Nmap Development mailing list archives

Re: Status Report #8 of 15


From: Dražen Popović <drazen.popovic () fer hr>
Date: Wed, 23 Jun 2010 18:52:32 +0200

On Tue, 2010-06-22 at 21:14 -0600, David Fifield wrote:
Thanks for the detailed status report. Will you post a brief HOWTO for
those who would like to try out cli-drazen-svc.nse and DRAZEN_SVC?

David Fifield

Ok.
I keep the MIDL_BENCH testing environment in my svn directory (URL:
svn://svn.insecure.org/nmap-exp/drazen) under "var/MIDL_BENCH".
MIDL_BENCH is actually a Visual Studio 2005 solution, which contains a
few projects and one of them is DRAZEN_SVC. "cli-drazen-svc.nse" is an
NSE script made to provide testing for the "ndr.lua" and other stuff.
Both "ndr.lua" and "cli-drazen-svc" can be found in my svn directory
under "nmap-msrpc/nselib" and "nmap-msrpc/scripts", respectively.
So: 
      * Run the Visual Studio and load the MIDL_BENCH solution.
      * Within that solution find a DRAZEN_SVC named project, build it
        and run it.
      * An empty console will pop up which, once "cli-drazen-svc.nse" is
        invoked, will contain some output (usually every called RPC
        procedure simply prints out its arguments).
      * Invoke the "cli-drazen-svc.nse" with "nmap -sS -p 445
        --script="cli-drazen-svc" <host_which_runs_the_midl_bench>", and
        look at the output produced on the server side.
      * You can (un)comment the RPC function calls within
        "cli-drazen-svc.nse" as you wish. The code is pretty much self
        explanatory, when the "ndr.lua" is finished it will become much
        more documented.

For any troubleshooting don't hesitate to contact me.

Cheers,
Dražen.

-- 
Laboratory for Systems and Signals
Department of Electronic Systems and Information Processing
Faculty of Electrical Engineering and Computing
University of Zagreb
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/

Current thread: