ripequery.nse

Overview是Linux,FreeBSD,UNIX,Windows下的网络扫描和嗅探工 具包,其基本功能有三个,一是探测一组主机是否在线 其次是扫描 主机端口,嗅探所提供的网络服务 还可以推断主机

require "ipOps"

id = "RIPE query"
description = "Connects to the RIPE database, extracts and prints the role: entry for the IP."
author = "Diman Todorov <[e-mail]>"
license = "See nmaps COPYING for licence"

categories = {"discovery"}

hostrule = function(host, port)
	return not ipOps.isPrivate(host.ip)
end

action = function(host, port)
	local socket = nmap.new_socket()
	local status, line
	local result = ""

	socket:connect("whois.ripe.net", 43)
--	socket:connect("193.0.0.135", 43)
	socket:send(host.ip .. "\n")

	while true do
		local status, lines = socket:receive_lines(1)

		if not status then
			break
		else
			result = result .. lines
		end
	end
	socket:close()

	local value  = string.match(result, "role:(.-)\n")

	if (value == "see http://www.iana.org.") then
		value = nil
	end

	if (value == nil) then
		return
	end
	
	return "IP belongs to: " .. value
end