mirror of
https://github.com/nmap/nmap.git
synced 2025-12-06 04:31:29 +00:00
813 lines
24 KiB
C++
813 lines
24 KiB
C++
|
|
extern "C" {
|
|
#include "lua.h"
|
|
#include "lauxlib.h"
|
|
#include "lualib.h"
|
|
}
|
|
|
|
#include <math.h>
|
|
|
|
#include "nmap.h"
|
|
#include "nmap_error.h"
|
|
#include "NmapOps.h"
|
|
#include "Target.h"
|
|
#include "TargetGroup.h"
|
|
#include "portlist.h"
|
|
#include "service_scan.h"
|
|
#include "nmap_rpc.h"
|
|
#include "nmap_dns.h"
|
|
#include "osscan.h"
|
|
#include "protocols.h"
|
|
|
|
#include "nse_nmaplib.h"
|
|
#include "nse_utility.h"
|
|
#include "nse_nsock.h"
|
|
#include "nse_dnet.h"
|
|
|
|
extern NmapOps o;
|
|
|
|
static const char *NSE_PROTOCOL_OP[] = {"tcp", "udp", "sctp", NULL};
|
|
static const int NSE_PROTOCOL[] = {IPPROTO_TCP, IPPROTO_UDP, IPPROTO_SCTP};
|
|
|
|
void set_version (lua_State *L, const struct serviceDeductions *sd)
|
|
{
|
|
setsfield(L, -1, "name", sd->name);
|
|
setnfield(L, -1, "name_confidence", sd->name_confidence);
|
|
setsfield(L, -1, "product", sd->product);
|
|
setsfield(L, -1, "version", sd->version);
|
|
setsfield(L, -1, "extrainfo", sd->extrainfo);
|
|
setsfield(L, -1, "hostname", sd->hostname);
|
|
setsfield(L, -1, "ostype", sd->ostype);
|
|
setsfield(L, -1, "devicetype", sd->devicetype);
|
|
setsfield(L, -1, "service_tunnel",
|
|
sd->service_tunnel == SERVICE_TUNNEL_NONE ? "none" :
|
|
sd->service_tunnel == SERVICE_TUNNEL_SSL ? "ssl" :
|
|
NULL);
|
|
setsfield(L, -1, "service_fp", sd->service_fp);
|
|
setsfield(L, -1, "service_dtype",
|
|
sd->dtype == SERVICE_DETECTION_TABLE ? "table" :
|
|
sd->dtype == SERVICE_DETECTION_PROBED ? "probed" :
|
|
NULL);
|
|
setsfield(L, -1, "rpc_status",
|
|
sd->rpc_status == RPC_STATUS_UNTESTED ? "untested" :
|
|
sd->rpc_status == RPC_STATUS_UNKNOWN ? "unknown" :
|
|
sd->rpc_status == RPC_STATUS_GOOD_PROG ? "good_prog" :
|
|
sd->rpc_status == RPC_STATUS_NOT_RPC ? "not_rpc" :
|
|
NULL);
|
|
if (sd->rpc_status == RPC_STATUS_GOOD_PROG)
|
|
{
|
|
setnfield(L, -1, "rpc_program", sd->rpc_program);
|
|
setnfield(L, -1, "rpc_lowver", sd->rpc_lowver);
|
|
setnfield(L, -1, "rpc_highver", sd->rpc_highver);
|
|
}
|
|
}
|
|
|
|
/* set some port state information onto the
|
|
* table which is currently on the stack
|
|
* */
|
|
void set_portinfo (lua_State *L, const Target *target, const Port *port)
|
|
{
|
|
struct serviceDeductions sd;
|
|
|
|
target->ports.getServiceDeductions(port->portno, port->proto, &sd);
|
|
|
|
setnfield(L, -1, "number", port->portno);
|
|
setsfield(L, -1, "service", sd.name);
|
|
setsfield(L, -1, "protocol", IPPROTO2STR(port->proto));
|
|
setsfield(L, -1, "state", statenum2str(port->state));
|
|
setsfield(L, -1, "reason", reason_str(port->reason.reason_id, 1));
|
|
lua_newtable(L);
|
|
set_version(L, &sd);
|
|
lua_setfield(L, -2, "version");
|
|
}
|
|
|
|
/* set host ip, host name and target name onto the
|
|
* table which is currently on the stack
|
|
* set name of the os run by the host onto the
|
|
* table which is currently on the stack
|
|
* the os name is really an array with perfect
|
|
* matches
|
|
* if an os scan wasn't performed, the array
|
|
* points to nil!
|
|
* */
|
|
void set_hostinfo(lua_State *L, Target *currenths) {
|
|
setsfield(L, -1, "ip", currenths->targetipstr());
|
|
setsfield(L, -1, "name", currenths->HostName());
|
|
setsfield(L, -1, "targetname", currenths->TargetName());
|
|
if (currenths->directlyConnectedOrUnset() != -1)
|
|
setbfield(L, -1, "directly_connected", currenths->directlyConnected());
|
|
if (currenths->MACAddress())
|
|
{
|
|
lua_pushlstring(L, (const char *) currenths->MACAddress() , 6);
|
|
lua_setfield(L, -2, "mac_addr");
|
|
}
|
|
if (currenths->NextHopMACAddress())
|
|
{
|
|
lua_pushlstring(L, (const char *) currenths->NextHopMACAddress() , 6);
|
|
lua_setfield(L, -2, "mac_addr_next_hop");
|
|
}
|
|
if (currenths->SrcMACAddress())
|
|
{
|
|
lua_pushlstring(L, (const char *) currenths->SrcMACAddress(), 6);
|
|
lua_setfield(L, -2, "mac_addr_src");
|
|
}
|
|
setsfield(L, -1, "interface", currenths->deviceName());
|
|
setnfield(L, -1, "interface_mtu", currenths->MTU());
|
|
if ((u32)(currenths->v4host().s_addr))
|
|
{
|
|
struct in_addr adr = currenths->v4host();
|
|
lua_pushlstring(L, (const char *) &adr, 4);
|
|
lua_setfield(L, -2, "bin_ip");
|
|
}
|
|
if ((u32)(currenths->v4source().s_addr))
|
|
{
|
|
struct in_addr adr = currenths->v4source();
|
|
lua_pushlstring(L, (const char *) &adr, 4);
|
|
lua_setfield(L, -2, "bin_ip_src");
|
|
}
|
|
|
|
lua_newtable(L);
|
|
setnfield(L, -1, "srtt", (lua_Number) currenths->to.srtt / 1000000.0);
|
|
setnfield(L, -1, "rttvar", (lua_Number) currenths->to.rttvar / 1000000.0);
|
|
setnfield(L, -1, "timeout", (lua_Number) currenths->to.timeout / 1000000.0);
|
|
lua_setfield(L, -2, "times");
|
|
|
|
/* add distance (in hops) if traceroute has been performed */
|
|
if (currenths->traceroute_hops.size() > 0)
|
|
{
|
|
std::list<TracerouteHop>::iterator it;
|
|
|
|
lua_newtable(L);
|
|
for (it = currenths->traceroute_hops.begin(); it != currenths->traceroute_hops.end(); it++)
|
|
{
|
|
lua_newtable(L);
|
|
/* fill the table if the hop has not timed out, otherwise an empty table
|
|
* is inserted */
|
|
if (!it->timedout) {
|
|
setsfield(L, -1, "ip", inet_ntop_ez(&it->addr, sizeof(it->addr)));
|
|
if (!it->name.empty())
|
|
setsfield(L, -1, "name", it->name.c_str());
|
|
lua_newtable(L);
|
|
setnfield(L, -1, "srtt", it->rtt / 1000.0);
|
|
lua_setfield(L, -2, "times");
|
|
}
|
|
lua_rawseti(L, -2, lua_objlen(L, -2)+1);
|
|
}
|
|
lua_setfield(L, -2, "traceroute");
|
|
}
|
|
|
|
FingerPrintResults *FPR = currenths->FPR;
|
|
|
|
/* if there has been an os scan which returned a pretty certain
|
|
* result, we will use it in the scripts
|
|
* matches which aren't perfect are not needed in the scripts
|
|
*/
|
|
if (currenths->osscanPerformed() && FPR != NULL &&
|
|
FPR->overall_results == OSSCAN_SUCCESS && FPR->num_perfect_matches > 0 &&
|
|
FPR->num_perfect_matches <= 8 )
|
|
{
|
|
int i;
|
|
|
|
lua_newtable(L);
|
|
// this will run at least one time and at most 8 times, see if condition
|
|
for(i = 0; FPR->accuracy[i] == 1; i++) {
|
|
lua_pushstring(L, FPR->prints[i]->OS_name);
|
|
lua_rawseti(L, -2, i+1);
|
|
}
|
|
lua_setfield(L, -2, "os");
|
|
}
|
|
}
|
|
|
|
static int l_clock_ms (lua_State *L)
|
|
{
|
|
struct timeval tv;
|
|
gettimeofday(&tv, NULL);
|
|
/* milliseconds since Epoch */
|
|
lua_pushnumber(L,
|
|
ceil((lua_Number)tv.tv_sec*1000+(lua_Number)tv.tv_usec/1000));
|
|
return 1;
|
|
}
|
|
|
|
static int l_clock (lua_State *L)
|
|
{
|
|
struct timeval tv;
|
|
gettimeofday(&tv, NULL);
|
|
/* floating point seconds since Epoch */
|
|
lua_pushnumber(L, TIMEVAL_SECS(tv));
|
|
return 1;
|
|
}
|
|
|
|
/* The actual mutex returned by the nmap.mutex function.
|
|
* This function has 4 upvalues:
|
|
* (1) Table (array) of waiting threads.
|
|
* (2) The running thread or nil.
|
|
* (3) A unique table key used for destructors.
|
|
* (4) The destructor function, aux_mutex_done.
|
|
*/
|
|
static int aux_mutex (lua_State *L)
|
|
{
|
|
enum what {LOCK, DONE, TRYLOCK, RUNNING};
|
|
static const char * op[] = {"lock", "done", "trylock", "running", NULL};
|
|
switch (luaL_checkoption(L, 1, NULL, op))
|
|
{
|
|
case LOCK:
|
|
if (lua_isnil(L, lua_upvalueindex(2))) // check running
|
|
{
|
|
lua_pushthread(L);
|
|
lua_replace(L, lua_upvalueindex(2)); // set running
|
|
lua_pushvalue(L, lua_upvalueindex(3)); // unique identifier
|
|
lua_pushvalue(L, lua_upvalueindex(4)); // aux_mutex_done closure
|
|
nse_destructor(L, 'a');
|
|
return 0;
|
|
}
|
|
lua_pushthread(L);
|
|
lua_rawseti(L, lua_upvalueindex(1), lua_objlen(L, lua_upvalueindex(1))+1);
|
|
return nse_yield(L, 0, NULL);
|
|
case DONE:
|
|
lua_pushthread(L);
|
|
if (!lua_equal(L, -1, lua_upvalueindex(2)))
|
|
luaL_error(L, "%s", "do not have a lock on this mutex");
|
|
/* remove destructor */
|
|
lua_pushvalue(L, lua_upvalueindex(3));
|
|
nse_destructor(L, 'r');
|
|
/* set new thread to lock the mutex */
|
|
lua_getfield(L, LUA_REGISTRYINDEX, "_LOADED");
|
|
lua_getfield(L, -1, "table");
|
|
lua_getfield(L, -1, "remove");
|
|
lua_pushvalue(L, lua_upvalueindex(1));
|
|
lua_pushinteger(L, 1);
|
|
lua_call(L, 2, 1);
|
|
lua_replace(L, lua_upvalueindex(2));
|
|
if (lua_isthread(L, lua_upvalueindex(2))) // waiting threads had a thread
|
|
{
|
|
lua_State *thread = lua_tothread(L, lua_upvalueindex(2));
|
|
lua_pushvalue(L, lua_upvalueindex(3)); // destructor key
|
|
lua_pushvalue(L, lua_upvalueindex(4)); // destructor
|
|
luaL_checkstack(thread, 2, "adding destructor");
|
|
lua_xmove(L, thread, 2);
|
|
nse_destructor(thread, 'a');
|
|
nse_restore(thread, 0);
|
|
}
|
|
return 0;
|
|
case TRYLOCK:
|
|
if (lua_isnil(L, lua_upvalueindex(2)))
|
|
{
|
|
lua_pushthread(L);
|
|
lua_replace(L, lua_upvalueindex(2));
|
|
lua_pushvalue(L, lua_upvalueindex(3)); // unique identifier
|
|
lua_pushvalue(L, lua_upvalueindex(4)); // aux_mutex_done closure
|
|
nse_destructor(L, 'a');
|
|
lua_pushboolean(L, true);
|
|
}
|
|
else
|
|
lua_pushboolean(L, false);
|
|
return 1;
|
|
case RUNNING:
|
|
lua_pushvalue(L, lua_upvalueindex(2));
|
|
return 1;
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
/* This is the mutex destructor called when a thread ends but failed to
|
|
* unlock the mutex.
|
|
* It has 1 upvalue: The nmap.mutex function closure.
|
|
*/
|
|
static int aux_mutex_done (lua_State *L)
|
|
{
|
|
lua_State *thread = lua_tothread(L, 1);
|
|
lua_pushvalue(L, lua_upvalueindex(1)); // aux_mutex, actual mutex closure
|
|
lua_pushliteral(L, "done");
|
|
luaL_checkstack(thread, 2, "aux_mutex_done");
|
|
lua_xmove(L, thread, 2);
|
|
if (lua_pcall(thread, 1, 0, 0) != 0) lua_pop(thread, 1); // pop error msg
|
|
return 0;
|
|
}
|
|
|
|
static int l_mutex (lua_State *L)
|
|
{
|
|
int t = lua_type(L, 1);
|
|
if (t == LUA_TNONE || t == LUA_TNIL || t == LUA_TBOOLEAN || t == LUA_TNUMBER)
|
|
luaL_argerror(L, 1, "object expected");
|
|
lua_pushvalue(L, 1);
|
|
lua_gettable(L, lua_upvalueindex(1));
|
|
if (lua_isnil(L, -1))
|
|
{
|
|
lua_newtable(L); // waiting threads
|
|
lua_pushnil(L); // running thread
|
|
lua_newtable(L); // unique object as an identifier
|
|
lua_pushnil(L); // placeholder for aux_mutex_done
|
|
lua_pushcclosure(L, aux_mutex, 4);
|
|
lua_pushvalue(L, -1); // mutex closure
|
|
lua_pushcclosure(L, aux_mutex_done, 1);
|
|
lua_setupvalue(L, -2, 4); // replace nil upvalue with aux_mutex_done
|
|
lua_pushvalue(L, 1); // "mutex object"
|
|
lua_pushvalue(L, -2); // mutex function
|
|
lua_settable(L, lua_upvalueindex(1)); // Add to mutex table
|
|
}
|
|
return 1; // aux_mutex closure
|
|
}
|
|
|
|
static int aux_condvar (lua_State *L)
|
|
{
|
|
size_t i, n = 0;
|
|
enum {WAIT, SIGNAL, BROADCAST};
|
|
static const char * op[] = {"wait", "signal", "broadcast"};
|
|
switch (luaL_checkoption(L, 1, NULL, op))
|
|
{
|
|
case WAIT:
|
|
lua_pushthread(L);
|
|
lua_rawseti(L, lua_upvalueindex(1), lua_objlen(L, lua_upvalueindex(1))+1);
|
|
return nse_yield(L, 0, NULL);
|
|
case SIGNAL:
|
|
n = lua_objlen(L, lua_upvalueindex(1));
|
|
if (n == 0)
|
|
n = 1;
|
|
break;
|
|
case BROADCAST:
|
|
n = 1;
|
|
break;
|
|
}
|
|
lua_pushvalue(L, lua_upvalueindex(1));
|
|
for (i = lua_objlen(L, -1); i >= n; i--)
|
|
{
|
|
lua_rawgeti(L, -1, i); /* get the thread */
|
|
if (lua_isthread(L, -1))
|
|
nse_restore(lua_tothread(L, -1), 0);
|
|
lua_pop(L, 1); /* pop the thread */
|
|
lua_pushnil(L);
|
|
lua_rawseti(L, -2, i);
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
static int aux_condvar_done (lua_State *L)
|
|
{
|
|
lua_State *thread = lua_tothread(L, 1);
|
|
lua_pushvalue(L, lua_upvalueindex(1)); // aux_condvar closure
|
|
lua_pushliteral(L, "broadcast"); // wake up all threads waiting
|
|
luaL_checkstack(thread, 2, "aux_condvar_done");
|
|
lua_xmove(L, thread, 2);
|
|
if (lua_pcall(thread, 1, 0, 0) != 0) lua_pop(thread, 1); // pop error msg
|
|
return 0;
|
|
}
|
|
|
|
static int l_condvar (lua_State *L)
|
|
{
|
|
int t = lua_type(L, 1);
|
|
if (t == LUA_TNONE || t == LUA_TNIL || t == LUA_TBOOLEAN || t == LUA_TNUMBER)
|
|
luaL_argerror(L, 1, "object expected");
|
|
lua_pushvalue(L, 1);
|
|
lua_gettable(L, lua_upvalueindex(1));
|
|
if (lua_isnil(L, -1))
|
|
{
|
|
lua_newtable(L); // waiting threads
|
|
lua_pushnil(L); // placeholder for aux_mutex_done
|
|
lua_pushcclosure(L, aux_condvar, 2);
|
|
lua_pushvalue(L, -1); // aux_condvar closure
|
|
lua_pushcclosure(L, aux_condvar_done, 1);
|
|
lua_setupvalue(L, -2, 2); // replace nil upvalue with aux_condvar_done
|
|
lua_pushvalue(L, 1); // "condition variable object"
|
|
lua_pushvalue(L, -2); // condvar function
|
|
lua_settable(L, lua_upvalueindex(1)); // Add to condition variable table
|
|
}
|
|
lua_pushvalue(L, -1); // aux_condvar closure
|
|
lua_getupvalue(L, -1, 2); // aux_mutex_done closure
|
|
nse_destructor(L, 'a');
|
|
return 1; // condition variable closure
|
|
}
|
|
|
|
/* Generates an array of port data for the given host and leaves it on
|
|
* the top of the stack
|
|
*/
|
|
static int l_get_ports (lua_State *L)
|
|
{
|
|
static const char *state_op[] = {"open", "filtered", "unfiltered", "closed",
|
|
"open|filtered", "closed|filtered", NULL};
|
|
static const int states[] = {PORT_OPEN, PORT_FILTERED, PORT_UNFILTERED,
|
|
PORT_CLOSED, PORT_OPENFILTERED, PORT_CLOSEDFILTERED};
|
|
Port *p = NULL;
|
|
Port port; /* dummy Port for nextPort */
|
|
Target *target = get_target(L, 1);
|
|
int protocol = NSE_PROTOCOL[luaL_checkoption(L, 3, NULL, NSE_PROTOCOL_OP)];
|
|
int state = states[luaL_checkoption(L, 4, NULL, state_op)];
|
|
|
|
if (!lua_isnil(L, 2))
|
|
p = get_port(L, target, &port, 2);
|
|
|
|
if (!(p = target->ports.nextPort(p, &port, protocol, state))) {
|
|
lua_pushnil(L);
|
|
} else {
|
|
lua_newtable(L);
|
|
set_portinfo(L, target, p);
|
|
}
|
|
return 1;
|
|
}
|
|
|
|
/* this function can be called from lua to obtain the port state
|
|
* of a port different from the one the script rule is matched
|
|
* against
|
|
* it retrieves the host.ip of the host on which the script is
|
|
* currently running, looks up the host in the table of currently
|
|
* processed hosts and returns a table containing the state of
|
|
* the port we have been asked for
|
|
* this function is useful if we want rules which want to know
|
|
* the state of more than one port
|
|
* */
|
|
static int l_get_port_state (lua_State *L)
|
|
{
|
|
Target *target;
|
|
Port *p;
|
|
Port port; /* dummy Port */
|
|
target = get_target(L, 1);
|
|
p = get_port(L, target, &port, 2);
|
|
if (p == NULL)
|
|
lua_pushnil(L);
|
|
else
|
|
{
|
|
lua_newtable(L);
|
|
set_portinfo(L, target, p);
|
|
}
|
|
return 1;
|
|
}
|
|
|
|
/* this function must be used by version category scripts or any other
|
|
* lua code to check if a given port with it's protocol are in the
|
|
* exclude directive found in the nmap-service-probes file.
|
|
* */
|
|
static int l_port_is_excluded (lua_State *L)
|
|
{
|
|
unsigned short portno = (unsigned short) luaL_checkint(L, 1);
|
|
int protocol = NSE_PROTOCOL[luaL_checkoption(L, 2, NULL, NSE_PROTOCOL_OP)];
|
|
|
|
lua_pushboolean(L, AllProbes::check_excluded_port(portno, protocol));
|
|
return 1;
|
|
}
|
|
|
|
/* unlike set_portinfo() this function sets the port state in nmap.
|
|
* if for example a udp port was seen by the script as open instead of
|
|
* filtered, the script is free to say so.
|
|
* */
|
|
static int l_set_port_state (lua_State *L)
|
|
{
|
|
static const int opstate[] = {PORT_OPEN, PORT_CLOSED};
|
|
static const char *op[] = {"open", "closed", NULL};
|
|
Target *target;
|
|
Port *p;
|
|
Port port;
|
|
target = get_target(L, 1);
|
|
if ((p = get_port(L, target, &port, 2)) != NULL)
|
|
{
|
|
switch (opstate[luaL_checkoption(L, 3, NULL, op)])
|
|
{
|
|
case PORT_OPEN:
|
|
if (p->state == PORT_OPEN)
|
|
return 0;
|
|
target->ports.setPortState(p->portno, p->proto, PORT_OPEN);
|
|
break;
|
|
case PORT_CLOSED:
|
|
if (p->state == PORT_CLOSED)
|
|
return 0;
|
|
target->ports.setPortState(p->portno, p->proto, PORT_CLOSED);
|
|
break;
|
|
}
|
|
target->ports.setStateReason(p->portno, p->proto, ER_SCRIPT, 0, 0);
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
static int l_set_port_version (lua_State *L)
|
|
{
|
|
static const enum serviceprobestate opversion[] = {
|
|
PROBESTATE_FINISHED_HARDMATCHED,
|
|
PROBESTATE_FINISHED_SOFTMATCHED,
|
|
PROBESTATE_FINISHED_NOMATCH,
|
|
PROBESTATE_FINISHED_TCPWRAPPED,
|
|
PROBESTATE_INCOMPLETE
|
|
};
|
|
static const char *ops[] = {
|
|
"hardmatched",
|
|
"softmatched",
|
|
"nomatch",
|
|
"tcpwrapped",
|
|
"incomplete"
|
|
};
|
|
Target *target;
|
|
Port *p;
|
|
Port port;
|
|
enum service_tunnel_type tunnel = SERVICE_TUNNEL_NONE;
|
|
enum serviceprobestate probestate =
|
|
opversion[luaL_checkoption(L, 3, "hardmatched", ops)];
|
|
|
|
target = get_target(L, 1);
|
|
if ((p = get_port(L, target, &port, 2)) == NULL)
|
|
return 0; /* invalid port */
|
|
|
|
lua_settop(L, 3);
|
|
lua_getfield(L, 2, "version"); /* index 4 */
|
|
if (!lua_istable(L, -1))
|
|
luaL_error(L, "port 'version' field must be a table");
|
|
const char
|
|
*name = (lua_getfield(L, 4, "name"), lua_tostring(L, -1)),
|
|
*product = (lua_getfield(L, 4, "product"), lua_tostring(L, -1)),
|
|
*version = (lua_getfield(L, 4, "version"), lua_tostring(L, -1)),
|
|
*extrainfo = (lua_getfield(L, 4, "extrainfo"), lua_tostring(L, -1)),
|
|
*hostname = (lua_getfield(L, 4, "hostname"), lua_tostring(L, -1)),
|
|
*ostype = (lua_getfield(L, 4, "ostype"), lua_tostring(L, -1)),
|
|
*devicetype = (lua_getfield(L, 4, "devicetype"), lua_tostring(L, -1)),
|
|
*service_tunnel = (lua_getfield(L, 4, "service_tunnel"),
|
|
lua_tostring(L, -1));
|
|
if (service_tunnel == NULL || strcmp(service_tunnel, "none") == 0)
|
|
tunnel = SERVICE_TUNNEL_NONE;
|
|
else if (strcmp(service_tunnel, "ssl") == 0)
|
|
tunnel = SERVICE_TUNNEL_SSL;
|
|
else
|
|
luaL_argerror(L, 2, "invalid value for port.version.service_tunnel");
|
|
|
|
if (o.servicescan)
|
|
target->ports.setServiceProbeResults(p->portno, p->proto,
|
|
probestate, name, tunnel, product,
|
|
version, extrainfo, hostname, ostype, devicetype, NULL);
|
|
else
|
|
target->ports.setServiceProbeResults(p->portno, p->proto,
|
|
probestate, name, tunnel, NULL, NULL,
|
|
NULL, NULL, NULL, NULL, NULL);
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int l_log_write (lua_State *L)
|
|
{
|
|
static const char * const ops[] = {"stdout", "stderr", NULL};
|
|
static const int logs[] = {LOG_STDOUT, LOG_STDERR};
|
|
int log = logs[luaL_checkoption(L, 1, NULL, ops)];
|
|
log_write(log, "%s: %s\n", SCRIPT_ENGINE, luaL_checkstring(L, 2));
|
|
log_flush(log);
|
|
return 0;
|
|
}
|
|
|
|
static int new_try_finalize (lua_State *L)
|
|
{
|
|
if (!(lua_isboolean(L, 1) || lua_isnoneornil(L, 1)))
|
|
error("finalizing a non-conforming function that did not first "
|
|
"return a boolean");
|
|
if (!lua_toboolean(L, 1))
|
|
{
|
|
if (!lua_isnil(L, lua_upvalueindex(1)))
|
|
{
|
|
lua_pushvalue(L, lua_upvalueindex(1));
|
|
lua_call(L, 0, 0);
|
|
}
|
|
lua_settop(L, 2);
|
|
lua_error(L);
|
|
}
|
|
return lua_gettop(L)-1; /* omit first boolean argument */
|
|
}
|
|
|
|
static int l_new_try (lua_State *L)
|
|
{
|
|
lua_settop(L, 1);
|
|
lua_pushcclosure(L, new_try_finalize, 1);
|
|
return 1;
|
|
}
|
|
|
|
static int l_get_verbosity (lua_State *L)
|
|
{
|
|
int verbosity;
|
|
|
|
verbosity = o.verbose;
|
|
/* Check if script is selected by name. When a script is selected by name,
|
|
we lie to it and say the verbosity is one higher than it really is. */
|
|
verbosity += (nse_selectedbyname(L), lua_toboolean(L, -1) ? 1 : 0);
|
|
|
|
lua_pushnumber(L, verbosity);
|
|
return 1;
|
|
}
|
|
|
|
static int l_get_debugging (lua_State *L)
|
|
{
|
|
lua_pushnumber(L, o.debugging);
|
|
return 1;
|
|
}
|
|
|
|
static int l_get_have_ssl (lua_State *L) {
|
|
#if HAVE_OPENSSL
|
|
lua_pushboolean(L, true);
|
|
#else
|
|
lua_pushboolean(L, false);
|
|
#endif
|
|
return 1;
|
|
}
|
|
|
|
static int l_fetchfile (lua_State *L)
|
|
{
|
|
char buf[FILENAME_MAX];
|
|
if (nmap_fetchfile(buf, sizeof(buf), luaL_checkstring(L, 1)) != 1)
|
|
lua_pushnil(L);
|
|
else
|
|
lua_pushstring(L, buf);
|
|
return 1;
|
|
}
|
|
|
|
static int l_get_timing_level (lua_State *L)
|
|
{
|
|
lua_pushnumber(L, o.timing_level);
|
|
return 1;
|
|
}
|
|
|
|
/* Save new discovered targets.
|
|
*
|
|
* This function can take a Vararg expression:
|
|
* A vararg expression that represents targets (IPs or Hostnames).
|
|
*
|
|
* Returns two values if it receives target arguments:
|
|
* The number of targets that were added, or 0 on failures.
|
|
* An error message on failures.
|
|
*
|
|
* If this function was called without an argument then it
|
|
* will simply return the number of pending targets that are
|
|
* in the queue (waiting to be passed to Nmap).
|
|
*
|
|
* If the function was only able to add a one target, then we
|
|
* consider this success. */
|
|
static int l_add_targets (lua_State *L)
|
|
{
|
|
int n;
|
|
unsigned long ntarget = 0;
|
|
|
|
if (lua_gettop(L) > 0) {
|
|
for (n = 1; n <= lua_gettop(L); n++) {
|
|
if (!NewTargets::insert(luaL_checkstring(L, n)))
|
|
break;
|
|
ntarget++;
|
|
}
|
|
/* was able to add some targets */
|
|
if (ntarget) {
|
|
lua_pushnumber(L, ntarget);
|
|
return 1;
|
|
/* errors */
|
|
} else {
|
|
lua_pushnumber(L, ntarget);
|
|
lua_pushstring(L, "failed to add new targets.");
|
|
return 2;
|
|
}
|
|
} else {
|
|
/* function called without arguments */
|
|
/* push the number of pending targets that are in the queue */
|
|
lua_pushnumber(L, NewTargets::insert(""));
|
|
return 1;
|
|
}
|
|
}
|
|
|
|
/* Return the number of added targets */
|
|
static int l_get_new_targets_num (lua_State *L)
|
|
{
|
|
lua_pushnumber(L, NewTargets::get_number());
|
|
return 1;
|
|
}
|
|
|
|
// returns a table with DNS servers known to nmap
|
|
static int l_get_dns_servers (lua_State *L)
|
|
{
|
|
std::list<std::string> servs2 = get_dns_servers();
|
|
std::list<std::string>::iterator servI2;
|
|
int i = 1;
|
|
|
|
lua_newtable(L);
|
|
for(servI2 = servs2.begin(); servI2 != servs2.end(); servI2++) {
|
|
lua_pushstring(L, servI2->c_str());
|
|
lua_rawseti(L, -2, i++);
|
|
}
|
|
return 1;
|
|
}
|
|
|
|
static int l_is_privileged(lua_State *L)
|
|
{
|
|
lua_pushboolean(L, o.isr00t);
|
|
return 1;
|
|
}
|
|
|
|
/* Takes a host and optional address family and returns a table of
|
|
* addresses
|
|
*/
|
|
static int l_resolve(lua_State *L)
|
|
{
|
|
static const char *fam_op[] = { "inet", "inet6", "unspec", NULL };
|
|
static const int fams[] = { AF_INET, AF_INET6, AF_UNSPEC };
|
|
struct sockaddr_storage ss;
|
|
struct addrinfo *addr, *addrs;
|
|
int i;
|
|
char *host;
|
|
int af = fams[luaL_checkoption(L, 2, "unspec", fam_op)];
|
|
|
|
if (!lua_isstring(L, 1))
|
|
luaL_error(L, "Host to resolve must be a string");
|
|
host = (char *) lua_tostring(L, 1);
|
|
|
|
addrs = resolve_all(host, af);
|
|
|
|
if (!addrs) {
|
|
lua_pushboolean(L, false);
|
|
lua_pushstring(L, "Failed to resolve");
|
|
return 2;
|
|
}
|
|
|
|
lua_pushboolean(L, true);
|
|
|
|
lua_newtable(L);
|
|
|
|
for (addr = addrs, i = 1; addr != NULL; addr = addr->ai_next) {
|
|
if (af != AF_UNSPEC && addr->ai_family != af)
|
|
continue;
|
|
if (addr->ai_addrlen > sizeof(ss))
|
|
continue;
|
|
memcpy(&ss, addr->ai_addr, addr->ai_addrlen);
|
|
lua_pushstring(L, inet_socktop(&ss));
|
|
lua_rawseti(L, -2, i++);
|
|
}
|
|
|
|
if (addrs != NULL)
|
|
freeaddrinfo(addrs);
|
|
|
|
return 2;
|
|
}
|
|
|
|
static int l_address_family(lua_State *L)
|
|
{
|
|
if (o.af() == AF_INET)
|
|
lua_pushstring(L, "inet");
|
|
else
|
|
lua_pushstring(L, "inet6");
|
|
return 1;
|
|
}
|
|
|
|
int luaopen_nmap (lua_State *L)
|
|
{
|
|
static const luaL_reg nmaplib [] = {
|
|
{"get_port_state", l_get_port_state},
|
|
{"get_ports", l_get_ports},
|
|
{"set_port_state", l_set_port_state},
|
|
{"set_port_version", l_set_port_version},
|
|
{"port_is_excluded", l_port_is_excluded},
|
|
{"new_socket", l_nsock_new},
|
|
{"new_dnet", l_dnet_new},
|
|
{"get_interface_link", l_dnet_get_interface_link},
|
|
{"clock_ms", l_clock_ms},
|
|
{"clock", l_clock},
|
|
{"log_write", l_log_write},
|
|
{"new_try", l_new_try},
|
|
{"verbosity", l_get_verbosity},
|
|
{"debugging", l_get_debugging},
|
|
{"have_ssl", l_get_have_ssl},
|
|
{"fetchfile", l_fetchfile},
|
|
{"timing_level", l_get_timing_level},
|
|
{"add_targets", l_add_targets},
|
|
{"new_targets_num",l_get_new_targets_num},
|
|
{"get_dns_servers", l_get_dns_servers},
|
|
{"is_privileged", l_is_privileged},
|
|
{"resolve", l_resolve},
|
|
{"address_family", l_address_family},
|
|
{NULL, NULL}
|
|
};
|
|
|
|
lua_settop(L, 0); // clear stack
|
|
luaL_register(L, "nmap", nmaplib);
|
|
|
|
weak_table(L, 0, 0, "v"); /* allow closures to be collected (see l_mutex) */
|
|
lua_pushcclosure(L, l_mutex, 1); /* mutex function */
|
|
lua_setfield(L, -2, "mutex");
|
|
|
|
weak_table(L, 0, 0, "v"); /* allow closures to be collected (see l_condvar) */
|
|
lua_pushcclosure(L, l_condvar, 1); // condvar function
|
|
lua_setfield(L, -2, "condvar");
|
|
|
|
lua_newtable(L);
|
|
lua_setfield(L, -2, "registry");
|
|
|
|
lua_pushcclosure(L, luaopen_nsock, 0);
|
|
lua_pushliteral(L, "nsock");
|
|
lua_call(L, 1, 0);
|
|
|
|
lua_pushcclosure(L, luaopen_dnet, 0);
|
|
lua_pushliteral(L, "dnet");
|
|
lua_call(L, 1, 0);
|
|
|
|
lua_settop(L, 1); // just nmap lib on stack
|
|
|
|
return 1;
|
|
}
|
|
|
|
/* Register C functions that belong in the stdnse namespace. They are loaded
|
|
from here in stdnse.lua. */
|
|
int luaopen_stdnse_c (lua_State *L)
|
|
{
|
|
static const luaL_reg stdnse_clib [] = {
|
|
{"sleep", l_nsock_sleep},
|
|
{NULL, NULL}
|
|
};
|
|
|
|
luaL_register(L, "stdnse.c", stdnse_clib);
|
|
|
|
return 1;
|
|
}
|