henri
3c3b936391
Indentation fix.
2012-08-01 07:03:53 +00:00
david
d5e5d8c5bd
Remove "Server time" from ssl-date output.
...
This makes it match http-date more closely.
2012-07-31 20:57:30 +00:00
david
7cb7cbe163
Docs and output in ssl-date.nse.
2012-07-31 19:18:10 +00:00
aca
fc102a5ef4
Added ssl-date script
2012-07-31 19:11:10 +00:00
henri
dfdaadccb1
Style changes:
...
- Consistent variable naming
- Default parameters cleanup
- removed unused variables (like "local t = nmap.timing_level()")
- renamed functions consistently
- removed typo from function name ("worker_schedluer")
- consistent debug messages format
2012-07-31 18:12:28 +00:00
david
a2c2863531
Remove "hardmatched" argument from calls to nmap.set_port_version.
...
This is the default and can be omitted. Seeing as the value of this
argument was "hardmatched" in 100% of cases, we're better off pretending
the parameter doesn't exist.
2012-07-30 18:58:32 +00:00
david
453131b820
set_port_version in servicetags.nse.
...
The name, servicetags, is the same one as for the TCP port, but it
doesn't have enough popularity in nmap-services-all to appear in
nmap-services.
2012-07-30 18:58:25 +00:00
aca
4c4ce195df
Added smb-vuln-ms10-061 script from my dev branch
2012-07-30 09:48:03 +00:00
ron
e4823340d8
Fixed http-exif-spider - it used to be a symbolic link, by mistake - also updated script.db.
2012-07-29 21:49:32 +00:00
ron
4bd886cd9f
Removing http-exif-spider temporarily
2012-07-29 21:48:51 +00:00
patrik
bca0025032
nse_check_global cleanup
2012-07-29 09:26:23 +00:00
david
1441aea655
Reduce the number of names tried by http-vhosts by default.
...
Vlatko reported that this script was taking an inordinate amount of time
even in typical scans. This patch reduces the number of domains tried by
default. The new http-vhosts.filelist script argument allows
substituting the original list or another of your choosing.
Patch by Vlatko.
http://seclists.org/nmap-dev/2012/q3/432
2012-07-29 03:39:11 +00:00
dmiller
b868e7f3ce
Move caching code to datafiles lib
...
Scripts no longer need to implement caching of datafiles tables in the
registry, since the datafiles.lua library keeps its own cache in the
registry. A side-effect is that scripts should not change the tables
returned by datafiles.parse_{protocols,rpc,services,mac_prefixes}(), as
doing so will affect all other scripts that use those functions.
2012-07-27 20:07:38 +00:00
ron
959d9a67d3
Adding a new script - http-exif-spider.nse. It spiders a Web site looking for .jpeg images, and displays the image metadata (camera information, date, and geotag data).
2012-07-27 19:38:51 +00:00
patrik
4b77d989e2
added newtarget support to snmp-netstat script, allowing it to identify and
...
add new targets to the scan queue.
2012-07-26 13:49:03 +00:00
david
5e588b53da
More direct printing of remotes in http-git.
...
Show the uninterpreted remote URLs in every case. When matching specific
services, show the guesses about where the source might be hosted, but
remove verbose interpretation like "accessed over SSH".
Before:
| Remote: git@github.com:skullspace/breachdb.git
| GitHub remote: skullspace/breachdb (accessed over SSH)
|_ -> Source might be at https://github.com/skullspace/breachdb
After:
| Remote: git@github.com:skullspace/breachdb.git
|_ -> Source might be at https://github.com/skullspace/breachdb
2012-07-26 06:00:48 +00:00
david
c367d03916
Extract raw remote URLs in http-git.
2012-07-26 06:00:47 +00:00
david
8f907ae853
Local variable.
2012-07-26 06:00:45 +00:00
ron
ea5e4e07ae
Updated http-git - bugfixes, and also handles multiple roots with script-args
2012-07-25 01:47:43 +00:00
patrik
7880043ee2
minor fix in stun-version to remove a warning from ipOps.fromdword
...
indentation fix in stun-version
2012-07-24 12:05:57 +00:00
patrik
be858f4a7d
further improoved http-google-malware.nse malware detection by adding response
...
code checks.
2012-07-24 10:33:39 +00:00
patrik
b0c8a758a0
fixed bug where script would return "Host is safe to browse.", when an invalid
...
API key was being used.
2012-07-24 10:11:09 +00:00
patrik
217b27bace
nse_check_globals cleanup
2012-07-24 10:08:43 +00:00
perdo
8025ba5a5a
Added some checks for http response's body being nil.
2012-07-23 22:47:11 +00:00
jah
a1abb40d50
Removed extraneous newline from a couple of print_debug strings.
2012-07-23 22:25:51 +00:00
perdo
09f7b93949
Modify http-enum and http-fingerprints file so they work with http pipeline better.
2012-07-23 21:55:13 +00:00
aca
6fec00655d
Added smb-ms10-054 vuln check script to trunk
2012-07-23 09:52:38 +00:00
patrik
977996e5fa
o [NSE] Added rdp library and the script rdp-enum-encryption that enumerates
...
both the Security Layer and Encryption level of the RDP service. [Patrik
Karlsson]
2012-07-21 21:24:14 +00:00
aca
096e40d470
Added different message in case we determine that DoS is not due to slowloris and fixed an issue with try_ssl
2012-07-21 16:33:44 +00:00
david
3f7db8b9d3
Add flume-master-info.nse by John Bond.
2012-07-21 08:07:49 +00:00
aca
4eb88d2cde
Added ssl support to http-slowloris
2012-07-20 15:49:23 +00:00
ron
8b42180f31
Removed an errant call to ap(config) that ended up in the committed version of the script
2012-07-20 04:43:55 +00:00
david
72b0056fb5
Add http-get.nse by Alex Weber.
...
http://seclists.org/nmap-dev/2012/q2/935
2012-07-19 18:15:02 +00:00
david
89e93d6836
--script-updatedb.
2012-07-19 18:14:21 +00:00
jah
1c783a920e
Fixed some problems which caused snmp-interfaces to always fail after obtaining info from the IF-MIB tree walk (invalid use of the percent escape char in the replacement param to gsub and other minor errors).
...
Fixed a problem which caused snmp-interfaces to always fail in the pre-scanning phase (attempt to index the undefined host table).
2012-07-19 17:21:55 +00:00
dmiller
1aeec5790e
Add more ssl-ciphers strength ratings
...
Ratings generated with this perl script:
https://gist.github.com/3130353
2012-07-18 22:14:30 +00:00
kroosec
ab2caee812
Updated lltd-discovery for parsing hostnames and outputing the network card manufacturer.
2012-07-18 12:50:11 +00:00
kroosec
6023e253dc
Changed sip-enum-users which now uses brute.lua for extensions enumeration and supports iteration over custom lists and numeric ranges.
2012-07-18 12:06:33 +00:00
aca
8c9d8f0bb9
Fixed an issue with wrong thread count, and the case when server crashes or is completly unavailable for some other reason
2012-07-17 19:26:18 +00:00
perdo
6b101769d7
Add a check to see if response from which we wish to extract links is not nil.
2012-07-17 18:06:44 +00:00
david
0288accd74
Copyedit http-slowloris docs.
2012-07-17 17:19:43 +00:00
perdo
2424c6d2a4
Add a check to see if reponse from which we wish to extract links is not nil.
2012-07-17 16:11:10 +00:00
paulino
7e9fff9dfb
Temp fix to reduce the number of times this script gets executed. This change removes it from the category "version"
2012-07-17 01:37:55 +00:00
patrik
ea7da393f4
update script to work with changes made to robtex website
2012-07-16 19:46:43 +00:00
aca
1e6344541a
Merged http-slowloris from my dev branch into trunk
2012-07-16 19:27:24 +00:00
henri
5df5c86029
Fixed inconsistent indentation, replaced spaces by tabs.
2012-07-13 23:07:06 +00:00
dmiller
4463296bf7
Modify ssl-enum-ciphers for speed and thoroughness
...
Send large groups of ciphers and eliminate chosen ones until the server
gives up. This results in far fewer exchanges than trying every cipher
individually.
Also fixed a bug introduced in r26521 where failing to send NULL
compressor results in a rejected handshake, and updated the list of
ciphers from 213 to 359.
http://seclists.org/nmap-dev/2012/q3/156
2012-07-13 22:40:00 +00:00
kroosec
e1793d5961
tls-nextprotoneg: Replaced hard fixed protocols search for a dynamic extraction one.
2012-07-13 10:29:35 +00:00
henri
51cf3b0df9
Fixed a false positive in http-vuln-cve2011-3192.nse, which detected Apache
...
2.2.22 as vulnerable.
The corresponding ChangeLog entry for Apache 2.2.22 says:
"""
Fix a regression introduced by the CVE-2011-3192 byterange fix in 2.2.20:
A range of '0-' will now return 206 instead of 200.
"""
https://issues.apache.org/bugzilla/show_bug.cgi?id=51878
2012-07-12 17:00:41 +00:00
aca
c6ed7023c4
Brute and unpwdb lib improvements that allow more flexible iterator specifications. Merge from my dev branch.
2012-07-10 16:35:48 +00:00
