-
Notifications
You must be signed in to change notification settings - Fork 2.7k
Description
Am trying to scan a website for form-based or HTTP-based authentication with the command
┌──(root㉿localhost)-[~]
└─# nmap --unprivileged --script http-auth-finder example.com
@output
Starting Nmap 7.93 ( https://nmap.org ) at 2023
01-08 08:41 UTC
Nmap scan report for example.com
(########)
Host is up (0.15s latency).
rDNS record for ########:
cloudproxy10069.sucuri.net
Not shown: 997 filtered tcp ports (no-response)
PORT STATE SERVICE
80/tcp open http
443/tcp open https
587/tcp open submission
Nmap done: 1 IP address (1 host up) scanned in 13.81 seconds
@expected output
PORT STATE SERVICE
-- 80/tcp open http
-- | http-auth-finder:
-- | url method
-- | http://example.com/auth1/index.html HTTP: Basic, Digest, Negotiate
-- |_ http://example.com/auth2/index.html FORM