1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246
|
local comm = require "comm"
local datetime = require "datetime"
local nmap = require "nmap"
local shortport = require "shortport"
local stdnse = require "stdnse"
local string = require "string"
local stringaux = require "stringaux"
local table = require "table"
description = [[
Parses and displays the banner information of an OpenLookup (network key-value store) server.
]]
---
-- @usage
-- nmap -p 5850 --script openlookup-info <target>
--
-- @output
-- 5850/tcp open openlookup
-- | openlookup-info:
-- | sync port: 5850
-- | name: Paradise, Arizona
-- | your address: 127.0.0.1:50162
-- | timestamp: 2011-05-21T11:26:07
-- | version: 2.7
-- |_ http port: 5851
--
-- @xmloutput
-- <elem key="sync port">5850</elem>
-- <elem key="name">Paradise, Arizona</elem>
-- <elem key="your address">127.0.0.1:50162</elem>
-- <elem key="timestamp">2011-05-21T11:26:07</elem>
-- <elem key="version">2.7</elem>
-- <elem key="http port">5851</elem>
author = "Toni Ruottu"
license = "Same as Nmap--See https://nmap.org/book/man-legal.html"
categories = {"default", "discovery", "safe", "version"}
portrule = shortport.version_port_or_service(5850, "openlookup")
-- Netstring helpers
-- http://cr.yp.to/proto/netstrings.txt
-- parses a Netstring element
local function parsechunk(data)
local parts = stringaux.strsplit(":", data)
if #parts < 2 then
return nil, data
end
local head = table.remove(parts, 1)
local size = tonumber(head)
if not size then
return nil, data
end
local body = table.concat(parts, ":")
if #body < size then
return nil, data
end
local chunk = string.sub(body, 1, size)
local skip = #chunk + string.len(",")
local rest = string.sub(body, skip + 1)
return chunk, rest
end
-- NSON helpers
-- http://code.google.com/p/messkit/source/browse/trunk/messkit/nson.py
-- parses an NSON int
local function parseint(data)
if string.sub(data, 1, 1) ~= "i" then
return
end
local text = string.sub(data, 2)
local number = tonumber(text)
return number
end
-- parses an NSON float
local function parsefloat(data)
if string.sub(data, 1, 1) ~= "f" then
return
end
local text = string.sub(data, 2)
local number = tonumber(text)
return number
end
-- parses an NSON string
local function parsestring(data)
if string.sub(data, 1, 1) ~= "s" then
return
end
return string.sub(data, 2)
end
-- parses an NSON int, float, or string
local function parsesimple(data)
local i = parseint(data)
local f = parsefloat(data)
local s = parsestring(data)
return i or f or s
end
-- parses an NSON dictionary
local function parsedict(data)
if #data < 1 then
return
end
if string.sub(data, 1, 1) ~= "d" then
return
end
local rest = string.sub(data, 2)
local dict = {}
while #rest > 0 do
local chunk, key, value
chunk, rest = parsechunk(rest)
if not chunk then
return
end
key = parsestring(chunk)
value, rest = parsechunk(rest)
if not value then
return
end
dict[key] = value
end
return dict
end
-- parses an NSON array
local function parsearray(data)
if #data < 1 then
return
end
if string.sub(data, 1, 1) ~= "a" then
return
end
local rest = string.sub(data, 2)
local array = {}
while #rest > 0 do
local value
value, rest = parsechunk(rest)
if not value then
return
end
table.insert(array, value)
end
return array
end
-- OpenLookup specific stuff
local function formataddress(data)
local parts = parsearray(data)
if not parts then
return
end
if #parts < 2 then
return
end
local ip = parsestring(parts[1])
if not ip then
return
end
local port = parseint(parts[2])
if not port then
return
end
return ip .. ":" .. port
end
local function formattime(data)
local time = parsefloat(data)
if not time then
return
end
return datetime.format_timestamp(time)
end
local function formatvalue(key, nson)
local value
if key == "your_address" then
value = formataddress(nson)
elseif key == "timestamp" then
value = formattime(nson)
else
value = parsesimple(nson)
end
if not value then
value = "<" .. #nson .. "B of data>"
end
return value
end
function formatoptions(header)
local msg = parsedict(header)
if not msg then
return
end
local rawmeth = msg["method"]
if not rawmeth then
stdnse.debug2("header missing method field")
return
end
local method = parsestring(rawmeth)
if not method then
return
end
if method ~= "hello" then
stdnse.debug1("expecting hello, got " .. method .. " instead")
return
end
local rawopts = msg["options"]
if not rawopts then
return {}
end
return parsedict(rawopts)
end
action = function(host, port)
local status, banner = comm.get_banner(host, port)
if not status then
return
end
local header, _ = parsechunk(banner)
if not header then
return
end
local options = formatoptions(header)
if not options then
return
end
port.version.name = "openlookup"
local version = options["version"]
if version then
port.version.version = version
end
nmap.set_port_version(host, port)
if #options < 1 then
return
end
return options
end
|