Gecko [ lostrivercommunitycenter.com ]

Name	Size	Permission	Date
data	[ DIR ]	drwxr-xr-x	2025-12-23 02:50
afp.lua	73.07 KB	-rw-r--r--	2025-12-18 12:48
ajp.lua	16.66 KB	-rw-r--r--	2025-12-18 12:48
amqp.lua	10.41 KB	-rw-r--r--	2025-12-18 12:48
anyconnect.lua	4.31 KB	-rw-r--r--	2025-12-18 12:48
asn1.lua	14.57 KB	-rw-r--r--	2025-12-18 12:48
base32.lua	7.33 KB	-rw-r--r--	2025-12-18 12:48
base64.lua	5.83 KB	-rw-r--r--	2025-12-18 12:48
bin.lua	13.07 KB	-rw-r--r--	2025-12-18 12:48
bitcoin.lua	18.25 KB	-rw-r--r--	2025-12-18 12:48
bits.lua	2.54 KB	-rw-r--r--	2025-12-18 12:48
bittorrent.lua	35.76 KB	-rw-r--r--	2025-12-18 12:48
bjnp.lua	9.55 KB	-rw-r--r--	2025-12-18 12:48
brute.lua	50.74 KB	-rw-r--r--	2025-12-18 12:48
cassandra.lua	5.48 KB	-rw-r--r--	2025-12-18 12:48
citrixxml.lua	16.15 KB	-rw-r--r--	2025-12-18 12:48
coap.lua	75.1 KB	-rw-r--r--	2025-12-18 12:48
comm.lua	11.03 KB	-rw-r--r--	2025-12-18 12:48
creds.lua	18.26 KB	-rw-r--r--	2025-12-18 12:48
cvs.lua	3.05 KB	-rw-r--r--	2025-12-18 12:48
datafiles.lua	11.05 KB	-rw-r--r--	2025-12-18 12:48
datetime.lua	8.06 KB	-rw-r--r--	2025-12-18 12:48
dhcp.lua	28.58 KB	-rw-r--r--	2025-12-18 12:48
dhcp6.lua	19.85 KB	-rw-r--r--	2025-12-18 12:48
dicom.lua	10.49 KB	-rw-r--r--	2025-12-18 12:48
dns.lua	51.07 KB	-rw-r--r--	2025-12-18 12:48
dnsbl.lua	19.01 KB	-rw-r--r--	2025-12-18 12:48
dnssd.lua	12.61 KB	-rw-r--r--	2025-12-18 12:48
drda.lua	24.08 KB	-rw-r--r--	2025-12-18 12:48
eap.lua	7.54 KB	-rw-r--r--	2025-12-18 12:48
eigrp.lua	12.98 KB	-rw-r--r--	2025-12-18 12:48
formulas.lua	5.69 KB	-rw-r--r--	2025-12-18 12:48
ftp.lua	9.03 KB	-rw-r--r--	2025-12-18 12:48
geoip.lua	3.14 KB	-rw-r--r--	2025-12-18 12:48
giop.lua	18.42 KB	-rw-r--r--	2025-12-18 12:48
gps.lua	3.38 KB	-rw-r--r--	2025-12-18 12:48
http.lua	117.73 KB	-rw-r--r--	2025-12-18 12:48
httpspider.lua	36.73 KB	-rw-r--r--	2025-12-18 12:48
iax2.lua	9.54 KB	-rw-r--r--	2025-12-18 12:48
idna.lua	17.14 KB	-rw-r--r--	2025-12-18 12:48
ike.lua	14.63 KB	-rw-r--r--	2025-12-18 12:48
imap.lua	9.59 KB	-rw-r--r--	2025-12-18 12:48
informix.lua	39.93 KB	-rw-r--r--	2025-12-18 12:48
ipOps.lua	29.14 KB	-rw-r--r--	2025-12-18 12:48
ipmi.lua	8.08 KB	-rw-r--r--	2025-12-18 12:48
ipp.lua	12.56 KB	-rw-r--r--	2025-12-18 12:48
irc.lua	757 B	-rw-r--r--	2025-12-18 12:48
iscsi.lua	21.38 KB	-rw-r--r--	2025-12-18 12:48
isns.lua	14.98 KB	-rw-r--r--	2025-12-18 12:48
jdwp.lua	43.52 KB	-rw-r--r--	2025-12-18 12:48
json.lua	11.91 KB	-rw-r--r--	2025-12-18 12:48
knx.lua	2.42 KB	-rw-r--r--	2025-12-18 12:48
ldap.lua	32 KB	-rw-r--r--	2025-12-18 12:48
lfs.luadoc	1.68 KB	-rw-r--r--	2025-12-18 12:48
libssh2-utility.lua	4.69 KB	-rw-r--r--	2025-12-18 12:48
libssh2.luadoc	4.75 KB	-rw-r--r--	2025-12-18 12:48
listop.lua	4.66 KB	-rw-r--r--	2025-12-18 12:48
lpeg-utility.lua	5.64 KB	-rw-r--r--	2025-12-18 12:48
lpeg.luadoc	351 B	-rw-r--r--	2025-12-18 12:48
ls.lua	10.96 KB	-rw-r--r--	2025-12-18 12:48
match.lua	2.05 KB	-rw-r--r--	2025-12-18 12:48
membase.lua	9.93 KB	-rw-r--r--	2025-12-18 12:48
mobileme.lua	8.46 KB	-rw-r--r--	2025-12-18 12:48
mongodb.lua	21.47 KB	-rw-r--r--	2025-12-18 12:48
mqtt.lua	28.74 KB	-rw-r--r--	2025-12-18 12:48
msrpc.lua	190.11 KB	-rw-r--r--	2025-12-18 12:48
msrpcperformance.lua	29.65 KB	-rw-r--r--	2025-12-18 12:48
msrpctypes.lua	168.74 KB	-rw-r--r--	2025-12-18 12:48
mssql.lua	113.78 KB	-rw-r--r--	2025-12-18 12:48
multicast.lua	5.97 KB	-rw-r--r--	2025-12-18 12:48
mysql.lua	16.04 KB	-rw-r--r--	2025-12-18 12:48
natpmp.lua	5.11 KB	-rw-r--r--	2025-12-18 12:48
nbd.lua	16.04 KB	-rw-r--r--	2025-12-18 12:48
ncp.lua	35.64 KB	-rw-r--r--	2025-12-18 12:48
ndmp.lua	11.43 KB	-rw-r--r--	2025-12-18 12:48
netbios.lua	14.51 KB	-rw-r--r--	2025-12-18 12:48
nmap.luadoc	40.34 KB	-rw-r--r--	2025-12-18 12:48
nrpc.lua	4.46 KB	-rw-r--r--	2025-12-18 12:48
nsedebug.lua	3.49 KB	-rw-r--r--	2025-12-18 12:48
omp2.lua	4.78 KB	-rw-r--r--	2025-12-18 12:48
oops.lua	3.61 KB	-rw-r--r--	2025-12-18 12:48
openssl.luadoc	7.5 KB	-rw-r--r--	2025-12-18 12:48
ospf.lua	15.29 KB	-rw-r--r--	2025-12-18 12:48
outlib.lua	2.09 KB	-rw-r--r--	2025-12-18 12:48
packet.lua	36.54 KB	-rw-r--r--	2025-12-18 12:48
pcre.luadoc	6.79 KB	-rw-r--r--	2025-12-18 12:48
pgsql.lua	20.6 KB	-rw-r--r--	2025-12-18 12:48
pop3.lua	5.74 KB	-rw-r--r--	2025-12-18 12:48
pppoe.lua	29.42 KB	-rw-r--r--	2025-12-18 12:48
proxy.lua	11.37 KB	-rw-r--r--	2025-12-18 12:48
punycode.lua	11.5 KB	-rw-r--r--	2025-12-18 12:48
rand.lua	2.7 KB	-rw-r--r--	2025-12-18 12:48
rdp.lua	14.73 KB	-rw-r--r--	2025-12-18 12:48
re.lua	8.22 KB	-rw-r--r--	2025-12-18 12:48
redis.lua	3.61 KB	-rw-r--r--	2025-12-18 12:48
rmi.lua	47.77 KB	-rw-r--r--	2025-12-18 12:48
rpc.lua	107.75 KB	-rw-r--r--	2025-12-18 12:48
rpcap.lua	11.08 KB	-rw-r--r--	2025-12-18 12:48
rsync.lua	5.21 KB	-rw-r--r--	2025-12-18 12:48
rtsp.lua	8.66 KB	-rw-r--r--	2025-12-18 12:48
sasl.lua	16.51 KB	-rw-r--r--	2025-12-18 12:48
shortport.lua	12.83 KB	-rw-r--r--	2025-12-18 12:48
sip.lua	30.07 KB	-rw-r--r--	2025-12-18 12:48
slaxml.lua	17.9 KB	-rw-r--r--	2025-12-18 12:48
smb.lua	176.62 KB	-rw-r--r--	2025-12-18 12:48
smb2.lua	16.12 KB	-rw-r--r--	2025-12-18 12:48
smbauth.lua	37.33 KB	-rw-r--r--	2025-12-18 12:48
smtp.lua	19.85 KB	-rw-r--r--	2025-12-18 12:48
snmp.lua	17.24 KB	-rw-r--r--	2025-12-18 12:48
socks.lua	8.25 KB	-rw-r--r--	2025-12-18 12:48
srvloc.lua	10.99 KB	-rw-r--r--	2025-12-18 12:48
ssh1.lua	9.15 KB	-rw-r--r--	2025-12-18 12:48
ssh2.lua	13.44 KB	-rw-r--r--	2025-12-18 12:48
sslcert.lua	36.17 KB	-rw-r--r--	2025-12-18 12:48
sslv2.lua	9.68 KB	-rw-r--r--	2025-12-18 12:48
stdnse.lua	32.67 KB	-rw-r--r--	2025-12-18 12:48
strbuf.lua	4.52 KB	-rw-r--r--	2025-12-18 12:48
strict.lua	2.53 KB	-rw-r--r--	2025-12-18 12:48
stringaux.lua	4.35 KB	-rw-r--r--	2025-12-18 12:48
stun.lua	11.08 KB	-rw-r--r--	2025-12-18 12:48
tab.lua	3.35 KB	-rw-r--r--	2025-12-18 12:48
tableaux.lua	2.06 KB	-rw-r--r--	2025-12-18 12:48
target.lua	3.93 KB	-rw-r--r--	2025-12-18 12:48
tftp.lua	9.41 KB	-rw-r--r--	2025-12-18 12:48
tls.lua	69.24 KB	-rw-r--r--	2025-12-18 12:48
tn3270.lua	46.99 KB	-rw-r--r--	2025-12-18 12:48
tns.lua	63.35 KB	-rw-r--r--	2025-12-18 12:48
unicode.lua	14.23 KB	-rw-r--r--	2025-12-18 12:48
unittest.lua	12.42 KB	-rw-r--r--	2025-12-18 12:48
unpwdb.lua	10.52 KB	-rw-r--r--	2025-12-18 12:48
upnp.lua	11.18 KB	-rw-r--r--	2025-12-18 12:48
url.lua	16.54 KB	-rw-r--r--	2025-12-18 12:48
versant.lua	8.58 KB	-rw-r--r--	2025-12-18 12:48
vnc.lua	25.55 KB	-rw-r--r--	2025-12-18 12:48
vulns.lua	76.45 KB	-rw-r--r--	2025-12-18 12:48
vuzedht.lua	16.21 KB	-rw-r--r--	2025-12-18 12:48
wsdd.lua	11.98 KB	-rw-r--r--	2025-12-18 12:48
xdmcp.lua	12.09 KB	-rw-r--r--	2025-12-18 12:48
xmpp.lua	15.91 KB	-rw-r--r--	2025-12-18 12:48
zlib.luadoc	4.88 KB	-rw-r--r--	2025-12-18 12:48

Rename

---
-- This library implements HTTP requests used by the Cisco AnyConnect VPN Client
--
-- @author Patrik Karlsson <patrik@cqure.net>
--
-- @args anyconnect.group AnyConnect tunnel group (default: VPN)
-- @args anyconnect.mac MAC address of connecting client (default: random MAC)
-- @args anyconnect.version Version of connecting client (default: 3.1.05160)
-- @args anyconnect.ua User Agent of connecting client (default: AnyConnect Darwin_i386 3.1.05160)

local http = require('http')
local stdnse = require('stdnse')
local url = require('url')
local table = require('table')
local rand = require "rand"

local args_group= stdnse.get_script_args('anyconnect.group') or "VPN"
local args_mac= stdnse.get_script_args('anyconnect.mac')
local args_ver = stdnse.get_script_args('anyconnect.version') or "3.1.05160"
local args_ua = stdnse.get_script_args('anyconnect.ua') or ("AnyConnect Darwin_i386 %s"):format(args_ver)

_ENV = stdnse.module("anyconnect", stdnse.seeall)

Cisco = {

Util = {

generate_mac = function()
      return stdnse.format_mac(rand.random_string(6))
    end,

AnyConnect = {

new = function(self, host, port)
      local o = { host = host, port = port }
      setmetatable(o, self)
      self.__index = self
      return o
    end,

-- generate a random hex-string of length 'length'
    --
    generate_random = function(length)
      return rand.random_string(length * 2, '0123456789ABCDEF')
    end,

connect = function(self)
      args_mac = args_mac or Cisco.Util.generate_mac()
      local headers = {
        ['User-Agent'] = args_ua,
        ['Accept'] = '*/*',
        ['Accept-Encoding'] = 'identity',
        ['X-Transcend-Version'] = 1,
        ['X-Aggregate-Auth'] = 1,
        ['X-AnyConnect-Platform'] = 'mac-intel'
      }

local data = ([[<?xml version="1.0" encoding="UTF-8"?>
<config-auth client="vpn" type="init" aggregate-auth-version="2">
<version who="vpn">%s</version>
<device-id device-type="MacBookAir4,1" platform-version="10.9.2" unique-id="%s">mac-intel</device-id>
<mac-address-list>
<mac-address>%s</mac-address></mac-address-list>
<group-select>%s</group-select>
<group-access>https://%s:%s</group-access>
</config-auth>]]):format(args_ver, self.generate_random(64), args_mac, args_group, self.host.ip, self.port.number)

local options = { header=headers , no_cache=true, redirect_ok = function(host,port)
          local c = 5
          return function(url)
            if ( c==0 ) then return false end
            c = c - 1
            return true
          end
        end
      }

local path = '/'
      local response = http.head(self.host, self.port, path, options)
      -- account for redirects
      if response.status ~= 200 then
        return false, "Failed to connect to SSL VPN server"
      elseif response.location then
        local u = url.parse(response.location[#response.location])
        if u.host then
          self.host = u.host
        end
        if u.path then
          path = u.path
        end
      end

response = http.post(self.host, self.port, path, options, nil, data)

if response.status ~= 200 or response.body == nil then
        return false, "Not a Cisco ASA or unsupported version"
      end

local xmltags = {
        'version',
        'tunnel-group',
        'group-alias',
        'config-hash',
        'host-scan-ticket',
        'host-scan-token',
        'host-scan-base-uri',
        'host-scan-wait-uri',
        'banner'
      }

self.conn_attr = {}
      for _, tag in ipairs(xmltags) do
        local body = response.body:gsub('\r?\n', '')
        local filter = ("<%s.->(.*)</%s>"):format(tag:gsub('-', '%%-'), tag:gsub('-', '%%-'))
        local m = body:match(filter)
        if m then
          self.conn_attr[tag] = m
        end
      end

if not self.conn_attr['version'] then
        return false, "Not a Cisco ASA or unsupported version"
      end

-- in case we were redirected
      self.conn_attr['host'] = stdnse.get_hostname(self.host)
      return true
    end,

---
    -- Returns the version of the remote SSL VPN concentrator
    -- @return table containing major, minor and rev numeric values
    get_version = function(self)
      local ver = {}
      ver['major'], ver['minor'], ver['rev'] = self.conn_attr['version']:match('^(%d-)%.(%d-)%((.*)%)$')
      return ver
    end

}
}

return _ENV