Introduction
Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed diam nonumy eirmod tempor invidunt ut labore et dolore magna aliquyam erat, sed diam voluptua. At vero eos et accusam et justo duo dolores et ea rebum. Stet clita kasd gubergren, no sea takimata sanctus est Lorem ipsum dolor sit amet.
Tools
To authorize, use this code:
Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed diam nonumy eirmod tempor invidunt ut labore et dolore magna aliquyam erat, sed diam voluptua. At vero eos et accusam et justo duo dolores et ea rebum. Stet clita kasd gubergren, no sea takimata sanctus est Lorem ipsum dolor sit amet.
Authorization: meowmeowmeow
Checker
FTP
Run Nmap with this command
nmap -sSV --script ftp-anon.nse -p21 IP -T4 --reason
The above command returns output like this:
PORT STATE SERVICE
21/tcp open ftp
| ftp-anon: Anonymous FTP login allowed (FTP code 230)
| -rw-r--r-- 1 1170 924 31 Mar 28 2001 .banner
| d--x--x--x 2 root root 1024 Jan 14 2002 bin
| d--x--x--x 2 root root 1024 Aug 10 1999 etc
| drwxr-srwt 2 1170 924 2048 Jul 19 18:48 incoming [NSE: writeable]
| d--x--x--x 2 root root 1024 Jan 14 2002 lib
| drwxr-sr-x 2 1170 924 1024 Aug 5 2004 pub
|_Only 6 shown. Use --script-args ftp-anon.maxlist=-1 to see all.
FTP anonymous login
Action (host, port)
Connects to the FTP server and checks if the server allows anonymous logins.
Flags Parameters
Parameter | Default | Description |
---|---|---|
host | false | If set to true, the result will also include blabla. |
port | true | If set to false, the result will include blablabla. |
RDP
The above command returns output like this:
NLA,FIPS,ENC
Network Level Authentication (NLA) Disabled
Terminal Services Encryption Level is Medium or Low, or
Terminal Services Encryption Level is not FIPS-140 Compliant
HTTP Request
GET http://example.com/<ID>
Parameters
Parameter | Description |
---|---|
ID | The ID |
SMBv1
nmap -sV -T5 -Pn -p 445 --script smb-protocols IPs
The above command returns output like this:
wip
Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed diam nonumy eirmod tempor invidunt ut labore et dolore magna aliquyam erat, sed diam voluptua. At vero eos et accusam et justo duo dolores et ea rebum. Stet clita kasd gubergren, no sea takimata sanctus est Lorem ipsum dolor sit amet.
Explaination
DELETE http://example.com/kittens/<ID>
Parameters
Parameter | Description |
---|---|
ID | The ID |
Errors
The Kittn API uses the following error codes:
Error Code | Meaning |
---|---|
400 | Bad Request – Your request sucks |
401 | Unauthorized – Your API key is wrong |
403 | Forbidden – The command requested is hidden for administrators only |
404 | Not Found – The specified command could not be found |
405 | Method Not Allowed – You tried to access a command with an invalid method |
406 | Not Acceptable – You requested a format that isn’t json |
410 | Gone – The command requested has been removed from our servers |
418 | I’m a teapot |
429 | Too Many Requests – You’re requesting too many commands! Slow down! |
500 | Internal Server Error – We had a problem with our server. Try again later. |
503 | Service Unavailable – We’re temporarially offline for maintanance. Please try again later. |