mirror of
https://github.com/nmap/nmap.git
synced 2025-12-06 04:31:29 +00:00
620f9fdb34
Whitespace is not significant, so this should not be a problem. https://secwiki.org/w/Nmap/Code_Standards
88 lines
2.6 KiB
Lua
88 lines
2.6 KiB
Lua
local http = require "http"
|
|
local ipOps = require "ipOps"
|
|
local json = require "json"
|
|
local stdnse = require "stdnse"
|
|
local table = require "table"
|
|
|
|
description = [[
|
|
Tries to identify the physical location of an IP address using the
|
|
IPInfoDB geolocation web service
|
|
(http://ipinfodb.com/ip_location_api.php).
|
|
|
|
There is no limit on requests to this service. However, the API key
|
|
needs to be obtained through free registration for this service:
|
|
<code>http://ipinfodb.com/login.php</code>
|
|
]]
|
|
|
|
---
|
|
-- @usage
|
|
-- nmap --script ip-geolocation-ipinfodb <target> --script-args ip-geolocation-ipinfodb.apikey=<API_key>
|
|
--
|
|
-- @args ip-geolocation-ipinfodb.apikey A sting specifying the api-key which
|
|
-- the user wants to use to access this service
|
|
--
|
|
-- @output
|
|
-- | ip-geolocation-ipinfodb:
|
|
-- | 74.207.244.221 (scanme.nmap.org)
|
|
-- | coordinates (lat,lon): 37.5384,-121.99
|
|
-- |_ city: FREMONT, CALIFORNIA, UNITED STATES
|
|
--
|
|
|
|
author = "Gorjan Petrovski"
|
|
license = "Same as Nmap--See http://nmap.org/book/man-legal.html"
|
|
categories = {"discovery","external","safe"}
|
|
|
|
|
|
hostrule = function(host)
|
|
local is_private, err = ipOps.isPrivate( host.ip )
|
|
if is_private == nil then
|
|
stdnse.print_debug( "%s not running: Error in Hostrule: %s.", SCRIPT_NAME, err )
|
|
return false
|
|
elseif is_private then
|
|
stdnse.print_debug("%s not running: Private IP address of target: %s", SCRIPT_NAME, host.ip)
|
|
return false
|
|
end
|
|
|
|
local api_key = stdnse.get_script_args(SCRIPT_NAME..".apikey")
|
|
if not (type(api_key)=="string") then
|
|
stdnse.print_debug("%s not running: No IPInfoDB API key specified.", SCRIPT_NAME)
|
|
return false
|
|
end
|
|
|
|
return true
|
|
end
|
|
|
|
-- No limit on requests. A free registration for an API key is a prerequisite
|
|
local ipinfodb = function(ip)
|
|
local api_key = stdnse.get_script_args(SCRIPT_NAME..".apikey")
|
|
local response = http.get("api.ipinfodb.com", 80, "/v3/ip-city/?key="..api_key.."&format=json".."&ip="..ip, nil)
|
|
local stat, loc = json.parse(response.body)
|
|
if not stat then
|
|
stdnse.print_debug("No response, possibly a network problem.")
|
|
return nil
|
|
end
|
|
if loc.statusMessage and loc.statusMessage == "Invalid API key." then
|
|
stdnse.print_debug(loc.statusMessage)
|
|
return nil
|
|
end
|
|
|
|
local output = {}
|
|
table.insert(output, "coordinates (lat,lon): "..loc.latitude..","..loc.longitude)
|
|
table.insert(output,"city: ".. loc.cityName..", ".. loc.regionName..", ".. loc.countryName)
|
|
|
|
return output
|
|
end
|
|
|
|
action = function(host,port)
|
|
local output = ipinfodb(host.ip)
|
|
|
|
if(#output~=0) then
|
|
output.name = host.ip
|
|
if host.targetname then
|
|
output.name = output.name.." ("..host.targetname..")"
|
|
end
|
|
end
|
|
|
|
return stdnse.format_output(true,output)
|
|
end
|