1
0
mirror of https://github.com/nmap/nmap.git synced 2025-12-09 22:21:29 +00:00
Commit Graph

2465 Commits

Author SHA1 Message Date
nnposter
14cfbc6084 Improves efficiency of script http-default-accounts by sharing probe results across fingerprints. Closes #516 2016-08-19 15:01:04 +00:00
dmiller
265e32dbd6 Avoid a couple potential format string problems 2016-08-18 23:53:45 +00:00
abhishek
6e983b9e45 Fix timeout problem for http-slowloris 2016-08-17 06:33:30 +00:00
dmiller
23ed953352 Check for non-200 responses that may indicate url is present. 2016-08-16 04:52:11 +00:00
nnposter
aaa4508ceb Updated @output and @xmloutput documentation sections in script ssl-enum-cpihers to be consistent. Fixes #475 2016-08-11 23:56:18 +00:00
nnposter
f3ee542683 Changed weak cipher strength threshold from 128 to 112 bits in script ssl-enum-ciphers. Fixes #474 2016-08-11 23:47:31 +00:00
paulino
26bec9be41 Fixes incorrect argument name in documentation 2016-07-30 21:58:56 +00:00
nnposter
367dc67f5a Re-wrapped description output in script ssl-poodle. Fixes #481 2016-07-29 21:47:27 +00:00
nnposter
b9c4c12462 Re-wrapped description output in script ssl-dh-params. Fixes #476 2016-07-29 16:50:32 +00:00
dmiller
4486148760 Remove an unnecessary debug statement from development 2016-07-28 05:11:33 +00:00
dmiller
4fa478cea4 Check for non-404 file nonexistence responses in http-config-backup 2016-07-22 15:52:30 +00:00
dmiller
b019b4a369 Add clock-skew.nse to version control (oops!) 2016-07-22 14:33:47 +00:00
dmiller
f002aee6a9 Add TLSA type to dns-zone-transfer, refactor bto16 2016-07-21 22:27:30 +00:00
dmiller
5b7a07b6c9 Add clock-skew script, datetime library 2016-07-21 17:05:25 +00:00
dmiller
be3cd99dbc Add missing require 2016-07-21 17:05:23 +00:00
dmiller
033d77540a Use formulas.lua for mean, stddev in dns-cache-snoop 2016-07-21 17:05:22 +00:00
dmiller
e81b4a719a Update wdb-version to Lua5.3 syntax 2016-07-17 04:56:30 +00:00
dmiller
95f7b76d9f Avoid 'baseoid' output when snmp-hh3c-logins fails. 2016-07-13 17:51:09 +00:00
dmiller
0ac0d8f505 Fix globals, whitespace 2016-07-08 04:36:31 +00:00
dmiller
b47c55dc6e Add sslv2-drown. Closes #365 2016-07-07 16:35:39 +00:00
dmiller
17040f4cf1 Move core of sslv2.nse into sslv2.lua so other scripts can use it. Cache results in registry. 2016-07-07 16:35:37 +00:00
dmiller
d6fbe8b2ca Refactor some code from sslv2.nse into sslv2.lua 2016-07-07 16:35:36 +00:00
tomsellers
63c9a1f8c0 NSE: added output to docker-version.nse 2016-07-07 00:04:15 +00:00
tomsellers
5ca3902b3a NSE: fix bug in docker-version.nse that transposed version and name 2016-07-06 19:37:56 +00:00
batrick
7f5ec526fe Merge branch 'nse-lua53'
Lua 5.3 adds several awesome features of particular interest to nmap including
bitwise operators and integers, a utf8 library, and standard binary pack/unpack
functions.

In addition to adding Lua 5.3, this branch changes:

o Complete removal of the NSE bit library (in C), It has been replaced with
  a new Lua library wrapping Lua 5.3's bit-wise operators.

o Complete removal of the NSE bin library (in C). It has been replaced with a
  new Lua library wrapping Lua 5.3's string.pack|unpack functions.

o The bin.pack "B" format specifier (which has never worked correctly) is
  unimplemented.  All scripts/libraries which use it have been updated. Most
  usage of this option was to allow string based bit-wise operations which are no
  longer necessary now that Lua 5.3 provides integers and bit-wise operators.

o The base32/base64 libraries have been reimplemented using Lua 5.3's new
  bitwise operators. (This library was the main user of the bin.pack "B" format
  specifier.)

o A new "bits" library has been added for common bit hacks. Currently only has
  a reverse function.

Thanks to David Fifield, Daniel Miller, Jacek Wielemborek, and  Paulino
Calderon for testing this branch.
2016-07-02 17:02:27 +00:00
dmiller
0d12307030 Improve parsing and request building in sslv2. Part of #365 2016-06-30 17:01:21 +00:00
dmiller
9c42f852c7 Fix incorrectly labeled prime in ssl-dh-params. Closes #347 2016-06-30 14:25:59 +00:00
dmiller
26fb5d6f99 Return NOT_VULN report instead of 'false' in http-frontpage-login 2016-06-26 04:15:17 +00:00
dmiller
c6be42d88b Avoid blank output from http-fileupload-exploiter 2016-06-26 04:15:16 +00:00
dmiller
822b2d593a Don't run tor-consensus-checker on private/reserved IPs 2016-06-26 04:15:15 +00:00
dmiller
dc4c9927d9 Fix a format string crash (missing formatted value) in targets-ipv6-map4to6 2016-06-25 20:22:01 +00:00
dmiller
91c379fa92 Avoid an error in imap-ntlm-info when starttls fails 2016-06-25 19:43:31 +00:00
dmiller
1c16a55227 New script: http-mcmp. Closes #304 2016-06-25 19:23:26 +00:00
paulino
bff2dc4563 Adds clamav-exec.nse to detect ClamAV servers vulnerable to remote clamav command execution 2016-06-20 05:50:04 +00:00
dmiller
a2ed5c4a30 Lua strings are 1-indexed. This is not a bug for now, but is incorrect. 2016-06-18 15:49:18 +00:00
paulino
540494a92d Adds http-aspnet-debug to detect ASP.NET applications with debugging enabled. 2016-06-18 14:51:03 +00:00
dmiller
60a1c85a93 Properly cache enterprise numbers for snmp-info (was parsing for every target) 2016-06-17 16:11:33 +00:00
dmiller
cb4b46bd53 Canonicalize authors as tables instead of comma-separated strings 2016-06-09 22:46:42 +00:00
batrick
b3a88696ef Revert "NSE: make minor adjustments to script"
This reverts commit 317eb0de31f40454cd213296e6cee71c1f78e006.

This commit started as a way to fix perceived problems but eventually I found
the script worked correctly (I had a misunderstanding of the purpose). I kept
the small changes but ended up breaking the script anyway. So let's just revert
this.
2016-06-09 12:25:19 +00:00
dmiller
39018e3e91 Check for RSA exponent of 1, resulting in F score 2016-06-09 04:36:09 +00:00
batrick
baef5e0c08 Merge branch 'http-internal-ip-disclosure'
* http-internal-ip-disclosure:
  NSE: make minor adjustments to script
  NSE: add new script http-internal-ip-disclosure
  http-internal-ip-disclosure branch
2016-06-08 23:18:47 +00:00
paulino
51c6260f85 Fixes usage documentation 2016-06-05 20:06:25 +00:00
fyodor
37095358e0 Fix the @usage to correct form 2016-05-30 06:39:31 +00:00
dmiller
7203767031 Fix nsedoc (hanging indent dropped some characters) for http-fetch 2016-05-26 13:47:04 +00:00
dmiller
0896c64bae Add xml output to resolveall, improve warnings 2016-05-25 20:14:13 +00:00
abhishek
168ac74f40 Closes #366 2016-05-23 15:32:24 +00:00
dmiller
0c6a3a6256 Alow bare "wpad" name to be resolved
Previously, if a host had not domain set, the script would crash when
trying to get the domain portion of the reverse-DNS name. Now, it adds
the blank string and tries to resolve the bare hostname "wpad".
2016-05-23 04:30:06 +00:00
dmiller
9450cb725a Avoid boolean tautologies of the form 'not x == y'
Lua operator 'not' has higher precedence than '==', so the statement

    not x == "something"

is equivalent to:

    (not x) == "something"

which will always be false, since the value of 'not x' will be either
'true' or 'false' and the string "something" is not the boolean 'true'
or 'false'. This is usually resolved by using the '~=' operator.
2016-05-23 04:30:06 +00:00
dmiller
5be0ac591b Avoid a crash when host has no domain configured 2016-05-23 04:30:05 +00:00
paulino
363397b948 Fixes #379. Script was not reporting the NOT_VULN state correctly 2016-05-16 15:11:32 +00:00