diff options
Diffstat (limited to 'src/usr.bin/nc/netcat.c')
-rw-r--r-- | src/usr.bin/nc/netcat.c | 786 |
1 files changed, 786 insertions, 0 deletions
diff --git a/src/usr.bin/nc/netcat.c b/src/usr.bin/nc/netcat.c new file mode 100644 index 0000000000..ee151972e8 --- /dev/null +++ b/src/usr.bin/nc/netcat.c | |||
@@ -0,0 +1,786 @@ | |||
1 | /* $OpenBSD: netcat.c,v 1.72 2004/03/12 10:10:00 jmc Exp $ */ | ||
2 | /* | ||
3 | * Copyright (c) 2001 Eric Jackson <ericj@monkey.org> | ||
4 | * | ||
5 | * Redistribution and use in source and binary forms, with or without | ||
6 | * modification, are permitted provided that the following conditions | ||
7 | * are met: | ||
8 | * | ||
9 | * 1. Redistributions of source code must retain the above copyright | ||
10 | * notice, this list of conditions and the following disclaimer. | ||
11 | * 2. Redistributions in binary form must reproduce the above copyright | ||
12 | * notice, this list of conditions and the following disclaimer in the | ||
13 | * documentation and/or other materials provided with the distribution. | ||
14 | * 3. The name of the author may not be used to endorse or promote products | ||
15 | * derived from this software without specific prior written permission. | ||
16 | * | ||
17 | * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR | ||
18 | * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES | ||
19 | * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. | ||
20 | * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, | ||
21 | * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT | ||
22 | * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, | ||
23 | * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY | ||
24 | * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT | ||
25 | * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF | ||
26 | * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | ||
27 | */ | ||
28 | |||
29 | /* | ||
30 | * Re-written nc(1) for OpenBSD. Original implementation by | ||
31 | * *Hobbit* <hobbit@avian.org>. | ||
32 | */ | ||
33 | |||
34 | #include <sys/types.h> | ||
35 | #include <sys/socket.h> | ||
36 | #include <sys/time.h> | ||
37 | #include <sys/un.h> | ||
38 | |||
39 | #include <netinet/in.h> | ||
40 | #include <netinet/tcp.h> | ||
41 | #include <arpa/telnet.h> | ||
42 | |||
43 | #include <err.h> | ||
44 | #include <errno.h> | ||
45 | #include <netdb.h> | ||
46 | #include <poll.h> | ||
47 | #include <stdarg.h> | ||
48 | #include <stdio.h> | ||
49 | #include <stdlib.h> | ||
50 | #include <string.h> | ||
51 | #include <unistd.h> | ||
52 | #include <fcntl.h> | ||
53 | |||
54 | #ifndef SUN_LEN | ||
55 | #define SUN_LEN(su) \ | ||
56 | (sizeof(*(su)) - sizeof((su)->sun_path) + strlen((su)->sun_path)) | ||
57 | #endif | ||
58 | |||
59 | #define PORT_MAX 65535 | ||
60 | #define PORT_MAX_LEN 6 | ||
61 | |||
62 | /* Command Line Options */ | ||
63 | int dflag; /* detached, no stdin */ | ||
64 | int iflag; /* Interval Flag */ | ||
65 | int kflag; /* More than one connect */ | ||
66 | int lflag; /* Bind to local port */ | ||
67 | int nflag; /* Don't do name look up */ | ||
68 | char *pflag; /* Localport flag */ | ||
69 | int rflag; /* Random ports flag */ | ||
70 | char *sflag; /* Source Address */ | ||
71 | int tflag; /* Telnet Emulation */ | ||
72 | int uflag; /* UDP - Default to TCP */ | ||
73 | int vflag; /* Verbosity */ | ||
74 | int xflag; /* Socks proxy */ | ||
75 | int zflag; /* Port Scan Flag */ | ||
76 | int Sflag; /* TCP MD5 signature option */ | ||
77 | |||
78 | int timeout = -1; | ||
79 | int family = AF_UNSPEC; | ||
80 | char *portlist[PORT_MAX+1]; | ||
81 | |||
82 | ssize_t atomicio(ssize_t (*)(int, void *, size_t), int, void *, size_t); | ||
83 | void atelnet(int, unsigned char *, unsigned int); | ||
84 | void build_ports(char *); | ||
85 | void help(void); | ||
86 | int local_listen(char *, char *, struct addrinfo); | ||
87 | void readwrite(int); | ||
88 | int remote_connect(char *, char *, struct addrinfo); | ||
89 | int socks_connect(char *, char *, struct addrinfo, char *, char *, | ||
90 | struct addrinfo, int); | ||
91 | int udptest(int); | ||
92 | int unix_connect(char *); | ||
93 | int unix_listen(char *); | ||
94 | void usage(int); | ||
95 | |||
96 | int | ||
97 | main(int argc, char *argv[]) | ||
98 | { | ||
99 | int ch, s, ret, socksv; | ||
100 | char *host, *uport, *endp; | ||
101 | struct addrinfo hints; | ||
102 | struct servent *sv; | ||
103 | socklen_t len; | ||
104 | struct sockaddr *cliaddr; | ||
105 | char *proxy; | ||
106 | char *proxyhost = "", *proxyport = NULL; | ||
107 | struct addrinfo proxyhints; | ||
108 | |||
109 | ret = 1; | ||
110 | s = 0; | ||
111 | socksv = 5; | ||
112 | host = NULL; | ||
113 | uport = NULL; | ||
114 | endp = NULL; | ||
115 | sv = NULL; | ||
116 | |||
117 | while ((ch = getopt(argc, argv, "46UX:dhi:klnp:rs:tuvw:x:zS")) != -1) { | ||
118 | switch (ch) { | ||
119 | case '4': | ||
120 | family = AF_INET; | ||
121 | break; | ||
122 | case '6': | ||
123 | family = AF_INET6; | ||
124 | break; | ||
125 | case 'U': | ||
126 | family = AF_UNIX; | ||
127 | break; | ||
128 | case 'X': | ||
129 | socksv = (int)strtoul(optarg, &endp, 10); | ||
130 | if ((socksv != 4 && socksv != 5) || *endp != '\0') | ||
131 | errx(1, "only SOCKS version 4 and 5 supported"); | ||
132 | break; | ||
133 | case 'd': | ||
134 | dflag = 1; | ||
135 | break; | ||
136 | case 'h': | ||
137 | help(); | ||
138 | break; | ||
139 | case 'i': | ||
140 | iflag = (int)strtoul(optarg, &endp, 10); | ||
141 | if (iflag < 0 || *endp != '\0') | ||
142 | errx(1, "interval cannot be negative"); | ||
143 | break; | ||
144 | case 'k': | ||
145 | kflag = 1; | ||
146 | break; | ||
147 | case 'l': | ||
148 | lflag = 1; | ||
149 | break; | ||
150 | case 'n': | ||
151 | nflag = 1; | ||
152 | break; | ||
153 | case 'p': | ||
154 | pflag = optarg; | ||
155 | break; | ||
156 | case 'r': | ||
157 | rflag = 1; | ||
158 | break; | ||
159 | case 's': | ||
160 | sflag = optarg; | ||
161 | break; | ||
162 | case 't': | ||
163 | tflag = 1; | ||
164 | break; | ||
165 | case 'u': | ||
166 | uflag = 1; | ||
167 | break; | ||
168 | case 'v': | ||
169 | vflag = 1; | ||
170 | break; | ||
171 | case 'w': | ||
172 | timeout = (int)strtoul(optarg, &endp, 10); | ||
173 | if (timeout < 0 || *endp != '\0') | ||
174 | errx(1, "timeout cannot be negative"); | ||
175 | if (timeout >= (INT_MAX / 1000)) | ||
176 | errx(1, "timeout too large"); | ||
177 | timeout *= 1000; | ||
178 | break; | ||
179 | case 'x': | ||
180 | xflag = 1; | ||
181 | if ((proxy = strdup(optarg)) == NULL) | ||
182 | err(1, NULL); | ||
183 | break; | ||
184 | case 'z': | ||
185 | zflag = 1; | ||
186 | break; | ||
187 | case 'S': | ||
188 | Sflag = 1; | ||
189 | break; | ||
190 | default: | ||
191 | usage(1); | ||
192 | } | ||
193 | } | ||
194 | argc -= optind; | ||
195 | argv += optind; | ||
196 | |||
197 | /* Cruft to make sure options are clean, and used properly. */ | ||
198 | if (argv[0] && !argv[1] && family == AF_UNIX) { | ||
199 | if (uflag) | ||
200 | errx(1, "cannot use -u and -U"); | ||
201 | host = argv[0]; | ||
202 | uport = NULL; | ||
203 | } else if (argv[0] && !argv[1]) { | ||
204 | if (!lflag) | ||
205 | usage(1); | ||
206 | uport = argv[0]; | ||
207 | host = NULL; | ||
208 | } else if (argv[0] && argv[1]) { | ||
209 | host = argv[0]; | ||
210 | uport = argv[1]; | ||
211 | } else | ||
212 | usage(1); | ||
213 | |||
214 | if (lflag && sflag) | ||
215 | errx(1, "cannot use -s and -l"); | ||
216 | if (lflag && pflag) | ||
217 | errx(1, "cannot use -p and -l"); | ||
218 | if (lflag && zflag) | ||
219 | errx(1, "cannot use -z and -l"); | ||
220 | if (!lflag && kflag) | ||
221 | errx(1, "must use -l with -k"); | ||
222 | |||
223 | /* Initialize addrinfo structure. */ | ||
224 | if (family != AF_UNIX) { | ||
225 | memset(&hints, 0, sizeof(struct addrinfo)); | ||
226 | hints.ai_family = family; | ||
227 | hints.ai_socktype = uflag ? SOCK_DGRAM : SOCK_STREAM; | ||
228 | hints.ai_protocol = uflag ? IPPROTO_UDP : IPPROTO_TCP; | ||
229 | if (nflag) | ||
230 | hints.ai_flags |= AI_NUMERICHOST; | ||
231 | } | ||
232 | |||
233 | if (xflag) { | ||
234 | if (uflag) | ||
235 | errx(1, "no proxy support for UDP mode"); | ||
236 | |||
237 | if (lflag) | ||
238 | errx(1, "no proxy support for listen"); | ||
239 | |||
240 | if (family == AF_UNIX) | ||
241 | errx(1, "no proxy support for unix sockets"); | ||
242 | |||
243 | /* XXX IPv6 transport to proxy would probably work */ | ||
244 | if (family == AF_INET6) | ||
245 | errx(1, "no proxy support for IPv6"); | ||
246 | |||
247 | if (sflag) | ||
248 | errx(1, "no proxy support for local source address"); | ||
249 | |||
250 | proxyhost = strsep(&proxy, ":"); | ||
251 | proxyport = proxy; | ||
252 | |||
253 | memset(&proxyhints, 0, sizeof(struct addrinfo)); | ||
254 | proxyhints.ai_family = family; | ||
255 | proxyhints.ai_socktype = SOCK_STREAM; | ||
256 | proxyhints.ai_protocol = IPPROTO_TCP; | ||
257 | if (nflag) | ||
258 | proxyhints.ai_flags |= AI_NUMERICHOST; | ||
259 | } | ||
260 | |||
261 | if (lflag) { | ||
262 | int connfd; | ||
263 | ret = 0; | ||
264 | |||
265 | if (family == AF_UNIX) | ||
266 | s = unix_listen(host); | ||
267 | |||
268 | /* Allow only one connection at a time, but stay alive. */ | ||
269 | for (;;) { | ||
270 | if (family != AF_UNIX) | ||
271 | s = local_listen(host, uport, hints); | ||
272 | if (s < 0) | ||
273 | err(1, NULL); | ||
274 | /* | ||
275 | * For UDP, we will use recvfrom() initially | ||
276 | * to wait for a caller, then use the regular | ||
277 | * functions to talk to the caller. | ||
278 | */ | ||
279 | if (uflag) { | ||
280 | int rv; | ||
281 | char buf[1024]; | ||
282 | struct sockaddr_storage z; | ||
283 | |||
284 | len = sizeof(z); | ||
285 | rv = recvfrom(s, buf, sizeof(buf), MSG_PEEK, | ||
286 | (struct sockaddr *)&z, &len); | ||
287 | if (rv < 0) | ||
288 | err(1, "recvfrom"); | ||
289 | |||
290 | rv = connect(s, (struct sockaddr *)&z, len); | ||
291 | if (rv < 0) | ||
292 | err(1, "connect"); | ||
293 | |||
294 | connfd = s; | ||
295 | } else { | ||
296 | connfd = accept(s, (struct sockaddr *)&cliaddr, | ||
297 | &len); | ||
298 | } | ||
299 | |||
300 | readwrite(connfd); | ||
301 | close(connfd); | ||
302 | if (family != AF_UNIX) | ||
303 | close(s); | ||
304 | |||
305 | if (!kflag) | ||
306 | break; | ||
307 | } | ||
308 | } else if (family == AF_UNIX) { | ||
309 | ret = 0; | ||
310 | |||
311 | if ((s = unix_connect(host)) > 0 && !zflag) { | ||
312 | readwrite(s); | ||
313 | close(s); | ||
314 | } else | ||
315 | ret = 1; | ||
316 | |||
317 | exit(ret); | ||
318 | |||
319 | } else { | ||
320 | int i = 0; | ||
321 | |||
322 | /* Construct the portlist[] array. */ | ||
323 | build_ports(uport); | ||
324 | |||
325 | /* Cycle through portlist, connecting to each port. */ | ||
326 | for (i = 0; portlist[i] != NULL; i++) { | ||
327 | if (s) | ||
328 | close(s); | ||
329 | |||
330 | if (xflag) | ||
331 | s = socks_connect(host, portlist[i], hints, | ||
332 | proxyhost, proxyport, proxyhints, socksv); | ||
333 | else | ||
334 | s = remote_connect(host, portlist[i], hints); | ||
335 | |||
336 | if (s < 0) | ||
337 | continue; | ||
338 | |||
339 | ret = 0; | ||
340 | if (vflag || zflag) { | ||
341 | /* For UDP, make sure we are connected. */ | ||
342 | if (uflag) { | ||
343 | if (udptest(s) == -1) { | ||
344 | ret = 1; | ||
345 | continue; | ||
346 | } | ||
347 | } | ||
348 | |||
349 | /* Don't look up port if -n. */ | ||
350 | if (nflag) | ||
351 | sv = NULL; | ||
352 | else { | ||
353 | sv = getservbyport( | ||
354 | ntohs(atoi(portlist[i])), | ||
355 | uflag ? "udp" : "tcp"); | ||
356 | } | ||
357 | |||
358 | printf("Connection to %s %s port [%s/%s] succeeded!\n", | ||
359 | host, portlist[i], uflag ? "udp" : "tcp", | ||
360 | sv ? sv->s_name : "*"); | ||
361 | } | ||
362 | if (!zflag) | ||
363 | readwrite(s); | ||
364 | } | ||
365 | } | ||
366 | |||
367 | if (s) | ||
368 | close(s); | ||
369 | |||
370 | exit(ret); | ||
371 | } | ||
372 | |||
373 | /* | ||
374 | * unix_connect() | ||
375 | * Returns a socket connected to a local unix socket. Returns -1 on failure. | ||
376 | */ | ||
377 | int | ||
378 | unix_connect(char *path) | ||
379 | { | ||
380 | struct sockaddr_un sun; | ||
381 | int s; | ||
382 | |||
383 | if ((s = socket(AF_UNIX, SOCK_STREAM, 0)) < 0) | ||
384 | return (-1); | ||
385 | (void)fcntl(s, F_SETFD, 1); | ||
386 | |||
387 | memset(&sun, 0, sizeof(struct sockaddr_un)); | ||
388 | sun.sun_family = AF_UNIX; | ||
389 | |||
390 | if (strlcpy(sun.sun_path, path, sizeof(sun.sun_path)) >= | ||
391 | sizeof(sun.sun_path)) { | ||
392 | close(s); | ||
393 | errno = ENAMETOOLONG; | ||
394 | return (-1); | ||
395 | } | ||
396 | if (connect(s, (struct sockaddr *)&sun, SUN_LEN(&sun)) < 0) { | ||
397 | close(s); | ||
398 | return (-1); | ||
399 | } | ||
400 | return (s); | ||
401 | |||
402 | } | ||
403 | |||
404 | /* | ||
405 | * unix_listen() | ||
406 | * Create a unix domain socket, and listen on it. | ||
407 | */ | ||
408 | int | ||
409 | unix_listen(char *path) | ||
410 | { | ||
411 | struct sockaddr_un sun; | ||
412 | int s; | ||
413 | |||
414 | /* Create unix domain socket. */ | ||
415 | if ((s = socket(AF_UNIX, SOCK_STREAM, 0)) < 0) | ||
416 | return (-1); | ||
417 | |||
418 | memset(&sun, 0, sizeof(struct sockaddr_un)); | ||
419 | sun.sun_family = AF_UNIX; | ||
420 | |||
421 | if (strlcpy(sun.sun_path, path, sizeof(sun.sun_path)) >= | ||
422 | sizeof(sun.sun_path)) { | ||
423 | close(s); | ||
424 | errno = ENAMETOOLONG; | ||
425 | return (-1); | ||
426 | } | ||
427 | |||
428 | if (bind(s, (struct sockaddr *)&sun, SUN_LEN(&sun)) < 0) { | ||
429 | close(s); | ||
430 | return (-1); | ||
431 | } | ||
432 | |||
433 | if (listen(s, 5) < 0) { | ||
434 | close(s); | ||
435 | return (-1); | ||
436 | } | ||
437 | return (s); | ||
438 | } | ||
439 | |||
440 | /* | ||
441 | * remote_connect() | ||
442 | * Returns a socket connected to a remote host. Properly binds to a local | ||
443 | * port or source address if needed. Returns -1 on failure. | ||
444 | */ | ||
445 | int | ||
446 | remote_connect(char *host, char *port, struct addrinfo hints) | ||
447 | { | ||
448 | struct addrinfo *res, *res0; | ||
449 | int s, error, x = 1; | ||
450 | |||
451 | if ((error = getaddrinfo(host, port, &hints, &res))) | ||
452 | errx(1, "getaddrinfo: %s", gai_strerror(error)); | ||
453 | |||
454 | res0 = res; | ||
455 | do { | ||
456 | if ((s = socket(res0->ai_family, res0->ai_socktype, | ||
457 | res0->ai_protocol)) < 0) | ||
458 | continue; | ||
459 | |||
460 | /* Bind to a local port or source address if specified. */ | ||
461 | if (sflag || pflag) { | ||
462 | struct addrinfo ahints, *ares; | ||
463 | |||
464 | if (!(sflag && pflag)) { | ||
465 | if (!sflag) | ||
466 | sflag = NULL; | ||
467 | else | ||
468 | pflag = NULL; | ||
469 | } | ||
470 | |||
471 | memset(&ahints, 0, sizeof(struct addrinfo)); | ||
472 | ahints.ai_family = res0->ai_family; | ||
473 | ahints.ai_socktype = uflag ? SOCK_DGRAM : SOCK_STREAM; | ||
474 | ahints.ai_protocol = uflag ? IPPROTO_UDP : IPPROTO_TCP; | ||
475 | ahints.ai_flags = AI_PASSIVE; | ||
476 | if ((error = getaddrinfo(sflag, pflag, &ahints, &ares))) | ||
477 | errx(1, "getaddrinfo: %s", gai_strerror(error)); | ||
478 | |||
479 | if (bind(s, (struct sockaddr *)ares->ai_addr, | ||
480 | ares->ai_addrlen) < 0) | ||
481 | errx(1, "bind failed: %s", strerror(errno)); | ||
482 | freeaddrinfo(ares); | ||
483 | } | ||
484 | if (Sflag) { | ||
485 | if (setsockopt(s, IPPROTO_TCP, TCP_MD5SIG, | ||
486 | &x, sizeof(x)) == -1) | ||
487 | err(1, NULL); | ||
488 | } | ||
489 | |||
490 | if (connect(s, res0->ai_addr, res0->ai_addrlen) == 0) | ||
491 | break; | ||
492 | else if (vflag) | ||
493 | warn("connect to %s port %s (%s) failed", host, port, | ||
494 | uflag ? "udp" : "tcp"); | ||
495 | |||
496 | close(s); | ||
497 | s = -1; | ||
498 | } while ((res0 = res0->ai_next) != NULL); | ||
499 | |||
500 | freeaddrinfo(res); | ||
501 | |||
502 | return (s); | ||
503 | } | ||
504 | |||
505 | /* | ||
506 | * local_listen() | ||
507 | * Returns a socket listening on a local port, binds to specified source | ||
508 | * address. Returns -1 on failure. | ||
509 | */ | ||
510 | int | ||
511 | local_listen(char *host, char *port, struct addrinfo hints) | ||
512 | { | ||
513 | struct addrinfo *res, *res0; | ||
514 | int s, ret, x = 1; | ||
515 | int error; | ||
516 | |||
517 | /* Allow nodename to be null. */ | ||
518 | hints.ai_flags |= AI_PASSIVE; | ||
519 | |||
520 | /* | ||
521 | * In the case of binding to a wildcard address | ||
522 | * default to binding to an ipv4 address. | ||
523 | */ | ||
524 | if (host == NULL && hints.ai_family == AF_UNSPEC) | ||
525 | hints.ai_family = AF_INET; | ||
526 | |||
527 | if ((error = getaddrinfo(host, port, &hints, &res))) | ||
528 | errx(1, "getaddrinfo: %s", gai_strerror(error)); | ||
529 | |||
530 | res0 = res; | ||
531 | do { | ||
532 | if ((s = socket(res0->ai_family, res0->ai_socktype, | ||
533 | res0->ai_protocol)) == 0) | ||
534 | continue; | ||
535 | |||
536 | ret = setsockopt(s, SOL_SOCKET, SO_REUSEPORT, &x, sizeof(x)); | ||
537 | if (ret == -1) | ||
538 | err(1, NULL); | ||
539 | if (Sflag) { | ||
540 | ret = setsockopt(s, IPPROTO_TCP, TCP_MD5SIG, | ||
541 | &x, sizeof(x)); | ||
542 | if (ret == -1) | ||
543 | err(1, NULL); | ||
544 | } | ||
545 | |||
546 | if (bind(s, (struct sockaddr *)res0->ai_addr, | ||
547 | res0->ai_addrlen) == 0) | ||
548 | break; | ||
549 | |||
550 | close(s); | ||
551 | s = -1; | ||
552 | } while ((res0 = res0->ai_next) != NULL); | ||
553 | |||
554 | if (!uflag && s != -1) { | ||
555 | if (listen(s, 1) < 0) | ||
556 | err(1, "listen"); | ||
557 | } | ||
558 | |||
559 | freeaddrinfo(res); | ||
560 | |||
561 | return (s); | ||
562 | } | ||
563 | |||
564 | /* | ||
565 | * readwrite() | ||
566 | * Loop that polls on the network file descriptor and stdin. | ||
567 | */ | ||
568 | void | ||
569 | readwrite(int nfd) | ||
570 | { | ||
571 | struct pollfd pfd[2]; | ||
572 | char buf[BUFSIZ]; | ||
573 | int wfd = fileno(stdin), n, ret; | ||
574 | int lfd = fileno(stdout); | ||
575 | |||
576 | /* Setup Network FD */ | ||
577 | pfd[0].fd = nfd; | ||
578 | pfd[0].events = POLLIN; | ||
579 | |||
580 | /* Set up STDIN FD. */ | ||
581 | pfd[1].fd = wfd; | ||
582 | pfd[1].events = POLLIN; | ||
583 | |||
584 | while (pfd[0].fd != -1) { | ||
585 | if (iflag) | ||
586 | sleep(iflag); | ||
587 | |||
588 | if ((n = poll(pfd, 2 - dflag, timeout)) < 0) { | ||
589 | close(nfd); | ||
590 | err(1, "Polling Error"); | ||
591 | } | ||
592 | |||
593 | if (n == 0) | ||
594 | return; | ||
595 | |||
596 | if (pfd[0].revents & POLLIN) { | ||
597 | if ((n = read(nfd, buf, sizeof(buf))) < 0) | ||
598 | return; | ||
599 | else if (n == 0) { | ||
600 | shutdown(nfd, SHUT_RD); | ||
601 | pfd[0].fd = -1; | ||
602 | pfd[0].events = 0; | ||
603 | } else { | ||
604 | if (tflag) | ||
605 | atelnet(nfd, buf, n); | ||
606 | if ((ret = atomicio( | ||
607 | (ssize_t (*)(int, void *, size_t))write, | ||
608 | lfd, buf, n)) != n) | ||
609 | return; | ||
610 | } | ||
611 | } | ||
612 | |||
613 | if (!dflag && pfd[1].revents & POLLIN) { | ||
614 | if ((n = read(wfd, buf, sizeof(buf))) < 0) | ||
615 | return; | ||
616 | else if (n == 0) { | ||
617 | shutdown(nfd, SHUT_WR); | ||
618 | pfd[1].fd = -1; | ||
619 | pfd[1].events = 0; | ||
620 | } else { | ||
621 | if ((ret = atomicio( | ||
622 | (ssize_t (*)(int, void *, size_t))write, | ||
623 | nfd, buf, n)) != n) | ||
624 | return; | ||
625 | } | ||
626 | } | ||
627 | } | ||
628 | } | ||
629 | |||
630 | /* Deal with RFC 854 WILL/WONT DO/DONT negotiation. */ | ||
631 | void | ||
632 | atelnet(int nfd, unsigned char *buf, unsigned int size) | ||
633 | { | ||
634 | int ret; | ||
635 | unsigned char *p, *end; | ||
636 | unsigned char obuf[4]; | ||
637 | |||
638 | end = buf + size; | ||
639 | obuf[0] = '\0'; | ||
640 | |||
641 | for (p = buf; p < end; p++) { | ||
642 | if (*p != IAC) | ||
643 | break; | ||
644 | |||
645 | obuf[0] = IAC; | ||
646 | p++; | ||
647 | if ((*p == WILL) || (*p == WONT)) | ||
648 | obuf[1] = DONT; | ||
649 | if ((*p == DO) || (*p == DONT)) | ||
650 | obuf[1] = WONT; | ||
651 | if (obuf) { | ||
652 | p++; | ||
653 | obuf[2] = *p; | ||
654 | obuf[3] = '\0'; | ||
655 | if ((ret = atomicio( | ||
656 | (ssize_t (*)(int, void *, size_t))write, | ||
657 | nfd, obuf, 3)) != 3) | ||
658 | warnx("Write Error!"); | ||
659 | obuf[0] = '\0'; | ||
660 | } | ||
661 | } | ||
662 | } | ||
663 | |||
664 | /* | ||
665 | * build_ports() | ||
666 | * Build an array or ports in portlist[], listing each port | ||
667 | * that we should try to connect to. | ||
668 | */ | ||
669 | void | ||
670 | build_ports(char *p) | ||
671 | { | ||
672 | char *n, *endp; | ||
673 | int hi, lo, cp; | ||
674 | int x = 0; | ||
675 | |||
676 | if ((n = strchr(p, '-')) != NULL) { | ||
677 | if (lflag) | ||
678 | errx(1, "Cannot use -l with multiple ports!"); | ||
679 | |||
680 | *n = '\0'; | ||
681 | n++; | ||
682 | |||
683 | /* Make sure the ports are in order: lowest->highest. */ | ||
684 | hi = (int)strtoul(n, &endp, 10); | ||
685 | if (hi <= 0 || hi > PORT_MAX || *endp != '\0') | ||
686 | errx(1, "port range not valid"); | ||
687 | lo = (int)strtoul(p, &endp, 10); | ||
688 | if (lo <= 0 || lo > PORT_MAX || *endp != '\0') | ||
689 | errx(1, "port range not valid"); | ||
690 | |||
691 | if (lo > hi) { | ||
692 | cp = hi; | ||
693 | hi = lo; | ||
694 | lo = cp; | ||
695 | } | ||
696 | |||
697 | /* Load ports sequentially. */ | ||
698 | for (cp = lo; cp <= hi; cp++) { | ||
699 | portlist[x] = calloc(1, PORT_MAX_LEN); | ||
700 | if (portlist[x] == NULL) | ||
701 | err(1, NULL); | ||
702 | snprintf(portlist[x], PORT_MAX_LEN, "%d", cp); | ||
703 | x++; | ||
704 | } | ||
705 | |||
706 | /* Randomly swap ports. */ | ||
707 | if (rflag) { | ||
708 | int y; | ||
709 | char *c; | ||
710 | |||
711 | for (x = 0; x <= (hi - lo); x++) { | ||
712 | y = (arc4random() & 0xFFFF) % (hi - lo); | ||
713 | c = portlist[x]; | ||
714 | portlist[x] = portlist[y]; | ||
715 | portlist[y] = c; | ||
716 | } | ||
717 | } | ||
718 | } else { | ||
719 | hi = (int)strtoul(p, &endp, 10); | ||
720 | if (hi <= 0 || hi > PORT_MAX || *endp != '\0') | ||
721 | errx(1, "port range not valid"); | ||
722 | portlist[0] = calloc(1, PORT_MAX_LEN); | ||
723 | if (portlist[0] == NULL) | ||
724 | err(1, NULL); | ||
725 | portlist[0] = p; | ||
726 | } | ||
727 | } | ||
728 | |||
729 | /* | ||
730 | * udptest() | ||
731 | * Do a few writes to see if the UDP port is there. | ||
732 | * XXX - Better way of doing this? Doesn't work for IPv6. | ||
733 | * Also fails after around 100 ports checked. | ||
734 | */ | ||
735 | int | ||
736 | udptest(int s) | ||
737 | { | ||
738 | int i, rv, ret; | ||
739 | |||
740 | for (i = 0; i <= 3; i++) { | ||
741 | if ((rv = write(s, "X", 1)) == 1) | ||
742 | ret = 1; | ||
743 | else | ||
744 | ret = -1; | ||
745 | } | ||
746 | return (ret); | ||
747 | } | ||
748 | |||
749 | void | ||
750 | help(void) | ||
751 | { | ||
752 | usage(0); | ||
753 | fprintf(stderr, "\tCommand Summary:\n\ | ||
754 | \t-4 Use IPv4\n\ | ||
755 | \t-6 Use IPv6\n\ | ||
756 | \t-d Detach from stdin\n\ | ||
757 | \t-h This help text\n\ | ||
758 | \t-i secs\t Delay interval for lines sent, ports scanned\n\ | ||
759 | \t-k Keep inbound sockets open for multiple connects\n\ | ||
760 | \t-l Listen mode, for inbound connects\n\ | ||
761 | \t-n Suppress name/port resolutions\n\ | ||
762 | \t-p port\t Specify local port for remote connects\n\ | ||
763 | \t-r Randomize remote ports\n\ | ||
764 | \t-S Enable the TCP MD5 signature option\n\ | ||
765 | \t-s addr\t Local source address\n\ | ||
766 | \t-t Answer TELNET negotiation\n\ | ||
767 | \t-U Use UNIX domain socket\n\ | ||
768 | \t-u UDP mode\n\ | ||
769 | \t-v Verbose\n\ | ||
770 | \t-w secs\t Timeout for connects and final net reads\n\ | ||
771 | \t-X vers\t SOCKS version (4 or 5)\n\ | ||
772 | \t-x addr[:port]\tSpecify socks proxy address and port\n\ | ||
773 | \t-z Zero-I/O mode [used for scanning]\n\ | ||
774 | Port numbers can be individual or ranges: lo-hi [inclusive]\n"); | ||
775 | exit(1); | ||
776 | } | ||
777 | |||
778 | void | ||
779 | usage(int ret) | ||
780 | { | ||
781 | fprintf(stderr, "usage: nc [-46dhklnrStUuvz] [-i interval] [-p source_port]\n"); | ||
782 | fprintf(stderr, "\t [-s source_ip_address] [-w timeout] [-X socks_version]\n"); | ||
783 | fprintf(stderr, "\t [-x proxy_address[:port]] [hostname] [port[s]]\n"); | ||
784 | if (ret) | ||
785 | exit(1); | ||
786 | } | ||