Nmap NSE: SMB Enum Shares

This script attempts to list the shares on a Windows system over the SMB protocol. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-enum-shares.nse. OpenVAS Vulnerability Test $Id: gbnmapsmbenumshares.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap SMB Enum Shares NSE...

Nmap NSE: SMB Enum Processes

This script attempts to list all the running processes from a remote Windows system over the SMB protocol. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-enum-processes.nse. OpenVAS Vulnerability Test $Id: gbnmapsmbenumprocesses.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrappe...

Nmap NSE: SMB Enum Sessions

This script attempts to enumerate the users logged into a system either locally or through an SMB share. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-enum-sessions.nse. OpenVAS Vulnerability Test $Id: gbnmapsmbenumsessions.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper fo...

Nmap NSE: SMB Enum Groups

This script attempts to get a list of groups from a Windows system over the SMB protocol. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-enum-groups.nse. OpenVAS Vulnerability Test $Id: gbnmapsmbenumgroups.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap SMB Enum...

Solaris/Open Solaris UCODE_GET_VERSION IOCTL - Denial of Service

/ cve-2010-0453.c -- Patroklos Argyroudis, argp at domain census-labs.com Denial of service kernel panic PoC exploit for the UCODEGETVERSION ioctl NULL pointer dereference vulnerability on Solaris/OpenSolaris: http://www.trapkit.de/advisories/TKADV2010-001.txt...

http-userdir-enum NSE Script

Attempts to enumerate valid usernames on web servers running with the moduserdir module or similar enabled. The Apache moduserdir module allows user-specific directories to be accessed using the syntax. This script makes http requests in order to discover valid user-specific directories and infer...

samba heap overflows

Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving 1 DFSEnum netdfsiodfsEnumInfod, 2 RFNPCNEX smbionotifyoptiontypedata, 3 LsarAddPrivilegesToAccount...