1
0
mirror of https://github.com/nmap/nmap.git synced 2025-12-06 04:31:29 +00:00

36 Commits

Author SHA1 Message Date
dmiller
b2ebc18360 NSEdoc fixes 2025-03-13 18:13:21 +00:00
nnposter
b9c8409022 Fix Oracle 10g password hashing function
* Non-alphanumeric characters were not processed correctly
  The correct hash for BOB:LONG_MOT_DE_PASSE_OUI is EC8147ABB3373D53,
  not 3DB3AA445FB68342.
* The hash is case-insensitive
2020-05-20 23:01:41 +00:00
nnposter
47ec607c6f Optimize DALC structure marshalling in TNS
Avoids unnecessary splitting of the input string value
2020-05-20 21:18:05 +00:00
nnposter
3019f0c9de Fix DALC structure unmarshalling in TNS. Fixes #2010
The algorithm got broken in r37418 (4009f5fb17),
when string concatenation was replaced with table concatenation.
2020-05-20 20:08:38 +00:00
dmiller
f540c58e3f Remove last uses of 'H' bin packing format, equivalent to stdnse.tohex/fromhex 2018-09-17 15:29:57 +00:00
dmiller
4009f5fb17 Remove bin.lua from eap and tns libraries 2018-09-17 02:34:31 +00:00
dmiller
e0af0179eb Remove use of bit library from all NSE libs 2018-08-28 15:21:53 +00:00
dmiller
8ee963caee Use BruteSocket in a bunch of brute scripts 2018-03-10 03:09:39 +00:00
dmiller
f20589ca09 Use explicit endianness in pack/unpack. 2017-02-14 03:47:49 +00:00
dmiller
0ac0d8f505 Fix globals, whitespace 2016-07-08 04:36:31 +00:00
batrick
7f5ec526fe Merge branch 'nse-lua53'
Lua 5.3 adds several awesome features of particular interest to nmap including
bitwise operators and integers, a utf8 library, and standard binary pack/unpack
functions.

In addition to adding Lua 5.3, this branch changes:

o Complete removal of the NSE bit library (in C), It has been replaced with
  a new Lua library wrapping Lua 5.3's bit-wise operators.

o Complete removal of the NSE bin library (in C). It has been replaced with a
  new Lua library wrapping Lua 5.3's string.pack|unpack functions.

o The bin.pack "B" format specifier (which has never worked correctly) is
  unimplemented.  All scripts/libraries which use it have been updated. Most
  usage of this option was to allow string based bit-wise operations which are no
  longer necessary now that Lua 5.3 provides integers and bit-wise operators.

o The base32/base64 libraries have been reimplemented using Lua 5.3's new
  bitwise operators. (This library was the main user of the bin.pack "B" format
  specifier.)

o A new "bits" library has been added for common bit hacks. Currently only has
  a reverse function.

Thanks to David Fifield, Daniel Miller, Jacek Wielemborek, and  Paulino
Calderon for testing this branch.
2016-07-02 17:02:27 +00:00
dmiller
cb4b46bd53 Canonicalize authors as tables instead of comma-separated strings 2016-06-09 22:46:42 +00:00
dmiller
f4619edece Update http urls for nmap.org to https 2015-11-05 20:41:05 +00:00
dmiller
0e74dd7a35 Replace some string.char and bin.pack calls with literals 2015-02-27 19:42:56 +00:00
dmiller
4f0518bd93 Replace concat-loop padding with string.rep 2015-02-27 14:55:42 +00:00
batrick
ee6622aea4 nselib stdnse.print_debug -> stdnse.debug
$ f() { find -name \*.lua -exec /bin/echo sed -i "$1" {} \; ; }
$ f 's/stdnse.print_debug( *\([0-9]*\) *, */stdnse.debug\1(/'
$ f 's/stdnse.print_debug( *"\(.*\))/stdnse.debug1("\1)/'
2014-08-03 00:56:45 +00:00
dmiller
1b71f75aad Spelling fixes for Lua files
Mostly in documentation/comments, but a couple code bugs were caught,
including a call to stdnse.pirnt_debug and a mis-declared variable.
2014-02-19 04:15:46 +00:00
dmiller
2896c21989 Convert some file encodings from ISO-8859-2 to UTF-8
https://secwiki.org/w/Nmap/Code_Standards
2014-02-12 19:49:43 +00:00
dmiller
69e343f0aa Reindent the last of the NSE libraries.
https://secwiki.org/w/Nmap/Code_Standards
2014-02-04 19:47:26 +00:00
dmiller
620f9fdb34 Remove trailing whitespace in lua files
Whitespace is not significant, so this should not be a problem.
https://secwiki.org/w/Nmap/Code_Standards
2014-01-23 21:51:58 +00:00
patrik
89dab3fe14 code re-factoring and cleanup 2012-10-10 22:19:49 +00:00
patrik
6cfa5aea0f o [NSE] Added oracle-brute-stealth which exploits CVE-2012-3137, a weakness
in the Oracle O5LOGIN authentication scheme. [Dhiru Kholia]
2012-10-06 19:59:45 +00:00
patrik
655f766445 reverted bad commits 2012-10-06 19:38:15 +00:00
patrik
10a34f626a Squashed commit of the following:
commit 5de9e4fa623f88a9b48ef0704244ff843005573a
Author: Patrik Karlsson <patrik@cqure.net>
Date:   Sat Oct 6 21:19:08 2012 +0200

    Applied patch from Dhiru Kholia adding oracle-brute-stealth and needed changes

    reworked the patch slightly and added;
    - support for specifying account on command line
    - johnfile argument for writing hashes directly to file
2012-10-06 19:25:13 +00:00
batrick
000f6dc4d9 Lua 5.2 upgrade [1] for NSE.
[1] http://seclists.org/nmap-dev/2012/q2/34
2012-05-27 08:53:32 +00:00
patrik
68646bd590 Applied marshalling patch from Chris Woodbury to TNS library
http://seclists.org/nmap-dev/2011/q4/29
2011-10-07 01:32:01 +00:00
patrik
4e9265b883 fixed a bug that would prevent the library from authenticating against
Oracle 10.2.0.1.0 XE [Patrik]
2011-09-05 07:52:30 +00:00
patrik
bce29f44cd Fixed typo in supported versions matrix in the TNS library [Patrik] 2011-08-27 08:12:59 +00:00
patrik
a52d443841 o [NSE] Fixed authentication problems in the TNS library that would prevent
authentication from working against Oracle 11.2.0.2.0 XE [Chris Woodbury]
2011-08-27 08:05:10 +00:00
patrik
5e2f67ae2e o Fixed bugs that would prevent connections against certain versions
o Improved support for 64-bit database servers
o Tested the code against a larger number of databases running on both
  32/64-bit Windows/Linux
o Improved library documentation
[patrik]
2011-08-21 19:18:53 +00:00
patrik
00b72547cf Fixed bugs with empty resultsets returning data [Patrik] 2011-08-11 09:28:09 +00:00
patrik
b593d0778a o [NSE] Added basic query support to the Oracle TNS library making it possible
for scripts to query the database server using SQL. [Patrik]
2011-08-10 20:33:13 +00:00
batrick
5a68e5f04a Set the math.randomseed value in nse_main.lua on behalf of scripts.
Since Lua uses the C rand and srand functions, which have a static
seed for the entire program, we don't want scripts doing this themselves.
2011-05-23 21:43:46 +00:00
patrik
19da29942c Applied Sebastian Dragomir's patch for the "Unbounded memory use" bug reported
by David Fifield http://seclists.org/nmap-dev/2011/q2/451
2011-05-09 17:46:25 +00:00
patrik
b62cebc7b3 o [NSE] Fixed a problem in oracle-brute that would fail due to connection
exhaustion. Fixed some debugging messages in the brute library [Patrik]
2011-03-19 08:26:33 +00:00
patrik
87109b5670 o [NSE] Added a Oracle TNS library and two new scripts that make use of it.
The scripts are:
  - oracle-brute uses the brute and tns library to perform password guessing
  - oracle-enum-users attempts to determine valid Oracle user names
  [Patrik]
2010-08-19 23:09:32 +00:00