cqure.net

Inspect it is hiring

patrik — Mon, 15 Mar 2010 18:05:52 +0000

My employer (Inspect it) is hiring in Stockholm (Sweden). Inspect it is looking for people that currently work with IT- and information-security or have a strong desire to do so. Applicants should have experience within one or more of the following areas:

- Penetration- and Application-security testing
- Application & System security reviews
- Incident response and IT-forensics
- Security training

If your interested or have any questions contact me directly or send an e-mail to jobs[at]inspectit[dot]se

Nmap-scripts cleanup

Patrik Karlsson — Wed, 17 Feb 2010 11:36:39 +0000

I’ve cleaned up the Nmap scripts page a bit to better reflect reality. Most of the scripts published on that page have been commited to the Nmap development release. I’m actively working on getting the remainder commited to. Once the scripts have been commited, they’re no longer maintained here. So, in order to try them out I recommend you to install the latest development release of Nmap. In order to do so, follow the steps outlined here.

5 new SNMP scripts in Nmap SVN

Patrik Karlsson — Wed, 17 Feb 2010 11:23:13 +0000

As of yesterday there are now 5 new SNMP scripts in the development release of Nmap. I commited a new ASN.1 library a re-worked SNMP library and 5 new scripts. The new scripts are:

snmp-netstat shows listening and connected sockets
snmp-processes shows process information including name, pid, path and parameters
snmp-win32-services shows the names of running Windows services
snmp-win32-shares shows the names and path of Windows shares
snmp-win32-software shows a list of installed Windows software
snmp-win32-users shows a list of local Windows users

Make sure to check them out over at insecure.org. In order to use them you need to check out the development sources from subversion. More info on that over here.

nfs-showmount total re-write

Patrik Karlsson — Mon, 25 Jan 2010 19:44:15 +0000

I received a bug report for my Nmap nfs-showmount script a few days ago. I ended up re-writing the whole thing as it was my first script, which is short for “ugly as hell”. I moved all NFS and RPC stuff into a new library called rpc.lua and added some more functionality as well.

I’ve also added two more scripts that make use of the library nfs-get-stats and nfs-get-dirlist. The first retrieves disk usage for each export and the second lists files on a share. They’re both available from the nmap-scripts page as usual.

Nmap does more MySQL

Patrik Karlsson — Sat, 23 Jan 2010 21:48:44 +0000

I’ve just added some code to my Nmap MySQL library that enables query support. With this code in place it’s possible to run queries against MySQL directly from a Nmap script. In order to illustrate this I’ve added three scripts: mysql-list-users, mysql-list-databases and mysql-show-variables.

While messing around with the library I also cleaned up the code for mysql-brute and mysql-empty-password. All of the scripts that query the database obviously require credentials to do so. These can be provided on the command line using script arguments mysqluser and mysqlpassword or by running the mysql-brute or mysql-empty-password on the same time. There are dependencies set up so that the query scripts wait until these two scripts have collected the credentials. Here’s some sample output from the scripts …

New scripts added to Nmap svn

Patrik Karlsson — Thu, 21 Jan 2010 07:13:06 +0000

Two more scripts of my scripts were added to the development release of nmap, afp-showmount and dns-service-discovery. You can try them out either by downloading them from the nmap-scripts page or by checking out the latest development release over here.

Nmap goes 5.20

Patrik Karlsson — Thu, 21 Jan 2010 07:09:31 +0000

If anyone missed this the Nmap project released their 5.20 version yesterday! Make sure to check it out at http://nmap.org/download.html.

snmp scripts v0.2

Patrik Karlsson — Tue, 19 Jan 2010 12:57:21 +0000

I found a bug in the Nmap SNMP scripts that would trigger an endless loop if the MIB that they attempt to walk does not exist. This would occur if they’re run against anything else than Windows. I’ve now addressed this and released a 0.2 version of them. They’re available from the nmap-scripts page.

DAAP script for nmap

Patrik Karlsson — Mon, 18 Jan 2010 20:43:48 +0000

I’ve added a script that queries a DAAP service for it’s library. Depending on the version of the service it then attempts to query it for for a list of artists, albums and songs. It’s available, together with more other scripts, over at the nmap-scripts page.

Here’s a sample output when running against the Firefly Media Server:

Mysql scripts nmap

Patrik Karlsson — Mon, 18 Jan 2010 20:36:22 +0000

I’ve update the nmap-script page with two scripts for MySQL. The first simply checks whether the root user has a blank password set. The second script allows to perform online password guessing against MySql.