Chapter 9. Writing Your Own NSE Scripts

Note

This chapter shows you how to do some things that in many situations might be illegal, unethical, a violation of the terms of service, or just not a good idea. It is provided here to give you information that may be of use to protect yourself against threats and make your own system more secure. Before following these instructions, be sure you are on the right side of the legal and ethical line... use your powers for good!

In this chapter, we will cover:

• Making HTTP requests to identify vulnerable Trendnet webcams

• Sending UDP payloads by using NSE sockets

• Exploiting a path traversal vulnerability with NSE

• Writing a brute force script

• Working with the web crawling library

• Reporting vulnerabilities correctly in NSE scripts

• Writing your own NSE library

• Working with NSE threads, condition variables, and mutexes in NSE