From 973e3a90e8f0acf87a854e4f8aae104274114b7a Mon Sep 17 00:00:00 2001 From: Sweekar-cmd Date: Fri, 13 Feb 2026 20:09:34 +0545 Subject: [PATCH 1/2] pop3-brute.nse added STLS and CAPA-based auth selection --- scripts/pop3-brute.nse | 213 +++++++++++++++++++++++++---------------- 1 file changed, 128 insertions(+), 85 deletions(-) diff --git a/scripts/pop3-brute.nse b/scripts/pop3-brute.nse index 9712d47e5..5d1c606ed 100644 --- a/scripts/pop3-brute.nse +++ b/scripts/pop3-brute.nse @@ -1,136 +1,179 @@ local brute = require "brute" local comm = require "comm" local creds = require "creds" -local nmap = require "nmap" local pop3 = require "pop3" local shortport = require "shortport" -local string = require "string" +local stdnse = require "stdnse" description = [[ Tries to log into a POP3 account by guessing usernames and passwords. +Automatically detects supported authentication mechanisms and upgrades +to TLS using STLS when available. ]] ---- --- @args pop3loginmethod The login method to use: "USER" --- (default), "SASL-PLAIN", "SASL-LOGIN", --- "SASL-CRAM-MD5", or "APOP". Defaults to "USER", --- --- @output --- PORT STATE SERVICE --- 110/tcp open pop3 --- | pop3-brute-ported: --- | Accounts: --- | user:pass => Login correct --- | Statistics: --- |_ Performed 8 scans in 1 seconds, average tps: 8 - -author = {"Philip Pickering", "Piotr Olma"} +author = {"Philip Pickering", "Piotr Olma", "Sweekar-cmd"} license = "Same as Nmap--See https://nmap.org/book/man-legal.html" - categories = {"intrusive", "brute"} -Driver = { - new = function(self, host, port, login_function, is_apop) +portrule = shortport.port_or_service({110, 995}, {"pop3", "pop3s"}) + +--- +-- Choose best supported auth method from CAPA +local function choose_auth(capas) + if capas.AUTH then + local mechs = {} + for _, m in ipairs(capas.AUTH) do + mechs[m:upper()] = true + end + + if mechs["CRAM-MD5"] then + return pop3.login_sasl_crammd5, false + elseif mechs["LOGIN"] then + return pop3.login_sasl_login, false + elseif mechs["PLAIN"] then + return pop3.login_sasl_plain, false + end + end + + if capas.APOP then + return pop3.login_apop, true + end + + return pop3.login_user, false +end + +local Driver = { + new = function(self, host, port, login_function, is_apop, use_stls, implicit_tls) local o = {} setmetatable(o, self) self.__index = self - o.port = port o.host = host + o.port = port o.login_function = login_function o.is_apop = is_apop + o.use_stls = use_stls + o.implicit_tls = implicit_tls return o end, - -- Attempts to connect to the POP server - -- @return true on success - -- @return false, brute.Error object on failure connect = function(self) + local opts = { timeout = 10000, recv_before = true } + local line - self.socket = brute.new_socket() - local opts = {timeout=10000, recv_before=true} - local best_opt, line, _ - self.socket, _, best_opt, line = comm.tryssl(self.host, self.port, "" , opts) + -- Implicit TLS (POP3S, usually port 995) + if self.implicit_tls then + self.socket = brute.new_socket() + local ok = self.socket:connect(self.host, self.port, "ssl") + if not ok then + local err = brute.Error:new("SSL connection failed.") + err:setAbort(true) + return false, err + end + line = self.socket:receive_lines(1) + else + self.socket, _, _, line = comm.tryssl(self.host, self.port, "", opts) + end if not self.socket then local err = brute.Error:new("Failed to connect.") err:setAbort(true) return false, err - end --no connection + end + if not pop3.stat(line) then - local err = brute.Error:new("Failed to make a pop-connection.") + local err = brute.Error:new("Invalid POP3 greeting.") err:setAbort(true) return false, err - end -- no pop-connection + end + -- Extract APOP challenge if self.is_apop then - self.additional = string.match(line, "<[%p%w]+>") --apop challenge + self.additional = line:match("<[^>]+>") end - return true - end, --connect - -- Attempts to login to the POP server - -- - -- @param username string containing the login username - -- @param password string containing the login password - -- @return status, true on success, false on failure - -- @return brute.Error object on failure - -- creds.Account object on success - login = function(self, username, password) - local pstatus - local perror - pstatus, perror = self.login_function(self.socket, username, password, self.additional) - if pstatus then - return true, creds.Account:new(username, password, creds.State.VALID) - else - local err - if (perror == pop3.err.pwError) then - err = brute.Error:new("Wrong password.") - elseif (perror == pop3.err.userError) then - err = brute.Error:new("Wrong username.") - err:setInvalidAccount(username) - else - err = brute.Error:new("Login failed.") + -- Upgrade to TLS using STLS (only for port 110) + if self.use_stls then + self.socket:send("STLS\r\n") + local _, resp = self.socket:receive_lines(1) + if not pop3.stat(resp) then + local err = brute.Error:new("STLS negotiation failed.") + err:setAbort(true) + return false, err end - return false, err + + local ssl = self.socket:sslhandshake() + if not ssl then + local err = brute.Error:new("TLS handshake failed.") + err:setAbort(true) + return false, err + end + self.socket = ssl end - end, --login + + return true + end, + + login = function(self, username, password) + local ok, code = + self.login_function(self.socket, username, password, self.additional) + + if ok then + return true, creds.Account:new(username, password, creds.State.VALID) + end + + local err + if code == pop3.err.pwError then + err = brute.Error:new("Wrong password.") + elseif code == pop3.err.userError then + err = brute.Error:new("Wrong username.") + err:setInvalidAccount(username) + elseif code == pop3.err.OpenSSLMissing then + err = brute.Error:new("OpenSSL required for this authentication method.") + err:setAbort(true) + else + err = brute.Error:new("Login failed.") + end + + return false, err + end, disconnect = function(self) - self.socket:close() - end, --disconnect + if self.socket then + self.socket:close() + end + end, check = function(self) return true - end, --check + end, } -portrule = shortport.port_or_service({110, 995}, {"pop3","pop3s"}) - action = function(host, port) - local pMeth = nmap.registry.args.pop3loginmethod - if (not pMeth) then pMeth = nmap.registry.pop3loginmethod end - if (not pMeth) then pMeth = "USER" end - - --determine function we will use to login to server - local is_apop = false - local login_function - if (pMeth == "USER") then - login_function = pop3.login_user - elseif (pMeth == "SASL-PLAIN") then - login_function = pop3.login_sasl_plain - elseif (pMeth == "SASL-LOGIN") then - login_function = pop3.login_sasl_login - elseif (pMeth == "SASL-CRAM-MD5") then - login_function = pop3.login_sasl_crammd5 - elseif (pMeth == "APOP") then - login_function = pop3.login_apop - is_apop = true - else - login_function = pop3.login_user + local capas = pop3.capabilities(host, port) + if not capas then + return "Could not retrieve capabilities." end - local engine = brute.Engine:new(Driver, host, port, login_function, is_apop) + local login_function, is_apop = choose_auth(capas) + + local use_stls = capas.STLS and port.number == 110 + local implicit_tls = (port.number == 995 or port.service == "pop3s") + + if use_stls then + stdnse.print_debug(1, "POP3: Upgrading to TLS using STLS") + end + + local engine = brute.Engine:new( + Driver, + host, + port, + login_function, + is_apop, + use_stls, + implicit_tls + ) + engine.options.script_name = SCRIPT_NAME - local status, accounts = engine:start() + local _, accounts = engine:start() return accounts end From 035c0c150cce06e1dd03a22963171312c970ad6c Mon Sep 17 00:00:00 2001 From: Sweekar-cmd Date: Sat, 7 Mar 2026 23:36:11 +0545 Subject: [PATCH 2/2] scripts/pop3-brute: add CAPA auth selection, STLS, and POP3S support - Auto-detect auth method from CAPA (CRAM-MD5 > LOGIN > PLAIN > APOP > USER) - Preserve pop3loginmethod arg as manual override for backward compat - Driver.new accepts opts table matching brute.Engine calling convention - brute.Engine:new receives single opts table, not positional args - reconnect_ssl() replaces incorrect sslhandshake() after STLS - STLS only attempted when server advertises it in CAPA (capas.STLS ~= nil) - Implicit TLS support for POP3S on port 995 - Capture both return values from receive_lines() in implicit TLS path - capas.SASL or capas.AUTH for SASL mechanism lookup - APOP challenge pattern tightened to RFC 1939 format - Add @args doc block for pop3loginmethod script argument - portrule extended to include port 1110 --- nselib/pop3.lua | 302 ++++++++++++++++++++--------------------- scripts/pop3-brute.nse | 165 ++++++++++++++++++++++ 2 files changed, 314 insertions(+), 153 deletions(-) diff --git a/nselib/pop3.lua b/nselib/pop3.lua index 179bd5266..41b1ef942 100644 --- a/nselib/pop3.lua +++ b/nselib/pop3.lua @@ -1,190 +1,226 @@ --- --- POP3 functions. +-- POP3 helper functions for NSE scripts. -- -- @copyright Same as Nmap--See https://nmap.org/book/man-legal.html -local base64 = require "base64" -local comm = require "comm" -local match = require "match" -local stdnse = require "stdnse" -local string = require "string" +local base64 = require "base64" +local comm = require "comm" +local match = require "match" +local stdnse = require "stdnse" local stringaux = require "stringaux" -local table = require "table" + +local string = string +local table = table + _ENV = stdnse.module("pop3", stdnse.seeall) -local HAVE_SSL, openssl = pcall(require,'openssl') - +local HAVE_SSL, openssl = pcall(require, "openssl") +-- Error codes returned by login helpers. +-- Must remain module-level so scripts can access pop3.err.* err = { - none = 0, - userError = 1, - pwError = 2, + none = 0, + userError = 1, + pwError = 2, informationMissing = 3, - OpenSSLMissing = 4, + OpenSSLMissing = 4, } --- --- Check a POP3 response for "+OK". --- @param line First line returned from an POP3 request. --- @return The string "+OK" if found or nil otherwise. +-- Check whether a POP3 response indicates success. +-- @param line POP3 response line. +-- @return true if response starts with "+OK", false otherwise. function stat(line) - return string.match(line, "+OK") + return type(line) == "string" and line:match("^%+OK") ~= nil end - - --- --- Try to log in using the USER/PASS commands. +-- USER/PASS authentication. -- @param socket Socket connected to POP3 server. --- @param user User string. +-- @param user Username string. -- @param pw Password string. --- @return Status (true or false). --- @return Error code if status is false. +-- @return status true on success, false on failure. +-- @return err Error code if status is false. function login_user(socket, user, pw) socket:send("USER " .. user .. "\r\n") - local status, line = socket:receive_lines(1) - if not stat(line) then return false, err.userError end - socket:send("PASS " .. pw .. "\r\n") - - status, line = socket:receive_lines(1) - - if stat(line) then return true, err.none - else return false, err.pwError + local _, line = socket:receive_lines(1) + if not stat(line) then + return false, err.userError end + + socket:send("PASS " .. pw .. "\r\n") + _, line = socket:receive_lines(1) + + if stat(line) then + return true, err.none + end + return false, err.pwError end - --- --- Try to login using the AUTH command using SASL/Plain method. +-- SASL PLAIN authentication. -- @param socket Socket connected to POP3 server. --- @param user User string. +-- @param user Username string. -- @param pw Password string. --- @return Status (true or false). --- @return Error code if status is false. +-- @return status true on success, false on failure. +-- @return err Error code if status is false. function login_sasl_plain(socket, user, pw) - local auth64 = base64.enc(user .. "\0" .. user .. "\0" .. pw) socket:send("AUTH PLAIN " .. auth64 .. "\r\n") - local status, line = socket:receive_lines(1) - + local _, line = socket:receive_lines(1) if stat(line) then return true, err.none - else - return false, err.pwError end + return false, err.pwError end --- --- Try to login using the AUTH command using SASL/Login method. --- @param user User string. +-- SASL LOGIN authentication. +-- @param socket Socket connected to POP3 server. +-- @param user Username string. -- @param pw Password string. --- @param pw String containing password to login. --- @return Status (true or false). --- @return Error code if status is false. +-- @return status true on success, false on failure. +-- @return err Error code if status is false. function login_sasl_login(socket, user, pw) - - local user64 = base64.enc(user) - - local pw64 = base64.enc(pw) - socket:send("AUTH LOGIN\r\n") - local status, line = socket:receive_lines(1) - if not base64.dec(string.sub(line, 3)) == "User Name:" then + local _, line = socket:receive_lines(1) + if type(line) ~= "string" or line:sub(1, 1) ~= "+" then return false, err.userError end - socket:send(user64) - - local status, line = socket:receive_lines(1) - - if not base64.dec(string.sub(line, 3)) == "Password:" then + local prompt = base64.dec(line:sub(3)):lower() + if not prompt:find("user") then return false, err.userError end - socket:send(pw64) + socket:send(base64.enc(user) .. "\r\n") + _, line = socket:receive_lines(1) + if type(line) ~= "string" or line:sub(1, 1) ~= "+" then + return false, err.userError + end - local status, line = socket:receive_lines(1) + prompt = base64.dec(line:sub(3)):lower() + if not prompt:find("pass") then + return false, err.userError + end + + socket:send(base64.enc(pw) .. "\r\n") + _, line = socket:receive_lines(1) if stat(line) then return true, err.none - else - return false, err.pwError end + return false, err.pwError end --- --- Try to login using the APOP command. +-- APOP authentication (RFC 1939). -- @param socket Socket connected to POP3 server. --- @param user User string. +-- @param user Username string. -- @param pw Password string. --- @param challenge String containing challenge from POP3 server greeting. --- @return Status (true or false). --- @return Error code if status is false. +-- @param challenge APOP challenge string from the server greeting. +-- @return status true on success, false on failure. +-- @return err Error code if status is false. function login_apop(socket, user, pw, challenge) - if type(challenge) ~= "string" then return false, err.informationMissing end - - local apStr = stdnse.tohex(openssl.md5(challenge .. pw)) - socket:send(("APOP %s %s\r\n"):format(user, apStr)) - - local status, line = socket:receive_lines(1) - - if (stat(line)) then - return true, err.none - else - return false, err.pwError + if not HAVE_SSL then + return false, err.OpenSSLMissing end + if type(challenge) ~= "string" then + return false, err.informationMissing + end + + local digest = stdnse.tohex(openssl.md5(challenge .. pw)) + socket:send(("APOP %s %s\r\n"):format(user, digest)) + + local _, line = socket:receive_lines(1) + if stat(line) then + return true, err.none + end + return false, err.pwError end --- --- Asks a POP3 server for capabilities. --- --- See RFC 2449. --- @param host Host to be queried. --- @param port Port to connect to. --- @return Table containing capabilities or nil on error. --- @return nil or String error message. -function capabilities(host, port) - - local socket, line, bopt, first_line = comm.tryssl(host, port, "" , {request_timeout=10000, recv_before=true}) - if not socket then - return nil, "Could Not Connect" +-- SASL CRAM-MD5 authentication. +-- @param socket Socket connected to POP3 server. +-- @param user Username string. +-- @param pw Password string. +-- @return status true on success, false on failure. +-- @return err Error code if status is false. +function login_sasl_crammd5(socket, user, pw) + if not HAVE_SSL then + return false, err.OpenSSLMissing end - if not stat(first_line) then - return nil, "No Response" + + socket:send("AUTH CRAM-MD5\r\n") + local _, line = socket:receive_lines(1) + if type(line) ~= "string" or line:sub(1, 1) ~= "+" then + return false, err.pwError + end + + local challenge = base64.dec(line:sub(3)) + local digest = stdnse.tohex(openssl.hmac("md5", pw, challenge)) + local auth = base64.enc(user .. " " .. digest) + + socket:send(auth .. "\r\n") + _, line = socket:receive_lines(1) + + if stat(line) then + return true, err.none + end + return false, err.pwError +end + +--- +-- Query POP3 server capabilities (RFC 2449). +-- @param host Host to query. +-- @param port Port to connect to. +-- @return capas Table of capabilities, or nil on error. +-- @return nil or error string on failure. +function capabilities(host, port) + local socket, _, _, greeting = + comm.tryssl(host, port, "", { recv_before = true }) + + if not socket then + return nil, "Could not connect" + end + + if not stat(greeting) then + socket:close() + return nil, "Invalid POP3 greeting" end local capas = {} - if string.find(first_line, "<[%p%w]+>") then + + -- APOP challenge must match per RFC 1939 + if greeting:find("<[^>]+@[^>]+>") then capas.APOP = {} end - local status = socket:send("CAPA\r\n") - if( not(status) ) then - return nil, "Failed to send" - end - - status, line = socket:receive_buf(match.pattern_limit("%.", 2048), false) - if( not(status) ) then - return nil, "Failed to receive" - end + socket:send("CAPA\r\n") + local status, response = + socket:receive_buf(match.pattern_limit("%.\r?\n", 4096), false) socket:close() - local lines = stringaux.strsplit("\r\n",line) - if not stat(table.remove(lines,1)) then + if not status then + return nil, "Failed to receive CAPA response" + end + + -- Normalize line endings to handle both CRLF and LF-only servers + response = response:gsub("\r\n", "\n") + local lines = stringaux.strsplit("\n", response) + + if not stat(table.remove(lines, 1)) then capas.capa = false return capas end - for _, line in ipairs(lines) do - if ( line and #line>0 ) then - local capability = line:sub(line:find("[%w-]+")) - line = line:sub(#capability + 2) - if ( line ~= "" ) then - capas[capability] = stringaux.strsplit(" ", line) - else - capas[capability] = {} + for _, ln in ipairs(lines) do + if ln and #ln > 0 then + local name, args = ln:match("^(%S+)%s*(.*)") + if name then + capas[name] = args ~= "" and stringaux.strsplit(" ", args) or {} end end end @@ -192,44 +228,4 @@ function capabilities(host, port) return capas end ---- --- Try to login using the AUTH command using SASL/CRAM-MD5 method. --- @param socket Socket connected to POP3 server. --- @param user User string. --- @param pw Password string. --- @return Status (true or false). --- @return Error code if status is false. -function login_sasl_crammd5(socket, user, pw) - - socket:send("AUTH CRAM-MD5\r\n") - - local status, line = socket:receive_lines(1) - - local challenge = base64.dec(string.sub(line, 3)) - - local digest = stdnse.tohex(openssl.hmac('md5', pw, challenge)) - local authStr = base64.enc(user .. " " .. digest) - socket:send(authStr .. "\r\n") - - local status, line = socket:receive_lines(1) - - if stat(line) then - return true, err.none - else - return false, err.pwError - end -end - --- Overwrite functions requiring OpenSSL if we got no OpenSSL. -if not HAVE_SSL then - - local no_ssl = function() - return false, err.OpenSSLMissing - end - - login_apop = no_ssl - login_sasl_crammd5 = no_ssl -end - - -return _ENV; +return _ENV diff --git a/scripts/pop3-brute.nse b/scripts/pop3-brute.nse index 5d1c606ed..c408c4132 100644 --- a/scripts/pop3-brute.nse +++ b/scripts/pop3-brute.nse @@ -1,3 +1,4 @@ +<<<<<<< Updated upstream local brute = require "brute" local comm = require "comm" local creds = require "creds" @@ -39,10 +40,63 @@ local function choose_auth(capas) return pop3.login_apop, true end +======= +local brute = require "brute" +local comm = require "comm" +local creds = require "creds" +local pop3 = require "pop3" +local shortport = require "shortport" +local stdnse = require "stdnse" + +description = [[ +Tries to log into a POP3 account by guessing usernames and passwords. +Automatically detects supported authentication mechanisms via CAPA and +upgrades to TLS using STLS when available on port 110. Supports implicit +TLS for POP3S (port 995). The auth method can be overridden manually via +the pop3loginmethod script argument. +]] + +--- +-- @args pop3loginmethod Override automatic auth selection. Valid values: +-- "USER", "SASL-PLAIN", +-- "SASL-LOGIN", "SASL-CRAM-MD5", +-- "APOP". If not set, the best method is chosen from CAPA. +-- +-- @output +-- PORT STATE SERVICE +-- 110/tcp open pop3 +-- | pop3-brute: +-- | Accounts: +-- | admin:password - Valid credentials +-- | Statistics: +-- |_ Performed 101 guesses in 22 seconds, average tps: 4.5 + +author = {"Philip Pickering", "Piotr Olma", "Sweekar-cmd"} +license = "Same as Nmap--See https://nmap.org/book/man-legal.html" +categories = {"intrusive", "brute"} + +portrule = shortport.port_or_service({110, 995, 1110}, {"pop3", "pop3s"}) + +-- Select the best available auth method from CAPA capabilities. +-- Preference order: CRAM-MD5 > LOGIN > PLAIN > APOP > USER +local function choose_auth(capas) + local sasl = capas.SASL or capas.AUTH + if sasl then + local mechs = {} + for _, m in ipairs(sasl) do + mechs[m:upper()] = true + end + if mechs["CRAM-MD5"] then return pop3.login_sasl_crammd5, false end + if mechs["LOGIN"] then return pop3.login_sasl_login, false end + if mechs["PLAIN"] then return pop3.login_sasl_plain, false end + end + if capas.APOP then return pop3.login_apop, true end +>>>>>>> Stashed changes return pop3.login_user, false end local Driver = { +<<<<<<< Updated upstream new = function(self, host, port, login_function, is_apop, use_stls, implicit_tls) local o = {} setmetatable(o, self) @@ -53,18 +107,35 @@ local Driver = { o.is_apop = is_apop o.use_stls = use_stls o.implicit_tls = implicit_tls +======= + new = function(self, host, port, opts) + local o = setmetatable({}, self) + self.__index = self + o.host = host + o.port = port + o.login_function = opts.login_function + o.is_apop = opts.is_apop + o.use_stls = opts.use_stls + o.implicit_tls = opts.implicit_tls +>>>>>>> Stashed changes return o end, connect = function(self) +<<<<<<< Updated upstream local opts = { timeout = 10000, recv_before = true } local line -- Implicit TLS (POP3S, usually port 995) +======= + local line + +>>>>>>> Stashed changes if self.implicit_tls then self.socket = brute.new_socket() local ok = self.socket:connect(self.host, self.port, "ssl") if not ok then +<<<<<<< Updated upstream local err = brute.Error:new("SSL connection failed.") err:setAbort(true) return false, err @@ -84,18 +155,48 @@ local Driver = { local err = brute.Error:new("Invalid POP3 greeting.") err:setAbort(true) return false, err +======= + local e = brute.Error:new("SSL connection failed.") + e:setAbort(true) + return false, e + end + local _, resp = self.socket:receive_lines(1) + line = resp + else + self.socket, _, _, line = + comm.tryssl(self.host, self.port, "", { timeout = 10000, recv_before = true }) + end + + if not self.socket then + local e = brute.Error:new("Failed to connect.") + e:setAbort(true) + return false, e + end + + if not pop3.stat(line) then + local e = brute.Error:new("Invalid POP3 greeting.") + e:setAbort(true) + return false, e +>>>>>>> Stashed changes end -- Extract APOP challenge if self.is_apop then +<<<<<<< Updated upstream self.additional = line:match("<[^>]+>") end -- Upgrade to TLS using STLS (only for port 110) +======= + self.additional = line:match("<[^>]+@[^>]+>") + end + +>>>>>>> Stashed changes if self.use_stls then self.socket:send("STLS\r\n") local _, resp = self.socket:receive_lines(1) if not pop3.stat(resp) then +<<<<<<< Updated upstream local err = brute.Error:new("STLS negotiation failed.") err:setAbort(true) return false, err @@ -108,6 +209,18 @@ local Driver = { return false, err end self.socket = ssl +======= + local e = brute.Error:new("STLS negotiation failed.") + e:setAbort(true) + return false, e + end + local ok, ssl_err = self.socket:reconnect_ssl() + if not ok then + local e = brute.Error:new("TLS handshake failed: " .. (ssl_err or "unknown")) + e:setAbort(true) + return false, e + end +>>>>>>> Stashed changes end return true @@ -116,11 +229,15 @@ local Driver = { login = function(self, username, password) local ok, code = self.login_function(self.socket, username, password, self.additional) +<<<<<<< Updated upstream +======= +>>>>>>> Stashed changes if ok then return true, creds.Account:new(username, password, creds.State.VALID) end +<<<<<<< Updated upstream local err if code == pop3.err.pwError then err = brute.Error:new("Wrong password.") @@ -146,6 +263,28 @@ local Driver = { check = function(self) return true end, +======= + local e + if code == pop3.err.pwError then + e = brute.Error:new("Wrong password.") + elseif code == pop3.err.userError then + e = brute.Error:new("Wrong username.") + e:setInvalidAccount(username) + elseif code == pop3.err.OpenSSLMissing then + e = brute.Error:new("OpenSSL required for this authentication method.") + e:setAbort(true) + else + e = brute.Error:new("Login failed.") + end + return false, e + end, + + disconnect = function(self) + if self.socket then self.socket:close() end + end, + + check = function(self) return true end, +>>>>>>> Stashed changes } action = function(host, port) @@ -154,6 +293,7 @@ action = function(host, port) return "Could not retrieve capabilities." end +<<<<<<< Updated upstream local login_function, is_apop = choose_auth(capas) local use_stls = capas.STLS and port.number == 110 @@ -172,6 +312,31 @@ action = function(host, port) use_stls, implicit_tls ) +======= + local login_function, is_apop + + -- Manual override takes priority over auto-detection + local pMeth = stdnse.get_script_args("pop3loginmethod") + if pMeth then + if pMeth == "SASL-PLAIN" then login_function = pop3.login_sasl_plain + elseif pMeth == "SASL-LOGIN" then login_function = pop3.login_sasl_login + elseif pMeth == "SASL-CRAM-MD5" then login_function = pop3.login_sasl_crammd5 + elseif pMeth == "APOP" then login_function = pop3.login_apop; is_apop = true + else login_function = pop3.login_user + end + else + login_function, is_apop = choose_auth(capas) + end + + local implicit_tls = (port.number == 995 or port.service == "pop3s") + local use_stls = (port.number == 110 and not implicit_tls and capas.STLS ~= nil) + local engine = brute.Engine:new(Driver, host, port, { + login_function = login_function, + is_apop = is_apop, + use_stls = use_stls, + implicit_tls = implicit_tls, + }) +>>>>>>> Stashed changes engine.options.script_name = SCRIPT_NAME local _, accounts = engine:start()