2

I'm trying to find if an NTP server allows or disallows usage of the "monlist" command with Nmap, but I haven't found how to do that.

I found the following script : https://nmap.org/nsedoc/scripts/ntp-monlist.html

But I have no clue how to use / install it correctly.

UPDATE :

Result with the first command on a random NTP server :

  Starting Nmap 7.12 ( https://nmap.org ) at 2016-09-04 13:02 Paris, Madrid (heure d?été)

  Nmap scan report for 213.140.255.15

  Host is up (0.069s latency).

  PORT    STATE SERVICE

  123/udp open  ntp



  Nmap done: 1 IP address (1 host up) scanned in 7.50 seconds

With the second one :

  Starting Nmap 7.12 ( https://nmap.org ) at 2016-09-04 13:04 Paris, Madrid (heure d?été)

  Nmap scan report for 213.140.255.15

  Host is up (0.070s latency).

  PORT    STATE SERVICE

  123/udp open  ntp



  Nmap done: 1 IP address (1 host up) scanned in 7.32 seconds

But I'm not seeing any output on Monlist being enabled or not on the server. Is it eventually because it's disabled ?

3
nmap --script +ntp-monlist -p 123 -sU <ip or hostname>

or perhaps

nmap --script ntp-monlist -p 123 -sUV <ip or hostname>
  • Thank you for your answer, I updated the main question with the results of the commands. – taze totero Sep 4 '16 at 11:48
  • Yeah, it looks broken. Try it with -d and --script-trace – atdre Sep 4 '16 at 17:53
  • I tried what you said here is the result (I pasted it into pastebin because it's long) pastebin.com/umZPcxxG I'm still not sure about the output. Thanks for your help! – taze totero Sep 7 '16 at 20:45

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.