Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20 System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64 User : apache ( 48) PHP Version : 7.4.20 Disable Function : NONE Directory : /usr/share/nmap/scripts/ |
local nmap = require "nmap"
local shortport = require "shortport"
local stun = require "stun"
description = [[
Retrieves the external IP address of a NAT:ed host using the STUN protocol.
]]
---
-- @usage
-- nmap -sV -PN -sU -p 3478 --script stun-info <ip>
--
-- @output
-- PORT STATE SERVICE
-- 3478/udp open|filtered stun
-- | stun-info:
-- |_ External IP: 80.216.42.106
--
author = "Patrik Karlsson"
license = "Same as Nmap--See http://nmap.org/book/man-legal.html"
categories = {"discovery", "safe"}
portrule = shortport.port_or_service(3478, "stun", "udp")
local function fail(err) return ("\n ERROR: %s"):format(err or "") end
action = function(host, port)
local helper = stun.Helper:new(host, port)
local status = helper:connect()
if ( not(status) ) then
return fail("Failed to connect to server")
end
local status, result = helper:getExternalAddress()
if ( not(status) ) then
return fail("Failed to retrieve external IP")
end
port.version.name = "stun"
nmap.set_port_state(host, port, "open")
nmap.set_port_version(host, port)
if ( result ) then
return "\n External IP: " .. result
end
end