ron
|
1419b86e13
|
Added a pair of modules for finding and exploiting 'WebExec', a vulnerability in Cisco's WebEx
|
2018-10-24 16:14:43 +00:00 |
|
ron
|
467b06008e
|
Add permissions to openscmanagerw() in msrpc.lua, allowing the caller to specify the permissions they need.
|
2018-10-22 17:29:49 +00:00 |
|
dmiller
|
ac2052f62b
|
Print in verbose mode if unpwdb.timelimit exceeded.
|
2018-10-22 01:45:58 +00:00 |
|
paulino
|
63bdb220bf
|
Removes extra word from old description
|
2018-10-19 05:04:23 +00:00 |
|
paulino
|
de2b08e27a
|
Adds http-sap-netweaver-leak to detect SAP instances with the Knowledge Management unit enabled with anonymous access. Closes #1243.
|
2018-10-19 05:00:46 +00:00 |
|
dmiller
|
0500811f5a
|
Move string utility functions to stringaux.lua
|
2018-10-18 01:08:19 +00:00 |
|
dmiller
|
93edeefa3c
|
Fix false positive in http-phpmyadmin-dir-traversal. Closes #1359
|
2018-10-17 20:21:05 +00:00 |
|
dmiller
|
dcc0e3ed7e
|
New tableaux library containing table auxiliary functions.
|
2018-10-17 15:34:30 +00:00 |
|
dmiller
|
bf0ad07e59
|
Fix a typo: modify the correct variable
|
2018-10-12 17:29:22 +00:00 |
|
dmiller
|
03639761c3
|
Move in_port_range to shortport.port_range, expand portnumber to match ranges
|
2018-10-11 05:11:13 +00:00 |
|
dmiller
|
8c0880836c
|
Fix a couple of typos.
|
2018-10-11 04:50:02 +00:00 |
|
dmiller
|
cc1b5fdaae
|
Let rmi-vuln-classloader run against any java-rmi service, not just rmiregistry, as many are vulnerable
|
2018-10-10 03:52:54 +00:00 |
|
dmiller
|
bd67aa3672
|
Fix some http->https urls
|
2018-10-09 17:06:03 +00:00 |
|
dmiller
|
009957693d
|
Don't clobber version info in rmi-dumpregistry. See #1342
|
2018-10-09 17:06:02 +00:00 |
|
nnposter
|
74f1b37ff2
|
Adds protection against incomplete GeoPlugin results, such as 92.123.145.37. Fixes #1331
|
2018-10-09 00:15:07 +00:00 |
|
dmiller
|
7819453af5
|
Fix some incorrect conversions from bin to string unpacking
|
2018-09-20 02:19:53 +00:00 |
|
dmiller
|
cb24d657e2
|
Remove some more bin.lua packings, and fix one mistake in broadcast-ping.nse
|
2018-09-19 04:09:53 +00:00 |
|
dmiller
|
8c8f0fbf7c
|
Be more strict to avoid false positives in ssl-ccs-injection. Fixes #1322
|
2018-09-14 20:13:53 +00:00 |
|
dmiller
|
5c7def132b
|
Remove bin.lua from vuzedht.lua, support IPv6 addresses properly
|
2018-09-11 04:37:48 +00:00 |
|
dmiller
|
7b880da871
|
Avoid printing duplicate ALPN protocol if server forces one
|
2018-09-08 23:14:02 +00:00 |
|
dmiller
|
e1cbd13f82
|
Remove some openssl deps when only used for random strings
|
2018-09-08 17:07:07 +00:00 |
|
dmiller
|
26ef852a28
|
Move stdnse.generate_random_string to new rand.lua
|
2018-09-08 17:07:06 +00:00 |
|
dmiller
|
a5ad8c15c8
|
Remove bin.lua from the last of the NSE scripts (libraries still use it)
|
2018-09-08 17:07:01 +00:00 |
|
dmiller
|
5bffa604d9
|
Remove bin.lua unpacking from more scripts
|
2018-09-08 17:07:00 +00:00 |
|
dmiller
|
9b54895fad
|
Avoid repeatedly checking the same EXIF tag; pos should not be shadowed
|
2018-09-08 17:06:58 +00:00 |
|
dmiller
|
f62d39f801
|
Convert more bin.lua packings
|
2018-09-06 16:00:46 +00:00 |
|
dmiller
|
201ee75059
|
Update unpacking of share names to use string.unpack
|
2018-09-06 14:20:33 +00:00 |
|
dmiller
|
c0fd9f3257
|
Fix a packet check: command should be Response, need 'or' not 'and'
|
2018-09-06 14:20:32 +00:00 |
|
dmiller
|
c2ac2856d3
|
Remove bin.lua from more scripts
|
2018-09-06 14:20:31 +00:00 |
|
dmiller
|
0b9bcba19b
|
Remove bin.lua packing from more scripts
|
2018-09-05 21:57:41 +00:00 |
|
dmiller
|
0cfdf2a372
|
Improved debugging/output for NFS scripts
|
2018-09-05 20:34:19 +00:00 |
|
dmiller
|
6d8e307ac8
|
Remove bin.lua from a few more scripts
|
2018-09-03 22:14:16 +00:00 |
|
dmiller
|
b34e05d4fb
|
Move common code to knx.lua, remove bin.lua dependency
|
2018-09-03 19:38:01 +00:00 |
|
dmiller
|
3f7f084cd1
|
Remove bin.lua from a couple more scripts
|
2018-09-02 20:51:06 +00:00 |
|
dmiller
|
1f00f2fa05
|
Simplify backorifice crypt function, remove bin.lua packing.
|
2018-09-02 20:51:05 +00:00 |
|
dmiller
|
cc768ddec8
|
Remove unneeded retries around send/receive_buf(numbytes) left from when different behavior was used
|
2018-09-01 18:50:19 +00:00 |
|
dmiller
|
0d18bcdbc2
|
Remove bin.lua calls from some scripts and libraries
|
2018-08-29 03:06:40 +00:00 |
|
dmiller
|
7e5ef7130b
|
Move arshift from bit.lua to bits.lua
|
2018-08-28 15:56:46 +00:00 |
|
dmiller
|
24c5ff63b2
|
Remove nearly all bit.lua use
|
2018-08-28 15:56:45 +00:00 |
|
dmiller
|
199c844d8a
|
Remove unneeded requires
|
2018-08-27 22:00:14 +00:00 |
|
dmiller
|
71cc60d68c
|
Remove some unused requires
|
2018-08-27 22:00:13 +00:00 |
|
dmiller
|
46eca7f35f
|
Move date/time functions from stdnse to datetime. See #517
|
2018-08-27 22:00:10 +00:00 |
|
dmiller
|
bc0935a51a
|
Warn if no ciphers support FS. See #1309
|
2018-08-27 15:02:48 +00:00 |
|
nnposter
|
c1fa8219bd
|
Simplifies packet-mangling routines, fixes a few one-off bugs
|
2018-08-23 17:13:56 +00:00 |
|
dmiller
|
a7e20158a8
|
Fix a crash in nbstat.nse; stdnse.output_table can't have setmetatable called on it this way.
|
2018-08-21 19:36:38 +00:00 |
|
nnposter
|
19693c334c
|
More string.sub vs. string.byte optimizations
|
2018-08-19 01:49:08 +00:00 |
|
nnposter
|
57a17415b7
|
more efficient match, avoiding strings
|
2018-08-18 01:00:16 +00:00 |
|
dmiller
|
6c4e02e89d
|
Use stdnse.format_timestamp in more places to avoid formatting issues. See #1255, #1303
|
2018-08-16 21:26:48 +00:00 |
|
dmiller
|
0c617b26d9
|
Add some missing library requires and remove trailing whitespace
|
2018-08-08 18:58:40 +00:00 |
|
nnposter
|
a4237019ac
|
Fixes indentation
|
2018-08-05 21:30:42 +00:00 |
|