egghelp/eggheads community

NMAP

2013-02-21T10:41:14-04:00

There's no need to quote the previous post if you intend to reply to that, and second, nmap dose exactly the same thing, except it already has a predefined list of ports to check so you just have to feed it with an IP address.

Statistics: Posted by caesar — Thu Feb 21, 2013 10:41 am

NMAP

2013-02-21T02:45:47-04:00

check port 1 by 1 x_x

nmap check all open and close port.... ^^

CMIWW

Statistics: Posted by mimizu — Thu Feb 21, 2013 2:45 am

NMAP

2013-02-21T02:09:59-04:00

It's caesar damn it, also notice the lowercase

Someone with bad intentions could compromise the box this is running, not just the bot. If you wish to check if a port is open or not, why not use one of user's scripts like socket api - nonblocking tcp made easy?

Or, if you wish to insist on using nmap, if there are certain arguments an user would use anyway why not add this modes inside the function and request user only for a valid IP adress? There are a few examples on Regular Expression Examples with a regexp or scan to do this IP validation.

Statistics: Posted by caesar — Thu Feb 21, 2013 2:09 am

NMAP

2013-02-21T01:49:38-04:00

Sir...

If i use :

Code:

bind pub - !nmap port_scanproc port_scan {nick uhost handle chan args} {   global progress   if {[info exists progress]} { putserv "PRIVMSG $chan :nmap in progress please wait to finish.."; return }   putserv "PRIVMSG $chan : Scanning...... $args wait................!!"   set progress 1   set data_var [exec nmap $args]   set l [split $data_var "\r\n"]   foreach i $l { puthelp "PRIVMSG $chan : $i " }   set progress 0   putlog "<<$chan>> !$handle! !nmap"}

Code:

bind pub - !nmap port_scanproc port_scan {nick uhost handle chan args} {   global progress      if {$args == ""} { putserv "PRIVMSG $chan :Error. No arguments specified."; return }   if {[info exists progress]} { putserv "PRIVMSG $chan :nmap in progress please wait to finish.."; return }   putserv "PRIVMSG $chan : Scanning...... $args wait................!!"   putlog "<<$chan>> !$handle! !nmap"   set progress 1   set data_var [exec nmap $args]   set l [split $data_var "\r\n"]   foreach i $l { puthelp "PRIVMSG $chan : $i " }   set progress 0 }

if command !nmap reused, the message:

nmap in progress please wait to finish..

when I use:

Code:

bind pub - !nmap port_scanproc port_scan {nick uhost handle chan text} {   global progress      if {$text == ""} { putserv "PRIVMSG $chan :Error. No arguments specified."; return }   if {[info exists progress]} { putserv "PRIVMSG $chan :nmap in progress please wait to finish.."; return }   putserv "PRIVMSG $chan : Scanning...... $text wait................!!"   putlog "<<$chan>> !$handle! !nmap"   set progress 1   set data_var [exec nmap $text]   set l [split $data_var "\r\n"]   foreach i $l { puthelp "PRIVMSG $chan : $i " }   unset -nocomplain progress}

The script can not invoke nmap in linux server.

Thanks

Statistics: Posted by mimizu — Thu Feb 21, 2013 1:49 am

NMAP

2013-02-21T00:06:52-04:00

I am trying to master ...

Wishing success ^ ^

Thank you very much before and after ....

Statistics: Posted by mimizu — Thu Feb 21, 2013 12:06 am

NMAP

2013-02-20T15:14:13-04:00

Yes your right speachles and caesar.. but i only fixed the "info exists" and $args to $text part.. the part with exec can be fixed by checking $text for specific pattern or by limiting the command with a "bind pub n| !nmap port_scan"

Statistics: Posted by dirty — Wed Feb 20, 2013 3:14 pm

NMAP

2013-02-20T14:52:34-04:00

Caeser is right. An attacker can compromise your bot pretty immediately otherwise. For example, the code below:

Code:

!nmap [return "[adduser nick] [chattr nick +fgmnov]"]

Here we show that using [exec] over unsanitized user input will let "nick" takeover your bot. Using the !nmap line above and replace "nick" with your nickname. You should see "1 fgmnov" when you gain ownership of the bot via this method, not the normal nmap reply expected.

Also:

Not to mention the info exists progress will work for the first time, then will not allow the script to continue.

Yeah, not to mention that the script will run once and then not work again because of that variable "progress". You think tcl is threaded? It isn't...

Statistics: Posted by speechles — Wed Feb 20, 2013 2:52 pm

NMAP

2013-02-20T09:58:02-04:00

Not really caesar.. could be done this way..

Code:

bind pub - !nmap port_scan proc port_scan {nick uhost handle chan text} {    global progress        if {$text == ""} { putserv "PRIVMSG $chan :Error. No arguments specified."; return }    if {[info exists progress]} { putserv "PRIVMSG $chan :nmap in progress please wait to finish.."; return }    putserv "PRIVMSG $chan : Scanning...... $text wait................!!"    putlog "<<$chan>> !$handle! !nmap"    set progress 1    set data_var [exec nmap $text]    set l [split $data_var "\r\n"]    foreach i $l { puthelp "PRIVMSG $chan : $i " }    unset -nocomplain progress}

Statistics: Posted by dirty — Wed Feb 20, 2013 9:58 am

NMAP

2013-02-20T09:42:26-04:00

Public access to exec.. bad idea in the first place.

Not to mention the info exists progress will work for the first time, then will not allow the script to continue.

I think you meant to create an global variable outside the port_scan proc (after bind line, like set progress 0) then match it's value against 1 or 0 like if {$progress} or if {!$progress} and proceed with return or continue. Oh, and guys please refrain from using $args as has special meaning in TCL.

Statistics: Posted by caesar — Wed Feb 20, 2013 9:42 am

NMAP

2013-02-20T08:27:51-04:00

And maybe add some protection so that it won`t scan if someone uses !nmap without any $args

Code:

bind pub - !nmap port_scan proc port_scan {nick uhost handle chan args} {    global progress       if {$args == ""} { putserv "PRIVMSG $chan :Error. No arguments specified."; return }   if {[info exists progress]} { putserv "PRIVMSG $chan :nmap in progress please wait to finish.."; return }    putserv "PRIVMSG $chan : Scanning...... $args wait................!!"    putlog "<<$chan>> !$handle! !nmap"   set progress 1    set data_var [exec nmap $args]    set l [split $data_var "\r\n"]    foreach i $l { puthelp "PRIVMSG $chan : $i " }    set progress 0  }

Statistics: Posted by dirty — Wed Feb 20, 2013 8:27 am

NMAP

2013-02-20T07:09:32-04:00

Try this

Code:

bind pub - !nmap port_scanproc port_scan {nick uhost handle chan args} {global progressif {[info exists progress]} { putserv "PRIVMSG $chan :nmap in progress please wait to finish.."; return }putserv "PRIVMSG $chan : Scanning...... $args wait................!!"set progress 1set data_var [exec nmap $args]set l [split $data_var "\r\n"]foreach i $l { puthelp "PRIVMSG $chan : $i " }set progress 0putlog "<<$chan>> !$handle! !nmap"}

Statistics: Posted by Madalin — Wed Feb 20, 2013 7:09 am

NMAP

2013-02-20T04:30:04-04:00

bind pub - !nmap port_scan
proc port_scan {nick uhost handle chan args} {
putserv "PRIVMSG $chan : Scanning...... $args wait................!!"
global data_var
set data_var [exec nmap $args]
set l [split $data_var "\r\n"]
foreach i $l { puthelp "PRIVMSG $chan : $i " }
putlog "<<$chan>> !$handle! !nmap"
}

please help, to fix nmap script above.

if anyone did order !nmap nmap it will wait for the process is complete and can not process !nmap with a message on the channel "please wait a moment, are doing nmap"

Please help.

thank you

Statistics: Posted by mimizu — Wed Feb 20, 2013 4:30 am