PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-02-14 01:16:33 +00:00
Code Issues Projects Releases Wiki Activity
Files
b55263be4e27daa225ec75bc6f1db9a90696579a
nmap/scripts
History
patrik b6a56e9fa0 o [NSE] Modified http-auth to support multiple authentication mechanism and to 
allow for a path to be specified as an argument. [Patrik]
2011-12-18 19:25:24 +00:00
..
address-info.nse
Add missing datafiles import to address-info.
2011-10-04 19:40:04 +00:00
afp-brute.nse
…
afp-ls.nse
…
afp-path-vuln.nse
…
afp-serverinfo.nse
…
afp-showmount.nse
…
amqp-info.nse
…
asn-query.nse
…
auth-owners.nse
…
auth-spoof.nse
…
backorifice-brute.nse
…
backorifice-info.nse
Adding a dependency for backorifice-brute to backorifice-info
2011-06-30 15:47:32 +00:00
banner.nse
…
bitcoin-getaddr.nse
…
bitcoin-info.nse
o [NSE] Added the scripts bitcoin-info, bitcoin-getaddr and a supporting
2011-11-09 18:56:16 +00:00
bitcoinrpc-info.nse
…
bittorrent-discovery.nse
…
broadcast-avahi-dos.nse
…
broadcast-db2-discover.nse
…
broadcast-dhcp-discover.nse
…
broadcast-dns-service-discovery.nse
…
broadcast-dropbox-listener.nse
…
broadcast-listener.nse
…
broadcast-ms-sql-discover.nse
…
broadcast-netbios-master-browser.nse
o [NSE] Added two new scripts broadcast-netbios-master-browser and smb-mbenum:
2011-06-19 18:47:19 +00:00
broadcast-novell-locate.nse
…
broadcast-pc-anywhere.nse
…
broadcast-pc-duo.nse
…
broadcast-ping.nse
…
broadcast-rip-discover.nse
…
broadcast-sybase-asa-discover.nse
…
broadcast-upnp-info.nse
…
broadcast-wake-on-lan.nse
…
broadcast-wsdd-discover.nse
…
citrix-brute-xml.nse
Change " \n" to just "\n" where appropriate in NSE. Leading newlines are
2010-09-30 05:03:39 +00:00
citrix-enum-apps-xml.nse
Spell-check NSEDoc.
2010-07-19 16:29:48 +00:00
citrix-enum-apps.nse
…
citrix-enum-servers-xml.nse
…
citrix-enum-servers.nse
…
couchdb-databases.nse
…
couchdb-stats.nse
…
creds-summary.nse
…
cvs-brute-repository.nse
…
cvs-brute.nse
…
daap-get-library.nse
…
daytime.nse
Add @output sections to these scripts:
2010-03-31 21:45:21 +00:00
db2-das-info.nse
…
db2-discover.nse
…
dhcp-discover.nse
…
dns-brute.nse
…
dns-cache-snoop.nse
…
dns-fuzz.nse
…
dns-nsec-enum.nse
Change the "name" member of a decoded NSEC record to be called
2011-03-27 05:07:16 +00:00
dns-random-srcport.nse
…
dns-random-txid.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
dns-recursion.nse
Make the set of script "default and intrusive" empty.
2011-04-30 19:21:38 +00:00
dns-service-discovery.nse
…
dns-update.nse
…
dns-zeustracker.nse
…
dns-zone-transfer.nse
…
domcon-brute.nse
…
domcon-cmd.nse
…
domino-enum-users.nse
…
dpap-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
drda-brute.nse
…
drda-info.nse
…
epmd-info.nse
Add epmd-info script from Toni Ruottu.
2011-04-04 18:28:33 +00:00
finger.nse
…
firewalk.nse
Cosmetic fix: consistently return 'false' in the hostrule
2011-09-14 10:03:41 +00:00
ftp-anon.nse
…
ftp-bounce.nse
…
ftp-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
ftp-libopie.nse
…
ftp-proftpd-backdoor.nse
…
ftp-vsftpd-backdoor.nse
…
ftp-vuln-cve2010-4221.nse
…
ganglia-info.nse
…
giop-info.nse
…
gopher-ls.nse
…
hadoop-datanode-info.nse
…
hadoop-jobtracker-info.nse
…
hadoop-namenode-info.nse
…
hadoop-secondary-namenode-info.nse
…
hadoop-tasktracker-info.nse
New Hadoop and HBase scripts by John Bond:
2011-11-08 16:00:16 +00:00
hbase-master-info.nse
…
hbase-region-info.nse
…
hddtemp-info.nse
Add gopher-ls and hddtemp-info @usage, adapted from Toni Ruotto.
2011-01-15 16:33:06 +00:00
hostmap.nse
…
http-affiliate-id.nse
…
http-apache-negotiation.nse
…
http-auth.nse
o [NSE] Modified http-auth to support multiple authentication mechanism and to
2011-12-18 19:25:24 +00:00
http-awstatstotals-exec.nse
Improve some NSEDoc descriptions
2011-09-11 20:44:07 +00:00
http-axis2-dir-traversal.nse
…
http-backup-finder.nse
…
http-barracuda-dir-traversal.nse
…
http-brute.nse
…
http-cakephp-version.nse
…
http-cors.nse
…
http-date.nse
…
http-default-accounts.nse
…
http-domino-enum-passwords.nse
…
http-email-harvest.nse
…
http-enum.nse
…
http-favicon.nse
…
http-form-brute.nse
…
http-google-malware.nse
…
http-grep.nse
…
http-headers.nse
…
http-iis-webdav-vuln.nse
…
http-joomla-brute.nse
…
http-litespeed-sourcecode-download.nse
…
http-majordomo2-dir-traversal.nse
…
http-malware-host.nse
…
http-method-tamper.nse
…
http-methods.nse
…
http-open-proxy.nse
Make the set of script "default and intrusive" empty.
2011-04-30 19:21:38 +00:00
http-open-redirect.nse
…
http-passwd.nse
…
http-php-version.nse
…
http-put.nse
…
http-robots.txt.nse
…
http-robtex-reverse-ip.nse
…
http-title.nse
…
http-trace.nse
…
http-unsafe-output-escaping.nse
…
http-userdir-enum.nse
…
http-vhosts.nse
Fix an indexing bug in http-vhosts.nse. Found by Daniel Miller.
2011-07-18 20:44:22 +00:00
http-vmware-path-vuln.nse
Remove 3 vuln scripts from default category as discussed at http://seclists.org/nmap-dev/2011/q3/732
2011-09-07 20:40:51 +00:00
http-vuln-cve2011-3192.nse
…
http-vuln-cve2011-3368.nse
…
http-waf-detect.nse
…
http-wordpress-brute.nse
…
http-wordpress-enum.nse
…
http-wordpress-plugins.nse
…
iax2-version.nse
use # length operator instead of string.len (canonicalize)
2011-05-11 15:12:47 +00:00
imap-brute.nse
…
imap-capabilities.nse
…
informix-brute.nse
…
informix-query.nse
…
informix-tables.nse
…
ip-geolocation-geobytes.nse
Change CRLF line endings to LF in ip-geolocation-*.nse.
2011-11-02 16:50:38 +00:00
ip-geolocation-geoplugin.nse
…
ip-geolocation-ipinfodb.nse
…
ip-geolocation-maxmind.nse
…
ipidseq.nse
Avoid bloating the registry by using variables to transfer information from
2011-06-20 21:06:14 +00:00
ipv6-node-info.nse
…
irc-botnet-channels.nse
Add irc-botnet-channels.nse.
2011-11-09 01:42:03 +00:00
irc-brute.nse
…
irc-info.nse
…
irc-unrealircd-backdoor.nse
…
iscsi-brute.nse
…
iscsi-info.nse
…
jdwp-version.nse
…
krb5-enum-users.nse
…
ldap-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
ldap-novell-getpass.nse
…
ldap-rootdse.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
ldap-search.nse
…
lexmark-config.nse
…
lltd-discovery.nse
…
maxdb-info.nse
…
metasploit-xmlrpc-brute.nse
…
modbus-discover.nse
…
mongodb-databases.nse
Change calls in these forms:
2010-08-16 18:59:30 +00:00
mongodb-info.nse
…
ms-sql-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
ms-sql-config.nse
…
ms-sql-dump-hashes.nse
…
ms-sql-empty-password.nse
…
ms-sql-hasdbaccess.nse
…
ms-sql-info.nse
In ms-sql-info, change the hostrule conditions
2011-09-12 16:36:06 +00:00
ms-sql-query.nse
…
ms-sql-tables.nse
o [NSE] Merged the ms-sql branch with several improvements and changes to the
2011-02-26 22:41:10 +00:00
ms-sql-xp-cmdshell.nse
…
mysql-audit.nse
…
mysql-brute.nse
…
mysql-databases.nse
…
mysql-empty-password.nse
Fixed a number of incorrect receives and replaced them with receive_bytes.
2010-08-24 20:25:46 +00:00
mysql-info.nse
Do copyediting of NSEDoc up through pgsql-brute.
2010-07-12 06:21:03 +00:00
mysql-users.nse
…
mysql-variables.nse
…
nat-pmp-info.nse
…
nbstat.nse
…
ncp-enum-users.nse
…
ncp-serverinfo.nse
…
nessus-brute.nse
…
netbus-auth-bypass.nse
Minor typo fixes
2011-06-03 09:24:51 +00:00
netbus-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
netbus-info.nse
Apply a patch from Toni Ruottu with some small misc. improvements to the netbus-* scripts. Also I changed netbus-auth-bypass to the safe category as recommended by Toni
2011-01-15 21:28:45 +00:00
netbus-version.nse
Apply a patch from Toni Ruottu with some small misc. improvements to the netbus-* scripts. Also I changed netbus-auth-bypass to the safe category as recommended by Toni
2011-01-15 21:28:45 +00:00
nexpose-brute.nse
…
nfs-ls.nse
Fix a typo in a comment.
2011-04-22 22:21:43 +00:00
nfs-showmount.nse
…
nfs-statfs.nse
Normalize tab.lua usage so that a call to tab.nextrow comes after (not
2010-12-30 21:08:25 +00:00
nping-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
nrpe-enum.nse
…
ntp-info.nse
…
ntp-monlist.nse
…
omp2-brute.nse
…
omp2-enum-targets.nse
…
openlookup-info.nse
…
openvas-otp-brute.nse
…
oracle-brute.nse
…
oracle-enum-users.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
oracle-sid-brute.nse
…
ovs-agent-version.nse
Update ovs-agent-version.nse with a signature from version 3.0.1.
2011-09-23 21:42:06 +00:00
p2p-conficker.nse
Fix incorrect (broken) return value in p2p-conficker.nse. Spotted by
2011-07-18 20:40:47 +00:00
path-mtu.nse
…
pgsql-brute.nse
…
pjl-ready-message.nse
…
pop3-brute.nse
…
pop3-capabilities.nse
Merge r18689:r19511 from /nmap-exp/djalal/nse-rules.
2010-08-06 16:40:03 +00:00
pptp-version.nse
…
qscan.nse
…
quake3-info.nse
…
quake3-master-getservers.nse
…
realvnc-auth-bypass.nse
…
resolveall.nse
o [NSE] Add a final note in the output about the 'newtargets' usage.
2011-11-09 12:29:14 +00:00
reverse-index.nse
…
rexec-brute.nse
…
rlogin-brute.nse
…
rmi-dumpregistry.nse
…
rpcinfo.nse
…
rtsp-methods.nse
…
rtsp-url-brute.nse
…
script.db
…
servicetags.nse
…
sip-brute.nse
…
sip-enum-users.nse
…
skypev2-version.nse
…
smb-brute.nse
…
smb-check-vulns.nse
…
smb-enum-domains.nse
…
smb-enum-groups.nse
…
smb-enum-processes.nse
Change " \n" to just "\n" where appropriate in NSE. Leading newlines are
2010-09-30 05:03:39 +00:00
smb-enum-sessions.nse
…
smb-enum-shares.nse
…
smb-enum-users.nse
…
smb-flood.nse
…
smb-mbenum.nse
…
smb-os-discovery.nse
…
smb-psexec.nse
…
smb-security-mode.nse
…
smb-server-stats.nse
…
smb-system-info.nse
…
smbv2-enabled.nse
Fixed the same small bug in smbv2-enabled.nse (was still using the wrong variable for an error message)
2010-08-13 20:39:20 +00:00
smtp-brute.nse
…
smtp-commands.nse
o [NSE] Updated the SMTP scripts to use the new SMTP Lua library.
2011-06-13 13:19:26 +00:00
smtp-enum-users.nse
o [NSE] Made changes to the categories of the following scripts. Their new
2011-10-22 19:00:33 +00:00
smtp-open-relay.nse
…
smtp-strangeport.nse
…
smtp-vuln-cve2010-4344.nse
…
smtp-vuln-cve2011-1720.nse
…
smtp-vuln-cve2011-1764.nse
…
sniffer-detect.nse
o [NSE] Call the new nmap.get_interface_info() function instead of
2011-04-22 22:19:08 +00:00
snmp-brute.nse
…
snmp-interfaces.nse
snmp-interfaces patch for interaction with mac-geolocation through nmap.registry[host.ip][mac-geolocation]
2011-05-31 00:13:12 +00:00
snmp-ios-config.nse
…
snmp-netstat.nse
…
snmp-processes.nse
…
snmp-sysdescr.nse
…
snmp-win32-services.nse
…
snmp-win32-shares.nse
…
snmp-win32-software.nse
…
snmp-win32-users.nse
…
socks-open-proxy.nse
…
sql-injection.nse
…
ssh2-enum-algos.nse
…
ssh-hostkey.nse
New system for silent require errors. Use the new function
2011-06-13 23:38:35 +00:00
sshv1.nse
…
ssl-cert.nse
…
ssl-enum-ciphers.nse
Don't redundantly list the NULL compressor in ssl-num-ciphers.nse.
2011-09-14 18:21:23 +00:00
ssl-google-cert-catalog.nse
Light copyediting of NSEDoc in ssl-google-cert-catalog.nse.
2011-12-06 05:01:18 +00:00
ssl-known-key.nse
…
sslv2.nse
…
stuxnet-detect.nse
…
svn-brute.nse
…
targets-ipv6-multicast-echo.nse
…
targets-ipv6-multicast-invalid-dst.nse
…
targets-ipv6-multicast-slaac.nse
…
targets-sniffer.nse
…
targets-traceroute.nse
…
telnet-brute.nse
Create a new brute category for brute forcing scripts, move the *-brute scripts from auth category to brute. document it. I don't know what to do with dns-brute so I left it alone (it wasn't in auth category either)
2011-09-30 06:18:55 +00:00
tftp-enum.nse
…
unusual-port.nse
…
upnp-info.nse
…
vnc-brute.nse
…
vnc-info.nse
…
vuze-dht-info.nse
…
wdb-version.nse
o [NSE] Updated the categories of the following scripts:
2011-07-11 22:03:17 +00:00
whois.nse
Corrected defective handling of etag header which prevented conditional HTTP
2011-09-28 13:02:43 +00:00
wsdd-discover.nse
…
x11-access.nse
…
xmpp-brute.nse
…
xmpp-info.nse
…