Nmap Development mailing list archives

Re: [NSE Script] IRC Server Info


From: "Eddie Bell" <ejlbell () gmail com>
Date: Mon, 25 Jun 2007 10:12:18 +0100

Cool script but have you thought about adding your make_buffer
function to nselib/stdnse.lua so all scripts have access to it? I
think they would find it useful.

I was playing with pcre and couldn't get it to work, nice to know it
was broken and not me :)

- eddie

On 25/06/07, doug () hcsw org <doug () hcsw org> wrote:
Hi all!

I figure it's about time NSE supported the most important
internet protocol of them all: Internet Relay Chat. :)

The script is essentially a full IRC client implementation and
will handle nick collisions, prePONGing, etc, properly.It needs
the soc07 SVN branch to run since it depends on the PCRE fixes
I mentioned in a previous post.

Daemons it works properly with:
* hybrid
* ratbox
* ircnet's
* bahamut
* unreal

Daemons that are TOO BROKEN to support:
* freenode's dancer (or whatever it is now)

This script gives output like:

PORT     STATE SERVICE REASON
6667/tcp open  irc     syn-ack
|  IRC Server Info: Server: irc.servercentral.net
|  Version: ircd-ratbox-2.2.6(20070505_0-23918). irc.servercentral.net
|  Servers/Ops/Chans/Users: 60/424/31010/62451
|  Lservers/Lusers: 2/3264
|  Uptime: 42 days, 0:31:04
|  Source host: S01060014c21a0e54.ok.shawcable.net
|_ Source ident: NONE or BLOCKED

Lots of information here, most of which probably only makes sense
if you're an IRC user. Notice that your source host and ident are
shown as they appear to the IRC server which could be handy for
vhost testing, discovering address masking, and so on.

I know IRC isn't very trendy these days and seems to be declining in
popularity. Still, IRC is decentralised, secure (when encrypted with
FiSH etc), open-standards based, and has countless different client
and server implementations with huge amounts of fascinating features.
But, most importantly, those of us that like it like it a lot. How
do you like your IM system?

Best,

Doug

/join #2,000

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFGf12E3LTjmOMguVMRAsDpAJ9wwk4lHDho8hWd8blQm7Ek+cAiowCfVPTb
yeQ35W4cGUze8vnURhWMlUQ=
=C0bb
-----END PGP SIGNATURE-----


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org


Current thread: