8 Commits

Author	SHA1	Message	Date
fyodor	f79a11aeeb	o [NSE] Oops, there was a vulnerability in one of our 437 NSE scripts. ... If you ran the (fortunately non-default) http-domino-enum-passwords script with the (fortunately also non-default) domino-enum-passwords.idpath parameter against a malicious server, it could cause an arbitrarily named file to to be written to the client system. Thanks to Trustwave researcher Piotr Duszynski for discovering and reporting the problem. We've fixed that script, and also updated several other scripts to use a new stdnse.filename_escape function for extra safety. This breaks our record of never having a vulnerability in the 16 years that Nmap has existed, but that's still a fairly good run. [David, Fyodor]	2013-07-29 06:19:24 +00:00
dmiller	f42dde7ba2	Document some undocumented script-args	2013-03-05 22:31:39 +00:00
batrick	000f6dc4d9	Lua 5.2 upgrade [1] for NSE. ... [1] http://seclists.org/nmap-dev/2012/q2/34	2012-05-27 08:53:32 +00:00
batrick	fd80c2d0a6	fixed bad escape sequences	2012-04-02 08:13:54 +00:00
paulino	26dc09ad43	Gets arguments with stdnse.get_script_args instead of reading them from nmap.registry	2011-07-27 03:28:13 +00:00
fyodor	2dd295a266	Minor NSEDoc summary cleanup	2011-01-21 08:28:38 +00:00
fyodor	a84c2e4498	Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG	2011-01-14 10:20:51 +00:00
patrik	c9ba464c28	Renamed domino-enum-passwords script to http-domino-enum-passwords	2010-12-15 08:52:31 +00:00