mirror of
https://github.com/nmap/nmap.git
synced 2025-12-06 20:51:30 +00:00
29 lines
574 B
Lua
29 lines
574 B
Lua
--- Checks if the target is an IRC zombie.
|
|
|
|
id = "IRC zombie"
|
|
|
|
description = "If port 113 responds before we ask it then something is fishy.\
|
|
Usually this means that the host is an irc zombie."
|
|
|
|
author = "Diman Todorov <diman.todorov@gmail.com>"
|
|
|
|
license = "Same as Nmap--See http://nmap.org/book/man-legal.html"
|
|
|
|
categories = {"malware"}
|
|
|
|
require "comm"
|
|
require "shortport"
|
|
|
|
portrule = shortport.port_or_service(113, "auth")
|
|
|
|
action = function(host, port)
|
|
local status, owner = comm.get_banner(host, port, {lines=1})
|
|
|
|
if not status then
|
|
return
|
|
end
|
|
|
|
return owner
|
|
end
|
|
|