Gecko [ tsuru-no-tsurugi.tokyo ]

Name	Size	Permission	Date
data	[ DIR ]	drwxr-xr-x	2024-08-29 14:21
afp.lua	71.48 KB	-rw-r--r--	2023-01-13 02:40
ajp.lua	16.77 KB	-rw-r--r--	2023-01-13 02:40
amqp.lua	10.41 KB	-rw-r--r--	2023-01-13 02:40
anyconnect.lua	4.31 KB	-rw-r--r--	2023-01-13 02:40
asn1.lua	14.57 KB	-rw-r--r--	2023-01-13 02:40
base32.lua	7.36 KB	-rw-r--r--	2023-01-13 02:40
base64.lua	5.83 KB	-rw-r--r--	2023-01-13 02:40
bin.lua	12.99 KB	-rw-r--r--	2023-01-13 02:40
bitcoin.lua	18.25 KB	-rw-r--r--	2023-01-13 02:40
bits.lua	2.54 KB	-rw-r--r--	2023-01-13 02:40
bittorrent.lua	35.76 KB	-rw-r--r--	2023-01-13 02:40
bjnp.lua	9.55 KB	-rw-r--r--	2023-01-13 02:40
brute.lua	50.64 KB	-rw-r--r--	2023-01-13 02:40
cassandra.lua	5.48 KB	-rw-r--r--	2023-01-13 02:40
citrixxml.lua	16 KB	-rw-r--r--	2023-01-13 02:40
coap.lua	75.1 KB	-rw-r--r--	2023-01-13 02:40
comm.lua	11.03 KB	-rw-r--r--	2023-01-13 02:40
creds.lua	18.26 KB	-rw-r--r--	2023-01-13 02:40
cvs.lua	3.05 KB	-rw-r--r--	2023-01-13 02:40
datafiles.lua	11.05 KB	-rw-r--r--	2023-01-13 02:40
datetime.lua	7.5 KB	-rw-r--r--	2023-01-13 02:40
dhcp.lua	28.57 KB	-rw-r--r--	2023-01-13 02:40
dhcp6.lua	19.86 KB	-rw-r--r--	2023-01-13 02:40
dns.lua	51.07 KB	-rw-r--r--	2023-01-13 02:40
dnsbl.lua	19.01 KB	-rw-r--r--	2023-01-13 02:40
dnssd.lua	12.61 KB	-rw-r--r--	2023-01-13 02:40
drda.lua	24.08 KB	-rw-r--r--	2023-01-13 02:40
eap.lua	7.54 KB	-rw-r--r--	2023-01-13 02:40
eigrp.lua	12.98 KB	-rw-r--r--	2023-01-13 02:40
formulas.lua	5.68 KB	-rw-r--r--	2023-01-13 02:40
ftp.lua	9.03 KB	-rw-r--r--	2023-01-13 02:40
geoip.lua	1.71 KB	-rw-r--r--	2023-01-13 02:40
giop.lua	18.42 KB	-rw-r--r--	2023-01-13 02:40
gps.lua	3.38 KB	-rw-r--r--	2023-01-13 02:40
http.lua	117.07 KB	-rw-r--r--	2023-01-13 02:40
httpspider.lua	36.65 KB	-rw-r--r--	2023-01-13 02:40
iax2.lua	9.58 KB	-rw-r--r--	2023-01-13 02:40
idna.lua	17.14 KB	-rw-r--r--	2023-01-13 02:40
ike.lua	14.63 KB	-rw-r--r--	2023-01-13 02:40
imap.lua	9.59 KB	-rw-r--r--	2023-01-13 02:40
informix.lua	39.93 KB	-rw-r--r--	2023-01-13 02:40
ipOps.lua	29.06 KB	-rw-r--r--	2023-01-13 02:40
ipmi.lua	8.08 KB	-rw-r--r--	2023-01-13 02:40
ipp.lua	12.57 KB	-rw-r--r--	2023-01-13 02:40
irc.lua	757 B	-rw-r--r--	2023-01-13 02:40
iscsi.lua	21.38 KB	-rw-r--r--	2023-01-13 02:40
isns.lua	14.98 KB	-rw-r--r--	2023-01-13 02:40
jdwp.lua	43.52 KB	-rw-r--r--	2023-01-13 02:40
json.lua	11.62 KB	-rw-r--r--	2023-01-13 02:40
knx.lua	2.42 KB	-rw-r--r--	2023-01-13 02:40
ldap.lua	31.94 KB	-rw-r--r--	2023-01-13 02:40
lfs.luadoc	1.68 KB	-rw-r--r--	2023-01-13 02:40
libssh2-utility.lua	4.69 KB	-rw-r--r--	2023-01-13 02:40
libssh2.luadoc	4.75 KB	-rw-r--r--	2023-01-13 02:40
listop.lua	4.66 KB	-rw-r--r--	2023-01-13 02:40
lpeg-utility.lua	5.64 KB	-rw-r--r--	2023-01-13 02:40
lpeg.luadoc	351 B	-rw-r--r--	2023-01-13 02:40
ls.lua	10.96 KB	-rw-r--r--	2023-01-13 02:40
match.lua	2.05 KB	-rw-r--r--	2023-01-13 02:40
membase.lua	9.93 KB	-rw-r--r--	2023-01-13 02:40
mobileme.lua	8.46 KB	-rw-r--r--	2023-01-13 02:40
mongodb.lua	21.3 KB	-rw-r--r--	2023-01-13 02:40
mqtt.lua	28.86 KB	-rw-r--r--	2023-01-13 02:40
msrpc.lua	190.07 KB	-rw-r--r--	2023-01-13 02:40
msrpcperformance.lua	29.65 KB	-rw-r--r--	2023-01-13 02:40
msrpctypes.lua	168.52 KB	-rw-r--r--	2023-01-13 02:40
mssql.lua	109.43 KB	-rw-r--r--	2023-01-13 02:40
multicast.lua	5.97 KB	-rw-r--r--	2023-01-13 02:40
mysql.lua	16.03 KB	-rw-r--r--	2023-01-13 02:40
natpmp.lua	5.11 KB	-rw-r--r--	2023-01-13 02:40
nbd.lua	16.04 KB	-rw-r--r--	2023-01-13 02:40
ncp.lua	35.64 KB	-rw-r--r--	2023-01-13 02:40
ndmp.lua	11.43 KB	-rw-r--r--	2023-01-13 02:40
netbios.lua	14.44 KB	-rw-r--r--	2023-01-13 02:40
nmap.luadoc	40.34 KB	-rw-r--r--	2023-01-13 02:40
nrpc.lua	4.46 KB	-rw-r--r--	2023-01-13 02:40
nsedebug.lua	3.49 KB	-rw-r--r--	2023-01-13 02:40
omp2.lua	4.78 KB	-rw-r--r--	2023-01-13 02:40
oops.lua	3.61 KB	-rw-r--r--	2023-01-13 02:40
openssl.luadoc	7.5 KB	-rw-r--r--	2023-01-13 02:40
ospf.lua	15.29 KB	-rw-r--r--	2023-01-13 02:40
packet.lua	36.18 KB	-rw-r--r--	2023-01-13 02:40
pcre.luadoc	6.79 KB	-rw-r--r--	2023-01-13 02:40
pgsql.lua	20.6 KB	-rw-r--r--	2023-01-13 02:40
pop3.lua	5.74 KB	-rw-r--r--	2023-01-13 02:40
pppoe.lua	29.42 KB	-rw-r--r--	2023-01-13 02:40
proxy.lua	11.37 KB	-rw-r--r--	2023-01-13 02:40
punycode.lua	11.5 KB	-rw-r--r--	2023-01-13 02:40
rand.lua	2.7 KB	-rw-r--r--	2023-01-13 02:40
rdp.lua	14.73 KB	-rw-r--r--	2023-01-13 02:40
re.lua	8.22 KB	-rw-r--r--	2023-01-13 02:40
redis.lua	3.61 KB	-rw-r--r--	2023-01-13 02:40
rmi.lua	47.77 KB	-rw-r--r--	2023-01-13 02:40
rpc.lua	107.64 KB	-rw-r--r--	2023-01-13 02:40
rpcap.lua	11.08 KB	-rw-r--r--	2023-01-13 02:40
rsync.lua	5.22 KB	-rw-r--r--	2023-01-13 02:40
rtsp.lua	8.62 KB	-rw-r--r--	2023-01-13 02:40
sasl.lua	16.51 KB	-rw-r--r--	2023-01-13 02:40
shortport.lua	11.99 KB	-rw-r--r--	2023-01-13 02:40
sip.lua	30.07 KB	-rw-r--r--	2023-01-13 02:40
slaxml.lua	17.9 KB	-rw-r--r--	2023-01-13 02:40
smb.lua	173.22 KB	-rw-r--r--	2023-01-13 02:40
smb2.lua	15.34 KB	-rw-r--r--	2023-01-13 02:40
smbauth.lua	37.33 KB	-rw-r--r--	2023-01-13 02:40
smtp.lua	19.85 KB	-rw-r--r--	2023-01-13 02:40
snmp.lua	16 KB	-rw-r--r--	2023-01-13 02:40
socks.lua	8.25 KB	-rw-r--r--	2023-01-13 02:40
srvloc.lua	10.99 KB	-rw-r--r--	2023-01-13 02:40
ssh1.lua	9.15 KB	-rw-r--r--	2023-01-13 02:40
ssh2.lua	11.73 KB	-rw-r--r--	2023-01-13 02:40
sslcert.lua	33.35 KB	-rw-r--r--	2023-01-13 02:40
sslv2.lua	9.68 KB	-rw-r--r--	2023-01-13 02:40
stdnse.lua	32.64 KB	-rw-r--r--	2023-01-13 02:40
strbuf.lua	4.52 KB	-rw-r--r--	2023-01-13 02:40
strict.lua	2.53 KB	-rw-r--r--	2023-01-13 02:40
stringaux.lua	4.32 KB	-rw-r--r--	2023-01-13 02:40
stun.lua	11.08 KB	-rw-r--r--	2023-01-13 02:40
tab.lua	3.35 KB	-rw-r--r--	2023-01-13 02:40
tableaux.lua	2.06 KB	-rw-r--r--	2023-01-13 02:40
target.lua	3.93 KB	-rw-r--r--	2023-01-13 02:40
tftp.lua	9.41 KB	-rw-r--r--	2023-01-13 02:40
tls.lua	58.05 KB	-rw-r--r--	2023-01-13 02:40
tn3270.lua	46.99 KB	-rw-r--r--	2023-01-13 02:40
tns.lua	64.16 KB	-rw-r--r--	2023-01-13 02:40
unicode.lua	14.23 KB	-rw-r--r--	2023-01-13 02:40
unittest.lua	12.41 KB	-rw-r--r--	2023-01-13 02:40
unpwdb.lua	10.42 KB	-rw-r--r--	2023-01-13 02:40
upnp.lua	11.18 KB	-rw-r--r--	2023-01-13 02:40
url.lua	16.7 KB	-rw-r--r--	2023-01-13 02:40
versant.lua	8.58 KB	-rw-r--r--	2023-01-13 02:40
vnc.lua	25.54 KB	-rw-r--r--	2023-01-13 02:40
vulns.lua	76.45 KB	-rw-r--r--	2023-01-13 02:40
vuzedht.lua	16.21 KB	-rw-r--r--	2023-01-13 02:40
wsdd.lua	11.98 KB	-rw-r--r--	2023-01-13 02:40
xdmcp.lua	12.09 KB	-rw-r--r--	2023-01-13 02:40
xmpp.lua	15.91 KB	-rw-r--r--	2023-01-13 02:40
zlib.luadoc	4.88 KB	-rw-r--r--	2023-01-13 02:40

Rename

---
-- A library implementing a minor subset of the IMAP protocol, currently the
-- CAPABILITY, LOGIN and AUTHENTICATE functions. The library was initially
-- written by Brandon Enright and later extended and converted to OO-form by
-- Patrik Karlsson <patrik@cqure.net>
--
-- The library consists of a <code>Helper</code>, class which is the main
-- interface for script writers, and the <code>IMAP</code> class providing
-- all protocol-level functionality.
--
-- The following example illustrates the recommended use of the library:
-- <code>
-- local helper = imap.Helper:new(host, port)
-- helper:connect()
-- helper:login("user","password","PLAIN")
-- helper:close()
-- </code>
--
-- @copyright Same as Nmap--See https://nmap.org/book/man-legal.html
-- @author Brandon Enright
-- @author Patrik Karlsson

-- Version 0.2
-- Revised 07/15/2011 - v0.2 - added the IMAP and Helper classes
--                             added support for LOGIN and AUTHENTICATE
--                             <patrik@cqure.net>

local base64 = require "base64"
local comm = require "comm"
local match = require "match"
local sasl = require "sasl"
local stdnse = require "stdnse"
local table = require "table"
_ENV = stdnse.module("imap", stdnse.seeall)

IMAP = {

--- Creates a new instance of the IMAP class
  --
  -- @param host table as received by the script action method
  -- @param port table as received by the script action method
  -- @param options table containing options, currently
  --  <code>timeout<code> - number containing the seconds to wait for
  --                        a response
  new = function(self, host, port, options)
    local o = {
      host = host,
      port = port,
      counter = 1,
      timeout = ( options and options.timeout ) or 10000
    }
    setmetatable(o, self)
    self.__index = self
    return o
  end,

--- Receives a response from the IMAP server
  --
  -- @return status true on success, false on failure
  -- @return data string containing the received data
  receive = function(self)
    local data = ""
    repeat
      local status, tmp = self.socket:receive_buf(match.pattern_limit("\r\n", 1024), false)
      if( not(status) ) then return false, tmp end
      data = data .. tmp
    until( tmp:match(("^A%04d"):format(self.counter - 1)) or tmp:match("^%+"))

return true, data
  end,

--- Sends a request to the IMAP server
  --
  -- @param cmd string containing the command to send to the server eg.
  --            eg. (AUTHENTICATE, LOGIN)
  -- @param params string containing the command parameters
  -- @return true on success, false on failure
  -- @return err string containing the error if status was false
  send = function(self, cmd, params)
    local data
    if ( not(params) ) then
      data = ("A%04d %s\r\n"):format(self.counter, cmd)
    else
      data = ("A%04d %s %s\r\n"):format(self.counter, cmd, params)
    end
    local status, err = self.socket:send(data)
    if ( not(status) ) then return false, err end
    self.counter = self.counter + 1
    return true
  end,

--- Connect to the server
  --
  -- @return status true on success, false on failure
  -- @return banner string containing the server banner
  connect = function(self)
    local socket, banner, opt = comm.tryssl( self.host, self.port, "", { request_timeout=self.timeout, recv_before=true } )
    if ( not(socket) or not(banner) ) then return false, "ERROR: Failed to connect to server" end
    self.socket = socket
    return true, banner
  end,

--- Authenticate to the server (non PLAIN text mode)
  -- Currently supported algorithms are CRAM-MD5 and CRAM-SHA1
  --
  -- @param username string containing the username
  -- @param pass string containing the password
  -- @param mech string containing a authentication mechanism, currently
  --             CRAM-MD5 or CRAM-SHA1
  -- @return status true if login was successful, false on failure
  -- @return err string containing the error message if status was false
  authenticate = function(self, username, pass, mech)
    assert( mech == "NTLM" or
      mech == "DIGEST-MD5" or
      mech == "CRAM-MD5" or
      mech == "PLAIN",
      "Unsupported authentication mechanism")

local status, err = self:send("AUTHENTICATE", mech)

if( not(status) ) then return false, "ERROR: Failed to send data" end

local status, data = self:receive()
    if( not(status) ) then return false, "ERROR: Failed to receive challenge" end

if ( mech == "NTLM" ) then
      -- sniffed of the wire, seems to always be the same
      -- decodes to some NTLMSSP blob greatness
      status, data = self.socket:send("TlRMTVNTUAABAAAAB7IIogYABgA3AAAADwAPACgAAAAFASgKAAAAD0FCVVNFLUFJUi5MT0NBTERPTUFJTg==\r\n")
      if ( not(status) ) then return false, "ERROR: Failed to send NTLM packet" end
      status, data = self:receive()
      if ( not(status) ) then return false, "ERROR: Failed to receive NTLM challenge" end
    end

if ( data:match(("^A%04d "):format(self.counter-1)) ) then
      return false, "ERROR: Authentication mechanism not supported"
    end

local digest, auth_data
    if ( not(data:match("^+")) ) then
      return false, "ERROR: Failed to receive proper response from server"
    end
    data = base64.dec(data:match("^+ (.*)"))

-- All mechanisms expect username and pass
    -- add the otheronce for those who need them
    local mech_params = { username, pass, data, "imap" }
    auth_data = sasl.Helper:new(mech):encode(table.unpack(mech_params))
    auth_data = base64.enc(auth_data) .. "\r\n"

status, data = self.socket:send(auth_data)
    if( not(status) ) then return false, "ERROR: Failed to send data" end

status, data = self:receive()
    if( not(status) ) then return false, "ERROR: Failed to receive data" end

if ( mech == "DIGEST-MD5" ) then
      local rspauth = data:match("^+ (.*)")
      if ( rspauth ) then
        rspauth = base64.dec(rspauth)
        status, data = self.socket:send("\r\n")
        status, data = self:receive()
      end
    end
    if ( data:match(("^A%04d OK"):format(self.counter - 1)) ) then
      return true
    end
    return false, "Login failed"
  end,

--- Login to the server using PLAIN text authentication
  --
  -- @param username string containing the username
  -- @param password string containing the password
  -- @return status true on success, false on failure
  -- @return err string containing the error message if status was false
  login = function(self, username, password)
    local status, err = self:send("LOGIN", ("\"%s\" \"%s\""):format(username, password))
    if( not(status) ) then return false, "ERROR: Failed to send data" end

local status, data = self:receive()
    if( not(status) ) then return false, "ERROR: Failed to receive data" end

if ( data:match(("^A%04d OK"):format(self.counter - 1)) ) then
      return true
    end
    return false, "Login failed"
  end,

--- Retrieves a list of server capabilities (eg. supported authentication
  --  mechanisms, QUOTA, UIDPLUS, ACL ...)
  --
  -- @return status true on success, false on failure
  -- @return capas array containing the capabilities that are supported
  capabilities = function(self)
    local capas = {}
    local proto = (self.port.version and self.port.version.service_tunnel == "ssl" and "ssl") or "tcp"
    local status, err = self:send("CAPABILITY")
    if( not(status) ) then return false, err end

local status, line = self:receive()
    if (not(status)) then
      capas.CAPABILITY = false
    else
      while status do
        if ( line:match("^%*%s+CAPABILITY") ) then
          line = line:gsub("^%*%s+CAPABILITY", "")
          for capability in line:gmatch("[%w%+=-]+") do
            capas[capability] = true
          end
          break
        end
        status, line = self.socket:receive()
      end
    end
    return true, capas
  end,

--- Closes the connection to the IMAP server
  -- @return true on success, false on failure
  close = function(self) return self.socket:close() end

}

-- The helper class, that servers as interface to script writers
Helper = {

-- @param host table as received by the script action method
  -- @param port table as received by the script action method
  -- @param options table containing options, currently
  -- <code>timeout<code> -  number containing the seconds to wait for
  --                        a response
  new = function(self, host, port, options)
    local o = { client = IMAP:new( host, port, options ) }
    setmetatable(o, self)
    self.__index = self
    return o
  end,

--- Connects to the IMAP server
  -- @return status true on success, false on failure
  connect = function(self)
    return self.client:connect()
  end,

--- Login to the server using either plain-text or using the authentication
  -- mechanism provided in the mech argument.
  --
  -- @param username string containing the username
  -- @param password string containing the password
  -- @param mech [optional] containing the authentication mechanism to use
  -- @return status true on success, false on failure
  login = function(self, username, password, mech)
    if ( not(mech) or mech == "LOGIN" ) then
      return self.client:login(username, password)
    else
      return self.client:authenticate(username, password, mech)
    end
  end,

--- Closes the connection to the IMAP server
  -- @return true on success, false on failure
  close = function(self)
    return self.client:close()
  end,

}

return _ENV;