PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-02-11 07:56:35 +00:00
Code Issues Projects Releases Wiki Activity
Files
92cb5a3defa8b7dfc233b7e7d5f73d2f9e75839a
nmap/scripts
History
patrik 92cb5a3def Fixed bug that would fail to calculate a PADI host unique value in the pppoe 
library under certain circumstances. Fixed bug that would fail to terminate
script properly if no response was received from pppoe server. [Patrik]
2012-01-10 21:08:20 +00:00
..
address-info.nse
…
afp-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
afp-ls.nse
…
afp-path-vuln.nse
Updated some of the vulnerability scripts to use the new vulnerability library.
2011-11-09 10:08:19 +00:00
afp-serverinfo.nse
…
afp-showmount.nse
o Moved afp.username and afp.password arguments to afp-library.
2011-04-03 12:53:12 +00:00
amqp-info.nse
…
asn-query.nse
Fix a bug in dns.lua: ensure that dns.query() always return two values (status and response).
2011-09-22 18:00:44 +00:00
auth-owners.nse
…
auth-spoof.nse
…
backorifice-brute.nse
…
backorifice-info.nse
…
banner.nse
Merge r18689:r19511 from /nmap-exp/djalal/nse-rules.
2010-08-06 16:40:03 +00:00
bitcoin-getaddr.nse
switched capitalization from BitCoin to Bitcoin as the latter seems to be more standard
2012-01-02 02:51:48 +00:00
bitcoin-info.nse
switched capitalization from BitCoin to Bitcoin as the latter seems to be more standard
2012-01-02 02:51:48 +00:00
bitcoinrpc-info.nse
…
bittorrent-discovery.nse
…
broadcast-avahi-dos.nse
…
broadcast-db2-discover.nse
o [NSE] Split script db2-discover into two scripts, adding a new
2011-07-10 08:01:26 +00:00
broadcast-dhcp-discover.nse
o [NSE] Fixed a race condition in broadcast-dhcp-discover.nse that
2012-01-10 03:25:19 +00:00
broadcast-dns-service-discovery.nse
…
broadcast-dropbox-listener.nse
…
broadcast-listener.nse
…
broadcast-ms-sql-discover.nse
…
broadcast-netbios-master-browser.nse
very minor nsedoc improvements
2012-01-07 03:04:18 +00:00
broadcast-novell-locate.nse
…
broadcast-pc-anywhere.nse
fix typo
2012-01-02 02:52:22 +00:00
broadcast-pc-duo.nse
…
broadcast-ping.nse
Be more explicit about how to enable newtargets.
2011-10-07 07:51:51 +00:00
broadcast-pppoe-discover.nse
Fixed bug that would fail to calculate a PADI host unique value in the pppoe
2012-01-10 21:08:20 +00:00
broadcast-rip-discover.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
broadcast-sybase-asa-discover.nse
…
broadcast-upnp-info.nse
…
broadcast-wake-on-lan.nse
…
broadcast-wpad-discover.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
broadcast-wsdd-discover.nse
…
citrix-brute-xml.nse
…
citrix-enum-apps-xml.nse
…
citrix-enum-apps.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
citrix-enum-servers-xml.nse
…
citrix-enum-servers.nse
…
couchdb-databases.nse
…
couchdb-stats.nse
Edit some script descriptions for better line breaks when rendered as
2010-07-17 16:47:31 +00:00
creds-summary.nse
very minor nsedoc improvements
2012-01-07 03:04:18 +00:00
cvs-brute-repository.nse
…
cvs-brute.nse
…
daap-get-library.nse
Change " \n" to just "\n" where appropriate in NSE. Leading newlines are
2010-09-30 05:03:39 +00:00
daytime.nse
…
db2-das-info.nse
…
db2-discover.nse
…
dhcp-discover.nse
o [NSE] Removed DoS code from dhcp-discover and placed it into the discover and
2011-12-29 08:07:26 +00:00
dns-blacklist.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
dns-brute.nse
…
dns-cache-snoop.nse
…
dns-fuzz.nse
Update some script nsedoc descriptions for consistency. The description should almost always start with an active verb and never with the script name or 'this script'. Admittedly that makes the first sentence a fragment. The first sentence should be capitalized
2011-09-11 20:50:56 +00:00
dns-nsec-enum.nse
…
dns-random-srcport.nse
…
dns-random-txid.nse
…
dns-recursion.nse
…
dns-service-discovery.nse
…
dns-update.nse
…
dns-zeustracker.nse
typo fix
2012-01-02 02:49:42 +00:00
dns-zone-transfer.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
domcon-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
domcon-cmd.nse
…
domino-enum-users.nse
…
dpap-brute.nse
…
drda-brute.nse
…
drda-info.nse
changed portrule to include both ibm-db2 and drda
2010-08-14 11:52:18 +00:00
epmd-info.nse
…
finger.nse
Add @output to finger.nse and telnet-brute.nse thanks to Gutek.
2010-03-31 23:25:39 +00:00
firewalk.nse
Expanded documentation.
2012-01-09 16:06:12 +00:00
ftp-anon.nse
…
ftp-bounce.nse
…
ftp-brute.nse
…
ftp-libopie.nse
…
ftp-proftpd-backdoor.nse
…
ftp-vsftpd-backdoor.nse
Updated some of the vulnerability scripts to use the new vulnerability library.
2011-11-09 10:08:19 +00:00
ftp-vuln-cve2010-4221.nse
…
ganglia-info.nse
…
giop-info.nse
…
gopher-ls.nse
…
hadoop-datanode-info.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
hadoop-jobtracker-info.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
hadoop-namenode-info.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
hadoop-secondary-namenode-info.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
hadoop-tasktracker-info.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
hbase-master-info.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
hbase-region-info.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
hddtemp-info.nse
…
hostmap.nse
…
http-affiliate-id.nse
Went through all the new (since 5.51) scripts and improved (I hope) the nsedoc descriptions a bit and made some other very minor cleanups
2011-06-29 01:29:14 +00:00
http-apache-negotiation.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
http-auth.nse
…
http-awstatstotals-exec.nse
Improve some NSEDoc descriptions
2011-09-11 20:44:07 +00:00
http-axis2-dir-traversal.nse
…
http-backup-finder.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
http-barracuda-dir-traversal.nse
…
http-brute.nse
…
http-cakephp-version.nse
…
http-cors.nse
…
http-date.nse
…
http-default-accounts.nse
Update some script nsedoc descriptions for consistency. The description should almost always start with an active verb and never with the script name or 'this script'. Admittedly that makes the first sentence a fragment. The first sentence should be capitalized
2011-09-11 20:50:56 +00:00
http-domino-enum-passwords.nse
…
http-email-harvest.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
http-enum.nse
…
http-favicon.nse
…
http-form-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
http-google-malware.nse
Update some script nsedoc descriptions for consistency. The description should almost always start with an active verb and never with the script name or 'this script'. Admittedly that makes the first sentence a fragment. The first sentence should be capitalized
2011-09-11 20:50:56 +00:00
http-grep.nse
…
http-headers.nse
…
http-iis-webdav-vuln.nse
…
http-joomla-brute.nse
…
http-litespeed-sourcecode-download.nse
…
http-majordomo2-dir-traversal.nse
…
http-malware-host.nse
Use shortport.http where appropriate.
2010-08-09 22:30:50 +00:00
http-method-tamper.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
http-methods.nse
…
http-open-proxy.nse
…
http-open-redirect.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
http-passwd.nse
Add more http-passwd payloads from Ange Gutek.
2010-11-11 19:02:17 +00:00
http-php-version.nse
…
http-proxy-brute.nse
o [NSE] Added the script http-proxy-brute that performs brute force password
2012-01-02 11:21:57 +00:00
http-put.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
http-robots.txt.nse
…
http-robtex-reverse-ip.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
http-title.nse
…
http-trace.nse
Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry
2011-07-27 03:28:13 +00:00
http-unsafe-output-escaping.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
http-userdir-enum.nse
…
http-vhosts.nse
…
http-vmware-path-vuln.nse
…
http-vuln-cve2009-3960.nse
o [NSE] Added the script http-vuln-cve2009-3960 that detects and exploits the
2012-01-02 19:48:42 +00:00
http-vuln-cve2011-3192.nse
…
http-vuln-cve2011-3368.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
http-waf-detect.nse
Improve some NSEDoc descriptions
2011-09-11 20:44:07 +00:00
http-wordpress-brute.nse
…
http-wordpress-enum.nse
…
http-wordpress-plugins.nse
…
iax2-version.nse
…
imap-brute.nse
minor updates to the nsedoc descriptions for some scripts
2011-09-11 18:26:37 +00:00
imap-capabilities.nse
o [NSE] Added the script imap-brute that performs brute force password
2011-07-21 06:14:02 +00:00
informix-brute.nse
…
informix-query.nse
Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry
2011-07-27 03:28:13 +00:00
informix-tables.nse
…
ip-geolocation-geobytes.nse
Change CRLF line endings to LF in ip-geolocation-*.nse.
2011-11-02 16:50:38 +00:00
ip-geolocation-geoplugin.nse
…
ip-geolocation-ipinfodb.nse
Change CRLF line endings to LF in ip-geolocation-*.nse.
2011-11-02 16:50:38 +00:00
ip-geolocation-maxmind.nse
…
ipidseq.nse
…
ipv6-node-info.nse
Update and canonicalize a bunch of script descriptions
2011-11-07 04:08:29 +00:00
irc-botnet-channels.nse
Minor updates to description text
2011-12-29 10:54:55 +00:00
irc-brute.nse
Removed e-mail address from author variable in rtsp-methods and irc-brute
2011-11-11 15:31:50 +00:00
irc-info.nse
…
irc-unrealircd-backdoor.nse
…
iscsi-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
iscsi-info.nse
…
jdwp-version.nse
…
krb5-enum-users.nse
…
ldap-brute.nse
…
ldap-novell-getpass.nse
…
ldap-rootdse.nse
…
ldap-search.nse
…
lexmark-config.nse
…
lltd-discovery.nse
…
maxdb-info.nse
…
membase-brute.nse
o [NSE] Added the script membase-brute that performs password brute force
2012-01-10 18:19:21 +00:00
membase-http-info.nse
o [NSE] Added the script membase-brute that performs password brute force
2012-01-10 18:19:21 +00:00
memcached-info.nse
o [NSE] Added the script memcached-info that lists version and statistics
2012-01-02 11:30:18 +00:00
metasploit-xmlrpc-brute.nse
…
modbus-discover.nse
Minor NSEDoc summary cleanup
2011-01-21 08:28:38 +00:00
mongodb-databases.nse
…
mongodb-info.nse
…
ms-sql-brute.nse
…
ms-sql-config.nse
…
ms-sql-dump-hashes.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
ms-sql-empty-password.nse
…
ms-sql-hasdbaccess.nse
…
ms-sql-info.nse
…
ms-sql-query.nse
…
ms-sql-tables.nse
…
ms-sql-xp-cmdshell.nse
…
mysql-audit.nse
very minor nsedoc improvements
2012-01-07 03:04:18 +00:00
mysql-brute.nse
…
mysql-databases.nse
…
mysql-empty-password.nse
…
mysql-info.nse
…
mysql-users.nse
…
mysql-variables.nse
…
nat-pmp-info.nse
o [NSE] Added a natpmp library and the script nat-pmp-mapport that allows
2012-01-02 11:41:21 +00:00
nat-pmp-mapport.nse
o [NSE] Added a natpmp library and the script nat-pmp-mapport that allows
2012-01-02 11:41:21 +00:00
nbstat.nse
…
ncp-enum-users.nse
…
ncp-serverinfo.nse
…
nessus-brute.nse
…
netbus-auth-bypass.nse
…
netbus-brute.nse
…
netbus-info.nse
…
netbus-version.nse
…
nexpose-brute.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
nfs-ls.nse
…
nfs-showmount.nse
…
nfs-statfs.nse
…
nping-brute.nse
…
nrpe-enum.nse
…
ntp-info.nse
…
ntp-monlist.nse
…
omp2-brute.nse
…
omp2-enum-targets.nse
Don't add a blank line at the top of the report. Other scripts don't.
2011-07-09 16:39:12 +00:00
openlookup-info.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
openvas-otp-brute.nse
…
oracle-brute.nse
…
oracle-enum-users.nse
…
oracle-sid-brute.nse
…
ovs-agent-version.nse
…
p2p-conficker.nse
…
path-mtu.nse
…
pgsql-brute.nse
…
pjl-ready-message.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
pop3-brute.nse
…
pop3-capabilities.nse
…
pptp-version.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
qscan.nse
…
quake3-info.nse
very minor nsedoc improvements
2012-01-07 03:04:18 +00:00
quake3-master-getservers.nse
…
realvnc-auth-bypass.nse
…
redis-brute.nse
o [NSE] Added the script redis-info that lists version and statistic information
2012-01-02 11:27:06 +00:00
redis-info.nse
o [NSE] Added the script redis-info that lists version and statistic information
2012-01-02 11:27:06 +00:00
resolveall.nse
…
reverse-index.nse
Minor updates to description text
2011-12-29 10:54:55 +00:00
rexec-brute.nse
Minor updates to description text
2011-12-29 10:54:55 +00:00
riak-http-info.nse
o [NSE] Added the script riak-http-info that lists version and statistics
2012-01-02 11:37:38 +00:00
rlogin-brute.nse
Minor updates to description text
2011-12-29 10:54:55 +00:00
rmi-dumpregistry.nse
Use java-rmi for the the Java RMI service name. Suggested by martin
2011-06-21 00:03:16 +00:00
rpcinfo.nse
Oops, I forgot to add the comment symbols to my nsedoc @output changes to this script.
2011-03-19 18:58:31 +00:00
rtsp-methods.nse
…
rtsp-url-brute.nse
…
script.db
o [NSE] Added the script broadcast-pppoe-discover that discovers PPPoE servers
2012-01-10 18:22:39 +00:00
servicetags.nse
…
sip-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
sip-enum-users.nse
…
skypev2-version.nse
…
smb-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
smb-check-vulns.nse
…
smb-enum-domains.nse
…
smb-enum-groups.nse
…
smb-enum-processes.nse
…
smb-enum-sessions.nse
…
smb-enum-shares.nse
Merge from Dependencies branch (nmap-exp/patrick/dependencies)
2009-12-30 02:34:05 +00:00
smb-enum-users.nse
…
smb-flood.nse
…
smb-mbenum.nse
…
smb-os-discovery.nse
…
smb-psexec.nse
…
smb-security-mode.nse
o [NSE] Make smb-security-mode run by default.
2011-07-25 21:40:31 +00:00
smb-server-stats.nse
Merge from Dependencies branch (nmap-exp/patrick/dependencies)
2009-12-30 02:34:05 +00:00
smb-system-info.nse
…
smbv2-enabled.nse
…
smtp-brute.nse
…
smtp-commands.nse
…
smtp-enum-users.nse
…
smtp-open-relay.nse
Duarte Silva asked that his email address be updated in these scripts.
2011-08-22 00:58:19 +00:00
smtp-strangeport.nse
…
smtp-vuln-cve2010-4344.nse
…
smtp-vuln-cve2011-1720.nse
…
smtp-vuln-cve2011-1764.nse
…
sniffer-detect.nse
…
snmp-brute.nse
o [NSE] Added local port to BPF filter in snmp-brute to fix bug that would
2011-12-29 08:49:38 +00:00
snmp-interfaces.nse
…
snmp-ios-config.nse
…
snmp-netstat.nse
…
snmp-processes.nse
…
snmp-sysdescr.nse
…
snmp-win32-services.nse
…
snmp-win32-shares.nse
…
snmp-win32-software.nse
…
snmp-win32-users.nse
…
socks-auth-info.nse
o [NSE] Added the script socks-auth-info that lists supported SOCKS 5
2012-01-02 11:34:27 +00:00
socks-brute.nse
o [NSE] Added the script socks-brute that performs brute force password
2012-01-02 11:15:34 +00:00
socks-open-proxy.nse
…
sql-injection.nse
…
ssh2-enum-algos.nse
…
ssh-hostkey.nse
Sort duplicates output in ssh-hostkey.nse.
2011-12-30 04:05:36 +00:00
sshv1.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
ssl-cert.nse
…
ssl-enum-ciphers.nse
…
ssl-google-cert-catalog.nse
…
ssl-known-key.nse
…
sslv2.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
stuxnet-detect.nse
…
svn-brute.nse
…
targets-ipv6-multicast-echo.nse
…
targets-ipv6-multicast-invalid-dst.nse
…
targets-ipv6-multicast-slaac.nse
…
targets-sniffer.nse
…
targets-traceroute.nse
…
telnet-brute.nse
…
telnet-encryption.nse
Added missing license text to telnet-encryption
2011-12-29 11:49:29 +00:00
tftp-enum.nse
…
unusual-port.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
upnp-info.nse
applied patch from Thomas Buchanan containing bugfixes and some re-factoring
2010-11-19 19:31:50 +00:00
vmauthd-brute.nse
o [NSE] Added the script vmauthd-brute that performs brute force password
2012-01-02 11:12:46 +00:00
vnc-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
vnc-info.nse
…
vuze-dht-info.nse
Update the script descriptions/nsedoc a bit
2012-01-01 22:21:08 +00:00
wdb-version.nse
…
whois.nse
…
wsdd-discover.nse
…
x11-access.nse
…
xmpp-brute.nse
…
xmpp-info.nse
Added xmpp-info.nse as a replacement for xmpp.nse (script from Vasily Kulikov).
2011-09-04 19:18:22 +00:00