Nmap NSE net: mysql-variables

Attempts to show all variables on a MySQL server. SYNTAX: mysqluser: The username to use for authentication. If unset it attempts to use credentials found by 'mysql-brute' or 'mysql-empty-password'. mysqlpass: The password to use for authentication. If unset it attempts to use credentials found b...

Nmap NSE net: imap-capabilities

Retrieves IMAP email server capabilities. IMAP4rev1 capabilities are defined in RFC 3501. The CAPABILITY command allows a client to ask a server what commands it supports and possibly any site-specific policy. OpenVAS Vulnerability Test $Id: gbnmapimapcapabilitiesnet.nasl 5505 2017-03-07 10:00:18...

Nmap NSE net: http-brute

Performs brute force password auditing against http basic authentication. SYNTAX: brute.firstonly: stop guessing after first password is found default: false brute.unique: make sure that each password is only guessed once default: true http-brute.hostname: sets the host header in case of virtual...

Nmap NSE net: pop3-brute

Tries to log into a POP3 account by guessing usernames and passwords. SYNTAX: userdb: The filename of an alternate username database. pop3loginmethod: The login method to use: ''USER'' default, ''SASL-PLAIN'', ''SASL-LOGIN'', ''SASL-CRAM-MD5'', or ''APOP''. unpwdb.passlimit: The maximum number of...

Nmap NSE net: nat-pmp-info

Queries a NAT-PMP service for its external address. OpenVAS Vulnerability Test $Id: gbnmapnatpmpinfonet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Patrik Karlsson NASL-Wrapper: autogenerated Copyright: NSE-Script: The Nmap Security Scanner http://nmap.o...

Nmap NSE net: netbus-version

Extends version detection to detect NetBuster, a honeypot service that mimes NetBus. OpenVAS Vulnerability Test $Id: gbnmapnetbusversionnet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Toni Ruottu NASL-Wrapper: autogenerated Copyright: NSE-Script: The Nma...

Nmap NSE net: afp-showmount

Shows AFP shares and ACLs. SYNTAX: afp.password: The password to use for authentication. If unset, first attempt to use credentials found by 'afp-brute', then no credentials. afp.username: The username to use for authentication. If unset, first attempt to use credentials found by 'afp-brute', the...

Nmap NSE net: broadcast-dns-service-discovery

Attempts to discover hosts' services using the DNS Service Discovery protocol. It sends a multicast DNS-SD query and collects all the responses. The script first sends a query for services.dns-sd.udp.local to get a list of services. It then sends a followup query for each one to try to get more...

Nmap NSE net: mysql-databases

Attempts to list all databases on a MySQL server. SYNTAX: mysqluser: The username to use for authentication. If unset it attempts to use credentials found by 'mysql-brute' or 'mysql-empty-password'. mysqlpass: The password to use for authentication. If unset it attempts to use credentials found b...

Nmap NSE net: hddtemp-info

Reads hard disk information such as brand, model, and sometimes temperature from a listening hddtemp service. OpenVAS Vulnerability Test $Id: gbnmaphddtempinfonet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Toni Ruottu NASL-Wrapper: autogenerated...

Nmap NSE net: smb-enum-shares

Attempts to list shares using the 'srvsvc.NetShareEnumAll' MSRPC function and retrieve more information about them using 'srvsvc.NetShareGetInfo'. If access to those functions is denied, a list of common share names are checked. Finding open shares is useful to a penetration tester because there...

Nmap NSE net: snmp-win32-software

Attempts to enumerate installed software through SNMP. SYNTAX: snmpcommunity: The community string to use. If not given, it is ''public'', or whatever is passed to 'buildPacket'. OpenVAS Vulnerability Test $Id: gbnmapsnmpwin32softwarenet.nasl 5505 2017-03-07 10:00:18Z teissa $ Autogenerated NSE...

Nmap NSE net: ms-sql-brute

Performs password guessing against Microsoft SQL Server ms-sql. SYNTAX: userdb: The filename of an alternate username database. passdb: The filename of an alternate password database. mssql.timeout: How long to wait for SQL responses. This is a number followed by 'ms' for milliseconds, 's' for...

Nmap NSE net: pptp-version

Attempts to extract system information from the point-to-point tunneling protocol PPTP service. OpenVAS Vulnerability Test $Id: gbnmappptpversionnet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Thomas Buchanan NASL-Wrapper: autogenerated Copyright:...

Nmap NSE net: couchdb-stats

Gets database statistics from a CouchDB database. For more info about the CouchDB HTTP API and the statistics, see http://wiki.apache.org/couchdb/RuntimeStatistics and http://wiki.apache.org/couchdb/HTTPdatabaseAPI. SYNTAX: http.pipeline: If set, it represents the number of HTTP requests that'll ...

Nmap NSE net: dns-zone-transfer

Requests a zone transfer AXFR from a DNS server. The script sends an AXFR query to a DNS server. The domain to query is determined by examining the name given on the command line, the DNS server's hostname, or it can be specified with the dns-zone-transfer.domain' script argument. If the query is...

Nmap NSE net: smb-enum-users

Attempts to enumerate the users on a remote Windows system, with as much information as possible, through two different techniques both over MSRPC, which uses port 445 or 139; see 'smb.lua'. The goal of this script is to discover all user accounts that exist on a remote system. This can be helpfu...

Nmap NSE net: http-userdir-enum

Attempts to enumerate valid usernames on web servers running with the moduserdir module or similar enabled. The Apache moduserdir module allows user-specific directories to be accessed using the http://example.com/user/ syntax. This script makes http requests in order to discover valid user-...

Nmap NSE net: auth-owners

Attempts to find the owner of an open TCP port by querying an auth daemon which must also be open on the target system. The auth service, also known as identd, normally runs on port 113. OpenVAS Vulnerability Test $Id: gbnmapauthownersnet.nasl 5505 2017-03-07 10:00:18Z teissa $ Autogenerated NSE...

Nmap NSE net: dns-fuzz

This script launches a DNS fuzzing attack against any DNS server. The script induces errors into randomly generated but valid DNS packets. The packet template that we use includes one uncompressed and one compressed name. Use the 'dns-fuzz.timelimit' argument to control how long the fuzzing lasts...