asn-to-prefix.nse

description = [[
Produces a list of prefixes for a given ASN.

This script uses a whois server database operated by the Shadowserver
Foundation.  We thank them for granting us permission to use this in
Nmap.

Output is in CIDR notation. If the <code>newtargets</code> script
argument is given, all discovered prefixes will be added to the Nmap
target list for scanning.

http://www.shadowserver.org/wiki/pmwiki.php/Services/IP-BGP
]]

---
-- @args asn-to-prefix.asn The ASN to search.
-- @args asn-to-prefix.whois_server The whois server to use. Default: asn.shadowserver.org.
-- @args asn-to-prefix.whois_port The whois port to use. Default: 43.
-- @args newtargets Add discovered targets to Nmap scan queue.
--
-- @usage
-- nmap --script asn-to-prefix --script-args asn-to-prefix.asn=32
--
-- @output
-- 53/udp open  domain  udp-response
-- | asn-to-prefix:
-- |   32
-- |     128.12.0.0/16
-- |_    171.64.0.0/14

author = "John Bond"
license = "Simplified (2-clause) BSD license--See http://nmap.org/svn/docs/licenses/BSD-simplified"

categories = {"discovery", "external", "safe"}

require "stdnse"
require "shortport"
require "target"

prerule = function()
	return true
end

action = function(host, port)
	local asns, whois_server, whois_port, err, status
	local results = {}

	asns = stdnse.get_script_args('asn-to-prefix.asn')
	whois_server = stdnse.get_script_args('asn-to-prefix.whois_server')
	whois_port = stdnse.get_script_args('asn-to-prefix.whois_port')
	newtargets = stdnse.get_script_args('asn-to-prefix.newtargets')

	if not asns then
		return stdnse.format_output(true, "asn-to-prefix.asn is a mandatory parameter")
	end
	if not whois_server then
		whois_server = "asn.shadowserver.org"
	end
	if not whois_port then
		whois_port = 43
	end
	if type(asns) ~= "table" then
		asns = {asns}
	end

	for _, asn in ipairs(asns) do
		local socket = nmap.new_socket()

		local prefixes = {}
		prefixes['name'] = asn

		status, err = socket:connect(whois_server, whois_port)
		if ( not(status) ) then
			table.insert(prefixes, err)
		else
			status, err = socket:send("prefix " .. asn .. "\n")
			if ( not(status) ) then
				table.insert(prefixes, err)
			else
				while true do
					local status, data = socket:receive_lines(1)
					if ( not(status) ) then
						table.insert(prefixes, err)
						break
					else
						for i, prefix in ipairs(stdnse.strsplit("\n",data)) do
							if ( #prefix > 1 ) then
								table.insert(prefixes,prefix)
								if target.ALLOW_NEW_TARGETS then
									stdnse.print_debug("Added targets: "..prefix)
									local status,err = target.add(prefix)
								end
							end
						end
					end
				end
			end
		end
		table.insert(results,prefixes)
	end
	return stdnse.format_output(true, results)
end