whickey-r7 / grab_beacon_config Goto Github PK

May I ask what do the Hash values in the result output mean?

Is this a bug or I use it wrong? Please check it out, thanks a lot!

Hi!

I'm running into issue running the script, please see debug info below:

Starting Nmap 6.40 ( http://nmap.org ) at 2021-02-24 12:44 PST
PORTS: Using top 1000 ports found open (TCP:1000, UDP:0, SCTP:0)
--------------- Timing report ---------------
  hostgroups: min 1, max 100000
  rtt-timeouts: init 1000, min 100, max 10000
  max-scan-delay: TCP 1000, UDP 1000, SCTP 1000
  parallelism: min 0, max 0
  max-retries: 10, host-timeout: 0
  min-rate: 0, max-rate: 0
---------------------------------------------
NSE: Using Lua 5.2.
NSE: Script Arguments seen from CLI: 
NSE: failed to initialize the script engine:
/usr/bin/../share/nmap/nse_main.lua:235: grab_beacon_config.nse:131: unexpected symbol near '~'
stack traceback:
	[C]: in function 'assert'
	/usr/bin/../share/nmap/nse_main.lua:235: in function 'loadscript'
	/usr/bin/../share/nmap/nse_main.lua:529: in function 'new'
	/usr/bin/../share/nmap/nse_main.lua:783: in function 'get_chosen_scripts'
	/usr/bin/../share/nmap/nse_main.lua:1271: in main chunk
	[C]: in ?

QUITTING!

Starting Nmap 7.93 ( https://nmap.org ) at 2023-05-29 14:26 CEST
NSE: Loaded 1 scripts for scanning.
NSE: Script Pre-scanning.
NSE: Starting runlevel 1 (of 1) scan.
Initiating NSE at 14:26
Completed NSE at 14:26, 0.00s elapsed
Warning: Hostname google.com resolves to 5 IPs. Using 142.250.179.142.
Initiating Ping Scan at 14:26
Scanning google.com (142.250.179.142) [4 ports]
Completed Ping Scan at 14:26, 0.10s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 14:26
Completed Parallel DNS resolution of 1 host. at 14:26, 0.06s elapsed
DNS resolution of 1 IPs took 0.06s. Mode: Async [#: 1, OK: 1, NX: 0, DR: 0, SF: 0, TR: 1, CN: 0]
Initiating SYN Stealth Scan at 14:26
Scanning google.com (142.250.179.142) [1000 ports]
Discovered open port 443/tcp on 142.250.179.142
Discovered open port 80/tcp on 142.250.179.142
Completed SYN Stealth Scan at 14:26, 5.16s elapsed (1000 total ports)
NSE: Script scanning 142.250.179.142.
NSE: Starting runlevel 1 (of 1) scan.
Initiating NSE at 14:26
Completed NSE at 14:26, 0.71s elapsed
Nmap scan report for google.com (142.250.179.142)
Host is up, received echo-reply ttl 117 (0.050s latency).
Other addresses for google.com (not scanned): 2607:f8b0:4004:c08::64 2607:f8b0:4004:c08::71 2607:f8b0:4004:c08::8a 2607:f8b0:4004:c08::65
rDNS record for 142.250.179.142: ams17s10-in-f14.1e100.net
Scanned at 2023-05-29 14:26:35 CEST for 6s
Not shown: 998 filtered tcp ports (no-response)
PORT STATE SERVICE REASON
80/tcp open http syn-ack ttl 122
|_grab_beacon_config: {"x86": {"uri_queried": "/VSfM", "time": 1685363201257.1, "config": {}, "md5": "b830c9d30c4ceb6fe1d29dad768773fd", "sha1": "702df8a379f84d9d0481f693dd8269a3ad2dea57", "sha256": "7185a3385c6c9f37913891ce06dd76aeb08d688a48af6ec762c46b58029d117a"}, "x64": {"uri_queried": "/efBP", "time": 1685363201479.1, "config": {}, "md5": "caf87cb2771973c8330528a997632e4c", "sha1": "cfd71be4ce72c238349e7762127a64e3941d1dcb", "sha256": "5a01d6c567a2c776649e7914986fd126be436f0e33cd10054975b5d67d1db48a"}}
443/tcp open https syn-ack ttl 122
|_grab_beacon_config: {"x86": {"uri_queried": "/nQ8e", "time": 1685363201105.1, "config": {}, "md5": "0a490bcb15b179d6c9f57eaffdcc29fb", "sha1": "5e79eef57618bfcd10cc16abb9b0470a03a2c890", "sha256": "beb0f6bd2607a5f520ac8afd666046442e601fccc3da03835093dfc199fee1df"}, "x64": {"uri_queried": "/wa2S", "time": 1685363201479.3, "config": {}, "md5": "bb102f3281e23ff7649d82939f9b5388", "sha1": "2b2d4d43f62c48c3fef042e6f8d65f630b6e1328", "sha256": "b4c250c3040c92e01731caaeb9846c279db6116b7647b80de97d9e12552f9c26"}}

NSE: Script Post-scanning.
NSE: Starting runlevel 1 (of 1) scan.
Initiating NSE at 14:26
Completed NSE at 14:26, 0.00s elapsed
Read data files from: /usr/bin/../share/nmap
Nmap done: 1 IP address (1 host up) scanned in 6.32 seconds
Raw packets sent: 2005 (88.196KB) | Rcvd: 11 (1.093KB)