Nmap NSE 6.01: smb-psexec

Implements remote process execution similar to the Sysinternals' psexec tool, allowing a user to run a series of programs on a remote machine and read the output. This is great for gathering information about servers, running the same tool on a range of system, or even installing a backdoor on a...

Nmap NSE 6.01: smb-enum-processes

Pulls a list of processes from the remote server over SMB. This will determine all running processes, their process IDs, and their parent processes. It is done by querying the remote registry service, which is disabled by default on Vista; on all other Windows versions, it requires Administrator...

Nmap NSE 6.01: smb-enum-domains

Attempts to enumerate domains on a system, along with their policies. This generally requires credentials, except against Windows 2000. In addition to the actual domain, the 'Builtin' domain is generally displayed. Windows returns this in the list of domains, but its policies don't appear to be...

Nmap NSE 6.01: smb-brute

Attempts to guess username/password combinations over SMB, storing discovered combinations for use in other scripts. Every attempt will be made to get a valid list of users and to verify each username before actually using them. When a username is discovered, besides being printed, it is also sav...

Nmap NSE 6.01: nfs-showmount

Shows NFS exports, like the 'showmount -e' command. SYNTAX: nfs.version: number If set overrides the detected version of nfs mount.version: number If set overrides the detected version of mountd rpc.protocol: table If set overrides the preferred order in which protocols are tested. ie. 'tcp', 'ud...

Nmap NSE 6.01: smtp-strangeport

Checks if SMTP is running on a non-standard port. This may indicate that crackers or script kiddies have set up a backdoor on the system to send spam or control the machine. OpenVAS Vulnerability Test $Id: gbnmap6smtpstrangeport.nasl 7148 2017-09-15 13:01:14Z cfischer $ Autogenerated NSE wrapper...

Nmap NSE 6.01: p2p-conficker

Checks if a host is infected with Conficker.C or higher, based on Conficker's peer to peer communication. When Conficker.C or higher infects a system, it opens four ports: two TCP and two UDP. The ports are random, but are seeded with the current week and the IP of the infected host. By determini...

Nmap NSE 6.01: sshv1

Checks if an SSH server supports the obsolete and less secure SSH Protocol Version 1. OpenVAS Vulnerability Test $Id: gbnmap6sshv1.nasl 7148 2017-09-15 13:01:14Z cfischer $ Autogenerated NSE wrapper Authors: NSE-Script: Brandon Enright NASL-Wrapper: autogenerated Copyright: NSE-Script: The Nmap...

Nmap NSE 6.01: ftp-bounce

Checks to see if an FTP server allows port scanning using the FTP bounce method. SYNTAX: ftp-bounce.username: Username to log in with. Default ''anonymous''. ftp-bounce.password: Password to log in with. Default ''IEUser@''. OpenVAS Vulnerability Test $Id: gbnmap6ftpbounce.nasl 7006 2017-08-25...

Nmap NSE 6.01: citrix-enum-servers-xml

Extracts the name of the server farm and member servers from Citrix XML service. OpenVAS Vulnerability Test $Id: gbnmap6citrixenumserversxml.nasl 7148 2017-09-15 13:01:14Z cfischer $ Autogenerated NSE wrapper Authors: NSE-Script: Patrik Karlsson NASL-Wrapper: autogenerated Copyright: NSE-Script:...

Nmap NSE 6.01: smtp-commands

Attempts to use EHLO and HELP to gather the Extended commands supported by an SMTP server. SYNTAX: smtp.domain: or smtp-commands.domain Define the domain to be used in the SMTP commands. OpenVAS Vulnerability Test $Id: gbnmap6smtpcommands.nasl 7006 2017-08-25 11:51:20Z teissa $ Autogenerated NSE...

Nmap NSE 6.01: daytime

Retrieves the day and time from the Daytime service. OpenVAS Vulnerability Test $Id: gbnmap6daytime.nasl 7148 2017-09-15 13:01:14Z cfischer $ Autogenerated NSE wrapper Authors: NSE-Script: Diman Todorov NASL-Wrapper: autogenerated Copyright: NSE-Script: The Nmap Security Scanner http://nmap.org...

Nmap NSE 6.01: smb-enum-groups

Obtains a list of groups from the remote Windows system, as well as a list of the group's users. This works similarly to 'enum.exe' with the '/G' switch. The following MSRPC functions in SAMR are used to find a list of groups and the RIDs of their users. Keep in mind that MSRPC refers to groups a...

Nmap NSE 6.01: smb-check-vulns

Checks for vulnerabilities: MS08-067, a Windows RPC vulnerability Conficker, an infection by the Conficker worm Unnamed regsvc DoS, a denial-of-service vulnerability I accidentally found in Windows 2000 SMBv2 exploit CVE-2009-3103, Microsoft Security Advisory 975497 MS06-025, a Windows Ras RPC...

Nmap NSE 6.01: realvnc-auth-bypass

Checks if a VNC server is vulnerable to the RealVNC authentication bypass CVE-2006-2369. OpenVAS Vulnerability Test $Id: gbnmap6realvncauthbypass.nasl 7148 2017-09-15 13:01:14Z cfischer $ Autogenerated NSE wrapper Authors: NSE-Script: Brandon Enright NASL-Wrapper: autogenerated Copyright:...

Nmap NSE 6.01: citrix-brute-xml

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE 6.01: snmp-brute

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE 6.01: sql-injection

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE 6.01: ftp-bounce

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE 6.01: http-iis-webdav-vuln

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...