Nmap nat-pmp-info NSE Script


This page contains detailed information about how to use the nat-pmp-info NSE script. For list of all NSE scripts, visit the Nmap NSE Library.

Script Overview

Script source code: https://github.com/nmap/nmap/tree/master/scripts/nat-pmp-info.nse
Script categories: default, discovery, safe
Target service / protocol: nat-pmp, udp
Target network port(s): 5351
List of CVEs: -

Script Description

The nat-pmp-info.nse script gets the routers WAN IP using the NAT Port Mapping Protocol (NAT-PMP). The NAT-PMP protocol is supported by a broad range of routers including:

  • Apple AirPort Express
  • Apple AirPort Extreme
  • Apple Time Capsule
  • DD-WRT
  • OpenWrt v8.09 or higher, with MiniUPnP daemon
  • pfSense v2.0
  • Tarifa (firmware) (Linksys WRT54G/GL/GS)
  • Tomato Firmware v1.24 or higher. (Linksys WRT54G/GL/GS and many more)
  • Peplink Balance

Nat-pmp-info NSE Script Arguments

The nat-pmp-info.nse script does not have any arguments.

Nat-pmp-info NSE Script Example Usage

Here's an example of how to use the nat-pmp-info.nse script:

nmap -sU -p 5351 --script=nat-pmp-info <target>

Nat-pmp-info NSE Script Example Output

Here's a sample output from the nat-pmp-info.nse script:

| nat-pmp-info:
|_  WAN IP: 192.0.2.13

Nat-pmp-info NSE Script Example XML Output

Here's a sample XML output from the nat-pmp-info.nse script produced by providing the -oX <file> Nmap option:

 <elem key="WAN IP">192.0.2.13</elem>

Author

  • Patrik Karlsson

References

See Also

Related NSE scripts to the nat-pmp-info.nse script:

Visit Nmap NSE Library for more scripts.

Version

This page has been created based on Nmap version 7.92.