Archive for the 'Nmap' Category
Oracle query support in Nmap
Thursday, August 11th, 2011I’ve just committed an updated version of the TNS library to Nmap, adding support for running Oracle database queries from Nmap scripts. I’ve put a considerable amount of work into trying to understand how the protocol works, due to the lack of documentation, and think that I’ve finally succeeded. In addition I’ve posted two new [...]
I’ve ported mbenum to Nmap
Wednesday, August 10th, 2011Using Nmap for pentesting eDirectory
Sunday, June 5th, 2011While doing a security review the other day I came across Novell eDirectory running on Windows. It’s been a while since I looked at eDirectory and while it’s a lot of LDAP, the servers were also running the Netware Core Protocol (NCP). I noticed that there wasn’t any NCP support in Nmap so I decided [...]
Using Nmap to audit your MySQL database
Sunday, June 5th, 2011I’ve been working on a Nmap script for auditing MySQL databases against the CIS 1.0.2 benchmark for a while. I haven’t committed it to subversion yet, but it’s available to download for anyone who feels up to testing it. While it isn’t perfect nor does it contain all CIS controls, it provides Nmap users with [...]