PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-08 13:41:29 +00:00
Code Issues Projects Releases Wiki Activity

Add TLSA type to dns-zone-transfer, refactor bto16

Browse Source
This commit is contained in:
dmiller
2016-07-21 22:27:30 +00:00
parent 98d5fd7625
commit f002aee6a9
1 changed files with 15 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
scripts/dns-zone-transfer.nse
View File

@@ -182,10 +182,7 @@ local tld = {
--@param idx Index in the string (first of two consecutive bytes). --@param idx Index in the string (first of two consecutive bytes).
--@return 16 bit number represented by the two bytes. --@return 16 bit number represented by the two bytes.
function bto16(data, idx) function bto16(data, idx)
local b1 = string.byte(data, idx) return (">I2"):unpack(data, idx)
local b2 = string.byte(data, idx+1)
-- (b2 & 0xff) | ((b1 & 0xff) << 8)
return bit.bor(bit.band(b2, 255), bit.lshift(bit.band(b1, 255), 8))
end end
--- Check if domain name element is a tld --- Check if domain name element is a tld
@@ -440,7 +437,20 @@ local RD = {
fingerprint = stdnse.tohex(data:sub(offset, offset+fplen-1)) fingerprint = stdnse.tohex(data:sub(offset, offset+fplen-1))
return offset + fplen, string.format("%d %d %s", algorithm, fptype, fingerprint) return offset + fplen, string.format("%d %d %s", algorithm, fptype, fingerprint)
end, end,
--IPSECKEY RRSIG NSEC DNSKEY DHCID NSEC3 NSEC3PARAM TLSA HIP NINFO RKEY TALINK CDS --IPSECKEY RRSIG NSEC DNSKEY DHCID NSEC3 NSEC3PARAM
TLSA = function(data, offset) -- https://tools.ietf.org/html/rfc6698
local rdatalen, cert_usage, selector, match_type, offset = (">I2BBB"):unpack(data, offset-2)
local usages = {[0] = "PKIX-TA", [1] = "PKIX-EE", [2] = "DANE-TA", [3] = "DANE-EE", [255] = "PrivCert"}
cert_usage = usages[cert_usage] or cert_usage
local selectors = {[0] = "Cert", [1] = "SPKI", [255] = "PrivSel"}
selector = selectors[selector] or selector
local matches = {[0] = "Full", [1] = "SHA2-256", [2] = "SHA2-512", [255] = "PrivMatch"}
match_type = matches[match_type] or match_type
local offend = offset + rdatalen - 3
local assoc_data = stdnse.tohex(data:sub(offset, offend - 1))
return offend, string.format("%s %s %s %s", cert_usage, selector, match_type, assoc_data)
end,
--HIP NINFO RKEY TALINK CDS
SPF = parse_txt, SPF = parse_txt,
--UINFO UID GID UNSPEC TKEY TSIG IXFR AXFR --UINFO UID GID UNSPEC TKEY TSIG IXFR AXFR
} }