File rsync-brute

脚本使用类型: portrule
脚本所属分类: brute, intrusive
脚本下载地址: http://nmap.org/svn/scripts/rsync-brute.nse

User Summary

Performs brute force password auditing against the rsync remote file syncing protocol.

Script Arguments

rsync-brute.module

- the module against which brute forcing should be performed

passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb

Example Usage

执行格式

nmap -p 873 --script rsync-brute --script-args 'rsync-brute.module=www' <ip>

Script Output

PORT    STATE SERVICE REASON
873/tcp open  rsync   syn-ack
| rsync-brute: 
|   Accounts
|     user1:laptop - Valid credentials
|     user2:password - Valid credentials
|   Statistics
|_    Performed 1954 guesses in 20 seconds, average tps: 97

Requires

• brute
• creds
• shortport
• stdnse
• rsync

Author: Patrik Karlsson

License: VER007 整理 http://www.ver007.com