Packt+ | Advance your knowledge in tech

You're reading from Mastering the Nmap Scripting Engine Master the Nmap Scripting Engine and the art of developing NSE scripts

Product type Paperback

Published in Feb 2015

Publisher

ISBN-13 9781782168317

Length 244 pages

Edition 1st Edition

Languages

Java

Tools

Selenium

Concepts

Network Security

Author (1):

Paulino Calderon

View More author details

Table of Contents (23) Chapters

Mastering the Nmap Scripting Engine

Credits

About the Author

Acknowledgments

About the Reviewers

www.PacktPub.com

Preface

1. Introduction to the Nmap Scripting Engine FREE CHAPTER

2. Lua Fundamentals

3. NSE Data Files

4. Exploring the Nmap Scripting Engine API and Libraries

5. Enhancing Version Detection

6. Developing Brute-force Password-auditing Scripts

7. Formatting the Script Output

8. Working with Network Sockets and Binary Data

9. Parallelism

10. Vulnerability Detection and Exploitation

Scan Phases

NSE Script Template

Other templates online

Script Categories

Nmap Options Mind Map

References

Index

Chapter 6. Developing Brute-force Password-auditing Scripts

One important feature of NSE, (sadly) often forgotten, is the ability to perform brute-force password-auditing attacks against numerous services, applications, and protocols. As experienced penetration testers, we know that weak credentials are found in many IT environments, and it is impossible to find them all manually without boring yourself to death. The brute NSE category attempts to ease this pain by grouping over 50 different scripts to work with a variety of applications, services, and protocols such as these:

HTTP, HTTPS, and application-specific scripts for web applications
SMTP, POP, and IMAP for mail delivery systems
Oracle, IBM DB2, MySQL, MS SQL, Cassandra, and MongoDB for database management systems
SVN and CVS for source code control systems
Many other interesting protocols such as SIP, VMWare Authorization, and other application-specific daemons

In this chapter, we will cover the following topics:

Adjusting execution modes...

The rest of the chapter is locked

Tech Concepts

Programming languages

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at $19.99/month. Cancel anytime

Authors (1)

Paulino Calderon

Paulino Calderon (@calderpwn on Twitter) is the cofounder of Websec, a company offering information security consulting services based in Mexico and Canada. When he is not traveling to a security conference or conducting on-site consulting for Fortune 500 companies, he spends peaceful days in Cozumel, a beautiful small island in the Caribbean, learning new technologies, conducting big data experiments, developing new tools, and finding bugs in software. Paulino is active in the open source community, and his contributions are used by millions of people in the information security industry. In 2011, Paulino joined the Nmap team during the Google Summer of Code to work on the project as an NSE developer. He focused on improving the web scanning capabilities of Nmap, and he has kept contributing to the project since then. In addition, he has been a mentor for students who focused on vulnerability detection during the Google Summer of Code 2015 and 2017. He has published Nmap 6: Network Exploration and Security Auditing Cookbook and Mastering the Nmap Scripting Engine, which cover practical tasks with Nmap and NSE development in depth. He loves attending information security conferences, and he has given talks and participated in workshops in dozens of events in Canada, the United States, Mexico, Colombia, Peru, Bolivia, and Curacao.

See other products by Paulino Calderon