Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Nmap for newbs

(Aug 25, 2024 09:25 AM)Hosting Farmer Wrote:  Good guide, how about nmap scan for page title string grep or other? Example results list.txt "Ajenti" from ip most password are default.

(Aug 25, 2024 01:07 PM)DramaKing Wrote:  I misunderstood and don't know every Nmap script. Didn't think I was being 'toxic.' I wonder if this hosting company promoter has heard of Google dorks. The script can only be run on a single URL and grepable Nmap output has issues.

You can run the nmap script on multiple urls like this " nmap --script http-title.nse -iL targets.txt "

Where targets.txt can be your IP or domain names without the HTTP protocol like

google.com
hackforums.net
...
..
172.33.21.2
10.10.10.2
..
..
etc....

I guess that's what promoter want probably.

I don't know if nmap checks for Ajenti exploits , you can just look it up on github and look for the RCE exploits you looking for.

Nmap -sC flag uses all scripts but that's too slow and noisy , might as well just use the ones from github or exploit-db https://www.exploit-db.com/exploits/47497

or code urself.
[Image: j90qyxk.gif]
(Aug 26, 2024 07:33 AM)Money- Wrote:  You can run the nmap script on multiple urls like this " nmap --script http-title.nse -iL targets.txt "

Where targets.txt can be your IP or domain names without the HTTP protocol like

google.com
hackforums.net
...
..
172.33.21.2
10.10.10.2
..
..
etc....

I guess that's what promoter want probably.

I don't know if nmap checks for Ajenti exploits , you can just look it up on github and look for the RCE exploits you looking for.

Nmap -sC flag uses all scripts but that's too slow and noisy , might as well just use the ones from github or exploit-db https://www.exploit-db.com/exploits/47497

or code urself.

Excellent questions, I will try build code it language C/C++ multi thread faster scan target find if has title page "Ajenti" to save logs.txt ip:port, Most install Ajenti for web panel linux login default username: root and passowrd: admin 😁
(Aug 26, 2024 08:31 AM)Hosting Farmer Wrote:  Excellent questions, I will try build code it language C/C++ multi thread faster scan target find if has title page "Ajenti" to save logs.txt ip:port, Most install Ajenti for web panel linux login default username: root and passowrd: admin 😁

You can use this tool called " httpx " to directly grep the title " ajenti " ask chatgpt to give u a linux command with httpx that will accept list of URLs/IPs to output into logs.txt if its "ajenti" oneliner code that's it, Don't really need C/C++ but yea up to you bro if u want speed.
[Image: j90qyxk.gif]
Thanks for the info, very useful
Thanks for the info, I'm currently learning the use of nmap, and this to the point document showed me its potential... Appreciate it !
can u send me for free? no bytes 🙁 [warn]


Possibly Related Threads...
Thread / Author Replies Views Last Post
by PerfectMay 19, 2024 06:56 AM 5 196 May 19, 2024 06:56 AM
Last Post: Perfect
by PerfectMay 18, 2024 07:14 PM 0 114 May 18, 2024 07:14 PM
Last Post: Perfect
by xxxzzz1755May 23, 2017 12:07 PM 7 647 May 23, 2017 12:07 PM
Last Post: Diditdyan