diff --git a/config/scanner.toml b/config/scanner.toml index 0e13f29..17add9f 100644 --- a/config/scanner.toml +++ b/config/scanner.toml @@ -208,7 +208,7 @@ command = """ name = 'nikto' transport_protocol = 'tcp' command = """ - nikto \ + #nikto \ -ask no \ -Cgidirs all \ -host {hostname} \ @@ -246,6 +246,14 @@ command = """ {address} \ """ +[[services]] +name = 'ipmi' +application_protocol = 'ipmi|asf-rmcp' + +[[services.scans]] +name = 'nmap' +command = 'nmap -Pn -sU -sV -p {port} --script="banner,ipmi-version,ipmi-brute,ipmi-cipher-zero" -oN "{result_file}.log" -oX "{result_file}.xml" {address}' + [[services]] name = 'isakmp' application_protocol = 'isakmp' @@ -267,6 +275,14 @@ command = """ {address} \ """ +[[services]] +name = 'jdwp' +application_protocol = 'jdwp|msgsrvr' + +[[services.scans]] +name = 'nmap' +command = 'nmap -Pn -sT -sV --version-all -p {port} --script="banner,jdwp* and not exploit" -oN "{result_file}.log" -oX "{result_file}.xml" {address}' + [[services]] name = 'kerberos' application_protocol = 'kerberos|kpasswd' @@ -454,7 +470,7 @@ command = """ [[services]] name = 'rmi' -application_protocol = 'rmiregistry' +application_protocol = 'rmiregistry|java-rmi' [[services.scans]] name = 'nmap' @@ -469,6 +485,14 @@ command = """ {address} \ """ +[[services.scans]] +name = 'rmg-enum' +command = 'rmg enum {address} {port} | tee {result_file}.log' + +[[services.scans]] +name = 'rmg-guess' +command = 'rmg guess {address} {port} | tee {result_file}.log' + [[services]] name = 'rpc' application_protocol = '^erpc|msrpc|rpcbind' @@ -565,7 +589,7 @@ command = """ -Pn \ -sV \ -p {port} \ - --script="banner,smtp* and not (brute or broadcast or dos or external or fuzzer)" \ + --script="banner,smtp* and not (brute or broadcast or dos or exploit)" \ -oN "{result_file}.log" -oX "{result_file}.xml" \ {address} \ """ @@ -583,6 +607,7 @@ command = """ -sV \ -p {port} \ --script="banner,snmp* and not (brute or broadcast or dos or external or fuzzer)" \ + --script-args snmp-brute.communitiesdb="/usr/share/seclists/Discovery/SNMP/common-snmp-community-strings-onesixtyone.txt" \ -oN "{result_file}.log" -oX "{result_file}.xml" \ {address} \ """