11 20:50:56 +00:00
http-backup-finder.nse
…
http-barracuda-dir-traversal.nse
…
http-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
http-cakephp-version.nse
…
http-cors.nse
Update and canonicalize a bunch of script descriptions
2011-11-07 04:08:29 +00:00
http-date.nse
…
http-default-accounts.nse
Update some script nsedoc descriptions for consistency. The description should almost always start with an active verb and never with the script name or 'this script'. Admittedly that makes the first sentence a fragment. The first sentence should be capitalized
2011-09-11 20:50:56 +00:00
http-domino-enum-passwords.nse
…
http-email-harvest.nse
…
http-enum.nse
…
http-favicon.nse
…
http-form-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
http-generator.nse
…
http-google-malware.nse
…
http-grep.nse
…
http-headers.nse
Updates the script to use stdnse.get_script_args() instead of reading the arguments from the registry and removes extra commented lines.
2011-10-07 07:01:08 +00:00
http-iis-webdav-vuln.nse
…
http-joomla-brute.nse
…
http-litespeed-sourcecode-download.nse
…
http-majordomo2-dir-traversal.nse
…
http-malware-host.nse
…
http-method-tamper.nse
…
http-methods.nse
…
http-open-proxy.nse
…
http-open-redirect.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
http-passwd.nse
Add more http-passwd payloads from Ange Gutek.
2010-11-11 19:02:17 +00:00
http-php-version.nse
…
http-proxy-brute.nse
…
http-put.nse
…
http-robots.txt.nse
…
http-robtex-reverse-ip.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
http-title.nse
…
http-trace.nse
…
http-unsafe-output-escaping.nse
…
http-userdir-enum.nse
…
http-vhosts.nse
Fix an indexing bug in http-vhosts.nse. Found by Daniel Miller.
2011-07-18 20:44:22 +00:00
http-vmware-path-vuln.nse
Remove 3 vuln scripts from default category as discussed at http://seclists.org/nmap-dev/2011/q3/732
2011-09-07 20:40:51 +00:00
http-vuln-cve2009-3960.nse
…
http-vuln-cve2011-3192.nse
…
http-vuln-cve2011-3368.nse
…
http-waf-detect.nse
Improve some NSEDoc descriptions
2011-09-11 20:44:07 +00:00
http-wordpress-brute.nse
…
http-wordpress-enum.nse
…
http-wordpress-plugins.nse
…
iax2-version.nse
…
imap-brute.nse
…
imap-capabilities.nse
…
informix-brute.nse
…
informix-query.nse
…
informix-tables.nse
…
ip-geolocation-geobytes.nse
Change CRLF line endings to LF in ip-geolocation-*.nse.
2011-11-02 16:50:38 +00:00
ip-geolocation-geoplugin.nse
…
ip-geolocation-ipinfodb.nse
…
ip-geolocation-maxmind.nse
…
ipidseq.nse
Avoid bloating the registry by using variables to transfer information from
2011-06-20 21:06:14 +00:00
ipv6-node-info.nse
…
irc-botnet-channels.nse
Minor updates to description text
2011-12-29 10:54:55 +00:00
irc-brute.nse
…
irc-info.nse
…
irc-unrealircd-backdoor.nse
…
iscsi-brute.nse
…
iscsi-info.nse
o [NSE] Updated the categories of the following scripts:
2011-07-11 22:03:17 +00:00
jdwp-version.nse
…
krb5-enum-users.nse
…
ldap-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
ldap-novell-getpass.nse
…
ldap-rootdse.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
ldap-search.nse
…
lexmark-config.nse
…
lltd-discovery.nse
…
maxdb-info.nse
o [NSE] Added maxdb-info script that tries to enumerate version and database
2011-11-17 22:12:59 +00:00
membase-brute.nse
…
membase-http-info.nse
o [NSE] Added the script membase-brute that performs password brute force
2012-01-10 18:19:21 +00:00
memcached-info.nse
…
metasploit-xmlrpc-brute.nse
…
modbus-discover.nse
…
mongodb-databases.nse
…
mongodb-info.nse
…
ms-sql-brute.nse
…
ms-sql-config.nse
…
ms-sql-dump-hashes.nse
…
ms-sql-empty-password.nse
…
ms-sql-hasdbaccess.nse
…
ms-sql-info.nse
…
ms-sql-query.nse
…
ms-sql-tables.nse
…
ms-sql-xp-cmdshell.nse
…
mysql-audit.nse
…
mysql-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
mysql-databases.nse
…
mysql-empty-password.nse
Fixed a number of incorrect receives and replaced them with receive_bytes.
2010-08-24 20:25:46 +00:00
mysql-info.nse
…
mysql-users.nse
…
mysql-variables.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
nat-pmp-info.nse
…
nat-pmp-mapport.nse
…
nbstat.nse
…
ncp-enum-users.nse
…
ncp-serverinfo.nse
…
nessus-brute.nse
…
nessus-xmlrpc-brute.nse
…
netbus-auth-bypass.nse
…
netbus-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
netbus-info.nse
…
netbus-version.nse
Apply a patch from Toni Ruottu with some small misc. improvements to the netbus-* scripts. Also I changed netbus-auth-bypass to the safe category as recommended by Toni
2011-01-15 21:28:45 +00:00
nexpose-brute.nse
…
nfs-ls.nse
Fix a typo in a comment.
2011-04-22 22:21:43 +00:00
nfs-showmount.nse
…
nfs-statfs.nse
Normalize tab.lua usage so that a call to tab.nextrow comes after (not
2010-12-30 21:08:25 +00:00
nping-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
nrpe-enum.nse
…
ntp-info.nse
Add a default timeout of 5000 ms to the ntp-info script, and don't try
2009-12-21 20:24:45 +00:00
ntp-monlist.nse
…
omp2-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
omp2-enum-targets.nse
…
openlookup-info.nse
…
openvas-otp-brute.nse
…
oracle-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
oracle-enum-users.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
oracle-sid-brute.nse
…
ovs-agent-version.nse
Update ovs-agent-version.nse with a signature from version 3.0.1.
2011-09-23 21:42:06 +00:00
p2p-conficker.nse
Fix incorrect (broken) return value in p2p-conficker.nse. Spotted by
2011-07-18 20:40:47 +00:00
path-mtu.nse
…
pgsql-brute.nse
…
pjl-ready-message.nse
…
pop3-brute.nse
…
pop3-capabilities.nse
Merge r18689:r19511 from /nmap-exp/djalal/nse-rules.
2010-08-06 16:40:03 +00:00
pptp-version.nse
…
qscan.nse
Avoid bloating the registry by using variables to transfer information from
2011-06-20 21:06:14 +00:00
quake3-info.nse
…
quake3-master-getservers.nse
…
realvnc-auth-bypass.nse
…
redis-brute.nse
…
redis-info.nse
o [NSE] Added the script redis-info that lists version and statistic information
2012-01-02 11:27:06 +00:00
resolveall.nse
…
reverse-index.nse
…
rexec-brute.nse
…
riak-http-info.nse
…
rlogin-brute.nse
…
rmi-dumpregistry.nse
…
rpcinfo.nse
…
rtsp-methods.nse
Removed e-mail address from author variable in rtsp-methods and irc-brute
2011-11-11 15:31:50 +00:00
rtsp-url-brute.nse
…
script.db
…
servicetags.nse
…
sip-brute.nse
…
sip-enum-users.nse
Went through all the new (since 5.51) scripts and improved (I hope) the nsedoc descriptions a bit and made some other very minor cleanups
2011-06-29 01:29:14 +00:00
skypev2-version.nse
…
smb-brute.nse
…
smb-check-vulns.nse
…
smb-enum-domains.nse
Fixed a bug where a ternary operator meant to prevent a nil pointer exception was outside of a math.floor() call, making it totally worthless. I moved the math.floor() outside the operation, fixing it.
2010-09-24 01:33:01 +00:00
smb-enum-groups.nse
…
smb-enum-processes.nse
Change " \n" to just "\n" where appropriate in NSE. Leading newlines are
2010-09-30 05:03:39 +00:00
smb-enum-sessions.nse
Lots of little bugfixes throughout several smb scripts, mostly related to bad use of global variables
2010-09-24 00:31:12 +00:00
smb-enum-shares.nse
…
smb-enum-users.nse
…
smb-flood.nse
…
smb-mbenum.nse
…
smb-os-discovery.nse
…
smb-psexec.nse
Update some script nsedoc descriptions for consistency. The description should almost always start with an active verb and never with the script name or 'this script'. Admittedly that makes the first sentence a fragment. The first sentence should be capitalized
2011-09-11 20:50:56 +00:00
smb-security-mode.nse
…
smb-server-stats.nse
…
smb-system-info.nse
Lots of little bugfixes throughout several smb scripts, mostly related to bad use of global variables
2010-09-24 00:31:12 +00:00
smbv2-enabled.nse
Fixed the same small bug in smbv2-enabled.nse (was still using the wrong variable for an error message)
2010-08-13 20:39:20 +00:00
smtp-brute.nse
…
smtp-commands.nse
…
smtp-enum-users.nse
o [NSE] Made changes to the categories of the following scripts. Their new
2011-10-22 19:00:33 +00:00
smtp-open-relay.nse
…
smtp-strangeport.nse
…
smtp-vuln-cve2010-4344.nse
…
smtp-vuln-cve2011-1720.nse
…
smtp-vuln-cve2011-1764.nse
…
sniffer-detect.nse
o [NSE] Call the new nmap.get_interface_info() function instead of
2011-04-22 22:19:08 +00:00
snmp-brute.nse
…
snmp-interfaces.nse
…
snmp-ios-config.nse
…
snmp-netstat.nse
…
snmp-processes.nse
…
snmp-sysdescr.nse
…
snmp-win32-services.nse
…
snmp-win32-shares.nse
…
snmp-win32-software.nse
…
snmp-win32-users.nse
o [NSE] Made changes to the categories of the following scripts. Their new
2011-10-22 19:00:33 +00:00
socks-auth-info.nse
…
socks-brute.nse
o [NSE] Added the script socks-brute that performs brute force password
2012-01-02 11:15:34 +00:00
socks-open-proxy.nse
…
sql-injection.nse
…
ssh2-enum-algos.nse
…
ssh-hostkey.nse
Sort duplicates output in ssh-hostkey.nse.
2011-12-30 04:05:36 +00:00
sshv1.nse
…
ssl-cert.nse
…
ssl-enum-ciphers.nse
Don't redundantly list the NULL compressor in ssl-num-ciphers.nse.
2011-09-14 18:21:23 +00:00
ssl-google-cert-catalog.nse
…
ssl-known-key.nse
trivial nsedoc change
2011-06-30 09:11:57 +00:00
sslv2.nse
…
stuxnet-detect.nse
…
svn-brute.nse
…
targets-ipv6-multicast-echo.nse
…
targets-ipv6-multicast-invalid-dst.nse
…
targets-ipv6-multicast-slaac.nse
…
targets-sniffer.nse
…
targets-traceroute.nse
…
telnet-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
telnet-encryption.nse
…
tftp-enum.nse
…
unusual-port.nse
…
upnp-info.nse
…
vmauthd-brute.nse
…
vnc-brute.nse
…
vnc-info.nse
o [NSE] Made the following scripts in the default category:
2011-07-18 09:50:18 +00:00
vuze-dht-info.nse
…
wdb-version.nse
…
whois.nse
Corrected defective handling of etag header which prevented conditional HTTP
2011-09-28 13:02:43 +00:00
wsdd-discover.nse
…
x11-access.nse
…
xmpp-brute.nse
…
xmpp-info.nse
…