2

I'm trying to find if an NTP server allows or disallows usage of the "monlist" command with Nmap, but I haven't found how to do that.

I found the following script : https://nmap.org/nsedoc/scripts/ntp-monlist.html

But I have no clue how to use / install it correctly.

UPDATE :

Result with the first command on a random NTP server :

  Starting Nmap 7.12 ( https://nmap.org ) at 2016-09-04 13:02 Paris, Madrid (heure d?été)

  Nmap scan report for 213.140.255.15

  Host is up (0.069s latency).

  PORT    STATE SERVICE

  123/udp open  ntp



  Nmap done: 1 IP address (1 host up) scanned in 7.50 seconds

With the second one :

  Starting Nmap 7.12 ( https://nmap.org ) at 2016-09-04 13:04 Paris, Madrid (heure d?été)

  Nmap scan report for 213.140.255.15

  Host is up (0.070s latency).

  PORT    STATE SERVICE

  123/udp open  ntp



  Nmap done: 1 IP address (1 host up) scanned in 7.32 seconds

But I'm not seeing any output on Monlist being enabled or not on the server. Is it perhaps because it's disabled ?

1 Answer 1

3
nmap --script +ntp-monlist -p 123 -sU <ip or hostname>

or perhaps

nmap --script ntp-monlist -p 123 -sUV <ip or hostname>
3
  • Thank you for your answer, I updated the main question with the results of the commands. Sep 4, 2016 at 11:48
  • Yeah, it looks broken. Try it with -d and --script-trace
    – atdre
    Sep 4, 2016 at 17:53
  • I tried what you said here is the result (I pasted it into pastebin because it's long) pastebin.com/umZPcxxG I'm still not sure about the output. Thanks for your help! Sep 7, 2016 at 20:45

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .