153 matches found
ssl-heartbleed.nse
ssl-heartbleed.nse Nmap NSE script that discovers/exploits Heartbleed/CVE-2014-0160. This script is now basically the one Patrik Karlsson wrote with some minor changes ported from my own script. Features Includes support for FTP,SMTP,XMPP...
Vulnerability-Assessment-and-OSINT-CVE-2012-1823
漏洞评估与OSINT:CVE-2012-1823 我的仓库记录了在目标网络扫描中发现、分析并收集特定安全漏洞的开源情报(OSINT)的完整过程。 流程概览 本次评估执行的工作流程分为四个主要阶段: 1. 侦察与漏洞检测 使用工具 :Nmap 操作 :使用以下命令执行高级网络扫描: root@kitploit: nmap --script-help http-vuln-cve2012-1823 发现结果 :目标环境正在运行过时的 PHP-CGI 配置。NSE(Nmap 脚本引擎)脚本确认存在 CVE-2012-1823 ,这是一个侵入性的 PHP-CGI...
nmap-nse-scripts
Repositorio para el desarrollo de NSE Nmap Scripting Engine. Encontrarás mis scripts incluyendo los no oficiales, librerías, recursos y otro material relacionado de mis talleres. TODO Finalizando la librería NSE de SMB2 Actualmente trabajando en la funcionalidad de modificación de contraseñas...
Redpoint
Redpoint Digital Bond's ICS Enumeration Tools Redpoint is a Digital Bond research project to enumerate ICS applications and devices. We use our Redpoint tools in assessments to discover ICS devices and pull information that would be helpful in secondary testing. A portion of those tools will be...
NSE_CVE-2025-55182
NSECVE-2025-55182 Script NSE de Nmap para escanear React2Shell CVE-2025-55182 Aviso de exención de responsabilidad El siguiente código se proporciona únicamente con fines educativos y de investigación. Cualquier uso de este script queda bajo la exclusiva discreción y responsabilidad del usuario...
Exploit for Command Injection in Contec Solarview_Compact_Firmware
nmap-CVE-2023-23333-exploit Nmap NSE script to dump /etc/passw...
EyesOfNetwork 5.1-5.3 AutoDiscovery Target Command Execution
This module exploits multiple vulnerabilities in EyesOfNetwork version 5.1, 5.2 and 5.3 in order to execute arbitrary commands as root. This module takes advantage of a command injection vulnerability in the target parameter of the AutoDiscovery functionality within the EON web interface in order...
fox-info NSE Script
Tridium Niagara Fox is a protocol used within Building Automation Systems. Based off Billy Rios and Terry McCorkle's work this Nmap NSE will collect information from A Tridium Niagara system. Example Usage nmap --script fox-info.nse -p 1911 Script Output 1911/tcp open Niagara Fox | fox-info: |...
Backdoor found in Chinese Tenda Wireless Routers, allows Root access to Hackers
Last week Craig Heffner, specialized on the embedded device hacking exposed a serious backdoor in number of D-Link routers allows unauthorized backdoor access. Recently he published his another researcher, Titled 'From China, With Love', exposed that D-Link is not only the vendor who puts backdoo...
Backdoor found in Chinese Tenda Wireless Routers, allows Root access to Hackers
Last week Craig Heffner, specialized on the embedded device hacking exposed a serious backdoor in number of D-Link routers allows unauthorized backdoor access. Recently he published his another researcher, Titled 'From China, With Love', exposed that D-Link is not only the vendor who puts backdoo...
Nmap NSE 6.01: x11-access
Checks if you're allowed to connect to the X server. If the X server is listening on TCP port 6000+n where n is the display number, it is possible to check if you're able to get connected to the remote display by sending a X11 initial connection request. In reply, the success byte 0x00 or 0x01 wi...
Nmap NSE 6.01: ssh-hostkey
Shows SSH hostkeys. Shows the target SSH server's key fingerprint and with high enough verbosity level the public key itself. It records the discovered host keys in 'nmap.registry' for use by other scripts. Output can be controlled with the 'sshhostkey' script argument. The script also includes a...
Nmap NSE 6.01: socks-open-proxy
Checks if an open socks proxy is running on the target. The script attempts to connect to a proxy server and send socks4 and socks5 payloads. It is considered an open proxy if the script receives a Request Granted response from the target port. The payloads try to open a connection to...
Nmap NSE 6.01: ftp-brute
This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Nmap NSE 6.01: x11-access
This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Nmap NSE 6.01: mysql-info
This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Nmap NSE 6.01: http-favicon
This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Nmap NSE 6.01: daytime
This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Nmap NSE 6.01: http-date
This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Nmap NSE 6.01: ftp-anon
This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...