發表文章

目前顯示的是 4月, 2017的文章

amqp-info.nse 說明

從 AMQP (advanced message queuing protocol) server 取得訊息 AMQP說明:  https://en.wikipedia.org/wiki/Advanced_Message_Queuing_Protocol 官方:  https://nmap.org/nsedoc/scripts/amqp-info.html 內容: local amqp = require "amqp" local nmap = require "nmap" local shortport = require "shortport" local stdnse = require "stdnse" description = [[ Gathers information (a list of all server properties) from an AMQP (advanced message queuing protocol) server. See http://www.rabbitmq.com/extensions.html for details on the <code>server-properties</code> field. ]] --- -- @usage -- nmap --script amqp-info -p5672 <target> --- -- @args amqp.version Can be used to specify the client version to use (currently, 0-8, 0-9 or 0-9-1) -- -- @output -- 5672/tcp open  amqp -- | amqp-info: -- |   capabilities: -- |     publisher_confirms: YES -- |     exchange_exchange_bindings: YES -- |     basic.nack: YES -- |     consumer_cancel_notify

ajp-brute.nse

對  Apache JServ  提出攻擊 官方網址:   https://nmap.org/nsedoc/scripts/ajp-brute.html 內容: local ajp = require "ajp" local base64 = require "base64" local brute = require "brute" local creds = require "creds" local http = require "http" local shortport = require "shortport" local stdnse = require "stdnse" description = [[ Performs brute force passwords auditing against the Apache JServ protocol. The Apache JServ Protocol is commonly used by web servers to communicate with back-end Java application server containers. ]] --- -- @usage -- nmap -p 8009 <ip> --script ajp-brute -- -- @output -- PORT     STATE SERVICE -- 8009/tcp open  ajp13 -- | ajp-brute: -- |   Accounts -- |     root:secret - Valid credentials -- |   Statistics -- |_    Performed 1946 guesses in 23 seconds, average tps: 82 -- -- @args ajp-brute.path URL path to request. Default: / author = "Patrik Karlsson" licen

allseeingeye-info.nse 說明

有些遊戲主機 會使用的UDP 方便透過軟體搜尋到該主機 All-Seeing Eye service 介紹:  https://en.wikipedia.org/wiki/The_All-Seeing_Eye 官方:  https://nmap.org/nsedoc/scripts/allseeingeye-info.html 內容: local comm = require "comm" local nmap = require "nmap" local shortport = require "shortport" local string = require "string" local bin = require "bin" local bit = require "bit" local stdnse = require "stdnse" description = [[ Detects the All-Seeing Eye service. Provided by some game servers for querying the server's status. The All-Seeing Eye service can listen on a UDP port separate from the main game server port (usually game port + 123). On receiving a packet with the payload "s", it replies with various game server status info. When run as a version detection script (<code>-sV</code>), the script will report on the game name, version, actual port, and whether it has a password. When run explicit