nnposter / nndefaccts Goto Github PK
View Code? Open in Web Editor NEWnnposter's alternate fingerprint dataset for Nmap script http-default-accounts
License: GNU General Public License v3.0
nnposter's alternate fingerprint dataset for Nmap script http-default-accounts
License: GNU General Public License v3.0
Is it possible to supply an additional password to check via a --script-args
?
My use case is to run an nmap internally against our known deployed printers/scanners. However, we are also aware of some weak custom passwords that were previously deployed in the environment and want to check for those too.
I see that login_combos
variable is used to hold the username/password's to check. Would it be possible to make this something that can be appended to via a --script-args
? I am not terribly well versed in lua, but if this is technically feasible I would love to make this a possibility.
Dell iDRAC 6/7 seems to be listening by default on HTTP and HTTPS. HTTP is only a redirection to HTTPS and doesn't accept authentication requests.
Currently we get this which isn't very neat:
PORT STATE SERVICE REASON
80/tcp open http syn-ack ttl 128
| http-default-accounts:
| [Dell iDRAC6/7 (Mbedthis)] at /
|_ (no valid default credentials found)
443/tcp open https syn-ack ttl 128
| http-default-accounts:
| [Dell iDRAC6/7 (Mbedthis)] at /
|_ root:calvin
I have a few ideas to improve this but nothing that satisfies me 100%. Maybe you'll have better ones :)
It stopped working I tried on 3 servers on ubuntu
The tool you wrote is really beautiful. How can we save the default information as host(url), username, password in a file. Internal network tests can yield a lot of results. It is really difficult to extract this result.
Sample output
url,username,password
http://10.2.14.221:80,admin,123456
http://10.1.3.52:8087/manager/html,admin,123456
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.