http-google-malware NSE Script

Checks if hosts are on Google's blacklist of suspected malware and phishing servers. These lists are constantly updated and are part of Google's Safe Browsing service. To do this the script queries the Google's Safe Browsing service and you need to have your own API key to access Google's Safe...

Nmap 5.59 BETA1 - 40 new NSE scripts & improved IPv6

Nmap 5.59 BETA1 - 40 new NSE scripts & improved IPv6 Official Change Log: o NSE Added 40 scripts, bringing the total to 217! You can learn more about any of them at https://nmap.org/nsedoc/. Here are the new ones authors listed in brackets: + afp-ls: Lists files and their attributes from Apple...

Nmap 5.59 BETA1 - 40 new NSE scripts & improved IPv6

Nmap 5.59 BETA1 - 40 new NSE scripts & improved IPv6 Official Change Log: o NSE Added 40 scripts, bringing the total to 217! You can learn more about any of them at https://nmap.org/nsedoc/. Here are the new ones authors listed in brackets: + afp-ls: Lists files and their attributes from Apple...

creds-summary NSE Script

Lists all discovered credentials e.g. from brute force and default password checking scripts at end of scan. Script Arguments creds.service, creds.global See the documentation for the creds library. Example Usage nmap -sV -sC Script Output | creds-summary: | 10.10.10.10 | 22/ssh | lisbon:jane -...

http-majordomo2-dir-traversal NSE Script

Exploits a directory traversal vulnerability existing in Majordomo2 to retrieve remote files. CVE-2011-0049. Vulnerability originally discovered by Michael Brooks. For more information about this vulnerability: Script Arguments http-majordomo2-dir-traversal.rfile Remote file to download. Default:...

ip-geolocation-ipinfodb NSE Script

Tries to identify the physical location of an IP address using the IPInfoDB geolocation web service . There is no limit on requests to this service. However, the API key needs to be obtained through free registration for this service: http://ipinfodb.com/login.php See also:...

ip-geolocation-maxmind NSE Script

Tries to identify the physical location of an IP address using a Geolocation Maxmind database file available from . This script supports queries using all Maxmind databases that are supported by their API including the commercial ones. See also: ip-geolocation-geoplugin.nse...

smb-mbenum NSE Script

Queries information managed by the Windows Master Browser. Script Arguments smb-mbenum.format optional if set, changes the format of the result returned by the script. There are three possible formats: 1. Ordered by type horizontally 2. Ordered by type vertically 3. Ordered by type vertically...

broadcast-novell-locate NSE Script

Attempts to use the Service Location Protocol to discover Novell NetWare Core Protocol NCP servers. Example Usage nmap -sV --script=broadcast-novell-locate Script Output Pre-scan script results: | broadcast-novell-locate: | Tree name: CQURE-LABTREE | Server name: linux-l84t | Addresses |...

Nmap NSE net: http-vhosts

Searches for web virtual hostnames by making a large number of HEAD requests against http servers using common hostnames. Each HEAD request provides a different 'Host' header. The hostnames come from a built-in default list. Shows the names that return a document. Also shows the location of...

Nmap NSE net: db2-das-info

Connects to the IBM DB2 Administration Server DAS on TCP or UDP port 523 and exports the server profile. No authentication is required for this request. The script will also set the port product and version if a version scan is requested. OpenVAS Vulnerability Test $Id: gbnmapdb2dasinfonet.nasl...

Nmap NSE net: dns-recursion

Checks if a DNS server allows queries for third-party names. It is expected that recursion will be enabled on your own internal nameservers. OpenVAS Vulnerability Test $Id: gbnmapdnsrecursionnet.nasl 5505 2017-03-07 10:00:18Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Felix Groebert...

Nmap NSE net: afp-showmount

Shows AFP shares and ACLs. SYNTAX: afp.password: The password to use for authentication. If unset, first attempt to use credentials found by 'afp-brute', then no credentials. afp.username: The username to use for authentication. If unset, first attempt to use credentials found by 'afp-brute', the...

Nmap NSE net: http-brute

Performs brute force password auditing against http basic authentication. SYNTAX: brute.firstonly: stop guessing after first password is found default: false brute.unique: make sure that each password is only guessed once default: true http-brute.hostname: sets the host header in case of virtual...

Nmap NSE net: http-methods

Finds out what options are supported by an HTTP server by sending an OPTIONS request. Lists potentially risky methods. Optionally tests each method individually to see if they are subject to e.g. IP address restrictions. In this script, 'potentially risky' methods are anything except GET, HEAD,...

Nmap NSE net: http-passwd

Checks if a web server is vulnerable to directory traversal by attempting to retrieve '/etc/passwd' or '\boot.ini'. The script uses several technique: Generic directory traversal by requesting paths like '../../../../etc/passwd'. Known specific traversals of several web servers. Query string...

Nmap NSE net: http-trace

Sends an HTTP TRACE request and shows header fields that were modified in the response. OpenVAS Vulnerability Test $Id: gbnmaphttptracenet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Kris Katterjohn NASL-Wrapper: autogenerated Copyright: NSE-Script: The...

Nmap NSE net: drda-info

Attempts to extract information from database servers supporting the DRDA protocol. The script sends a DRDA EXCSAT exchange server attributes command packet and parses the response. OpenVAS Vulnerability Test $Id: gbnmapdrdainfonet.nasl 5505 2017-03-07 10:00:18Z teissa $ Autogenerated NSE wrapper...

Nmap NSE net: hostmap

Tries to find hostnames that resolve to the target's IP address by querying the online database at http://www.bfk.de/bfkdnslogger.html. The script is in the 'external' category because it sends target IPs to a third party in order to query their database. SYNTAX: hostmap.prefix: If set, saves the...

Nmap NSE net: firewalk

Tries to discover firewall rules using an IP TTL expiration technique known as firewalking. The scan requires a firewall or 'gateway' and a metric or 'target'. For each filtered port on the target, send a probe with an IP TTL one greater than the number of hops to the gateway. The TTL can be give...