Script `http-affiliate-id`

Script types:
Categories: safe, discovery
Download: https://svn.nmap.org/nmap/scripts/http-affiliate-id.nse

Script Summary

Grabs affiliate network IDs (e.g. Google AdSense or Analytics, Amazon Associates, etc.) from a web page. These can be used to identify pages with the same owner.

If there is more than one target using an ID, the postrule of this script shows the ID along with a list of the targets using it.

Supported IDs:

Google Analytics
Google AdSense
Amazon Associates

Script Arguments

http-affiliate-id.url-path: The path to request. Defaults to /.
slaxml.debug: See the documentation for the slaxml library.
smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername: See the documentation for the smbauth library.
http.host, http.max-body-size, http.max-cache-size, http.max-pipeline, http.pipeline, http.truncated-ok, http.useragent: See the documentation for the http library.

Example Usage

nmap --script=http-affiliate-id.nse --script-args http-affiliate-id.url-path=/website <target>

Script Output

PORT   STATE SERVICE
80/tcp open  http
| http-affiliate-id:
|   Amazon Associates ID: XXXX-XX
|   Google Adsense ID: pub-YYYY
|_  Google Analytics ID: UA-ZZZZ-ZZ
Post-scan script results:
| http-affiliate-id: Possible related sites
| Google Analytics ID: UA-2460010-99 used by:
|   thisisphotobomb.memebase.com:80/
|   memebase.com:80/
| Google Adsense ID: pub-0766144451700556 used by:
|   thisisphotobomb.memebase.com:80/
|_  memebase.com:80/

Requires

Authors:

Hani Benhabiles
Daniel Miller
Patrick Donnelly