Script broadcast-hid-discoveryd

Script types: prerule
Categories: discovery, broadcast, safe
Download: https://svn.nmap.org/nmap/scripts/broadcast-hid-discoveryd.nse

Script Summary

Discovers HID devices on a LAN by sending a discoveryd network broadcast probe.

For more information about HID discoveryd, see:

• http://nosedookie.blogspot.com/2011/07/identifying-and-querying-hid-vertx.html
• https://github.com/coldfusion39/VertXploit

Script Arguments

broadcast-hid-discoveryd.timeout

socket timeout (default: 5s)

broadcast-hid-discoveryd.address

address to which the probe packet is sent. (default: 255.255.255.255)

max-newtargets, newtargets

See the documentation for the target library.

Example Usage

• nmap --script broadcast-hid-discoveryd

• nmap --script broadcast-hid-discoveryd --script-args timeout=15s
  

Script Output

Pre-scan script results:
| broadcast-hid-discoveryd:
|   MAC: 00:06:8E:00:00:00; Name: NoEntry; IP Address: 10.123.123.1; Model: EH400; Version: 2.3.1.603 (04/23/2012)
|   MAC: 00:06:8E:FF:FF:FF; Name: NoExit; IP Address: 10.123.123.123; Model: EH400; Version: 2.3.1.603 (04/23/2012)
|_  Use --script-args=newtargets to add the results as targets

Requires

• nmap
• stdnse
• string
• stringaux
• target
• os
• table

---

Author:

• Brendan Coles

License: Same as Nmap--See https://nmap.org/book/man-legal.html