1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
|
local nmap = require "nmap"
local shortport = require "shortport"
local stun = require "stun"
local stdnse = require "stdnse"
description = [[
Retrieves the external IP address of a NAT:ed host using the STUN protocol.
]]
---
-- @usage
-- nmap -sV -PN -sU -p 3478 --script stun-info <ip>
--
-- @output
-- PORT STATE SERVICE
-- 3478/udp open|filtered stun
-- | stun-info:
-- |_ External IP: 80.216.42.106
--
author = "Patrik Karlsson"
license = "Same as Nmap--See https://nmap.org/book/man-legal.html"
categories = {"discovery", "safe"}
portrule = shortport.port_or_service(3478, "stun", "udp")
local function fail(err) return stdnse.format_output(false, err) end
action = function(host, port)
local helper = stun.Helper:new(host, port)
local status = helper:connect()
if ( not(status) ) then
return fail("Failed to connect to server")
end
local status, result = helper:getExternalAddress()
if ( not(status) ) then
return fail("Failed to retrieve external IP")
end
port.version.name = "stun"
nmap.set_port_state(host, port, "open")
nmap.set_port_version(host, port)
if ( result ) then
return "\n External IP: " .. result
end
end
|
