Script ajp-auth

Script types: portrule
Categories: default, auth, safe
Download: https://svn.nmap.org/nmap/scripts/ajp-auth.nse

Script Summary

Retrieves the authentication scheme and realm of an AJP service (Apache JServ Protocol) that requires authentication.

Script Arguments

ajp-auth.path

Define the request path

slaxml.debug

See the documentation for the slaxml library.

http.host, http.max-body-size, http.max-cache-size, http.max-pipeline, http.pipeline, http.truncated-ok, http.useragent

See the documentation for the http library.

smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername

See the documentation for the smbauth library.

Example Usage

nmap -p 8009 <ip> --script ajp-auth [--script-args ajp-auth.path=/login]

Script Output

PORT     STATE SERVICE
8009/tcp open  ajp13
| ajp-auth:
|_  Digest opaque=GPui3SvCGBoHrRMMzSsgaYBV qop=auth nonce=1336063830612:935b5b389696b0f67b9193e19f47e037 realm=example.org

Requires

• ajp
• http
• shortport
• stdnse
• table

---

Author:

• Patrik Karlsson

License: Same as Nmap--See https://nmap.org/book/man-legal.html