File nessus-xmlrpc-brute
Script types:
portrule
Categories:
intrusive, brute
Download: http://nmap.org/svn/scripts/nessus-xmlrpc-brute.nse
User Summary
Performs brute force password auditing against a Nessus vulnerability scanning daemon using the XMLRPC protocol.
Script Arguments
nessus-xmlrpc-brute.timeout
socket timeout for connecting to Nessus (default 5s)
nessus-xmlrpc-brute.threads
sets the number of threads.
passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb
See the documentation for the unpwdb library.Example Usage
nmap -sV --script=nessus-xmlrpc-brute <target>
Script Output
PORT STATE SERVICE REASON 8834/tcp open unknown syn-ack | nessus-xmlrpc-brute: | Accounts | nessus:nessus - Valid credentials | Statistics |_ Performed 1933 guesses in 26 seconds, average tps: 73
Requires
Author: Patrik Karlsson
License: Same as Nmap--See http://nmap.org/book/man-legal.html