Nmap nrpe-enum NSE Script

Script Overview

---

Script source code: https://github.com/nmap/nmap/tree/master/scripts/nrpe-enum.nse
Script categories: discovery, intrusive
Target service / protocol: nrpe
Target network port(s): 5666
List of CVEs: -

Script Description

---

The nrpe-enum.nse script queries Nagios Remote Plugin Executor (NRPE) daemons to obtain information such as load averages, process counts, logged in user information, etc.

This script attempts to execute the stock list of commands that are enabled. User-supplied arguments are not supported.

Nrpe-enum NSE Script Arguments

---

This is a full list of arguments supported by the nrpe-enum.nse script:

nrpe-enum.cmds

A colon-separated list of commands to be executed.

- - -
To use this script argument, add it to Nmap command line like in this example:

nmap --script=nrpe-enum --script-args nrpe-enum.cmds=value <target>

Nrpe-enum NSE Script Example Usage

---

Here's an example of how to use the nrpe-enum.nse script:

nmap --script nrpe-enum -p 5666 <host>

Nrpe-enum NSE Script Example Output

---

Here's a sample output from the nrpe-enum.nse script:

PORT     STATE SERVICE REASON
5666/tcp open  nrpe    syn-ack
| nrpe-enum:
| Command             State     Response
| check_hda1          CRITICAL  NRPE: Command 'check_hda1' not defined
| check_load          OK        OK - load average: 1.00, 1.00, 1.00|load1=1.000;15.000;30.000;0; load5=1.000;10.000;25.000;0; load15=1.000;5.000;20.000;0;
| check_total_procs   OK        PROCS OK: 5 processes
| check_users         WARNING   USERS WARNING - 2 users currently logged in |users=2;0;10;0
|_check_zombie_procs  OK        PROCS OK: 0 processes with STATE = Z

Nrpe-enum NSE Script Example XML Output

---

There is no sample XML output for this module. However, by providing the -oX <file> option, Nmap will produce a XML output and save it in the file.xml file.

Author

---

• Mak Kolybabi

References

---

• https://nmap.org/nsedoc/scripts/nrpe-enum.html
• https://github.com/nmap/nmap/tree/master/scripts/nrpe-enum.nse

See Also

---

Visit Nmap NSE Library for more scripts.

The nrpe-enum.nse script may fail with the following error messages. Check for the possible causes by using the code snippets highlighted below found in the script source code. This can often times help in identifying the root cause of the problem.

Failed to send NRPE query for command %s: %s

---

Here is a relevant code snippet related to the "Failed to send NRPE query for command %s: %s" error message:

170:	  end
171:	
172:	  -- Send query.
173:	  local status, err = sock:send(nrpe_write(cmd))
174:	  if not status then
175:	    stdnse.debug1("Failed to send NRPE query for command %s: %s", cmd, err)
176:	    sock:close()
177:	    return false, nil
178:	  end
179:	
180:	  -- Receive response.