CERBERUS/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-09-05 01:50:40 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
nmap/scripts
History
patrik 5f00edd310 Re-worked the http-form-brute script, the changes include: 
- autodetecting form fields is now a bit more robust
- only the password field is mandatory
- HTTP re-directs are followed in case they're detected
- the detection of incorrect login attempts has been changed and supports
  two new arguments (onsucces, onfailure)
[Patrik]
2011-06-12 18:52:51 +00:00
..
afp-brute.nse Add a missing period to NSEDoc. 2011-01-28 17:54:49 +00:00
afp-ls.nse o [NSE] Added the afp-ls script that lists files accessible on remote 2011-04-05 08:31:34 +00:00
afp-path-vuln.nse o Moved afp.username and afp.password arguments to afp-library. 2011-04-03 12:53:12 +00:00
afp-serverinfo.nse
afp-showmount.nse o Moved afp.username and afp.password arguments to afp-library. 2011-04-03 12:53:12 +00:00
asn-query.nse use # length operator instead of string.len (canonicalize) 2011-05-11 15:12:47 +00:00
auth-owners.nse
auth-spoof.nse
backorifice-brute.nse Separator "," in backorifice-brute.nse instead of ";" 2011-05-28 17:55:44 +00:00
backorifice-info.nse Fix for backorifice-info.nse, setting the port.state as "open" 2011-05-08 16:37:41 +00:00
banner.nse
broadcast-avahi-dos.nse o [NSE] Added broadcast-avahi-dos.nse, which tries to detect if the 2011-05-02 23:38:18 +00:00
broadcast-dns-service-discovery.nse Remove "-p 5353 <target>" from the @usage of 2011-04-03 21:00:37 +00:00
broadcast-dropbox-listener.nse maxn is deprecated 2011-05-11 15:13:46 +00:00
broadcast-ms-sql-discover.nse o [NSE] Merged the ms-sql branch with several improvements and changes to the 2011-02-26 22:41:10 +00:00
broadcast-upnp-info.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
broadcast-wsdd-discover.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
citrix-brute-xml.nse Change " \n" to just "\n" where appropriate in NSE. Leading newlines are 2010-09-30 05:03:39 +00:00
citrix-enum-apps-xml.nse
citrix-enum-apps.nse
citrix-enum-servers-xml.nse
citrix-enum-servers.nse
couchdb-databases.nse
couchdb-stats.nse
daap-get-library.nse Change " \n" to just "\n" where appropriate in NSE. Leading newlines are 2010-09-30 05:03:39 +00:00
daytime.nse
db2-das-info.nse Addressed a condition in db2-das-info.nse where the script would crash 2011-02-16 00:13:38 +00:00
db2-discover.nse Move db2-discover out of "discovery" and into "safe", like the other 2011-01-24 07:22:07 +00:00
dhcp-discover.nse Set the math.randomseed value in nse_main.lua on behalf of scripts. 2011-05-23 21:43:46 +00:00
dns-brute.nse Remove redundant "Result:" label from dns-brute.nse output. Use the 2011-03-15 17:12:45 +00:00
dns-cache-snoop.nse
dns-fuzz.nse Set the math.randomseed value in nse_main.lua on behalf of scripts. 2011-05-23 21:43:46 +00:00
dns-nsec-enum.nse Change the "name" member of a decoded NSEC record to be called 2011-03-27 05:07:16 +00:00
dns-random-srcport.nse use # length operator instead of string.len (canonicalize) 2011-05-11 15:12:47 +00:00
dns-random-txid.nse use # length operator instead of string.len (canonicalize) 2011-05-11 15:12:47 +00:00
dns-recursion.nse Make the set of script "default and intrusive" empty. 2011-04-30 19:21:38 +00:00
dns-service-discovery.nse o [NSE] Added a new library dnssd with supporting functions for DNS Service 2010-11-02 17:22:38 +00:00
dns-update.nse I've been putting periods at the end of these single sentence fragment descriptions for consistency, although I don't really know which way is best. When there are multiple setences in that first paragraph, we obviously need the paragraph even after an initial fragment. So I figured that we might as well include it when the fragment is all there is. But maybe when there is just one fragment, it looks better without a period. Who knows, and I guess it's not a particularly critical decision. But dns-update.nse now has a period in any case :) 2011-01-14 21:06:28 +00:00
dns-zone-transfer.nse use # length operator instead of string.len (canonicalize) 2011-05-11 15:12:47 +00:00
domcon-brute.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
domcon-cmd.nse replaced -np with -p in usage as Linux reports the following error: 2011-01-18 19:41:05 +00:00
domino-enum-users.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
dpap-brute.nse o [NSE] Added probe for Apple iPhoto (DPAP) and the dpap-brute script that 2011-02-26 16:24:54 +00:00
drda-brute.nse
drda-info.nse
epmd-info.nse Add epmd-info script from Toni Ruottu. 2011-04-04 18:28:33 +00:00
finger.nse
firewalk.nse Minor typo fixes 2011-06-03 09:24:51 +00:00
ftp-anon.nse splay an error when a directory listing can't be found in ftp-anon, 2011-01-31 09:46:32 +00:00
ftp-bounce.nse Make the set of script "default and intrusive" empty. 2011-04-30 19:21:38 +00:00
ftp-brute.nse
ftp-libopie.nse
ftp-proftpd-backdoor.nse o [NSE] Fixed some portrules that used shortport functions incorrectly 2011-02-04 08:46:14 +00:00
giop-info.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
gopher-ls.nse Add gopher-ls and hddtemp-info @usage, adapted from Toni Ruotto. 2011-01-15 16:33:06 +00:00
hddtemp-info.nse Add gopher-ls and hddtemp-info @usage, adapted from Toni Ruotto. 2011-01-15 16:33:06 +00:00
hostmap.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
http-affiliate-id.nse Change the http-affiliate-id registry key to be named after the script. 2011-04-01 06:48:55 +00:00
http-auth.nse Put http-auth in "safe" now that it is not in "default". 2011-04-30 19:23:19 +00:00
http-brute.nse Treat 5xx errors as success (guessed password) in http-brute. 2011-04-28 04:14:54 +00:00
http-cakephp-version.nse Fixes false positive line when CakePHP is not present. 2011-05-29 17:25:12 +00:00
http-date.nse
http-domino-enum-passwords.nse Minor NSEDoc summary cleanup 2011-01-21 08:28:38 +00:00
http-enum.nse added documentation for new script-arg 2011-01-03 03:51:11 +00:00
http-favicon.nse Bugfix for favicon 2011-06-03 19:59:08 +00:00
http-form-brute.nse Re-worked the http-form-brute script, the changes include: 2011-06-12 18:52:51 +00:00
http-headers.nse
http-iis-webdav-vuln.nse Bring in changes from my experimental brange, nmap-http 2010-10-27 03:08:08 +00:00
http-malware-host.nse
http-methods.nse
http-open-proxy.nse Make the set of script "default and intrusive" empty. 2011-04-30 19:21:38 +00:00
http-passwd.nse Add more http-passwd payloads from Ange Gutek. 2010-11-11 19:02:17 +00:00
http-php-version.nse Updated the hash information to include PHP/5.3.6 (released today). 2011-03-17 15:42:56 +00:00
http-robots.txt.nse Rename a couple http scripts to make it more clear that they use the http protocol and for consistency with other script names 2010-11-20 04:22:51 +00:00
http-title.nse use # length operator instead of string.len (canonicalize) 2011-05-11 15:12:47 +00:00
http-trace.nse
http-userdir-enum.nse Fixed a bug in http-userdir-enum (was missing an argument to http.pipeline_add()) 2010-11-17 20:24:48 +00:00
http-vhosts.nse Fix typoed variable name in http-vhosts.nse. 2011-04-11 02:35:49 +00:00
http-vmware-path-vuln.nse
http-wp-plugins.nse removed usage of deprecated table.getn 2011-05-11 14:41:06 +00:00
iax2-version.nse use # length operator instead of string.len (canonicalize) 2011-05-11 15:12:47 +00:00
imap-capabilities.nse
informix-brute.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
informix-query.nse replaced -np with -p in usage as Linux reports the following error: 2011-01-18 19:41:05 +00:00
informix-tables.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
ipidseq.nse fix whitespace inconsistencies from copy-and-pastes 2011-05-06 23:48:41 +00:00
irc-info.nse
irc-unrealircd-backdoor.nse
iscsi-brute.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
iscsi-info.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
jdwp-version.nse
ldap-brute.nse fixed the following bug reported by Ron 2010-11-04 18:53:56 +00:00
ldap-novell-getpass.nse o [NSE] Added ldap-novell-getpass, a script that provides support for 2011-05-28 08:48:26 +00:00
ldap-rootdse.nse
ldap-search.nse Change " \n" to just "\n" where appropriate in NSE. Leading newlines are 2010-09-30 05:03:39 +00:00
lexmark-config.nse Whitespace in lexmark-config.nse. 2010-12-15 18:57:22 +00:00
mac-geolocation.nse Cleaning up some residue Skyhook code. 2011-05-30 14:35:43 +00:00
modbus-discover.nse Minor NSEDoc summary cleanup 2011-01-21 08:28:38 +00:00
mongodb-databases.nse
mongodb-info.nse
ms-sql-brute.nse removed usage of deprecated table.getn 2011-05-11 14:41:06 +00:00
ms-sql-config.nse o [NSE] Merged the ms-sql branch with several improvements and changes to the 2011-02-26 22:41:10 +00:00
ms-sql-empty-password.nse removed usage of deprecated table.getn 2011-05-11 14:41:06 +00:00
ms-sql-hasdbaccess.nse o [NSE] Merged the ms-sql branch with several improvements and changes to the 2011-02-26 22:41:10 +00:00
ms-sql-info.nse Applied the following patch from Chris Woodbury to make ms-sql-info run less 2011-04-03 20:44:42 +00:00
ms-sql-query.nse o [NSE] Merged the ms-sql branch with several improvements and changes to the 2011-02-26 22:41:10 +00:00
ms-sql-tables.nse o [NSE] Merged the ms-sql branch with several improvements and changes to the 2011-02-26 22:41:10 +00:00
ms-sql-xp-cmdshell.nse o [NSE] Merged the ms-sql branch with several improvements and changes to the 2011-02-26 22:41:10 +00:00
mysql-brute.nse Patch to make require errors silent and removed evil workarounds. 2011-05-04 21:06:53 +00:00
mysql-databases.nse Patch to make require errors silent and removed evil workarounds. 2011-05-04 21:06:53 +00:00
mysql-empty-password.nse
mysql-info.nse
mysql-users.nse Patch to make require errors silent and removed evil workarounds. 2011-05-04 21:06:53 +00:00
mysql-variables.nse Patch to make require errors silent and removed evil workarounds. 2011-05-04 21:06:53 +00:00
nat-pmp-info.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
nbstat.nse use # length operator instead of string.len (canonicalize) 2011-05-11 15:12:47 +00:00
ncp-enum-users.nse o [NSE] Added the Netware Core Protocol (NCP) library and the scripts 2011-05-28 09:01:31 +00:00
ncp-serverinfo.nse o [NSE] Added the Netware Core Protocol (NCP) library and the scripts 2011-05-28 09:01:31 +00:00
netbus-auth-bypass.nse Minor typo fixes 2011-06-03 09:24:51 +00:00
netbus-brute.nse Minor NSEDoc summary cleanup 2011-01-21 08:28:38 +00:00
netbus-info.nse Apply a patch from Toni Ruottu with some small misc. improvements to the netbus-* scripts. Also I changed netbus-auth-bypass to the safe category as recommended by Toni 2011-01-15 21:28:45 +00:00
netbus-version.nse Apply a patch from Toni Ruottu with some small misc. improvements to the netbus-* scripts. Also I changed netbus-auth-bypass to the safe category as recommended by Toni 2011-01-15 21:28:45 +00:00
nfs-ls.nse Fix a typo in a comment. 2011-04-22 22:21:43 +00:00
nfs-showmount.nse
nfs-statfs.nse Normalize tab.lua usage so that a call to tab.nextrow comes after (not 2010-12-30 21:08:25 +00:00
nping-brute.nse Set the math.randomseed value in nse_main.lua on behalf of scripts. 2011-05-23 21:43:46 +00:00
nrpe-enum.nse Fix the nrpe-enum portrule. It was returning a function, thus always 2011-02-01 21:25:46 +00:00
ntp-info.nse
ntp-monlist.nse
omp2-brute.nse Add omp2-brute and omp2-enum-targets from Henri Doreau. 2011-04-20 23:44:16 +00:00
omp2-enum-targets.nse Add omp2-brute and omp2-enum-targets from Henri Doreau. 2011-04-20 23:44:16 +00:00
oracle-brute.nse Patch to make require errors silent and removed evil workarounds. 2011-05-04 21:06:53 +00:00
oracle-enum-users.nse Set the math.randomseed value in nse_main.lua on behalf of scripts. 2011-05-23 21:43:46 +00:00
oracle-sid-brute.nse
ovs-agent-version.nse Add ovs-agent-version.nse, a script to detect the ovs-agent service for 2011-03-02 07:39:31 +00:00
p2p-conficker.nse use # length operator instead of string.len (canonicalize) 2011-05-11 15:12:47 +00:00
path-mtu.nse fix whitespace inconsistencies from copy-and-pastes 2011-05-06 23:48:41 +00:00
pgsql-brute.nse Patch to make require errors silent and removed evil workarounds. 2011-05-04 21:06:53 +00:00
pjl-ready-message.nse
pop3-brute.nse
pop3-capabilities.nse
pptp-version.nse use # length operator instead of string.len (canonicalize) 2011-05-11 15:12:47 +00:00
qscan.nse fix whitespace inconsistencies from copy-and-pastes 2011-05-06 23:48:41 +00:00
quake3-master-getservers.nse Add quake3-master-getservers postrule summary patch from Toni. 2011-04-19 04:41:10 +00:00
realvnc-auth-bypass.nse Put realvnc-auth-bypass.nse in "auth" category. 2010-12-13 17:30:06 +00:00
resolveall.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
rmi-dumpregistry.nse Minor NSEDoc summary cleanup 2011-01-21 08:28:38 +00:00
rpcinfo.nse Oops, I forgot to add the comment symbols to my nsedoc @output changes to this script. 2011-03-19 18:58:31 +00:00
script.db regen the script.db (there was no entry for mac-geolocation) 2011-06-08 06:06:07 +00:00
servicetags.nse Factor out three data-gathering functions in servicetags: one to get 2011-02-22 04:32:56 +00:00
sip-brute.nse Set the math.randomseed value in nse_main.lua on behalf of scripts. 2011-05-23 21:43:46 +00:00
sip-enum-users.nse o [NSE] Added a SIP library and two new scripts sip-brute.nse and 2011-05-09 18:00:52 +00:00
skypev2-version.nse
smb-brute.nse Set the math.randomseed value in nse_main.lua on behalf of scripts. 2011-05-23 21:43:46 +00:00
smb-check-vulns.nse
smb-enum-domains.nse Fixed a bug where a ternary operator meant to prevent a nil pointer exception was outside of a math.floor() call, making it totally worthless. I moved the math.floor() outside the operation, fixing it. 2010-09-24 01:33:01 +00:00
smb-enum-groups.nse
smb-enum-processes.nse Change " \n" to just "\n" where appropriate in NSE. Leading newlines are 2010-09-30 05:03:39 +00:00
smb-enum-sessions.nse
smb-enum-shares.nse
smb-enum-users.nse
smb-flood.nse Minor NSEDoc summary cleanup 2011-01-21 08:28:38 +00:00
smb-os-discovery.nse
smb-psexec.nse Set the math.randomseed value in nse_main.lua on behalf of scripts. 2011-05-23 21:43:46 +00:00
smb-security-mode.nse Removed some more errant newlines from the output 2010-11-03 19:53:58 +00:00
smb-server-stats.nse
smb-system-info.nse
smbv2-enabled.nse
smtp-commands.nse fixed parameter name in script usage 2011-05-07 17:37:49 +00:00
smtp-enum-users.nse Whitespace. 2011-02-21 22:59:34 +00:00
smtp-open-relay.nse removed usage of deprecated table.getn 2011-05-11 14:41:06 +00:00
smtp-strangeport.nse
smtp-vuln-cve2011-1720.nse Update the script name 2011-05-19 18:32:20 +00:00
sniffer-detect.nse o [NSE] Call the new nmap.get_interface_info() function instead of 2011-04-22 22:19:08 +00:00
snmp-brute.nse NSEDoc fix of snmp-brute. 2011-05-16 18:48:34 +00:00
snmp-interfaces.nse snmp-interfaces patch for interaction with mac-geolocation through nmap.registry[host.ip][mac-geolocation] 2011-05-31 00:13:12 +00:00
snmp-ios-config.nse Corrected documentation bug 2011-02-22 21:49:48 +00:00
snmp-netstat.nse
snmp-processes.nse
snmp-sysdescr.nse
snmp-win32-services.nse
snmp-win32-shares.nse
snmp-win32-software.nse
snmp-win32-users.nse
socks-open-proxy.nse Make the set of script "default and intrusive" empty. 2011-04-30 19:21:38 +00:00
sql-injection.nse use # length operator instead of string.len (canonicalize) 2011-05-11 15:12:47 +00:00
ssh-hostkey.nse Patch to make require errors silent and removed evil workarounds. 2011-05-04 21:06:53 +00:00
ssh2-enum-algos.nse Patch to make require errors silent and removed evil workarounds. 2011-05-04 21:06:53 +00:00
sshv1.nse
ssl-cert.nse Change the lookup for specialized negotiation functions in ssl-cert.nse. 2011-04-18 16:07:49 +00:00
ssl-enum-ciphers.nse Create a shortport.ssl function like shortport.http. Use it in ssl 2011-02-22 00:46:28 +00:00
ssl-known-key.nse Put ssl-known-key in {"safe", "discovery", "vuln"} (was {"discovery"}). 2011-03-22 19:44:46 +00:00
sslv2.nse use # length operator instead of string.len (canonicalize) 2011-05-11 15:12:47 +00:00
stuxnet-detect.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
svn-brute.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
targets-sniffer.nse Restore a check for nmap.is_privileged to targets-sniffer.nse. I asked 2011-04-05 06:12:03 +00:00
targets-traceroute.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
telnet-brute.nse
upnp-info.nse applied patch from Thomas Buchanan containing bugfixes and some re-factoring 2010-11-19 19:31:50 +00:00
vnc-brute.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
vnc-info.nse Minor NSEDoc summary cleanup 2011-01-21 08:28:38 +00:00
wdb-version.nse Minor NSEDoc summary cleanup 2011-01-21 08:28:38 +00:00
whois.nse use # length operator instead of string.len (canonicalize) 2011-05-11 15:12:47 +00:00
wsdd-discover.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
x11-access.nse
xmpp.nse o [NSE] Added xmpp.nse, which collects XMPP server information [Vasiliy Kulikov] 2011-05-07 21:14:21 +00:00