Nmap Development mailing list archives

Is this command-line syntax correct? And is mysql-vuln-cve2012-2122.nse on the main repository?


From: Richard Miles <richard.k.miles () googlemail com>
Date: Tue, 21 Aug 2012 02:07:26 -0500

Hi all

Today I was trying to do a nmap scan on my whole internal network testing
for all these categories:

- auth
- brute
- exploit
- intrusive
- vuln

However I don't want the following scripts to run to prevent account
lockout here:

- smb-brute
- ldap-brute

I did the following command:

nmap -n -sV -O --script "(auth and brute and exploit and intrusive and
vuln) and not smb-brute or ldap-brute" -iL hosts.txt -oN Test.txt

However I'm not sure if it's working because I got absolutely no output
from any script, OK, maybe my network is not vulnerable to any of these
tests, but I'm not sure, because it was very fast to run and for example I
have a lot of MySQL servers, telnet servers and web applications /
web-servers.

Is this syntax correct for my needs? If not, can someone please point me
the correct one?

I also saw a nice script (
http://seclists.org/nmap-dev/2012/q2/att-711/mysql-vuln-cve2012-2122.nse),
but I was unable to find it on the main repository. There is a plan to make
it part of main nmap repository?

Thanks again.
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/


Current thread: