mirror of
https://github.com/nmap/nmap.git
synced 2026-01-02 04:49:02 +00:00
Removing mswindowsShell.nse--there is a version detection match to accomplish the same thing
This commit is contained in:
@@ -1,32 +0,0 @@
|
||||
id = "MS Windows shell"
|
||||
|
||||
description = "If port 8888 is open and it echos a specific string then we\
|
||||
might have found an open MSWindows shell."
|
||||
|
||||
author = "Diman Todorov <diman.todorov@gmail.com>"
|
||||
|
||||
license = "Same as Nmap--See http://nmap.org/book/man-legal.html"
|
||||
|
||||
categories = {"backdoor"}
|
||||
|
||||
require "shortport"
|
||||
|
||||
portrule = shortport.port_or_service(8888, "auth")
|
||||
|
||||
action = function(host, port)
|
||||
local status = 0
|
||||
local result = ""
|
||||
|
||||
local client_ident = nmap.new_socket()
|
||||
|
||||
client_ident:connect(host.ip, port.number)
|
||||
|
||||
status, result = client_ident:receive_bytes(4096)
|
||||
|
||||
client_ident:close()
|
||||
|
||||
if string.match(result, "Microsoft Windows") then
|
||||
return "Possible open windows shell found."
|
||||
end
|
||||
end
|
||||
|
||||
Reference in New Issue
Block a user