File socks-open-proxy
Script types:
portrule
Categories:
default, discovery, external, safe
Download: http://nmap.org/svn/scripts/socks-open-proxy.nse
User Summary
Checks if an open socks proxy is running on the target.
The script attempts to connect to a proxy server and send socks4 and socks5 payloads. It is considered an open proxy if the script receives a Request Granted response from the target port.
The payloads try to open a connection to www.google.com port 80. A
different test host can be passed as proxy.url
argument.
Script Arguments
proxy.url
URL that will be requested to the proxy.
proxy.pattern
Pattern that will be searched inside the request results.
Example Usage
nmap --script=socks-open-proxy \ --script-args proxy.url=<host>,proxy.pattern=<pattern>
Script Output
Interesting ports on scanme.nmap.org (64.13.134.52): PORT STATE SERVICE 1080/tcp open socks | proxy-open-socks: Potentially OPEN proxy. |_ Versions succesfully tested: Socks4 Socks5
Requires
Author: Joao Correa
License: Same as Nmap--See http://nmap.org/book/man-legal.html
