Book Image

Mastering the Nmap Scripting Engine

By : Paulino Calderon
Book Image

Mastering the Nmap Scripting Engine

By: Paulino Calderon

Overview of this book

Related Content you might be interested in

Current Title:

Small book image
Mastering the Nmap Scripting Engine
Paulino Calderon
Feb, 2015 | 244 pages
No titles found
Table of Contents (23 chapters)
Mastering the Nmap Scripting Engine
Mastering the Nmap Scripting Engine
Credits
Credits
About the Author
About the Author
Acknowledgments
Acknowledgments
About the Reviewers
About the Reviewers
www.PacktPub.com
www.PacktPub.com
Preface
Preface
Free Chapter
1
Introduction to the Nmap Scripting Engine
Introduction to the Nmap Scripting Engine
Installing Nmap
Running NSE scripts
Script categories
Scan phases and NSE
Applications of NSE scripts
Setting up a development environment
Adding new scripts
Summary
2
Lua Fundamentals
Lua Fundamentals
Quick notes about Lua
Flow control structures
Data types
String handling
Common data structures
I/O operations
Coroutines
Metatables and metamethods
Summary
3
NSE Data Files
NSE Data Files
Locating your data directory
Data directory search order
Username and password lists used in brute-force attacks
Web application auditing data files
DBMS-auditing data files
Java Debug Wire Protocol data files
Other NSE data files
Other Nmap data files
Summary
4
Exploring the Nmap Scripting Engine API and Libraries
Exploring the Nmap Scripting Engine API and Libraries
Understanding the structure of an NSE script
Exploring environment variables
Accessing the Nmap API
The NSE registry
Writing NSE libraries
Exploring other popular NSE libraries
Summary
5
Enhancing Version Detection
Enhancing Version Detection
Understanding version detection mode in NSE
Writing your own version detection scripts
Examples of version detection scripts
Summary
6
Developing Brute-force Password-auditing Scripts
Developing Brute-force Password-auditing Scripts
Working with the brute NSE library
Reading usernames and password lists with the unpwdb NSE library
Managing user credentials found during scans
Writing an NSE script to launch password-auditing attacks against the MikroTik RouterOS API
Summary
7
Formatting the Script Output
Formatting the Script Output
Output formats and Nmap Scripting Engine
XML structured output
Printing verbosity messages
Including debugging information
The weakness of the grepable format
NSE script output in the HTML report
Summary
8
Working with Network Sockets and Binary Data
Working with Network Sockets and Binary Data
Working with NSE sockets
Understanding advanced network I/O
Manipulating raw packets
Raw packet handling and NSE sockets
Summary
9
Parallelism
Parallelism
Parallelism options in Nmap
Parallelism mechanisms in Lua
Parallelism mechanisms in NSE
Consuming TCP connections with NSE
Summary
10
Vulnerability Detection and Exploitation
Vulnerability Detection and Exploitation
Vulnerability scanning
Reporting vulnerabilities
Summary
Scan Phases
Scan Phases
NSE Script Template
NSE Script Template
Other templates online
Script Categories
Script Categories
Nmap Options Mind Map
Nmap Options Mind Map
References
References
Index
Index

Data directory search order

NSE will automatically attempt to retrieve data files from different sources, and the order of this search determines which files will be used when more than one data file source is available.

NSE will attempt to find the data files in the following order:

  • The script argument, --data-dir (if set)

  • The environment variable, NMAPDIR

  • The ~/.nmap directory of the running user (only on non-Windows systems)

  • The installation directory

  • The installation directory with ../share/nmap appended (only on non-Windows systems)

  • The location defined at compile time

Previous Section
End of Section 3
Next Section