Nagios Remote Plugin Executor - Arbitrary Command Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'zlib' class Metasploit3 'Nagios Remote Plugin...

Nagios Remote Plugin Executor Arbitrary Command Execution

The Nagios Remote Plugin Executor NRPE is installed to allow a central Nagios server to actively poll information from the hosts it monitors. NRPE has a configuration option dontblamenrpe which enables command-line arguments to be provided remote plugins. When this option is enabled, even when NR...

Nmap NSE net: nrpe-enum

Queries Nagios Remote Plugin Executor NRPE daemons to obtain information such as load averages, process counts, logged in user information, etc. This script attempts to execute the stock list of commands that are enabled. User-supplied arguments are not supported. SYNTAX: nrpe-enum.cmds: A...

Web Server Harvested Email Addresses

Nessus harvested HREF mailto: links and extracted email addresses by crawling the remote web server. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid49705; scriptversion"1.7"; scriptcvsdate"Date: 2018/05/24 13:59:31"; scriptnameenglish:"Web Server Harvested Email...

Service Detection (2nd Pass)

This plugin is a complement of findservice1.nasl. It attempts to identify common services which might have been missed because of a network problem. C Tenable Network Security, Inc. if NASLLEVEL 2200 exit0; include"compat.inc"; ifdescription scriptid14772; scriptversion "$Revision: 1.51 $";...

External Scanner Service Identification

This plugin registers services that were identified by external scanners amap, nmap, etc.... It does not perform any fingerprinting by itself. C Tenable Network Security, Inc. We could do this job in amap.nasl or nmap.nasl, but as those plugins must be signed to be "trusted", we don't want to...

HTTP login page

This script logs onto a web server through a login page and stores the authentication / session cookie. C Tenable Network Security, Inc. @PREFERENCES@ include"compat.inc"; ifdescription scriptid11149; scriptversion"1.37"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/09/29";...

Dansie Shopping Cart Backdoor Detection

The script /cart/cart.cgi is present. If this shopping cart system is the Dansie Shopping Cart, and if it is older than version 3.0.8 then it is very likely that it contains a backdoor that allows anyone to execute arbitrary commands on this system. C Tenable Network Security, Inc...

/doc Directory Browsable (deprecated)

The /doc directory is browsable. /doc shows the contents of the /usr/doc directory, which reveals not only which programs are installed but also their versions. This plugin has been deprecated. Webmirror3 plugin ID 10662 will identify a browsable directory. %NASLMINLEVEL 999999 Copyright 2000 by...

rquotad Service Detection

The rquotad RPC service is running. If you do not use this service, then disable it as it may become a security threat in the future, if a vulnerability were to be discovered. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10226; scriptversion"1.27";...