Nmap weblogic-t3-info NSE Script

Script Overview

Script source code: https://github.com/nmap/nmap/tree/master/scripts/weblogic-t3-info.nse
Script categories: default, safe, discovery, version
Target service / protocol: http
Target network port(s): 7001, 7002, 7003
List of CVEs: -

Script Description

Detect the T3 RMI protocol and Weblogic version

Weblogic-t3-info NSE Script Arguments

The weblogic-t3-info.nse script does not have any arguments.

Weblogic-t3-info NSE Script Example Usage

Here's an example of how to use the weblogic-t3-info.nse script:

nmap --script=weblogic-t3-info <target>

Weblogic-t3-info NSE Script Example Output

There is no sample output for this module.

Weblogic-t3-info NSE Script Example XML Output

There is no sample XML output for this module. However, by providing the -oX <file> option, Nmap will produce a XML output and save it in the file.xml file.

Authors

• Alessandro ZANNI [email protected]>
• Daniel Miller

References

• https://nmap.org/nsedoc/scripts/weblogic-t3-info.html
• https://github.com/nmap/nmap/tree/master/scripts/weblogic-t3-info.nse

See Also

Visit Nmap NSE Library for more scripts.

The weblogic-t3-info.nse script may fail with the following error messages. Check for the possible causes by using the code snippets highlighted below found in the script source code. This can often times help in identifying the root cause of the problem.

T3 protocol in use (handshake failed)

Here is a relevant code snippet related to the "T3 protocol in use (handshake failed)" error message:

50:	      rval = "T3 protocol in use (WebLogic version: " .. weblogic_version .. ")"
51:	    end
52:	    port.version.extrainfo = extrainfo .. "T3 enabled"
53:	  elseif string.match(result, "^LGIN:") then
54:	    port.version.extrainfo = extrainfo .. "T3 enabled"
55:	    rval = "T3 protocol in use (handshake failed)"
56:	  elseif string.match(result, "^SERV:") then
57:	    port.version.extrainfo = extrainfo .. "T3 enabled"
58:	    rval = "T3 protocol in use (No such service)"
59:	  elseif string.match(result, "^UNAV:") then
60:	    port.version.extrainfo = extrainfo .. "T3 enabled"

^VERS:Incompatible versions %- this server:(%d+%.%d+%.%d+%.%d+)

Here is a relevant code snippet related to the "^VERS:Incompatible versions %- this server:(%d+%.%d+%.%d+%.%d+)" error message:

64:	    rval = "T3 protocol in use (No license)"
65:	  elseif string.match(result, "^RESC:") then
66:	    port.version.extrainfo = extrainfo .. "T3 enabled"
67:	    rval = "T3 protocol in use (No resource)"
68:	  elseif string.match(result, "^VERS:") then
69:	    weblogic_version = string.match(result, "^VERS:Incompatible versions %- this server:(%d+%.%d+%.%d+%.%d+)")
70:	    if weblogic_version then
71:	      port.version.version = weblogic_version
72:	    end
73:	    port.version.extrainfo = extrainfo .. "T3 enabled"
74:	    rval = "T3 protocol in use (Incompatible version)"

T3 protocol in use (Incompatible version)

Here is a relevant code snippet related to the "T3 protocol in use (Incompatible version)" error message:

69:	    weblogic_version = string.match(result, "^VERS:Incompatible versions %- this server:(%d+%.%d+%.%d+%.%d+)")
70:	    if weblogic_version then
71:	      port.version.version = weblogic_version
72:	    end
73:	    port.version.extrainfo = extrainfo .. "T3 enabled"
74:	    rval = "T3 protocol in use (Incompatible version)"
75:	  elseif string.match(result, "^CATA:") then
76:	    port.version.extrainfo = extrainfo .. "T3 enabled"
77:	    rval = "T3 protocol in use (Catastrophic failure)"
78:	  elseif string.match(result, "^CMND:") then
79:	    port.version.extrainfo = extrainfo .. "T3 enabled"