Gecko [ lostrivercommunitycenter.com ]

Name	Size	Permission	Date
data	[ DIR ]	drwxr-xr-x	2025-12-23 02:50
afp.lua	73.07 KB	-rw-r--r--	2025-12-18 12:48
ajp.lua	16.66 KB	-rw-r--r--	2025-12-18 12:48
amqp.lua	10.41 KB	-rw-r--r--	2025-12-18 12:48
anyconnect.lua	4.31 KB	-rw-r--r--	2025-12-18 12:48
asn1.lua	14.57 KB	-rw-r--r--	2025-12-18 12:48
base32.lua	7.33 KB	-rw-r--r--	2025-12-18 12:48
base64.lua	5.83 KB	-rw-r--r--	2025-12-18 12:48
bin.lua	13.07 KB	-rw-r--r--	2025-12-18 12:48
bitcoin.lua	18.25 KB	-rw-r--r--	2025-12-18 12:48
bits.lua	2.54 KB	-rw-r--r--	2025-12-18 12:48
bittorrent.lua	35.76 KB	-rw-r--r--	2025-12-18 12:48
bjnp.lua	9.55 KB	-rw-r--r--	2025-12-18 12:48
brute.lua	50.74 KB	-rw-r--r--	2025-12-18 12:48
cassandra.lua	5.48 KB	-rw-r--r--	2025-12-18 12:48
citrixxml.lua	16.15 KB	-rw-r--r--	2025-12-18 12:48
coap.lua	75.1 KB	-rw-r--r--	2025-12-18 12:48
comm.lua	11.03 KB	-rw-r--r--	2025-12-18 12:48
creds.lua	18.26 KB	-rw-r--r--	2025-12-18 12:48
cvs.lua	3.05 KB	-rw-r--r--	2025-12-18 12:48
datafiles.lua	11.05 KB	-rw-r--r--	2025-12-18 12:48
datetime.lua	8.06 KB	-rw-r--r--	2025-12-18 12:48
dhcp.lua	28.58 KB	-rw-r--r--	2025-12-18 12:48
dhcp6.lua	19.85 KB	-rw-r--r--	2025-12-18 12:48
dicom.lua	10.49 KB	-rw-r--r--	2025-12-18 12:48
dns.lua	51.07 KB	-rw-r--r--	2025-12-18 12:48
dnsbl.lua	19.01 KB	-rw-r--r--	2025-12-18 12:48
dnssd.lua	12.61 KB	-rw-r--r--	2025-12-18 12:48
drda.lua	24.08 KB	-rw-r--r--	2025-12-18 12:48
eap.lua	7.54 KB	-rw-r--r--	2025-12-18 12:48
eigrp.lua	12.98 KB	-rw-r--r--	2025-12-18 12:48
formulas.lua	5.69 KB	-rw-r--r--	2025-12-18 12:48
ftp.lua	9.03 KB	-rw-r--r--	2025-12-18 12:48
geoip.lua	3.14 KB	-rw-r--r--	2025-12-18 12:48
giop.lua	18.42 KB	-rw-r--r--	2025-12-18 12:48
gps.lua	3.38 KB	-rw-r--r--	2025-12-18 12:48
http.lua	117.73 KB	-rw-r--r--	2025-12-18 12:48
httpspider.lua	36.73 KB	-rw-r--r--	2025-12-18 12:48
iax2.lua	9.54 KB	-rw-r--r--	2025-12-18 12:48
idna.lua	17.14 KB	-rw-r--r--	2025-12-18 12:48
ike.lua	14.63 KB	-rw-r--r--	2025-12-18 12:48
imap.lua	9.59 KB	-rw-r--r--	2025-12-18 12:48
informix.lua	39.93 KB	-rw-r--r--	2025-12-18 12:48
ipOps.lua	29.14 KB	-rw-r--r--	2025-12-18 12:48
ipmi.lua	8.08 KB	-rw-r--r--	2025-12-18 12:48
ipp.lua	12.56 KB	-rw-r--r--	2025-12-18 12:48
irc.lua	757 B	-rw-r--r--	2025-12-18 12:48
iscsi.lua	21.38 KB	-rw-r--r--	2025-12-18 12:48
isns.lua	14.98 KB	-rw-r--r--	2025-12-18 12:48
jdwp.lua	43.52 KB	-rw-r--r--	2025-12-18 12:48
json.lua	11.91 KB	-rw-r--r--	2025-12-18 12:48
knx.lua	2.42 KB	-rw-r--r--	2025-12-18 12:48
ldap.lua	32 KB	-rw-r--r--	2025-12-18 12:48
lfs.luadoc	1.68 KB	-rw-r--r--	2025-12-18 12:48
libssh2-utility.lua	4.69 KB	-rw-r--r--	2025-12-18 12:48
libssh2.luadoc	4.75 KB	-rw-r--r--	2025-12-18 12:48
listop.lua	4.66 KB	-rw-r--r--	2025-12-18 12:48
lpeg-utility.lua	5.64 KB	-rw-r--r--	2025-12-18 12:48
lpeg.luadoc	351 B	-rw-r--r--	2025-12-18 12:48
ls.lua	10.96 KB	-rw-r--r--	2025-12-18 12:48
match.lua	2.05 KB	-rw-r--r--	2025-12-18 12:48
membase.lua	9.93 KB	-rw-r--r--	2025-12-18 12:48
mobileme.lua	8.46 KB	-rw-r--r--	2025-12-18 12:48
mongodb.lua	21.47 KB	-rw-r--r--	2025-12-18 12:48
mqtt.lua	28.74 KB	-rw-r--r--	2025-12-18 12:48
msrpc.lua	190.11 KB	-rw-r--r--	2025-12-18 12:48
msrpcperformance.lua	29.65 KB	-rw-r--r--	2025-12-18 12:48
msrpctypes.lua	168.74 KB	-rw-r--r--	2025-12-18 12:48
mssql.lua	113.78 KB	-rw-r--r--	2025-12-18 12:48
multicast.lua	5.97 KB	-rw-r--r--	2025-12-18 12:48
mysql.lua	16.04 KB	-rw-r--r--	2025-12-18 12:48
natpmp.lua	5.11 KB	-rw-r--r--	2025-12-18 12:48
nbd.lua	16.04 KB	-rw-r--r--	2025-12-18 12:48
ncp.lua	35.64 KB	-rw-r--r--	2025-12-18 12:48
ndmp.lua	11.43 KB	-rw-r--r--	2025-12-18 12:48
netbios.lua	14.51 KB	-rw-r--r--	2025-12-18 12:48
nmap.luadoc	40.34 KB	-rw-r--r--	2025-12-18 12:48
nrpc.lua	4.46 KB	-rw-r--r--	2025-12-18 12:48
nsedebug.lua	3.49 KB	-rw-r--r--	2025-12-18 12:48
omp2.lua	4.78 KB	-rw-r--r--	2025-12-18 12:48
oops.lua	3.61 KB	-rw-r--r--	2025-12-18 12:48
openssl.luadoc	7.5 KB	-rw-r--r--	2025-12-18 12:48
ospf.lua	15.29 KB	-rw-r--r--	2025-12-18 12:48
outlib.lua	2.09 KB	-rw-r--r--	2025-12-18 12:48
packet.lua	36.54 KB	-rw-r--r--	2025-12-18 12:48
pcre.luadoc	6.79 KB	-rw-r--r--	2025-12-18 12:48
pgsql.lua	20.6 KB	-rw-r--r--	2025-12-18 12:48
pop3.lua	5.74 KB	-rw-r--r--	2025-12-18 12:48
pppoe.lua	29.42 KB	-rw-r--r--	2025-12-18 12:48
proxy.lua	11.37 KB	-rw-r--r--	2025-12-18 12:48
punycode.lua	11.5 KB	-rw-r--r--	2025-12-18 12:48
rand.lua	2.7 KB	-rw-r--r--	2025-12-18 12:48
rdp.lua	14.73 KB	-rw-r--r--	2025-12-18 12:48
re.lua	8.22 KB	-rw-r--r--	2025-12-18 12:48
redis.lua	3.61 KB	-rw-r--r--	2025-12-18 12:48
rmi.lua	47.77 KB	-rw-r--r--	2025-12-18 12:48
rpc.lua	107.75 KB	-rw-r--r--	2025-12-18 12:48
rpcap.lua	11.08 KB	-rw-r--r--	2025-12-18 12:48
rsync.lua	5.21 KB	-rw-r--r--	2025-12-18 12:48
rtsp.lua	8.66 KB	-rw-r--r--	2025-12-18 12:48
sasl.lua	16.51 KB	-rw-r--r--	2025-12-18 12:48
shortport.lua	12.83 KB	-rw-r--r--	2025-12-18 12:48
sip.lua	30.07 KB	-rw-r--r--	2025-12-18 12:48
slaxml.lua	17.9 KB	-rw-r--r--	2025-12-18 12:48
smb.lua	176.62 KB	-rw-r--r--	2025-12-18 12:48
smb2.lua	16.12 KB	-rw-r--r--	2025-12-18 12:48
smbauth.lua	37.33 KB	-rw-r--r--	2025-12-18 12:48
smtp.lua	19.85 KB	-rw-r--r--	2025-12-18 12:48
snmp.lua	17.24 KB	-rw-r--r--	2025-12-18 12:48
socks.lua	8.25 KB	-rw-r--r--	2025-12-18 12:48
srvloc.lua	10.99 KB	-rw-r--r--	2025-12-18 12:48
ssh1.lua	9.15 KB	-rw-r--r--	2025-12-18 12:48
ssh2.lua	13.44 KB	-rw-r--r--	2025-12-18 12:48
sslcert.lua	36.17 KB	-rw-r--r--	2025-12-18 12:48
sslv2.lua	9.68 KB	-rw-r--r--	2025-12-18 12:48
stdnse.lua	32.67 KB	-rw-r--r--	2025-12-18 12:48
strbuf.lua	4.52 KB	-rw-r--r--	2025-12-18 12:48
strict.lua	2.53 KB	-rw-r--r--	2025-12-18 12:48
stringaux.lua	4.35 KB	-rw-r--r--	2025-12-18 12:48
stun.lua	11.08 KB	-rw-r--r--	2025-12-18 12:48
tab.lua	3.35 KB	-rw-r--r--	2025-12-18 12:48
tableaux.lua	2.06 KB	-rw-r--r--	2025-12-18 12:48
target.lua	3.93 KB	-rw-r--r--	2025-12-18 12:48
tftp.lua	9.41 KB	-rw-r--r--	2025-12-18 12:48
tls.lua	69.24 KB	-rw-r--r--	2025-12-18 12:48
tn3270.lua	46.99 KB	-rw-r--r--	2025-12-18 12:48
tns.lua	63.35 KB	-rw-r--r--	2025-12-18 12:48
unicode.lua	14.23 KB	-rw-r--r--	2025-12-18 12:48
unittest.lua	12.42 KB	-rw-r--r--	2025-12-18 12:48
unpwdb.lua	10.52 KB	-rw-r--r--	2025-12-18 12:48
upnp.lua	11.18 KB	-rw-r--r--	2025-12-18 12:48
url.lua	16.54 KB	-rw-r--r--	2025-12-18 12:48
versant.lua	8.58 KB	-rw-r--r--	2025-12-18 12:48
vnc.lua	25.55 KB	-rw-r--r--	2025-12-18 12:48
vulns.lua	76.45 KB	-rw-r--r--	2025-12-18 12:48
vuzedht.lua	16.21 KB	-rw-r--r--	2025-12-18 12:48
wsdd.lua	11.98 KB	-rw-r--r--	2025-12-18 12:48
xdmcp.lua	12.09 KB	-rw-r--r--	2025-12-18 12:48
xmpp.lua	15.91 KB	-rw-r--r--	2025-12-18 12:48
zlib.luadoc	4.88 KB	-rw-r--r--	2025-12-18 12:48

Rename

---
-- Functions for the SSH-2 protocol.
--
-- @author Sven Klemm <sven@c3d2.de>
-- @copyright Same as Nmap--See https://nmap.org/book/man-legal.html

local base64 = require "base64"
local string = require "string"
local nmap = require "nmap"
local stdnse = require "stdnse"
local openssl = stdnse.silent_require "openssl"
_ENV = stdnse.module("ssh2", stdnse.seeall)

-- table holding transport layer functions
transport = {}

-- table of SSH-2 constants
local SSH2

--- Retrieve the size of the packet that is being received
--  and checks if it is fully received
--
--  This function is very similar to the function generated
--  with match.numbytes(num) function, except that this one
--  will check for the number of bytes on-the-fly, based on
--  the written on the SSH packet.
--
--  @param buffer The receive buffer
--  @return packet_length, packet_length or nil
--  the return is similar to the lua function string:find()
check_packet_length = function( buffer )
  if #buffer < 4 then return nil end -- not enough data in buffer for int
  local packet_length, offset = string.unpack( ">I4", buffer )
  assert(packet_length)
  if packet_length + 4 > buffer:len() then return nil end
  return packet_length+4, packet_length+4
end

--- Receives a complete SSH packet, even if fragmented
--
--  This function is an abstraction layer to deal with
--  checking the packet size to know if there is any more
--  data to receive.
--
--  @param socket The socket used to receive the data
--  @return status True or false
--  @return packet The packet received
transport.receive_packet = function( socket )
  local status, packet = socket:receive_buf(check_packet_length, true)
  return status, packet
end

--- Pack a multiprecision integer for sending.
-- @param bn <code>openssl</code> bignum.
-- @return Packed multiprecision integer.
transport.pack_mpint = function( bn )
  local bytes, packed
  bytes = bn:num_bytes()
  packed = bn:tobin()
  if bytes % 8 == 0 then
    bytes = bytes + 1
    packed = '\0' .. packed
  end
  return string.pack(">I4", bytes) .. packed
end

--- Build an SSH-2 packet.
-- @param payload Payload of the packet.
-- @return Packet to send on the wire.
transport.build = function( payload )
  local packet_length, padding_length
  padding_length = 8 - ( (payload:len() + 1 + 4 ) % 8 )
  -- padding length must be at least 4 bytes and is a multiple
  -- of the cipher block size or 8
  if padding_length < 4 then
    padding_length = padding_length + 8
  end
  packet_length = payload:len() + padding_length + 1
  return string.pack(">I4B", packet_length, padding_length) .. payload .. openssl.rand_pseudo_bytes(padding_length)
end

--- Extract the payload from a received SSH-2 packet.
-- @param packet Received SSH-2 packet.
-- @return Payload of the SSH-2 packet.
transport.payload = function( packet )
  local packet_length, padding_length, offset = string.unpack( ">I4B", packet )
  assert(packet_length and padding_length)
  local payload_length = packet_length - padding_length - 1
  if packet_length ~= (#packet - 4) then
    stdnse.debug1("SSH-2 packet doesn't match length: payload_length is %d but total length is only %d.", packet_length, #packet - 4)
    return nil
  end
  local payload = string.sub(packet, offset, offset + payload_length)
  return payload
end

--- Build a <code>kexdh_init</code> packet.
transport.kexdh_init = function( e )
  return string.pack( "B", SSH2.SSH_MSG_KEXDH_INIT) .. transport.pack_mpint( e )
end

--- Build a <code>kexdh_gex_init</code> packet.
transport.kexdh_gex_init = function( e )
  return string.pack( "B", SSH2.SSH_MSG_KEX_DH_GEX_INIT) .. transport.pack_mpint( e )
end

--- Build a <code>kex_init</code> packet.
transport.kex_init = function( options )
  options = options or {}
  local cookie = options['cookie'] or openssl.rand_bytes( 16 )
  local kex_algorithms = options['kex_algorithms'] or "diffie-hellman-group1-sha1"
  local host_key_algorithms = options['host_key_algorithms'] or "ssh-dss,ssh-rsa"
  local encryption_algorithms = options['encryption_algorithms'] or "aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr"
  local mac_algorithms = options['mac_algorithms'] or "hmac-md5,hmac-sha1,hmac-ripemd160"
  local compression_algorithms = options['compression_algorithms'] or "none"
  local languages = options['languages'] or ""

local payload = string.pack( "B", SSH2.SSH_MSG_KEXINIT) .. cookie
  .. string.pack( ">s4s4 s4s4 s4s4 s4s4 s4s4 BI4", kex_algorithms, host_key_algorithms,
    encryption_algorithms, encryption_algorithms,
    mac_algorithms, mac_algorithms,
    compression_algorithms, compression_algorithms,
    languages, languages,
    0, 0 )

return payload
end

--- Parse a <code>kexinit</code> package.
--
-- Returns an empty table in case of an error
transport.parse_kex_init = function( payload )
  local parsed = {}

-- check for proper msg code
  local msg_code, offset = string.unpack( "B", payload )
  if msg_code ~= SSH2.SSH_MSG_KEXINIT then return {} end

parsed.cookie, offset = string.unpack( "c16", payload, offset )

local fields = {'kex_algorithms','server_host_key_algorithms',
    'encryption_algorithms_client_to_server','encryption_algorithms_server_to_client',
    'mac_algorithms_client_to_server','mac_algorithms_server_to_client',
    'compression_algorithms_client_to_server','compression_algorithms_server_to_client',
    'languages_client_to_server','languages_server_to_client'}
  for _, fieldname in pairs( fields ) do
    parsed[fieldname], offset = string.unpack( ">s4", payload, offset )
  end

return parsed
end

--- Fetch an SSH-2 host key.
-- @param host Nmap host table.
-- @param port Nmap port table.
-- @param key_type key type to fetch.
-- @return A table with the following fields: <code>key</code>,
-- <code>key_type</code>, <code>fp_input</code>, <code>bits</code>,
-- <code>full_key</code>, <code>algorithm</code>, and <code>fingerprint</code>.
fetch_host_key = function( host, port, key_type )
  local socket = nmap.new_socket()
  local status

-- oakley group 2 prime taken from rfc 2409
  local prime2 = "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1\z
    29024E088A67CC74020BBEA63B139B22514A08798E3404DD\z
    EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245\z
    E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED\z
    EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE65381\z
    FFFFFFFFFFFFFFFF"
  -- oakley group 14 prime taken from rfc 3526
  local prime14 = "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1\z
    29024E088A67CC74020BBEA63B139B22514A08798E3404DD\z
    EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245\z
    E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED\z
    EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D\z
    C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F\z
    83655D23DCA3AD961C62F356208552BB9ED529077096966D\z
    670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B\z
    E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9\z
    DE2BCBF6955817183995497CEA956AE515D2261898FA0510\z
    15728E5A8AACAA68FFFFFFFFFFFFFFFF"
  -- oakley group 16 prime taken from rfc 3526
  local prime16 = "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1\z
    29024E088A67CC74020BBEA63B139B22514A08798E3404DD\z
    EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245\z
    E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED\z
    EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D\z
    C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F\z
    83655D23DCA3AD961C62F356208552BB9ED529077096966D\z
    670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B\z
    E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9\z
    DE2BCBF6955817183995497CEA956AE515D2261898FA0510\z
    15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64\z
    ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7\z
    ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B\z
    F12FFA06D98A0864D87602733EC86A64521F2B18177B200C\z
    BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31\z
    43DB5BFCE0FD108E4B82D120A92108011A723C12A787E6D7\z
    88719A10BDBA5B2699C327186AF4E23C1A946834B6150BDA\z
    2583E9CA2AD44CE8DBBBC2DB04DE8EF92E8EFC141FBECAA6\z
    287C59474E6BC05D99B2964FA090C3A2233BA186515BE7ED\z
    1F612970CEE2D7AFB81BDD762170481CD0069127D5B05AA9\z
    93B4EA988D8FDDC186FFB7DC90A6C08F4DF435C934063199\z
    FFFFFFFFFFFFFFFF"

status = socket:connect(host, port)
  if not status then return end
  -- fetch banner
  status = socket:receive_lines(1)
  if not status then socket:close(); return end
  -- send our banner
  status = socket:send("SSH-2.0-Nmap-SSH2-Hostkey\r\n")
  if not status then socket:close(); return end

local packet = transport.build( transport.kex_init( {
        host_key_algorithms=key_type,
        kex_algorithms="diffie-hellman-group1-sha1,\z
                        diffie-hellman-group14-sha1,\z
                        diffie-hellman-group14-sha256,\z
                        diffie-hellman-group16-sha512,\z
                        diffie-hellman-group-exchange-sha1,\z
                        diffie-hellman-group-exchange-sha256",
    } ) )
  status = socket:send( packet )
  if not status then socket:close(); return end

local kex_init
  status, kex_init = transport.receive_packet( socket )
  if not status then socket:close(); return end
  kex_init = transport.parse_kex_init( transport.payload( kex_init ) )

if not tostring(kex_init.server_host_key_algorithms):find( key_type, 1, true ) then
    -- server does not support host key type
    stdnse.debug2("Hostkey type '%s' not supported by server.", key_type )
    return
  end

local kex_algs = tostring( kex_init.kex_algorithms )
  local kexdh_gex_used = false
  local prime, q, gen
  -- NB: For each KEX prefix used here, make sure that all corresponding
  --     algorithms are listed in the transport.kex_init() call above.
  --     Otherwise this code might proceed with an incorrect KEX.
  if kex_algs:find("diffie-hellman-group1-", 1, true) then
    prime = prime2
    q = 1024
    gen = "2"
  elseif kex_algs:find("diffie-hellman-group14-", 1, true) then
    prime = prime14
    q = 2048
    gen = "2"
  elseif kex_algs:find("diffie-hellman-group16-", 1, true) then
    prime = prime16
    q = 4096
    gen = "2"
  elseif kex_algs:find("diffie-hellman-group-exchange-", 1, true) then
    local min, n, max
    min = 1024
    n = 1024
    max = 8192
    packet = transport.build( string.pack( ">BI4I4I4", SSH2.SSH_MSG_KEX_DH_GEX_REQUEST, min, n, max ) )
    status = socket:send( packet )
    if not status then socket:close(); return end

local gex_reply
    status, gex_reply = transport.receive_packet( socket )
    if not status then socket:close(); return end
    gex_reply = transport.payload( gex_reply )
    -- check for proper msg code
    if gex_reply:byte(1) ~= SSH2.SSH_MSG_KEX_DH_GEX_GROUP then
      socket:close()
      return
    end
    local _
    _, prime, gen = string.unpack( ">Bs4s4", gex_reply )

prime = openssl.bignum_bin2bn( prime ):tohex()
    q = 1024
    gen = openssl.bignum_bin2bn( gen ):todec()

kexdh_gex_used = true
  else
    stdnse.debug2("No shared KEX methods supported by server")
    return
  end

local e, g, x, p
  -- e = g^x mod p
  g = openssl.bignum_dec2bn( gen )
  p = openssl.bignum_hex2bn( prime )
  x = openssl.bignum_pseudo_rand( q )
  e = openssl.bignum_mod_exp( g, x, p )

-- if kexdh_gex_used then
  --   e = openssl.bignum_pseudo_rand( 1024 )
  -- end

local payload
  if kexdh_gex_used == true then
    payload = transport.kexdh_gex_init( e )
  else
    payload = transport.kexdh_init( e )
  end

packet = transport.build( payload )
  status = socket:send( packet )
  if not status then socket:close(); return end

local kexdh_reply
  status, kexdh_reply = transport.receive_packet( socket )
  if not status then socket:close(); return end
  kexdh_reply = transport.payload( kexdh_reply )
  -- check for proper msg code
  local msg_code = kexdh_reply:byte(1)

if ( kexdh_gex_used == true and msg_code ~= SSH2.SSH_MSG_KEX_DH_GEX_REPLY )
    or ( kexdh_gex_used == false and msg_code ~= SSH2.SSH_MSG_KEXDH_REPLY )
  then
    socket:close()
    return
  end

local bits, algorithm
  local _, public_host_key = string.unpack( ">Bs4", kexdh_reply )

if key_type == 'ssh-dss' then
    algorithm = "DSA"
    local _, p = string.unpack( ">s4s4", public_host_key )
    bits = openssl.bignum_bin2bn( p ):num_bits()
  elseif key_type == 'ssh-rsa' then
    algorithm = "RSA"
    local _, _, n = string.unpack( ">s4s4s4", public_host_key )
    bits = openssl.bignum_bin2bn( n ):num_bits()
  elseif key_type == 'ecdsa-sha2-nistp256' then
    algorithm = "ECDSA"
    bits = "256"
  elseif key_type == 'ecdsa-sha2-nistp384' then
    algorithm = "ECDSA"
    bits = "384"
  elseif key_type == 'ecdsa-sha2-nistp521' then
    algorithm = "ECDSA"
    bits = "521"
  elseif key_type == 'ssh-ed25519' then
    algorithm = "ED25519"
    bits = "256"
  else
    stdnse.debug1("Unsupported key type: %s", key_type )
  end

socket:close()
  return { key=base64.enc(public_host_key), key_type=key_type, fp_input=public_host_key, bits=bits,
           full_key=('%s %s'):format(key_type,base64.enc(public_host_key)),
           algorithm=algorithm, fingerprint=openssl.md5(public_host_key),
           fp_sha256=openssl.digest("sha256",public_host_key)}
end

-- constants

SSH2 = {
  SSH_MSG_DISCONNECT = 1,
  SSH_MSG_IGNORE = 2,
  SSH_MSG_UNIMPLEMENTED = 3,
  SSH_MSG_DEBUG = 4,
  SSH_MSG_SERVICE_REQUEST = 5,
  SSH_MSG_SERVICE_ACCEPT = 6,
  SSH_MSG_KEXINIT = 20,
  SSH_MSG_NEWKEYS = 21,
  SSH_MSG_KEXDH_INIT = 30,
  SSH_MSG_KEXDH_REPLY = 31,

SSH_MSG_KEX_DH_GEX_REQUEST_OLD = 30,
  SSH_MSG_KEX_DH_GEX_REQUEST = 34,
  SSH_MSG_KEX_DH_GEX_GROUP = 31,
  SSH_MSG_KEX_DH_GEX_INIT = 32,
  SSH_MSG_KEX_DH_GEX_REPLY = 33,
}

return _ENV;