File http-brute

脚本使用类型: portrule
脚本所属分类: intrusive, brute
脚本下载地址: http://nmap.org/svn/scripts/http-brute.nse

User Summary

Performs brute force password auditing against http basic authentication.

Script Arguments

http-brute.hostname

sets the host header in case of virtual hosting

http-brute.method

sets the HTTP method to use (default: GET)

http-brute.path

points to the path protected by authentication (default: /)

passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb

http.max-cache-size, http.max-pipeline, http.pipeline, http.useragent

smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername

Example Usage

执行格式

nmap --script http-brute -p 80 <host>

This script uses the unpwdb and brute libraries to perform password
guessing. Any successful guesses are stored in the nmap registry, under
the nmap.registry.credentials.http key for other scripts to use.

Script Output

PORT     STATE SERVICE REASON
80/tcp   open  http    syn-ack
| http-brute:  
|   Accounts
|     Patrik Karlsson:secret => Valid credentials
|   Statistics
|_    Perfomed 60023 guesses in 467 seconds, average tps: 138

Summary
-------
  x The Driver class contains the driver implementation used by the brute
    library

Requires

• brute
• creds
• http
• nmap
• shortport
• string
• table
• stdnse

Author: Patrik Karlsson, Piotr Olma

License: VER007 整理 http://www.ver007.com