PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-01-20 05:09:02 +00:00
Code Issues Projects Releases Wiki Activity
Files
751d5fd58b41e3210ec8a459364c8c0b277808fa
nmap/scripts
History
dmiller 6637d76846 Use SOA request to get domain name in dns-zone-transfer. Fixes #3014
2025-07-14 19:17:09 +00:00
..
acarsd-info.nse
…
address-info.nse
…
afp-brute.nse
…
afp-ls.nse
…
afp-path-vuln.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
afp-serverinfo.nse
…
afp-showmount.nse
…
ajp-auth.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
ajp-brute.nse
…
ajp-headers.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
ajp-methods.nse
…
ajp-request.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
allseeingeye-info.nse
…
amqp-info.nse
…
asn-query.nse
more efficient match, avoiding strings
2018-08-18 01:00:16 +00:00
auth-owners.nse
…
auth-spoof.nse
…
backorifice-brute.nse
…
backorifice-info.nse
…
bacnet-info.nse
Fix some nonstandard NSEdoc
2025-05-16 19:28:10 +00:00
banner.nse
…
bitcoin-getaddr.nse
Move date/time functions from stdnse to datetime. See #517
2018-08-27 22:00:10 +00:00
bitcoin-info.nse
…
bitcoinrpc-info.nse
…
bittorrent-discovery.nse
…
bjnp-discover.nse
…
broadcast-ataoe-discover.nse
Remove redundant code, already part of Frame:new()
2024-08-25 18:27:05 +00:00
broadcast-avahi-dos.nse
…
broadcast-bjnp-discover.nse
Enable IPv6 capability for broadcast-bjnp-discover
2024-05-21 18:49:37 +00:00
broadcast-db2-discover.nse
…
broadcast-dhcp6-discover.nse
Use stdnse.get_script_interfaces() for all relevant scripts
2024-05-24 19:01:16 +00:00
broadcast-dhcp-discover.nse
Resolves ether_type incompatibility in packet.Frame
2024-08-25 17:43:17 +00:00
broadcast-dns-service-discovery.nse
Update dnssd.lua and related scripts
2024-06-07 16:34:07 +00:00
broadcast-dropbox-listener.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
broadcast-eigrp-discovery.nse
Use stdnse.get_script_interfaces() for all relevant scripts
2024-05-24 19:01:16 +00:00
broadcast-hid-discoveryd.nse
…
broadcast-igmp-discovery.nse
Make some broadcast scripts 'safe' category
2024-10-08 21:14:40 +00:00
broadcast-jenkins-discover.nse
…
broadcast-listener.nse
Use stdnse.get_script_interfaces() for all relevant scripts
2024-05-24 19:01:16 +00:00
broadcast-ms-sql-discover.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
broadcast-netbios-master-browser.nse
Remove nearly all bit.lua use
2018-08-28 15:56:45 +00:00
broadcast-networker-discover.nse
Use stdnse.get_script_interfaces() for all relevant scripts
2024-05-24 19:01:16 +00:00
broadcast-novell-locate.nse
…
broadcast-ospf2-discover.nse
Use stdnse.get_script_interfaces() for all relevant scripts
2024-05-24 19:01:16 +00:00
broadcast-pc-anywhere.nse
…
broadcast-pc-duo.nse
…
broadcast-pim-discovery.nse
Use stdnse.get_script_interfaces() for all relevant scripts
2024-05-24 19:01:16 +00:00
broadcast-ping.nse
Correctly observe timeout in broadcast-ping
2024-06-13 17:45:09 +00:00
broadcast-pppoe-discover.nse
Use stdnse.get_script_interfaces() for all relevant scripts
2024-05-24 19:01:16 +00:00
broadcast-rip-discover.nse
…
broadcast-ripng-discover.nse
Use stdnse.get_script_interfaces() for all relevant scripts
2024-05-24 19:01:16 +00:00
broadcast-sonicwall-discover.nse
Use stdnse.get_script_interfaces() for all relevant scripts
2024-05-24 19:01:16 +00:00
broadcast-sybase-asa-discover.nse
…
broadcast-tellstick-discover.nse
…
broadcast-upnp-info.nse
Update upnp-info: structured output, correct targets added, etc.
2024-06-07 16:34:07 +00:00
broadcast-versant-locate.nse
…
broadcast-wake-on-lan.nse
…
broadcast-wpad-discover.nse
Use stdnse.get_script_interfaces() for all relevant scripts
2024-05-24 19:01:16 +00:00
broadcast-wsdd-discover.nse
…
broadcast-xdmcp-discover.nse
Don't use 1ms timeout for writes. Actual time can be >100ms because of NSE overhead
2024-10-08 21:14:40 +00:00
cassandra-brute.nse
…
cassandra-info.nse
…
cccam-version.nse
…
cics-enum.nse
Updates TN3270.lua and scripts. It also adds an argument to disable TN3270. Closes #1455
2019-03-21 04:07:55 +00:00
cics-info.nse
…
cics-user-brute.nse
Updates TN3270.lua and scripts. It also adds an argument to disable TN3270. Closes #1455
2019-03-21 04:07:55 +00:00
cics-user-enum.nse
Updates TN3270.lua and scripts. It also adds an argument to disable TN3270. Closes #1455
2019-03-21 04:07:55 +00:00
citrix-brute-xml.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
citrix-enum-apps-xml.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
citrix-enum-apps.nse
Remove bin.lua packing from more scripts
2018-09-05 21:57:41 +00:00
citrix-enum-servers-xml.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
citrix-enum-servers.nse
…
clamav-exec.nse
…
clock-skew.nse
Remove an unused include [ci skip]
2022-01-03 21:08:51 +00:00
coap-resources.nse
…
couchdb-databases.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
couchdb-stats.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
creds-summary.nse
…
cups-info.nse
…
cups-queue-info.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
cvs-brute-repository.nse
…
cvs-brute.nse
Remove unused requires
2019-06-27 19:13:41 +00:00
daap-get-library.nse
…
daytime.nse
…
db2-das-info.nse
Fix spelling of "endianness". Closes #2850
2024-06-12 23:42:55 +00:00
deluge-rpc-brute.nse
…
dhcp-discover.nse
Add support for DHCP client identifier
2022-06-08 22:59:30 +00:00
dicom-brute.nse
…
dicom-ping.nse
…
dict-info.nse
…
distcc-cve2004-2687.nse
…
dns-blacklist.nse
…
dns-brute.nse
…
dns-cache-snoop.nse
…
dns-check-zone.nse
…
dns-client-subnet-scan.nse
Replaces original experimental DNS ECS option code
2018-07-28 23:06:27 +00:00
dns-fuzz.nse
…
dns-ip6-arpa-scan.nse
…
dns-nsec3-enum.nse
Fix misplaced parentheses. Closes #2544
2022-10-23 22:42:11 +00:00
dns-nsec-enum.nse
Fix misplaced parentheses. Closes #2544
2022-10-23 22:42:11 +00:00
dns-nsid.nse
…
dns-random-srcport.nse
Remove nearly all bit.lua use
2018-08-28 15:56:45 +00:00
dns-random-txid.nse
Remove nearly all bit.lua use
2018-08-28 15:56:45 +00:00
dns-recursion.nse
Update default-category scripts to use bitwise operators instead of bit.lua
2017-03-13 14:58:56 +00:00
dns-service-discovery.nse
Update dnssd.lua and related scripts
2024-06-07 16:34:07 +00:00
dns-srv-enum.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
dns-update.nse
…
dns-zeustracker.nse
…
dns-zone-transfer.nse
Use SOA request to get domain name in dns-zone-transfer. Fixes #3014
2025-07-14 19:17:09 +00:00
docker-version.nse
NSE: added output to docker-version.nse
2016-07-07 00:04:15 +00:00
domcon-brute.nse
…
domcon-cmd.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
domino-enum-users.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
dpap-brute.nse
…
drda-brute.nse
…
drda-info.nse
…
duplicates.nse
Fix wrong library typo
2018-11-06 15:07:01 +00:00
eap-info.nse
Use stdnse.get_script_interfaces() for all relevant scripts
2024-05-24 19:01:16 +00:00
enip-info.nse
Fix some nonstandard NSEdoc
2025-05-16 19:28:10 +00:00
epmd-info.nse
…
eppc-enum-processes.nse
Remove unneeded retries around send/receive_buf(numbytes) left from when different behavior was used
2018-09-01 18:50:19 +00:00
fcrdns.nse
…
finger.nse
…
fingerprint-strings.nse
Remove an unneeded very verbose debug statement.
2020-01-19 16:37:35 +00:00
firewalk.nse
…
firewall-bypass.nse
Remove redundant code, already part of Frame:new()
2024-08-25 18:27:05 +00:00
flume-master-info.nse
…
fox-info.nse
…
freelancer-info.nse
…
ftp-anon.nse
…
ftp-bounce.nse
…
ftp-brute.nse
Move starttls and auth functions into ftp.lua
2017-07-26 19:34:23 +00:00
ftp-libopie.nse
…
ftp-proftpd-backdoor.nse
…
ftp-syst.nse
…
ftp-vsftpd-backdoor.nse
…
ftp-vuln-cve2010-4221.nse
Removes OSVDB references from scripts. Closes #1534
2019-04-02 16:51:36 +00:00
ganglia-info.nse
…
giop-info.nse
…
gkrellm-info.nse
…
gopher-ls.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
gpsd-info.nse
…
hadoop-datanode-info.nse
Avoid empty script output
2018-02-21 03:10:27 +00:00
hadoop-jobtracker-info.nse
…
hadoop-namenode-info.nse
…
hadoop-secondary-namenode-info.nse
…
hadoop-tasktracker-info.nse
Avoid empty script output
2018-02-21 03:10:27 +00:00
hartip-info.nse
Fix some nonstandard NSEdoc
2025-05-16 19:28:10 +00:00
hbase-master-info.nse
…
hbase-region-info.nse
…
hddtemp-info.nse
…
hnap-info.nse
…
hostmap-bfk.nse
…
hostmap-crtsh.nse
…
hostmap-robtex.nse
Disable Robtex NSE scripts due to API changes.
2020-02-18 19:21:46 +00:00
http-adobe-coldfusion-apsa1301.nse
…
http-affiliate-id.nse
…
http-apache-negotiation.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
http-apache-server-status.nse
Update some urls to https
2016-08-29 20:30:23 +00:00
http-aspnet-debug.nse
NSEdoc fixes and cross-references
2017-01-23 20:37:22 +00:00
http-auth-finder.nse
…
http-auth.nse
Add cross references for several scripts
2017-01-14 04:16:27 +00:00
http-avaya-ipoffice-users.nse
…
http-awstatstotals-exec.nse
…
http-axis2-dir-traversal.nse
Removes OSVDB references from scripts. Closes #1534
2019-04-02 16:51:36 +00:00
http-backup-finder.nse
…
http-barracuda-dir-traversal.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
http-bigip-cookie.nse
Adds script http-bigip-cookie. Closes #892
2017-08-17 16:29:10 +00:00
http-brute.nse
Remove some unused requires
2018-08-27 22:00:13 +00:00
http-cakephp-version.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
http-chrono.nse
…
http-cisco-anyconnect.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
http-coldfusion-subzero.nse
NSEdoc fixes and cross-references
2017-01-23 20:37:22 +00:00
http-comments-displayer.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
http-config-backup.nse
Check for non-404 file nonexistence responses in http-config-backup
2016-07-22 15:52:30 +00:00
http-cookie-flags.nse
Add some cross-references to NSEdoc for recent scripts
2017-06-14 21:22:52 +00:00
http-cors.nse
…
http-cross-domain-policy.nse
…
http-csrf.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
http-date.nse
Move date/time functions from stdnse to datetime. See #517
2018-08-27 22:00:10 +00:00
http-default-accounts.nse
Remove various "the the" repeats. Closes #2804
2024-03-16 01:16:34 +00:00
http-devframework.nse
Fix some NSEdoc using the wrong script names
2017-03-24 22:05:51 +00:00
http-dlink-backdoor.nse
…
http-dombased-xss.nse
…
http-domino-enum-passwords.nse
Remove unused requires
2019-06-27 19:13:41 +00:00
http-drupal-enum-users.nse
NSEdoc fixes and cross-references
2017-01-23 20:37:22 +00:00
http-drupal-enum.nse
Simplify code by using random_alpha
2019-01-30 03:09:56 +00:00
http-enum.nse
Avoid clobbering ignore_404 and severity values in http-enum. Closes #1467
2019-05-20 03:43:11 +00:00
http-errors.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
http-exif-spider.nse
Remove bin.lua unpacking from more scripts
2018-09-08 17:07:00 +00:00
http-favicon.nse
…
http-feed.nse
Document some undocumented script-args.
2015-11-25 03:01:29 +00:00
http-fetch.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
http-fileupload-exploiter.nse
Fixes a bug that prevented the script to find its resource file. Fixes #1608
2019-05-24 00:24:51 +00:00
http-form-brute.nse
Avoid format-string bugs. Fixes #2634
2023-07-20 17:24:16 +00:00
http-form-fuzzer.nse
Move stdnse.generate_random_string to new rand.lua
2018-09-08 17:07:06 +00:00
http-frontpage-login.nse
…
http-generator.nse
Remove unused requires
2019-06-27 19:13:41 +00:00
http-git.nse
Document some undocumented script-args.
2015-11-25 03:01:29 +00:00
http-gitweb-projects-enum.nse
Fix some NSEdoc using the wrong script names
2017-03-24 22:05:51 +00:00
http-google-malware.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
http-grep.nse
Streamline Luhn checksum code
2020-03-01 03:50:42 +00:00
http-headers.nse
Remove unused requires
2019-06-27 19:13:41 +00:00
http-hp-ilo-info.nse
…
http-huawei-hg5xx-vuln.nse
…
http-icloud-findmyiphone.nse
…
http-icloud-sendmsg.nse
…
http-iis-short-name-brute.nse
Removes OSVDB references from scripts. Closes #1534
2019-04-02 16:51:36 +00:00
http-iis-webdav-vuln.nse
…
http-internal-ip-disclosure.nse
…
http-joomla-brute.nse
Add cross references for several scripts
2017-01-14 04:16:27 +00:00
http-jsonp-detection.nse
Correct function name for rand.random.alpha. Closes #1449
2019-01-30 03:00:17 +00:00
http-litespeed-sourcecode-download.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
http-ls.nse
Do not include whitespace in the size string
2022-02-04 02:27:15 +00:00
http-majordomo2-dir-traversal.nse
…
http-malware-host.nse
Mitigate false-positives when Nmap files are getting scanned. Fix #3088
2025-05-08 16:55:07 +00:00
http-mcmp.nse
Update some urls to https
2016-08-29 20:30:23 +00:00
http-method-tamper.nse
Move stdnse.generate_random_string to new rand.lua
2018-09-08 17:07:06 +00:00
http-methods.nse
Fix wrong library typo
2018-11-06 15:07:01 +00:00
http-mobileversion-checker.nse
Removes parse_url from http.lua and makes url.parse more functional. Closes #952.
2017-08-14 20:30:57 +00:00
http-ntlm-info.nse
…
http-open-proxy.nse
Fix some NSEdoc using the wrong script names
2017-03-24 22:05:51 +00:00
http-open-redirect.nse
Provides a common function, url.get_default_port(), for obtaining
2017-04-19 18:00:36 +00:00
http-passwd.nse
…
http-php-version.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
http-phpmyadmin-dir-traversal.nse
Fix false positive in http-phpmyadmin-dir-traversal. Closes #1359
2018-10-17 20:21:05 +00:00
http-phpself-xss.nse
Provides a common function, url.get_default_port(), for obtaining
2017-04-19 18:00:36 +00:00
http-proxy-brute.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
http-put.nse
…
http-qnap-nas-info.nse
…
http-referer-checker.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
http-rfi-spider.nse
New tableaux library containing table auxiliary functions.
2018-10-17 15:34:30 +00:00
http-robots.txt.nse
…
http-robtex-reverse-ip.nse
Disable Robtex NSE scripts due to API changes.
2020-02-18 19:21:46 +00:00
http-robtex-shared-ns.nse
Fix some nonstandard NSEdoc
2025-05-16 19:28:10 +00:00
http-sap-netweaver-leak.nse
Corrects a typo. Closes #1816
2019-11-08 20:35:14 +00:00
http-security-headers.nse
Removes trailing spaces in 69 files. Closes #971.
2017-08-23 08:52:40 +00:00
http-server-header.nse
http-server-header: interfere less with -sV results, especially softmatches
2019-06-19 18:33:51 +00:00
http-shellshock.nse
Fix line wrapping
2020-08-30 22:59:57 +00:00
http-sitemap-generator.nse
…
http-slowloris-check.nse
…
http-slowloris.nse
…
http-sql-injection.nse
Fix a couple NSEdoc cross-refs (requires '.nse')
2017-03-03 20:35:07 +00:00
http-stored-xss.nse
…
http-svn-enum.nse
Removes unused dependencies from all files in scripts folder.
2017-08-15 07:26:00 +00:00
http-svn-info.nse
Removes unused dependencies from all files in scripts folder.
2017-08-15 07:26:00 +00:00
http-title.nse
Remove unused requires
2019-06-27 19:13:41 +00:00
http-tplink-dir-traversal.nse
…
http-trace.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
http-traceroute.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
http-trane-info.nse
…
http-unsafe-output-escaping.nse
Cross-reference http-unsafe-output-escaping as relating to XSS scripts
2017-06-14 21:37:25 +00:00
http-useragent-tester.nse
Removes parse_url from http.lua and makes url.parse more functional. Closes #952.
2017-08-14 20:30:57 +00:00
http-userdir-enum.nse
…
http-vhosts.nse
Fix some nonstandard NSEdoc
2025-05-16 19:28:10 +00:00
http-virustotal.nse
…
http-vlcstreamer-ls.nse
…
http-vmware-path-vuln.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
http-vuln-cve2006-3392.nse
…
http-vuln-cve2009-3960.nse
…
http-vuln-cve2010-0738.nse
…
http-vuln-cve2010-2861.nse
…
http-vuln-cve2011-3192.nse
…
http-vuln-cve2011-3368.nse
…
http-vuln-cve2012-1823.nse
…
http-vuln-cve2013-0156.nse
…
http-vuln-cve2013-6786.nse
…
http-vuln-cve2013-7091.nse
…
http-vuln-cve2014-2126.nse
Let ssl-cert grab certs from DTLS services. Fix rules for TCP-only scripts
2024-06-03 19:00:33 +00:00
http-vuln-cve2014-2127.nse
Let ssl-cert grab certs from DTLS services. Fix rules for TCP-only scripts
2024-06-03 19:00:33 +00:00
http-vuln-cve2014-2128.nse
Let ssl-cert grab certs from DTLS services. Fix rules for TCP-only scripts
2024-06-03 19:00:33 +00:00
http-vuln-cve2014-2129.nse
Let ssl-cert grab certs from DTLS services. Fix rules for TCP-only scripts
2024-06-03 19:00:33 +00:00
http-vuln-cve2014-3704.nse
Move stdnse.generate_random_string to new rand.lua
2018-09-08 17:07:06 +00:00
http-vuln-cve2014-8877.nse
Move stdnse.generate_random_string to new rand.lua
2018-09-08 17:07:06 +00:00
http-vuln-cve2015-1427.nse
…
http-vuln-cve2015-1635.nse
…
http-vuln-cve2017-5638.nse
…
http-vuln-cve2017-5689.nse
…
http-vuln-cve2017-8917.nse
…
http-vuln-cve2017-1001000.nse
…
http-vuln-misfortune-cookie.nse
…
http-vuln-wnr1000-creds.nse
…
http-waf-detect.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
http-waf-fingerprint.nse
…
http-webdav-scan.nse
…
http-wordpress-brute.nse
Add cross references for several scripts
2017-01-14 04:16:27 +00:00
http-wordpress-enum.nse
NSEdoc fixes and cross-references
2017-01-23 20:37:22 +00:00
http-wordpress-users.nse
Fix /author/.../feed/ capture in http-wordpress-users.nse.
2019-08-22 23:08:31 +00:00
http-xssed.nse
Add cross references for several scripts
2017-01-14 04:16:27 +00:00
https-redirect.nse
…
iax2-brute.nse
…
iax2-version.nse
…
icap-info.nse
…
iec61850-mms.nse
Add 4 scripts from the DINA Community
2024-04-11 16:02:48 +00:00
iec-identify.nse
Add iec-identify script
2017-07-06 20:54:04 +00:00
ike-version.nse
…
imap-brute.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
imap-capabilities.nse
…
imap-ntlm-info.nse
…
impress-remote-discover.nse
…
informix-brute.nse
Use BruteSocket in a bunch of brute scripts
2018-03-10 03:09:39 +00:00
informix-query.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
informix-tables.nse
Fix some NSEdoc using the wrong script names
2017-03-24 22:05:51 +00:00
ip-forwarding.nse
Use stdnse.get_script_interfaces() for all relevant scripts
2024-05-24 19:01:16 +00:00
ip-geolocation-geoplugin.nse
…
ip-geolocation-ipinfodb.nse
Consolidate some error handling, standardize geoip coordinates, fix output bugs. Fixes #1744
2019-09-20 04:40:20 +00:00
ip-geolocation-map-bing.nse
Consolidate some error handling, standardize geoip coordinates, fix output bugs. Fixes #1744
2019-09-20 04:40:20 +00:00
ip-geolocation-map-google.nse
Consolidate some error handling, standardize geoip coordinates, fix output bugs. Fixes #1744
2019-09-20 04:40:20 +00:00
ip-geolocation-map-kml.nse
Consolidate some error handling, standardize geoip coordinates, fix output bugs. Fixes #1744
2019-09-20 04:40:20 +00:00
ip-geolocation-maxmind.nse
Consolidate some error handling, standardize geoip coordinates, fix output bugs. Fixes #1744
2019-09-20 04:40:20 +00:00
ip-https-discover.nse
…
ipidseq.nse
Refactor IP ID capture loop. Fixes #2464
2022-04-10 20:13:06 +00:00
ipmi-brute.nse
…
ipmi-cipher-zero.nse
Removes OSVDB references from scripts. Closes #1534
2019-04-02 16:51:36 +00:00
ipmi-version.nse
…
ipv6-multicast-mld-list.nse
Use stdnse.get_script_interfaces() for all relevant scripts
2024-05-24 19:01:16 +00:00
ipv6-node-info.nse
Refactor to avoid using packet.lua local functions. See #2464
2022-04-14 23:06:02 +00:00
ipv6-ra-flood.nse
Use stdnse.get_script_interfaces() for all relevant scripts
2024-05-24 19:01:16 +00:00
irc-botnet-channels.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
irc-brute.nse
…
irc-info.nse
…
irc-sasl-brute.nse
…
irc-unrealircd-backdoor.nse
…
iscsi-brute.nse
…
iscsi-info.nse
…
isns-info.nse
…
jdwp-exec.nse
…
jdwp-info.nse
…
jdwp-inject.nse
…
jdwp-version.nse
…
knx-gateway-discover.nse
Use stdnse.get_script_interfaces() for all relevant scripts
2024-05-24 19:01:16 +00:00
knx-gateway-info.nse
Correct packet size testing in KNX scripts. Fixes #2727, fixes #2728
2023-11-12 23:02:33 +00:00
krb5-enum-users.nse
Remove bin.lua from more scripts
2018-09-06 14:20:31 +00:00
ldap-brute.nse
Fix error in ldap-brute: 'no string output'
2024-11-11 21:06:59 +00:00
ldap-novell-getpass.nse
…
ldap-rootdse.nse
Add missing require
2016-07-21 17:05:23 +00:00
ldap-search.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
lexmark-config.nse
…
llmnr-resolve.nse
Use stdnse.get_script_interfaces() for all relevant scripts
2024-05-24 19:01:16 +00:00
lltd-discovery.nse
Use stdnse.get_script_interfaces() for all relevant scripts
2024-05-24 19:01:16 +00:00
lu-enum.nse
Fix some nonstandard NSEdoc
2025-05-16 19:28:10 +00:00
maxdb-info.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
mcafee-epo-agent.nse
…
membase-brute.nse
Use BruteSocket in a bunch of brute scripts
2018-03-10 03:09:39 +00:00
membase-http-info.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
memcached-info.nse
Move date/time functions from stdnse to datetime. See #517
2018-08-27 22:00:10 +00:00
metasploit-info.nse
Remove bin.lua packing from more scripts
2018-09-05 21:57:41 +00:00
metasploit-msgrpc-brute.nse
Remove bin.lua from more scripts
2018-09-06 14:20:31 +00:00
metasploit-xmlrpc-brute.nse
Remove unused requires
2019-06-27 19:13:41 +00:00
mikrotik-routeros-brute.nse
…
mikrotik-routeros-username-brute.nse
New scripts and probes for winbox service. Closes #2973
2025-03-12 17:30:28 +00:00
mikrotik-routeros-version.nse
New scripts and probes for winbox service. Closes #2973
2025-03-12 17:30:28 +00:00
mmouse-brute.nse
…
mmouse-exec.nse
…
modbus-discover.nse
…
mongodb-brute.nse
Updates execution rule to include alternate ports. Closes #1565
2019-05-07 20:15:22 +00:00
mongodb-databases.nse
Updates execution rule to include alternate ports. Closes #1565
2019-05-07 20:15:22 +00:00
mongodb-info.nse
Updates execution rule to include alternate ports. Closes #1565
2019-05-07 20:15:22 +00:00
mqtt-subscribe.nse
Oops! Missed the actual script. #352
2016-09-07 20:16:20 +00:00
mrinfo.nse
Use stdnse.get_script_interfaces() for all relevant scripts
2024-05-24 19:01:16 +00:00
ms-sql-brute.nse
Change how ms-sql NSE scripts run
2022-01-03 21:08:52 +00:00
ms-sql-config.nse
Change how ms-sql NSE scripts run
2022-01-03 21:08:52 +00:00
ms-sql-dac.nse
Change how ms-sql NSE scripts run
2022-01-03 21:08:52 +00:00
ms-sql-dump-hashes.nse
Change how ms-sql NSE scripts run
2022-01-03 21:08:52 +00:00
ms-sql-empty-password.nse
Change how ms-sql NSE scripts run
2022-01-03 21:08:52 +00:00
ms-sql-hasdbaccess.nse
Change how ms-sql NSE scripts run
2022-01-03 21:08:52 +00:00
ms-sql-info.nse
Change how ms-sql NSE scripts run
2022-01-03 21:08:52 +00:00
ms-sql-ntlm-info.nse
Change how ms-sql NSE scripts run
2022-01-03 21:08:52 +00:00
ms-sql-query.nse
Change how ms-sql NSE scripts run
2022-01-03 21:08:52 +00:00
ms-sql-tables.nse
Fix a typo in calling stdnse.format_ouptut(). See #2622
2024-07-04 20:31:02 +00:00
ms-sql-xp-cmdshell.nse
Change how ms-sql NSE scripts run
2022-01-03 21:08:52 +00:00
msrpc-enum.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
mtrace.nse
Use stdnse.get_script_interfaces() for all relevant scripts
2024-05-24 19:01:16 +00:00
multicast-profinet-discovery.nse
Fix a typo: did not update loop variable.
2025-06-09 19:58:45 +00:00
murmur-version.nse
…
mysql-audit.nse
Default rule base for script mysql-audit. See #2125
2020-10-04 02:52:31 +00:00
mysql-brute.nse
Use BruteSocket in a bunch of brute scripts
2018-03-10 03:09:39 +00:00
mysql-databases.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
mysql-dump-hashes.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
mysql-empty-password.nse
…
mysql-enum.nse
Remove bin.lua calls from some scripts and libraries
2018-08-29 03:06:40 +00:00
mysql-info.nse
Removes default timeout value of 5s as there are reports (and it makes sense) that this default value is too short for some environments. Now the default timeout for sockets is used. Closes #1312
2019-01-08 21:49:58 +00:00
mysql-query.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
mysql-users.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
mysql-variables.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
mysql-vuln-cve2012-2122.nse
…
nat-pmp-info.nse
…
nat-pmp-mapport.nse
…
nbd-info.nse
…
nbns-interfaces.nse
…
nbstat.nse
…
ncp-enum-users.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
ncp-serverinfo.nse
…
ndmp-fs-info.nse
…
ndmp-version.nse
…
nessus-brute.nse
…
nessus-xmlrpc-brute.nse
…
netbus-auth-bypass.nse
NSEdoc fixes and cross-references
2017-01-23 20:37:22 +00:00
netbus-brute.nse
NSEdoc fixes and cross-references
2017-01-23 20:37:22 +00:00
netbus-info.nse
…
netbus-version.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
nexpose-brute.nse
…
nfs-ls.nse
…
nfs-showmount.nse
…
nfs-statfs.nse
Improved debugging/output for NFS scripts
2018-09-05 20:34:19 +00:00
nje-node-brute.nse
…
nje-pass-brute.nse
…
nntp-ntlm-info.nse
…
nping-brute.nse
…
nrpe-enum.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
ntp-info.nse
…
ntp-monlist.nse
…
omp2-brute.nse
Remove various "the the" repeats. Closes #2804
2024-03-16 01:16:34 +00:00
omp2-enum-targets.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
omron-info.nse
…
openflow-info.nse
…
openlookup-info.nse
…
openvas-otp-brute.nse
…
openwebnet-discovery.nse
…
oracle-brute-stealth.nse
…
oracle-brute.nse
Use BruteSocket in a bunch of brute scripts
2018-03-10 03:09:39 +00:00
oracle-enum-users.nse
…
oracle-sid-brute.nse
Remove bin.lua from more scripts
2018-09-06 14:20:31 +00:00
oracle-tns-version.nse
Convert test data in comment to assertion checks
2022-05-09 17:33:41 +00:00
ovs-agent-version.nse
…
p2p-conficker.nse
…
path-mtu.nse
Removes unused dependencies from all files in scripts folder.
2017-08-15 07:26:00 +00:00
pcanywhere-brute.nse
…
pcworx-info.nse
…
pgsql-brute.nse
Propagate unpwdb errors to script output. Fixes #2011
2020-06-15 03:01:35 +00:00
pjl-ready-message.nse
…
pop3-brute.nse
…
pop3-capabilities.nse
…
pop3-ntlm-info.nse
…
port-states.nse
…
pptp-version.nse
…
profinet-cm-lookup.nse
Add 4 scripts from the DINA Community
2024-04-11 16:02:48 +00:00
puppet-naivesigning.nse
…
qconn-exec.nse
…
qscan.nse
…
quake1-info.nse
…
quake3-info.nse
…
quake3-master-getservers.nse
…
rdp-enum-encryption.nse
add missing local
2019-06-27 19:14:49 +00:00
rdp-ntlm-info.nse
…
rdp-vuln-ms12-020.nse
Better socket error handling in rdp-vuln-ms12-020
2021-12-13 20:14:07 +00:00
realvnc-auth-bypass.nse
Check for RealVNC auth bypass even if other auth types are offered
2017-03-15 16:19:55 +00:00
redis-brute.nse
Use BruteSocket in a bunch of brute scripts
2018-03-10 03:09:39 +00:00
redis-info.nse
Improve parsing of CLUSTER NODES responses
2022-05-11 21:58:28 +00:00
resolveall.nse
Note that resolveall.nse is replaced by --resolve-all option [ci skip]
2019-07-25 14:13:28 +00:00
reverse-index.nse
Move comma-separated list code to outlib
2020-01-19 16:37:36 +00:00
rexec-brute.nse
…
rfc868-time.nse
…
riak-http-info.nse
NSE: Prevent http.identify_404 from following HTTP redirects, standardize calls to it. Closes #251
2015-12-05 10:16:51 +00:00
rlogin-brute.nse
…
rmi-dumpregistry.nse
Fix some nonstandard NSEdoc
2025-05-16 19:28:10 +00:00
rmi-vuln-classloader.nse
Align portrule with script rmi-dumpregistry. Closes #1531
2019-03-28 14:19:45 +00:00
rpc-grind.nse
Fix a crash in rpc-grind when scanning a non-RPC service
2024-06-03 19:00:29 +00:00
rpcap-brute.nse
…
rpcap-info.nse
…
rpcinfo.nse
…
rsa-vuln-roca.nse
…
rsync-brute.nse
…
rsync-list-modules.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
rtsp-methods.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
rtsp-url-brute.nse
Correct function name for rand.random.alpha. Closes #1449
2019-01-30 03:00:17 +00:00
rusers.nse
…
s7-info.nse
…
samba-vuln-cve-2012-1182.nse
…
script.db
Add targets-ipv6-eui64 script
2025-03-13 21:47:54 +00:00
servicetags.nse
…
shodan-api.nse
New shodan-api script for querying Shodan internet scan data
2016-03-16 05:47:58 +00:00
sip-brute.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
sip-call-spoof.nse
…
sip-enum-users.nse
Remove unused requires
2019-06-27 19:13:41 +00:00
sip-methods.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
skypev2-version.nse
…
smb2-capabilities.nse
…
smb2-security-mode.nse
Make a variable local
2021-07-02 20:01:31 +00:00
smb2-time.nse
…
smb2-vuln-uptime.nse
…
smb-brute.nse
Remove an unused include [ci skip]
2022-01-03 21:08:51 +00:00
smb-double-pulsar-backdoor.nse
…
smb-enum-domains.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
smb-enum-groups.nse
Fix wrong library typo
2018-11-06 15:07:01 +00:00
smb-enum-processes.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
smb-enum-services.nse
Add permissions to openscmanagerw() in msrpc.lua, allowing the caller to specify the permissions they need.
2018-10-22 17:29:49 +00:00
smb-enum-sessions.nse
Remove an unused include [ci skip]
2022-01-03 21:08:51 +00:00
smb-enum-shares.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
smb-enum-users.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
smb-flood.nse
Prevent smb-flood from using all sockets. Fixes #947
2022-09-22 20:16:44 +00:00
smb-ls.nse
…
smb-mbenum.nse
…
smb-os-discovery.nse
…
smb-print-text.nse
Update unpacking of share names to use string.unpack
2018-09-06 14:20:33 +00:00
smb-protocols.nse
SMB2 dialect refactoring. Fixes #2203, closes #2208
2021-01-18 21:21:43 +00:00
smb-psexec.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
smb-security-mode.nse
Update default-category scripts to use bitwise operators instead of bit.lua
2017-03-13 14:58:56 +00:00
smb-server-stats.nse
…
smb-system-info.nse
…
smb-vuln-conficker.nse
…
smb-vuln-cve2009-3103.nse
…
smb-vuln-cve-2017-7494.nse
…
smb-vuln-ms06-025.nse
…
smb-vuln-ms07-029.nse
…
smb-vuln-ms08-067.nse
…
smb-vuln-ms10-054.nse
…
smb-vuln-ms10-061.nse
…
smb-vuln-ms17-010.nse
…
smb-vuln-regsvc-dos.nse
…
smb-vuln-webexec.nse
Fix a bug: if service is vulnerable, this is a table, not a string.
2018-10-25 16:30:48 +00:00
smb-webexec-exploit.nse
Clean up output and clarify warnings. See #1818
2019-11-11 14:54:53 +00:00
smtp-brute.nse
…
smtp-commands.nse
Improve output formatting
2020-12-27 00:38:53 +00:00
smtp-enum-users.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
smtp-ntlm-info.nse
Check for connected socket before continuing
2024-04-25 17:12:27 +00:00
smtp-open-relay.nse
…
smtp-strangeport.nse
…
smtp-vuln-cve2010-4344.nse
…
smtp-vuln-cve2011-1720.nse
…
smtp-vuln-cve2011-1764.nse
…
sniffer-detect.nse
…
snmp-brute.nse
…
snmp-hh3c-logins.nse
…
snmp-info.nse
…
snmp-interfaces.nse
…
snmp-ios-config.nse
SNMP scripts are enabled on non-standard ports. See #1473
2020-07-27 03:32:27 +00:00
snmp-netstat.nse
SNMP scripts are enabled on non-standard ports. See #1473
2020-07-27 03:32:27 +00:00
snmp-processes.nse
SNMP scripts are enabled on non-standard ports. See #1473
2020-07-27 03:32:27 +00:00
snmp-sysdescr.nse
…
snmp-win32-services.nse
…
snmp-win32-shares.nse
…
snmp-win32-software.nse
SNMP scripts are enabled on non-standard ports. See #1473
2020-07-27 03:32:27 +00:00
snmp-win32-users.nse
SNMP scripts are enabled on non-standard ports. See #1473
2020-07-27 03:32:27 +00:00
socks-auth-info.nse
…
socks-brute.nse
…
socks-open-proxy.nse
Fix some NSEdoc using the wrong script names
2017-03-24 22:05:51 +00:00
ssh2-enum-algos.nse
Update the SSH protocol flow. Closes #1460
2020-09-13 00:12:48 +00:00
ssh-auth-methods.nse
Handle libssh2 errors on connect. Closes #2616. Fixes #1014
2024-10-04 18:21:25 +00:00
ssh-brute.nse
ssh-brute: enable keyboard-interactive auth if necessary
2025-06-12 23:24:36 +00:00
ssh-hostkey.nse
New, broader portrule for SSH scripts. Closes #1825
2020-01-10 05:32:08 +00:00
ssh-publickey-acceptance.nse
Handle libssh2 errors on connect. Closes #2616. Fixes #1014
2024-10-04 18:21:25 +00:00
ssh-run.nse
ssh-run: enable keyboard-interactive auth if needed
2025-06-12 23:25:36 +00:00
sshv1.nse
New, broader portrule for SSH scripts. Closes #1825
2020-01-10 05:32:08 +00:00
ssl-ccs-injection.nse
Let ssl-cert grab certs from DTLS services. Fix rules for TCP-only scripts
2024-06-03 19:00:33 +00:00
ssl-cert-intaddr.nse
Add or fix See Also links between scripts
2018-10-24 19:36:04 +00:00
ssl-cert.nse
Add SHA-256 fingerprint, refresh documentation. Closes #2978
2024-12-15 23:49:31 +00:00
ssl-date.nse
Let ssl-cert grab certs from DTLS services. Fix rules for TCP-only scripts
2024-06-03 19:00:33 +00:00
ssl-dh-params.nse
Let ssl-cert grab certs from DTLS services. Fix rules for TCP-only scripts
2024-06-03 19:00:33 +00:00
ssl-enum-ciphers.nse
Fix some scoring/detection for TLSv1.3 in ssl-enum-ciphers
2025-06-02 14:31:42 +00:00
ssl-heartbleed.nse
Let ssl-cert grab certs from DTLS services. Fix rules for TCP-only scripts
2024-06-03 19:00:33 +00:00
ssl-known-key.nse
Let ssl-cert grab certs from DTLS services. Fix rules for TCP-only scripts
2024-06-03 19:00:33 +00:00
ssl-poodle.nse
Let ssl-cert grab certs from DTLS services. Fix rules for TCP-only scripts
2024-06-03 19:00:33 +00:00
sslv2-drown.nse
Let ssl-cert grab certs from DTLS services. Fix rules for TCP-only scripts
2024-06-03 19:00:33 +00:00
sslv2.nse
Let ssl-cert grab certs from DTLS services. Fix rules for TCP-only scripts
2024-06-03 19:00:33 +00:00
sstp-discover.nse
…
stun-info.nse
…
stun-version.nse
…
stuxnet-detect.nse
…
supermicro-ipmi-conf.nse
…
svn-brute.nse
…
targets-asn.nse
…
targets-ipv6-eui64.nse
Add targets-ipv6-eui64 script
2025-03-13 21:47:54 +00:00
targets-ipv6-map4to6.nse
…
targets-ipv6-multicast-echo.nse
Make some broadcast scripts 'safe' category
2024-10-08 21:14:40 +00:00
targets-ipv6-multicast-invalid-dst.nse
Make some broadcast scripts 'safe' category
2024-10-08 21:14:40 +00:00
targets-ipv6-multicast-mld.nse
Make some broadcast scripts 'safe' category
2024-10-08 21:14:40 +00:00
targets-ipv6-multicast-slaac.nse
Use stdnse.get_script_interfaces() for all relevant scripts
2024-05-24 19:01:16 +00:00
targets-ipv6-wordlist.nse
…
targets-sniffer.nse
Fix error in targets-sniffer: interface name not set
2024-06-20 20:14:29 +00:00
targets-traceroute.nse
…
targets-xml.nse
Add targets-xml for inputting targets from Nmap XML files
2015-11-15 05:39:20 +00:00
teamspeak2-version.nse
…
telnet-brute.nse
Add a new username prompt to telnet-brute. Closes #2629
2024-09-02 23:48:25 +00:00
telnet-encryption.nse
Fix some incorrect conversions from bin to string unpacking
2018-09-20 02:19:53 +00:00
telnet-ntlm-info.nse
…
tftp-enum.nse
Move string utility functions to stringaux.lua
2018-10-18 01:08:19 +00:00
tftp-version.nse
New script tftp-version. Closes #548
2022-09-28 20:52:47 +00:00
tls-alpn.nse
Update ALPN names
2025-05-21 20:47:35 +00:00
tls-nextprotoneg.nse
Let ssl-cert grab certs from DTLS services. Fix rules for TCP-only scripts
2024-06-03 19:00:33 +00:00
tls-ticketbleed.nse
Let ssl-cert grab certs from DTLS services. Fix rules for TCP-only scripts
2024-06-03 19:00:33 +00:00
tn3270-screen.nse
…
tor-consensus-checker.nse
…
traceroute-geolocation.nse
Adds protection against incomplete GeoPlugin results, such as 92.123.145.37. Fixes #1331
2018-10-09 00:15:07 +00:00
tso-brute.nse
…
tso-enum.nse
Updates TN3270.lua and scripts. It also adds an argument to disable TN3270. Closes #1455
2019-03-21 04:07:55 +00:00
ubiquiti-discovery.nse
…
unittest.nse
Update http urls for nmap.org to https
2015-11-05 20:41:05 +00:00
unusual-port.nse
…
upnp-info.nse
Update upnp-info: structured output, correct targets added, etc.
2024-06-07 16:34:07 +00:00
uptime-agent-info.nse
…
url-snarf.nse
Use stdnse.get_script_interfaces() for all relevant scripts
2024-05-24 19:01:16 +00:00
ventrilo-info.nse
…
versant-info.nse
…
vmauthd-brute.nse
…
vmware-version.nse
…
vnc-brute.nse
…
vnc-info.nse
…
vnc-title.nse
Fix a couple NSEdoc cross-refs (requires '.nse')
2017-03-03 20:35:07 +00:00
voldemort-info.nse
…
vtam-enum.nse
Fix some nonstandard NSEdoc
2025-05-16 19:28:10 +00:00
vulners.nse
Vulners.nse: respect mincvss unless cvss is missing or is 0 for exploits
2022-07-29 15:21:15 +00:00
vuze-dht-info.nse
…
wdb-version.nse
Removes unused dependencies from all files in scripts folder.
2017-08-15 07:26:00 +00:00
weblogic-t3-info.nse
NSEdoc fixes
2025-03-13 18:13:21 +00:00
whois-domain.nse
…
whois-ip.nse
…
wsdd-discover.nse
…
x11-access.nse
…
xdmcp-discover.nse
…
xmlrpc-methods.nse
Fix wrong library typo
2018-11-06 15:07:01 +00:00
xmpp-brute.nse
…
xmpp-info.nse
…