Nmap eap-info NSE Script

Script Overview

---

Script source code: https://github.com/nmap/nmap/tree/master/scripts/eap-info.nse
Script categories: broadcast, safe
Target service / protocol: -
Target network port(s): -
List of CVEs: -

Script Description

---

The eap-info.nse script enumerates the authentication methods offered by an EAP (Extensible Authentication Protocol) authenticator for a given identity or for the anonymous identity if no argument is passed.

Eap-info NSE Script Arguments

---

This is a full list of arguments supported by the eap-info.nse script:

eap-info.identity

Identity to use for the first step of the authentication methods (if omitted "anonymous" will be used).

eap-info.interface

Network interface to use for the scan, overrides "-e".

eap-info.scan

Table of authentication methods to test, e.g. { 4, 13, 25 } for MD5, TLS and PEAP. Default: TLS, TTLS, PEAP, MSCHAP.

eap-info.timeout

Maximum time allowed for the scan (default 10s). Methods not tested because of timeout will be listed as "unknown".

- - -
To use these script arguments, add them to the Nmap command line using the --script-args arg1=value,[arg2=value,..] syntax. For example:

nmap --script=eap-info --script-args eap-info.identity=value,eap-info.interface=value <target>

Eap-info NSE Script Example Usage

---

Here's an example of how to use the eap-info.nse script:

nmap -e interface --script eap-info [--script-args="eap-info.identity=0-user,eap-info.scan={13,50}"] <target>

Eap-info NSE Script Example Output

---

Here's a sample output from the eap-info.nse script:

Pre-scan script results:
| eap-info:
| Available authentication methods with identity="anonymous" on interface eth2
|   true     PEAP
|   true     EAP-TTLS
|   false    EAP-TLS
|_  false    EAP-MSCHAP-V2

Eap-info NSE Script Example XML Output

---

There is no sample XML output for this module. However, by providing the -oX <file> option, Nmap will produce a XML output and save it in the file.xml file.

Author

---

• Riccardo Cecolin

References

---

• https://nmap.org/nsedoc/scripts/eap-info.html
• https://github.com/nmap/nmap/tree/master/scripts/eap-info.nse

See Also

---

Visit Nmap NSE Library for more scripts.

The eap-info.nse script may fail with the following error messages. Check for the possible causes by using the code snippets highlighted below found in the script source code. This can often times help in identifying the root cause of the problem.

packet invalid! wrong filter?

---

Here is a relevant code snippet related to the "packet invalid! wrong filter?" error message:

168:	            eap.send_start(iface)
169:	          end
170:	        end
171:	
172:	      else
173:	        stdnse.debug1("packet invalid! wrong filter?")
174:	      end
175:	    end
176:	  end
177:	
178:	  local results = { ["name"] = ("Available authentication methods with identity="%s" on interface %s"):format(identity.name, iface.device) }