realvnc-auth-bypass NSE Script

Checks if a VNC server is vulnerable to the RealVNC authentication bypass CVE-2006-2369. See also: vnc-brute.nse vnc-title.nse Script Arguments vulns.short, vulns.showall See the documentation for the vulns library. Example Usage nmap -sV --script=realvnc-auth-bypass Script Output PORT STATE...

dns-random-txid NSE Script

Checks a DNS server for the predictable-TXID DNS recursion vulnerability. Predictable TXID values can make a DNS server vulnerable to cache poisoning attacks see CVE-2008-1447. The script works by querying txidtest.dns-oarc.net see . Be aware that any targets against which this script is run will...

smb-os-discovery NSE Script

Attempts to determine the operating system, computer name, domain, workgroup, and current time over the SMB protocol ports 445 or 139. This is done by starting a session with the anonymous account or with a proper user account, if one is given; it likely doesn't make a difference; in response to ...

smb-security-mode NSE Script

Returns information about the SMB security level determined by SMB. Here is how to interpret the output: User-level authentication: Each user has a separate username/password that is used to log into the system. This is the default setup of pretty much everything these days. Share-level...

nbstat NSE Script

Attempts to retrieve the target's NetBIOS names and MAC address. By default, the script displays the name of the computer and the logged-in user; if the verbosity is turned up, it displays all names the system thinks it owns. Example Usage sudo nmap -sU --script nbstat.nse -p137 Script Output Hos...

rpcinfo NSE Script

Connects to portmapper and fetches a list of all registered programs. It then prints out a table including for each program the RPC program number, supported version numbers, port number and protocol, and program name. See also: rpc-grind.nse Script Arguments mount.version, nfs.version,...

finger NSE Script

Attempts to retrieve a list of usernames using the finger service. Example Usage nmap -sV -sC Script Output PORT STATE SERVICE 79/tcp open finger | finger: | Welcome to Linux version 2.6.31.12-0.2-default at linux-pb94.site ! | 01:14am up 18:54, 4 users, load average: 0.14, 0.08, 0.01 | | Login...