Nmap creds-summary NSE Script

Script Overview

---

Script source code: https://github.com/nmap/nmap/tree/master/scripts/creds-summary.nse
Script categories: auth, default, safe
Target service / protocol: -
Target network port(s): -
List of CVEs: -

Script Description

---

The creds-summary.nse script lists all discovered credentials (e.g. from brute force and default password checking scripts) at end of scan.

Creds-summary NSE Script Arguments

---

This is a full list of arguments supported by the creds-summary.nse script:

creds.global

Credentials to be returned by Credentials.getCredentials regardless of the service.

creds.[service]

Credentials to be returned by Credentials.getCredentials for [service]. E.g. creds.http=admin:password

- - -
To use these script arguments, add them to the Nmap command line using the --script-args arg1=value,[arg2=value,..] syntax. For example:

nmap --script=creds-summary --script-args creds.global=value,creds.\[service]=value <target>

Creds-summary NSE Script Example Usage

---

Here's an example of how to use the creds-summary.nse script:

nmap --script=creds-summary <target>

Creds-summary NSE Script Example Output

---

Here's a sample output from the creds-summary.nse script:

| creds-summary:
|   10.10.10.10
|     22/ssh
|       lisbon:jane - Account is valid
|   10.10.10.20
|     21/ftp
|       jane:redjohn - Account is locked
|     22/ssh
|       cho:secret11 - Account is valid
|     23/telnet
|       rigsby:pelt - Account is valid
|       pelt:rigsby - Password needs to be changed at next logon
|     80/http
|       lisbon:jane - Account is valid
|       jane:redjohn - Account is locked
|_      cho:secret11 - Account is valid

Creds-summary NSE Script Example XML Output

---

There is no sample XML output for this module. However, by providing the -oX <file> option, Nmap will produce a XML output and save it in the file.xml file.

Author

---

• Patrik Karlsson

References

---

• https://nmap.org/nsedoc/scripts/creds-summary.html
• https://github.com/nmap/nmap/tree/master/scripts/creds-summary.nse

See Also

---

Visit Nmap NSE Library for more scripts.