Script upnp-info

Script types: portrule
Categories: default, discovery, safe
Download: https://svn.nmap.org/nmap/scripts/upnp-info.nse

Script Summary

Attempts to extract system information from the UPnP service.

Script Arguments

upnp-info.override

Controls whether we override the IP address information returned by the UPNP service for the location of the XML file that describes the device. Defaults to true for unicast hosts.

slaxml.debug

See the documentation for the slaxml library.

http.host, http.max-body-size, http.max-cache-size, http.max-pipeline, http.pipeline, http.truncated-ok, http.useragent

See the documentation for the http library.

max-newtargets, newtargets

See the documentation for the target library.

smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername

See the documentation for the smbauth library.

Example Usage

nmap -sU -p 1900 --script=upnp-info <target>

Script Output

|  upnp-info:  System/1.0 UPnP/1.0 IGD/1.0
|_ Location: http://192.168.1.1:80/UPnP/IGD.xml

Requires

• nmap
• shortport
• stdnse
• string
• upnp

---

Author:

• Thomas Buchanan

License: Same as Nmap--See https://nmap.org/book/man-legal.html

action

action (host, port)

Sends UPnP discovery packet to host, and extracts service information from results

Parameters

host

 

port

 

portrule

portrule (host, port)

Runs on UDP port 1900

Parameters

host

 

port