local smb = require "smb" local stdnse = require "stdnse" local nmap = require "nmap" description = [[ Attempts to list the supported protocols and dialects of a SMB server. The script attempts to initiate a connection using the dialects: * NT LM 0.12 (SMBv1) * 2.0.2 (SMBv2) * 2.1 (SMBv2) * 3.0 (SMBv3) * 3.0.2 (SMBv3) * 3.1.1 (SMBv3) Additionally if SMBv1 is found enabled, it will mark it as insecure. This script is the successor to the (removed) smbv2-enabled script. ]] --- -- @usage nmap -p445 --script smb-protocols -- @usage nmap -p139 --script smb-protocols -- -- @output -- | smb-protocols: -- | dialects: -- | NT LM 0.12 (SMBv1) [dangerous, but default] -- | 2.0.2 -- | 2.1 -- | 3.0 -- | 3.0.2 -- |_ 3.1.1 -- -- @xmloutput -- -- NT LM 0.12 (SMBv1) [dangerous, but default] -- 2.0.2 -- 2.1 -- 3.0 -- 3.0.2 -- 3.1.1 --
--- author = "Paulino Calderon" license = "Same as Nmap--See https://nmap.org/book/man-legal.html" categories = {"safe", "discovery"} hostrule = function(host) return smb.get_port(host) ~= nil end action = function(host,port) local status, supported_dialects = smb.list_dialects(host) if status then for i, v in pairs(supported_dialects) do -- Mark SMBv1 as insecure if v == "NT LM 0.12" then supported_dialects[i] = v .. " (SMBv1) [dangerous, but default]" end end if #supported_dialects > 0 then local output = stdnse.output_table() output.dialects = supported_dialects return output end end stdnse.debug1("No dialects were accepted") if nmap.verbosity()>1 then return "No dialects accepted. Something may be blocking the responses" end end