File netbus-auth-bypass

脚本使用类型: portrule
脚本所属分类: auth, safe, vuln
脚本下载地址: http://nmap.org/svn/scripts/netbus-auth-bypass.nse

User Summary

Checks if a NetBus server is vulnerable to an authentication bypass vulnerability which allows full access without knowing the password.

For example a server running on TCP port 12345 on localhost with this vulnerability is accessible to anyone. An attacker could simply form a connection to the server ( ncat -C 127.0.0.1 12345 ) and login to the service by typing Password;1; into the console.

Example Usage

执行格式

nmap -p 12345 --script netbus-auth-bypass <target>

Script Output

12345/tcp open  netbus
|_netbus-auth-bypass: Vulnerable

Requires

• nmap
• shortport
• stdnse

Author: Toni Ruottu

License: VER007 整理 http://www.ver007.com