1
0
mirror of https://github.com/nmap/nmap.git synced 2025-12-09 06:01:28 +00:00
Commit Graph

2456 Commits

Author SHA1 Message Date
dmiller
4486148760 Remove an unnecessary debug statement from development 2016-07-28 05:11:33 +00:00
dmiller
4fa478cea4 Check for non-404 file nonexistence responses in http-config-backup 2016-07-22 15:52:30 +00:00
dmiller
b019b4a369 Add clock-skew.nse to version control (oops!) 2016-07-22 14:33:47 +00:00
dmiller
f002aee6a9 Add TLSA type to dns-zone-transfer, refactor bto16 2016-07-21 22:27:30 +00:00
dmiller
5b7a07b6c9 Add clock-skew script, datetime library 2016-07-21 17:05:25 +00:00
dmiller
be3cd99dbc Add missing require 2016-07-21 17:05:23 +00:00
dmiller
033d77540a Use formulas.lua for mean, stddev in dns-cache-snoop 2016-07-21 17:05:22 +00:00
dmiller
e81b4a719a Update wdb-version to Lua5.3 syntax 2016-07-17 04:56:30 +00:00
dmiller
95f7b76d9f Avoid 'baseoid' output when snmp-hh3c-logins fails. 2016-07-13 17:51:09 +00:00
dmiller
0ac0d8f505 Fix globals, whitespace 2016-07-08 04:36:31 +00:00
dmiller
b47c55dc6e Add sslv2-drown. Closes #365 2016-07-07 16:35:39 +00:00
dmiller
17040f4cf1 Move core of sslv2.nse into sslv2.lua so other scripts can use it. Cache results in registry. 2016-07-07 16:35:37 +00:00
dmiller
d6fbe8b2ca Refactor some code from sslv2.nse into sslv2.lua 2016-07-07 16:35:36 +00:00
tomsellers
63c9a1f8c0 NSE: added output to docker-version.nse 2016-07-07 00:04:15 +00:00
tomsellers
5ca3902b3a NSE: fix bug in docker-version.nse that transposed version and name 2016-07-06 19:37:56 +00:00
batrick
7f5ec526fe Merge branch 'nse-lua53'
Lua 5.3 adds several awesome features of particular interest to nmap including
bitwise operators and integers, a utf8 library, and standard binary pack/unpack
functions.

In addition to adding Lua 5.3, this branch changes:

o Complete removal of the NSE bit library (in C), It has been replaced with
  a new Lua library wrapping Lua 5.3's bit-wise operators.

o Complete removal of the NSE bin library (in C). It has been replaced with a
  new Lua library wrapping Lua 5.3's string.pack|unpack functions.

o The bin.pack "B" format specifier (which has never worked correctly) is
  unimplemented.  All scripts/libraries which use it have been updated. Most
  usage of this option was to allow string based bit-wise operations which are no
  longer necessary now that Lua 5.3 provides integers and bit-wise operators.

o The base32/base64 libraries have been reimplemented using Lua 5.3's new
  bitwise operators. (This library was the main user of the bin.pack "B" format
  specifier.)

o A new "bits" library has been added for common bit hacks. Currently only has
  a reverse function.

Thanks to David Fifield, Daniel Miller, Jacek Wielemborek, and  Paulino
Calderon for testing this branch.
2016-07-02 17:02:27 +00:00
dmiller
0d12307030 Improve parsing and request building in sslv2. Part of #365 2016-06-30 17:01:21 +00:00
dmiller
9c42f852c7 Fix incorrectly labeled prime in ssl-dh-params. Closes #347 2016-06-30 14:25:59 +00:00
dmiller
26fb5d6f99 Return NOT_VULN report instead of 'false' in http-frontpage-login 2016-06-26 04:15:17 +00:00
dmiller
c6be42d88b Avoid blank output from http-fileupload-exploiter 2016-06-26 04:15:16 +00:00
dmiller
822b2d593a Don't run tor-consensus-checker on private/reserved IPs 2016-06-26 04:15:15 +00:00
dmiller
dc4c9927d9 Fix a format string crash (missing formatted value) in targets-ipv6-map4to6 2016-06-25 20:22:01 +00:00
dmiller
91c379fa92 Avoid an error in imap-ntlm-info when starttls fails 2016-06-25 19:43:31 +00:00
dmiller
1c16a55227 New script: http-mcmp. Closes #304 2016-06-25 19:23:26 +00:00
paulino
bff2dc4563 Adds clamav-exec.nse to detect ClamAV servers vulnerable to remote clamav command execution 2016-06-20 05:50:04 +00:00
dmiller
a2ed5c4a30 Lua strings are 1-indexed. This is not a bug for now, but is incorrect. 2016-06-18 15:49:18 +00:00
paulino
540494a92d Adds http-aspnet-debug to detect ASP.NET applications with debugging enabled. 2016-06-18 14:51:03 +00:00
dmiller
60a1c85a93 Properly cache enterprise numbers for snmp-info (was parsing for every target) 2016-06-17 16:11:33 +00:00
dmiller
cb4b46bd53 Canonicalize authors as tables instead of comma-separated strings 2016-06-09 22:46:42 +00:00
batrick
b3a88696ef Revert "NSE: make minor adjustments to script"
This reverts commit 317eb0de31f40454cd213296e6cee71c1f78e006.

This commit started as a way to fix perceived problems but eventually I found
the script worked correctly (I had a misunderstanding of the purpose). I kept
the small changes but ended up breaking the script anyway. So let's just revert
this.
2016-06-09 12:25:19 +00:00
dmiller
39018e3e91 Check for RSA exponent of 1, resulting in F score 2016-06-09 04:36:09 +00:00
batrick
baef5e0c08 Merge branch 'http-internal-ip-disclosure'
* http-internal-ip-disclosure:
  NSE: make minor adjustments to script
  NSE: add new script http-internal-ip-disclosure
  http-internal-ip-disclosure branch
2016-06-08 23:18:47 +00:00
paulino
51c6260f85 Fixes usage documentation 2016-06-05 20:06:25 +00:00
fyodor
37095358e0 Fix the @usage to correct form 2016-05-30 06:39:31 +00:00
dmiller
7203767031 Fix nsedoc (hanging indent dropped some characters) for http-fetch 2016-05-26 13:47:04 +00:00
dmiller
0896c64bae Add xml output to resolveall, improve warnings 2016-05-25 20:14:13 +00:00
abhishek
168ac74f40 Closes #366 2016-05-23 15:32:24 +00:00
dmiller
0c6a3a6256 Alow bare "wpad" name to be resolved
Previously, if a host had not domain set, the script would crash when
trying to get the domain portion of the reverse-DNS name. Now, it adds
the blank string and tries to resolve the bare hostname "wpad".
2016-05-23 04:30:06 +00:00
dmiller
9450cb725a Avoid boolean tautologies of the form 'not x == y'
Lua operator 'not' has higher precedence than '==', so the statement

    not x == "something"

is equivalent to:

    (not x) == "something"

which will always be false, since the value of 'not x' will be either
'true' or 'false' and the string "something" is not the boolean 'true'
or 'false'. This is usually resolved by using the '~=' operator.
2016-05-23 04:30:06 +00:00
dmiller
5be0ac591b Avoid a crash when host has no domain configured 2016-05-23 04:30:05 +00:00
paulino
363397b948 Fixes #379. Script was not reporting the NOT_VULN state correctly 2016-05-16 15:11:32 +00:00
dmiller
2b77e83abb Avoid output when ssl-date fails (e.g. non-STARTTLS SMTP) 2016-05-02 16:09:28 +00:00
dmiller
fb6d2a5567 Deprecate SHA-1 certs in ssl-enum-ciphers. Closes #370 2016-05-02 13:55:17 +00:00
dmiller
b341915722 Deprecate RC4 ciphersuites 2016-05-02 13:55:16 +00:00
dmiller
fbdd7f53d9 Don't crash when portmapper reports non-tcp/udp transports. Fixes #363 2016-04-18 05:11:57 +00:00
dmiller
20d6d17c2c Support (unlikely) TLS NPN checking for STARTTLS-type services 2016-04-11 20:42:03 +00:00
dmiller
a24006e0b7 Check the appropriate functions in portrules for SSL/TLS 2016-04-11 20:42:02 +00:00
tomsellers
0699edbe05 NSE: ldap-rootdse.nse improve error handling 2016-04-11 18:04:53 +00:00
tomsellers
12e9af5b1b Adjust indentation on rpcinfo.nse, no fuctionality changes 2016-04-10 14:19:51 +00:00
tomsellers
ee4ed66956 Added support for LDAP over udp to ldap-rootdse.nse.
Also added version detection and information extraction to match the
new LDAP LDAPSearchReq and LDAPSearchReqUDP probes. Closes #362
2016-04-09 21:33:26 +00:00