diff --git a/docs/Nmap-Third-Party-Open-Source.fodt b/docs/Nmap-Third-Party-Open-Source.fodt index b3b1b0765..c3d6bc3ea 100644 --- a/docs/Nmap-Third-Party-Open-Source.fodt +++ b/docs/Nmap-Third-Party-Open-Source.fodt @@ -1,69 +1,86 @@ - - Nmap Technology License AgreementInsecure.Com LLC2016-08-17T21:15:002018-09-28T16:25:49.1603267922016-08-17T21:19:0021PT22H21M19SLibreOffice/6.0.3.2$Linux_X86_64 LibreOffice_project/00m0$Build-2FALSE0RealEstate4RealEstate4IR1:481112.1 + + Nmap Technology License AgreementInsecure.Com LLC2016-08-17T21:15:002022-02-08T09:55:25.1823400682016-08-17T21:19:0022PT22H50M1SLibreOffice/6.4.7.2$Linux_X86_64 LibreOffice_project/40$Build-2FALSE0RealEstate4RealEstate4IR1:481112.1 - 84653 + 5327 0 - 22608 - 20579 + 22666 + 19570 true false view2 - 7754 + 8040 21093 0 - 84653 - 22606 - 105230 + 5327 + 22664 + 24896 3 0 false - 193 + 159 false false - false - - false - false false false - false - true - false - true + false true - false - - true - - false - false - true - false - true - false - 365532 - true - true - false - false - false - true - true - true - true + true + true + true true + false + 0 + false + false + true + true + false + false + false + false + true + true + true + false + false + false + true + false + true + false + true + false + true + false + false + true + false + true + 0 + 1 true - false - false + + high-resolution + true + + + false + false + true + false + true + true + false + true ja @@ -73,56 +90,50 @@ $([\{£¥‘“〈《「『【〔＄（［｛｢￡￥ - 1 - false - true - false + + true + 2902121 - false - false - - false - true - false - - false - 0 - false - - 0 true + false + true + 0 + + false + false + false + false + false + true + true + true + false + false + true + false + + false + false + false + false + true true false false - false - false - true - true - false - false - true - 2716134 - true - false - true - false - high-resolution - true - true - false - true - true - true - false - false - true false - false - false - true + false + false + true + 365532 false - 0 - true + false + false + false + false + true + false + true + true @@ -150,14 +161,14 @@ - + - + @@ -231,6 +242,14 @@ + + + + + + + + @@ -2468,6 +2487,14 @@ + + + + + + + + @@ -2490,220 +2517,244 @@ - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + + + + + + + + + + + + + + + + + + + + + + + + + - + @@ -2722,9 +2773,9 @@ - + - + @@ -2732,9 +2783,9 @@ - + - + @@ -2745,115 +2796,116 @@ + Third-party open source software and libraries used by Nmap - The Nmap Security Scanner uses 3rd party open source software and libraries for various functions. All are open source with BSD-style licenses that allow royalty-free redistribution within other software (including commercial/proprietary software). They may have other redistribution requirements though, such as including an acknowledgment or warranty disclaimer in product documentation. We’ve put them all together in this document mostly for the benefit of our customers who license Nmap technology for redistribution within their commercial software. Some of this 3rd party software is only needed on certain platforms (such as Windows or Mac) or to enable optional functionality. These details are discussed in the sections below for each dependency. If 3rd party dependency software is included, than its license must be followed. This is the case whether the licensed product calls the library functions directly, incorporates Nmap source code that calls the functions, or bundles an Nmap executable which links to or includes source code of the given library or dependency. This Some or all of these may be necessary or desirable to implement in Licensed Products utilizing Nmap. + The Nmap Security Scanner uses 3rd party open source software and libraries for various functions. All are open source with BSD-style licenses that allow royalty-free redistribution within other software (including commercial/proprietary software). They may have other redistribution requirements though, such as including an acknowledgment or warranty disclaimer in product documentation. We’ve put them all together in this document mostly for the benefit of our customers who license Nmap technology for redistribution within their commercial software. Some of this 3rd party software is only needed on certain platforms (such as Windows or Mac) or to enable optional functionality. These details are discussed in the sections below for each dependency. If 3rd party dependency software is included, than its license must be followed. This is the case whether the licensed product calls the library functions directly, incorporates Nmap source code that calls the functions, or bundles an Nmap executable which links to or includes source code of the given library or dependency. This Some or all of these may be necessary or desirable to implement in Licensed Products utilizing Nmap. - This document only covers 3rd party open source software and libraries used by Nmap proper. It does not cover our related tools such as Zenmap, Ncat, Nping, or Ndiff because those are generally not included in the licenses we sell. We do track the components of those for our own license compliance purposes in a separate XML document. + This document only covers 3rd party open source software and libraries used by Nmap proper. It does not cover our related tools such as Zenmap, Ncat, Nping, or Ndiff because those are generally not included in the licenses we sell. We do track the components of those for our own license compliance purposes in a separate XML document. - This document covers Nmap 7.50. Licensees or potential licensees who want this information for a different Nmap release should contact sales@nmap.com. + This document covers Nmap 7.92. Licensees or potential licensees who want this information for a different Nmap release should contact sales@nmap.com. LibPcap Raw Packet Capture Library - Description: LibPcap is used by Nmap on UNIX for raw packet reading during host discovery, port scanning, and OS detection. It is bundled with the Nmap Security Scanner in the libpcap subdirectory. LibPcap is also used on Windows as part of the Npcap library (which has its own section in this document). - Software URL: http://www.tcpdump.org/ - Version used: 1.73 (source and UNIX) or 1.81 (Npcap on Windows) - License Summary: Modified BSD license (3-clause) - License Text Location: BSD-modified.txt + Description: LibPcap is used by Nmap on UNIX for raw packet reading during host discovery, port scanning, and OS detection. It is bundled with the Nmap Security Scanner in the libpcap subdirectory. LibPcap is also used on Windows as part of the Npcap library (which has its own section in this document). + Software URL: http://www.tcpdump.org/ + Version used: 1.9.1 (source and Linux binaries) or 1.10 (Npcap on Windows) + License Summary: Modified BSD license (3-clause) + License Text Location: BSD-modified.txt - Npcap Windows Packet Library + Npcap Windows Packet Library - Description: Npcap is used by Nmap on Windows for raw packet reading during host discovery, port scanning, and OS detection. It is a derivative of LibPcap, so that license (see LibPcap section) must be followed as well. It is only needed and used on Windows. - Software URL: https://npcap.org - Version used: 0.92 - License Summary: - License Text Location: + Description: Npcap is used by Nmap on Windows for raw packet reading during host discovery, port scanning, and OS detection. It is a derivative of LibPcap, so that license (see LibPcap section) must be followed as well. It is only needed and used on Windows. + Software URL: https://npcap.com + Version used: 1.50 + License Summary: + License Text Location: - Libdnet Raw Networking Library - Description: Libdnet is bundled with Nmap and is required on all platforms for low-level tasks such as sending raw Ethernet frames. We have made many changes and so it is important that our version (distributed with Nmap) be used. - Software URL: http://libdnet.sourceforge.net/ - Version used: 1.12 - Copyright: Dug Song - License Summary: Modified BSD license (3-clause) - License Text Location: Libdnet-license.txt + Libdnet Raw Networking Library + Description: Libdnet is bundled with Nmap and is required on all platforms for low-level tasks such as sending raw Ethernet frames. We have made many changes and so it is important that our version (distributed with Nmap) be used. + Software URL: http://libdnet.sourceforge.net/ + Version used: 1.12 + Copyright: Dug Song + License Summary: Modified BSD license (3-clause) + License Text Location: Libdnet-license.txt - LibPCRE Perl Compatible Regular Expressions Library + LibPCRE Perl Compatible Regular Expressions Library - Description: LibPCRE is used for regular expression matching as part of Nmap version detection. It is bundled with Nmap in the libpcre subdirectory. - Software URL: http://www.pcre.org/ - Version used: 7.6 - License Summary: Modified BSD license (3-clause) - License Text Location: PCRE-license.txt + Description: LibPCRE is used for regular expression matching as part of Nmap version detection. It is bundled with Nmap in the libpcre subdirectory. + Software URL: http://www.pcre.org/ + Version used: 7.6 + License Summary: Modified BSD license (3-clause) + License Text Location: PCRE-license.txt - Lua Programming Language + Lua Programming Language - Description: The LUA programming language may optionally be embedded into Nmap as part of the Nmap Scripting Engine functionality. LUA will not be included if the –without-liblua configuration option is given. If Lua is included, Nmap also includes some LUA libraries which also fall under the free LUA license (they have their own section in this document). - Software URL: https://www.lua.org/ - Version used: 5.3.3 - License Summary: MIT license - License Text Location: Lua-license.txt + Description: The LUA programming language may optionally be embedded into Nmap as part of the Nmap Scripting Engine functionality. LUA will not be included if the –without-liblua configuration option is given. If Lua is included, Nmap also includes some LUA libraries which also fall under the free LUA license (they have their own section in this document). + Software URL: https://www.lua.org/ + Version used: 5.3.5 + License Summary: MIT license + License Text Location: Lua-license.txt Lua libraries - Description: If Lua is included in an Nmap build, four 3rd party Lua libraries are included as well. They are SLAXML (an XML parsing library), LuaFileSystem (for filesystem operations), LPeg (Lua Parsing Expression Grammars), lzlib for accessing Zlib compression library functions, and Base3264 for base 32 and 64 encoding and decoding. They are all under the Lua license (which is the MIT license) although the copyright statement referred to by the license is different because they were created by different authors. All four of those libraries are included in this section - SLAXML URL: https://github.com/Phrogz/SLAXML - SLAXML Version: 0.7 - SLAXML Copyright Statement: Copyright (c) 2013 Gavin Kistner - LuaFileSystem URL: https://keplerproject.github.io/luafilesystem/ - LuaFileSystem Version: 1.2 - LuaFileSystem Copyright Statement: Copyright © 2003 Kepler Project. - LPeg URL: http://www.inf.puc-rio.br/~roberto/lpeg/lpeg.html - LPeg Version: 0.12 - LPeg Copyright Statement: Copyright © 2007-2015 Lua.org, PUC-Rio. - lzlib URL: http://luaforge.net/projects/lzlib/ - lzlib Version: 0.4-work3 - lzlib Copyright Statement: Copyright Tiago Dionizio (tiago.dionizio@gmail.com) - Base3264 URL: https://nmap.org/nsedoc/lib/base32.html https://nmap.org/nsedoc/lib/base64.html - Base3264 Version: Unversioned - Base3264 Copyright Statement: Copyright (c) 2016 Patrick Joseph Donnelly (batrick@batbytes.com) - License Summary: All packages use the Lua license (MIT license) with the copyright statements listed above - License Text Location: Lua-license.txt + Description: If Lua is included in an Nmap build, four 3rd party Lua libraries are included as well. They are SLAXML (an XML parsing library), LuaFileSystem (for filesystem operations), LPeg (Lua Parsing Expression Grammars), lzlib for accessing Zlib compression library functions, and Base3264 for base 32 and 64 encoding and decoding. They are all under the Lua license (which is the MIT license) although the copyright statement referred to by the license is different because they were created by different authors. All four of those libraries are included in this section + SLAXML URL: https://github.com/Phrogz/SLAXML + SLAXML Version: 0.7 + SLAXML Copyright Statement: Copyright (c) 2013 Gavin Kistner + LuaFileSystem URL: https://keplerproject.github.io/luafilesystem/ + LuaFileSystem Version: 1.2 + LuaFileSystem Copyright Statement: Copyright © 2003 Kepler Project. + LPeg URL: http://www.inf.puc-rio.br/~roberto/lpeg/lpeg.html + LPeg Version: 0.12 + LPeg Copyright Statement: Copyright © 2007-2015 Lua.org, PUC-Rio. + lzlib URL: http://luaforge.net/projects/lzlib/ + lzlib Version: 0.4-work3 + lzlib Copyright Statement: Copyright Tiago Dionizio (tiago.dionizio@gmail.com) + Base3264 URL: https://nmap.org/nsedoc/lib/base32.html https://nmap.org/nsedoc/lib/base64.html + Base3264 Version: Unversioned + Base3264 Copyright Statement: Copyright (c) 2016 Patrick Joseph Donnelly (batrick@batbytes.com) + License Summary: All packages use the Lua license (MIT license) with the copyright statements listed above + License Text Location: Lua-license.txt OpenSSL SSL encryption library - Description: OpenSSL can optionally be used by Nmap Service Detection to communicate with SSL-enabled protocols such as https, pop3-s, imaps, etc. It is not included in the Nmap source tree, but you can choose to link to it when compiling Nmap (and we do so for the binaries we distribute). - Software URL: https://www.openssl.org/ - Version used: 1.0.2l in the binaries we distribute. If you build Nmap yourself and include OpenSSL, you supply your own preferred version. - License Summary: 4-clause BSD style - License Text Location: OpenSSL-license.txt + Description: OpenSSL can optionally be used by Nmap Service Detection to communicate with SSL-enabled protocols such as https, pop3-s, imaps, etc. It is not included in the Nmap source tree, but you can choose to link to it when compiling Nmap (and we do so for the binaries we distribute). + Software URL: https://www.openssl.org/ + Version used: 1.1.1k in the binaries we distribute. If you build Nmap yourself and include OpenSSL, you supply your own preferred version. + License Summary: 4-clause BSD style + License Text Location: OpenSSL-license.txt - LIBLINEAR Linear Classification Library + LIBLINEAR Linear Classification Library - Description: LIBLINEAR is used as part of Nmap’s machine-learning based IPv6 OS detection system. It’s included in the “liblinear” directory in the Nmap source tree. - Software URL: https://www.csie.ntu.edu.tw/~cjlin/liblinear/ - Version used: 1.7 - License Summary: Modified BSD license (3-clause) - License Text Location: LIBLINEAR-license.txt + Description: LIBLINEAR is used as part of Nmap’s machine-learning based IPv6 OS detection system. It’s included in the “liblinear” directory in the Nmap source tree. + Software URL: https://www.csie.ntu.edu.tw/~cjlin/liblinear/ + Version used: 1.7 + License Summary: Modified BSD license (3-clause) + License Text Location: LIBLINEAR-license.txt - Ike-scan Fingerprinting Data + Ike-scan Fingerprinting Data - Description: This is a small data file used by an obscure Nmap NSE script named ike-version. The contents were provided to us under a BSD license by the author of a tool named Ike-scan. - Software URL: http://www.nta-monitor.com/wiki/index.php/Ike-scan_program_notes - Version used: Unversioned - License Summary: Simplified (2-clause) BSD license - License Text Location: BSD-simplified + Description: This is a small data file used by an obscure Nmap NSE script named ike-version. The contents were provided to us under a BSD license by the author of a tool named Ike-scan. + Software URL: http://www.nta-monitor.com/wiki/index.php/Ike-scan_program_notes + Version used: Unversioned + License Summary: Simplified (2-clause) BSD license + License Text Location: BSD-simplified - LibSSH2 + LibSSH2 - Description: This library is used to provide Secure Shell (SSH) communication capability to NSE. - Software URL: https://www.libssh2.org/ - Version used: 1.8.0 - License Summary: Modified BSD license (3-clause) - License Text Location: libssh2-license.txt + Description: This library is used to provide Secure Shell (SSH) communication capability to NSE. + Software URL: https://www.libssh2.org/ + Version used: 1.9.0 + License Summary: Modified BSD license (3-clause) + License Text Location: libssh2-license.txt - Zlib + Zlib - Description: Zlib is a data compression library linked by LibSSH2, and may also be linked directly by NSE. - Software URL: https://zlib.net/ - Version used: 1.2.8 - License Summary: Zlib license (allows free commercial use and redistribution) - License Text Location: zlib-license.txt + Description: Zlib is a data compression library linked by LibSSH2, and may also be linked directly by NSE. + Software URL: https://zlib.net/ + Version used: 1.2.11 + License Summary: Zlib license (allows free commercial use and redistribution) + License Text Location: zlib-license.txt \ No newline at end of file diff --git a/docs/Nmap-Third-Party-Open-Source.pdf b/docs/Nmap-Third-Party-Open-Source.pdf index 61a5c6fce..df7445914 100644 Binary files a/docs/Nmap-Third-Party-Open-Source.pdf and b/docs/Nmap-Third-Party-Open-Source.pdf differ