PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-15 20:29:03 +00:00
Code Issues Projects Releases Wiki Activity

Fixes and enhancements to tso/vtam scripts. Closes #649

Browse Source
This commit is contained in:
dmiller
2017-01-20 23:27:19 +00:00
parent 8cc713e534
commit a134cc916e
4 changed files with 234 additions and 86 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
scripts/vtam-enum.nse
View File

@@ -54,6 +54,8 @@ found for application IDs.
-- 2015-07-04 - v0.1 - created by Soldier of Fortran
-- 2015-11-04 - v0.2 - significant upgrades and speed increases
-- 2015-11-14 - v0.3 - rewrote iterator
-- 2017-01-13 - v0.4 - Fixed 'macros' bug with default vtam screen and test
-- and added threshold for macros screen checking
--
author = "Philip Young aka Soldier of Fortran"
@@ -120,11 +122,13 @@ Driver = {
local macros = self.options['key3']
local cmdfmt = "logon applid(%s)"
local type = "applid"
local threshold = 75
-- instead of sending 'logon applid(<appname>)' when macros=true
-- we try to logon with just the command
if macros then
cmdfmt = "%s"
type ="macro"
threshold = 90 -- sometimes the screen barely changes
end
stdnse.verbose(2,"Trying VTAM ID: %s", pass)
@@ -134,10 +138,9 @@ Driver = {
self.tn3270:get_screen_debug(2)
local current_screen = self.tn3270:get_screen_raw()
if (self.tn3270:find('UNABLE TO ESTABLISH SESSION') or
self.tn3270:find('COMMAND UNRECOGNI[SZ]ED') or
self.tn3270:find('UNABLE TO CONNECT TO THE REQUESTED APPLICATION') or
self.tn3270:find('USSMSG0[1-4]') or
if (self.tn3270:find('UNABLE TO ESTABLISH SESSION') or -- thanks goes to Dominic White for creating these
self.tn3270:find('COMMAND UNRECOGNI[SZ]ED') or
self.tn3270:find('USSMSG0[1-4]') or
self.tn3270:find('SESSION NOT BOUND') or
self.tn3270:find('INVALID COMMAND') or
self.tn3270:find('PARAMETER OMITTED') or
@@ -149,9 +152,11 @@ Driver = {
self.tn3270:find('syntax invalid') or
self.tn3270:find('INVALID SYSTEM') or
self.tn3270:find('NOT VALID') or
self.tn3270:find('INVALID USERID, APPLID') ) or -- thanks goes to Domonic White for creating these
screen_diff(previous_screen, current_screen) > 75 then
self.tn3270:find('INVALID USERID, APPLID') ) or
self.tn3270:find('UNABLE TO CONNECT TO THE REQUESTED APPLICATION') or
screen_diff(previous_screen, current_screen) > threshold then
-- Looks like an invalid APPLID.
stdnse.verbose(2,'Invalid Application ID: %s',string.upper(pass))
return false, brute.Error:new( "Invalid VTAM Application ID" )
else
stdnse.verbose(2,"Valid Application ID: %s",string.upper(pass))
@@ -200,10 +205,12 @@ local function vtam_test( host, port, commands, macros)
tn:get_all_data()
tn:get_screen_debug(2)
local isVTAM = false
if tn:find('IBMECHO ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789') then
if not macros and tn:find('IBMECHO ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789') then
stdnse.debug2("IBMTEST Returned: IBMECHO ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.")
stdnse.debug1("VTAM Test Success!")
isVTAM = true
elseif macros then
isVTAM = true
end
if not macros then
@@ -239,7 +246,6 @@ action = function(host, port)
local macros = stdnse.get_script_args(SCRIPT_NAME .. '.macros') or false -- if set to true, doesn't prepend the commands with 'logon applid'
local commands = stdnse.get_script_args(SCRIPT_NAME .. '.commands') -- Commands to send to get to VTAM
local vtam_ids = {"tso", "CICS", "IMS", "NETVIEW", "TPX"} -- these are defaults usually seen
vtam_id_file = ( (vtam_id_file and nmap.fetchfile(vtam_id_file)) or vtam_id_file ) or
nmap.fetchfile("nselib/data/vhosts-default.lst")