Tool request: NSAT (network security analysis tool)

[williamc]

I've been using this tool for pentesting. It comes in handy for scanning X Windows, R Services, SNMP, and other uncommon services. It can be found here:
http://nsat.sourceforge.net/

It can be loaded with configuration files to target specific services. I've uploaded some .conf files that I use. This, along with gping would be nice additions! Thoughts?

[RageLtMan]

I can't seem to get it installed, i ran ./configure in the nsat dir, it went fine. However, make, or make install both produce this:

compiling ADM smb scanner... In file included from ./client.c:73:
./ADMsmb.c: In function 'ADMsmb':
./ADMsmb.c:126: error: invalid lvalue in unary '&'
make[2]: *** [client.o] Error 1
make[2]: Leaving directory `/root/dl/nsat/src/smb'
make[1]: *** [../smb-ns] Error 2
make[1]: Leaving directory `/root/dl/nsat/src'
make: *** [all] Error 2

i checked line 126 of ADMsmb.c and this is what it is:

if (recvfrom (socket_client, buffer2, sizeof (buffer2), 0, (struct sockaddr *) &sin_dst, &(int) longueur) != -1)

is sin_dst the lvalue it speaks of?

[williamc]

I didn't have this issue when I installed it. I got a new laptop a few days ago so I'll try it again on Friday. I'll see if I can find a solution.

[williamc]

It worked under BT2, but I'm getting the same error as you in BT3. I used the ignore option to complete the make.

*** Ok, we got the source recompiled and it installed. I can't upload it here as its larger than the maximum filesize for uploads. If you know where I can get it hosted, let me know.

Williamc

[RageLtMan]

How did you get it compiled and installed?

[williamc]

We went through the code and fixed it. I have it hosted here:
http://rapidshare.com/files/98757108...fixed.gtz.html

Syntax:
./configure
make
make install

Use the .conf files from my first post.

nsat -C nsat_X.conf -n -f iplist.txt

William

[williamc]

diff -Naur nsat.old/src/smb/ADMsmb.c nsat/src/smb/ADMsmb.c

--- nsat.old/src/smb/ADMsmb.c

+++ nsat/src/smb/ADMsmb.c

@@ -123,7 +123,7 @@

{

usleep (100000);

- if (recvfrom (socket_client, buffer2, sizeof (buffer2), 0,
(struct sockaddr *) &sin_dst, &(int) longueur) != -1)

+ if (recvfrom (socket_client, buffer2, sizeof (buffer2), 0,
(struct sockaddr *) &sin_dst, (int *) &longueur) != -1)

{

if (nmb2->rep_num != 0)

[williamc]

I just did a reinstall on a new machine and found it was missing a dependency. You can find the libpcap.so.0.8 here:

http://fedora.osmirror.nl/core/3/x86...8.3-7.i386.rpm

rpm2tgz
gzip -d
tar vxf
extract to /usr/lib
run NSAT!

William

[imported_wyze]

I get this error when untarring:

nsat_1.5_fixed/src/mod/bo.o
tar: Unexpected EOF in archive
tar: Unexpected EOF in archive

[williamc]

Hmm, never seen that one. Are you using BT2 or 3? What arguments did you give Tar? I used gzip -d then did tar vxf. Try that and let me know.

William