Nmap NSE net: http-trace

Sends an HTTP TRACE request and shows header fields that were modified in the response. OpenVAS Vulnerability Test $Id: gbnmaphttptracenet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Kris Katterjohn NASL-Wrapper: autogenerated Copyright: NSE-Script: The...

Nmap NSE net: nfs-showmount

Shows NFS exports, like the 'showmount -e' command. SYNTAX: nfs.version: number If set overrides the detected version of nfs mount.version: number If set overrides the detected version of mountd rpc.protocol: table If set overrides the preferred order in which protocols are tested. ie. 'tcp', 'ud...

Nmap NSE net: db2-das-info

Connects to the IBM DB2 Administration Server DAS on TCP or UDP port 523 and exports the server profile. No authentication is required for this request. The script will also set the port product and version if a version scan is requested. OpenVAS Vulnerability Test $Id: gbnmapdb2dasinfonet.nasl...

Nmap NSE net: firewalk

Tries to discover firewall rules using an IP TTL expiration technique known as firewalking. The scan requires a firewall or 'gateway' and a metric or 'target'. For each filtered port on the target, send a probe with an IP TTL one greater than the number of hops to the gateway. The TTL can be give...

Nmap NSE net: qscan

Repeatedly probe open and/or closed ports on a host to obtain a series of round- trip time values for each port. These values are used to group collections of ports which are statistically different from other groups. Ports being in different groups or 'families' may be due to network mechanisms...

Nmap NSE net: http-methods

Finds out what options are supported by an HTTP server by sending an OPTIONS request. Lists potentially risky methods. Optionally tests each method individually to see if they are subject to e.g. IP address restrictions. In this script, 'potentially risky' methods are anything except GET, HEAD,...

Nmap NSE net: broadcast-ms-sql-discover

Discovers Microsoft SQL servers in the same broadcast domain. SYNTAX: mssql.timeout: How long to wait for SQL responses. This is a number followed by 'ms' for milliseconds, 's' for seconds, 'm' for minutes, or 'h' for hours. Default: '30s'. OpenVAS Vulnerability Test $Id:...

Nmap NSE net: afp-serverinfo

Shows AFP server information. This information includes the server's hostname, IPv4 and IPv6 addresses, and hardware type for example 'Macmini' or 'MacBookPro'. OpenVAS Vulnerability Test $Id: gbnmapafpserverinfonet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors:...

Nmap NSE net: http-passwd

Checks if a web server is vulnerable to directory traversal by attempting to retrieve '/etc/passwd' or '\boot.ini'. The script uses several technique: Generic directory traversal by requesting paths like '../../../../etc/passwd'. Known specific traversals of several web servers. Query string...

Nmap NSE net: http-headers

Performs a GET request for the root folder '/' of a web server and displays the HTTP headers returned. SYNTAX: http.pipeline: If set, it represents the number of HTTP requests that'll be pipelined ie, sent in a single request. This can be set low to make debugging easier, or it can be set high to...

Nmap NSE net: informix-tables

Retrieves a list of tables and column definitions for each database on an Informix server. SYNTAX: informix.instance: specifies the Informix instance to connect to informix-query.username: The username used for authentication informix-query.password: The password used for authentication Version 0...

Nmap NSE net: smbv2-enabled

Checks whether or not a server is running the SMBv2 protocol. SYNTAX: smbbasic: Forces the authentication to use basic security, as opposed to 'extended security'. Against most modern systems, extended security should work, but there may be cases where you want to force basic. There's a chance th...

Nmap NSE net: http-brute

Performs brute force password auditing against http basic authentication. SYNTAX: brute.firstonly: stop guessing after first password is found default: false brute.unique: make sure that each password is only guessed once default: true http-brute.hostname: sets the host header in case of virtual...

Nmap NSE net: ms-sql-xp-cmdshell

Attempts to run a command using the command shell of Microsoft SQL Server ms-sql. The script needs an account with the sysadmin server role to work. It needs to be fed credentials through the script arguments or from the scripts 'ms-sql-brute' or 'ms-sql-empty- password'. When run, the script...

Nmap NSE net: netbus-auth-bypass

Checks if a NetBus server is vulnerable to an authentication bypass vulnerability which allows ful access without knowing the password. For example a server running on TCP port 12345 on localhost with this vulnerability is accessible to anyone. An attacker could simply form a connection to the...

Nmap NSE net: auth-owners

Attempts to find the owner of an open TCP port by querying an auth daemon which must also be open on the target system. The auth service, also known as identd, normally runs on port 113. OpenVAS Vulnerability Test $Id: gbnmapauthownersnet.nasl 5505 2017-03-07 10:00:18Z teissa $ Autogenerated NSE...

Nmap NSE net: dns-update

Attempts to perform a dynamic DNS update without authentication. OpenVAS Vulnerability Test $Id: gbnmapdnsupdatenet.nasl 5505 2017-03-07 10:00:18Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Patrik Karlsson NASL-Wrapper: autogenerated Copyright: NSE-Script: The Nmap Security Scanner...

Nmap NSE net: asn-query

Maps IP addresses to autonomous system AS numbers. The script works by sending DNS TXT queries to a DNS server which in turn queries a third-party service provided by Team Cymru team-cymru.org using an in-addr.arpa style zone set up especially for use by Nmap. The responses to these queries conta...

Nmap NSE net: upnp-info

Attempts to extract system information from the UPnP service. SYNTAX: upnp-info.override: Controls whether we override the IP address information returned by the UPNP service for the location of the XML file that describes the device. Defaults to true for unicast hosts. OpenVAS Vulnerability Test...

Nmap NSE net: oracle-enum-users

Attempts to enumerate valid Oracle user names against unpatched Oracle 11g servers this bug was fixed in Oracle's October 2009 Critical Patch Update. SYNTAX: userdb: The filename of an alternate username database. passdb: The filename of an alternate password database. tns.sid: specifies the Orac...