mirror of
https://github.com/nmap/nmap.git
synced 2025-12-06 04:31:29 +00:00
ac5a89a8e1
for lib in nselib/*.lua*; do l=${lib#*/}; l=${l%.lua*}; find . -name \
\*.lua -o -name \*.nse | xargs grep -l "require .$l\>" | xargs grep \
-c "\<$l\." | grep ':0$' | awk -F: '{print "'$l'", $1}'; done
Did not remove calls to stdnse.silent_require since these can be used to
abort script execution if OpenSSL is not included, even if the script
does not directly call openssl.* (perhaps it uses comm.tryssl instead,
for instance).
Also did not remove require "strict", since that library is special and
modifies the environment.
66 lines
1.7 KiB
Lua
66 lines
1.7 KiB
Lua
local shortport = require "shortport"
|
|
local socks = require "socks"
|
|
local table = require "table"
|
|
|
|
description = [[
|
|
Determines the supported authentication mechanisms of a remote SOCKS
|
|
proxy server. Starting with SOCKS version 5 socks servers may support
|
|
authentication. The script checks for the following authentication
|
|
types:
|
|
0 - No authentication
|
|
1 - GSSAPI
|
|
2 - Username and password
|
|
]]
|
|
|
|
---
|
|
-- @usage
|
|
-- nmap -p 1080 <ip> --script socks-auth-info
|
|
--
|
|
-- @output
|
|
-- PORT STATE SERVICE
|
|
-- 1080/tcp open socks
|
|
-- | socks-auth-info:
|
|
-- | No authentication
|
|
-- |_ Username and password
|
|
--
|
|
-- @xmloutput
|
|
-- <table>
|
|
-- <elem key="method">0</elem>
|
|
-- <elem key="name">No authentication</elem>
|
|
-- </table>
|
|
-- <table>
|
|
-- <elem key="method">2</elem>
|
|
-- <elem key="name">Username and password</elem>
|
|
-- </table>
|
|
|
|
author = "Patrik Karlsson"
|
|
license = "Same as Nmap--See http://nmap.org/book/man-legal.html"
|
|
categories = {"discovery", "safe", "default"}
|
|
|
|
portrule = shortport.port_or_service({1080, 9050}, {"socks", "socks5", "tor-socks"})
|
|
|
|
action = function(host, port)
|
|
|
|
local helper = socks.Helper:new(host, port)
|
|
local auth_methods = {}
|
|
|
|
-- iterate over all authentication methods as the server only responds with
|
|
-- a single supported one if we send a list.
|
|
local mt = { __tostring = function(t) return t.name end }
|
|
for _, method in pairs(socks.AuthMethod) do
|
|
local status, response = helper:connect( method )
|
|
if ( status ) then
|
|
local out = {
|
|
method = response.method,
|
|
name = helper:authNameByNumber(response.method)
|
|
}
|
|
setmetatable(out, mt)
|
|
table.insert(auth_methods, out)
|
|
end
|
|
end
|
|
|
|
helper:close()
|
|
if ( 0 == #auth_methods ) then return end
|
|
return auth_methods
|
|
end
|