local iscsi = require "iscsi" local shortport = require "shortport" local stdnse = require "stdnse" description = [[ Collects and displays information from remote iSCSI targets. ]] --- -- @output -- PORT STATE SERVICE -- 3260/tcp open iscsi -- | iscsi-info: -- | iqn.2006-01.com.openfiler:tsn.c8c08cad469d -- | Address: 192.168.56.5:3260,1 -- | Authentication: NOT required -- | iqn.2006-01.com.openfiler:tsn.6aea7e052952 -- | Address: 192.168.56.5:3260,1 -- | Authentication: required -- |_ Auth reason: Authentication failure -- -- @xmloutput -- -- 192.168.56.5:3260,1 -- NOT required --
-- -- 192.168.56.5:3260,1 -- required -- Authentication failure --
-- Version 0.2 -- Created 2010/11/18 - v0.1 - created by Patrik Karlsson -- Revised 2010/11/28 - v0.2 - improved error handling author = "Patrik Karlsson" license = "Same as Nmap--See https://nmap.org/book/man-legal.html" categories = {"default", "safe", "discovery"} portrule = shortport.portnumber(3260, "tcp", {"open", "open|filtered"}) -- Attempts to determine whether authentication is required or not -- -- @return status true on success false on failure -- @return result true if auth is required false if not -- err string containing error message local function requiresAuth( host, port, target ) local helper = iscsi.Helper:new( host, port ) local errors = iscsi.Packet.LoginResponse.Errors local status, err = helper:connect() if ( not(status) ) then return false, "Failed to connect" end local response status, response = helper:login( target ) if ( not(status) ) then return false, response:getErrorMessage() end if ( status and response:getErrorCode() == errors.SUCCESS) then -- try to logout status = helper:logout() end status = helper:close() return true, "Authentication successful" end action = function( host, port ) local helper = iscsi.Helper:new( host, port ) local status = helper:connect() if ( not(status) ) then stdnse.debug1("failed to connect to server" ) return end local records status, records = helper:discoverTargets() if ( not(status) ) then stdnse.debug1("failed to discover targets" ) return end status = helper:logout() status = helper:close() local result = stdnse.output_table() for _, record in ipairs(records) do local result_part = stdnse.output_table() for _, addr in ipairs( record.addr ) do result_part["Address"] = addr end local status, err = requiresAuth( host, port, record.name ) if ( not(status) ) then result_part["Authentication"] = "required" result_part["Auth reason"] = err else result_part["Authentication"] = "NOT required" end result[record.name] = result_part end return result end