Gecko [ tsuru-no-tsurugi.tokyo ]

Name	Size	Permission	Date
data	[ DIR ]	drwxr-xr-x	2024-08-29 14:21
afp.lua	71.48 KB	-rw-r--r--	2023-01-13 02:40
ajp.lua	16.77 KB	-rw-r--r--	2023-01-13 02:40
amqp.lua	10.41 KB	-rw-r--r--	2023-01-13 02:40
anyconnect.lua	4.31 KB	-rw-r--r--	2023-01-13 02:40
asn1.lua	14.57 KB	-rw-r--r--	2023-01-13 02:40
base32.lua	7.36 KB	-rw-r--r--	2023-01-13 02:40
base64.lua	5.83 KB	-rw-r--r--	2023-01-13 02:40
bin.lua	12.99 KB	-rw-r--r--	2023-01-13 02:40
bitcoin.lua	18.25 KB	-rw-r--r--	2023-01-13 02:40
bits.lua	2.54 KB	-rw-r--r--	2023-01-13 02:40
bittorrent.lua	35.76 KB	-rw-r--r--	2023-01-13 02:40
bjnp.lua	9.55 KB	-rw-r--r--	2023-01-13 02:40
brute.lua	50.64 KB	-rw-r--r--	2023-01-13 02:40
cassandra.lua	5.48 KB	-rw-r--r--	2023-01-13 02:40
citrixxml.lua	16 KB	-rw-r--r--	2023-01-13 02:40
coap.lua	75.1 KB	-rw-r--r--	2023-01-13 02:40
comm.lua	11.03 KB	-rw-r--r--	2023-01-13 02:40
creds.lua	18.26 KB	-rw-r--r--	2023-01-13 02:40
cvs.lua	3.05 KB	-rw-r--r--	2023-01-13 02:40
datafiles.lua	11.05 KB	-rw-r--r--	2023-01-13 02:40
datetime.lua	7.5 KB	-rw-r--r--	2023-01-13 02:40
dhcp.lua	28.57 KB	-rw-r--r--	2023-01-13 02:40
dhcp6.lua	19.86 KB	-rw-r--r--	2023-01-13 02:40
dns.lua	51.07 KB	-rw-r--r--	2023-01-13 02:40
dnsbl.lua	19.01 KB	-rw-r--r--	2023-01-13 02:40
dnssd.lua	12.61 KB	-rw-r--r--	2023-01-13 02:40
drda.lua	24.08 KB	-rw-r--r--	2023-01-13 02:40
eap.lua	7.54 KB	-rw-r--r--	2023-01-13 02:40
eigrp.lua	12.98 KB	-rw-r--r--	2023-01-13 02:40
formulas.lua	5.68 KB	-rw-r--r--	2023-01-13 02:40
ftp.lua	9.03 KB	-rw-r--r--	2023-01-13 02:40
geoip.lua	1.71 KB	-rw-r--r--	2023-01-13 02:40
giop.lua	18.42 KB	-rw-r--r--	2023-01-13 02:40
gps.lua	3.38 KB	-rw-r--r--	2023-01-13 02:40
http.lua	117.07 KB	-rw-r--r--	2023-01-13 02:40
httpspider.lua	36.65 KB	-rw-r--r--	2023-01-13 02:40
iax2.lua	9.58 KB	-rw-r--r--	2023-01-13 02:40
idna.lua	17.14 KB	-rw-r--r--	2023-01-13 02:40
ike.lua	14.63 KB	-rw-r--r--	2023-01-13 02:40
imap.lua	9.59 KB	-rw-r--r--	2023-01-13 02:40
informix.lua	39.93 KB	-rw-r--r--	2023-01-13 02:40
ipOps.lua	29.06 KB	-rw-r--r--	2023-01-13 02:40
ipmi.lua	8.08 KB	-rw-r--r--	2023-01-13 02:40
ipp.lua	12.57 KB	-rw-r--r--	2023-01-13 02:40
irc.lua	757 B	-rw-r--r--	2023-01-13 02:40
iscsi.lua	21.38 KB	-rw-r--r--	2023-01-13 02:40
isns.lua	14.98 KB	-rw-r--r--	2023-01-13 02:40
jdwp.lua	43.52 KB	-rw-r--r--	2023-01-13 02:40
json.lua	11.62 KB	-rw-r--r--	2023-01-13 02:40
knx.lua	2.42 KB	-rw-r--r--	2023-01-13 02:40
ldap.lua	31.94 KB	-rw-r--r--	2023-01-13 02:40
lfs.luadoc	1.68 KB	-rw-r--r--	2023-01-13 02:40
libssh2-utility.lua	4.69 KB	-rw-r--r--	2023-01-13 02:40
libssh2.luadoc	4.75 KB	-rw-r--r--	2023-01-13 02:40
listop.lua	4.66 KB	-rw-r--r--	2023-01-13 02:40
lpeg-utility.lua	5.64 KB	-rw-r--r--	2023-01-13 02:40
lpeg.luadoc	351 B	-rw-r--r--	2023-01-13 02:40
ls.lua	10.96 KB	-rw-r--r--	2023-01-13 02:40
match.lua	2.05 KB	-rw-r--r--	2023-01-13 02:40
membase.lua	9.93 KB	-rw-r--r--	2023-01-13 02:40
mobileme.lua	8.46 KB	-rw-r--r--	2023-01-13 02:40
mongodb.lua	21.3 KB	-rw-r--r--	2023-01-13 02:40
mqtt.lua	28.86 KB	-rw-r--r--	2023-01-13 02:40
msrpc.lua	190.07 KB	-rw-r--r--	2023-01-13 02:40
msrpcperformance.lua	29.65 KB	-rw-r--r--	2023-01-13 02:40
msrpctypes.lua	168.52 KB	-rw-r--r--	2023-01-13 02:40
mssql.lua	109.43 KB	-rw-r--r--	2023-01-13 02:40
multicast.lua	5.97 KB	-rw-r--r--	2023-01-13 02:40
mysql.lua	16.03 KB	-rw-r--r--	2023-01-13 02:40
natpmp.lua	5.11 KB	-rw-r--r--	2023-01-13 02:40
nbd.lua	16.04 KB	-rw-r--r--	2023-01-13 02:40
ncp.lua	35.64 KB	-rw-r--r--	2023-01-13 02:40
ndmp.lua	11.43 KB	-rw-r--r--	2023-01-13 02:40
netbios.lua	14.44 KB	-rw-r--r--	2023-01-13 02:40
nmap.luadoc	40.34 KB	-rw-r--r--	2023-01-13 02:40
nrpc.lua	4.46 KB	-rw-r--r--	2023-01-13 02:40
nsedebug.lua	3.49 KB	-rw-r--r--	2023-01-13 02:40
omp2.lua	4.78 KB	-rw-r--r--	2023-01-13 02:40
oops.lua	3.61 KB	-rw-r--r--	2023-01-13 02:40
openssl.luadoc	7.5 KB	-rw-r--r--	2023-01-13 02:40
ospf.lua	15.29 KB	-rw-r--r--	2023-01-13 02:40
packet.lua	36.18 KB	-rw-r--r--	2023-01-13 02:40
pcre.luadoc	6.79 KB	-rw-r--r--	2023-01-13 02:40
pgsql.lua	20.6 KB	-rw-r--r--	2023-01-13 02:40
pop3.lua	5.74 KB	-rw-r--r--	2023-01-13 02:40
pppoe.lua	29.42 KB	-rw-r--r--	2023-01-13 02:40
proxy.lua	11.37 KB	-rw-r--r--	2023-01-13 02:40
punycode.lua	11.5 KB	-rw-r--r--	2023-01-13 02:40
rand.lua	2.7 KB	-rw-r--r--	2023-01-13 02:40
rdp.lua	14.73 KB	-rw-r--r--	2023-01-13 02:40
re.lua	8.22 KB	-rw-r--r--	2023-01-13 02:40
redis.lua	3.61 KB	-rw-r--r--	2023-01-13 02:40
rmi.lua	47.77 KB	-rw-r--r--	2023-01-13 02:40
rpc.lua	107.64 KB	-rw-r--r--	2023-01-13 02:40
rpcap.lua	11.08 KB	-rw-r--r--	2023-01-13 02:40
rsync.lua	5.22 KB	-rw-r--r--	2023-01-13 02:40
rtsp.lua	8.62 KB	-rw-r--r--	2023-01-13 02:40
sasl.lua	16.51 KB	-rw-r--r--	2023-01-13 02:40
shortport.lua	11.99 KB	-rw-r--r--	2023-01-13 02:40
sip.lua	30.07 KB	-rw-r--r--	2023-01-13 02:40
slaxml.lua	17.9 KB	-rw-r--r--	2023-01-13 02:40
smb.lua	173.22 KB	-rw-r--r--	2023-01-13 02:40
smb2.lua	15.34 KB	-rw-r--r--	2023-01-13 02:40
smbauth.lua	37.33 KB	-rw-r--r--	2023-01-13 02:40
smtp.lua	19.85 KB	-rw-r--r--	2023-01-13 02:40
snmp.lua	16 KB	-rw-r--r--	2023-01-13 02:40
socks.lua	8.25 KB	-rw-r--r--	2023-01-13 02:40
srvloc.lua	10.99 KB	-rw-r--r--	2023-01-13 02:40
ssh1.lua	9.15 KB	-rw-r--r--	2023-01-13 02:40
ssh2.lua	11.73 KB	-rw-r--r--	2023-01-13 02:40
sslcert.lua	33.35 KB	-rw-r--r--	2023-01-13 02:40
sslv2.lua	9.68 KB	-rw-r--r--	2023-01-13 02:40
stdnse.lua	32.64 KB	-rw-r--r--	2023-01-13 02:40
strbuf.lua	4.52 KB	-rw-r--r--	2023-01-13 02:40
strict.lua	2.53 KB	-rw-r--r--	2023-01-13 02:40
stringaux.lua	4.32 KB	-rw-r--r--	2023-01-13 02:40
stun.lua	11.08 KB	-rw-r--r--	2023-01-13 02:40
tab.lua	3.35 KB	-rw-r--r--	2023-01-13 02:40
tableaux.lua	2.06 KB	-rw-r--r--	2023-01-13 02:40
target.lua	3.93 KB	-rw-r--r--	2023-01-13 02:40
tftp.lua	9.41 KB	-rw-r--r--	2023-01-13 02:40
tls.lua	58.05 KB	-rw-r--r--	2023-01-13 02:40
tn3270.lua	46.99 KB	-rw-r--r--	2023-01-13 02:40
tns.lua	64.16 KB	-rw-r--r--	2023-01-13 02:40
unicode.lua	14.23 KB	-rw-r--r--	2023-01-13 02:40
unittest.lua	12.41 KB	-rw-r--r--	2023-01-13 02:40
unpwdb.lua	10.42 KB	-rw-r--r--	2023-01-13 02:40
upnp.lua	11.18 KB	-rw-r--r--	2023-01-13 02:40
url.lua	16.7 KB	-rw-r--r--	2023-01-13 02:40
versant.lua	8.58 KB	-rw-r--r--	2023-01-13 02:40
vnc.lua	25.54 KB	-rw-r--r--	2023-01-13 02:40
vulns.lua	76.45 KB	-rw-r--r--	2023-01-13 02:40
vuzedht.lua	16.21 KB	-rw-r--r--	2023-01-13 02:40
wsdd.lua	11.98 KB	-rw-r--r--	2023-01-13 02:40
xdmcp.lua	12.09 KB	-rw-r--r--	2023-01-13 02:40
xmpp.lua	15.91 KB	-rw-r--r--	2023-01-13 02:40
zlib.luadoc	4.88 KB	-rw-r--r--	2023-01-13 02:40

Rename

---
-- Functions for the SSH-1 protocol. This module also contains functions for
-- formatting key fingerprints.
--
-- @author Sven Klemm <sven@c3d2.de>
-- @copyright Same as Nmap--See https://nmap.org/book/man-legal.html

local io = require "io"
local math = require "math"
local nmap = require "nmap"
local os = require "os"
local stdnse = require "stdnse"
local string = require "string"
local stringaux = require "stringaux"
local table = require "table"
local base64 = require "base64"
local openssl = stdnse.silent_require "openssl"
_ENV = stdnse.module("ssh1", stdnse.seeall)

--- Retrieve the size of the packet that is being received
--  and checks if it is fully received
--
--  This function is very similar to the function generated
--  with match.numbytes(num) function, except that this one
--  will check for the number of bytes on-the-fly, based on
--  the written on the SSH packet.
--
--  @param buffer The receive buffer
--  @return packet_length, packet_length or nil
--  the return is similar to the lua function string:find()
check_packet_length = function( buffer )
  if #buffer < 4 then return nil end
  local payload_length = string.unpack( ">I4", buffer )
  local padding = 8 - payload_length % 8
  assert(payload_length)
  local total = 4+payload_length+padding;
  if total > #buffer then return nil end
  return total, total;
end

--- Receives a complete SSH packet, even if fragmented
--
--  This function is an abstraction layer to deal with
--  checking the packet size to know if there is any more
--  data to receive.
--
--  @param socket The socket used to receive the data
--  @return status True or false
--  @return packet The packet received
receive_ssh_packet = function( socket )
  local status, packet = socket:receive_buf(check_packet_length, true)
  return status, packet
end

local function unpack_with_padding(len_bytes, data, offset)
  local length, offset = string.unpack( ">I".. len_bytes, data, offset )
  return string.unpack( ">c" .. math.ceil( length / 8 ), data, offset )
end

--- Fetch an SSH-1 host key.
-- @param host Nmap host table.
-- @param port Nmap port table.
-- @return A table with the following fields: <code>exp</code>,
-- <code>mod</code>, <code>bits</code>, <code>key_type</code>,
-- <code>fp_input</code>, <code>full_key</code>, <code>algorithm</code>, and
-- <code>fingerprint</code>.
fetch_host_key = function(host, port)
  local socket = nmap.new_socket()
  local status, _

status = socket:connect(host, port)
  if not status then return end
  -- fetch banner
  status = socket:receive_lines(1)
  if not status then socket:close(); return end
  -- send our banner
  status = socket:send("SSH-1.5-Nmap-SSH1-Hostkey\r\n")
  if not status then socket:close(); return end

local data, packet_length, padding, offset
  status,data = receive_ssh_packet( socket )
  socket:close()
  if not status then return end

packet_length, offset = string.unpack( ">I4", data )
  padding = 8 - packet_length % 8
  offset = offset + padding

if padding + packet_length + 4 == #data then
    -- seems to be a proper SSH1 packet
    local msg_code,host_key_bits,exp,mod,length,fp_input
    msg_code, offset = string.unpack( ">B", data, offset )
    if msg_code == 2 then -- 2 => SSH_SMSG_PUBLIC_KEY
      -- ignore cookie and server key bits
      offset = offset + 8 + 4
      -- skip server key exponent and modulus
      _, offset = unpack_with_padding(2, data, offset)
      _, offset = unpack_with_padding(2, data, offset)

host_key_bits, offset = string.unpack( ">I4", data, offset )
      exp, offset = unpack_with_padding(2, data, offset)
      exp = openssl.bignum_bin2bn( exp )
      mod, offset = unpack_with_padding(2, data, offset)
      mod = openssl.bignum_bin2bn( mod )

fp_input = mod:tobin()..exp:tobin()

return {exp=exp,mod=mod,bits=host_key_bits,key_type='rsa1',fp_input=fp_input,
              full_key=('%d %s %s'):format(host_key_bits, exp:todec(), mod:todec()),
              key=('%s %s'):format(exp:todec(), mod:todec()), algorithm="RSA1",
              fingerprint=openssl.md5(fp_input), fp_sha256=openssl.digest("sha256",fp_input)}
    end
  end
end

--- Format a key fingerprint in hexadecimal.
-- @param fingerprint Key fingerprint.
-- @param algorithm Key algorithm.
-- @param bits Key size in bits.
fingerprint_hex = function( fingerprint, algorithm, bits )
  fingerprint = stdnse.tohex(fingerprint,{separator=":",group=2})
  return ("%d %s (%s)"):format( bits, fingerprint, algorithm )
end

--- Format a key fingerprint in base64.
-- @param fingerprint Key fingerprint.
-- @param hash The hashing algorithm used
-- @param algorithm Key algorithm.
-- @param bits Key size in bits.
fingerprint_base64 = function( fingerprint, hash, algorithm, bits )
  fingerprint = base64.enc(fingerprint)
  return ("%d %s:%s (%s)"):format( bits, hash, fingerprint:match("[^=]+"), algorithm )
end

--- Format a key fingerprint in Bubble Babble.
-- @param fingerprint Key fingerprint.
-- @param algorithm Key algorithm.
-- @param bits Key size in bits.
fingerprint_bubblebabble = function( fingerprint, algorithm, bits )
  local vowels = {'a','e','i','o','u','y'}
  local consonants = {'b','c','d','f','g','h','k','l','m','n','p','r','s','t','v','z','x'}
  local s = "x"
  local seed = 1

for i=1,#fingerprint+2,2 do
    local in1,in2,idx1,idx2,idx3,idx4,idx5
    if i < #fingerprint or #fingerprint / 2 % 2 ~= 0 then
      in1 = fingerprint:byte(i)
      idx1 = (((in1 >> 6) & 3) + seed) % 6 + 1
      idx2 = ((in1 >> 2) & 15) + 1
      idx3 = ((in1 & 3) + math.floor(seed/6)) % 6 + 1
      s = s .. vowels[idx1] .. consonants[idx2] .. vowels[idx3]
      if i < #fingerprint then
        in2 = fingerprint:byte(i+1)
        idx4 = ((in2 >> 4) & 15) + 1
        idx5 = (in2 & 15) + 1
        s = s .. consonants[idx4] .. '-' .. consonants[idx5]
        seed = (seed * 5 + in1 * 7 + in2) % 36
      end
    else
      idx1 = seed % 6 + 1
      idx2 = 16 + 1
      idx3 = math.floor(seed/6) + 1
      s = s .. vowels[idx1] .. consonants[idx2] .. vowels[idx3]
    end
  end
  s = s .. 'x'
  return ("%d %s (%s)"):format( bits, s, algorithm )
end

--- Format a key fingerprint into a visual ASCII art representation.
--
-- Ported from http://www.openbsd.org/cgi-bin/cvsweb/~checkout~/src/usr.bin/ssh/key.c.
-- @param fingerprint Key fingerprint.
-- @param algorithm Key algorithm.
-- @param bits Key size in bits.
fingerprint_visual = function( fingerprint, algorithm, bits )
  local i,j,field,characters,input,fieldsize_x,fieldsize_y,s
  fieldsize_x, fieldsize_y = 17, 9
  characters = {' ','.','o','+','=','*','B','O','X','@','%','&','#','/','^','S','E'}

-- initialize drawing area
  field = {}
  for i=1,fieldsize_x do
    field[i]={}
    for j=1,fieldsize_y do field[i][j]=1 end
  end

-- we start in the center and mark it
  local x, y = math.ceil(fieldsize_x/2), math.ceil(fieldsize_y/2)
  field[x][y] = #characters - 1;

-- iterate over fingerprint
  for i=1,#fingerprint do
    input = fingerprint:byte(i)
    -- each byte conveys four 2-bit move commands
    for j=1,4 do
      if (input & 1) == 1 then x = x + 1 else x = x - 1 end
      if (input & 2) == 2 then y = y + 1 else y = y - 1 end

x = math.max(x,1); x = math.min(x,fieldsize_x)
      y = math.max(y,1); y = math.min(y,fieldsize_y)

if field[x][y] < #characters - 2 then
        field[x][y] = field[x][y] + 1
      end
      input = input >> 2
    end
  end

-- mark end point
  field[x][y] = #characters;

-- build output
  s = ('\n+--[%4s %4d]----+\n'):format( algorithm, bits )
  for i=1,fieldsize_y do
    s = s .. '|'
    for j=1,fieldsize_x do s = s .. characters[ field[j][i] ] end
    s = s .. '|\n'
  end
  s = s .. '+-----------------+\n'
  return s
end

-- A lazy parsing function for known_hosts_file.
-- The script checks for the known_hosts file in this order:
--
-- (1) If known_hosts is specified in a script arg, use that. If turned
-- off (false), then don't do any known_hosts checking.
-- (2) Look at ~/.ssh/config to see if user known_hosts is in an
-- alternate location*. Look for "UserKnownHostsFile". If
-- UserKnownHostsFile is specified, open that known_hosts.
-- (3) Otherwise, open ~/.ssh/known_hosts.
parse_known_hosts_file = function(path)
    local common_paths = {}
    local f, knownhostspath

if path and io.open(path) then
        knownhostspath = path
    end

if not knownhostspath then
        for l in io.lines(os.getenv("HOME") .. "/.ssh/config") do
            if l and string.find(l, "UserKnownHostsFile") then
                knownhostspath = string.match(l, "UserKnownHostsFile%s(.*)")
                if string.sub(knownhostspath,1,1)=="~" then
                    knownhostspath = os.getenv("HOME") .. string.sub(knownhostspath, 2)
                end
            end
        end
    end

if not knownhostspath then
        knownhostspath = os.getenv("HOME") .."/.ssh/known_hosts"
    end

if not knownhostspath then
        return
    end

local known_host_entries = {}
    local lnumber = 0

for l in io.lines(knownhostspath) do
        lnumber = lnumber + 1
        if l and string.sub(l, 1, 1) ~= "#" then
            local parts = stringaux.strsplit(" ", l)
            table.insert(known_host_entries, {entry=parts, linenumber=lnumber})
        end
    end
    return known_host_entries
end

return _ENV;