mirror of
https://github.com/nmap/nmap.git
synced 2026-05-13 16:57:06 +00:00
Change some of the output of sniffer-detect.nse and add an @output section.
This commit is contained in:
parent
1ff973e495
commit
a44a66c68a
1 changed files with 8 additions and 2 deletions
|
|
@ -4,6 +4,12 @@ Checks if a target on a local Ethernet has its network card in promiscuous mode.
|
|||
The technique is described at
|
||||
http://www.securityfriday.com/promiscuous_detection_01.pdf.
|
||||
]]
|
||||
|
||||
---
|
||||
-- @output
|
||||
-- Host script results:
|
||||
-- |_ sniffer-detect: Likely in promiscuous mode (tests: "11111111")
|
||||
|
||||
author = "Marek Majkowski <majek04+nse@gmail.com>"
|
||||
license = "Same as Nmap--See http://nmap.org/book/man-legal.html"
|
||||
|
||||
|
|
@ -114,7 +120,7 @@ action = function(host, port)
|
|||
pcap:pcap_close()
|
||||
|
||||
if out == '1_1___1_' then
|
||||
return 'Win98/Win2K/WinXP with pcap installed. I\'m unsure if they\'re sniffing. (tests: "' .. out .. '")'
|
||||
return 'Windows with libpcap installed; may or may not be sniffing (tests: "' .. out .. '")'
|
||||
end
|
||||
if results[out] == false then
|
||||
-- probably not sniffing
|
||||
|
|
@ -122,7 +128,7 @@ action = function(host, port)
|
|||
end
|
||||
if results[out] == true then
|
||||
-- rather sniffer.
|
||||
return 'PROMISCUOUS (tests: "' .. out .. '")'
|
||||
return 'Likely in promiscuous mode (tests: "' .. out .. '")'
|
||||
end
|
||||
|
||||
-- results[out] == nil
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue