Script `http-aspnet-debug`

Script types: portrule
Categories: vuln, discovery
Download: https://svn.nmap.org/nmap/scripts/http-aspnet-debug.nse

Script Summary

Determines if a ASP.NET application has debugging enabled using a HTTP DEBUG request.

The HTTP DEBUG verb is used within ASP.NET applications to start/stop remote debugging sessions. The script sends a 'stop-debug' command to determine the application's current configuration state but access to RPC services is required to interact with the debugging session. The request does not change the application debugging configuration.

Script Arguments

http-aspnet-debug.path: Path to URI. Default: /
slaxml.debug: See the documentation for the slaxml library.
http.host, http.max-body-size, http.max-cache-size, http.max-pipeline, http.pipeline, http.truncated-ok, http.useragent: See the documentation for the http library.
smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername: See the documentation for the smbauth library.

Example Usage

nmap --script http-aspnet-debug <target>

nmap --script http-aspnet-debug --script-args http-aspnet-debug.path=/path <target>

Script Output

80/tcp open  http    syn-ack
| http-aspnet-debug:
|_  status: DEBUG is enabled

Requires

Author:

Josh Amishav-Zlatin