Re: Sun Service Tags Nmap Discovery script

[David Fifield <david () bamsoftware com>]

On Thu, Dec 30, 2010 at 10:16:16AM +1100, Matthew Flanagan wrote:
> On 30 December 2010 09:45, David Fifield <david () bamsoftware com> wrote:
> > On Wed, Dec 29, 2010 at 05:39:06PM -0500, Jonathan Rethorn wrote:
> > > > Matthew, is this Service Tags agent something that's easy to install on
> > > > GNU/Linux?
> > >
> > > Supposedly Windows too.
> >
> > What I mean is, can you give me instructions on how to set this up to
> > test it? Or is it some proprietary thing?
>
> You can download all the different OS versions from http://arseh.at/svctags
>
> You will also find that some of the ILOM (integrated lights out
> management) cards respond to service tags requests as well if they are
> ethernet connected. They are running some kind of Linux on an embedded
> powerpc chip.
>
> Is my script the kind of thing that could be considered to be included
> with nmap?

It is definitely something we can include. We just haven't gotten any
feedback yet.

I found out that service tags is installed by default in OpenSolaris. I
booted osol-0906-x86.iso in text mode (no need to install), then ran

$ svcadm enable '*std*'

I intended '*std*' to match in.stdiscover, but I'm not sure that's what
it's doing. Anyway, it opens port 6481. I ran the script and got this
error:

Discovered open port 6481/udp on 10.0.2.15
NSE: 'servicetags' (thread: 0x8e75ca0) against 10.0.2.15:6481 threw an error!
ERROR
stack traceback:
        [C]: in function 'try'
        ./scripts/servicetags.nse:141: in function <./scripts/servicetags.nse:83>
        (tail call): ?

I'm attaching a packet capture. The scanning machine sends
"[PROBE] 1294721585\r\n" and receives " 6481\n".

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/