Nmap NSE net: mysql-databases

Attempts to list all databases on a MySQL server. SYNTAX: mysqluser: The username to use for authentication. If unset it attempts to use credentials found by 'mysql-brute' or 'mysql-empty-password'. mysqlpass: The password to use for authentication. If unset it attempts to use credentials found b...

Nmap NSE net: hddtemp-info

Reads hard disk information such as brand, model, and sometimes temperature from a listening hddtemp service. OpenVAS Vulnerability Test $Id: gbnmaphddtempinfonet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Toni Ruottu NASL-Wrapper: autogenerated...

Nmap NSE net: smb-enum-shares

Attempts to list shares using the 'srvsvc.NetShareEnumAll' MSRPC function and retrieve more information about them using 'srvsvc.NetShareGetInfo'. If access to those functions is denied, a list of common share names are checked. Finding open shares is useful to a penetration tester because there...

Nmap NSE net: snmp-win32-software

Attempts to enumerate installed software through SNMP. SYNTAX: snmpcommunity: The community string to use. If not given, it is ''public'', or whatever is passed to 'buildPacket'. OpenVAS Vulnerability Test $Id: gbnmapsnmpwin32softwarenet.nasl 5505 2017-03-07 10:00:18Z teissa $ Autogenerated NSE...

Nmap NSE net: ms-sql-brute

Performs password guessing against Microsoft SQL Server ms-sql. SYNTAX: userdb: The filename of an alternate username database. passdb: The filename of an alternate password database. mssql.timeout: How long to wait for SQL responses. This is a number followed by 'ms' for milliseconds, 's' for...

Nmap NSE net: pptp-version

Attempts to extract system information from the point-to-point tunneling protocol PPTP service. OpenVAS Vulnerability Test $Id: gbnmappptpversionnet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Thomas Buchanan NASL-Wrapper: autogenerated Copyright:...

Nmap NSE net: couchdb-stats

Gets database statistics from a CouchDB database. For more info about the CouchDB HTTP API and the statistics, see http://wiki.apache.org/couchdb/RuntimeStatistics and http://wiki.apache.org/couchdb/HTTPdatabaseAPI. SYNTAX: http.pipeline: If set, it represents the number of HTTP requests that'll ...

Nmap NSE net: dns-zone-transfer

Requests a zone transfer AXFR from a DNS server. The script sends an AXFR query to a DNS server. The domain to query is determined by examining the name given on the command line, the DNS server's hostname, or it can be specified with the dns-zone-transfer.domain' script argument. If the query is...

Nmap NSE net: auth-owners

Attempts to find the owner of an open TCP port by querying an auth daemon which must also be open on the target system. The auth service, also known as identd, normally runs on port 113. OpenVAS Vulnerability Test $Id: gbnmapauthownersnet.nasl 5505 2017-03-07 10:00:18Z teissa $ Autogenerated NSE...

Nmap NSE net: dns-fuzz

This script launches a DNS fuzzing attack against any DNS server. The script induces errors into randomly generated but valid DNS packets. The packet template that we use includes one uncompressed and one compressed name. Use the 'dns-fuzz.timelimit' argument to control how long the fuzzing lasts...

Nmap NSE net: sslv2

Determines whether the server supports obsolete and less secure SSLv2, and discovers which ciphers it supports. OpenVAS Vulnerability Test $Id: gbnmapsslv2net.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Matthew Boyle NASL-Wrapper: autogenerated Copyright...

Nmap NSE net: http-malware-host

Looks for signature of known server compromises. Currently, the only signature it looks for is the one discussed here: http://blog.unmaskparasites.com/2009/09/11/dynamic-dns-and-botnet-of-zombie-web-servers/. This is done by requesting the page '/ts/in.cgi?open2' and looking for an errant 302 it...

Nmap NSE net: svn-brute

Performs brute force password auditing against Subversion source code control servers. SYNTAX: brute.firstonly: stop guessing after first password is found default: false brute.unique: make sure that each password is only guessed once default: true brute.retries: the number of times to retry if...

Nmap NSE net: http-vmware-path-vuln

Checks for a path-traversal vulnerability in VMWare ESX, ESXi, and Server CVE-2009-3733. The vulnerability was originally released by Justin Morehouse and Tony Flick, who presented at Shmoocon 2010 http://fyrmassociates.com/tools.html. SYNTAX: http.pipeline: If set, it represents the number of HT...

Nmap NSE net: dhcp-discover

Sends a DHCPDISCOVER request to a host on UDP port 67. The response comes back to UDP port 68, and is read using pcap due to the inability for a script to choose its source port at the moment. DHCPDISCOVER is a DHCP request that returns useful information from a DHCP server. The request sends a...

Nmap NSE net: afp-serverinfo

Shows AFP server information. This information includes the server's hostname, IPv4 and IPv6 addresses, and hardware type for example 'Macmini' or 'MacBookPro'. OpenVAS Vulnerability Test $Id: gbnmapafpserverinfonet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors:...

Nmap NSE net: finger

Attempts to retrieve a list of usernames using the finger service. OpenVAS Vulnerability Test $Id: gbnmapfingernet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Eddie Bell NASL-Wrapper: autogenerated Copyright: NSE-Script: The Nmap Security Scanner...

Nmap NSE net: ftp-bounce

Checks to see if an FTP server allows port scanning using the FTP bounce method. SYNTAX: ftp-bounce.username: Username to log in with. Default ''anonymous''. ftp-bounce.password: Password to log in with. Default ''IEUser@''. OpenVAS Vulnerability Test $Id: gbnmapftpbouncenet.nasl 5499 2017-03-06...

Nmap NSE net: ms-sql-query

Runs a query against Microsoft SQL Server ms-sql. SYNTAX: mssql.timeout: How long to wait for SQL responses. This is a number followed by 'ms' for milliseconds, 's' for seconds, 'm' for minutes, or 'h' for hours. Default: '30s'. mssql-query.query: specifies the query to run against the server...

Nmap NSE net: upnp-info

Attempts to extract system information from the UPnP service. SYNTAX: upnp-info.override: Controls whether we override the IP address information returned by the UPNP service for the location of the XML file that describes the device. Defaults to true for unicast hosts. OpenVAS Vulnerability Test...