mirror of
https://github.com/nmap/nmap.git
synced 2025-12-14 19:59:02 +00:00
Added some items to the CHANGELOG
This commit is contained in:
90
CHANGELOG
90
CHANGELOG
@@ -57,6 +57,22 @@ o [NSE] Added the afp-serverinfo script that gets a hostname, IP
|
||||
contributed by Andrew Orr and were subsequently enhanced by Patrik
|
||||
and David.
|
||||
|
||||
o Performed a large OS detection integration run. The database has
|
||||
grown to 2,608 fingerprints (an increase of 262) and many of the
|
||||
existing fingerprints were improved. These include the Apple iPad
|
||||
and Cisco IOS 15.X devices. We also received many fingerprints for
|
||||
ancient Microsoft systems including MS DOS with MS Networking Client
|
||||
3.0, Windows 3.1, and Windows NT 3.1. David posted highlights of his
|
||||
integration work at http://seclists.org/nmap-dev/2010/q2/283.
|
||||
|
||||
o Performed a large version detection integration run. The number of
|
||||
signatures has grown to 6,622 (an increase of 279). New signatures
|
||||
include a remote administrative backdoor that a school famously used
|
||||
to spy on students, an open source digital currency scheme named
|
||||
bitcoin, and game servers for EVE Online, l2emurt Lineage II, and Frozen
|
||||
Bubble. You can read David's highlights at
|
||||
http://seclists.org/nmap-dev/2010/q2/385.
|
||||
|
||||
o UDP payloads are now stored in an external data file, nmap-payloads,
|
||||
instead of being hard-coded in the executable. This makes it easier
|
||||
to add your own payloads or disable those you find problematic. [Jay
|
||||
@@ -145,17 +161,36 @@ o Fixed the assignment of interface aliases to directly connected
|
||||
|
||||
o [Zenmap] Added the ability to print Nmap output to a printer. [David]
|
||||
|
||||
o David made many improvements to the NSEDoc for individual scripts,
|
||||
including adding @output sections to scripts which didn't have them.
|
||||
He also improved the generated HTML with features like
|
||||
auto-generating usage strings if the scripts don't include their own
|
||||
and allowing the giant sidebar lists of scripts/libraries to expand
|
||||
and contract. See http://nmap.org/nsedoc/.
|
||||
|
||||
o [NSE] Added checking for boot.ini to http-passwd.nse. [Gutek]
|
||||
|
||||
o Added a new library, libnetutil, which contains about 2,700 lines of
|
||||
networking related code which is now shared between Nman and Nping
|
||||
(it was previously duplicated by each tool). [Luis, David]
|
||||
|
||||
o Combined service match lines for Oracle Enterprise Manager Agent
|
||||
into one more effective line created by Matt Selsky.
|
||||
o When Nmap is passed a hostname such as google.com which resolves to
|
||||
several IP addresses, Nmap now prints each IP. It still only scans
|
||||
the first one in the returned list. [David]
|
||||
|
||||
o Fixed captures in the mupdate service probe matches. This patch is
|
||||
from Matt Selsky.
|
||||
o Removed --interactive mode, a miniature shell whose primary purpose
|
||||
was to hide command line arguments from the process list. It had
|
||||
been broken (would segfault during the second scan) for at least 9
|
||||
months and was rarely used. The fact that it was broken was reported
|
||||
by Juan Carlos Castro y Castro. [David]
|
||||
|
||||
o Improved service detection match lines for Oracle Enterprise Manager
|
||||
Agent and mupdate. [Matt Selsky]
|
||||
|
||||
o Improved service detection match lines for Twisted web server, Apple
|
||||
Filing Protocol, Apple Mac OS X Password Server, XAVi XG6546p
|
||||
Wireless Gateway, Sun GlassFish Communications Server, and Comdasys,
|
||||
SIParator and Glassfish SIP services [Patrik]
|
||||
|
||||
o [NSE] Fixed a bug in qscan.nse which gave an error if a confidence
|
||||
level of 0.9995 was used. Thanks to Marcin Hoffmann for noticing
|
||||
@@ -205,6 +240,13 @@ o Added EPROTO to the list of known error codes in service scan. Daniel
|
||||
error)". We suspect this was caused by a forged ICMP packet sent by an
|
||||
active firewall. [David]
|
||||
|
||||
o [NSE] Made smtp-commands run for the services smtp, smtps,
|
||||
submission rather than just smtp. The other smtp scripts already do
|
||||
this. [David]
|
||||
|
||||
o Made a list of Nmap SVN commiters:
|
||||
http://nmap.org/svn/docs/committers.txt
|
||||
|
||||
o [NSE] The dns-recursion script now marks the port as open when it
|
||||
gets a response. [Olivier M]
|
||||
|
||||
@@ -212,11 +254,16 @@ o [NSE] Improved smtp-commands.nse to work against more mail servers,
|
||||
made it take an smtp-commands.domain script argument, and rewrote it
|
||||
in the style of other smtp scripts. [Jason DePriest]
|
||||
|
||||
o Sped up compilation by not building both shared and static libdnet
|
||||
libraries--we only use the static one. [David]
|
||||
|
||||
o [NSE] Improved error handling and reporting and re-designed communication
|
||||
class in RPC library with patch from Djalal Harouni. [Patrik]
|
||||
|
||||
o Upgraded the included libpcap to version 1.1.1. [David]
|
||||
|
||||
o Updated nmap-mac-prefixes to the latest IEEE data as of 2010-07-13.
|
||||
|
||||
o [NSE] Add some special use IPv4 addresses to isPrivate which are
|
||||
described in RFC 5736 and RFC 5737, published in Jan 2010. Improve
|
||||
performance of isPrivate for IPv4 addresses by using ip_in_range
|
||||
@@ -225,6 +272,14 @@ o [NSE] Add some special use IPv4 addresses to isPrivate which are
|
||||
string representing the special use assignment in which the supplied
|
||||
address is located. [jah]
|
||||
|
||||
o Fix compilation on Opensolaris by making the Autoconf check for
|
||||
PF_PACKET in our libdnet Linux-specific. Recent versions of
|
||||
OpenSolaris support PF_PACKET, but not in an entirely compatible way
|
||||
with the Linux approach. Problem reported by Darren Reed. [David]
|
||||
|
||||
o Improved our brute force password guessing list with some data sent
|
||||
in by Solar Designer of John the Ripper fame.
|
||||
|
||||
o [NSE] Added script arguments "username" and "password" to ftp-bounce
|
||||
to override the default anonymous:IEUser@ login combination. [Kris]
|
||||
|
||||
@@ -237,17 +292,38 @@ o [NSE] Added port number sorting to dns-service-discovery.nse. [Patrik]
|
||||
o [NSE] Added an snmpWalk() function to the SNMP library and updated
|
||||
scripts to use it. [Patrik]
|
||||
|
||||
o [NSE] Fixed this dns.lua error reported by Eugene Alexeev:
|
||||
nselib/dns.lua:110: attempt to get length of field 'dtype' (a number value)
|
||||
[Jah]
|
||||
|
||||
o Updated IANA IP address space assignment list for random IP (-iR)
|
||||
generation. [Kris]
|
||||
|
||||
o Created a new directory for storing todo lists for Nmap and related
|
||||
projects. You can see what we're working on and planning by
|
||||
visiting http://nmap.org/svn/todo/.
|
||||
|
||||
o [NSE] Removed explicit timelimit checking from ms-sql-brute,
|
||||
pgsql-brute, mysql-brute, ldap-brute, and afp-brute. The unpwdb
|
||||
library does this automatically now. [David]
|
||||
|
||||
o [NSE] Added UDP header parsing support to packet.lua. [jah]
|
||||
|
||||
o Fixed a bug in libpcap which lead to Nmap hanging forever in some
|
||||
cases on 64-bit Mac OS X 10.6, 10.6.1, and 10.6.3. The fix was
|
||||
actually already available in upstream libpcap, just not released.
|
||||
We also had to make Nmap build with its own libpcap on 64-bit OS X
|
||||
if an already-installed system libpcap has this bug. [David]
|
||||
|
||||
o [NSE] Correct global access errors in afp.lua reported by Patrick Donnelly
|
||||
[Patrik]
|
||||
|
||||
o [NSE] Correct misspelled "Capabilities.IgnoreSpaceBeforeParanthesis"
|
||||
name in the MySQL library. [Kris]
|
||||
|
||||
o Normalized a bunch of version detection entries with "webserver" in
|
||||
the description. In most cases this was changed to "httpd".
|
||||
|
||||
o [Ncat] Fixed the --crlf option not to insert an extra \r byte in the
|
||||
case that one system read ends with \r and the next begins with \n
|
||||
(should be rare). [David]
|
||||
@@ -256,12 +332,6 @@ o [NSE] Fixed bug in rpc.lua library that incorrectly required file handles
|
||||
to be 32 octects when calling the ReadDir function. The bug was reported by
|
||||
Djalal Harouni. [Patrik]
|
||||
|
||||
o Removed --interactive mode, a miniature shell whose primary purpose
|
||||
was to hide command line arguments from the process list. It had
|
||||
been broken (would segfault during the second scan) for at least 9
|
||||
months and was rarely used. The fact that it was broken was reported
|
||||
by Juan Carlos Castro y Castro. [David]
|
||||
|
||||
Nmap 5.30BETA1 [2010-03-29]
|
||||
|
||||
o [NSE] Added 37 scripts, bringing the total to 117! They are
|
||||
|
||||
Reference in New Issue
Block a user