===== Nmap ===== ==== HTTPS testing ==== # nmap --script ssl-enum-ciphers -p 443 192.168.1.1 # nmap --script ssl-dh-params -p 443 192.168.1.1 # nmap --script ssl-cert -p 443 192.168.1.1 ==== SSH ==== # nmap --script ssh2-enum-algos -p 22 192.168.1.1 # nmap --script ssh-auth-methods -p22 # nmap --script ssh-publickey-acceptance -p22 ==== SMB ==== # nmap -p 139,445 --script smb-protocols 192.168.1.1 -- @output -- | smb-protocols: -- | dialects: -- | NT LM 0.12 (SMBv1) [dangerous, but default] -- | 2.0.2 -- | 2.1 -- | 3.0 -- | 3.0.2 -- |_ 3.1.1 ==== SNMP ==== # nmap -sU -p161 --script=snmp-info 192.168.1.11 # nmap -sU -p161 --script=snmp-brute 192.168.1.12 # nmap -sU -p 161 -sV -sC 192.168.1.13 # All SNMP Infos: