Script rmi-dumpregistry

Script types: portrule
Categories: default, discovery, safe
Download: https://svn.nmap.org/nmap/scripts/rmi-dumpregistry.nse

Script Summary

Connects to a remote RMI registry and attempts to dump all of its objects.

First it tries to determine the names of all objects bound in the registry, and then it tries to determine information about the objects, such as the the class names of the superclasses and interfaces. This may, depending on what the registry is used for, give valuable information about the service. E.g, if the app uses JMX (Java Management eXtensions), you should see an object called "jmxconnector" on it.

It also gives information about where the objects are located, (marked with @<ip>:port in the output).

Some apps give away the classpath, which this scripts catches in so-called "Custom data".

Example Usage

nmap --script rmi-dumpregistry -p 1098 <host>

Script Output 

PORT     STATE SERVICE     REASON
1099/tcp open  rmiregistry syn-ack
| rmi-dumpregistry:
|   cfassembler/default
|     coldfusion.flex.rmi.DataServicesCFProxyServer_Stub
|     @192.168.0.3:1271
|     extends
|       java.rmi.server.RemoteStub
|       extends
|         java.rmi.server.RemoteObject
|     Custom data
|       Classpath
|         file:/C:/CFusionMX7/runtime/../lib/ant-launcher.jar
|         file:/C:/CFusionMX7/runtime/../lib/ant.jar
|         file:/C:/CFusionMX7/runtime/../lib/axis.jar
|         file:/C:/CFusionMX7/runtime/../lib/backport-util-concurrent.jar
|         file:/C:/CFusionMX7/runtime/../lib/bcel.jar
|         file:/C:/CFusionMX7/runtime/../lib/cdo.jar
|         file:/C:/CFusionMX7/runtime/../lib/cdohost.jar
|         file:/C:/CFusionMX7/runtime/../lib/cf4was.jar
|         file:/C:/CFusionMX7/runtime/../lib/cf4was_ae.jar
|         file:/C:/CFusionMX7/runtime/../lib/cfmx-ssl.jar
|         file:/C:/CFusionMX7/runtime/../lib/cfusion.jar
|         file:/C:/CFusionMX7/runtime/../lib/commons-beanutils-1.5.jar
|         file:/C:/CFusionMX7/runtime/../lib/commons-collections-2.1.jar
|         file:/C:/CFusionMX7/runtime/../lib/commons-digester-1.3.jar
|         file:/C:/CFusionMX7/runtime/../lib/commons-digester-1.7.jar
|         file:/C:/CFusionMX7/runtime/../lib/commons-discovery-0.2.jar
|         file:/C:/CFusionMX7/runtime/../lib/commons-discovery.jar
|         file:/C:/CFusionMX7/runtime/../lib/commons-logging-1.0.2.jar
|         file:/C:/CFusionMX7/runtime/../lib/commons-logging-api-1.0.2.jar
|         file:/C:/CFusionMX7/runtime/../lib/commons-net-1.2.2.jar
|         file:/C:/CFusionMX7/runtime/../lib/crystal.jar
|         file:/C:/CFusionMX7/runtime/../lib/flashgateway.jar
|         file:/C:/CFusionMX7/runtime/../lib/flashremoting_update.jar
|         file:/C:/CFusionMX7/runtime/../lib/flex-assemblerservice.jar
|         file:/C:/CFusionMX7/runtime/../lib/flex-messaging-common.jar
|         file:/C:/CFusionMX7/runtime/../lib/flex-messaging-opt.jar
|         file:/C:/CFusionMX7/runtime/../lib/flex-messaging-req.jar
|         file:/C:/CFusionMX7/runtime/../lib/flex-messaging.jar
|         file:/C:/CFusionMX7/runtime/../lib/httpclient.jar
|         file:/C:/CFusionMX7/runtime/../lib/ib61patch.jar
|         file:/C:/CFusionMX7/runtime/../lib/ib6addonpatch.jar
|         file:/C:/CFusionMX7/runtime/../lib/ib6core.jar
|         file:/C:/CFusionMX7/runtime/../lib/ib6swing.jar
|         file:/C:/CFusionMX7/runtime/../lib/ib6util.jar
|         file:/C:/CFusionMX7/runtime/../lib/im.jar
|         file:/C:/CFusionMX7/runtime/../lib/iText.jar
|         file:/C:/CFusionMX7/runtime/../lib/iTextAsian.jar
|         file:/C:/CFusionMX7/runtime/../lib/izmado.jar
|         file:/C:/CFusionMX7/runtime/../lib/jakarta-oro-2.0.6.jar
|         file:/C:/CFusionMX7/runtime/../lib/java2wsdl.jar
|         file:/C:/CFusionMX7/runtime/../lib/jaxrpc.jar
|         file:/C:/CFusionMX7/runtime/../lib/jdom.jar
|         file:/C:/CFusionMX7/runtime/../lib/jeb.jar
|         file:/C:/CFusionMX7/runtime/../lib/jintegra.jar
|         file:/C:/CFusionMX7/runtime/../lib/ldap.jar
|         file:/C:/CFusionMX7/runtime/../lib/ldapbp.jar
|         file:/C:/CFusionMX7/runtime/../lib/log4j.jar
|         file:/C:/CFusionMX7/runtime/../lib/macromedia_drivers.jar
|         file:/C:/CFusionMX7/runtime/../lib/mail.jar
|         file:/C:/CFusionMX7/runtime/../lib/msapps.jar
|         file:/C:/CFusionMX7/runtime/../lib/pbclient42RE.jar
|         file:/C:/CFusionMX7/runtime/../lib/pbembedded42RE.jar
|         file:/C:/CFusionMX7/runtime/../lib/pbserver42RE.jar
|         file:/C:/CFusionMX7/runtime/../lib/pbtools42RE.jar
|         file:/C:/CFusionMX7/runtime/../lib/poi-2.5.1-final-20040804.jar
|         file:/C:/CFusionMX7/runtime/../lib/poi-contrib-2.5.1-final-20040804.jar
|         file:/C:/CFusionMX7/runtime/../lib/ri_generic.jar
|         file:/C:/CFusionMX7/runtime/../lib/saaj.jar
|         file:/C:/CFusionMX7/runtime/../lib/smack.jar
|         file:/C:/CFusionMX7/runtime/../lib/smpp.jar
|         file:/C:/CFusionMX7/runtime/../lib/STComm.jar
|         file:/C:/CFusionMX7/runtime/../lib/tools.jar
|         file:/C:/CFusionMX7/runtime/../lib/tt-bytecode.jar
|         file:/C:/CFusionMX7/runtime/../lib/vadmin.jar
|         file:/C:/CFusionMX7/runtime/../lib/verity.jar
|         file:/C:/CFusionMX7/runtime/../lib/vparametric.jar
|         file:/C:/CFusionMX7/runtime/../lib/vsearch.jar
|         file:/C:/CFusionMX7/runtime/../lib/wc50.jar
|         file:/C:/CFusionMX7/runtime/../lib/webchartsJava2D.jar
|         file:/C:/CFusionMX7/runtime/../lib/wsdl2java.jar
|         file:/C:/CFusionMX7/runtime/../lib/wsdl4j-1.5.1.jar
|         file:/C:/CFusionMX7/runtime/../lib/wsdl4j.jar
|         file:/C:/CFusionMX7/runtime/../lib/xalan.jar
|         file:/C:/CFusionMX7/runtime/../lib/xercesImpl.jar
|         file:/C:/CFusionMX7/runtime/../lib/xml-apis.jar
|         file:/C:/CFusionMX7/runtime/../lib/
|         file:/C:/CFusionMX7/runtime/../gateway/lib/examples.jar
|         file:/C:/CFusionMX7/runtime/../gateway/lib/
|         file:/C:/CFusionMX7/runtime/../wwwroot/WEB-INF/cfform/jars/batik-awt-util.jar
|         file:/C:/CFusionMX7/runtime/../wwwroot/WEB-INF/cfform/jars/batik-css.jar
|         file:/C:/CFusionMX7/runtime/../wwwroot/WEB-INF/cfform/jars/batik-ext.jar
|         file:/C:/CFusionMX7/runtime/../wwwroot/WEB-INF/cfform/jars/batik-transcoder.jar
|         file:/C:/CFusionMX7/runtime/../wwwroot/WEB-INF/cfform/jars/batik-util.jar
|         file:/C:/CFusionMX7/runtime/../wwwroot/WEB-INF/cfform/jars/commons-discovery.jar
|         file:/C:/CFusionMX7/runtime/../wwwroot/WEB-INF/cfform/jars/commons-logging.jar
|         file:/C:/CFusionMX7/runtime/../wwwroot/WEB-INF/cfform/jars/concurrent.jar
|         file:/C:/CFusionMX7/runtime/../wwwroot/WEB-INF/cfform/jars/flex.jar
|         file:/C:/CFusionMX7/runtime/../wwwroot/WEB-INF/cfform/jars/jakarta-oro-2.0.7.jar
|         file:/C:/CFusionMX7/runtime/../wwwroot/WEB-INF/cfform/jars/jcert.jar
|         file:/C:/CFusionMX7/runtime/../wwwroot/WEB-INF/cfform/jars/jnet.jar
|         file:/C:/CFusionMX7/runtime/../wwwroot/WEB-INF/cfform/jars/jsse.jar
|         file:/C:/CFusionMX7/runtime/../wwwroot/WEB-INF/cfform/jars/oscache.jar
|_        file:/C:/CFusionMX7/runtime/../wwwroot/WEB-INF/cfform/jars/

Requires

Author:

  • Martin Holst Swende

License: Same as Nmap--See https://nmap.org/book/man-legal.html