I’ve released a new version of my http-screenshot-html.nse script for NMAP. I also moved the hosting to GitHub as Google Code no longer allows file uploads.
https://github.com/afxdub/http-screenshot-html
Version 1.3 is mostly a bug fix release. The list of changes are below: (more…)
I’ve updated the http-screenshot-html script. You can download it at the Google Code page. The primary changes are:
- Compatibility with Lua 5.2 as used in NMAP 6.25
- Added the “imgquality” script argument to modify the image output quality of wkhtmltoimage.
See the script’s Manual for full details on using the script.
Also, it appears that there is a bug in Lua 5.2. If you use backslashes while calling a script, Lua will throw an error about an Invalid Escape Sequence. So make sure you use forward slashes when calling scripts or using script args in NMAP 6.25. This should be fixed in a future release of NMAP.
So, you have a PC on your network that you think might be infected with some malware. What do you do? Well, you could always PSExec into the computer and run a series of commands. But why not automate that process and store the results?
That was my motivation for writing this IR-Script. It is like a first response tool for investigating a possibly infected PC. You run the tool, gather a bunch of information, and store it for review. The script gathers the following information from a PC: (more…)
Latest version of the script is here:
http://giuoco.org/security/http-screenshot-html-13/
I’ve been tweaking the http-screenshot-html.nse script from my last post. I’ve added some features and modified some things: (more…)
Latest version of the script is here:
http://giuoco.org/security/http-screenshot-html-13/
About a month ago, the folks at SpiderLabs created an NMAP NSE script to grab a screenshot of any scanned hosts that were running web services. (Read about it here). The guys over at Pauldotcom were talking about the script and how it would be cool if it could output the results with links and full header information. I decided this would be a good opportunity for me to learn some Lua and do some cool things with NMAP. (more…)