o [NSE] Added the scripts bitcoin-info, bitcoin-getaddr and a supporting

Bitcoin library. The script bitcoin-info retrieves information about the
  remote server, while the bitcoin-getaddr script retrieves a list of
  discovered remote Bitcoin nodes. [Patrik]
This commit is contained in:
patrik 2011-11-09 18:56:16 +00:00
parent 8a175d127d
commit 7b43d1cafb
5 changed files with 608 additions and 0 deletions

View file

@ -0,0 +1,43 @@
description = [[
Queries a BitCoin server for a list of known BitCoin nodes
]]
author = "Patrik Karlsson"
license = "Same as Nmap--See http://nmap.org/book/man-legal.html"
categories = {"discovery", "safe"}
require 'shortport'
require 'bitcoin'
require 'tab'
portrule = shortport.port_or_service(8333, "bitcoin", "tcp" )
action = function(host, port)
local bcoin = bitcoin.Helper:new(host, port, { timeout = 10000 })
local status = bcoin:connect()
if ( not(status) ) then
return "\n ERROR: Failed to connect to server"
end
local status, ver = bcoin:exchVersion()
if ( not(status) ) then
return "\n ERROR: Failed to extract version information"
end
local status, nodes = bcoin:getNodes()
if ( not(status) ) then
return "\n ERROR: Failed to extract version information"
end
bcoin:close()
local response = tab.new(2)
tab.addrow(response, "ip", "timestamp")
for _, node in ipairs(nodes.addresses) do
tab.addrow(response, ("%s:%d"):format(node.address.host, node.address.port), os.date("%x %X", node.ts))
end
return stdnse.format_output(true, tab.dump(response) )
end

63
scripts/bitcoin-info.nse Normal file
View file

@ -0,0 +1,63 @@
description = [[
Extracts version and node information from a BitCoin server
]]
---
-- @usage
-- nmap -p 8333 --script bitcoin-info <ip>
--
-- @output
-- PORT STATE SERVICE
-- 8333/tcp open unknown
-- | bitcoin-info:
-- | Timestamp: Wed Nov 9 19:47:23 2011
-- | Network: main
-- | Version: 0.4.0
-- | Node Id: DD5DFCBAAD0F882D
-- |_ Lastblock: 152589
--
author = "Patrik Karlsson"
license = "Same as Nmap--See http://nmap.org/book/man-legal.html"
categories = {"discovery", "safe"}
--
-- Version 0.1
--
-- Created 11/09/2011 - v0.1 - created by Patrik Karlsson <patrik@cqure.net>
--
require 'shortport'
require 'bitcoin'
portrule = shortport.port_or_service(8333, "bitcoin", "tcp" )
action = function(host, port)
local NETWORK = {
[3652501241] = "main",
[3669344250] = "testnet"
}
local bcoin = bitcoin.Helper:new(host, port, { timeout = 10000 })
local status = bcoin:connect()
if ( not(status) ) then
return "\n ERROR: Failed to connect to server"
end
local status, ver = bcoin:exchVersion()
if ( not(status) ) then
return "\n ERROR: Failed to extract version information"
end
bcoin:close()
local result = {}
table.insert(result, ("Timestamp: %s"):format(os.date("%c", ver.timestamp)))
table.insert(result, ("Network: %s"):format(NETWORK[ver.magic]))
table.insert(result, ("Version: %s"):format(ver.ver))
table.insert(result, ("Node Id: %s"):format(ver.nodeid))
table.insert(result, ("Lastblock: %s"):format(ver.lastblock))
return stdnse.format_output(true, result)
end

View file

@ -11,6 +11,8 @@ Entry { filename = "auth-spoof.nse", categories = { "malware", "safe", } }
Entry { filename = "backorifice-brute.nse", categories = { "brute", "intrusive", } }
Entry { filename = "backorifice-info.nse", categories = { "default", "discovery", "safe", } }
Entry { filename = "banner.nse", categories = { "discovery", "safe", } }
Entry { filename = "bitcoin-getaddr.nse", categories = { "discovery", "safe", } }
Entry { filename = "bitcoin-info.nse", categories = { "discovery", "safe", } }
Entry { filename = "bitcoinrpc-info.nse", categories = { "default", "discovery", "safe", } }
Entry { filename = "bittorrent-discovery.nse", categories = { "discovery", "safe", } }
Entry { filename = "broadcast-avahi-dos.nse", categories = { "broadcast", "dos", "intrusive", "vuln", } }