This is an old revision of the document!
Table of Contents
Nmap
HTTPS testing
# nmap --script ssl-enum-ciphers -p 443 192.168.1.1 # nmap --script ssl-dh-params -p 443 192.168.1.1 # nmap --script ssl-cert -p 443 192.168.1.1
SSH
# nmap --script ssh2-enum-algos -p 22 192.168.1.1 # nmap --script ssh-auth-methods -p22 # nmap --script ssh-publickey-acceptance -p22
SMB
</code> # nmap -p 139,445 –script smb-protocols 192.168.1.1 – @output – | smb-protocols: – | dialects: – | NT LM 0.12 (SMBv1) [dangerous, but default] – | 2.0.2 – | 2.1 – | 3.0 – | 3.0.2 – |_ 3.1.1 </code>
SNMP
# nmap -sU -p161 --script=snmp-info 192.168.1.11 # nmap -sU -p161 --script=snmp-brute 192.168.1.12 # nmap -sU -p 161 -sV -sC 192.168.1.13 # All SNMP Infos: