File http-auth

脚本使用类型: portrule
脚本所属分类: default, auth, safe
脚本下载地址: http://nmap.org/svn/scripts/http-auth.nse

User Summary

Retrieves the authentication scheme and realm of a web service that requires authentication.

Script Arguments

http-auth.path

Define the request path

smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername

http.max-cache-size, http.max-pipeline, http.pipeline, http.useragent

Example Usage

执行格式

nmap --script http-auth [--script-args http-auth.path=/login] -p80 <host>

Script Output

PORT   STATE SERVICE REASON
80/tcp open  http    syn-ack
| http-auth: 
| HTTP/1.1 401 Unauthorized
|   Negotiate
|   NTLM
|   Digest charset=utf-8 nonce=+Upgraded+v1e4e256b4afb7f89be014e...968ccd60affb7c qop=auth algorithm=MD5-sess realm=example.com
|_  Basic realm=example.com

Requires

• http
• shortport
• stdnse
• string
• table

Author: Thomas Buchanan

License: VER007 整理 http://www.ver007.com