smtp_settings.nasl

漏洞扫描源码,可以扫描linux,windows,交换机路由器

# kst-gpl
#
# This script was written by Michel Arboi <[e-mail]>
# and merged with third_party_domain.nasl, which was written by 
# Renaud Deraison <[e-mail]>
#
# GPL...
#
# SMTP is defined by RFC 2821. Messages are defined by RFC 2822

default_domain = "example.com";

if(description)
{
 script_id(80086);;
 script_version ("$Revision: 1.6 $");
 name["english"] = "SMTP settings";
 script_name(english:name["english"]);
 
 desc["english"] = "
This script just sets a couple of SMTP parameters.

Several checks need to use a third party host/domain 
name to work properly.

The checks that rely on this are SMTP or DNS relay checks.

By default, nessus.org is being used. However, under some
circumstances, this may make leak packets from your network
to this domain, thus compromising the privacy of your tests.

While the owner of 'nessus.org' is not known to keep logs of
such packet traces, you may want to change this value to
maximize your privacy.

Note that you absolutely need this option to be set to a 
*third party* domain. This means a domain that has *nothing
to do* with the domain name of the network you are testing.

Risk factor : None";

 script_description(english:desc["english"]);
 
 summary["english"] = "SMTP settings";
 script_summary(english:summary["english"]);
 
 script_category(ACT_SETTINGS);
 
 script_copyright(english:"This script is Copyright (C) 2002 Michel Arboi and Renaud Deraison");
 family["english"] = "Settings";
 family["francais"] = "Configuration";
 script_family(english:family["english"], francais:family["francais"]);
 
 #
 script_add_preference(name:"Third party domain :", type:"entry", value:default_domain);
 script_add_preference(name:"From address : ", type:"entry", 
			value:"[e-mail]");
 script_add_preference(name:"To address : ", type:"entry", 
	value:"postmaster@[AUTO_REPLACED_IP]");
 # AUTO_REPLACED_IP and AUTO_REPLACED_ADDR are... automatically replaced!
 exit(0);
}

#
# The script code starts here
#

fromaddr = script_get_preference("From address : ");
toaddr = script_get_preference("To address : ");

if (!fromaddr) fromaddr = "[e-mail]";
if (! toaddr) toaddr = "postmaster@[AUTO_REPLACED_IP]";

if ("AUTO_REPLACED_IP" >< toaddr) { 
  dstip = get_host_ip();
  toaddr = ereg_replace(pattern:"AUTO_REPLACED_IP", string:toaddr, 
		replace: dstip);
}
if ("AUTO_REPLACED_ADDR" >< toaddr) {
  dstaddr = get_host_name(); 
  toaddr = ereg_replace(pattern:"AUTO_REPLACED_ADDR", string:toaddr, 
		replace: dstaddr);
}

set_kb_item(name:"SMTP/headers/From", value:fromaddr);
set_kb_item(name:"SMTP/headers/To", value:toaddr);

domain = script_get_preference("Third party domain :");

if(!domain)domain = default_domain;
set_kb_item(name:"Settings/third_party_domain", value:domain);

exit(0);