Script `xmpp-info`

Script types: portrule
Categories: default, safe, discovery, version
Download: https://svn.nmap.org/nmap/scripts/xmpp-info.nse

Script Summary

Connects to XMPP server (port 5222) and collects server information such as: supported auth mechanisms, compression methods, whether TLS is supported and mandatory, stream management, language, support of In-Band registration, server capabilities. If possible, studies server vendor.

Script Arguments

xmpp-info.alt_server_name: If set, overwrites alternative hello name sent to the server. This name should differ from the real DNS name. It is used to find out whether the server refuses to talk if a wrong name is used. Default is ".".
xmpp-info.no_starttls: If set, disables TLS processing.
xmpp-info.server_name: If set, overwrites hello name sent to the server. It can be necessary if XMPP server's name differs from DNS name.
smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername: See the documentation for the smbauth library.

Example Usage

nmap -sV <target>

Script Output

PORT     STATE SERVICE REASON  VERSION
5222/tcp open  jabber  syn-ack ejabberd (Protocol 1.0)
| xmpp-info:
|   Respects server name
|   info:
|     xmpp:
|       lang: en
|       version: 1.0
|     capabilities:
|       node: http://www.process-one.net/en/ejabberd/
|       ver: TQ2JFyRoSa70h2G1bpgjzuXb2sU=
|     features:
|       In-Band Registration
|     auth_mechanisms:
|       DIGEST-MD5
|       SCRAM-SHA-1
|       PLAIN
|   pre_tls:
|     features:
|_      TLS

Requires

Author:

Vasiliy Kulikov