Nmap socks-open-proxy NSE Script

Script Overview

---

Script source code: https://github.com/nmap/nmap/tree/master/scripts/socks-open-proxy.nse
Script categories: default, discovery, external, safe
Target service / protocol: socks, socks5, tor-socks
Target network port(s): 1080, 9050
List of CVEs: -

Script Description

---

The socks-open-proxy.nse script checks if an open socks proxy is running on the target.

The script attempts to connect to a proxy server and send socks4 and socks5 payloads. It is considered an open proxy if the script receives a Request Granted response from the target port.

The payloads try to open a connection to www.google.com port 80. A different test host can be passed as proxy.url argument.

Socks-open-proxy NSE Script Arguments

---

This is a full list of arguments supported by the socks-open-proxy.nse script:

proxy.pattern

Pattern that will be searched inside the request results

proxy.url

Url that will be requested to the proxy

- - -
To use these script arguments, add them to the Nmap command line using the --script-args arg1=value,[arg2=value,..] syntax. For example:

nmap --script=socks-open-proxy --script-args proxy.pattern=value,proxy.url=value <target>

Socks-open-proxy NSE Script Example Usage

---

Here's an example of how to use the socks-open-proxy.nse script:

nmap --script=socks-open-proxy \
--script-args proxy.url=<host>,proxy.pattern=<pattern>

Socks-open-proxy NSE Script Example Output

---

Here's a sample output from the socks-open-proxy.nse script:

PORT     STATE  SERVICE
1080/tcp open   socks
|  socks-open-proxy:
|   status: open
|   versions:
|     socks4
|_    socks5

Socks-open-proxy NSE Script Example XML Output

---

Here's a sample XML output from the socks-open-proxy.nse script produced by providing the -oX <file> Nmap option:

<elem key="status">open</elem>
<table key="versions">
  <elem>socks4</elem>
  <elem>socks5</elem>
</table>

Author

---

• Joao Correa

References

---

• https://nmap.org/nsedoc/scripts/socks-open-proxy.html
• https://github.com/nmap/nmap/tree/master/scripts/socks-open-proxy.nse

See Also

---

Related NSE scripts to the socks-open-proxy.nse script:

• socks-auth-info.nse
• socks-brute.nse

Visit Nmap NSE Library for more scripts.