Bug(wish) with Ncat

[דוד חי גוטויליג <gootvilig.davidhai () gmail com>]

In both the latest release version & the development (5.21 & 5.30BETA1).

When I try to use Ncat with OpenSSH client as ProxyCommand with verbose
flags for Ncat it's screw's up the connection, because NSOCK debugs to
STDOUT!!!

I believe you have a purpose behind this, so at least I wish for a deferent
flags for the verbosity of Ncat & Nsock.
Keep the good work,
Sincerely


P.S.

Also in the release version (5.21), I have encountered a problem with the
socks4 proxy when Ncat is been used inside OpenSSH client's ProxyCommand,
for some reason Ncat will not pass the incoming stream back to the ssh
client. I couldn't figure way.

Here is a sample output:

OpenSSH_5.4p1, OpenSSL 1.0.0a-fips 1 Jun 2010
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug2: ssh_connect: needpriv 0
debug1: Executing proxy command: exec ncat -v --proxy
127.0.0.1:4444--proxy-type socks4 SOMESERVER 22
.....
.....
Ncat: Version 5.21 ( http://nmap.org/ncat )
Ncat: Connected to proxy 127.0.0.1:4444
debug1: ssh_exchange_identification:

and here it's just hangs.

I also have output from the socks proxy (OpenSSH build-in socks proxy):

debug1: channel 1: new [dynamic-tcpip]
debug2: channel 1: pre_dynamic: have 0
debug2: channel 1: pre_dynamic: have 9
debug2: channel 1: decode socks4
debug2: channel 1: decode socks4: user /0
debug2: channel 1: dynamic request: socks4 host SOMESERVER_IP_ADDR port 22
command 1
debug2: channel 1: open confirm rwindow 2097152 rmax 32768

and a little of tcpdump here:

07:38:48.365993 IP localhost.localdomain.40512 >
localhost.localdomain.krb524: Flags [S], seq 4101614146, win 32792, options
[mss 16396,sackOK,TS val 17515630 ecr 0,nop,wscale 6], length 0
    0x0000:  0000 0000 0000 0000 0000 0000 0800 4500  ..............E.
    0x0010:  003c ee2c 4000 4006 4e8d 7f00 0001 7f00  .<.,@.@.N.......
    0x0020:  0001 9e40 115c f479 aa42 0000 0000 a002  ...@.\.y.B......
    0x0030:  8018 fbbb 0000 0204 400c 0402 080a 010b  ........@.......
    0x0040:  446e 0000 0000 0103 0306                 Dn........
07:38:48.366041 IP localhost.localdomain.krb524 >
localhost.localdomain.40512: Flags [S.], seq 4103214793, ack 4101614147, win
32768, options [mss 16396,sackOK,TS val 17515630 ecr 17515630,nop,wscale 6],
length 0
    0x0000:  0000 0000 0000 0000 0000 0000 0800 4500  ..............E.
    0x0010:  003c 0000 4000 4006 3cba 7f00 0001 7f00  .<..@.@.<.......
    0x0020:  0001 115c 9e40 f492 16c9 f479 aa43 a012  ...\.@.....y.C..
    0x0030:  8000 aaed 0000 0204 400c 0402 080a 010b  ........@.......
    0x0040:  446e 010b 446e 0103 0306                 Dn..Dn....
07:38:48.366090 IP localhost.localdomain.40512 >
localhost.localdomain.krb524: Flags [.], ack 1, win 513, options [nop,nop,TS
val 17515631 ecr 17515630], length 0
    0x0000:  0000 0000 0000 0000 0000 0000 0800 4500  ..............E.
    0x0010:  0034 ee2d 4000 4006 4e94 7f00 0001 7f00  .4.-@.@.N.......
    0x0020:  0001 9e40 115c f479 aa43 f492 16ca 8010  ...@.\.y.C......
    0x0030:  0201 920f 0000 0101 080a 010b 446f 010b  ............Do..
    0x0040:  446e                                     Dn
07:38:48.366942 IP localhost.localdomain.40512 >
localhost.localdomain.krb524: Flags [P.], seq 1:10, ack 1, win 513, options
[nop,nop,TS val 17515631 ecr 17515630], length 9
    0x0000:  0000 0000 0000 0000 0000 0000 0800 4500  ..............E.
    0x0010:  003d ee2e 4000 4006 4e8a 7f00 0001 7f00  .=..@.@.N.......
    0x0020:  0001 9e40 115c f479 aa43 f492 16ca 8018  ...@.\.y.C......
    0x0030:  0201 fe31 0000 0101 080a 010b 446f 010b  ...1........Do..
    0x0040:  446e 0401 0016 93a1 0119 00              Dn.........
07:38:48.366969 IP localhost.localdomain.krb524 >
localhost.localdomain.40512: Flags [.], ack 10, win 512, options [nop,nop,TS
val 17515631 ecr 17515631], length 0
    0x0000:  0000 0000 0000 0000 0000 0000 0800 4500  ..............E.
    0x0010:  0034 52a5 4000 4006 ea1c 7f00 0001 7f00  .4R.@.@.........
    0x0020:  0001 115c 9e40 f492 16ca f479 aa4c 8010  ...\.@.....y.L..
    0x0030:  0200 9206 0000 0101 080a 010b 446f 010b  ............Do..
    0x0040:  446f                                     Do
07:38:48.370856 IP localhost.localdomain.krb524 >
localhost.localdomain.40512: Flags [P.], seq 1:9, ack 10, win 512, options
[nop,nop,TS val 17515635 ecr 17515631], length 8
    0x0000:  0000 0000 0000 0000 0000 0000 0800 4500  ..............E.
    0x0010:  003c 52a6 4000 4006 ea13 7f00 0001 7f00  .<R.@.@.........
    0x0020:  0001 115c 9e40 f492 16ca f479 aa4c 8018  ...\.@.....y.L..
    0x0030:  0200 fe30 0000 0101 080a 010b 4473 010b  ...0........Ds..
    0x0040:  446f 005a 0000 0000 0000                 Do.Z......
07:38:48.371032 IP localhost.localdomain.40512 >
localhost.localdomain.krb524: Flags [.], ack 9, win 513, options [nop,nop,TS
val 17515635 ecr 17515635], length 0
    0x0000:  0000 0000 0000 0000 0000 0000 0800 4500  ..............E.
    0x0010:  0034 ee2f 4000 4006 4e92 7f00 0001 7f00  .4./@.@.N.......
    0x0020:  0001 9e40 115c f479 aa4c f492 16d2 8010  ...@.\.y.L......
    0x0030:  0201 91f5 0000 0101 080a 010b 4473 010b  ............Ds..
    0x0040:  4473                                     Ds
07:38:48.373166 IP localhost.localdomain.krb524 >
localhost.localdomain.40512: Flags [P.], seq 9:34, ack 10, win 512, options
[nop,nop,TS val 17515638 ecr 17515635], length 25
    0x0000:  0000 0000 0000 0000 0000 0000 0800 4500  ..............E.
    0x0010:  004d 52a7 4000 4006 ea01 7f00 0001 7f00  .MR.@.@.........
    0x0020:  0001 115c 9e40 f492 16d2 f479 aa4c 8018  ...\.@.....y.L..
    0x0030:  0200 fe41 0000 0101 080a 010b 4476 010b  ...A........Dv..
    0x0040:  4473 5353 482d 312e 3939 2d4f 7065 6e53  DsSSH-1.99-OpenS
    0x0050:  5348 5f33 2e36 2e31 7032 0a              SH_3.6.1p2.
07:38:48.373187 IP localhost.localdomain.40512 >
localhost.localdomain.krb524: Flags [.], ack 34, win 513, options
[nop,nop,TS val 17515638 ecr 17515638], length 0
    0x0000:  0000 0000 0000 0000 0000 0000 0800 4500  ..............E.
    0x0010:  0034 ee30 4000 4006 4e91 7f00 0001 7f00  .4.0@.@.N.......
    0x0020:  0001 9e40 115c f479 aa4c f492 16eb 8010  ...@.\.y.L......
    0x0030:  0201 91d6 0000 0101 080a 010b 4476 010b  ............Dv..
    0x0040:  4476                                     Dv


--dhg
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/