107 lines
3.0 KiB
Lua
107 lines
3.0 KiB
Lua
local iscsi = require "iscsi"
|
|
local shortport = require "shortport"
|
|
local stdnse = require "stdnse"
|
|
|
|
description = [[
|
|
Collects and displays information from remote iSCSI targets.
|
|
]]
|
|
|
|
---
|
|
-- @output
|
|
-- PORT STATE SERVICE
|
|
-- 3260/tcp open iscsi
|
|
-- | iscsi-info:
|
|
-- | iqn.2006-01.com.openfiler:tsn.c8c08cad469d
|
|
-- | Address: 192.168.56.5:3260,1
|
|
-- | Authentication: NOT required
|
|
-- | iqn.2006-01.com.openfiler:tsn.6aea7e052952
|
|
-- | Address: 192.168.56.5:3260,1
|
|
-- | Authentication: required
|
|
-- |_ Auth reason: Authentication failure
|
|
--
|
|
-- @xmloutput
|
|
-- <table key="iqn.2006-01.com.openfiler:tsn.c8c08cad469d">
|
|
-- <elem key="Address">192.168.56.5:3260,1</elem>
|
|
-- <elem key="Authentication">NOT required</elem>
|
|
-- </table>
|
|
-- <table key="iqn.2006-01.com.openfiler:tsn.6aea7e052952">
|
|
-- <elem key="Address">192.168.56.5:3260,1</elem>
|
|
-- <elem key="Authentication">required</elem>
|
|
-- <elem key="Auth reason">Authentication failure</elem>
|
|
-- </table>
|
|
|
|
-- Version 0.2
|
|
-- Created 2010/11/18 - v0.1 - created by Patrik Karlsson <patrik@cqure.net>
|
|
-- Revised 2010/11/28 - v0.2 - improved error handling <patrik@cqure.net>
|
|
|
|
author = "Patrik Karlsson"
|
|
license = "Same as Nmap--See https://nmap.org/book/man-legal.html"
|
|
categories = {"default", "safe", "discovery"}
|
|
|
|
|
|
portrule = shortport.portnumber(3260, "tcp", {"open", "open|filtered"})
|
|
|
|
-- Attempts to determine whether authentication is required or not
|
|
--
|
|
-- @return status true on success false on failure
|
|
-- @return result true if auth is required false if not
|
|
-- err string containing error message
|
|
local function requiresAuth( host, port, target )
|
|
local helper = iscsi.Helper:new( host, port )
|
|
local errors = iscsi.Packet.LoginResponse.Errors
|
|
|
|
local status, err = helper:connect()
|
|
if ( not(status) ) then return false, "Failed to connect" end
|
|
|
|
local response
|
|
status, response = helper:login( target )
|
|
if ( not(status) ) then return false, response:getErrorMessage() end
|
|
|
|
if ( status and response:getErrorCode() == errors.SUCCESS) then
|
|
-- try to logout
|
|
status = helper:logout()
|
|
end
|
|
|
|
status = helper:close()
|
|
|
|
return true, "Authentication successful"
|
|
end
|
|
|
|
action = function( host, port )
|
|
|
|
local helper = iscsi.Helper:new( host, port )
|
|
|
|
local status = helper:connect()
|
|
if ( not(status) ) then
|
|
stdnse.debug1("failed to connect to server" )
|
|
return
|
|
end
|
|
|
|
local records
|
|
status, records = helper:discoverTargets()
|
|
if ( not(status) ) then
|
|
stdnse.debug1("failed to discover targets" )
|
|
return
|
|
end
|
|
status = helper:logout()
|
|
status = helper:close()
|
|
|
|
local result = stdnse.output_table()
|
|
for _, record in ipairs(records) do
|
|
local result_part = stdnse.output_table()
|
|
for _, addr in ipairs( record.addr ) do
|
|
result_part["Address"] = addr
|
|
end
|
|
|
|
local status, err = requiresAuth( host, port, record.name )
|
|
if ( not(status) ) then
|
|
result_part["Authentication"] = "required"
|
|
result_part["Auth reason"] = err
|
|
else
|
|
result_part["Authentication"] = "NOT required"
|
|
end
|
|
result[record.name] = result_part
|
|
end
|
|
return result
|
|
end
|