================================================
_ _ _____ _____ _
| \ | |/ ___|| ___| | |
| \| |\ `--. | |__ __ _ _ __ ___ | |__
| . ` | `--. \| __| / _` || '__| / __|| '_ |
| |\ |/\__/ /| |___ | (_| || | | (__ | | | |
\_| \_/\____/ \____/ \__,_||_| \___||_| |_|
================================================
版本 0.4b http://goo.gl/8mFHE5 @jjtibaquira
邮箱: [email protected] | www.dragonjar.org
================================================
0.4b
$ pip install pyyaml python-i18n
# apt-get install unzip libreadline-gplv2-dev build-essential checkinstall unzip sqlite3 libsqlite3-dev -y
# yum -y install bzip2 groupinstall "Development Tools"
# sh install.sh
$ find /usr -type f -name "script.db" 2>/dev/null | awk 'gsub("script.db","")'
config:
scriptsPath: '/usr/local/share/nmap/scripts/'
filePath: '/usr/local/share/nmap/scripts/script.db'
fileBackup: 'scriptbk.db'
scriptdb: 'nmap_scripts.sqlite3'
categories: {"auth","broadcast","brute","default","discovery","dos","exploit","external","fuzzer","intrusive","malware","safe","version","vuln"}
$ python nsearch.py
================================================
_ _ _____ _____ _
| \ | |/ ___|| ___| | |
| \| |\ `--. | |__ __ _ _ __ ___ | |__
| . ` | `--. \| __| / _` || '__| / __|| '_ |
| |\ |/\__/ /| |___ | (_| || | | (__ | | | |
\_| \_/\____/ \____/ \__,_||_| \___||_| |_|
================================================
版本 0.4b http://goo.gl/8mFHE5 @jjtibaquira
邮箱: [email protected] | www.dragonjar.org
================================================
创建数据库 :nmap_scripts.sqlite3
创建脚本表 ...
创建类别表 ...
创建每个类别对应的脚本表 ...
将类别上传到类别表 ...
================================================
_ _ _____ _____ _
| \ | |/ ___|| ___| | |
| \| |\ `--. | |__ __ _ _ __ ___ | |__
| . ` | `--. \| __| / _` || '__| / __|| '_ |
| |\ |/\__/ /| |___ | (_| || | | (__ | | | |
\_| \_/\____/ \____/ \__,_||_| \___||_| |_|
================================================
版本 0.4b http://goo.gl/8mFHE5 @jjtibaquira
邮箱: [email protected] | www.dragonjar.org
================================================
检查数据库 ... nmap_scripts.sqlite3
数据库是最新的 nmap_scripts.sqlite3
nsearch>
================================================
_ _ _____ _____ _
| \ | |/ ___|| ___| | |
| \| |\ `--. | |__ __ _ _ __ ___ | |__
| . ` | `--. \| __| / _` || '__| / __|| '_ |
| |\ |/\__/ /| |___ | (_| || | | (__ | | | |
\_| \_/\____/ \____/ \__,_||_| \___||_| |_|
================================================
版本 0.4b http://goo.gl/8mFHE5 @jjtibaquira
邮箱: [email protected] | www.dragonjar.org
================================================
nsearch> help
Nsearch 命令
================
addfav clear delfav doc exit help history last modfav search showfav
nsearch>
================================================
_ _ _____ _____ _
| \ | |/ ___|| ___| | |
| \| |\ `--. | |__ __ _ _ __ ___ | |__
| . ` | `--. \| __| / _` || '__| / __|| '_ |
| |\ |/\__/ /| |___ | (_| || | | (__ | | | |
\_| \_/\____/ \____/ \__,_||_| \___||_| |_|
================================================
版本 0.4b http://goo.gl/8mFHE5 @jjtibaquira
邮箱: [email protected] | www.dragonjar.org
================================================
nsearch> help search
name : 按脚本名称搜索
category : 按类别搜索
author : 按作者搜索
用法:
search name:http
search category:exploit
search author:fyodor
search name:http category:exploit author:fyodor
nsearch>
================================================
_ _ _____ _____ _
| \ | |/ ___|| ___| | |
| \| |\ `--. | |__ __ _ _ __ ___ | |__
| . ` | `--. \| __| / _` || '__| / __|| '_ |
| |\ |/\__/ /| |___ | (_| || | | (__ | | | |
\_| \_/\____/ \____/ \__,_||_| \___||_| |_|
================================================
版本 0.4b http://goo.gl/8mFHE5 @jjtibaquira
邮箱: [email protected] | www.dragonjar.org
================================================
nsearch> search name:http author:calderon category:vuln
*** 名称 作者
[+] http-vuln-cve2012-1823.nse Paulino Calderon, Paul AMAR
[+] http-phpself-xss.nse Paulino Calderon
[+] http-wordpress-enum.nse Paulino Calderon
[+] http-adobe-coldfusion-apsa1301.nse Paulino Calderon
[+] http-vuln-cve2013-0156.nse Paulino Calderon
[+] http-awstatstotals-exec.nse Paulino Calderon
[+] http-axis2-dir-traversal.nse Paulino Calderon
[+] http-huawei-hg5xx-vuln.nse Paulino Calderon
[+] http-tplink-dir-traversal.nse Paulino Calderon
[+] http-trace.nse Paulino Calderon
[+] http-litespeed-sourcecode-download.nse Paulino Calderon
[+] http-majordomo2-dir-traversal.nse Paulino Calderon
[+] http-method-tamper.nse Paulino Calderon
================================================
_ _ _____ _____ _
| \ | |/ ___|| ___| | |
| \| |\ `--. | |__ __ _ _ __ ___ | |__
| . ` | `--. \| __| / _` || '__| / __|| '_ |
| |\ |/\__/ /| |___ | (_| || | | (__ | | | |
\_| \_/\____/ \____/ \__,_||_| \___||_| |_|
================================================
版本 0.4b http://goo.gl/8mFHE5 @jjtibaquira
邮箱: [email protected] | www.dragonjar.org
================================================
nsearch> doc ssh <TAB>
ssh-hostkey.nse ssh2-enum-algos.nse sshv1.nse
nsearch> doc sshv1.nse
local nmap = require "nmap"
local shortport = require "shortport"
local string = require "string"
description = [[
检查SSH服务器是否支持过时且不安全的SSH协议版本1。
]]
author = "Brandon Enright"
nsearch>
================================================
_ _ _____ _____ _
| \ | |/ ___|| ___| | |
| \| |\ `--. | |__ __ _ _ __ ___ | |__
| . ` | `--. \| __| / _` || '__| / __|| '_ |
| |\ |/\__/ /| |___ | (_| || | | (__ | | | |
\_| \_/\____/ \____/ \__,_||_| \___||_| |_|
================================================
版本 0.4b http://goo.gl/8mFHE5 @jjtibaquira
邮箱: [email protected] | www.dragonjar.org
================================================
nsearch> addfav name:http-vuln-cve2012-1823.nse ranking:great
[+] http-vuln-cve2012-1823.nse 脚本已成功添加
nsearch>
================================================
_ _ _____ _____ _
| \ | |/ ___|| ___| | |
| \| |\ `--. | |__ __ _ _ __ ___ | |__
| . ` | `--. \| __| / _` || '__| / __|| '_ |
| |\ |/\__/ /| |___ | (_| || | | (__ | | | |
\_| \_/\____/ \____/ \__,_||_| \___||_| |_|
================================================
版本 0.4b http://goo.gl/8mFHE5 @jjtibaquira
邮箱: [email protected] | www.dragonjar.org
================================================
nsearch> showfav
*** 名称 排名
[+] sslv2.nse normal
[+] http-vuln-cve2012-1823.nse great
nsearch>
================================================
_ _ _____ _____ _
| \ | |/ ___|| ___| | |
| \| |\ `--. | |__ __ _ _ __ ___ | |__
| . ` | `--. \| __| / _` || '__| / __|| '_ |
| |\ |/\__/ /| |___ | (_| || | | (__ | | | |
\_| \_/\____/ \____/ \__,_||_| \___||_| |_|
================================================
版本 0.4b http://goo.gl/8mFHE5 @jjtibaquira
邮箱: [email protected] | www.dragonjar.org
================================================
nsearch> showfav
*** 名称 排名
[+] sslv2.nse normal
[+] http-vuln-cve2012-1823.nse great
nsearch> modfav name:sslv2.nse newranking:great
[+] sslv2.nse 脚本已成功更新
nsearch> showfav
*** 名称 排名
[+] sslv2.nse great
[+] http-vuln-cve2012-1823.nse great
nsearch>
================================================
_ _ _____ _____ _
| \ | |/ ___|| ___| | |
| \| |\ `--. | |__ __ _ _ __ ___ | |__
| . ` | `--. \| __| / _` || '__| / __|| '_ |
| |\ |/\__/ /| |___ | (_| || | | (__ | | | |
\_| \_/\____/ \____/ \__,_||_| \___||_| |_|
================================================
版本 0.4b http://goo.gl/8mFHE5 @jjtibaquira
邮箱: [email protected] | www.dragonjar.org
================================================
nsearch> showfav
*** 名称 排名
[+] sslv2.nse great
[+] http-vuln-cve2012-1823.nse great
nsearch> delfav name:sslv2.nse
[+] sslv2.nse 脚本已成功删除
nsearch> showfav
*** 名称 排名
[+] http-vuln-cve2012-1823.nse great
nsearch>