Re: http-slowloris-check doesn't work on nmap 7.12

Omar Arturo Orozco <[email protected]>
Newsgroups gmane.comp.security.nmap.devel
Message-ID <CAH=y8e6W5cqaVHgcRc7vD+qecH0abqb8BRxyyoazwZbbii716w@mail.gmail.com> 
Hi Tom.
I have checked it with nmap 7.40 and I got the same result.

Regards.

On Thu, Mar 23, 2017 at 2:59 PM, Tom Sellers <[email protected]> wrote:

> On 3/23/2017 10:47 AM, Omar Arturo Orozco wrote:
> > Hello.
> > I was running some tests to check the slowloris vulnerablity.
> > With nmap 6.40 the script works very well, with nmap 7.12 doesn't work.
> > I'm  attaching the debug log.
> >
> > Regards
> >
> > --
> > ISEC Omar Arturo Orozco
> > LPIC2 - CEH - ECSA - LPT - CHFI
> >
>
> Hello Omar,
>
> That error appears to be related to SSL.  There have been quite a few SSL
> improvements since 7.12 was released.
>
> Would it be possible for you to check with Nmap 7.40?
>
>
> Thank you,
> Tom
>
>


-- 
ISEC Omar Arturo Orozco
LPIC2 - CEH - ECSA - LPT - CHFI

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/
http-slowloris-check_nmap7.40.txt (text/plain, 14.2 KB) 
Starting Nmap 7.40 ( https://nmap.org ) at 2017-03-23 15:33 CST
Fetchfile found /usr/local/bin/../share/nmap/nmap-services
Fetchfile found /usr/local/bin/../share/nmap/nmap.xsl
The max # of sockets we are using is: 0
--------------- Timing report ---------------
  hostgroups: min 1, max 100000
  rtt-timeouts: init 1000, min 100, max 10000
  max-scan-delay: TCP 1000, UDP 1000, SCTP 1000
  parallelism: min 0, max 0
  max-retries: 10, host-timeout: 0
  min-rate: 0, max-rate: 0
---------------------------------------------
NSE: Using Lua 5.3.
Fetchfile found /usr/local/bin/../share/nmap/nse_main.lua
Fetchfile found /usr/local/bin/../share/nmap/nselib/lpeg-utility.lua
Fetchfile found /usr/local/bin/../share/nmap/nselib/stdnse.lua
Fetchfile found /usr/local/bin/../share/nmap/nselib/strict.lua
Fetchfile found /usr/local/bin/../share/nmap/scripts/script.db
NSE: Arguments from CLI: 
Fetchfile found /usr/local/bin/../share/nmap/scripts/allseeingeye-info.nse
NSE: Script allseeingeye-info.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/nselib/comm.lua
Fetchfile found /usr/local/bin/../share/nmap/nselib/shortport.lua
Fetchfile found /usr/local/bin/../share/nmap/nselib/unittest.lua
Fetchfile found /usr/local/bin/../share/nmap/nselib/nsedebug.lua
Fetchfile found /usr/local/bin/../share/nmap/nselib/listop.lua
Fetchfile found /usr/local/bin/../share/nmap/nselib/bin.lua
Fetchfile found /usr/local/bin/../share/nmap/nselib/bit.lua
Fetchfile found /usr/local/bin/../share/nmap/scripts/amqp-info.nse
NSE: Script amqp-info.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/nselib/amqp.lua
Fetchfile found /usr/local/bin/../share/nmap/nselib/match.lua
Fetchfile found /usr/local/bin/../share/nmap/scripts/bacnet-info.nse
NSE: Script bacnet-info.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/nselib/unicode.lua
Fetchfile found /usr/local/bin/../share/nmap/scripts/cccam-version.nse
NSE: Script cccam-version.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/nselib/formulas.lua
Fetchfile found /usr/local/bin/../share/nmap/scripts/db2-das-info.nse
NSE: Script db2-das-info.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/docker-version.nse
NSE: Script docker-version.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/nselib/json.lua
Fetchfile found /usr/local/bin/../share/nmap/nselib/http.lua
Fetchfile found /usr/local/bin/../share/nmap/nselib/base64.lua
Fetchfile found /usr/local/bin/../share/nmap/nselib/sasl.lua
Fetchfile found /usr/local/bin/../share/nmap/nselib/smbauth.lua
Fetchfile found /usr/local/bin/../share/nmap/nselib/slaxml.lua
Fetchfile found /usr/local/bin/../share/nmap/nselib/url.lua
Fetchfile found /usr/local/bin/../share/nmap/scripts/drda-info.nse
NSE: Script drda-info.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/nselib/drda.lua
Fetchfile found /usr/local/bin/../share/nmap/scripts/enip-info.nse
NSE: Script enip-info.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/nselib/ipOps.lua
Fetchfile found /usr/local/bin/../share/nmap/scripts/fingerprint-strings.nse
NSE: Script fingerprint-strings.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/fox-info.nse
NSE: Script fox-info.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/freelancer-info.nse
NSE: Script freelancer-info.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/http-server-header.nse
NSE: Script http-server-header.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/http-slowloris-check.nse
NSE: Script http-slowloris-check.nse was selected by name.
Fetchfile found /usr/local/bin/../share/nmap/nselib/vulns.lua
Fetchfile found /usr/local/bin/../share/nmap/scripts/iax2-version.nse
NSE: Script iax2-version.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/ike-version.nse
NSE: Script ike-version.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/nselib/ike.lua
Fetchfile found /usr/local/bin/../share/nmap/scripts/jdwp-version.nse
NSE: Script jdwp-version.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/maxdb-info.nse
NSE: Script maxdb-info.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/nselib/tab.lua
Fetchfile found /usr/local/bin/../share/nmap/nselib/strbuf.lua
Fetchfile found /usr/local/bin/../share/nmap/scripts/mcafee-epo-agent.nse
NSE: Script mcafee-epo-agent.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/mqtt-subscribe.nse
NSE: Script mqtt-subscribe.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/nselib/mqtt.lua
Fetchfile found /usr/local/bin/../share/nmap/scripts/murmur-version.nse
NSE: Script murmur-version.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/ndmp-version.nse
NSE: Script ndmp-version.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/nselib/ndmp.lua
Fetchfile found /usr/local/bin/../share/nmap/scripts/netbus-version.nse
NSE: Script netbus-version.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/omron-info.nse
NSE: Script omron-info.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/openlookup-info.nse
NSE: Script openlookup-info.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/oracle-tns-version.nse
NSE: Script oracle-tns-version.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/ovs-agent-version.nse
NSE: Script ovs-agent-version.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/pptp-version.nse
NSE: Script pptp-version.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/quake1-info.nse
NSE: Script quake1-info.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/quake3-info.nse
NSE: Script quake3-info.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/rfc868-time.nse
NSE: Script rfc868-time.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/nselib/datetime.lua
Fetchfile found /usr/local/bin/../share/nmap/scripts/rpc-grind.nse
NSE: Script rpc-grind.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/nselib/rpc.lua
Fetchfile found /usr/local/bin/../share/nmap/nselib/datafiles.lua
Fetchfile found /usr/local/bin/../share/nmap/scripts/rpcinfo.nse
NSE: Script rpcinfo.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/s7-info.nse
NSE: Script s7-info.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/skypev2-version.nse
NSE: Script skypev2-version.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/snmp-info.nse
NSE: Script snmp-info.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/nselib/snmp.lua
Fetchfile found /usr/local/bin/../share/nmap/nselib/asn1.lua
Fetchfile found /usr/local/bin/../share/nmap/nselib/creds.lua
Fetchfile found /usr/local/bin/../share/nmap/scripts/stun-version.nse
NSE: Script stun-version.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/nselib/stun.lua
Fetchfile found /usr/local/bin/../share/nmap/scripts/teamspeak2-version.nse
NSE: Script teamspeak2-version.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/ventrilo-info.nse
NSE: Script ventrilo-info.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/wdb-version.nse
NSE: Script wdb-version.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/weblogic-t3-info.nse
NSE: Script weblogic-t3-info.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/scripts/xmpp-info.nse
NSE: Script xmpp-info.nse was selected by category.
Fetchfile found /usr/local/bin/../share/nmap/nselib/xmpp.lua
NSE: Loaded 41 scripts for scanning.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/allseeingeye-info.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/amqp-info.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/bacnet-info.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/cccam-version.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/db2-das-info.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/docker-version.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/drda-info.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/enip-info.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/fingerprint-strings.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/fox-info.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/freelancer-info.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/http-server-header.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/http-slowloris-check.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/iax2-version.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/ike-version.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/jdwp-version.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/maxdb-info.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/mcafee-epo-agent.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/mqtt-subscribe.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/murmur-version.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/ndmp-version.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/netbus-version.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/omron-info.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/openlookup-info.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/oracle-tns-version.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/ovs-agent-version.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/pptp-version.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/quake1-info.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/quake3-info.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/rfc868-time.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/rpc-grind.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/rpcinfo.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/s7-info.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/skypev2-version.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/snmp-info.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/stun-version.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/teamspeak2-version.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/ventrilo-info.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/wdb-version.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/weblogic-t3-info.nse'.
NSE: Loaded '/usr/local/bin/../share/nmap/scripts/xmpp-info.nse'.
NSE: Script Pre-scanning.
NSE: Starting runlevel 1 (of 2) scan.
Initiating NSE at 15:33
Completed NSE at 15:33, 0.00s elapsed
NSE: Starting runlevel 2 (of 2) scan.
Initiating NSE at 15:33
Completed NSE at 15:33, 0.00s elapsed
Fetchfile found /usr/local/bin/../share/nmap/nmap-payloads
Initiating Ping Scan at 15:33
Scanning 200.78.239.120 [2 ports]
ultrascan_host_probe_update called for machine 200.78.239.120 state UNKNOWN -> HOST_UP (trynum 0 time: 287)
Changing ping technique for 200.78.239.120 to connect to port 80
Changing global ping host to 200.78.239.120.
Completed Ping Scan at 15:33, 0.00s elapsed (1 total hosts)
Overall sending rates: 5390.84 packets / s.
mass_rdns: Using DNS server 172.26.0.204
mass_rdns: Using DNS server 8.8.8.8
Initiating Parallel DNS resolution of 1 host. at 15:33
mass_rdns: 0.06s 0/1 [#: 2, OK: 0, NX: 0, DR: 0, SF: 0, TR: 1]
Completed Parallel DNS resolution of 1 host. at 15:33, 0.06s elapsed
DNS resolution of 1 IPs took 0.06s. Mode: Async [#: 2, OK: 1, NX: 0, DR: 0, SF: 0, TR: 1, CN: 0]
Initiating Connect Scan at 15:33
Scanning na-200-78-239-120.static.avantel.net.mx (200.78.239.120) [1 port]
Discovered open port 80/tcp on 200.78.239.120
Changing global ping host to 200.78.239.120.
Completed Connect Scan at 15:33, 0.00s elapsed (1 total ports)
Overall sending rates: 1517.45 packets / s.
Fetchfile found /usr/local/bin/../share/nmap/nmap-service-probes
Initiating Service scan at 15:33
Scanning 1 service on na-200-78-239-120.static.avantel.net.mx (200.78.239.120)
Starting probes against new service: 200.78.239.120:80 (tcp)
Service scan sending probe NULL to 200.78.239.120:80 (tcp)
Service scan sending probe GetRequest to 200.78.239.120:80 (tcp)
Service scan match (Probe GetRequest matched with GetRequest line 6615): 200.78.239.120:80 is http.  Version: |Microsoft IIS httpd|6.0||
Completed Service scan at 15:33, 6.42s elapsed (1 service on 1 host)
NSE: Script scanning 200.78.239.120.
NSE: Starting runlevel 1 (of 2) scan.
Initiating NSE at 15:33
NSE: Starting http-slowloris-check M:7f9f51773a08 against 200.78.239.120:80.
NSE: Starting http-server-header M:7f9f51775328 against 200.78.239.120:80.
NSE: [http-slowloris-check M:7f9f51773a08 200.78.239.120:80] Error determining SSL: ERROR
NSE: Finished http-slowloris-check M:7f9f51773a08 against 200.78.239.120:80.
NSE: Finished http-server-header M:7f9f51775328 against 200.78.239.120:80.
Completed NSE at 15:33, 0.50s elapsed
NSE: Starting runlevel 2 (of 2) scan.
Initiating NSE at 15:33
Completed NSE at 15:33, 0.00s elapsed
Nmap scan report for na-200-78-239-120.static.avantel.net.mx (200.78.239.120)
Host is up, received syn-ack (0.00029s latency).
Scanned at 2017-03-23 15:33:03 CST for 7s
PORT   STATE SERVICE REASON  VERSION
80/tcp open  http    syn-ack Microsoft IIS httpd 6.0
|_http-server-header: Microsoft-IIS/6.0
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
Final times for host: srtt: 294 rttvar: 3791  to: 100000

NSE: Script Post-scanning.
NSE: Starting runlevel 1 (of 2) scan.
Initiating NSE at 15:33
Completed NSE at 15:33, 0.00s elapsed
NSE: Starting runlevel 2 (of 2) scan.
Initiating NSE at 15:33
Completed NSE at 15:33, 0.00s elapsed
Read from /usr/local/bin/../share/nmap: nmap-payloads nmap-service-probes nmap-services.
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 7.39 seconds
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.