File cvs-brute-repository

脚本使用类型: portrule
脚本所属分类: intrusive, brute
脚本下载地址: http://nmap.org/svn/scripts/cvs-brute-repository.nse

User Summary

Attempts to guess the name of the CVS repositories hosted on the remote server. With knowledge of the correct repository name, usernames and passwords can be guessed.

Script Arguments

cvs-brute-repository.repofile

a file containing a list of repositories to guess

cvs-brute-repository.nodefault

when set the script does not attempt to guess the list of hardcoded repositories

passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb

Example Usage

执行格式

nmap -p 2401 --script cvs-brute-repository <host>

Script Output

PORT     STATE SERVICE    REASON
2401/tcp open  cvspserver syn-ack
| cvs-brute-repository: 
|   Repositories
|     /myrepos
|     /demo
|   Statistics
|_    Performed 14 guesses in 1 seconds, average tps: 14

Requires

• brute
• coroutine
• cvs
• io
• nmap
• shortport
• stdnse
• table
• unpwdb

Author: Patrik Karlsson

License: VER007 整理 http://www.ver007.com