PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-06 04:31:29 +00:00
Code Issues Projects Releases Wiki Activity

SNMP scripts are enabled on non-standard ports. See #1473

Browse Source
This commit is contained in:
nnposter
2020-07-27 03:32:27 +00:00
parent 99220fe0bc
commit 631d2556c0
12 changed files with 16 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
CHANGELOG
View File

@@ -1,5 +1,8 @@
#Nmap Changelog ($Id$); -*-text-*-
o [NSE][GH#1473] SNMP scripts are now enabled on non-standard ports where SNMP
has been detected [usd-markus, nnposter]
o [NSE][GH#2084] MQTT library was using incorrect position when parsing
received responses [tatulea]

5
scripts/snmp-brute.nse
View File

@@ -56,7 +56,7 @@ license = "Same as Nmap--See https://nmap.org/book/man-legal.html"
categories = {"intrusive", "brute"}
portrule = shortport.portnumber(161, "udp", {"open", "open|filtered"})
portrule = shortport.port_or_service(161, "snmp", "udp", {"open", "open|filtered"})
local communitiestable = {}
@@ -171,7 +171,8 @@ local sniff_snmp_responses = function(host, port, lport, result)
local condvar = nmap.condvar(result)
local pcap = nmap.new_socket()
pcap:set_timeout(host.times.timeout * 1000 * 3)
pcap:pcap_open(host.interface, 300, false, "src host ".. host.ip .." and udp and src port 161 and dst port "..lport)
pcap:pcap_open(host.interface, 300, false,
("src host %s and udp and src port %d and dst port %d"):format(host.ip, port.number, lport))
local communities = creds.Credentials:new(SCRIPT_NAME, host, port)

2
scripts/snmp-hh3c-logins.nse
View File

@@ -53,7 +53,7 @@ dependencies = {"snmp-brute"}
-- Updated 11/08/2012 - v0.3 - added xmloutput
portrule = shortport.portnumber(161, "udp", {"open", "open|filtered"})
portrule = shortport.port_or_service(161, "snmp", "udp", {"open", "open|filtered"})
--- Gets a value for the specified oid
--

2
scripts/snmp-interfaces.nse
View File

@@ -61,7 +61,7 @@ prerule = function()
return true
end
portrule = shortport.portnumber(161, "udp", {"open", "open|filtered"})
portrule = shortport.port_or_service(161, "snmp", "udp", {"open", "open|filtered"})
-- List of IANA-assigned network interface types
-- Taken from IANAifType-MIB

2
scripts/snmp-ios-config.nse
View File

@@ -45,7 +45,7 @@ categories = {"intrusive"}
dependencies = {"snmp-brute"}
portrule = shortport.portnumber(161, "udp", {"open", "open|filtered"})
portrule = shortport.port_or_service(161, "snmp", "udp", {"open", "open|filtered"})
local function fail (err) return stdnse.format_output(false, err) end
---

2
scripts/snmp-netstat.nse
View File

@@ -40,7 +40,7 @@ dependencies = {"snmp-brute"}
-- Revised 07/26/2012 - v0.3 - added newtargets support
portrule = shortport.portnumber(161, "udp", {"open", "open|filtered"})
portrule = shortport.port_or_service(161, "snmp", "udp", {"open", "open|filtered"})
--- Processes the table and creates the script output
--

2
scripts/snmp-processes.nse
View File

@@ -72,7 +72,7 @@ dependencies = {"snmp-brute"}
-- Revised 04/11/2010 - v0.4 - moved snmp_walk to snmp library <patrik@cqure.net>
portrule = shortport.portnumber(161, "udp", {"open", "open|filtered"})
portrule = shortport.port_or_service(161, "snmp", "udp", {"open", "open|filtered"})
--- Gets a value for the specified oid
--

2
scripts/snmp-sysdescr.nse
View File

@@ -25,7 +25,7 @@ categories = {"default", "discovery", "safe"}
dependencies = {"snmp-brute"}
portrule = shortport.portnumber(161, "udp", {"open", "open|filtered"})
portrule = shortport.port_or_service(161, "snmp", "udp", {"open", "open|filtered"})
---
-- Sends SNMP packets to host and reads responses

2
scripts/snmp-win32-services.nse
View File

@@ -51,7 +51,7 @@ dependencies = {"snmp-brute"}
-- Revised 04/11/2010 - v0.3 - moved snmp_walk to snmp library <patrik@cqure.net>
portrule = shortport.portnumber(161, "udp", {"open", "open|filtered"})
portrule = shortport.port_or_service(161, "snmp", "udp", {"open", "open|filtered"})
--- Processes the table and creates the script output

2
scripts/snmp-win32-shares.nse
View File

@@ -32,7 +32,7 @@ dependencies = {"snmp-brute"}
-- Revised 04/11/2010 - v0.3 - moved snmp_walk to snmp library <patrik@cqure.net>
portrule = shortport.portnumber(161, "udp", {"open", "open|filtered"})
portrule = shortport.port_or_service(161, "snmp", "udp", {"open", "open|filtered"})
--- Gets a value for the specified oid
--

2
scripts/snmp-win32-software.nse
View File

@@ -64,7 +64,7 @@ dependencies = {"snmp-brute"}
-- Revised 04/11/2010 - v0.3 - moved snmp_walk to snmp library <patrik@cqure.net>
portrule = shortport.portnumber(161, "udp", {"open", "open|filtered"})
portrule = shortport.port_or_service(161, "snmp", "udp", {"open", "open|filtered"})
--- Gets a value for the specified oid
--

2
scripts/snmp-win32-users.nse
View File

@@ -44,7 +44,7 @@ dependencies = {"snmp-brute"}
-- Revised 04/11/2010 - v0.3 - moved snmp_walk to snmp library <patrik@cqure.net>
portrule = shortport.portnumber(161, "udp", {"open", "open|filtered"})
portrule = shortport.port_or_service(161, "snmp", "udp", {"open", "open|filtered"})
--- Processes the table and creates the script output
--