Lucene search
K

4 matches found

OpenVAS
OpenVAS
added 2013/02/28 12:0 a.m.27 views

Nmap NSE 6.01: http-malware-host

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3AI score
Exploits0References1
OpenVAS
OpenVAS
added 2011/06/01 12:0 a.m.16 views

Nmap NSE net: http-malware-host

Looks for signature of known server compromises. Currently, the only signature it looks for is the one discussed here: http://blog.unmaskparasites.com/2009/09/11/dynamic-dns-and-botnet-of-zombie-web-servers/. This is done by requesting the page '/ts/in.cgi?open2' and looking for an errant 302 it...

6.8AI score
Exploits0
OpenVAS
OpenVAS
added 2011/06/01 12:0 a.m.12 views

Nmap NSE net: http-malware-host

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3AI score
Exploits0References1
Nmap
Nmap
added 2009/09/16 2:15 p.m.291 views

http-malware-host NSE Script

Looks for signature of known server compromises. Currently, the only signature it looks for is the one discussed here: . This is done by requesting the page /ts/in.cgi?open2 and looking for an errant 302 it attempts to detect servers that always return 302. Thanks to Denis from the above link for...

10CVSS9.3AI score0.94176EPSS
Exploits33
Rows per page
Query Builder