| Server IP : 101.53.144.229 / Your IP : 216.73.216.181 Web Server : Apache System : Linux host.gdigitalindia.in 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64 User : digitalshiksha ( 1179) PHP Version : 5.6.40 Disable Function : eval,show_source,system,shell_exec,escapeshellarg,escapeshellcmd,proc_close,proc_open,ini_alter,dl,show_source,curl_multi_exechellcmd, ini_restore,apache_get_modules,get_cfg_var,passthru, exec ,proc_get_status,fpassthru,c999_buff_prepare,c999_sess_put,c99_buff_prepare,c99_sess_put,proc_close,ini_alter,dl,symlink,link,proc_close,ini_alter,dl,symlink,link,mail MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /usr/share/nmap/scripts/ |
Upload File : |
local nmap = require "nmap"
local shortport = require "shortport"
local stdnse = require "stdnse"
local table = require "table"
local xdmcp = require "xdmcp"
description = [[
Requests an XDMCP (X display manager control protocol) session and lists supported authentication and authorization mechanisms.
]]
---
-- @usage
-- nmap -sU -p 177 --script xdmcp-discover <ip>
--
-- @output
-- PORT STATE SERVICE
-- 177/udp open|filtered xdmcp
-- | xdmcp-discover:
-- | Session id: 0x0000703E
-- | Authorization name: MIT-MAGIC-COOKIE-1
-- |_ Authorization data: c282137c9bf8e2af88879e6eaa922326
--
author = "Patrik Karlsson"
license = "Same as Nmap--See http://nmap.org/book/man-legal.html"
categories = {"safe", "discovery"}
portrule = shortport.port_or_service(177, "xdmcp", "udp")
local mutex = nmap.mutex("xdmcp-discover")
local function fail(err) return ("\n ERROR: %s"):format(err or "") end
action = function(host, port)
local DISPLAY_ID = 1
local result = {}
local helper = xdmcp.Helper:new(host, port)
local status = helper:connect()
if ( not(status) ) then
return fail("Failed to connect to server")
end
local status, response = helper:createSession(nil,
{"MIT-MAGIC-COOKIE-1", "XDM-AUTHORIZATION-1"}, DISPLAY_ID)
if ( not(status) ) then
return fail("Failed to create xdmcp session")
end
table.insert(result, ("Session id: 0x%.8X"):format(response.session_id))
if ( response.auth_name and 0 < #response.auth_name ) then
table.insert(result, ("Authentication name: %s"):format(response.auth_name))
end
if ( response.auth_data and 0 < #response.auth_data ) then
table.insert(result, ("Authentication data: %s"):format(stdnse.tohex(response.auth_data)))
end
if ( response.authr_name and 0 < #response.authr_name ) then
table.insert(result, ("Authorization name: %s"):format(response.authr_name))
end
if ( response.authr_data and 0 < #response.authr_data ) then
table.insert(result, ("Authorization data: %s"):format(stdnse.tohex(response.authr_data)))
end
return stdnse.format_output(true, result)
end