Nmap informix-query NSE Script

Script Overview

---

Script source code: https://github.com/nmap/nmap/tree/master/scripts/informix-query.nse
Script categories: intrusive, auth
Target service / protocol: informix, tcp
Target network port(s): 1526, 9088, 9090, 9092
List of CVEs: -

Script Description

---

The informix-query.nse script runs a query against IBM Informix Dynamic Server using the given authentication credentials (see also: informix-brute).

Informix-query NSE Script Arguments

---

This is a full list of arguments supported by the informix-query.nse script:

informix-query.database

The name of the database to connect to (default: sysmaster)

informix-query.instance

The name of the instance to connect to

informix-query.password

The password used for authentication

informix-query.query

The query to run against the server (default: returns hostname and version)

informix-query.username

The username used for authentication

- - -
To use these script arguments, add them to the Nmap command line using the --script-args arg1=value,[arg2=value,..] syntax. For example:

nmap --script=informix-query --script-args informix-query.database=value,informix-query.instance=value <target>

Informix-query NSE Script Example Usage

---

Here's an example of how to use the informix-query.nse script:

nmap -p 9088 <host> --script informix-query --script-args informix-query.username=informix,informix-query.password=informix

Informix-query NSE Script Example Output

---

Here's a sample output from the informix-query.nse script:

PORT     STATE SERVICE
9088/tcp open  unknown syn-ack
| informix-query:
|   Information
|     User: informix
|     Database: sysmaster
|     Query: "SELECT FIRST 1 DBINFO('dbhostname') hostname, DBINFO('version','full') version FROM systables"
|   Results
|     hostname      version
|_    patrik-laptop IBM Informix Dynamic Server Version 11.50.UC4E

Informix-query NSE Script Example XML Output

---

There is no sample XML output for this module. However, by providing the -oX <file> option, Nmap will produce a XML output and save it in the file.xml file.

Author

---

• Patrik Karlsson

References

---

• https://nmap.org/nsedoc/scripts/informix-query.html
• https://github.com/nmap/nmap/tree/master/scripts/informix-query.nse

See Also

---

Related NSE scripts to the informix-query.nse script:

• informix-brute.nse
• informix-tables.nse

Visit Nmap NSE Library for more scripts.

The informix-query.nse script may fail with the following error messages. Check for the possible causes by using the code snippets highlighted below found in the script source code. This can often times help in identifying the root cause of the problem.

No credentials specified (see informix-table.username and informix-table.password)

---

Here is a relevant code snippet related to the "No credentials specified (see informix-table.username and informix-table.password)" error message:

65:	  if ( not(user) ) then
66:	    if ( nmap.registry['informix-brute'] and nmap.registry['informix-brute'][1]["username"] ) then
67:	      user = nmap.registry['informix-brute'][1]["username"]
68:	      pass = nmap.registry['informix-brute'][1]["password"]
69:	    else
70:	      return stdnse.format_output(false, "No credentials specified (see informix-table.username and informix-table.password)")
71:	    end
72:	  end
73:	
74:	  status, data = helper:Connect()
75:	  if ( not(status) ) then