Status Report #9 of 15

[Djalal Harouni <tixxdz () gmail com>]

Status Report #9 of 15

Accomplishments:

* NSE New rules proposal posted on nmap-dev:
version 1: http://seclists.org/nmap-dev/2010/q2/952
version 2: http://seclists.org/nmap-dev/2010/q2/966
* Added NFSv3 LOOKUP procedure support and a function to format NFS
ACCESS bits to a string.
* nfs-ls now supports NFSv3 and NFSv2, and can show the current mount
access permissions when using NFSv3.
Output:
 111/tcp open  rpcbind
 | nfs-ls:
 |
 |   NFS Export: /mnt/nfs/files
 |   NFS Access: Read Lookup NoModify NoExtend NoDelete NoExecute
 |
 |     PERMISSION  UID   GID   SIZE     DATE              FILENAME
 |     drwxr-xr-x  1000  100   4096     2010-06-17 12:28  /mnt/nfs/files
 |     drwxr--r--  1000  1002  4096     2010-05-14 12:58  sources
 ...


Priorities:

* Review all the NSE new rules proposal comments and suggestions and
write a final version.
* Start coding the new netrules (name of rules will be probably
 changed).
* Test more the new features of nfs-ls script and merge it to the Nmap
trunk ASAP.
* Extend nfs-statfs and Add NFSv3 support to it:
 o FSSTAT: show volatile information about a file system:
   The total size, the amount of free space in the file system, the
   available space for the user authentified in the RPC call etc.
 o FSINFO: show nonvolatile file system state information:
   The maximum size of a file on the file system, if the file system
   support hard and symbolic links, if the NFS server can change the
   file times with SETATTR call etc.
 o PATHCONF: show the pathconf information of the remote NFS export:
   The maximum number of hard links to an object, the maximum length of
   a filename, if the NFS server rejects any chown call when the caller
   is not the privileged user.
Note: all these NFSv3 procedures are already present in the rpc library.

Change the output to be similar to the "df" program (this script will 
help system-administrators).


-- 
tixxdz
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/