File ajp-request
Script types:
portrule
Categories:
discovery, safe
Download: http://nmap.org/svn/scripts/ajp-request.nse
User Summary
Requests a URI over the Apache JServ Protocol and displays the result (or stores it in a file). Different AJP methods such as; GET, HEAD, TRACE, PUT or DELETE may be used.
The Apache JServ Protocol is commonly used by web servers to communicate with back-end Java application server containers.
Script Arguments
username
the username to use to access protected resources
path
the path part of the URI to request
filename
the name of the file where the results should be stored
password
the password to use to access protected resources
method
AJP method to be used when requesting the URI (default: GET)
smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername
See the documentation for the smbauth library.http.max-cache-size, http.max-pipeline, http.pipeline, http.useragent
See the documentation for the http library.Example Usage
nmap -p 8009 <ip> --script ajp-request
Script Output
PORT STATE SERVICE 8009/tcp open ajp13 | ajp-request: | <!DOCTYPE HTML> | <html> | <head> | <title>JSP Test</title> | | </head> | <body> | <h2>Hello, World.</h2> | Fri May 04 02:09:40 UTC 2012 | </body> |_</html>
Requires
Author: Patrik Karlsson
License: Same as Nmap--See http://nmap.org/book/man-legal.html