PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-02-15 18:06:35 +00:00
Code Issues Projects Releases Wiki Activity
Files
a799d2714df6ce18e2418da0bc40fb4599f37ab4
nmap/scripts
History
…
..
acarsd-info.nse
Made some minor wording updates to script descriptions
2012-03-08 20:59:06 +00:00
address-info.nse
Exclude ::1 from being an IPv4-compatible address (0.0.0.1) in address-info.
2011-12-23 21:14:53 +00:00
afp-brute.nse
…
afp-ls.nse
…
afp-path-vuln.nse
…
afp-serverinfo.nse
…
afp-showmount.nse
…
amqp-info.nse
…
asn-query.nse
…
asn-to-prefix.nse
…
auth-owners.nse
…
auth-spoof.nse
Do copyediting of NSEDoc. This is a first pass up to ms-sql-xp-cmdshell.
2010-07-09 23:32:18 +00:00
backorifice-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
backorifice-info.nse
Adding a dependency for backorifice-brute to backorifice-info
2011-06-30 15:47:32 +00:00
banner.nse
…
bitcoin-getaddr.nse
Use stdnse.silent_require where needed.
2012-03-09 18:06:49 +00:00
bitcoin-info.nse
…
bitcoinrpc-info.nse
…
bittorrent-discovery.nse
…
broadcast-ataoe-discover.nse
…
broadcast-avahi-dos.nse
…
broadcast-db2-discover.nse
…
broadcast-dhcp6-discover.nse
…
broadcast-dhcp-discover.nse
…
broadcast-dns-service-discovery.nse
…
broadcast-dropbox-listener.nse
…
broadcast-listener.nse
…
broadcast-ms-sql-discover.nse
…
broadcast-netbios-master-browser.nse
very minor nsedoc improvements
2012-01-07 03:04:18 +00:00
broadcast-networker-discover.nse
…
broadcast-novell-locate.nse
…
broadcast-pc-anywhere.nse
…
broadcast-pc-duo.nse
…
broadcast-ping.nse
…
broadcast-pppoe-discover.nse
…
broadcast-rip-discover.nse
…
broadcast-ripng-discover.nse
…
broadcast-sybase-asa-discover.nse
…
broadcast-upnp-info.nse
…
broadcast-versant-locate.nse
…
broadcast-wake-on-lan.nse
…
broadcast-wpad-discover.nse
…
broadcast-wsdd-discover.nse
…
broadcast-xdmcp-discover.nse
…
cccam-version.nse
…
citrix-brute-xml.nse
…
citrix-enum-apps-xml.nse
Spell-check NSEDoc.
2010-07-19 16:29:48 +00:00
citrix-enum-apps.nse
…
citrix-enum-servers-xml.nse
…
citrix-enum-servers.nse
…
couchdb-databases.nse
…
couchdb-stats.nse
…
creds-summary.nse
…
cvs-brute-repository.nse
…
cvs-brute.nse
…
daap-get-library.nse
…
daytime.nse
Add @output sections to these scripts:
2010-03-31 21:45:21 +00:00
db2-das-info.nse
Addressed a condition in db2-das-info.nse where the script would crash
2011-02-16 00:13:38 +00:00
db2-discover.nse
…
dhcp-discover.nse
…
dns-blacklist.nse
…
dns-brute.nse
o [NSE] added a debug message in the prerule to show that some arguments are missing.
2011-11-09 12:39:01 +00:00
dns-cache-snoop.nse
Do copyediting of NSEDoc. This is a first pass up to ms-sql-xp-cmdshell.
2010-07-09 23:32:18 +00:00
dns-client-subnet-scan.nse
…
dns-fuzz.nse
…
dns-nsec-enum.nse
Change the "name" member of a decoded NSEC record to be called
2011-03-27 05:07:16 +00:00
dns-nsid.nse
…
dns-random-srcport.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
dns-random-txid.nse
…
dns-recursion.nse
Make the set of script "default and intrusive" empty.
2011-04-30 19:21:38 +00:00
dns-service-discovery.nse
…
dns-srv-enum.nse
…
dns-update.nse
…
dns-zeustracker.nse
…
dns-zone-transfer.nse
…
domcon-brute.nse
…
domcon-cmd.nse
Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry
2011-07-27 03:28:13 +00:00
domino-enum-users.nse
Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry
2011-07-27 03:28:13 +00:00
dpap-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
drda-brute.nse
…
drda-info.nse
…
duplicates.nse
…
eap-info.nse
…
epmd-info.nse
Add epmd-info script from Toni Ruottu.
2011-04-04 18:28:33 +00:00
finger.nse
…
firewalk.nse
Consistent naming of the address fields between IPv4 and IPv6.
2012-01-21 14:46:00 +00:00
ftp-anon.nse
…
ftp-bounce.nse
…
ftp-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
ftp-libopie.nse
Updated some of the vulnerability scripts to use the new vulnerability library.
2011-11-09 10:08:19 +00:00
ftp-proftpd-backdoor.nse
…
ftp-vsftpd-backdoor.nse
…
ftp-vuln-cve2010-4221.nse
…
ganglia-info.nse
…
giop-info.nse
o [NSE] Made the following scripts in the default category:
2011-07-18 09:50:18 +00:00
gopher-ls.nse
…
hadoop-datanode-info.nse
…
hadoop-jobtracker-info.nse
…
hadoop-namenode-info.nse
…
hadoop-secondary-namenode-info.nse
…
hadoop-tasktracker-info.nse
…
hbase-master-info.nse
…
hbase-region-info.nse
…
hddtemp-info.nse
…
hostmap.nse
…
http-affiliate-id.nse
…
http-apache-negotiation.nse
…
http-auth-finder.nse
…
http-auth.nse
Fixed a bug in http-auth that failed to report errors properly.
2012-01-28 18:13:15 +00:00
http-awstatstotals-exec.nse
Improve some NSEDoc descriptions
2011-09-11 20:44:07 +00:00
http-axis2-dir-traversal.nse
…
http-backup-finder.nse
…
http-barracuda-dir-traversal.nse
…
http-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
http-cakephp-version.nse
…
http-chrono.nse
o [NSE] Added new script http-chrono, which measures min, max and average
2012-03-23 19:29:44 +00:00
http-config-backup.nse
…
http-cors.nse
Update and canonicalize a bunch of script descriptions
2011-11-07 04:08:29 +00:00
http-date.nse
…
http-default-accounts.nse
…
http-domino-enum-passwords.nse
…
http-drupal-enum-users.nse
…
http-email-harvest.nse
…
http-enum.nse
…
http-favicon.nse
…
http-form-brute.nse
…
http-generator.nse
…
http-google-malware.nse
…
http-grep.nse
…
http-headers.nse
…
http-iis-webdav-vuln.nse
…
http-joomla-brute.nse
…
http-litespeed-sourcecode-download.nse
…
http-majordomo2-dir-traversal.nse
…
http-malware-host.nse
…
http-method-tamper.nse
…
http-methods.nse
…
http-open-proxy.nse
Removed declarations of unused variables.
2012-01-19 22:03:06 +00:00
http-open-redirect.nse
* bugfixes to several http scripts related to new redirect code in http
2012-02-11 22:37:14 +00:00
http-passwd.nse
…
http-php-version.nse
…
http-proxy-brute.nse
…
http-put.nse
…
http-qnap-nas-info.nse
…
http-robots.txt.nse
…
http-robtex-reverse-ip.nse
…
http-title.nse
…
http-trace.nse
…
http-unsafe-output-escaping.nse
…
http-userdir-enum.nse
…
http-vhosts.nse
…
http-vmware-path-vuln.nse
Remove 3 vuln scripts from default category as discussed at http://seclists.org/nmap-dev/2011/q3/732
2011-09-07 20:40:51 +00:00
http-vuln-cve2009-3960.nse
…
http-vuln-cve2010-2861.nse
…
http-vuln-cve2011-3192.nse
…
http-vuln-cve2011-3368.nse
…
http-waf-detect.nse
Improve some NSEDoc descriptions
2011-09-11 20:44:07 +00:00
http-wordpress-brute.nse
…
http-wordpress-enum.nse
…
http-wordpress-plugins.nse
…
iax2-brute.nse
…
iax2-version.nse
…
imap-brute.nse
…
imap-capabilities.nse
…
informix-brute.nse
…
informix-query.nse
…
informix-tables.nse
…
ip-geolocation-geobytes.nse
…
ip-geolocation-geoplugin.nse
…
ip-geolocation-ipinfodb.nse
…
ip-geolocation-maxmind.nse
…
ipidseq.nse
…
ipv6-node-info.nse
…
irc-botnet-channels.nse
Minor updates to description text
2011-12-29 10:54:55 +00:00
irc-brute.nse
…
irc-info.nse
…
irc-unrealircd-backdoor.nse
…
iscsi-brute.nse
…
iscsi-info.nse
o [NSE] Updated the categories of the following scripts:
2011-07-11 22:03:17 +00:00
jdwp-version.nse
…
krb5-enum-users.nse
…
ldap-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
ldap-novell-getpass.nse
…
ldap-rootdse.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
ldap-search.nse
Added support for the LDAP extensibleMatch filter to ldap.lua. LDAP searches using this take the following format:
2011-10-31 00:27:03 +00:00
lexmark-config.nse
…
lltd-discovery.nse
…
maxdb-info.nse
…
membase-brute.nse
…
membase-http-info.nse
Made some minor wording updates to script descriptions
2012-03-08 20:59:06 +00:00
memcached-info.nse
…
metasploit-xmlrpc-brute.nse
o [NSE] Re-enabled support for guessing the username in addition to password
2011-11-11 05:52:52 +00:00
modbus-discover.nse
…
mongodb-brute.nse
…
mongodb-databases.nse
Use stdnse.silent_require where needed.
2012-03-09 18:06:49 +00:00
mongodb-info.nse
…
ms-sql-brute.nse
…
ms-sql-config.nse
…
ms-sql-dump-hashes.nse
…
ms-sql-empty-password.nse
…
ms-sql-hasdbaccess.nse
…
ms-sql-info.nse
…
ms-sql-query.nse
…
ms-sql-tables.nse
…
ms-sql-xp-cmdshell.nse
…
mysql-audit.nse
…
mysql-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
mysql-databases.nse
…
mysql-empty-password.nse
Fixed a number of incorrect receives and replaced them with receive_bytes.
2010-08-24 20:25:46 +00:00
mysql-info.nse
Do copyediting of NSEDoc up through pgsql-brute.
2010-07-12 06:21:03 +00:00
mysql-users.nse
…
mysql-variables.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
nat-pmp-info.nse
…
nat-pmp-mapport.nse
…
nbstat.nse
…
ncp-enum-users.nse
o [NSE] Made changes to the categories of the following scripts. Their new
2011-10-22 19:00:33 +00:00
ncp-serverinfo.nse
…
ndmp-fs-info.nse
…
ndmp-version.nse
…
nessus-brute.nse
Update and canonicalize a bunch of script descriptions
2011-11-07 04:08:29 +00:00
nessus-xmlrpc-brute.nse
…
netbus-auth-bypass.nse
…
netbus-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
netbus-info.nse
…
netbus-version.nse
Apply a patch from Toni Ruottu with some small misc. improvements to the netbus-* scripts. Also I changed netbus-auth-bypass to the safe category as recommended by Toni
2011-01-15 21:28:45 +00:00
nexpose-brute.nse
…
nfs-ls.nse
Fix a typo in a comment.
2011-04-22 22:21:43 +00:00
nfs-showmount.nse
…
nfs-statfs.nse
Normalize tab.lua usage so that a call to tab.nextrow comes after (not
2010-12-30 21:08:25 +00:00
nping-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
nrpe-enum.nse
…
ntp-info.nse
Add a default timeout of 5000 ms to the ntp-info script, and don't try
2009-12-21 20:24:45 +00:00
ntp-monlist.nse
o [NSE] Added ipv6 support to the wsdd, dnssd and upnp libraries. Applied
2011-06-16 05:29:42 +00:00
omp2-brute.nse
…
omp2-enum-targets.nse
…
openlookup-info.nse
…
openvas-otp-brute.nse
…
oracle-brute.nse
Added support for detecting SYSDBA, patch supplied by László Tóth.
2012-03-15 19:47:24 +00:00
oracle-enum-users.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
oracle-sid-brute.nse
…
ovs-agent-version.nse
Update ovs-agent-version.nse with a signature from version 3.0.1.
2011-09-23 21:42:06 +00:00
p2p-conficker.nse
Fix incorrect (broken) return value in p2p-conficker.nse. Spotted by
2011-07-18 20:40:47 +00:00
path-mtu.nse
…
pgsql-brute.nse
…
pjl-ready-message.nse
…
pop3-brute.nse
…
pop3-capabilities.nse
Merge r18689:r19511 from /nmap-exp/djalal/nse-rules.
2010-08-06 16:40:03 +00:00
pptp-version.nse
…
qscan.nse
Avoid bloating the registry by using variables to transfer information from
2011-06-20 21:06:14 +00:00
quake3-info.nse
…
quake3-master-getservers.nse
…
realvnc-auth-bypass.nse
…
redis-brute.nse
…
redis-info.nse
Some minor NSEDoc updates on scripts we completed in January 2012
2012-02-10 08:08:51 +00:00
resolveall.nse
o [NSE] Add a final note in the output about the 'newtargets' usage.
2011-11-09 12:29:14 +00:00
reverse-index.nse
…
rexec-brute.nse
…
riak-http-info.nse
…
rlogin-brute.nse
…
rmi-dumpregistry.nse
…
rpcap-brute.nse
…
rpcap-info.nse
…
rpcinfo.nse
…
rsync-brute.nse
…
rsync-list-modules.nse
…
rtsp-methods.nse
Removed e-mail address from author variable in rtsp-methods and irc-brute
2011-11-11 15:31:50 +00:00
rtsp-url-brute.nse
…
script.db
…
servicetags.nse
…
sip-brute.nse
…
sip-enum-users.nse
…
skypev2-version.nse
…
smb-brute.nse
…
smb-check-vulns.nse
…
smb-enum-domains.nse
Fixed a bug where a ternary operator meant to prevent a nil pointer exception was outside of a math.floor() call, making it totally worthless. I moved the math.floor() outside the operation, fixing it.
2010-09-24 01:33:01 +00:00
smb-enum-groups.nse
First-pass copyediting on the remaining scripts.
2010-07-12 17:19:26 +00:00
smb-enum-processes.nse
Change " \n" to just "\n" where appropriate in NSE. Leading newlines are
2010-09-30 05:03:39 +00:00
smb-enum-sessions.nse
…
smb-enum-shares.nse
…
smb-enum-users.nse
…
smb-flood.nse
…
smb-mbenum.nse
…
smb-os-discovery.nse
…
smb-psexec.nse
Update some script nsedoc descriptions for consistency. The description should almost always start with an active verb and never with the script name or 'this script'. Admittedly that makes the first sentence a fragment. The first sentence should be capitalized
2011-09-11 20:50:56 +00:00
smb-security-mode.nse
…
smb-server-stats.nse
…
smb-system-info.nse
…
smbv2-enabled.nse
Fixed the same small bug in smbv2-enabled.nse (was still using the wrong variable for an error message)
2010-08-13 20:39:20 +00:00
smtp-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
smtp-commands.nse
o [NSE] Updated the SMTP scripts to use the new SMTP Lua library.
2011-06-13 13:19:26 +00:00
smtp-enum-users.nse
o [NSE] Made changes to the categories of the following scripts. Their new
2011-10-22 19:00:33 +00:00
smtp-open-relay.nse
…
smtp-strangeport.nse
…
smtp-vuln-cve2010-4344.nse
…
smtp-vuln-cve2011-1720.nse
…
smtp-vuln-cve2011-1764.nse
…
sniffer-detect.nse
o [NSE] Call the new nmap.get_interface_info() function instead of
2011-04-22 22:19:08 +00:00
snmp-brute.nse
…
snmp-interfaces.nse
snmp-interfaces patch for interaction with mac-geolocation through nmap.registry[host.ip][mac-geolocation]
2011-05-31 00:13:12 +00:00
snmp-ios-config.nse
…
snmp-netstat.nse
…
snmp-processes.nse
…
snmp-sysdescr.nse
…
snmp-win32-services.nse
…
snmp-win32-shares.nse
…
snmp-win32-software.nse
…
snmp-win32-users.nse
o [NSE] Made changes to the categories of the following scripts. Their new
2011-10-22 19:00:33 +00:00
socks-auth-info.nse
…
socks-brute.nse
Made some minor wording updates to script descriptions
2012-03-08 20:59:06 +00:00
socks-open-proxy.nse
…
sql-injection.nse
…
ssh2-enum-algos.nse
…
ssh-hostkey.nse
Sort duplicates output in ssh-hostkey.nse.
2011-12-30 04:05:36 +00:00
sshv1.nse
…
ssl-cert.nse
…
ssl-enum-ciphers.nse
Fix to new ssl-enum-ciphers codes from Martyn Tovey.
2012-03-21 21:31:23 +00:00
ssl-google-cert-catalog.nse
…
ssl-known-key.nse
trivial nsedoc change
2011-06-30 09:11:57 +00:00
sslv2.nse
…
stun-info.nse
…
stun-version.nse
…
stuxnet-detect.nse
…
svn-brute.nse
…
targets-ipv6-multicast-echo.nse
…
targets-ipv6-multicast-invalid-dst.nse
…
targets-ipv6-multicast-slaac.nse
…
targets-sniffer.nse
…
targets-traceroute.nse
…
telnet-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
telnet-encryption.nse
…
tftp-enum.nse
…
unusual-port.nse
…
upnp-info.nse
…
url-snarf.nse
…
versant-info.nse
o [NSE] Added a Versant object database library and the scripts
2012-03-08 17:51:48 +00:00
vmauthd-brute.nse
…
vnc-brute.nse
…
vnc-info.nse
o [NSE] Made the following scripts in the default category:
2011-07-18 09:50:18 +00:00
voldemort-info.nse
remove a newline which caused whitespace problem in generated nsedoc
2012-01-31 20:41:15 +00:00
vuze-dht-info.nse
…
wdb-version.nse
o [NSE] Updated the categories of the following scripts:
2011-07-11 22:03:17 +00:00
whois.nse
Corrected defective handling of etag header which prevented conditional HTTP
2011-09-28 13:02:43 +00:00
wsdd-discover.nse
…
x11-access.nse
…
xdmcp-discover.nse
…
xmpp-brute.nse
…
xmpp-info.nse
…