(Aug 25, 2024 09:25 AM)Hosting Farmer Wrote: Good guide, how about nmap scan for page title string grep or other? Example results list.txt "Ajenti" from ip most password are default.
(Aug 25, 2024 01:07 PM)DramaKing Wrote: I misunderstood and don't know every Nmap script. Didn't think I was being 'toxic.' I wonder if this hosting company promoter has heard of Google dorks. The script can only be run on a single URL and grepable Nmap output has issues.
You can run the nmap script on multiple urls like this " nmap --script http-title.nse -iL targets.txt "
Where targets.txt can be your IP or domain names without the HTTP protocol like
google.com
hackforums.net
...
..
172.33.21.2
10.10.10.2
..
..
etc....
I guess that's what promoter want probably.
I don't know if nmap checks for Ajenti exploits , you can just look it up on github and look for the RCE exploits you looking for.
Nmap -sC flag uses all scripts but that's too slow and noisy , might as well just use the ones from github or exploit-db https://www.exploit-db.com/exploits/47497
or code urself.


![[Image: j90qyxk.gif]](https://i.imgur.com/j90qyxk.gif)
