mirror of
https://github.com/nmap/nmap.git
synced 2025-12-12 10:49:02 +00:00
Squashed commit of the following:
commit 7c26e4de2ab365a30fe6e91f3a531eb38c8dfdba Author: Daniel Miller <bonsaiviking@gmail.com> Date: Tue Aug 7 16:36:54 2012 -0500 Fix indentation on netbios.lua (no code change) commit 47dc3e32e6b47bd80620cfbc54e7590193dd0c1a Author: Daniel Miller <bonsaiviking@gmail.com> Date: Tue Jul 31 16:42:27 2012 -0500 Make smbauth.lua use host, not nmap, registry commit 3738f8e6d551a1260463609d8cda86918843a372 Author: Daniel Miller <bonsaiviking@gmail.com> Date: Tue Jul 31 16:35:45 2012 -0500 Make netbios.lua use host registry. Functions now can take host table or IP commit 031cadb9d407ab7fd43aaddffda1a89c24cbdd45 Author: Daniel Miller <bonsaiviking@gmail.com> Date: Tue Jul 31 15:54:12 2012 -0500 Remove mac-geolocation info from snmp-interfaces commit 2218dbaf8ffd4a33de2bc028def9be7301dfb3a2 Author: Daniel Miller <bonsaiviking@gmail.com> Date: Tue Jul 31 15:52:36 2012 -0500 Make path-mtu.nse use host, not nmap, registry commit 5a3d006bdb9cd3e981a8e753c92b5ade5059a29b Author: Daniel Miller <bonsaiviking@gmail.com> Date: Tue Jul 31 15:51:53 2012 -0500 Make cvs-* scripts use host, not nmap, registry
This commit is contained in:
@@ -264,12 +264,27 @@ function do_nbstat(host)
|
|||||||
local socket = nmap.new_socket()
|
local socket = nmap.new_socket()
|
||||||
local encoded_name = name_encode("*")
|
local encoded_name = name_encode("*")
|
||||||
local statistics
|
local statistics
|
||||||
|
local reg
|
||||||
|
if type(host) == "string" then --ip
|
||||||
|
stdnse.print_debug(3, "Performing nbstat on host '%s'", host)
|
||||||
|
nmap.registry.netbios = nmap.registry.netbios or {}
|
||||||
|
nmap.registry.netbios[host] = nmap.registry.netbios[host] or {}
|
||||||
|
reg = nmap.registry.netbios[host]
|
||||||
|
else
|
||||||
|
stdnse.print_debug(3, "Performing nbstat on host '%s'", host.ip)
|
||||||
|
if host.registry.netbios == nil and
|
||||||
|
nmap.registry.netbios ~= nil and
|
||||||
|
nmap.registry.netbios[host.ip] ~= nil then
|
||||||
|
host.registry.netbios = nmap.registry.netbios[host.ip]
|
||||||
|
end
|
||||||
|
host.registry.netbios = host.registry.netbios or {}
|
||||||
|
reg = host.registry.netbios
|
||||||
|
end
|
||||||
|
|
||||||
stdnse.print_debug(3, "Performing nbstat on host '%s'", host)
|
-- Check if it's cached in the registry for this host
|
||||||
-- Check if it's cased in the registry for this host
|
if(reg["nbstat_names"] ~= nil) then
|
||||||
if(nmap.registry["nbstat_names_" .. host] ~= nil) then
|
|
||||||
stdnse.print_debug(3, " |_ [using cached value]")
|
stdnse.print_debug(3, " |_ [using cached value]")
|
||||||
return true, nmap.registry["nbstat_names_" .. host], nmap.registry["nbstat_statistics_" .. host]
|
return true, reg["nbstat_names"], reg["nbstat_statistics"]
|
||||||
end
|
end
|
||||||
|
|
||||||
-- Create the query header
|
-- Create the query header
|
||||||
@@ -369,8 +384,8 @@ function do_nbstat(host)
|
|||||||
pos, statistics = bin.unpack(string.format(">A%d", rrlength), result, pos)
|
pos, statistics = bin.unpack(string.format(">A%d", rrlength), result, pos)
|
||||||
|
|
||||||
-- Put it in the registry, in case anybody else needs it
|
-- Put it in the registry, in case anybody else needs it
|
||||||
nmap.registry["nbstat_names_" .. host] = names
|
reg["nbstat_names"] = names
|
||||||
nmap.registry["nbstat_statistics_" .. host] = statistics
|
reg["nbstat_statistics"] = statistics
|
||||||
|
|
||||||
return true, names, statistics
|
return true, names, statistics
|
||||||
|
|
||||||
|
|||||||
@@ -105,11 +105,11 @@ local ACCOUNT_TYPES = {
|
|||||||
}
|
}
|
||||||
|
|
||||||
local function account_exists(host, username, domain)
|
local function account_exists(host, username, domain)
|
||||||
if(nmap.registry[host.ip] == nil or nmap.registry[host.ip]['smbaccounts'] == nil) then
|
if(host.registry['smbaccounts'] == nil) then
|
||||||
return false
|
return false
|
||||||
end
|
end
|
||||||
|
|
||||||
for i, j in pairs(nmap.registry[host.ip]['smbaccounts']) do
|
for i, j in pairs(host.registry['smbaccounts']) do
|
||||||
if(j['username'] == username and j['domain'] == domain) then
|
if(j['username'] == username and j['domain'] == domain) then
|
||||||
return true
|
return true
|
||||||
end
|
end
|
||||||
@@ -120,13 +120,13 @@ end
|
|||||||
|
|
||||||
function next_account(host, num)
|
function next_account(host, num)
|
||||||
if(num == nil) then
|
if(num == nil) then
|
||||||
if(nmap.registry[host.ip]['smbindex'] == nil) then
|
if(host.registry['smbindex'] == nil) then
|
||||||
nmap.registry[host.ip]['smbindex'] = 1
|
host.registry['smbindex'] = 1
|
||||||
else
|
else
|
||||||
nmap.registry[host.ip]['smbindex'] = nmap.registry[host.ip]['smbindex'] + 1
|
host.registry['smbindex'] = host.registry['smbindex'] + 1
|
||||||
end
|
end
|
||||||
else
|
else
|
||||||
nmap.registry[host.ip]['smbindex'] = num
|
host.registry['smbindex'] = num
|
||||||
end
|
end
|
||||||
end
|
end
|
||||||
|
|
||||||
@@ -165,11 +165,8 @@ function add_account(host, username, domain, password, password_hash, hash_type,
|
|||||||
return
|
return
|
||||||
end
|
end
|
||||||
|
|
||||||
if(nmap.registry[host.ip] == nil) then
|
if(host.registry['smbaccounts'] == nil) then
|
||||||
nmap.registry[host.ip] = {}
|
host.registry['smbaccounts'] = {}
|
||||||
end
|
|
||||||
if(nmap.registry[host.ip]['smbaccounts'] == nil) then
|
|
||||||
nmap.registry[host.ip]['smbaccounts'] = {}
|
|
||||||
end
|
end
|
||||||
|
|
||||||
-- Determine the type of account, if it wasn't given
|
-- Determine the type of account, if it wasn't given
|
||||||
@@ -204,10 +201,10 @@ function add_account(host, username, domain, password, password_hash, hash_type,
|
|||||||
new_entry['account_type'] = account_type
|
new_entry['account_type'] = account_type
|
||||||
|
|
||||||
-- Insert the new entry into the table
|
-- Insert the new entry into the table
|
||||||
table.insert(nmap.registry[host.ip]['smbaccounts'], new_entry)
|
table.insert(host.registry['smbaccounts'], new_entry)
|
||||||
|
|
||||||
-- Sort the table based on the account type (we want anonymous at the end, administrator at the front)
|
-- Sort the table based on the account type (we want anonymous at the end, administrator at the front)
|
||||||
table.sort(nmap.registry[host.ip]['smbaccounts'], function(a,b) return a['account_type'] > b['account_type'] end)
|
table.sort(host.registry['smbaccounts'], function(a,b) return a['account_type'] > b['account_type'] end)
|
||||||
|
|
||||||
-- Print a debug message
|
-- Print a debug message
|
||||||
stdnse.print_debug(1, "SMB: Added account '%s' to account list", username)
|
stdnse.print_debug(1, "SMB: Added account '%s' to account list", username)
|
||||||
@@ -215,7 +212,7 @@ function add_account(host, username, domain, password, password_hash, hash_type,
|
|||||||
-- Reset the credentials
|
-- Reset the credentials
|
||||||
next_account(host, 1)
|
next_account(host, 1)
|
||||||
|
|
||||||
-- io.write("\n\n" .. nsedebug.tostr(nmap.registry[host.ip]['smbaccounts']) .. "\n\n")
|
-- io.write("\n\n" .. nsedebug.tostr(host.registry['smbaccounts']) .. "\n\n")
|
||||||
end
|
end
|
||||||
|
|
||||||
---Retrieve the current set of credentials set in the registry. If these fail, <code>next_credentials</code> should be
|
---Retrieve the current set of credentials set in the registry. If these fail, <code>next_credentials</code> should be
|
||||||
@@ -225,12 +222,12 @@ end
|
|||||||
--@return (result, username, domain, password, password_hash, hash_type) If result is false, username is an error message. Otherwise, username and password are
|
--@return (result, username, domain, password, password_hash, hash_type) If result is false, username is an error message. Otherwise, username and password are
|
||||||
-- the current username and password that should be used.
|
-- the current username and password that should be used.
|
||||||
function get_account(host)
|
function get_account(host)
|
||||||
if(nmap.registry[host.ip]['smbindex'] == nil) then
|
if(host.registry['smbindex'] == nil) then
|
||||||
nmap.registry[host.ip]['smbindex'] = 1
|
host.registry['smbindex'] = 1
|
||||||
end
|
end
|
||||||
|
|
||||||
local index = nmap.registry[host.ip]['smbindex']
|
local index = host.registry['smbindex']
|
||||||
local account = nmap.registry[host.ip]['smbaccounts'][index]
|
local account = host.registry['smbaccounts'][index]
|
||||||
|
|
||||||
if(account == nil) then
|
if(account == nil) then
|
||||||
return false, "No accounts left to try"
|
return false, "No accounts left to try"
|
||||||
@@ -244,18 +241,13 @@ end
|
|||||||
--
|
--
|
||||||
--@param host The host object.
|
--@param host The host object.
|
||||||
function init_account(host)
|
function init_account(host)
|
||||||
-- Create the key if it exists
|
|
||||||
if(nmap.registry[host.ip] == nil) then
|
|
||||||
nmap.registry[host.ip] = {}
|
|
||||||
end
|
|
||||||
|
|
||||||
-- Don't run this more than once for each host
|
-- Don't run this more than once for each host
|
||||||
if(nmap.registry[host.ip]['smbaccounts'] ~= nil) then
|
if(host.registry['smbaccounts'] ~= nil) then
|
||||||
return
|
return
|
||||||
end
|
end
|
||||||
|
|
||||||
-- Create the list
|
-- Create the list
|
||||||
nmap.registry[host.ip]['smbaccounts'] = {}
|
host.registry['smbaccounts'] = {}
|
||||||
|
|
||||||
-- Add the anonymous/guest accounts
|
-- Add the anonymous/guest accounts
|
||||||
add_account(host, '', '', '', nil, 'none')
|
add_account(host, '', '', '', nil, 'none')
|
||||||
|
|||||||
@@ -66,10 +66,8 @@ Driver =
|
|||||||
if ( not(status) and err:match("I HATE YOU") ) then
|
if ( not(status) and err:match("I HATE YOU") ) then
|
||||||
-- let's store the repositories in the registry so the brute
|
-- let's store the repositories in the registry so the brute
|
||||||
-- script can use them later.
|
-- script can use them later.
|
||||||
nmap.registry.cvs = nmap.registry.cvs or {}
|
self.host.registry.cvs_repos = self.host.registry.cvs_repos or {}
|
||||||
nmap.registry.cvs[self.host.ip] = nmap.registry.cvs[self.host.ip] or {}
|
table.insert(self.host.registry.cvs_repos, password)
|
||||||
nmap.registry.cvs[self.host.ip].repos = nmap.registry.cvs[self.host.ip].repos or {}
|
|
||||||
table.insert(nmap.registry.cvs[self.host.ip].repos, password)
|
|
||||||
return true, brute.Account:new(username, password, 0)
|
return true, brute.Account:new(username, password, 0)
|
||||||
end
|
end
|
||||||
return false, brute.Error:new( "Incorrect password" )
|
return false, brute.Error:new( "Incorrect password" )
|
||||||
|
|||||||
@@ -79,14 +79,11 @@ Driver =
|
|||||||
|
|
||||||
local function getDiscoveredRepos(host)
|
local function getDiscoveredRepos(host)
|
||||||
|
|
||||||
if ( not(nmap.registry.cvs) or
|
if ( not(host.registry.cvs_repos)) then
|
||||||
not(nmap.registry.cvs[host.ip]) or
|
|
||||||
not(nmap.registry.cvs[host.ip].repos)
|
|
||||||
) then
|
|
||||||
return
|
return
|
||||||
end
|
end
|
||||||
|
|
||||||
return nmap.registry.cvs[host.ip].repos
|
return host.registry.cvs_repos
|
||||||
end
|
end
|
||||||
|
|
||||||
action = function(host, port)
|
action = function(host, port)
|
||||||
|
|||||||
@@ -80,22 +80,22 @@ action = function(host)
|
|||||||
|
|
||||||
|
|
||||||
-- Get the list of NetBIOS names
|
-- Get the list of NetBIOS names
|
||||||
status, names, statistics = netbios.do_nbstat(host.ip)
|
status, names, statistics = netbios.do_nbstat(host)
|
||||||
status, names, statistics = netbios.do_nbstat(host.ip)
|
status, names, statistics = netbios.do_nbstat(host)
|
||||||
status, names, statistics = netbios.do_nbstat(host.ip)
|
status, names, statistics = netbios.do_nbstat(host)
|
||||||
status, names, statistics = netbios.do_nbstat(host.ip)
|
status, names, statistics = netbios.do_nbstat(host)
|
||||||
if(status == false) then
|
if(status == false) then
|
||||||
return stdnse.format_output(false, names)
|
return stdnse.format_output(false, names)
|
||||||
end
|
end
|
||||||
|
|
||||||
-- Get the server name
|
-- Get the server name
|
||||||
status, server_name = netbios.get_server_name(host.ip, names)
|
status, server_name = netbios.get_server_name(host, names)
|
||||||
if(status == false) then
|
if(status == false) then
|
||||||
return stdnse.format_output(false, server_name)
|
return stdnse.format_output(false, server_name)
|
||||||
end
|
end
|
||||||
|
|
||||||
-- Get the logged in user
|
-- Get the logged in user
|
||||||
status, user_name = netbios.get_user_name(host.ip, names)
|
status, user_name = netbios.get_user_name(host, names)
|
||||||
if(status == false) then
|
if(status == false) then
|
||||||
return stdnse.format_output(false, user_name)
|
return stdnse.format_output(false, user_name)
|
||||||
end
|
end
|
||||||
|
|||||||
@@ -261,10 +261,7 @@ end
|
|||||||
|
|
||||||
-- Sets necessary probe data in registry
|
-- Sets necessary probe data in registry
|
||||||
local setreg = function(host, proto, port)
|
local setreg = function(host, proto, port)
|
||||||
if not nmap.registry[host.ip] then
|
host.registry['pathmtuprobe'] = {
|
||||||
nmap.registry[host.ip] = {}
|
|
||||||
end
|
|
||||||
nmap.registry[host.ip]['pathmtuprobe'] = {
|
|
||||||
['proto'] = proto,
|
['proto'] = proto,
|
||||||
['port'] = port
|
['port'] = port
|
||||||
}
|
}
|
||||||
@@ -301,8 +298,8 @@ action = function(host)
|
|||||||
local mtuset
|
local mtuset
|
||||||
local sock = nmap.new_dnet()
|
local sock = nmap.new_dnet()
|
||||||
local pcap = nmap.new_socket()
|
local pcap = nmap.new_socket()
|
||||||
local proto = nmap.registry[host.ip]['pathmtuprobe']['proto']
|
local proto = host.registry['pathmtuprobe']['proto']
|
||||||
local port = nmap.registry[host.ip]['pathmtuprobe']['port']
|
local port = host.registry['pathmtuprobe']['port']
|
||||||
local saddr = packet.toip(host.bin_ip_src)
|
local saddr = packet.toip(host.bin_ip_src)
|
||||||
local daddr = packet.toip(host.bin_ip)
|
local daddr = packet.toip(host.bin_ip)
|
||||||
local try = nmap.new_try()
|
local try = nmap.new_try()
|
||||||
|
|||||||
@@ -45,6 +45,7 @@ dependencies = {"snmp-brute"}
|
|||||||
-- Revised 04/11/2010 - v0.2 - moved snmp_walk to snmp library <patrik@cqure.net>
|
-- Revised 04/11/2010 - v0.2 - moved snmp_walk to snmp library <patrik@cqure.net>
|
||||||
-- Revised 08/10/2010 - v0.3 - prerule; add interface addresses to Nmap's target list (Kris Katterjohn)
|
-- Revised 08/10/2010 - v0.3 - prerule; add interface addresses to Nmap's target list (Kris Katterjohn)
|
||||||
-- Revised 05/27/2011 - v0.4 - action; add MAC addresses to nmap.registry[host.ip]["mac-geolocation"] (Gorjan Petrovski)
|
-- Revised 05/27/2011 - v0.4 - action; add MAC addresses to nmap.registry[host.ip]["mac-geolocation"] (Gorjan Petrovski)
|
||||||
|
-- Revised 07/31/2012 - v0.5 - action; remove mac-geolocation changes (script removed from trunk)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
@@ -419,14 +420,6 @@ action = function(host, port)
|
|||||||
srvport = port.number
|
srvport = port.number
|
||||||
end
|
end
|
||||||
|
|
||||||
-- table for mac-geolocation.nse
|
|
||||||
if not nmap.registry[srvhost] then
|
|
||||||
nmap.registry[srvhost] = {}
|
|
||||||
nmap.registry[srvhost]["mac-geolocation"] = {}
|
|
||||||
elseif not nmap.registry[srvhost]["mac-geolocation"] then
|
|
||||||
nmap.registry[srvhost]["mac-geolocation"] = {}
|
|
||||||
end
|
|
||||||
|
|
||||||
socket:set_timeout(5000)
|
socket:set_timeout(5000)
|
||||||
try(socket:connect(srvhost, srvport, "udp"))
|
try(socket:connect(srvhost, srvport, "udp"))
|
||||||
|
|
||||||
@@ -453,14 +446,6 @@ action = function(host, port)
|
|||||||
end
|
end
|
||||||
|
|
||||||
local output = stdnse.format_output( true, build_results(interfaces) )
|
local output = stdnse.format_output( true, build_results(interfaces) )
|
||||||
|
|
||||||
-- insert the MAC addresses into the mac-geolocation table
|
|
||||||
for _,item in ipairs(interfaces) do
|
|
||||||
if item.phys_addr then
|
|
||||||
table.insert(nmap.registry[srvhost]["mac-geolocation"], item.phys_addr:match("^(%x+:%x+:%x+:%x+:%x+:%x+)"))
|
|
||||||
end
|
|
||||||
end
|
|
||||||
-- wtf is this? table.insert(nmap.registry[srvhost]["mac-geolocation"], "00:23:69:2a:b1:27")
|
|
||||||
|
|
||||||
if SCRIPT_TYPE == "prerule" and target.ALLOW_NEW_TARGETS then
|
if SCRIPT_TYPE == "prerule" and target.ALLOW_NEW_TARGETS then
|
||||||
local sum = 0
|
local sum = 0
|
||||||
|
|||||||
Reference in New Issue
Block a user