Home page logo
/
Intro Reference Guide Book Install Guide
Download Changelog Zenmap GUI Docs
Bug Reports OS Detection Propaganda Related Projects
In the Movies In the News

Sponsors

SolarWinds makes easy-to-use enterprise IT management software to help IT pros solve problems every day and help to enable efficient and effective management of networks and IT environments.

Join our online community of over 100,000 IT professionals talking shop. Get involved. Gain insights. Share tips and tricks. Visit thwack today!


File netbus-auth-bypass

Script types: portrule
Categories: auth, safe, vuln
Download: http://nmap.org/svn/scripts/netbus-auth-bypass.nse

User Summary

Checks if a NetBus server is vulnerable to an authentication bypass vulnerability which allows full access without knowing the password.

For example a server running on TCP port 12345 on localhost with this vulnerability is accessible to anyone. An attacker could simply form a connection to the server ( ncat -C 127.0.0.1 12345 ) and login to the service by typing Password;1; into the console.

Example Usage

nmap -p 12345 --script netbus-auth-bypass <target>

Script Output

12345/tcp open  netbus
|_netbus-auth-bypass: Vulnerable

Requires


Author: Toni Ruottu

License: Same as Nmap--See http://nmap.org/book/man-legal.html

Nmap Site Navigation

Intro Reference Guide Book Install Guide
Download Changelog Zenmap GUI Docs
Bug Reports OS Detection Propaganda Related Projects
In the Movies In the News
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]