1
0
mirror of https://github.com/nmap/nmap.git synced 2025-12-15 20:29:03 +00:00
Commit Graph

2589 Commits

Author SHA1 Message Date
fyodor
1c94622d0f Oops, forgot to check this in after last chat w/David 2009-04-13 20:58:29 +00:00
batrick
05fdc6ed90 Added note about NSE being rewritten in Lua. 2009-04-12 01:41:19 +00:00
david
6b4c3c5532 Replace random-1.xml and random-2.xml with bigger scans that include OS
detection. Update README.
2009-04-10 19:14:18 +00:00
david
4c13088d1e Use "Host is up.", not "Host appears to be up." to match Nmap output. 2009-04-10 19:08:48 +00:00
david
c701b9559b Merge from /nmap-exp/david/ndiff-mkii and
/nmap-exp/david/zenmap-ndiff-alt. This is the new Ndiff output format
described in http://seclists.org/nmap-dev/2009/q1/0825.html and
http://seclists.org/nmap-dev/2009/q2/0127.html.
2009-04-10 19:07:39 +00:00
david
e69ae791cb Fix an identifier in a TODO comment. 2009-04-08 20:04:54 +00:00
bmenrigh
24fbedd748 Changed two OS scan error() calls to LOG_STDOUT instead. They aren't
errors and having them go to STDERR could be confusing.
2009-04-08 01:14:48 +00:00
bmenrigh
b38b5f6270 Changed a few error() calls to log_write(). Removed the (redundant)
"\n" from a few error() calls.  Changed a few f?printf() calls to
error() or log_write().

Most notably, I didn't change any of the --interactive printf()s or
the usage printf() call.

I think we should draw up some internal notes on when to use
LOG_STDOUT versus LOG_PLAIN versus all the other LOG_* options.
2009-04-07 23:10:51 +00:00
bmenrigh
ae9def6d85 Handled all of our stray uses of .*\r\n.* and variations like .*\n.*\n
by collapsing them to a single .* and making sure that the DOTALL
(PCRE s modifier) is set on the match.  This should dramatically cut
down on cases where MATCHLIMIT is returned.  See
http://seclists.org/nmap-dev/2009/q2/0086.html for a discussion.  I
chose to only use .* in this patch even though .*? will be faster in
some cases.  I felt the speed benefit of .*? did not outweigh the
relative obscurity of lazy quantifiers.  I have some ideas on how
audit matches for performance and some ideas on optimizations that can
be done.  .*? and friends will have wait.
2009-04-07 21:51:36 +00:00
david
be8e612547 Note Zenmap Cancel button in CHANGELOG. 2009-04-06 17:09:58 +00:00
batrick
918a3955d5 Fixed banner.nse to remove surrounding whitespace in the banner.
For example, this removed SSH greetings final two characters: carriage return
and newline.
2009-04-06 16:00:18 +00:00
david
0be972cbc5 Merge from /nmap-exp/david/ncat-proxy. This adds support for
--proxy-auth in listen mode.
2009-04-06 15:42:58 +00:00
jah
7a23fa793e Added nse_main.lua to NSIS installer and zip package. 2009-04-05 20:09:51 +00:00
jah
8017d98f9f Remove nse_init.cc and nse_init.h from nmap.vcproj - files deleted during
nse-lua-merge in r12887
2009-04-05 19:50:32 +00:00
batrick
37bbb40520 Merge of nse-lua (nse-lua-merge) minus most enchancements that were
not directly related to the change from C++ to Lua for the NSE main
procedures.

The changes are discussed in the nse-lua thread here:
http://seclists.org/nmap-dev/2009/q1/0047.html
2009-04-05 06:01:27 +00:00
bmenrigh
9bf557485b o Expanded and tweaked the product/version/info of service scans in an
attempt to reduce the number of warnings like "Warning: Servicescan
  failed to fill info_template...".  Parts of this change include:
  o Improved the text of the warning to be less confusing
  o Increased the internal version info buffer to 256 chars from 128
  o Increased the final version string length to 160 from 128 chars
  o Changed the behavior when constructing the final version string so
    that if it runs out of space, rather than dropping the output of that
    template it truncates the template with ...
  o Fixed the printing of unneeded spaces between templates when one of the
    templates isn't going to be printed at all.
2009-04-05 02:02:15 +00:00
david
5baf65e653 Work around a Windows Zenmap crash reported by Henry Nymann. It is caused by a
GTK+ bug:
http://bugzilla.gnome.org/show_bug.cgi?id=552681
The workaround, to use a gtk.Notebook with tabs on top rather than on the side,
was suggested by Guilherme Polo.
2009-04-03 19:13:30 +00:00
david
1736b28317 [Zenmap] Gracefully handle unrecognized port states in the hosts
viewer. Apparently old versions of Nmap can return a state of
"unknown". This prevents this crash:
    File "radialnet\gui\NodeNotebook.pyo", line 107, in __init__
    File "radialnet\gui\NodeNotebook.pyo", line 257, in __create_widgets
  KeyError: u'unknown'
2009-04-03 15:31:08 +00:00
ron
80b53d8ffa Fixed a comment -- said 'windows 2003' where it should have been 'windows 2000' 2009-04-03 13:29:04 +00:00
bmenrigh
c01e0c56e3 Added match by Tom Sellers for Service Pack 3 of Microsoft SQL Server 2005. 2009-04-03 00:15:38 +00:00
david
7e2b32e6ed Fix an error with smb-check-vulns.nse Conficker error help. I was catching the
error at the wrong level, so not all possible errors were being run through the
help table. Specifically, errors returned msrpc.start_smb and msrpc.bind, which
included at least NT_STATUS_OBJECT_NAME_NOT_FOUND, didn't get the explanatory
text. I made a mistake in testing the error reporting the first time around.
2009-04-02 17:26:04 +00:00
ron
cd9098c48b Revert part of my previous commit -- forgot to remove some test code 2009-04-02 14:10:56 +00:00
ron
08fadd08fc Fixed a bug where the scan would hit a nil-pointer exception when scanning broken implementations (reported by Steve Horejsi -- http://www.skullsecurity.org/blog/?p=209&cpage=2#comment-219). This was due to using incorrect variable names. 2009-04-02 14:09:52 +00:00
fyodor
28c491c744 Improve wording 2009-04-02 03:51:30 +00:00
fyodor
fe08d0631d A couple more updates for the CHANGELOG 2009-04-02 02:49:40 +00:00
fyodor
ce8fc3ea9b CHANGELOG for 4.85BETA7 2009-04-02 02:40:24 +00:00
david
09762c4d85 Add helpful text for the two most common errors seen in the Conficker
check in smb-check-vulns.nse: NT_STATUS_OBJECT_NAME_NOT_FOUND and
NT_STATUS_ACCESS_DENIED. Ron and I found the best explanations for these
that we could. There is another error, NT_STATUS_NOT_SUPPORTED, which is
less common than these but has been observed. We still don't have a clue
as to the cause of that one.
2009-04-02 02:27:47 +00:00
fyodor
fbb8a659a5 New generated files in prep for 4.85BETA7 release 2009-04-02 01:42:15 +00:00
ron
4b81a92681 Fixed a bug reported where running openssl.encrypt() on an emptys tring would cause an assertion failure. I fixed it by printing a warning message if an empty challenge is encountered and faking out the challenge (if they sent an empty challenge, they're breaking the protocol anyways). This will cause the login to fail, and it will fall back to an anonymous check. 2009-04-02 01:14:15 +00:00
fyodor
46695b1a60 An idea that Brandon is working on 2009-04-01 22:56:08 +00:00
ron
5939934979 Fixed a potential global variable mistake in smb-server-stats.nse 2009-04-01 18:23:18 +00:00
ron
dde55ed602 Added a change to eliminate possible false negatives 2009-04-01 12:23:21 +00:00
ron
f157387be1 Changed message when checks are disabled (it seemed to be confusing people) 2009-04-01 03:31:13 +00:00
fyodor
b9d845b9ab Change 10 to 10.0 in pow() calls to make it clear that it is a double 2009-03-31 22:29:03 +00:00
fyodor
d46395db25 Nmap 4.85BETA6 autobuilt and version files 2009-03-31 22:19:16 +00:00
fyodor
2bf410a185 CHANGELOG for 4.85BETA6 2009-03-31 22:10:20 +00:00
david
16121b372c Add a round trip time estimate to host status lines. It looks like
Host scanme.nmap.org (64.13.134.52) is up (0.071s latency).
2009-03-31 21:21:36 +00:00
ron
74ffd7b4c7 Raise timeout for SMB scans to 20 seconds -- I got several error reports due to timeouts 2009-03-31 20:30:45 +00:00
david
d1a77bb85e Simplify and combine the write_host_status code for ping scan and port
scans. This is the code that prints
	Host ... appears to be up.
	Host ... appears to be down.
	Host ... appears to be up ... good.
	Host ... appears to be down, skipping it
Except that now these messages are uniform and are
	Host ... is up.
	Host ... is down.
In addition, the host state --reason information is printed for port
scans just as for ping scans, which appears to have been an oversight
before.
2009-03-31 19:57:25 +00:00
david
fbb73481d3 Zenmap] A typo that led to a crash if the ndiff subprocess
terminated with an error was fixed. The message was
  File "zenmapGUI\DiffCompare.pyo", line 331, in check_ndiff_process
UnboundLocalError: local variable 'error_test' referenced before assignment
2009-03-31 19:35:41 +00:00
david
7872aafa5d Update the global o.numhosts_scanning variable within ultra_scan, so
that it is set properly for ping scan. Previously status reports during
ping scan always looked like

Stats: 25:34:33 elapsed; 991232 hosts completed (72530 up), 0 undergoing Ping Scan

Note the "0 undergoing". Now that number will be set to 4096 or whatever
the current ping scan group size happens to be.
2009-03-31 18:29:52 +00:00
david
1e6204ffe0 [Zenmap] A crash was fixed:
File "zenmapGUI\SearchGUI.pyo", line 582, in operator_changed
  KeyError: "Syst\xc3\xa8me d'Exploitation"
The text could be different, because the error was caused by
translating a string that was also being used as an index into an
internal data structure. The string will be untranslated until that
part of the code can be rewritten.
2009-03-31 16:55:24 +00:00
david
8fef386595 Add a new generic match line for SSLv3-only servers to
nmap-service-probes. This replaces an incomplete set of specific match
lines, though a few of those have been retained where they might give
information on the OS or SSL implementation. There is also a new probe
that works against SSLv2-only servers. The patch is from Kristof
Boeynaems.
2009-03-31 16:14:14 +00:00
ron
cf73d9eb03 Fixed a bug where every host showed up as 'infected'.. oops\! 2009-03-31 15:18:03 +00:00
ron
75b44c30ac Fix for forgotten endian-modifier (caused errors on Solaris) -- Stephane Rose pointed it out 2009-03-31 15:08:33 +00:00
ron
70275c69c3 Fixed a small output bug in smb-check-vulns where it would print 'PATCHED' if an error occurred (in addition to the error message) 2009-03-31 15:04:10 +00:00
ron
f4575514af Updated Conficker detection: change some constants, better error checking for MS08-067 patch (tell the user if the system has a jury-rigged patch instead of a cryptic error) 2009-03-31 14:14:24 +00:00
david
a0f101cb5c Don't use strtok to parse the argument to --script. Because strtok
inserts null characters it was effectively truncating the option
argument value after it was done with it. So --script=a,b,c would become
--script=a in log files.
2009-03-31 04:32:38 +00:00
fyodor
eccc235d5a Increase copyright year to 2009, simplify/reword some derivative works text, and remove a confusing clause about selling proprietary front-ends to Nmap 2009-03-31 04:16:12 +00:00
david
c22a3dd23b Remove the defunct U1.RUL, U1.TOS, IE.DLI, IE.SI, and IE.TOSI tests from
nmap-os-db.
2009-03-31 02:08:35 +00:00