mirror of
https://github.com/nmap/nmap.git
synced 2025-12-09 14:11:29 +00:00
8bd71aaf43
I made every script follow a standard form: it starts with the id, followed by the description. The description is contained in [[ ]] delimiters. The description is in the global description variable, not in a LuaDoc comment. Other LuaDoc information such as @args and @usage follows the description in a comment. The first paragraph of each description is a a short summary of what the script does. More detailed information, if any, is given in following paragraphs. I also improved some wording and formatting in a few cases.
105 lines
3.7 KiB
Lua
105 lines
3.7 KiB
Lua
id = "SSH Hostkey"
|
|
description = [[
|
|
Shows SSH hostkeys.
|
|
\n\n
|
|
Shows fingerprint or fingerprint and key depending on verbosity level.
|
|
Puts the found hostkeys in nmap.registry for other scripts to use them.
|
|
You can control the output with the ssh_hostkey script argument. Possible
|
|
values are bubble, visual, full and all.
|
|
]]
|
|
|
|
---
|
|
--@usage
|
|
-- nmap host --script SSH-hostkey --script-args ssh_hostkey=full\n
|
|
-- nmap host --script SSH-hostkey --script-args ssh_hostkey=all\n
|
|
-- nmap host --script SSH-hostkey --script-args ssh_hostkey='visual bubble'
|
|
--
|
|
--@output
|
|
-- 22/tcp open ssh\n
|
|
-- | SSH Hostkey: 2048 f0:58:ce:f4:aa:a4:59:1c:8e:dd:4d:07:44:c8:25:11 (RSA)\n
|
|
-- 22/tcp open ssh\n
|
|
-- | SSH Hostkey: 2048 f0:58:ce:f4:aa:a4:59:1c:8e:dd:4d:07:44:c8:25:11 (RSA)\n
|
|
-- | +--[ RSA 2048]----+\n
|
|
-- | | .E*+ |\n
|
|
-- | | oo |\n
|
|
-- | | . o . |\n
|
|
-- | | O . . |\n
|
|
-- | | o S o . |\n
|
|
-- | | = o + . |\n
|
|
-- | | . * o . |\n
|
|
-- | | = . |\n
|
|
-- | | o . |\n
|
|
-- |_ +-----------------+\n
|
|
-- 22/tcp open ssh\n
|
|
-- | SSH Hostkey: 2048 xuvah-degyp-nabus-zegah-hebur-nopig-bubig-difeg-hisym-rumef-cuxex (RSA)\n
|
|
-- |_ ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwVuv2gcr0maaKQ69VVIEv2ob4OxnuI64fkeOnCXD1lUx5tTA+vefXUWEMxgMuA7iX4irJHy2zer0NQ3Z3yJvr5scPgTYIaEOp5Uo/eGFG9Agpk5wE8CoF0e47iCAPHqzlmP2V7aNURLMODb3jVZuI07A2ZRrMGrD8d888E2ORVORv1rYeTYCqcMMoVFmX9l3gWEdk4yx3w5sD8v501Iuyd1v19mPfyhrI5E1E1nl/Xjp5N0/xP2GUBrdkDMxKaxqTPMie/f0dXBUPQQN697a5q+5lBRPhKYOtn6yQKCd9s1Q22nxn72Jmi1RzbMyYJ52FosDT755Qmb46GLrDMaZMQ==
|
|
author = "Sven Klemm <sven@c3d2.de>"
|
|
license = "Same as Nmap--See http://nmap.org/book/man-legal.html"
|
|
categories = {"safe","default","intrusive"}
|
|
|
|
require("shortport")
|
|
require("stdnse")
|
|
|
|
-- openssl is required for this script
|
|
if pcall(require,"openssl") then
|
|
require("ssh1")
|
|
require("ssh2")
|
|
else
|
|
action = function()
|
|
stdnse.print_debug( 3, "Skipping %s script because OpenSSL is missing.", id )
|
|
end
|
|
end
|
|
|
|
portrule = shortport.port_or_service(22, "ssh")
|
|
|
|
|
|
--- put hostkey in the nmap registry for usage by other scripts
|
|
--@param host nmap host table
|
|
--@param key host key table
|
|
local add_key_to_registry = function( host, key )
|
|
nmap.registry[id] = nmap.registry[id] or {}
|
|
nmap.registry[id][host.ip] = nmap.registry[id][host.ip] or {}
|
|
table.insert( nmap.registry[id][host.ip], key )
|
|
end
|
|
|
|
action = action or function(host, port)
|
|
local output = {}
|
|
local keys = {}
|
|
local _,key
|
|
local format = nmap.registry.args.ssh_hostkey or "hex"
|
|
local all_formats = format:find( 'all', 1, true )
|
|
|
|
key = ssh1.fetch_host_key( host, port )
|
|
if key then table.insert( keys, key ) end
|
|
|
|
key = ssh2.fetch_host_key( host, port, "ssh-dss" )
|
|
if key then table.insert( keys, key ) end
|
|
|
|
key = ssh2.fetch_host_key( host, port, "ssh-rsa" )
|
|
if key then table.insert( keys, key ) end
|
|
|
|
for _, key in ipairs( keys ) do
|
|
add_key_to_registry( host, key )
|
|
if format:find( 'hex', 1, true ) or all_formats then
|
|
table.insert( output, ssh1.fingerprint_hex( key.fingerprint, key.algorithm, key.bits ) )
|
|
end
|
|
if format:find( 'bubble', 1, true ) or all_formats then
|
|
table.insert( output, ssh1.fingerprint_bubblebabble( openssl.sha1(key.fp_input), key.algorithm, key.bits ) )
|
|
end
|
|
if format:find( 'visual', 1, true ) or all_formats then
|
|
-- insert empty line so table is not destroyed if this is the first
|
|
-- line of output
|
|
if #output == 0 then table.insert( output, " " ) end
|
|
table.insert( output, ssh1.fingerprint_visual( key.fingerprint, key.algorithm, key.bits ) )
|
|
end
|
|
if nmap.verbosity() > 1 or format:find( 'full', 1, true ) or all_formats then
|
|
table.insert( output, key.full_key )
|
|
end
|
|
end
|
|
|
|
if #output > 0 then
|
|
return table.concat( output, '\n' )
|
|
end
|
|
end
|
|
|