http-userdir-enum NSE Script

Attempts to enumerate valid usernames on web servers running with the moduserdir module or similar enabled. The Apache moduserdir module allows user-specific directories to be accessed using the syntax. This script makes http requests in order to discover valid user-specific directories and infer...

x11-access NSE Script

Checks if you're allowed to connect to the X server. If the X server is listening on TCP port 6000+n where n is the display number, it is possible to check if you're able to get connected to the remote display by sending a X11 initial connection request. In reply, the success byte 0x00 or 0x01 wi...

pjl-ready-message NSE Script

Retrieves or sets the ready message on printers that support the Printer Job Language. This includes most PostScript printers that listen on port 9100. Without an argument, displays the current ready message. With the pjlreadymessage script argument, displays the old ready message and changes it...

http-date NSE Script

Gets the date from HTTP-like services. Also prints how much the date differs from local time. Local time is the time the HTTP request was sent, so the difference includes at least the duration of one RTT. Script Arguments slaxml.debug See the documentation for the slaxml library. http.host,...

telnet-brute NSE Script

Performs brute-force password auditing against telnet servers. Script Arguments telnet-brute.autosize Whether to automatically reduce the thread count based on the behavior of the target default: "true" telnet-brute.timeout Connection time-out timespec default: "5s" passdb, unpwdb.passlimit,...

socks-open-proxy NSE Script

Checks if an open socks proxy is running on the target. The script attempts to connect to a proxy server and send socks4 and socks5 payloads. It is considered an open proxy if the script receives a Request Granted response from the target port. The payloads try to open a connection to...

p2p-conficker NSE Script

Checks if a host is infected with Conficker.C or higher, based on Conficker's peer to peer communication. When Conficker.C or higher infects a system, it opens four ports: two TCP and two UDP. The ports are random, but are seeded with the current week and the IP of the infected host. By determini...

OpenBSD 4.5 - IP datagrams Remote Denial of Service

OpenBSD 4.5 - IP datagrams Remote Denial of Service / / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2009-04-09 Affected Software:...

OpenBSD <= 4.5 (IP datagrams) Remote DOS Vulnerability

No description provided by source. / / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2009-04-09 Affected Software: OpenBSD Kernel Affect...

OpenBSD 4.5 - IP datagrams Remote Denial of Service

/ / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2009-04-09 Affected Software: OpenBSD Kernel Affected OS : OpenBSD 4.3,4,5,...

Mandriva Update for nmap MDKA-2007:005 (nmap)

Check for the Version of nmap OpenVAS Vulnerability Test Mandriva Update for nmap MDKA-2007:005 nmap Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Mandriva Update for nmap MDKA-2007:005 (nmap)

Check for the Version of nmap OpenVAS Vulnerability Test Mandriva Update for nmap MDKA-2007:005 nmap Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

IPID Sequence Scanner

This module will probe hosts' IPID sequences and classify them using the same method Nmap uses when it's performing its IPID Idle Scan -sI and OS Detection -O. Nmap's probes are SYN/ACKs while this module's are SYNs. While this does not change the underlying functionality, it does change the chan...

Security projects aim for Google Summer of Code

By Robert Lemos, SecurityFocus A number of security-focused open-source projects have announced their participation as mentoring organizations in Google’s Summer of Code google.com. They include the NMap Project, the OpenSSH project and the Honeynet Project. Read the full article securityfocus.co...

snmp-brute NSE Script

Attempts to find an SNMP community string by brute force guessing. This script opens a sending socket and a sniffing pcap socket in parallel threads. The sending socket sends the SNMP probes with the community strings, while the pcap socket sniffs the network for an answer to the probes. If valid...

ftp-brute NSE Script

Performs brute force password auditing against FTP servers. Based on old ftp-brute.nse script by Diman Todorov, Vlatko Kosturjak and Ron Bowes. See also: ftp-anon.nse Script Arguments ftp-brute.timeout the amount of time to wait for a response on the socket. Lowering this value may result in a...

Some Nmap skills-vulnerability warning-the black bar safety net

Source: Tr4c3’s blog by d3hydr8 www.darkc0de.com date: 01/20/08 Use nmap as a host discovery tool. linuxbox:/home/d3hydr8 nmap-sL 128.230.18.30-3 5 Starting Nmap 4.50 http://insecure.org at 2008-01-17 2 2:4 1 EST Host npropane.syr.edu 128.230.18.30 not scanned Host helpeiam1.syr.edu 128.230.18.31...

Using Nmap for your Windows network to find vulnerabilities-vulnerability warning-the black bar safety net

That said, If your network is vulnerable, or that your firewall has a vulnerability, or that your server is open shouldn't open ports, then your network is faced with is attack, is the damage of risk. To strike first. To prevent someone else ruin their own network, the first of his own“ruthless”a...

Detailed explanations of Common Vulnerability scanners and network scanning techniques-vulnerability warning-the black bar safety net

With the rapid development of the Internet,Network Security has gradually become a potential huge problem, how to safeguard their own network security, one of the main method is self-examination and self-correction, and in this process, the own network is scanned to become a more efficient,...

banner NSE Script

A simple banner grabber which connects to an open TCP port and prints out anything sent by the listening service within five seconds. The banner will be truncated to fit into a single line, but an extra line may be printed for every increase in the level of verbosity requested on the command line...