PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-01-01 20:39:02 +00:00
Code Issues Projects Releases Wiki Activity

Latest todo updates

Browse Source
This commit is contained in:
fyodor
2012-09-24 22:56:32 +00:00
parent 9a21b96b49
commit fdac9b93bb
1 changed files with 16 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
todo/nmap.txt
View File

@@ -5,13 +5,6 @@ o Investigate/fix potential routing-related issue. See emails from
http://seclists.org/nmap-dev/2012/q3/4,
http://seclists.org/nmap-dev/2012/q2/449
o Even without the --osscan-guess flag, Nmap should show the closest
matches (if they pass our threshold) in the XML output. We omit
them from the normal output in large part to encourage people to
submit fingerprints, but that argument doesn't apply so well to XML
output users. Normal output users who really want to see the Nmap
guesses could still use --osscan-guess as before.
o Clean up the Nmap repo to remove some bloat we've allowed to creep
in. Should do a more thorough search, but for now here are two
obvious candidates:
@@ -53,6 +46,15 @@ o Add CPE entries to OS fingerpting DB entries which still lack them
o Do an Nmap dev release. Last release was Nmap 6.01 June 22.
o Update more web content in real time (or near real-time, or at least
on an automated basis rather than requiring manual checkin and
update). In particular:
o NSEDoc generation
o [done] SVN dir (http://nmap.org/svn/) should be removed and a redirect
added to https svn server.
o Maybe Nmap book building
o Maybe the generated files in nmap.org/data/
o Migrate web.insecure.org to a RHEL-6 derived distro (probably CENTOS
6, since Linode doesn't currently offer ScientificLinux images).
o Maybe start with svn server, since we've had reports of our
@@ -125,15 +127,6 @@ o Test a hierarchical classifier for IPv6 OS detection. Our classifier
suspect playing it by ear will be sufficient. Talk to David for more
of his thinking on this topic.
o Update more web content in real time (or near real-time, or at least
on an automated basis rather than requiring manual checkin and
update). In particular:
o NSEDoc generation
o SVN dir (http://nmap.org/svn/) should be removed and a redirect
added to https svn server.
o Maybe Nmap book building
o Maybe the generated files in nmap.org/data/
o If it is trivial to add, it would be nice if the "New VA Module
Alert Service" also gave the Author field for NSE scripts so everyone
knows which hero(es) wrote it.
@@ -738,6 +731,13 @@ o random tip database
DONE:
o Even without the --osscan-guess flag, Nmap should show the closest
matches (if they pass our threshold) in the XML output. We omit
them from the normal output in large part to encourage people to
submit fingerprints, but that argument doesn't apply so well to XML
output users. Normal output users who really want to see the Nmap
guesses could still use --osscan-guess as before.
o Change the interface of nmap.ip_send to take an explicit
destination address. It currently extracts the destination from
the packet buffer, which does not have enough information to