diff --git a/docs/Nmap-Third-Party-Open-Source.docx b/docs/Nmap-Third-Party-Open-Source.docx new file mode 100755 index 000000000..be1edec07 Binary files /dev/null and b/docs/Nmap-Third-Party-Open-Source.docx differ diff --git a/docs/Nmap-Third-Party-Open-Source.fodt b/docs/Nmap-Third-Party-Open-Source.fodt deleted file mode 100644 index b1a10b06e..000000000 --- a/docs/Nmap-Third-Party-Open-Source.fodt +++ /dev/null @@ -1,3266 +0,0 @@ - - - - Third-party open source software and libraries used by NmapInsecure.Com LLC2016-08-17T21:15:002023-09-05T10:03:47.6869157912016-08-17T21:19:0026PT23H6M58SLibreOffice/7.3.7.2$Linux_X86_64 LibreOffice_project/30$Build-2FALSE0RealEstate4RealEstate4IR1:481112.1 - - - 5286 - 0 - 22666 - 14429 - true - false - - - view2 - 5854 - 123753 - 0 - 5286 - 22664 - 19713 - 3 - 0 - false - 159 - false - false - false - - - - - false - false - false - true - true - true - true - true - false - 0 - false - false - false - false - true - true - false - false - false - false - false - true - true - true - false - false - false - true - false - true - false - true - false - true - false - false - true - false - true - 0 - 1 - true - false - - high-resolution - true - - - false - false - true - false - true - true - false - true - - - ja - JP - - !%),.:;?]}¢°’”‰′″℃、。々〉》」』】〕゛゜ゝゞ・ヽヾ！％），．：；？］｝｡｣､･ﾞﾟ￠ - $([\{£¥‘“〈《「『【〔＄（［｛｢￡￥ - - - - true - 4212620 - - true - false - true - true - 0 - - false - false - false - false - false - true - true - true - false - false - true - false - false - - false - false - false - false - true - true - false - false - false - false - false - true - 365532 - false - false - false - false - false - true - false - true - true - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 5 - - - - - - - - - - - - - - - - - - - Third-party Software Components Used by Nmap - - The Nmap Security Scanner (https://nmap.org) leverages other software components for various functions. All except for Npcap are open source with BSD-style licenses that allow royalty-free redistribution within other software (including commercial/proprietary software). Some include a warranty disclaimer (relating to the original authors) and require a small amount of acknowledgment text be added to the documentation of any software which includes them (including indirectly through Nmap). The Npcap Windows packet capturing library is a special case because it’s not third party or open source, but it’s documented here as an important component for Nmap on Windows. - - This document is mostly for our Nmap OEM program customers who license Nmap OEM for redistribution within their commercial software. Some of these software components are only needed on certain platforms (such as Windows or Mac) or to enable optional functionality. These details are discussed in the sections below for each dependency. If 3rd party dependency software is included, than its license must be followed. This is the case whether the licensed product calls the library functions directly, incorporates Nmap source code that calls the functions, or bundles an Nmap executable which links to or includes source code of the given library or dependency. The next section includes sample acknowledgment text to help comply with 3rd party license requirements. - - This document only covers 3rd party open source software and libraries used by Nmap proper. It does not cover our related tools such as Zenmap, Ncat, Nping, or Ndiff because those are generally not included in the Nmap OEM Licenses we sell. We do track the components of those for our own license compliance purposes in a separate XML document. - - Please note that all Nmap OEM support, warranties and indemnification that we (Nmap Software LLC) offer to commercial customers apply to these third-party components and all other Npcap code. The warranty disclaimers in their license text just mean that the original library authors and maintainers aren’t responsible for that support you buy from us instead. - - This document covers Nmap 7.94. Licensees or potential licensees who want this information for a different Nmap release should contact sales@nmap.com. - - Anyone may redistribute this document in whole or part, including incorporating it into larger documents. In particular, Nmap OEM customers may want to redistribute this document along with Nmap OEM to help comply with attribution and warranty disclaimer clauses of the software component licenses detailed herein. - - Suggested Acknowledgment Text - - To give credit where due and also comply with attribution clauses of the various 3rd party software component licenses detailed in this document, we suggest that Nmap OEM customers licensed to redistribute Nmap within their products include this document itself with their software and also include a statement like the one below in their documentation: - - This product contains the Nmap Security Scanner OEM Edition (https://nmap.org/oem) pursuant to a license agreement with Nmap Software LLC. Depending on configuration, Nmap OEM may contain some or all of the following software: - - - Npcap Windows packet capture and transmission driver (https://npcap.com) - - - Libpcap raw packet capture library (https://tcpdump.org) - - - Libdnet raw networking library (http://libdnet.sourceforge.net) - - - LibPCRE Perl Compatible Regular Expressions Library (https://pcre.org) - - - Lua Programming Language (https://lua.org) - - - Lua extension libraries: SLAXML (an XML parsing library), LuaFileSystem (for filesystem operations), LPeg (Lua Parsing Expression Grammars), lzlib for accessing Zlib compression library functions, and Base3264 for base 32 and 64 encoding and decoding - - - OpenSSL SSL encryption library (https://openssl.org) - - - LIBLINEAR Linear Classification Library (https://www.csie.ntu.edu.tw/~cjlin/liblinear/) - - - Ike-scan Fingerprint Data (http://www.nta-monitor.com/wiki/index.php/Ike-scan_program_notes) - - - LibSSH2 (https://www.libssh2.org/) - - - Zlib (https://zlib.net) - - - Further usage and license details on all of these components are available in the Nmap-Thid-Party-Open-Source.pdf file included with this program and/or available from https://nmap.org/svn/docs/Nmap-Third-Party-Open-Source.pdf. Third party components of Npcap are detailed in Npcap-Third-Party-Open-Source.pdf instead. That file is included with this program and/or available from https://npcap.com/src/docs/Npcap-Third-Party-Open-Source.pdf. - - Npcap Windows Packet Library - - Description: Npcap is used by Nmap for capturing and sending raw packets on the Microsoft Windows platform. It is not needed or used on any other platforms. It is produced by Nmap Software LLC, which is the same company that oversees Nmap. While it is not technically “open source” since it does not allow free redistribution, the source code is available and the Npcap license has been tailored to work well with Nmap. - Software URL: https://npcap.com - Version used: 1.75 - License Summary: The free version of Npcap comes with the official Nmap Windows binaries and allows for unlimited usage with Nmap, but not external redistribution. The commercial Npcap OEM Edition enables automated deployment, commercial support, greater internal-use rights for non-Nmap software, and even rights to redistribute Npcap OEM within a company’s own products. The Nmap Security Scanner OEM Edition (Nmap OEM) includes the Npcap OEM packet capturing software so that Nmap OEM customers don’t need to buy Npcap too. Npcap includes 3 open source software components whose BSD-style licenses also must be respected. They all allow free redistribution within commercial software and are detailed in Npcap-Third-Party-Open-Source.pdf. - License Text Location: Free license: https://npcap.com/license; Commercial license: https://npcap.com/oem - - Libpcap Raw Packet Capture Library - - Description: Libpcap is used by Nmap on UNIX for raw packet reading during host discovery, port scanning, and OS detection. It is bundled with the Nmap Security Scanner in the libpcap subdirectory. Libpcap is also used on Windows as part of the Npcap library (which has its own section in this document). - Software URL: https://tcpdump.org - Version used: 1.10.4 (this is the version in the Nmap source code, the Linux binaries, and in Npcap 1.75) - License Summary: Modified BSD license (3-clause) - License Text Location: BSD-modified.txt - - Libdnet Raw Networking Library - Description: Libdnet is bundled with Nmap and is required on all platforms for low-level tasks such as sending raw Ethernet frames. We have made many changes and so it is important that our version (distributed with Nmap) be used. - Software URL: http://libdnet.sourceforge.net/ - Version used: 1.12 - Copyright: Dug Song - License Summary: Modified BSD license (3-clause) - License Text Location: Libdnet-license.txt - - LibPCRE Perl Compatible Regular Expressions Library - - Description: LibPCRE is used for regular expression matching as part of Nmap version detection. It is bundled with Nmap in the libpcre subdirectory. - Software URL: https://pcre.org - Version used: 7.6 - License Summary: Modified BSD license (3-clause) - License Text Location: PCRE-license.txt - - Lua Programming Language - - Description: The LUA programming language may optionally be embedded into Nmap as part of the Nmap Scripting Engine functionality. LUA will not be included if the –without-liblua configuration option is given. If Lua is included, Nmap also includes some LUA libraries which also fall under the free LUA license (they have their own section in this document). - Software URL: https://lua.org - Version used: 5.4.4 - License Summary: MIT license - License Text Location: Lua-license.txt - - Lua Libraries - - Description: If Lua is included in an Nmap build, four 3rd party Lua libraries are included as well. They are SLAXML (an XML parsing library), LuaFileSystem (for filesystem operations), LPeg (Lua Parsing Expression Grammars), lzlib for accessing Zlib compression library functions, and Base3264 for base 32 and 64 encoding and decoding. They are all under the Lua license (which is the MIT license) although the copyright statement referred to by the license is different because they were created by different authors. All four of those libraries are included in this section - SLAXML URL: https://github.com/Phrogz/SLAXML - SLAXML Version: 0.7 - SLAXML Copyright Statement: Copyright (c) 2013 Gavin Kistner - LuaFileSystem URL: https://keplerproject.github.io/luafilesystem/ - LuaFileSystem Version: 1.2 - LuaFileSystem Copyright Statement: Copyright © 2003 Kepler Project. - LPeg URL: http://www.inf.puc-rio.br/~roberto/lpeg/lpeg.html - LPeg Version: 0.12 - LPeg Copyright Statement: Copyright © 2007-2015 Lua.org, PUC-Rio. - lzlib URL: http://luaforge.net/projects/lzlib/ - lzlib Version: 0.4-work3 - lzlib Copyright Statement: Copyright Tiago Dionizio (tiago.dionizio@gmail.com) - Base3264 URL: https://nmap.org/nsedoc/lib/base32.html https://nmap.org/nsedoc/lib/base64.html - Base3264 Version: Unversioned - Base3264 Copyright Statement: Copyright (c) 2016 Patrick Joseph Donnelly (batrick@batbytes.com) - License Summary: All packages use the Lua license (MIT license) with the copyright statements listed above - License Text Location: Lua-license.txt - - OpenSSL SSL Encryption Library - - Description: OpenSSL can optionally be used by Nmap Service Detection to communicate with SSL-enabled protocols such as https, pop3-s, imaps, etc. It is not included in the Nmap source tree, but you can choose to link to it when compiling Nmap (and we do so for the binaries we distribute). - Software URL: https://openssl.org - Version used: 3.0.8 in the binaries we distribute. If you build Nmap yourself and include OpenSSL, you supply your own preferred version. - License Summary: 4-clause BSD style - License Text Location: OpenSSL-license.txt - - LIBLINEAR Linear Classification Library - - Description: LIBLINEAR is used as part of Nmap’s machine-learning based IPv6 OS detection system. It’s included in the “liblinear” directory in the Nmap source tree. - Software URL: https://www.csie.ntu.edu.tw/~cjlin/liblinear/ - Version used: 1.7 - License Summary: Modified BSD license (3-clause) - License Text Location: LIBLINEAR-license.txt - - Ike-scan Fingerprinting Data - - Description: This is a small data file used by an obscure Nmap NSE script named ike-version. The contents were provided to us under a BSD license by the author of a tool named Ike-scan. - Software URL: http://www.nta-monitor.com/wiki/index.php/Ike-scan_program_notes - Version used: Unversioned - License Summary: Simplified (2-clause) BSD license - License Text Location: BSD-simplified - - LibSSH2 Secure Shell Communication Library - - Description: This library is used to provide Secure Shell (SSH) communication capability to NSE. - Software URL: https://www.libssh2.org/ - Version used: 1.9.0 - License Summary: Modified BSD license (3-clause) - License Text Location: libssh2-license.txt - - Zlib Data Compression Library - - Description: Zlib is a data compression library linked by LibSSH2, and may also be linked directly by NSE. - Software URL: https://zlib.net/ - Version used: 1.2.13 - License Summary: Zlib license (allows free commercial use and redistribution) - License Text Location: zlib-license.txt - - - \ No newline at end of file diff --git a/docs/Nmap-Third-Party-Open-Source.pdf b/docs/Nmap-Third-Party-Open-Source.pdf index 045226e37..3a0be30de 100644 Binary files a/docs/Nmap-Third-Party-Open-Source.pdf and b/docs/Nmap-Third-Party-Open-Source.pdf differ diff --git a/docs/licenses/PCRE-license.txt b/docs/licenses/PCRE-license.txt index 03fabc6ae..f6fba35db 100644 --- a/docs/licenses/PCRE-license.txt +++ b/docs/licenses/PCRE-license.txt @@ -1,38 +1,67 @@ -PCRE LICENCE ------------- +PCRE2 Licence +============= -PCRE is a library of functions to support regular expressions whose syntax +| SPDX-License-Identifier: | BSD-3-Clause WITH PCRE2-exception | +|---------|-------| + +PCRE2 is a library of functions to support regular expressions whose syntax and semantics are as close as possible to those of the Perl 5 language. -Release 7 of PCRE is distributed under the terms of the "BSD" licence, as -specified below. The documentation for PCRE, supplied in the "doc" -directory, is distributed under the same terms as the software itself. +Releases 10.00 and above of PCRE2 are distributed under the terms of the "BSD" +licence, as specified below, with one exemption for certain binary +redistributions. The documentation for PCRE2, supplied in the "doc" directory, +is distributed under the same terms as the software itself. The data in the +testdata directory is not copyrighted and is in the public domain. The basic library functions are written in C and are freestanding. Also -included in the distribution is a set of C++ wrapper functions. +included in the distribution is a just-in-time compiler that can be used to +optimize pattern matching. This is an optional feature that can be omitted when +the library is built. The just-in-time compiler is separately licensed under the +"2-clause BSD" licence. -THE BASIC LIBRARY FUNCTIONS ---------------------------- +COPYRIGHT +--------- -Written by: Philip Hazel -Email local part: ph10 -Email domain: cam.ac.uk +### The basic library functions -University of Cambridge Computing Service, -Cambridge, England. + Written by: Philip Hazel + Email local part: Philip.Hazel + Email domain: gmail.com -Copyright (c) 1997-2008 University of Cambridge -All rights reserved. + Retired from University of Cambridge Computing Service, + Cambridge, England. + Copyright (c) 1997-2007 University of Cambridge + Copyright (c) 2007-2024 Philip Hazel + All rights reserved. -THE C++ WRAPPER FUNCTIONS -------------------------- +### PCRE2 Just-In-Time compilation support -Contributed by: Google Inc. + Written by: Zoltan Herczeg + Email local part: hzmester + Email domain: freemail.hu -Copyright (c) 2007-2008, Google Inc. -All rights reserved. + Copyright (c) 2010-2024 Zoltan Herczeg + All rights reserved. + +### Stack-less Just-In-Time compiler + + Written by: Zoltan Herczeg + Email local part: hzmester + Email domain: freemail.hu + + Copyright (c) 2009-2024 Zoltan Herczeg + All rights reserved. + +The code in the `deps/sljit` directory has its own LICENSE file. + +### All other contributions + +Many other contributors have participated in the authorship of PCRE2. As PCRE2 +has never required a Contributor Licensing Agreement, or other copyright +assignment agreement, all contributions have copyright retained by each +original contributor or their employer. THE "BSD" LICENCE @@ -41,17 +70,16 @@ THE "BSD" LICENCE Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: - * Redistributions of source code must retain the above copyright notice, - this list of conditions and the following disclaimer. +* Redistributions of source code must retain the above copyright notices, + this list of conditions and the following disclaimer. - * Redistributions in binary form must reproduce the above copyright - notice, this list of conditions and the following disclaimer in the - documentation and/or other materials provided with the distribution. +* Redistributions in binary form must reproduce the above copyright + notices, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. - * Neither the name of the University of Cambridge nor the name of Google - Inc. nor the names of their contributors may be used to endorse or - promote products derived from this software without specific prior - written permission. +* Neither the name of the University of Cambridge nor the names of any + contributors may be used to endorse or promote products derived from this + software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE @@ -65,4 +93,12 @@ CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. -End + +EXEMPTION FOR BINARY LIBRARY-LIKE PACKAGES +------------------------------------------ + +The second condition in the BSD licence (covering binary redistributions) does +not apply all the way down a chain of software. If binary package A includes +PCRE2, it must respect the condition, but if package B is software that +includes package A, the condition is not imposed on package B unless it uses +PCRE2 independently.