Web Server / Application favicon.ico Vendor Fingerprinting

The 'favicon.ico' file found on the remote web server belongs to a popular web server. This may be used to fingerprint the web server. This script was written by Javier Fernandez-Sanguino based on sample code written by Renaud Deraison in the nessus-plugins mailing list It is distributed under th...

Mercury/32 v4.01a IMAP RENAME Buffer Overflow

This module exploits a stack buffer overflow vulnerability in the Mercury/32 v.4.01a IMAP service. Module Options msf use exploit/windows/imap/mercury/rename msf undefinedrename show actions ...actions... msf undefinedrename set ACTION msf undefinedrename show options ...show and set options... m...

Alt-N WebAdmin USER Buffer Overflow

Alt-N WebAdmin is prone to a buffer overflow condition. This is due to insufficient bounds checking on the USER parameter. Successful exploitation could result in code execution with SYSTEM level privileges. Module Options msf use exploit/windows/http/altn/webadmin msf undefinedwebadmin show...

Nessus Internal: Put cgibin() in the KB

This plugin puts the content of cgibin in the KB so that the function cgidirs can work properly. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10308; scriptversion "$Revision: 1.8 $"; scriptcvsdate"$Date: 2011/03/17 18:46:05 $"; scriptnameenglish:"Nessus Internal: Pu...

SMB Use Domain SID to Enumerate Users

Using the domain security identifier SID, Nessus was able to enumerate the domain users on the remote Windows system. C Tenable Network Security, Inc. @PREFERENCES@ include"compat.inc"; if description scriptid10399; scriptversion"1.82"; scriptcvsdate"Date: 2020/01/07"; scriptnameenglish:"SMB Use...