Hoo e ka bang selemo le halofo ho tloha tokollong ea ho qetela ho lokolloa ha sekena sa ts'ireletso ea marang-rang , e etselitsoeng ho etsa tlhahlobo ea marang-rang le ho tseba litšebeletso tse sebetsang tsa marang-rang. Karolo Lingoliloeng tse 11 tse ncha tsa NSE ho fana ka boiketsetso ba liketso tse fapaneng le Nmap. Li-database tsa li-signature li nchafalitsoe ho tsebahatsa lits'ebetso tsa marang-rang le lits'ebetso tsa ts'ebetso.
Haufinyane tjena, mosebetsi o ka sehloohong o tobane le ho ntlafatsa le ho tsitsisa laeborari , e ntshetswang pele bakeng sa sethala Windows e le sebaka sa WinPcap le ho sebelisa sejoale-joale Windows API ea ho hapa lipakete. Lintlafatso tse nyane tse ngata li entsoe ho Nmap Scripting Engine (NSE) le lilaebraring tse amanang le eona. Nsock le Ncat joale li tšehetsa li-socket tsa AF_VSOCK, tse sebetsang holim'a Virtio 'me li sebelisetsoa puisano lipakeng tsa mechini ea sebele le hypervisor. Tlhaloso ea tšebeletso ea adb e kentsoe tšebetsong (Android Debug Bridge), e nolofalitsoe ka bohona ho lisebelisoa tse ngata tsa mohala.
Mengolo e mecha ea NSE:
- phatlalatso-hid-discoveryd - e etsa qeto ea ho ba teng ha lisebelisoa tsa HID (Lisebelisoa tsa batho ba li-interface) marang-rang a sebaka ka ho romela likōpo tsa khaso;
- broadcast-jenkins-discover - e lemoha li-server tsa Jenkins ho marang-rang a sebaka ka ho romela likōpo tsa phatlalatso;
- http-hp-ilo-info - e fumana lintlha ho tsoa ho li-server tsa HP tse tšehetsang theknoloji ea tsamaiso ea hole ;
- http-sap-netoaver-leak - e lemoha ho ba teng ha SAP Netweaver Portal ka Lefapha la Tsamaiso ea Tsebo e nolofalitsoeng, ho lumella ho fihlella ho sa tsejoeng;
- https-redirect - e lemoha li-server tsa HTTP tse tsamaisang likopo ho HTTPS dinomoro tsa boemakepe;
- lu-enum - e kenyelletsa li-blocks tse utloahalang (LU, Logical Units) tsa li-server tsa TN3270E;
- rdp-ntlm-info — e fumana tlhahisoleseding ea domain Windows ho tsoa lits'ebeletsong tsa RDP;
- smb-vuln-webexec - e hlahloba ho kenngoa ha tšebeletso ea WebExService (Cisco WebEx Meetings) le boteng ba , ho lumella ts'ebetso ea khoutu;
- smb-webexec-exploit - e sebelisa monyetla oa ho ba kotsing ho WebExService ho tsamaisa khoutu ka litokelo tsa SYSTEM;
- ubiquiti-discovery - e fumana boitsebiso bo tsoang tšebeletsong ea Ubiquiti Discovery mme e thusa ho tseba nomoro ea phetolelo;
- vulners - e romela lipotso ho database , ho lekola bofokoli ho ipapisitsoe le ts'ebeletso le mofuta oa ts'ebeliso o hlalositsoeng ha Nmap e ne e qala.
Source: opennet.ru
