Gecko [ tsuru-no-tsurugi.tokyo ]

Name	Size	Permission	Date
data	[ DIR ]	drwxr-xr-x	2024-08-29 14:21
afp.lua	71.48 KB	-rw-r--r--	2023-01-13 02:40
ajp.lua	16.77 KB	-rw-r--r--	2023-01-13 02:40
amqp.lua	10.41 KB	-rw-r--r--	2023-01-13 02:40
anyconnect.lua	4.31 KB	-rw-r--r--	2023-01-13 02:40
asn1.lua	14.57 KB	-rw-r--r--	2023-01-13 02:40
base32.lua	7.36 KB	-rw-r--r--	2023-01-13 02:40
base64.lua	5.83 KB	-rw-r--r--	2023-01-13 02:40
bin.lua	12.99 KB	-rw-r--r--	2023-01-13 02:40
bitcoin.lua	18.25 KB	-rw-r--r--	2023-01-13 02:40
bits.lua	2.54 KB	-rw-r--r--	2023-01-13 02:40
bittorrent.lua	35.76 KB	-rw-r--r--	2023-01-13 02:40
bjnp.lua	9.55 KB	-rw-r--r--	2023-01-13 02:40
brute.lua	50.64 KB	-rw-r--r--	2023-01-13 02:40
cassandra.lua	5.48 KB	-rw-r--r--	2023-01-13 02:40
citrixxml.lua	16 KB	-rw-r--r--	2023-01-13 02:40
coap.lua	75.1 KB	-rw-r--r--	2023-01-13 02:40
comm.lua	11.03 KB	-rw-r--r--	2023-01-13 02:40
creds.lua	18.26 KB	-rw-r--r--	2023-01-13 02:40
cvs.lua	3.05 KB	-rw-r--r--	2023-01-13 02:40
datafiles.lua	11.05 KB	-rw-r--r--	2023-01-13 02:40
datetime.lua	7.5 KB	-rw-r--r--	2023-01-13 02:40
dhcp.lua	28.57 KB	-rw-r--r--	2023-01-13 02:40
dhcp6.lua	19.86 KB	-rw-r--r--	2023-01-13 02:40
dns.lua	51.07 KB	-rw-r--r--	2023-01-13 02:40
dnsbl.lua	19.01 KB	-rw-r--r--	2023-01-13 02:40
dnssd.lua	12.61 KB	-rw-r--r--	2023-01-13 02:40
drda.lua	24.08 KB	-rw-r--r--	2023-01-13 02:40
eap.lua	7.54 KB	-rw-r--r--	2023-01-13 02:40
eigrp.lua	12.98 KB	-rw-r--r--	2023-01-13 02:40
formulas.lua	5.68 KB	-rw-r--r--	2023-01-13 02:40
ftp.lua	9.03 KB	-rw-r--r--	2023-01-13 02:40
geoip.lua	1.71 KB	-rw-r--r--	2023-01-13 02:40
giop.lua	18.42 KB	-rw-r--r--	2023-01-13 02:40
gps.lua	3.38 KB	-rw-r--r--	2023-01-13 02:40
http.lua	117.07 KB	-rw-r--r--	2023-01-13 02:40
httpspider.lua	36.65 KB	-rw-r--r--	2023-01-13 02:40
iax2.lua	9.58 KB	-rw-r--r--	2023-01-13 02:40
idna.lua	17.14 KB	-rw-r--r--	2023-01-13 02:40
ike.lua	14.63 KB	-rw-r--r--	2023-01-13 02:40
imap.lua	9.59 KB	-rw-r--r--	2023-01-13 02:40
informix.lua	39.93 KB	-rw-r--r--	2023-01-13 02:40
ipOps.lua	29.06 KB	-rw-r--r--	2023-01-13 02:40
ipmi.lua	8.08 KB	-rw-r--r--	2023-01-13 02:40
ipp.lua	12.57 KB	-rw-r--r--	2023-01-13 02:40
irc.lua	757 B	-rw-r--r--	2023-01-13 02:40
iscsi.lua	21.38 KB	-rw-r--r--	2023-01-13 02:40
isns.lua	14.98 KB	-rw-r--r--	2023-01-13 02:40
jdwp.lua	43.52 KB	-rw-r--r--	2023-01-13 02:40
json.lua	11.62 KB	-rw-r--r--	2023-01-13 02:40
knx.lua	2.42 KB	-rw-r--r--	2023-01-13 02:40
ldap.lua	31.94 KB	-rw-r--r--	2023-01-13 02:40
lfs.luadoc	1.68 KB	-rw-r--r--	2023-01-13 02:40
libssh2-utility.lua	4.69 KB	-rw-r--r--	2023-01-13 02:40
libssh2.luadoc	4.75 KB	-rw-r--r--	2023-01-13 02:40
listop.lua	4.66 KB	-rw-r--r--	2023-01-13 02:40
lpeg-utility.lua	5.64 KB	-rw-r--r--	2023-01-13 02:40
lpeg.luadoc	351 B	-rw-r--r--	2023-01-13 02:40
ls.lua	10.96 KB	-rw-r--r--	2023-01-13 02:40
match.lua	2.05 KB	-rw-r--r--	2023-01-13 02:40
membase.lua	9.93 KB	-rw-r--r--	2023-01-13 02:40
mobileme.lua	8.46 KB	-rw-r--r--	2023-01-13 02:40
mongodb.lua	21.3 KB	-rw-r--r--	2023-01-13 02:40
mqtt.lua	28.86 KB	-rw-r--r--	2023-01-13 02:40
msrpc.lua	190.07 KB	-rw-r--r--	2023-01-13 02:40
msrpcperformance.lua	29.65 KB	-rw-r--r--	2023-01-13 02:40
msrpctypes.lua	168.52 KB	-rw-r--r--	2023-01-13 02:40
mssql.lua	109.43 KB	-rw-r--r--	2023-01-13 02:40
multicast.lua	5.97 KB	-rw-r--r--	2023-01-13 02:40
mysql.lua	16.03 KB	-rw-r--r--	2023-01-13 02:40
natpmp.lua	5.11 KB	-rw-r--r--	2023-01-13 02:40
nbd.lua	16.04 KB	-rw-r--r--	2023-01-13 02:40
ncp.lua	35.64 KB	-rw-r--r--	2023-01-13 02:40
ndmp.lua	11.43 KB	-rw-r--r--	2023-01-13 02:40
netbios.lua	14.44 KB	-rw-r--r--	2023-01-13 02:40
nmap.luadoc	40.34 KB	-rw-r--r--	2023-01-13 02:40
nrpc.lua	4.46 KB	-rw-r--r--	2023-01-13 02:40
nsedebug.lua	3.49 KB	-rw-r--r--	2023-01-13 02:40
omp2.lua	4.78 KB	-rw-r--r--	2023-01-13 02:40
oops.lua	3.61 KB	-rw-r--r--	2023-01-13 02:40
openssl.luadoc	7.5 KB	-rw-r--r--	2023-01-13 02:40
ospf.lua	15.29 KB	-rw-r--r--	2023-01-13 02:40
packet.lua	36.18 KB	-rw-r--r--	2023-01-13 02:40
pcre.luadoc	6.79 KB	-rw-r--r--	2023-01-13 02:40
pgsql.lua	20.6 KB	-rw-r--r--	2023-01-13 02:40
pop3.lua	5.74 KB	-rw-r--r--	2023-01-13 02:40
pppoe.lua	29.42 KB	-rw-r--r--	2023-01-13 02:40
proxy.lua	11.37 KB	-rw-r--r--	2023-01-13 02:40
punycode.lua	11.5 KB	-rw-r--r--	2023-01-13 02:40
rand.lua	2.7 KB	-rw-r--r--	2023-01-13 02:40
rdp.lua	14.73 KB	-rw-r--r--	2023-01-13 02:40
re.lua	8.22 KB	-rw-r--r--	2023-01-13 02:40
redis.lua	3.61 KB	-rw-r--r--	2023-01-13 02:40
rmi.lua	47.77 KB	-rw-r--r--	2023-01-13 02:40
rpc.lua	107.64 KB	-rw-r--r--	2023-01-13 02:40
rpcap.lua	11.08 KB	-rw-r--r--	2023-01-13 02:40
rsync.lua	5.22 KB	-rw-r--r--	2023-01-13 02:40
rtsp.lua	8.62 KB	-rw-r--r--	2023-01-13 02:40
sasl.lua	16.51 KB	-rw-r--r--	2023-01-13 02:40
shortport.lua	11.99 KB	-rw-r--r--	2023-01-13 02:40
sip.lua	30.07 KB	-rw-r--r--	2023-01-13 02:40
slaxml.lua	17.9 KB	-rw-r--r--	2023-01-13 02:40
smb.lua	173.22 KB	-rw-r--r--	2023-01-13 02:40
smb2.lua	15.34 KB	-rw-r--r--	2023-01-13 02:40
smbauth.lua	37.33 KB	-rw-r--r--	2023-01-13 02:40
smtp.lua	19.85 KB	-rw-r--r--	2023-01-13 02:40
snmp.lua	16 KB	-rw-r--r--	2023-01-13 02:40
socks.lua	8.25 KB	-rw-r--r--	2023-01-13 02:40
srvloc.lua	10.99 KB	-rw-r--r--	2023-01-13 02:40
ssh1.lua	9.15 KB	-rw-r--r--	2023-01-13 02:40
ssh2.lua	11.73 KB	-rw-r--r--	2023-01-13 02:40
sslcert.lua	33.35 KB	-rw-r--r--	2023-01-13 02:40
sslv2.lua	9.68 KB	-rw-r--r--	2023-01-13 02:40
stdnse.lua	32.64 KB	-rw-r--r--	2023-01-13 02:40
strbuf.lua	4.52 KB	-rw-r--r--	2023-01-13 02:40
strict.lua	2.53 KB	-rw-r--r--	2023-01-13 02:40
stringaux.lua	4.32 KB	-rw-r--r--	2023-01-13 02:40
stun.lua	11.08 KB	-rw-r--r--	2023-01-13 02:40
tab.lua	3.35 KB	-rw-r--r--	2023-01-13 02:40
tableaux.lua	2.06 KB	-rw-r--r--	2023-01-13 02:40
target.lua	3.93 KB	-rw-r--r--	2023-01-13 02:40
tftp.lua	9.41 KB	-rw-r--r--	2023-01-13 02:40
tls.lua	58.05 KB	-rw-r--r--	2023-01-13 02:40
tn3270.lua	46.99 KB	-rw-r--r--	2023-01-13 02:40
tns.lua	64.16 KB	-rw-r--r--	2023-01-13 02:40
unicode.lua	14.23 KB	-rw-r--r--	2023-01-13 02:40
unittest.lua	12.41 KB	-rw-r--r--	2023-01-13 02:40
unpwdb.lua	10.42 KB	-rw-r--r--	2023-01-13 02:40
upnp.lua	11.18 KB	-rw-r--r--	2023-01-13 02:40
url.lua	16.7 KB	-rw-r--r--	2023-01-13 02:40
versant.lua	8.58 KB	-rw-r--r--	2023-01-13 02:40
vnc.lua	25.54 KB	-rw-r--r--	2023-01-13 02:40
vulns.lua	76.45 KB	-rw-r--r--	2023-01-13 02:40
vuzedht.lua	16.21 KB	-rw-r--r--	2023-01-13 02:40
wsdd.lua	11.98 KB	-rw-r--r--	2023-01-13 02:40
xdmcp.lua	12.09 KB	-rw-r--r--	2023-01-13 02:40
xmpp.lua	15.91 KB	-rw-r--r--	2023-01-13 02:40
zlib.luadoc	4.88 KB	-rw-r--r--	2023-01-13 02:40

Rename

---
-- FTP functions.
--
-- @copyright Same as Nmap--See https://nmap.org/book/man-legal.html

local comm = require "comm"
local stdnse = require "stdnse"
local string = require "string"
local ipOps = require "ipOps"
local nmap = require "nmap"
_ENV = stdnse.module("ftp", stdnse.seeall)

local ERROR_MESSAGES = {
  ["EOF"]     = "connection closed",
  ["TIMEOUT"] = "connection timeout",
  ["ERROR"]   = "failed to receive data"
}

local crlf_pattern = "\r?\n"
--- Connects to the FTP server based on the provided options and returns the parsed banner.
--
-- @param host The host table
-- @param port The port table
-- @param opts The connection option table, from comm.lua.
-- @return socket The socket descriptor, or nil on errors
-- @return code The numeric response code, as returned by read_reply, or error message if socket is nil.
-- @return message The response message
-- @return buffer The socket read buffer function, to be passed to read_reply.
-- @see comm.lua
connect = function(host, port, opts)
  opts = opts or {}
  opts.recv_before = true
  local socket, err, proto, ret = comm.tryssl(host, port, '', opts)
  if not socket then
    return socket, (ERROR_MESSAGES[ret] or 'unspecified error')
  end
  local buffer = stdnse.make_buffer(socket, crlf_pattern)
  local pos = 1
  -- Should we just pass the output of buffer()?
  local usebuf = false
  -- Since we already read the first chunk of banner from the socket,
  -- we have to supply it line-by-line to read_reply.
  local code, message = read_reply(function()
      if usebuf then
        -- done reading the initial banner; pass along the socket buffer.
        return buffer()
      end
      -- Look for CRLF
      local i, j = ret:find(crlf_pattern, pos)
      if not i then
        -- Didn't find it! Grab another chunk (up to CRLF) and return it
        usebuf = true
        local chunk = buffer()
        return ret:sub(pos) .. chunk
      end
      local oldpos = pos
      -- start the next search just after CRLF
      pos = j + 1
      if pos >= #ret then
        -- We consumed the whole thing! Start calling buffer() next.
        usebuf = true
      end
      return ret:sub(oldpos, i - 1)
    end)
  return socket, code, message, buffer
end

---
-- Read an FTP reply and return the numeric code and the message. See RFC 959,
-- section 4.2.
-- @param buffer The buffer returned by ftp.connect or created with
-- <code>stdnse.make_buffer(socket, "\r?\n")</code>.
-- @return numeric code or <code>nil</code>.
-- @return text reply or error message.
function read_reply(buffer)
  local readline
  local line, err
  local code, message
  local _, p, tmp

line, err = buffer()
  if not line then
    return line, err
  end

-- Single-line response?
  code, message = string.match(line, "^(%d%d%d) (.*)$")
  if code then
    return tonumber(code), message
  end

-- Multi-line response?
  _, p, code, message = string.find(line, "^(%d%d%d)%-(.*)$")
  if p then
    while true do
      line, err = buffer()
      if not line then
        return line, err
      end
      tmp = string.match(line, "^%d%d%d (.*)$")
      if tmp then
        message = message .. "\n" .. tmp
        break
      end
      message = message .. "\n" .. line
    end

return tonumber(code), message
  end

return nil, string.format("Unparseable response: %q", line)
end

--- Close an FTP command connection
--
-- @param socket The socket with the live connection
function close(socket)
  socket:send("QUIT\r\n")
  socket:close()
end

--- Issue a STARTTLS command.
--
-- @param socket The connected command socket
-- @param buffer The socket read buffer
-- @return Boolean true if AUTH TLS succeeded, false otherwise
-- @return error string on failure
function starttls(socket, buffer)
  -- Send AUTH TLS command, ask the service to start encryption
  local status, err = socket:send("AUTH TLS\r\n")
  if not status then
    return nil, err
  end
  local code, result = read_reply(buffer)
  return code == 234, result
end

local function is_ssl(socket)
  return pcall(socket.get_ssl_certificate, socket)
end

-- Should we try STARTTLS based on this error?
local function should_try_ssl(code, message)
  return code and code >= 400 and (
        message:match('[Ss][Ss][Ll]') or
        message:match('[Tt][Ll][Ss]') or
        message:match('[Ss][Ee][Cc][Uu][Rr]')
        )
end

-- Try to reconnect over STARTTLS.
local function reconnect_ssl(socket, buffer)
  local status, err = starttls(socket, buffer)
  if status then
    status, err = socket:reconnect_ssl()
    if status then
      return true
    end
  end
  return nil, err
end

--- Authenticate with username and password
--
-- May negotiate AUTH TLS if required
-- @param socket The connected command socket
-- @param buffer The socket read buffer
-- @param username The username to send
-- @param password The password to send
-- @param acct (optional) If the server requires it, send this account name. Default: username
-- @return Boolean true if auth succeeded, false otherwise
-- @return FTP response code
-- @return FTP response message
function auth(socket, buffer, username, password, acct)
  local already_ssl = is_ssl(socket)
  ::TRY_AGAIN::
  local status, err = socket:send(("USER %s\r\n"):format(username))
  if not status then
    return nil, err
  end
  local code, message = read_reply(buffer)
  if code == 331 then
    -- 331: User name okay, need password.
    status, err =socket:send(("PASS %s\r\n"):format(password))
    if not status then
      return nil, err
    end
    code, message = read_reply(buffer)
  elseif not already_ssl and should_try_ssl(code, message) then
    if not reconnect_ssl(socket, buffer) then
      return nil
    end
    already_ssl = true
    goto TRY_AGAIN
  end

if code == 332 then
    -- 332: Need account for login.
    -- This is rarely seen but may come in response to a
    -- USER or PASS command.
    status, err = socket:send("ACCT %s\r\n"):format(acct or username)
    if not status then
      return nil, err
    end
    code, message = read_reply(buffer)
    if code == 331 then
      -- 331: User name okay, need password.
      status, err = socket:send("PASS %s\r\n"):format(password)
      if not status then
        return nil, err
      end
      code, message = read_reply(buffer)
    elseif not already_ssl and should_try_ssl(code, message) then
      if not reconnect_ssl(socket, buffer) then
        return nil
      end
      already_ssl = true
      goto TRY_AGAIN
    end
  end

if code and code >= 200 and code < 300 then
    -- We are primarily looking for 230: User logged in, proceed.
    return true, code, message
  else
    if code and not already_ssl and should_try_ssl(code, message) then
      if not reconnect_ssl(socket, buffer) then
        return nil
      end
      already_ssl = true
      goto TRY_AGAIN
    end
    return nil, code, message
  end
end

--- Start PASV mode
--
-- For IPv6 connections, attempts to use EPSV (RFC 2428). If the server sends an address that is not the target address, then this is an error.
-- @param socket The connected command socket
-- @param buffer The receive buffer
-- @return The connected data socket, or nil on error
-- @return Error message if data socket is nil
function pasv(socket, buffer)
  local epsv = false
  local status, lhost, lport, rhost, rport = socket:get_info()
  if not status then
    return nil, ("Can't determine remote host IP: %s"):format(lhost)
  end
  epsv = #ipOps.ip_to_str(rhost) > 4

::TRY_AGAIN::
  local cmd = epsv and "EPSV" or "PASV"
  -- ask the server for a Passive Mode: it should give us a port to
  -- listen to, where it will dump the directory listing
  local status, err = socket:send(cmd .. "\r\n")
  if not status then
    return status, err
  end
  local code, message = read_reply(buffer)

local pasv_port
  if epsv then
    if not code then
      return nil, ("EPSV failed: socket %s"):format(message)
    elseif code ~= 229 then
      stdnse.debug2("Falling back to PASV. EPSV: %d %s", code, message)
      epsv = false
      goto TRY_AGAIN
    end
    status, pasv_port = string.match(message, "%((.)%1%1(%d+)%1%)")
    if not status then
      stdnse.debug2("Can't parse EPSV response: %s", message)
      epsv = false
      goto TRY_AGAIN
    end
  else
    if not code or code >= 300 then
      return nil, ("PASV failed: %s %s"):format(code or "socket", message)
    end
    -- Compute the PASV port as given by the server
    -- The server should answer with something like
    -- 2xx Entering Passive Mode (a,b,c,d,hp,lp)
    --                           (-- IP--,PORT)
    -- PORT is (hp x 256) + lp
    local ip, high, low = string.match(message, "%((%d+,%d+,%d+,%d+),(%d+),(%d+)%)")
    if not ip then
      return nil, string.format("Can't parse PASV response: %q", message)
    end
    ip = ip:gsub(",", ".")
    if not (ipOps.compare_ip(ip, "eq", rhost) or ipOps.compare_ip(ip, "eq", "0.0.0.0")) then
      return nil, ("PASV IP %s is not the same as %s"):format(ip, rhost)
    end

pasv_port = high * 256 + low
  end

local list_socket = nmap.new_socket()
  status, err = list_socket:connect(rhost, pasv_port, "tcp")
  if not status then
    return status, err
  end

return list_socket
end

return _ENV;