PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-15 12:19:02 +00:00
Code Issues Projects Releases Wiki Activity

fixed a bug in the pop3-capabilities script that would fail parsing the

Browse Source 
response from some servers.
This commit is contained in:
patrik
2012-06-15 18:32:40 +00:00
parent 65c4f0f6d7
commit 38b26d0ccc
2 changed files with 55 additions and 57 deletions
Download Patch File Download Diff File Expand all files Collapse all files

71
nselib/pop3.lua
View File

@@ -151,44 +151,49 @@ end
-- @return Table containing capabilities or nil on error. -- @return Table containing capabilities or nil on error.
-- @return nil or String error message. -- @return nil or String error message.
function capabilities(host, port) function capabilities(host, port)
local socket = nmap.new_socket()
local capas = {}
local opts = {timeout=10000, recv_before=true}
local i = 1
local socket, line, bopt, first_line = comm.tryssl(host, port, "CAPA\r\n" , opts) local socket, line, bopt, first_line = comm.tryssl(host, port, "" , {timeout=10000, recv_before=true})
if not socket then return nil, "Could Not Connect" end if not socket then
if not stat(first_line) then return nil, "No Response" end return nil, "Could Not Connect"
end
if not stat(first_line) then
return nil, "No Response"
end
if string.find(first_line, "<[%p%w]+>") then capas.APOP = true end local capas = {}
if string.find(first_line, "<[%p%w]+>") then
capas.APOP = {}
end
local lines = stdnse.strsplit("\r\n",line) local status = socket:send("CAPA\r\n")
local line = lines[1] if( not(status) ) then
return nil, "Failed to send"
if not stat(line) then end
capas.capa = false
else status, line = socket:receive_buf("%.", false)
while line do if( not(status) ) then
if line ~= "." then return nil, "Failed to receive"
local capability = string.sub(line, string.find(line, "[%w-]+"))
line = string.sub(line, #capability + 1)
capas[capability] = true
local args = {}
local w
for w in string.gmatch(line, "[%w-]+") do
table.insert(args, w)
end
if #args == 1 then capas[capability] = args[1]
else if #args > 1 then capas[capability] = args
end end
else
break
end
line = lines[i]
i = i + 1
end
end end
socket:close() socket:close()
local lines = stdnse.strsplit("\r\n",line)
if not stat(table.remove(lines,1)) then
capas.capa = false
return capas
end
for _, line in ipairs(lines) do
if ( line and #line>0 ) then
local capability = line:sub(line:find("[%w-]+"))
line = line:sub(#capability + 2)
if ( line ~= "" ) then
capas[capability] = stdnse.strsplit(" ", line)
else
capas[capability] = {}
end
end
end
return capas return capas
end end

41
scripts/pop3-capabilities.nse
View File

@@ -27,29 +27,22 @@ categories = {"default","discovery","safe"}
portrule = shortport.port_or_service({110,995},{"pop3","pop3s"}) portrule = shortport.port_or_service({110,995},{"pop3","pop3s"})
action = function(host, port) action = function(host, port)
local capa, err = pop3.capabilities(host, port) local capa, err = pop3.capabilities(host, port)
if type(capa) == "table" then if type(capa) == "table" then
-- Convert the capabilities table into an array of strings. -- Convert the capabilities table into an array of strings.
local capstrings = {} local capstrings = {}
local cap, args for cap, args in pairs(capa) do
for cap, args in pairs(capa) do if ( #args > 0 ) then
local capstr = cap table.insert(capstrings, ("%s(%s)"):format(cap, stdnse.strjoin(" ", args)))
if type(args) == "string" then capstr = capstr .. "(" .. args .. ")" end else
if type(args) == "table" then table.insert(capstrings, cap)
local arg end
capstr = capstr .. "(" end
for i, arg in ipairs(args) do return stdnse.strjoin(" ", capstrings)
capstr = capstr .. arg .. " " elseif type(err) == "string" then
end stdnse.print_debug(1, "%s: '%s' for %s", SCRIPT_NAME, err, host.ip)
capstr = string.sub(capstr, 1, #capstr - 1) .. ")" return
else
return "server doesn't support CAPA"
end end
table.insert(capstrings, capstr)
end
return stdnse.strjoin(" ", capstrings)
elseif type(err) == "string" then
stdnse.print_debug(1, "%s: '%s' for %s", SCRIPT_NAME, err, host.ip)
return
else
return "server doesn't support CAPA"
end
end end