Lucene search

K
nmapPatrik KarlssonNMAP:RTSP-METHODS.NSE
HistoryOct 26, 2011 - 9:36 p.m.

rtsp-methods NSE Script

2011-10-2621:36:37
Patrik Karlsson
nmap.org
530

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.973 High

EPSS

Percentile

99.8%

Determines which methods are supported by the RTSP (real time streaming protocol) server.

Script Arguments

rtsp-methods.path

the path to query, defaults to “*” which queries the server itself, rather than a specific url.

Example Usage

nmap -p 554 --script rtsp-methods <ip>

Script Output

PORT    STATE SERVICE
554/tcp open  rtsp
| rtsp-methods:
|_  DESCRIBE, SETUP, PLAY, TEARDOWN, OPTIONS

Requires


local rtsp = require "rtsp"
local shortport = require "shortport"
local stdnse = require "stdnse"
local stringaux = require "stringaux"

description = [[
Determines which methods are supported by the RTSP (real time streaming protocol) server.
]]

---
-- @usage
-- nmap -p 554 --script rtsp-methods <ip>
--
-- @output
-- PORT    STATE SERVICE
-- 554/tcp open  rtsp
-- | rtsp-methods:
-- |_  DESCRIBE, SETUP, PLAY, TEARDOWN, OPTIONS
--
-- @xmloutput
-- <elem>DESCRIBE</elem>
-- <elem>SETUP</elem>
-- <elem>PLAY</elem>
-- <elem>TEARDOWN</elem>
-- <elem>OPTIONS</elem>
--
-- @args rtsp-methods.path the path to query, defaults to "*" which queries
--       the server itself, rather than a specific url.
--

--
-- Version 0.1
-- Created 23/10/2011 - v0.1 - created by Patrik Karlsson <[email protected]>
--
author = "Patrik Karlsson"
license = "Same as Nmap--See https://nmap.org/book/man-legal.html"
categories = {"default", "safe"}


portrule = shortport.port_or_service(554, "rtsp", "tcp", "open")

action = function(host, port)
  local path = stdnse.get_script_args('rtsp-methods.path') or '*'
  local helper = rtsp.Helper:new(host, port)
  local status = helper:connect()
  if ( not(status) ) then
    stdnse.debug2("ERROR: Failed to connect to RTSP server")
    return
  end

  local response
  status, response = helper:options(path)
  helper:close()
  if ( status ) then
    local opts = response.headers['Public']
    return stringaux.strsplit(",%s*", opts), opts
  end
end

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.973 High

EPSS

Percentile

99.8%

Related for NMAP:RTSP-METHODS.NSE