Nmap Development mailing list archives

Re: [NSE] Named pipe library


From: Patrik Karlsson <patrik () cqure net>
Date: Fri, 11 Feb 2011 08:16:25 +0100


On Feb 11, 2011, at 08:10 , Chris Woodbury wrote:

What had you been using before that supported named pipes? Something
other than the Microsoft management tools?

No, I've been using Microsoft management tools.
Apparently the jtds JDBC driver supports named pipes as well, and I would guess that so do Microsoft JDBC drivers. 

//Patrik


-chris

On Fri, Feb 11, 2011 at 1:07 AM, Patrik Karlsson <patrik () cqure net> wrote:

On Feb 11, 2011, at 08:05 , Chris Woodbury wrote:

On Fri, Feb 11, 2011 at 12:31 AM, Patrik Karlsson <patrik () cqure net> wrote:

On Feb 11, 2011, at 07:07 , Chris Woodbury wrote:

In the process of adding named-pipe support to the SQL Server scripts,
I created an NSE library for named pipes[1]. The primary component is
a "named_pipe" class, which is modeled after a socket (i.e. connect(),
disconnect(), send(), receive() ), and it is essentially a wrapper
around calls to the SMB library, with some state and logic to make
things easier.

Nice! I think this will be a very useful addition to the SQL Server scripts.
I'll gladly test this code once it's supported by the scripts.

Great! Thanks. I think it will be interesting to see how many SQL
Server instances are only available via named pipes. It's not
something I had previously paid much attention.

Quite a few I believe and now they will be accessible through Nmap and wont require me to switch tools.


I noticed a description in the library that shouldn't be there, have a look at the other libraries on how this 
should be documented.

Oops. Is this right?

===Patch===
@@ -1,16 +1,16 @@
-- -*- mode: lua -*-
-- vim: set filetype=lua :

-description = [[
-A library that implements Windows named pipes over SMB. The implementation
-centers around the <code>named_pipe</code> class, which is essentially a
-case-specific wrapper around the <code>smb.lua</code> library.
-]]
+--- A library that implements Windows named pipes over SMB. The implementation
+--   centers around the <code>named_pipe</code> class, which is essentially a
+--   case-specific wrapper around the <code>smb.lua</code> library.
+--
+--
+--   @copyright Same as Nmap--See http://nmap.org/book/man-legal.html
+--
+--   @author "Chris Woodbury"
+--

-author = "Chris Woodbury"
-
-license = "Same as Nmap--See http://nmap.org/book/man-legal.html";
-
module(... or "namedpipes", package.seeall)

require("smb")
===Patch===

That looks good to me.



//Patrik
--
Patrik Karlsson
http://www.cqure.net
http://www.twitter.com/nevdull77

-chris


//Patrik
--
Patrik Karlsson
http://www.cqure.net
http://www.twitter.com/nevdull77



--
Patrik Karlsson
http://www.cqure.net
http://www.twitter.com/nevdull77

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/


Current thread: