Nmap Development mailing list archives

Re: [NSE] amqp-info script


From: Toni Ruottu <toni.ruottu () iki fi>
Date: Wed, 4 May 2011 22:30:42 +0300

Nice to see some work on amqp. I think you should use
nmap.set_port_version to report the software version details where you
can. See netbus-version.nse for an example on doing that.

On Wed, May 4, 2011 at 8:01 PM, Sebastian Dragomir <velorien () gmail com> wrote:
Hi all,
I wrote a script for detecting an AMQP server's properties. It currently
supports 0-8, 0-9, 0-9-1 versions.
For 0-9+ it will also fetch the server's capabilities from the
server-properties field.
The library I wrote for it only supports the most basic handshake
functionality for AMQP, but I thought it wouldn't hurt to refactor it like
that.

To test the script:
sudo apt-get install rabbitmq-server
nmap --script amqp-info -p5672 127.0.0.1

Sample output:
PORT     STATE SERVICE
5672/tcp open  amqp
| amqp-info:
|   capabilities:
|     publisher_confirms: YES
|     exchange_exchange_bindings: YES
|     basic.nack: YES
|     consumer_cancel_notify: YES
|   copyright: Copyright (C) 2007-2011 VMware, Inc.
|   information: Licensed under the MPL.  See http://www.rabbitmq.com/
|   platform: Erlang/OTP
|   product: RabbitMQ
|   version: 2.4.0
|   mechanisms: PLAIN AMQPLAIN
|_ locales: en_US

amqp.version can be passed as argument to indicate one of 0-8, 0-9 or 0-9-1,
but the script is still capable of guessing the version from the server's
response.

All comments are welcome.

Cheers,
Sebastian

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/


Current thread: