File http-mcmp

Script types: portrule

Categories: safe, discovery

Download: https://svn.nmap.org/nmap/scripts/http-mcmp.nse

User Summary

Checks if the webserver allows mod_cluster management protocol (MCMP) methods.

The script sends a MCMP PING message to determine protocol support, then issues the DUMP command to dump the current configuration seen by mod_cluster_manager.

References:

Script Arguments

slaxml.debug

http.host, http.max-body-size, http.max-cache-size, http.max-pipeline, http.pipeline, http.truncated-ok, http.useragent

smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername

Example Usage

See the documentation for the slaxml library.See the documentation for the http library.See the documentation for the smbauth library.

nmap -sV --script=http-mcmp <target>

Script Output

| http-mcmp: | status: Mod_cluster Management Protocol enabled | version: 1.2.0.Final | dump: | balancer: [1] Name: mycluster Sticky: 1 [JSESSIONID]/[jsessionid] remove: 0 force: 0 Timeout: 0 maxAttempts: 1 | node: [1:1],Balancer: mycluster,JVMRoute: 2ca5eb39-053e-336f-8708-85f753a3adf2,LBGroup: [],Host: 155.250.130.22,Port: 11000,Type: http,flushpackets: 0,flushwait: 10,ping: 10,smax: 1,ttl: 60,timeout: 0 | node: [2:2],Balancer: mycluster,JVMRoute: 3fef9557-32f8-309f-9b9a-af1e6951ee17,LBGroup: [],Host: 155.250.130.21,Port: 11000,Type: http,flushpackets: 0,flushwait: 10,ping: 10,smax: 1,ttl: 60,timeout: 0 | host: 1 [localhost] vhost: 1 node: 1 | host: 2 [localhost] vhost: 1 node: 2 | context: 1 [/stisvc] vhost: 1 node: 1 status: 1 |_context: 2 [/stisvc] vhost: 1 node: 2 status: 1 <elem key="status">Mod_cluster Management Protocol enabled</elem> <elem key="version">1.3.1.Final</elem> <elem key="dump"> balancer: [1] Name: seta-cluster-jboss Sticky: 1 [JSESSIONID]/[jsessionid] remove: 0 force: 0 Timeout: 0 maxAttempts: 1 node: [1:1],Balancer: seta-cluster-jboss,JVMRoute: sv-seta-sas-jb1,LBGroup: [],Host: 10.20.98.38,Port: 8009,Type: ajp,flushpackets: 0,flushwait: 10,ping: 10,smax: 2,ttl: 60,timeout: 0 node: [2:2],Balancer: seta-cluster-jboss,JVMRoute: sv-seta-sas-jb2,LBGroup: [],Host: 10.20.98.39,Port: 8009,Type: ajp,flushpackets: 0,flushwait: 10,ping: 10,smax: 2,ttl: 60,timeout: 0 host: 1 [example.com] vhost: 1 node: 1 host: 2 [localhost] vhost: 1 node: 1 host: 3 [default-host] vhost: 1 node: 1 host: 4 [example.com] vhost: 1 node: 2 host: 5 [localhost] vhost: 1 node: 2 host: 6 [default-host] vhost: 1 node: 2 context: 1 [/cgs] vhost: 1 node: 1 status: 1 context: 2 [/RequisicaoSeta] vhost: 1 node: 1 status: 1 context: 3 [/prodex-ensaio] vhost: 1 node: 1 status: 1 context: 4 [/gestordeacessos] vhost: 1 node: 1 status: 1 </elem>

Requires

Author:

Frank Spierings

License: Same as Nmap--See https://nmap.org/book/man-legal.html