Nmap NSE net: broadcast-dns-service-discovery

Attempts to discover hosts' services using the DNS Service Discovery protocol. It sends a multicast DNS-SD query and collects all the responses. The script first sends a query for services.dns-sd.udp.local to get a list of services. It then sends a followup query for each one to try to get more...

Nmap NSE net: skypev2-version

Detects the Skype version 2 service. OpenVAS Vulnerability Test $Id: gbnmapskypev2versionnet.nasl 5505 2017-03-07 10:00:18Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Brandon Enright NASL-Wrapper: autogenerated Copyright: NSE-Script: The Nmap Security Scanner http://nmap.org Copyrigh...

Nmap NSE net: oracle-sid-brute

Guesses Oracle instance/SID names against the TNS-listener. If the 'oraclesids' script argument is not used to specify an alternate file, the default 'oracle-sids' file will be used. License to use the 'oracle-sids' file was granted by its author, Alexander Kornbrust...

Nmap NSE net: ntp-info

Gets the time and configuration variables from an NTP server. We send two requests: a time request and a 'read variables' opcode 2 control message. Without verbosity, the script shows the time and the value of the 'version', 'processor', 'system', 'refid', and 'stratum' variables. With verbosity,...

Nmap NSE net: smb-flood

Exhausts a remote SMB server's connection limit by by opening as many connections as we can. Most implementations of SMB have a hard global limit of 11 connections for user accounts and 10 connections for anonymous. Once that limit is reached, further connections are denied. This script exploits...

Nmap NSE net: snmp-win32-users

Attempts to enumerate Windows user accounts through SNMP SYNTAX: snmpcommunity: The community string to use. If not given, it is ''public'', or whatever is passed to 'buildPacket'. OpenVAS Vulnerability Test $Id: gbnmapsnmpwin32usersnet.nasl 5505 2017-03-07 10:00:18Z teissa $ Autogenerated NSE...

Nmap NSE net: giop-info

Queries a CORBA naming server for a list of objects. OpenVAS Vulnerability Test $Id: gbnmapgiopinfonet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Patrik Karlsson NASL-Wrapper: autogenerated Copyright: NSE-Script: The Nmap Security Scanner http://nmap.or...

Nmap NSE net: netbus-version

Extends version detection to detect NetBuster, a honeypot service that mimes NetBus. OpenVAS Vulnerability Test $Id: gbnmapnetbusversionnet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Toni Ruottu NASL-Wrapper: autogenerated Copyright: NSE-Script: The Nma...

Nmap NSE net: http-auth

Retrieves the authentication scheme and realm of a web service that requires authentication. SYNTAX: http.pipeline: If set, it represents the number of HTTP requests that'll be pipelined ie, sent in a single request. This can be set low to make debugging easier, or it can be set high to test how ...

Nmap NSE net: dns-service-discovery

Attempts to discover a hosts services using the DNS Service Discovery protocol. The script first sends a query for services.dns-sd.udp.local to get a list of services. It then sends a followup query for each one to try to get more information. SYNTAX: dnssd.services: string or table containing...

Nmap NSE net: domcon-brute

Performs brute force password auditing against the Lotus Domino Console. SYNTAX: brute.firstonly: stop guessing after first password is found default: false brute.unique: make sure that each password is only guessed once default: true brute.retries: the number of times to retry if recoverable...

Nmap NSE net: gopher-ls

Lists files and directories at the root of a gopher service. SYNTAX: gopher-ls.maxfiles: If set, limits the amount of files returned by the script. If set to 0 or less, all files are shown. The default value is 10. OpenVAS Vulnerability Test $Id: gbnmapgopherlsnet.nasl 5505 2017-03-07 10:00:18Z...

Nmap NSE net: nbstat

Attempts to retrieve the target's NetBIOS names and MAC address. By default, the script displays the name of the computer and the logged-in user; if the verbosity is turned up, it displays all names the system thinks it owns. OpenVAS Vulnerability Test $Id: gbnmapnbstatnet.nasl 5499 2017-03-06...

Nmap NSE net: broadcast-dropbox-listener

Listens for the LAN sync information broadcasts that the Dropbox.com client broadcasts every 20 seconds, then prints all the discovered client IP addresses, port numbers, version numbers, display names, and more. If the 'newtargets' script argument is given, all discovered Dropbox clients will be...

Nmap NSE net: http-php-version

Attempts to retrieve the PHP version from a web server. PHP has a number of magic queries that return images or text that can vary with the PHP version. This script uses the following queries: '/?=PHPE9568F36-D428-11d2-A769-00AA001ACF42': gets a GIF logo, which changes on April Fool's Day...

Nmap NSE net: http-robots.txt

Checks for disallowed entries in '/robots.txt' on a web server. The higher the verbosity or debug level, the more disallowed entries are shown. SYNTAX: http.pipeline: If set, it represents the number of HTTP requests that'll be pipelined ie, sent in a single request. This can be set low to make...

Nmap NSE net: vnc-brute

Performs brute force password auditing against VNC servers. SYNTAX: brute.firstonly: stop guessing after first password is found default: false brute.unique: make sure that each password is only guessed once default: true brute.retries: the number of times to retry if recoverable failures occurs...

Nmap NSE net: mongodb-info

Attempts to get build info and server status from a MongoDB database. OpenVAS Vulnerability Test $Id: gbnmapmongodbinfonet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Martin Holst Swende NASL-Wrapper: autogenerated Copyright: NSE-Script: The Nmap Securit...

Nmap NSE net: ms-sql-empty-password

Attempts to authenticate using an empty password for the sysadmin sa account. SYNTAX: mssql.timeout: How long to wait for SQL responses. This is a number followed by 'ms' for milliseconds, 's' for seconds, 'm' for minutes, or 'h' for hours. Default: '30s'. OpenVAS Vulnerability Test $Id:...

Nmap NSE net: ssh-hostkey

Shows SSH hostkeys. Shows the target SSH server's key fingerprint and with high enough verbosity level the public key itself. It records the discovered host keys in 'nmap.registry' for use by other scripts. Output can be controlled with the 'sshhostkey' script argument. SYNTAX: sshhostkey: Contro...