mirror of
https://github.com/nmap/nmap.git
synced 2026-01-08 07:29:03 +00:00
Final re-indent for scripts.
This commit is contained in:
dmiller
@@ -60,234 +60,234 @@ portrule = shortport.portnumber(161, "udp", {"open", "open|filtered"})
|
||||
local communitiestable = {}
|
||||
|
||||
local filltable = function(filename, table)
|
||||
if #table ~= 0 then
|
||||
return true
|
||||
end
|
||||
if #table ~= 0 then
|
||||
return true
|
||||
end
|
||||
|
||||
local file = io.open(filename, "r")
|
||||
local file = io.open(filename, "r")
|
||||
|
||||
if not file then
|
||||
return false
|
||||
end
|
||||
if not file then
|
||||
return false
|
||||
end
|
||||
|
||||
for l in file:lines() do
|
||||
-- Comments takes up a whole line
|
||||
if not l:match("#!comment:") then
|
||||
table[#table + 1] = l
|
||||
end
|
||||
end
|
||||
for l in file:lines() do
|
||||
-- Comments takes up a whole line
|
||||
if not l:match("#!comment:") then
|
||||
table[#table + 1] = l
|
||||
end
|
||||
end
|
||||
|
||||
file:close()
|
||||
file:close()
|
||||
|
||||
return true
|
||||
return true
|
||||
end
|
||||
|
||||
local closure = function(table)
|
||||
local i = 1
|
||||
local i = 1
|
||||
|
||||
return function(cmd)
|
||||
if cmd == "reset" then
|
||||
i = 1
|
||||
return
|
||||
end
|
||||
local elem = table[i]
|
||||
if elem then i = i + 1 end
|
||||
return elem
|
||||
end
|
||||
return function(cmd)
|
||||
if cmd == "reset" then
|
||||
i = 1
|
||||
return
|
||||
end
|
||||
local elem = table[i]
|
||||
if elem then i = i + 1 end
|
||||
return elem
|
||||
end
|
||||
end
|
||||
|
||||
local communities_raw = function(path)
|
||||
if not path then
|
||||
return false, "Cannot find communities list"
|
||||
end
|
||||
if not path then
|
||||
return false, "Cannot find communities list"
|
||||
end
|
||||
|
||||
if not filltable(path, communitiestable) then
|
||||
return false, "Error parsing communities list"
|
||||
end
|
||||
if not filltable(path, communitiestable) then
|
||||
return false, "Error parsing communities list"
|
||||
end
|
||||
|
||||
return true, closure(communitiestable)
|
||||
return true, closure(communitiestable)
|
||||
end
|
||||
|
||||
local communities = function()
|
||||
local communities_file = stdnse.get_script_args('snmp-brute.communitiesdb') or
|
||||
nmap.fetchfile("nselib/data/snmpcommunities.lst")
|
||||
local communities_file = stdnse.get_script_args('snmp-brute.communitiesdb') or
|
||||
nmap.fetchfile("nselib/data/snmpcommunities.lst")
|
||||
|
||||
if communities_file then
|
||||
stdnse.print_debug(1, "%s: Using the %s as the communities file",
|
||||
SCRIPT_NAME, communities_file)
|
||||
if communities_file then
|
||||
stdnse.print_debug(1, "%s: Using the %s as the communities file",
|
||||
SCRIPT_NAME, communities_file)
|
||||
|
||||
local status, iterator = communities_raw(communities_file)
|
||||
local status, iterator = communities_raw(communities_file)
|
||||
|
||||
if not status then
|
||||
return false, iterator
|
||||
end
|
||||
if not status then
|
||||
return false, iterator
|
||||
end
|
||||
|
||||
local time_limit = unpwdb.timelimit()
|
||||
local count_limit = 0
|
||||
local time_limit = unpwdb.timelimit()
|
||||
local count_limit = 0
|
||||
|
||||
if stdnse.get_script_args("unpwdb.passlimit") then
|
||||
count_limit = tonumber(stdnse.get_script_args("unpwdb.passlimit"))
|
||||
end
|
||||
if stdnse.get_script_args("unpwdb.passlimit") then
|
||||
count_limit = tonumber(stdnse.get_script_args("unpwdb.passlimit"))
|
||||
end
|
||||
|
||||
return true, unpwdb.limited_iterator(iterator, time_limit, count_limit)
|
||||
else
|
||||
stdnse.print_debug(1, "%s: Cannot read the communities file, using the nmap username/password database instead",
|
||||
SCRIPT_NAME)
|
||||
return true, unpwdb.limited_iterator(iterator, time_limit, count_limit)
|
||||
else
|
||||
stdnse.print_debug(1, "%s: Cannot read the communities file, using the nmap username/password database instead",
|
||||
SCRIPT_NAME)
|
||||
|
||||
return unpwdb.passwords()
|
||||
end
|
||||
return unpwdb.passwords()
|
||||
end
|
||||
end
|
||||
|
||||
local send_snmp_queries = function(socket, result, nextcommunity)
|
||||
local condvar = nmap.condvar(result)
|
||||
local condvar = nmap.condvar(result)
|
||||
|
||||
local request = snmp.buildGetRequest({}, "1.3.6.1.2.1.1.3.0")
|
||||
local request = snmp.buildGetRequest({}, "1.3.6.1.2.1.1.3.0")
|
||||
|
||||
local payload, status, response, err
|
||||
local community = nextcommunity()
|
||||
local payload, status, response, err
|
||||
local community = nextcommunity()
|
||||
|
||||
while community do
|
||||
if result.status == false then
|
||||
--in case the sniff_snmp_responses thread was shut down
|
||||
condvar("signal")
|
||||
return
|
||||
end
|
||||
payload = snmp.encode(snmp.buildPacket(request, 0, community))
|
||||
status, err = socket:send(payload)
|
||||
if not status then
|
||||
result.status = false
|
||||
result.msg = "Could not send SNMP probe"
|
||||
condvar "signal"
|
||||
return
|
||||
end
|
||||
while community do
|
||||
if result.status == false then
|
||||
--in case the sniff_snmp_responses thread was shut down
|
||||
condvar("signal")
|
||||
return
|
||||
end
|
||||
payload = snmp.encode(snmp.buildPacket(request, 0, community))
|
||||
status, err = socket:send(payload)
|
||||
if not status then
|
||||
result.status = false
|
||||
result.msg = "Could not send SNMP probe"
|
||||
condvar "signal"
|
||||
return
|
||||
end
|
||||
|
||||
community = nextcommunity()
|
||||
end
|
||||
community = nextcommunity()
|
||||
end
|
||||
|
||||
result.sent = true
|
||||
condvar("signal")
|
||||
result.sent = true
|
||||
condvar("signal")
|
||||
end
|
||||
|
||||
local sniff_snmp_responses = function(host, port, lport, result)
|
||||
local condvar = nmap.condvar(result)
|
||||
local condvar = nmap.condvar(result)
|
||||
|
||||
local pcap = nmap.new_socket()
|
||||
pcap:set_timeout(host.times.timeout * 1000 * 3)
|
||||
local ip = host.bin_ip_src
|
||||
ip = string.format("%d.%d.%d.%d",ip:byte(1),ip:byte(2),ip:byte(3),ip:byte(4))
|
||||
pcap:pcap_open(host.interface, 104, false,"dst host " .. ip .. " and udp and src port 161 and dst port " .. lport)
|
||||
local pcap = nmap.new_socket()
|
||||
pcap:set_timeout(host.times.timeout * 1000 * 3)
|
||||
local ip = host.bin_ip_src
|
||||
ip = string.format("%d.%d.%d.%d",ip:byte(1),ip:byte(2),ip:byte(3),ip:byte(4))
|
||||
pcap:pcap_open(host.interface, 104, false,"dst host " .. ip .. " and udp and src port 161 and dst port " .. lport)
|
||||
|
||||
-- last_run indicated whether there will be only one more receive
|
||||
local last_run = false
|
||||
-- last_run indicated whether there will be only one more receive
|
||||
local last_run = false
|
||||
|
||||
-- receive even when status=false untill all the probes are sent
|
||||
while true do
|
||||
local status, plen, l2, l3, _ = pcap:pcap_receive()
|
||||
-- receive even when status=false untill all the probes are sent
|
||||
while true do
|
||||
local status, plen, l2, l3, _ = pcap:pcap_receive()
|
||||
|
||||
if status then
|
||||
local p = packet.Packet:new(l3,#l3)
|
||||
if not p:udp_parse() then
|
||||
--shouldn't happen
|
||||
result.status = false
|
||||
result.msg = "Wrong type of packet received"
|
||||
condvar "signal"
|
||||
return
|
||||
end
|
||||
if status then
|
||||
local p = packet.Packet:new(l3,#l3)
|
||||
if not p:udp_parse() then
|
||||
--shouldn't happen
|
||||
result.status = false
|
||||
result.msg = "Wrong type of packet received"
|
||||
condvar "signal"
|
||||
return
|
||||
end
|
||||
|
||||
local response = p:raw(28, #p.buf)
|
||||
local res
|
||||
_, res = snmp.decode(response)
|
||||
local response = p:raw(28, #p.buf)
|
||||
local res
|
||||
_, res = snmp.decode(response)
|
||||
|
||||
if type(res) == "table" then
|
||||
result.communities[ #(result.communities) + 1 ] = res[2]
|
||||
else
|
||||
result.status = false
|
||||
result.msg = "Wrong type of SNMP response received"
|
||||
condvar "signal"
|
||||
return
|
||||
end
|
||||
else
|
||||
if last_run then
|
||||
condvar "signal"
|
||||
return
|
||||
else
|
||||
if result.sent then
|
||||
last_run = true
|
||||
end
|
||||
end
|
||||
end
|
||||
end
|
||||
pcap:close()
|
||||
condvar "signal"
|
||||
return
|
||||
if type(res) == "table" then
|
||||
result.communities[ #(result.communities) + 1 ] = res[2]
|
||||
else
|
||||
result.status = false
|
||||
result.msg = "Wrong type of SNMP response received"
|
||||
condvar "signal"
|
||||
return
|
||||
end
|
||||
else
|
||||
if last_run then
|
||||
condvar "signal"
|
||||
return
|
||||
else
|
||||
if result.sent then
|
||||
last_run = true
|
||||
end
|
||||
end
|
||||
end
|
||||
end
|
||||
pcap:close()
|
||||
condvar "signal"
|
||||
return
|
||||
end
|
||||
|
||||
action = function(host, port)
|
||||
local status, nextcommunity = communities()
|
||||
local status, nextcommunity = communities()
|
||||
|
||||
if not status then
|
||||
return "\n ERROR: Failed to read the communities database"
|
||||
end
|
||||
if not status then
|
||||
return "\n ERROR: Failed to read the communities database"
|
||||
end
|
||||
|
||||
local result = {}
|
||||
local threads = {}
|
||||
local result = {}
|
||||
local threads = {}
|
||||
|
||||
local condvar = nmap.condvar(result)
|
||||
local condvar = nmap.condvar(result)
|
||||
|
||||
result.sent = false --whether the probes are sent
|
||||
result.communities = {} -- list of valid community strings
|
||||
result.msg = "" -- Error/Status msg
|
||||
result.status = true -- Status (is everything ok)
|
||||
result.sent = false --whether the probes are sent
|
||||
result.communities = {} -- list of valid community strings
|
||||
result.msg = "" -- Error/Status msg
|
||||
result.status = true -- Status (is everything ok)
|
||||
|
||||
local socket = nmap.new_socket("udp")
|
||||
status = socket:connect(host, port)
|
||||
local socket = nmap.new_socket("udp")
|
||||
status = socket:connect(host, port)
|
||||
|
||||
if ( not(status) ) then
|
||||
return "\n ERROR: Failed to connect to server"
|
||||
end
|
||||
if ( not(status) ) then
|
||||
return "\n ERROR: Failed to connect to server"
|
||||
end
|
||||
|
||||
local status, _, lport = socket:get_info()
|
||||
if( not(status) ) then
|
||||
return "\n ERROR: Failed to retrieve local port"
|
||||
end
|
||||
local status, _, lport = socket:get_info()
|
||||
if( not(status) ) then
|
||||
return "\n ERROR: Failed to retrieve local port"
|
||||
end
|
||||
|
||||
local recv_co = stdnse.new_thread(sniff_snmp_responses, host, port, lport, result)
|
||||
local send_co = stdnse.new_thread(send_snmp_queries, socket, result, nextcommunity)
|
||||
local recv_co = stdnse.new_thread(sniff_snmp_responses, host, port, lport, result)
|
||||
local send_co = stdnse.new_thread(send_snmp_queries, socket, result, nextcommunity)
|
||||
|
||||
local recv_dead, send_dead
|
||||
while true do
|
||||
condvar "wait"
|
||||
recv_dead = (coroutine.status(recv_co) == "dead")
|
||||
send_dead = (coroutine.status(send_co) == "dead")
|
||||
if recv_dead then break end
|
||||
end
|
||||
local recv_dead, send_dead
|
||||
while true do
|
||||
condvar "wait"
|
||||
recv_dead = (coroutine.status(recv_co) == "dead")
|
||||
send_dead = (coroutine.status(send_co) == "dead")
|
||||
if recv_dead then break end
|
||||
end
|
||||
|
||||
socket:close()
|
||||
socket:close()
|
||||
|
||||
if result.status then
|
||||
-- add the community strings to the creds database
|
||||
local c = creds.Credentials:new(SCRIPT_NAME, host, port)
|
||||
for _, community_string in ipairs(result.communities) do
|
||||
c:add("",community_string, creds.State.VALID)
|
||||
end
|
||||
if result.status then
|
||||
-- add the community strings to the creds database
|
||||
local c = creds.Credentials:new(SCRIPT_NAME, host, port)
|
||||
for _, community_string in ipairs(result.communities) do
|
||||
c:add("",community_string, creds.State.VALID)
|
||||
end
|
||||
|
||||
-- insert the first community string as a snmpcommunity registry field
|
||||
local creds_iter = c:getCredentials()
|
||||
if creds_iter then
|
||||
local account = creds_iter()
|
||||
if account then
|
||||
if account.pass == "<empty>" then
|
||||
nmap.registry.snmpcommunity = ""
|
||||
else
|
||||
nmap.registry.snmpcommunity = account.pass
|
||||
end
|
||||
end
|
||||
end
|
||||
-- insert the first community string as a snmpcommunity registry field
|
||||
local creds_iter = c:getCredentials()
|
||||
if creds_iter then
|
||||
local account = creds_iter()
|
||||
if account then
|
||||
if account.pass == "<empty>" then
|
||||
nmap.registry.snmpcommunity = ""
|
||||
else
|
||||
nmap.registry.snmpcommunity = account.pass
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
-- return output
|
||||
return tostring(c)
|
||||
else
|
||||
stdnse.print_debug("An error occured: "..result.msg)
|
||||
end
|
||||
-- return output
|
||||
return tostring(c)
|
||||
else
|
||||
stdnse.print_debug("An error occured: "..result.msg)
|
||||
end
|
||||
end
|
||||
|
||||
|
||||
Reference in New Issue
Block a user