The file is actually parsed as a list of hosts/networks, lines are leaked through error messages.
nmap -iL /path/to/input-file
- Evidence
- Upstream reference
- Environment
- Local host
- Compatibility
- Linux reference. macOS compatibility has not been checked for this command and execution context.
- Context
- sudo
- Native
- file-read
The file is actually parsed as a list of hosts/networks, lines are leaked through error messages.
nmap -iL /path/to/input-file
- Evidence
- Upstream reference
- Environment
- Local host
- Compatibility
- Linux reference. macOS compatibility has not been checked for this command and execution context.
- Context
- suid
- Native
- file-read
The file is actually parsed as a list of hosts/networks, lines are leaked through error messages.
nmap -iL /path/to/input-file
- Evidence
- Upstream reference
- Environment
- Local host
- Compatibility
- Linux reference. macOS compatibility has not been checked for this command and execution context.
- Context
- unprivileged
- Native
- file-read
The payload appears inside the regular nmap output.
nmap -oG=/path/to/output-file DATA
- Evidence
- Upstream reference
- Environment
- Local host
- Compatibility
- Linux reference. macOS compatibility has not been checked for this command and execution context.
- Context
- sudo
- Native
- file-write
The payload appears inside the regular nmap output.
nmap -oG=/path/to/output-file DATA
- Evidence
- Upstream reference
- Environment
- Local host
- Compatibility
- Linux reference. macOS compatibility has not been checked for this command and execution context.
- Context
- suid
- Native
- file-write
file-write
File WriteLinux
The payload appears inside the regular nmap output.
nmap -oG=/path/to/output-file DATA
- Evidence
- Upstream reference
- Environment
- Local host
- Compatibility
- Linux reference. macOS compatibility has not been checked for this command and execution context.
- Context
- unprivileged
- Native
- file-write
This allows to run Lua code (`...`).
echo '...' >/path/to/temp-file
nmap --script=/path/to/temp-file
- Evidence
- Upstream reference
- Environment
- Local host
- Compatibility
- Linux reference. macOS compatibility has not been checked for this command and execution context.
- Context
- sudo
- Native
- inherit, from:lua
This allows to run Lua code (`...`).
echo '...' >/path/to/temp-file
nmap --script=/path/to/temp-file
- Evidence
- Upstream reference
- Environment
- Local host
- Compatibility
- Linux reference. macOS compatibility has not been checked for this command and execution context.
- Context
- suid
- Native
- inherit, from:lua
This allows to run Lua code (`...`).
echo '...' >/path/to/temp-file
nmap --script=/path/to/temp-file
- Evidence
- Upstream reference
- Environment
- Local host
- Compatibility
- Linux reference. macOS compatibility has not been checked for this command and execution context.
- Context
- unprivileged
- Native
- inherit, from:lua