Gecko [ lostrivercommunitycenter.com ]

Name	Size	Permission	Date
data	[ DIR ]	drwxr-xr-x	2025-12-23 02:50
afp.lua	73.07 KB	-rw-r--r--	2025-12-18 12:48
ajp.lua	16.66 KB	-rw-r--r--	2025-12-18 12:48
amqp.lua	10.41 KB	-rw-r--r--	2025-12-18 12:48
anyconnect.lua	4.31 KB	-rw-r--r--	2025-12-18 12:48
asn1.lua	14.57 KB	-rw-r--r--	2025-12-18 12:48
base32.lua	7.33 KB	-rw-r--r--	2025-12-18 12:48
base64.lua	5.83 KB	-rw-r--r--	2025-12-18 12:48
bin.lua	13.07 KB	-rw-r--r--	2025-12-18 12:48
bitcoin.lua	18.25 KB	-rw-r--r--	2025-12-18 12:48
bits.lua	2.54 KB	-rw-r--r--	2025-12-18 12:48
bittorrent.lua	35.76 KB	-rw-r--r--	2025-12-18 12:48
bjnp.lua	9.55 KB	-rw-r--r--	2025-12-18 12:48
brute.lua	50.74 KB	-rw-r--r--	2025-12-18 12:48
cassandra.lua	5.48 KB	-rw-r--r--	2025-12-18 12:48
citrixxml.lua	16.15 KB	-rw-r--r--	2025-12-18 12:48
coap.lua	75.1 KB	-rw-r--r--	2025-12-18 12:48
comm.lua	11.03 KB	-rw-r--r--	2025-12-18 12:48
creds.lua	18.26 KB	-rw-r--r--	2025-12-18 12:48
cvs.lua	3.05 KB	-rw-r--r--	2025-12-18 12:48
datafiles.lua	11.05 KB	-rw-r--r--	2025-12-18 12:48
datetime.lua	8.06 KB	-rw-r--r--	2025-12-18 12:48
dhcp.lua	28.58 KB	-rw-r--r--	2025-12-18 12:48
dhcp6.lua	19.85 KB	-rw-r--r--	2025-12-18 12:48
dicom.lua	10.49 KB	-rw-r--r--	2025-12-18 12:48
dns.lua	51.07 KB	-rw-r--r--	2025-12-18 12:48
dnsbl.lua	19.01 KB	-rw-r--r--	2025-12-18 12:48
dnssd.lua	12.61 KB	-rw-r--r--	2025-12-18 12:48
drda.lua	24.08 KB	-rw-r--r--	2025-12-18 12:48
eap.lua	7.54 KB	-rw-r--r--	2025-12-18 12:48
eigrp.lua	12.98 KB	-rw-r--r--	2025-12-18 12:48
formulas.lua	5.69 KB	-rw-r--r--	2025-12-18 12:48
ftp.lua	9.03 KB	-rw-r--r--	2025-12-18 12:48
geoip.lua	3.14 KB	-rw-r--r--	2025-12-18 12:48
giop.lua	18.42 KB	-rw-r--r--	2025-12-18 12:48
gps.lua	3.38 KB	-rw-r--r--	2025-12-18 12:48
http.lua	117.73 KB	-rw-r--r--	2025-12-18 12:48
httpspider.lua	36.73 KB	-rw-r--r--	2025-12-18 12:48
iax2.lua	9.54 KB	-rw-r--r--	2025-12-18 12:48
idna.lua	17.14 KB	-rw-r--r--	2025-12-18 12:48
ike.lua	14.63 KB	-rw-r--r--	2025-12-18 12:48
imap.lua	9.59 KB	-rw-r--r--	2025-12-18 12:48
informix.lua	39.93 KB	-rw-r--r--	2025-12-18 12:48
ipOps.lua	29.14 KB	-rw-r--r--	2025-12-18 12:48
ipmi.lua	8.08 KB	-rw-r--r--	2025-12-18 12:48
ipp.lua	12.56 KB	-rw-r--r--	2025-12-18 12:48
irc.lua	757 B	-rw-r--r--	2025-12-18 12:48
iscsi.lua	21.38 KB	-rw-r--r--	2025-12-18 12:48
isns.lua	14.98 KB	-rw-r--r--	2025-12-18 12:48
jdwp.lua	43.52 KB	-rw-r--r--	2025-12-18 12:48
json.lua	11.91 KB	-rw-r--r--	2025-12-18 12:48
knx.lua	2.42 KB	-rw-r--r--	2025-12-18 12:48
ldap.lua	32 KB	-rw-r--r--	2025-12-18 12:48
lfs.luadoc	1.68 KB	-rw-r--r--	2025-12-18 12:48
libssh2-utility.lua	4.69 KB	-rw-r--r--	2025-12-18 12:48
libssh2.luadoc	4.75 KB	-rw-r--r--	2025-12-18 12:48
listop.lua	4.66 KB	-rw-r--r--	2025-12-18 12:48
lpeg-utility.lua	5.64 KB	-rw-r--r--	2025-12-18 12:48
lpeg.luadoc	351 B	-rw-r--r--	2025-12-18 12:48
ls.lua	10.96 KB	-rw-r--r--	2025-12-18 12:48
match.lua	2.05 KB	-rw-r--r--	2025-12-18 12:48
membase.lua	9.93 KB	-rw-r--r--	2025-12-18 12:48
mobileme.lua	8.46 KB	-rw-r--r--	2025-12-18 12:48
mongodb.lua	21.47 KB	-rw-r--r--	2025-12-18 12:48
mqtt.lua	28.74 KB	-rw-r--r--	2025-12-18 12:48
msrpc.lua	190.11 KB	-rw-r--r--	2025-12-18 12:48
msrpcperformance.lua	29.65 KB	-rw-r--r--	2025-12-18 12:48
msrpctypes.lua	168.74 KB	-rw-r--r--	2025-12-18 12:48
mssql.lua	113.78 KB	-rw-r--r--	2025-12-18 12:48
multicast.lua	5.97 KB	-rw-r--r--	2025-12-18 12:48
mysql.lua	16.04 KB	-rw-r--r--	2025-12-18 12:48
natpmp.lua	5.11 KB	-rw-r--r--	2025-12-18 12:48
nbd.lua	16.04 KB	-rw-r--r--	2025-12-18 12:48
ncp.lua	35.64 KB	-rw-r--r--	2025-12-18 12:48
ndmp.lua	11.43 KB	-rw-r--r--	2025-12-18 12:48
netbios.lua	14.51 KB	-rw-r--r--	2025-12-18 12:48
nmap.luadoc	40.34 KB	-rw-r--r--	2025-12-18 12:48
nrpc.lua	4.46 KB	-rw-r--r--	2025-12-18 12:48
nsedebug.lua	3.49 KB	-rw-r--r--	2025-12-18 12:48
omp2.lua	4.78 KB	-rw-r--r--	2025-12-18 12:48
oops.lua	3.61 KB	-rw-r--r--	2025-12-18 12:48
openssl.luadoc	7.5 KB	-rw-r--r--	2025-12-18 12:48
ospf.lua	15.29 KB	-rw-r--r--	2025-12-18 12:48
outlib.lua	2.09 KB	-rw-r--r--	2025-12-18 12:48
packet.lua	36.54 KB	-rw-r--r--	2025-12-18 12:48
pcre.luadoc	6.79 KB	-rw-r--r--	2025-12-18 12:48
pgsql.lua	20.6 KB	-rw-r--r--	2025-12-18 12:48
pop3.lua	5.74 KB	-rw-r--r--	2025-12-18 12:48
pppoe.lua	29.42 KB	-rw-r--r--	2025-12-18 12:48
proxy.lua	11.37 KB	-rw-r--r--	2025-12-18 12:48
punycode.lua	11.5 KB	-rw-r--r--	2025-12-18 12:48
rand.lua	2.7 KB	-rw-r--r--	2025-12-18 12:48
rdp.lua	14.73 KB	-rw-r--r--	2025-12-18 12:48
re.lua	8.22 KB	-rw-r--r--	2025-12-18 12:48
redis.lua	3.61 KB	-rw-r--r--	2025-12-18 12:48
rmi.lua	47.77 KB	-rw-r--r--	2025-12-18 12:48
rpc.lua	107.75 KB	-rw-r--r--	2025-12-18 12:48
rpcap.lua	11.08 KB	-rw-r--r--	2025-12-18 12:48
rsync.lua	5.21 KB	-rw-r--r--	2025-12-18 12:48
rtsp.lua	8.66 KB	-rw-r--r--	2025-12-18 12:48
sasl.lua	16.51 KB	-rw-r--r--	2025-12-18 12:48
shortport.lua	12.83 KB	-rw-r--r--	2025-12-18 12:48
sip.lua	30.07 KB	-rw-r--r--	2025-12-18 12:48
slaxml.lua	17.9 KB	-rw-r--r--	2025-12-18 12:48
smb.lua	176.62 KB	-rw-r--r--	2025-12-18 12:48
smb2.lua	16.12 KB	-rw-r--r--	2025-12-18 12:48
smbauth.lua	37.33 KB	-rw-r--r--	2025-12-18 12:48
smtp.lua	19.85 KB	-rw-r--r--	2025-12-18 12:48
snmp.lua	17.24 KB	-rw-r--r--	2025-12-18 12:48
socks.lua	8.25 KB	-rw-r--r--	2025-12-18 12:48
srvloc.lua	10.99 KB	-rw-r--r--	2025-12-18 12:48
ssh1.lua	9.15 KB	-rw-r--r--	2025-12-18 12:48
ssh2.lua	13.44 KB	-rw-r--r--	2025-12-18 12:48
sslcert.lua	36.17 KB	-rw-r--r--	2025-12-18 12:48
sslv2.lua	9.68 KB	-rw-r--r--	2025-12-18 12:48
stdnse.lua	32.67 KB	-rw-r--r--	2025-12-18 12:48
strbuf.lua	4.52 KB	-rw-r--r--	2025-12-18 12:48
strict.lua	2.53 KB	-rw-r--r--	2025-12-18 12:48
stringaux.lua	4.35 KB	-rw-r--r--	2025-12-18 12:48
stun.lua	11.08 KB	-rw-r--r--	2025-12-18 12:48
tab.lua	3.35 KB	-rw-r--r--	2025-12-18 12:48
tableaux.lua	2.06 KB	-rw-r--r--	2025-12-18 12:48
target.lua	3.93 KB	-rw-r--r--	2025-12-18 12:48
tftp.lua	9.41 KB	-rw-r--r--	2025-12-18 12:48
tls.lua	69.24 KB	-rw-r--r--	2025-12-18 12:48
tn3270.lua	46.99 KB	-rw-r--r--	2025-12-18 12:48
tns.lua	63.35 KB	-rw-r--r--	2025-12-18 12:48
unicode.lua	14.23 KB	-rw-r--r--	2025-12-18 12:48
unittest.lua	12.42 KB	-rw-r--r--	2025-12-18 12:48
unpwdb.lua	10.52 KB	-rw-r--r--	2025-12-18 12:48
upnp.lua	11.18 KB	-rw-r--r--	2025-12-18 12:48
url.lua	16.54 KB	-rw-r--r--	2025-12-18 12:48
versant.lua	8.58 KB	-rw-r--r--	2025-12-18 12:48
vnc.lua	25.55 KB	-rw-r--r--	2025-12-18 12:48
vulns.lua	76.45 KB	-rw-r--r--	2025-12-18 12:48
vuzedht.lua	16.21 KB	-rw-r--r--	2025-12-18 12:48
wsdd.lua	11.98 KB	-rw-r--r--	2025-12-18 12:48
xdmcp.lua	12.09 KB	-rw-r--r--	2025-12-18 12:48
xmpp.lua	15.91 KB	-rw-r--r--	2025-12-18 12:48
zlib.luadoc	4.88 KB	-rw-r--r--	2025-12-18 12:48

Rename

---
-- A minimalistic Asterisk IAX2 (Inter-Asterisk eXchange v2) VoIP protocol implementation.
-- The library implements the minimum needed to perform brute force password guessing.
--
-- @author Patrik Karlsson <patrik@cqure.net>
--

local math = require "math"
local nmap = require "nmap"
local os = require "os"
local stdnse = require "stdnse"
local string = require "string"
local openssl = stdnse.silent_require "openssl"
local table = require "table"
_ENV = stdnse.module("iax2", stdnse.seeall)

IAX2 = {

FrameType = {
    IAX = 6,
  },

SubClass = {
    ACK = 0x04,
    REGACK = 0x0f,
    REGREJ = 0x10,
    REGREL = 0x11,
    CALLTOKEN = 0x28,
  },

InfoElement = {
    USERNAME = 0x06,
    CHALLENGE = 0x0f,
    MD5_RESULT = 0x10,
    CALLTOKEN = 0x36,
  },

PacketType = {
    FULL = 1,
  },

-- The IAX2 Header
  Header = {

-- Creates a new Header instance
    -- @param src_call number containing the source call
    -- @param dst_call number containing the dest call
    -- @param timestamp number containing a timestamp
    -- @param oseqno number containing the seqno of outgoing packets
    -- @param iseqno number containing the seqno of incoming packets
    -- @param frametype number containing the frame type
    -- @param subclass number containing the subclass type
    new = function(self, src_call, dst_call, timestamp, oseqno, iseqno, frametype, subclass)
      local o = {
        type = IAX2.PacketType.FULL,
        retrans = false,
        src_call = src_call,
        dst_call = dst_call,
        timestamp = timestamp,
        oseqno = oseqno,
        iseqno = iseqno,
        frametype = frametype,
        subclass = subclass,
      }
      setmetatable(o, self)
      self.__index = self
      return o
    end,

-- Parses data, a byte string, and creates a new Header instance
    -- @return header instance of Header
    parse = function(data)
      local header = IAX2.Header:new()
      local frame_type, pos = string.unpack("B", data)
      if ( (frame_type & 0x80) == 0 ) then
        stdnse.debug2("Frametype %x not supported", frame_type)
        return
      end
      header.type = IAX2.PacketType.FULL
      header.src_call, pos = string.unpack(">I2", data)
      header.src_call = (header.src_call & 0x7FFF)

local retrans = string.unpack("B", data, pos)
      if ( (retrans & 0x80) == 8 ) then
        header.retrans = true
      end
      header.dst_call, pos = string.unpack(">I2", data, pos)
      header.dst_call = (header.dst_call & 0x7FFF)

header.timestamp, header.oseqno,
        header.iseqno, header.frametype, header.subclass, pos = string.unpack(">I4BBBB", data, pos)

return header
    end,

-- Converts the instance to a string
    -- @return str containing the instance
    __tostring = function(self)
      assert(self.src_call < 32767, "Source call exceeds 32767")
      assert(self.dst_call < 32767, "Dest call exceeds 32767")
      local src_call = self.src_call
      local dst_call = self.dst_call
      if ( self.type == IAX2.PacketType.FULL ) then
        src_call = src_call + 32768
      end
      if ( self.retrans ) then
        dst_call = dst_call + 32768
      end
      return string.pack(">I2I2 I4BBBB", src_call, dst_call, self.timestamp,
        self.oseqno, self.iseqno, self.frametype, self.subclass)
    end,
  },

-- The IAX2 Request class
  Request = {

-- Creates a new instance
    -- @param header instance of Header
    new = function(self, header)
      local o = {
        header = header,
        ies = {}
      }
      setmetatable(o, self)
      self.__index = self
      return o
    end,

-- Sets an Info Element or adds one, in case it's missing
    -- @param key the key value of the IE to add
    -- @param value string containing the value to set or add
    setIE = function(self, key, value)
      for _, ie in ipairs(self.ies or {}) do
        if ( key == ie.type ) then
          ie.value = value
        end
      end
      table.insert(self.ies, { type = key, value = value } )
    end,

-- Gets an information element
    -- @param key number containing the element number to retrieve
    -- @return ie table containing the info element if it exists
    getIE = function(self, key)
      for _, ie in ipairs(self.ies or {}) do
        if ( key == ie.type ) then
          return ie
        end
      end
    end,

-- Converts the instance to a string
    -- @return str containing the instance
    __tostring = function(self)
      local data = {}
      for _, ie in ipairs(self.ies) do
        data[#data+1] = string.pack("Bs1", ie.type, ie.value )
      end

return tostring(self.header) .. table.concat(data)
    end,

-- The IAX2 Response
  Response = {

-- Creates a new instance
    new = function(self)
      local o = { ies = {} }
      setmetatable(o, self)
      self.__index = self
      return o
    end,

-- Parses data, a byte string, and creates a response
    -- @return resp instance of response
    parse = function(data)
      local resp = IAX2.Response:new()
      if ( not(resp) ) then return end

resp.header = IAX2.Header.parse(data)
      if ( not(resp.header) ) then return end

local pos = 13
      resp.ies = {}
      repeat
        local ie = {}
        ie.type, ie.value, pos = string.unpack(">Bs1", data, pos)
        table.insert(resp.ies, ie)
      until( pos > #data )
      return resp
    end,

}

Helper = {

-- Creates a new Helper instance
  -- @param host table as received by the action method
  -- @param port table as received by the action method
  -- @param options table containing helper options, currently
  --        <code>timeout</code> socket timeout in ms
  -- @return o instance of Helper
  new = function(self, host, port, options)
    local o = { host = host, port = port, options = options or {} }
    setmetatable(o, self)
    self.__index = self
    return o
  end,

-- Connects the UDP socket to the server
  -- @return status true on success, false on failure
  -- @return err message containing error if status is false
  connect = function(self)
    self.socket = nmap.new_socket()
    self.socket:set_timeout(self.options.timeout or 5000)
    return self.socket:connect(self.host, self.port)
  end,

-- Sends a request to the server and receives the response
  -- @param req instance containing the request to send to the server
  -- @return status true on success, false on failure
  -- @return resp instance of response on success,
  --         err containing the error message on failure
  exch = function(self, req)
    local status, err = self.socket:send(tostring(req))
    if ( not(status) ) then
      return false, "Failed to send request to server"
    end
    local status, data = self.socket:receive()
    if ( not(status) ) then
      return false, "Failed to receive response from server"
    end

local resp = IAX2.Response.parse(data)
    return true, resp
  end,

-- Request a session release
  -- @param username string containing the extension (username)
  -- @param password string containing the password
  regRelease = function(self, username, password)

local src_call = math.random(32767)
    local header = IAX2.Header:new(src_call, 0, os.time(), 0, 0, IAX2.FrameType.IAX, IAX2.SubClass.REGREL)
    local regrel = IAX2.Request:new(header)

regrel:setIE(IAX2.InfoElement.USERNAME, username)
    regrel:setIE(IAX2.InfoElement.CALLTOKEN, "")

local status, resp = self:exch(regrel)
    if ( not(status) ) then
      return false, resp
    end

if ( not(resp) or IAX2.SubClass.CALLTOKEN ~= resp.header.subclass ) then
      return false, "Unexpected response"
    end

local token = resp:getIE(IAX2.InfoElement.CALLTOKEN)
    if ( not(token) ) then
      return false, "Failed to get token"
    end

regrel:setIE(IAX2.InfoElement.CALLTOKEN, token.value)
    status, resp = self:exch(regrel)
    if ( not(status) ) then
      return false, resp
    end

local challenge = resp:getIE(IAX2.InfoElement.CHALLENGE)
    if ( not(challenge) ) then
      return false, "Failed to retrieve challenge from server"
    end

regrel.header.iseqno = 1
    regrel.header.oseqno = 1
    regrel.header.dst_call = resp.header.src_call
    regrel.ies = {}

local hash = stdnse.tohex(openssl.md5(challenge.value .. password))
    regrel:setIE(IAX2.InfoElement.USERNAME, username)
    regrel:setIE(IAX2.InfoElement.MD5_RESULT, hash)

status, resp = self:exch(regrel)
    if ( not(status) ) then
      return false, resp
    end

if ( IAX2.SubClass.ACK == resp.header.subclass ) then
      local data
      status, data = self.socket:receive()
      resp = IAX2.Response.parse(data)
    end

if ( status and IAX2.SubClass.REGACK == resp.header.subclass ) then
      return true
    end
    return false, "Release failed"
  end,

-- Close the connection with the server
  -- @return true on success, false on failure
  close = function(self)
    return self.socket:close()
  end,

}

return _ENV;