smb-vuln-finder.sh 1.1 KB

12345678910111213141516171819
  1. #!/bin/bash
  2. ips="$1"
  3. echo "[*] Enumerating all SMB Shares"
  4. nmap -p 139,445 --script=smb-enum-shares -iL $ips -oA nmap/smb-enum-shares > /dev/null
  5. echo "[*] Enumerating SMB Vulnerability: MS06-025"
  6. nmap -p 139,445 --script=smb-vuln-ms06-025 -iL $ips -oA nmap/smb-vuln-ms06-025 > /dev/null
  7. echo "[*] Enumerating SMB Vulnerability: MS07-029"
  8. nmap -p 139,445 --script=smb-vuln-ms07-029 -iL $ips -oA nmap/smb-vuln-ms07-029 > /dev/null
  9. echo "[*] Enumerating SMB Vulnerability: MS08-067"
  10. nmap -p 139,445 --script=smb-vuln-ms08-067 -iL $ips -oA nmap/smb-vuln-ms08-067 > /dev/null
  11. echo "[*] Enumerating SMB Vulnerability: MS10-054"
  12. nmap -p 139,445 --script=smb-vuln-ms10-054 -iL $ips -oA nmap/smb-vuln-ms10-054 > /dev/null
  13. echo "[*] Enumerating SMB Vulnerability: MS10-061"
  14. nmap -p 139,445 --script=smb-vuln-ms10-061 -iL $ips -oA nmap/smb-vuln-ms10-061 > /dev/null
  15. echo "[*] Enumerating SMB Vulnerability: ms17-010 (aka EternalBlue)"
  16. nmap -p 139,445 --script=smb-vuln-ms17-010 -iL $ips -oA nmap/smb-vuln-ms17-010 > /dev/null
  17. echo "[*] Enumerating SMB Vulnerability: regsvc-dos"
  18. nmap -p 139,445 --script=smb-vuln-regsvc-dos -iL $ips -oA nmap/smb-vuln-regsvc-dos > /dev/null