nnposter
066bbcfa2b
Adds more default credentials for Apache Tomcat
2016-10-31 01:32:40 +00:00
nnposter
9607d14032
Updates Xplico fingerprint to take advantage of the new "404" handling
2016-10-31 01:30:40 +00:00
nnposter
ede50cec50
Removes a limitation of script http-default-accounts that prevented testing of systems returning status 200 for non-existent pages. Closes #577
2016-10-30 19:20:28 +00:00
nnposter
de2ed2eec6
Implements consistent local cache control and redirect handling for script http-default-accounts. Closes #551
2016-10-30 18:58:25 +00:00
nnposter
2be31d5f49
Allows processing of HTTP responses with malformed headers. Such header lines are still captured in the rawheader list but skipped otherwise. Closes #573 .
2016-10-30 18:40:15 +00:00
dmiller
d4fd11fc91
Avoid NaN return from formulas.mean_stddev when array has only 1 element
2016-10-24 20:17:07 +00:00
dmiller
72c54e9c8f
Don't run smbauth tests requiring OpenSSL if it's not present
2016-10-16 13:58:10 +00:00
nnposter
670a90fae3
Adds a missing check for OpenSSL to one of the fingerprints
2016-10-01 00:27:44 +00:00
nnposter
8be2332c54
Fixes unpacking of the Java serialization magic marker. This complements the change in r36149.
2016-09-30 20:22:09 +00:00
dmiller
4a8df9a9d7
Add options to http-enum fingerprints format. Patch based on work by Josh Amishav-Zlatin
2016-09-28 13:22:42 +00:00
dmiller
1d696c1918
Factor out handshake parsing. Trust me, it'll be worth it.
2016-09-28 13:22:41 +00:00
nnposter
ec3f6f9ac4
Adds a notice that pipeline_go() may not return all responses.
2016-09-27 18:29:00 +00:00
nnposter
d834d652ac
Removes a hint that HTTP pipeline only handles GET requests
2016-09-27 16:05:48 +00:00
nnposter
06a25384b6
Fixes additional stale pipeline_go references
2016-09-27 16:01:39 +00:00
dmiller
95e4c05fc4
Refactor TLS record/message parsing a bit to make it clearer.
2016-09-24 00:58:27 +00:00
dmiller
4290b983d4
Fix parsing of TLS heartbeat (not used for ssl-heartbleed.nse)
2016-09-24 00:58:26 +00:00
dmiller
d1fb502144
Fix some bad patterns with excessive backtracking
2016-09-21 03:55:11 +00:00
paulino
7db0072047
Adds JBoss Seam Debug page. This page leaks critical information sometimes.
2016-09-19 21:32:10 +00:00
dmiller
e6f45c41f7
Add a few more communities to snmpcommunities.lst
...
Three sources:
1. all-caps PUBLIC and PRIVATE because community strings are
case-sensitive
2. Cisco small-business switch backdoor SNMP community string
3. Phenoelit's Default Password List
2016-09-14 03:16:17 +00:00
nnposter
4a2b034854
Tightens target_check in the fingerprint for Lantronix SLC
2016-09-14 02:16:00 +00:00
nnposter
52a88e0f21
Updates two fingerprints to support non-English sites
2016-09-14 01:51:22 +00:00
nnposter
0a5be207da
Removes an obsolete import from http-default-accounts-fingerprints.lua
2016-09-12 23:59:09 +00:00
nnposter
88f6ddc596
Corrects handling of empty pipelines, expressed as nil. Fixes #538
2016-09-12 16:14:33 +00:00
dmiller
0790885360
CoAP scripts, payloads, and service probe for CoAP by Mak Kolybabi
2016-09-08 21:19:55 +00:00
dmiller
3fcd3987d3
Claudiu's IPMI scripts from GSoC 2014
2016-09-08 17:30:40 +00:00
dmiller
3c7fe1e452
Remove some unused functions
2016-09-08 13:31:24 +00:00
dmiller
dada772d5f
Add missing mqtt.lua. #352
2016-09-07 21:03:49 +00:00
dmiller
83ea599122
Make unexpected test successes into failures. #369
2016-09-07 21:03:48 +00:00
dmiller
47ca082c8d
New identity unittests from Mak Kolybabi ( #369 )
2016-09-07 21:03:47 +00:00
dmiller
ee97c8f2a9
New MQTT script and library. Closes #352
2016-09-07 20:01:47 +00:00
dmiller
7e002ec389
Add some missing libraries to unittest.lua
2016-09-07 20:01:45 +00:00
dmiller
0edbf3f073
Tridium Fox script, probes, sslports.
2016-09-07 03:49:31 +00:00
fyodor
1124811015
Just added Roy Hills as a second author since he wrote most of the contents (he is already credited in the description, but it felt weird to not have him listed as an author too)
2016-09-03 05:49:09 +00:00
nnposter
45ba24dfe2
Corrects another stale http.pipeline_go() reference
2016-09-02 14:03:21 +00:00
nnposter
f1443b3e78
Replaces deprecated function name with its current equivalent in http.lua documentation example
2016-09-02 12:36:00 +00:00
nnposter
c3f6425047
Disables Cisco IOS probe paths that are likely redundant
2016-09-01 19:25:38 +00:00
dmiller
0df1867dd1
Convert tls.lua from bin.(un)pack to Lua 5.3 string.(un)pack
2016-08-31 02:32:27 +00:00
dmiller
1bbd6c8e90
Fix a bug: forgot to pass in the protocol version
2016-08-31 02:32:25 +00:00
nnposter
9ef2633c7e
Cleans up the fingerprint file with a few trivialities
2016-08-31 01:05:58 +00:00
nnposter
fc69ad90b2
Adds a fingerprint for VMware ESXi hypervisor
2016-08-30 21:12:59 +00:00
nnposter
46f0e79a6c
Adds a fingerprint for Citrix NetScaler
2016-08-30 21:11:32 +00:00
nnposter
6545995cb3
Adds a fingerprint for Xerox WorkCentre/ColorQube
2016-08-30 21:10:27 +00:00
nnposter
3af4a0c20c
Adds a fingerprint for Schneider Modicon Web Server
2016-08-30 21:09:24 +00:00
nnposter
24e6547a08
Adds a fingerprint for Zabbix monitoring
2016-08-30 21:07:49 +00:00
nnposter
3419a71b24
Adds a fingerprint for HP Storage Management Utility
2016-08-30 21:06:02 +00:00
dmiller
3d377e07ee
tftp-enum: Don't brute cisco names with custom wordlists. Fixes #117 . Closes #355
2016-08-30 18:59:57 +00:00
nnposter
3ea1cdf460
Reduces false-positives by treating 404 as a failed authentication
2016-08-30 16:12:30 +00:00
dmiller
8779c1e376
Fix a crash in ssl-enum-ciphers when parsing unsupported cert types
2016-08-30 16:07:08 +00:00
dmiller
92f52de958
Remove trailing whitespace
2016-08-29 20:30:26 +00:00
dmiller
8c10485689
Fix MySQL version detection, greeting parsing. Fixes #529
2016-08-25 23:05:50 +00:00
