New NSE Script (Check BlackLists against karma.securetia.com)
Fabian Martinez Portantier <[email protected]>
| Newsgroups | gmane.comp.security.nmap.devel |
|---|---|
| Message-ID | <CA+S5O6uUKmxsd-W389cJA9=fwQfFHBsSGL85gZMqNQPwfPhrKA@mail.gmail.com> |
Hello, I've developed a small NSE script that reports the blacklists that contains the scanned IP. It doesn't check with RBL/DNSBL, it uses the Karma free API to check blacklists that cannot be checked without download, so, it's a complement for scripts like dns-blacklists. Only uses the modules: http, ipOps, json, stdnse and table. The code is here: https://github.com/portantier/karma-nmap Here is an example of the output: $ nmap -sn -Pn --script karma 193.90.12.88 Starting Nmap 7.50 ( https://nmap.org ) at 2017-07-11 18:10 -03 Nmap scan report for freebogatov-3.multisec.no (193.90.12.88) Host is up. Host script results: | karma: | talos | voipbl | cybercrime_tracker | botscout | sblam |_ stopforumspam Regards! *--* *Fabian Martinez Portantier *| *Co-Founder* *Alicia Moreau de Justo 1150 Piso 3 Of. A306 - C1107AAX*Oficina: +54 11 5278-3457 | Fax: +54 11 4032-0171 _______________________________________________ Sent through the dev mailing list https://nmap.org/mailman/listinfo/dev Archived at http://seclists.org/nmap-dev/