PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-23 16:09:02 +00:00
Code Issues Projects Releases Wiki Activity

o [NSE] Made sslv2.nse give special output when SSLv2 is supported,

Browse Source 
but no SSLv2 ciphers are offered. This happened with a specific
  Sendmail configuration. [Matt Selsky]
This commit is contained in:
david
2010-08-09 02:57:09 +00:00
parent 934cf2edf0
commit 794611d9f1
2 changed files with 17 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
CHANGELOG
View File

@@ -1,5 +1,9 @@
# Nmap Changelog ($Id$); -*-text-*- # Nmap Changelog ($Id$); -*-text-*-
o [NSE] Made sslv2.nse give special output when SSLv2 is supported,
but no SSLv2 ciphers are offered. This happened with a specific
Sendmail configuration. [Matt Selsky]
o [NSE] Added a "times" table to the host table passed to scripts. o [NSE] Added a "times" table to the host table passed to scripts.
This table contains Nmap's timing data (srtt, the smoothed round This table contains Nmap's timing data (srtt, the smoothed round
trip time; rttvar, the rtt variance; and timeout), all represented trip time; rttvar, the rtt variance; and timeout), all represented

26
scripts/sslv2.nse
View File

@@ -63,7 +63,7 @@ cyphers = function(cypher_list, len)
[0x080080] = "SSL2_RC4_64_WITH_MD5", [0x080080] = "SSL2_RC4_64_WITH_MD5",
}; };
if (len == 0) then return "\tthe server didn't offer any cyphers"; end if (len == 0) then return "none"; end
-- something's got broken along the way if these aren't equal -- something's got broken along the way if these aren't equal
if (len ~= string.len(cypher_list)) then if (len ~= string.len(cypher_list)) then
return ""; return "";
@@ -215,20 +215,20 @@ action = function(host, port)
return; return;
end end
-- get a list of cyphers offered
available_cyphers = cyphers(cypher_list, cyphers_len);
-- actually run some tests: -- actually run some tests:
if (ssl_version == string.char(0x00, 0x02)) then if (ssl_version == string.char(0x00, 0x02)) then
return_string = "server still supports SSLv2\n"; if (available_cyphers == "none") then
end return_string = "server supports SSLv2 protocol, but no SSLv2 cyphers\n";
else
if (nmap.verbosity() > 1 or nmap.debugging() > 0) then return_string = "server still supports SSLv2\n";
available_cyphers = cyphers(cypher_list, cyphers_len); if (nmap.verbosity() > 1 or nmap.debugging() > 0) then
end return_string = return_string .. available_cyphers;
end
if ( string.len(return_string) > 0 end
or string.len(available_cyphers) > 0) then
return return_string .. available_cyphers;
else
return;
end end
return return_string;
end end