1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
|
local datetime = require "datetime"
local nmap = require "nmap"
local shortport = require "shortport"
local snmp = require "snmp"
local stdnse = require "stdnse"
local string = require "string"
local table = require "table"
description = [[
Attempts to enumerate installed software through SNMP.
]]
---
-- @usage
-- nmap -sU -p 161 --script=snmp-win32-software <target>
-- @output
-- | snmp-win32-software:
-- | Apache Tomcat 5.5 (remove only); 2007-09-15T15:13:18
-- | Microsoft Internationalized Domain Names Mitigation APIs; 2007-09-15T15:13:18
-- | Security Update for Windows Media Player (KB911564); 2007-09-15T15:13:18
-- | Security Update for Windows Server 2003 (KB924667-v2); 2007-09-15T15:13:18
-- | Security Update for Windows Media Player 6.4 (KB925398); 2007-09-15T15:13:18
-- | Security Update for Windows Server 2003 (KB925902); 2007-09-15T15:13:18
-- |_ Windows Internet Explorer 7; 2007-09-15T15:13:18
--
-- @xmloutput
-- <table>
-- <elem key="name">Apache Tomcat 5.5 (remove only)</elem>
-- <elem key="install_date">2007-09-15T15:13:18</elem>
-- </table>
-- <table>
-- <elem key="name">Microsoft Internationalized Domain Names Mitigation APIs</elem>
-- <elem key="install_date">2007-09-15T15:13:18</elem>
-- </table>
-- <table>
-- <elem key="name">Security Update for Windows Media Player (KB911564)</elem>
-- <elem key="install_date">2007-09-15T15:13:18</elem>
-- </table>
-- <table>
-- <elem key="name">Security Update for Windows Server 2003 (KB924667-v2)</elem>
-- <elem key="install_date">2007-09-15T15:13:18</elem>
-- </table>
-- <table>
-- <elem key="name">Security Update for Windows Media Player 6.4 (KB925398)</elem>
-- <elem key="install_date">2007-09-15T15:13:18</elem>
-- </table>
-- <table>
-- <elem key="name">Security Update for Windows Server 2003 (KB925902)</elem>
-- <elem key="install_date">2007-09-15T15:13:18</elem>
-- </table>
-- <table>
-- <elem key="name">Windows Internet Explorer 7</elem>
-- <elem key="install_date">2007-09-15T15:13:18</elem>
-- </table>
author = "Patrik Karlsson"
license = "Same as Nmap--See https://nmap.org/book/man-legal.html"
categories = {"default", "discovery", "safe"}
dependencies = {"snmp-brute"}
-- Version 0.3
-- Created 01/15/2010 - v0.1 - created by Patrik Karlsson <patrik@cqure.net>
-- Revised 01/19/2010 - v0.2 - fixed loop that would occur if a mib did not exist
-- Revised 04/11/2010 - v0.3 - moved snmp_walk to snmp library <patrik@cqure.net>
portrule = shortport.port_or_service(161, "snmp", "udp", {"open", "open|filtered"})
--- Gets a value for the specified oid
--
-- @param tbl table containing <code>oid</code> and <code>value</code>
-- @param oid string containing the object id for which the value should be extracted
-- @return value of relevant type or nil if oid was not found
local function get_value_from_table( tbl, oid )
for _, v in ipairs( tbl ) do
if v.oid == oid then
return v.value
end
end
return nil
end
local date_xlate = {
year = 1,
month = 2,
day = 3,
hour = 4,
min = 5,
sec = 6
}
-- translate date parts to positional indices for datetime.format_timestamp
local date_metatab = {
__index = function (t, k)
return t[date_xlate[k]]
end
}
local sw_metatab = {
__tostring = function (t)
return ("%s; %s"):format(t.name , t.install_date)
end
}
--- Processes the table and creates the script output
--
-- @param tbl table containing <code>oid</code> and <code>value</code>
-- @return table suitable for <code>stdnse.format_output</code>
local function process_answer( tbl )
local sw_name = "^1.3.6.1.2.1.25.6.3.1.2"
local sw_date = "1.3.6.1.2.1.25.6.3.1.5"
local new_tbl = {}
for _, v in ipairs( tbl ) do
if ( v.oid:match(sw_name) ) then
local objid = v.oid:gsub(sw_name, sw_date)
local install_date = get_value_from_table( tbl, objid )
local install_date_tab = { string.unpack( ">I2 BBBBB", install_date ) }
setmetatable(install_date_tab, date_metatab)
local sw_item = {
["name"] = v.value,
["install_date"] = datetime.format_timestamp(install_date_tab)
}
setmetatable(sw_item, sw_metatab)
table.insert( new_tbl, sw_item )
end
end
table.sort( new_tbl, function(a, b) return a.name < b.name end )
return new_tbl
end
action = function(host, port)
local data, snmpoid = nil, "1.3.6.1.2.1.25.6.3.1"
local sw = {}
local status
local snmpHelper = snmp.Helper:new(host, port)
snmpHelper:connect()
status, sw = snmpHelper:walk( snmpoid )
if ( not(status) ) or ( sw == nil ) or ( #sw == 0 ) then
return
end
sw = process_answer( sw )
nmap.set_port_state(host, port, "open")
return sw
end
|
