citrix-brute-xml
脚本使用类型:
portrule
脚本所属分类:
intrusive, brute
脚本下载地址: http://nmap.org/svn/scripts/citrix-brute-xml.nse
Attempts to guess valid credentials for the Citrix PN Web Agent XML Service. The XML service authenticates against the local Windows server or the Active Directory.
This script makes no attempt of preventing account lockout. If the password list contains more passwords than the lockout-threshold accounts will be locked.
执行格式
nmap --script=citrix-brute-xml --script-args=userdb=<userdb>,passdb=<passdb>,ntdomain=<domain> -p 80,443,8080 <host>
PORT STATE SERVICE REASON 8080/tcp open http-proxy syn-ack | citrix-brute-xml: | Joe:password => Must change password at next logon | Luke:summer => Login was successful |_ Jane:secret => Account is disabled
Author: Patrik Karlsson
License: VER007 整理 http://www.ver007.com