nmap/scripts
robert d50c58dcc1 Force a match against "^PHP/" (i.e. now with a trailing forward slash) to prevent the "Version from header" from incorrectly matching against the Set-Cookie header with the value "PHPSESSID". This should match PHP/2.x onwards; I'm not sure about earlier versions of PHP as I can't find any references.
This will no longer match against the generic "X-Powered-By: PHP" (rare?), but that never gave us a version number anyway, so you could consider that a bug too.

We don't currently check for variations such as "Zend Core/2.0.1 PHP/5.2.1", so that could be added in the future, but at least the http-headers script will reveal the X-Powered-By header anyway.
2011-01-30 11:15:48 +00:00
..
afp-brute.nse Add a missing period to NSEDoc. 2011-01-28 17:54:49 +00:00
afp-path-vuln.nse
afp-serverinfo.nse
afp-showmount.nse
asn-query.nse
auth-owners.nse
auth-spoof.nse
banner.nse
broadcast-dns-service-discovery.nse minor NSEDoc updates 2011-01-14 06:32:16 +00:00
broadcast-dropbox-listener.nse Apply some nsedoc improvements sent in by Andrew Orr 2011-01-14 21:17:44 +00:00
broadcast-ms-sql-discover.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
broadcast-upnp-info.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
broadcast-wsdd-discover.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
citrix-brute-xml.nse
citrix-enum-apps-xml.nse
citrix-enum-apps.nse
citrix-enum-servers-xml.nse
citrix-enum-servers.nse
couchdb-databases.nse
couchdb-stats.nse
daap-get-library.nse
daytime.nse
db2-das-info.nse
db2-discover.nse Move db2-discover out of "discovery" and into "safe", like the other 2011-01-24 07:22:07 +00:00
dhcp-discover.nse
dns-cache-snoop.nse
dns-fuzz.nse
dns-random-srcport.nse
dns-random-txid.nse
dns-recursion.nse
dns-service-discovery.nse
dns-update.nse I've been putting periods at the end of these single sentence fragment descriptions for consistency, although I don't really know which way is best. When there are multiple setences in that first paragraph, we obviously need the paragraph even after an initial fragment. So I figured that we might as well include it when the fragment is all there is. But maybe when there is just one fragment, it looks better without a period. Who knows, and I guess it's not a particularly critical decision. But dns-update.nse now has a period in any case :) 2011-01-14 21:06:28 +00:00
dns-zone-transfer.nse Normalize tab.lua usage so that a call to tab.nextrow comes after (not 2010-12-30 21:08:25 +00:00
domcon-brute.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
domcon-cmd.nse replaced -np with -p in usage as Linux reports the following error: 2011-01-18 19:41:05 +00:00
domino-enum-users.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
drda-brute.nse
drda-info.nse
finger.nse
firewalk.nse remove an email address so that Henri's author line for firewalk is the same as for his other new script (targets-traceroute). If he wants the email address there, we can add it to both. 2011-01-14 10:26:14 +00:00
ftp-anon.nse Move the read_reply function out of ftp-anon.nse and into a new library 2010-12-29 21:24:52 +00:00
ftp-bounce.nse
ftp-brute.nse
ftp-libopie.nse
ftp-proftpd-backdoor.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
giop-info.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
gopher-ls.nse Add gopher-ls and hddtemp-info @usage, adapted from Toni Ruotto. 2011-01-15 16:33:06 +00:00
hddtemp-info.nse Add gopher-ls and hddtemp-info @usage, adapted from Toni Ruotto. 2011-01-15 16:33:06 +00:00
hostmap.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
http-auth.nse
http-brute.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
http-date.nse
http-domino-enum-passwords.nse Minor NSEDoc summary cleanup 2011-01-21 08:28:38 +00:00
http-enum.nse added documentation for new script-arg 2011-01-03 03:51:11 +00:00
http-favicon.nse
http-form-brute.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
http-headers.nse
http-iis-webdav-vuln.nse
http-malware-host.nse
http-methods.nse
http-open-proxy.nse
http-passwd.nse
http-php-version.nse Force a match against "^PHP/" (i.e. now with a trailing forward slash) to prevent the "Version from header" from incorrectly matching against the Set-Cookie header with the value "PHPSESSID". This should match PHP/2.x onwards; I'm not sure about earlier versions of PHP as I can't find any references. 2011-01-30 11:15:48 +00:00
http-robots.txt.nse
http-title.nse
http-trace.nse
http-userdir-enum.nse
http-vhosts.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
http-vmware-path-vuln.nse
iax2-version.nse
imap-capabilities.nse
informix-brute.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
informix-query.nse replaced -np with -p in usage as Linux reports the following error: 2011-01-18 19:41:05 +00:00
informix-tables.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
ipidseq.nse
irc-info.nse
irc-unrealircd-backdoor.nse
iscsi-brute.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
iscsi-info.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
jdwp-version.nse
ldap-brute.nse
ldap-rootdse.nse
ldap-search.nse
lexmark-config.nse Whitespace in lexmark-config.nse. 2010-12-15 18:57:22 +00:00
modbus-discover.nse Minor NSEDoc summary cleanup 2011-01-21 08:28:38 +00:00
mongodb-databases.nse
mongodb-info.nse
ms-sql-brute.nse
ms-sql-config.nse
ms-sql-empty-password.nse
ms-sql-hasdbaccess.nse
ms-sql-info.nse
ms-sql-query.nse
ms-sql-tables.nse
ms-sql-xp-cmdshell.nse
mysql-brute.nse
mysql-databases.nse
mysql-empty-password.nse
mysql-info.nse
mysql-users.nse
mysql-variables.nse
nat-pmp-info.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
nbstat.nse
netbus-auth-bypass.nse Minor NSEDoc summary cleanup 2011-01-21 08:28:38 +00:00
netbus-brute.nse Minor NSEDoc summary cleanup 2011-01-21 08:28:38 +00:00
netbus-info.nse Apply a patch from Toni Ruottu with some small misc. improvements to the netbus-* scripts. Also I changed netbus-auth-bypass to the safe category as recommended by Toni 2011-01-15 21:28:45 +00:00
netbus-version.nse Apply a patch from Toni Ruottu with some small misc. improvements to the netbus-* scripts. Also I changed netbus-auth-bypass to the safe category as recommended by Toni 2011-01-15 21:28:45 +00:00
nfs-ls.nse Separate NFS Export entries with newlines. 2011-01-04 20:09:43 +00:00
nfs-showmount.nse
nfs-statfs.nse Normalize tab.lua usage so that a call to tab.nextrow comes after (not 2010-12-30 21:08:25 +00:00
nrpe-enum.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
ntp-info.nse
ntp-monlist.nse
oracle-brute.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
oracle-enum-users.nse Minor NSEDoc summary cleanup 2011-01-21 08:28:38 +00:00
oracle-sid-brute.nse
p2p-conficker.nse
path-mtu.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
pgsql-brute.nse
pjl-ready-message.nse
pop3-brute.nse
pop3-capabilities.nse
pptp-version.nse
qscan.nse Normalize tab.lua usage so that a call to tab.nextrow comes after (not 2010-12-30 21:08:25 +00:00
realvnc-auth-bypass.nse
resolveall.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
rmi-dumpregistry.nse Minor NSEDoc summary cleanup 2011-01-21 08:28:38 +00:00
rpcinfo.nse
script.db Move db2-discover out of "discovery" and into "safe", like the other 2011-01-24 07:22:07 +00:00
skypev2-version.nse
smb-brute.nse
smb-check-vulns.nse
smb-enum-domains.nse
smb-enum-groups.nse
smb-enum-processes.nse
smb-enum-sessions.nse
smb-enum-shares.nse
smb-enum-users.nse
smb-flood.nse Minor NSEDoc summary cleanup 2011-01-21 08:28:38 +00:00
smb-os-discovery.nse
smb-psexec.nse Fixed a typo in the documentation 2011-01-08 00:25:48 +00:00
smb-security-mode.nse
smb-server-stats.nse
smb-system-info.nse
smbv2-enabled.nse
smtp-commands.nse
smtp-enum-users.nse
smtp-open-relay.nse
smtp-strangeport.nse
sniffer-detect.nse
snmp-brute.nse
snmp-interfaces.nse
snmp-netstat.nse
snmp-processes.nse
snmp-sysdescr.nse
snmp-win32-services.nse
snmp-win32-shares.nse
snmp-win32-software.nse
snmp-win32-users.nse
socks-open-proxy.nse
sql-injection.nse
ssh-hostkey.nse Fix for bug that would make Nmap fail to run when compile without SSL support. 2011-01-30 10:39:17 +00:00
ssh2-enum-algos.nse Minor NSEDoc summary cleanup 2011-01-21 08:28:38 +00:00
sshv1.nse
ssl-cert.nse
ssl-enum-ciphers.nse
sslv2.nse
stuxnet-detect.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
svn-brute.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
targets-traceroute.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
telnet-brute.nse
upnp-info.nse
vnc-brute.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
vnc-info.nse Minor NSEDoc summary cleanup 2011-01-21 08:28:38 +00:00
wdb-version.nse Minor NSEDoc summary cleanup 2011-01-21 08:28:38 +00:00
whois.nse
wsdd-discover.nse Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG 2011-01-14 10:20:51 +00:00
x11-access.nse