recon-cli 0.88.0

Versatile network reconnaissance CLI: HTTP/TLS/DNS, multi-protocol probes, and a Rhai script engine
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

// Usage: recon --script sftp [URL]
//
// SFTP probe. Needs either --ssh-key (or scripts-side opts.ssh_key)
// for key-based auth, or URL userinfo with a password — use with care.
// Default URL targets rebex.net's demo SFTP server (demo / password).

let url = if args.len() > 1 { args[1] } else { "sftp://demo:password@test.rebex.net/" };

// Extract host[:port] from the URL using sub_string + index_of, since
// String::replace and split() in Rhai are mutating and can't be chained.
let host_port = url;
let i = host_port.index_of("://");
if i >= 0 { host_port = host_port.sub_string(i + 3); }
let at = host_port.index_of("@");
if at >= 0 { host_port = host_port.sub_string(at + 1); }
let slash = host_port.index_of("/");
if slash >= 0 { host_port = host_port.sub_string(0, slash); }
if host_port.index_of(":") < 0 { host_port += ":22"; }
// `tcp()` raises on connect failure / timeout, so a plain `if !t.ok`
// guard never fires — wrap in try/catch and treat any failure as
// "host unreachable".
let reachable = false;
try {
    let t = tcp(`tcp://${host_port}`, #{ timeout: 5 });
    reachable = t.ok;
} catch(e) { reachable = false; }
if !reachable {
    print(`${host_port} unreachable — skipping`);
    return 2;
}

let r = sftp(url);
print(`${r.user}@${r.host}:${r.port}  connect=${r.connect_ms.to_int()}ms  path=${r.path}`);
if r.mode == "list" {
    print(`listing (${r.listing.len()} entries):`);
    for entry in r.listing {
        let kind = if entry.is_dir { "d" } else { "-" };
        print(`  ${kind} ${entry.size} ${entry.name}`);
    }
} else {
    print(`retrieved ${r.bytes.len()} bytes`);
}
return 0;