1
0
mirror of https://github.com/nmap/nmap.git synced 2025-12-15 20:29:03 +00:00

Update epmd-info

Added structured output
Simplified building of probe (now just a string)
Added a timeout
This commit is contained in:
dmiller
2014-09-03 21:39:33 +00:00
parent 1bd3e1e85c
commit 34ea28f869

View File

@@ -3,7 +3,6 @@ local nmap = require "nmap"
local shortport = require "shortport"
local stdnse = require "stdnse"
local string = require "string"
local table = require "table"
description = [[
Connects to Erlang Port Mapper Daemon (epmd) and retrieves a list of nodes with their respective port numbers.
@@ -17,9 +16,16 @@ Connects to Erlang Port Mapper Daemon (epmd) and retrieves a list of nodes with
-- PORT STATE SERVICE
-- 4369/tcp open epmd
-- | epmd-info.nse:
-- | epmd running on port 4369
-- | name rabbit at port 36804
-- |_ name ejabberd at port 46540
-- | epmd_port: 4369
-- | nodes:
-- | rabbit: 36804
-- |_ ejabberd: 46540
-- @xmloutput
-- <elem key="epmd_port">4369</elem>
-- <table key="nodes">
-- <elem key="rabbit">36804</elem>
-- <elem key="ejabberd">46540</elem>
-- </table>
author = "Toni Ruottu"
license = "Same as Nmap--See http://nmap.org/book/man-legal.html"
@@ -27,31 +33,38 @@ categories = {"default", "discovery", "safe"}
portrule = shortport.port_or_service (4369, "epmd")
local NAMESREQ = 110
action = function(host, port)
local socket = nmap.new_socket()
local status, err = socket:connect(host.ip, port.number)
if not status then
return {}
end
local payload = bin.pack("C", NAMESREQ)
local probe = bin.pack(">SA", #payload, payload)
socket:send(probe)
local status = true
local data = ""
local tmp = ""
while status do
data = data .. tmp
status, tmp = socket:receive()
socket:set_timeout(stdnse.get_timeout(host))
local try = nmap.new_try(function () socket:close() end)
try(socket:connect(host, port))
try(socket:send("\x00\x01n")) -- NAMESREQ = 110
local getline = stdnse.make_buffer(socket, "\n")
local data, err = getline()
if data == nil then
stdnse.debug2("Error on receive: %s", err)
socket:close()
return nil
end
local pos, realport = bin.unpack(">I", data)
local nodestring = string.sub(data, pos, -2)
local nodes = stdnse.strsplit("\n", nodestring)
local response = {}
table.insert(response, 'epmd running on port ' .. realport)
for _, node in ipairs(nodes) do
table.insert(response, node)
data = string.sub(data, pos)
local nodes = stdnse.output_table()
local name, port
while data and data ~= "" do
name, port = data:match("^name (.*) at port (%d+)")
if name then
nodes[name] = port
end
data = getline()
end
return stdnse.format_output(true, response)
local response = stdnse.output_table()
response.epmd_port = realport
response.nodes = nodes
return response
end