fyodor
21949f4ee1
Note that -T4 sets the min-rtt-timeout to 100ms
2015-01-06 09:41:39 +00:00
dmiller
dbdf46a6b5
Nearly done with service fingerprint submissions
2015-01-04 02:28:03 +00:00
tomsellers
66981b2f72
MySQL match lines
...
- Edited info sections for consistency
- Changed regex based on MySQL packet spec to improve efficiency
- reorganized section
2015-01-02 01:15:38 +00:00
dmiller
ee4b2dfe5d
A TODO note for ssl-enum-ciphers
...
We recently became dependent on OpenSSL for some of ssl-enum-ciphers's
functionality (parsing certificates). We should have a decent fallback
(e.g. don't parse the certificate, issue a warning, and use a dummy
score).
[ci skip] This tells Travis to skip the CI build when this commit is
pushed, useful for documentation changes that don't affect the build.
2015-01-01 21:09:05 +00:00
dmiller
d1e429f42b
Don't crash when an NSE library (e.g. sasl) calls stdnse.debug during require
2015-01-01 21:09:03 +00:00
dmiller
2f02fa2935
Fix build when building without OpenSSL (since r33781)
2015-01-01 21:09:02 +00:00
tomsellers
10822d1633
More script updates to change Metasploit Redmine
...
references to valid Github URLs
2015-01-01 15:13:13 +00:00
tomsellers
d2622c0396
Fix reference in rmi-vuln-classloader.nse to point to Metasploit
...
Github repo as Metasploit Redmine is deprecated and requires
auth.
2015-01-01 14:59:35 +00:00
tomsellers
1371a3303e
Rework of PostgreSQL version detection -
...
Added detection for PostgreSQL 9.4 via line number match
Added windows platform detection
Reworked language specific sections for regex consistency and priority
Generated German softmatch from a more specific probe
Broadened French softmatch
Created language neutral universal softmatches for windows and non-windows platforms
2015-01-01 14:45:36 +00:00
dmiller
fc99bed706
Don't use unnecessary parens with __declspec
...
Reported by nnposter, this broke on VS2010. Pretty sure this was just a
simple mistake in the first place. Fixes #33
2015-01-01 13:39:47 +00:00
tomsellers
cda110fc55
Remove an incorrect version match labeled as ovm-manager (Oracle VM Manager). This was actually java rmi and used the same bytes as the java-rmi softmatch below it.
2015-01-01 12:12:16 +00:00
dmiller
fdf90c768c
Travis: our language is C++ (i.e. we need the CXX env variable set)
2014-12-31 05:12:39 +00:00
dmiller
04ac366666
Fix nsock tests using wrong type (clang complains)
2014-12-31 04:30:58 +00:00
dmiller
f6865b15ed
Travis: use faster container builds, and add make check
2014-12-31 04:30:56 +00:00
dmiller
7dacfcefa4
Prevent redeclaration of PCAP_NETMASK_UNKNOWN when using included libpcap
2014-12-30 22:38:32 +00:00
dmiller
8753e731f6
Reorder distclean targets to avoid errors with ./configure && make distclean
2014-12-30 22:38:30 +00:00
dmiller
dcff4ea4ea
Add .travis.yml file to test Travis CI
...
Testing in progress, expect more changes soon.
Closes #32
2014-12-30 17:21:42 +00:00
dmiller
4b9a96dd31
Integrate more service fingerprints
2014-12-29 04:05:25 +00:00
dmiller
fe07fca8b4
Update changelog regarding translations
2014-12-23 14:21:26 +00:00
dmiller
8b487166ca
Add ifndef guards to prevent double-inclusion of headers
2014-12-23 13:48:22 +00:00
dmiller
c95d656bfc
Generate zh.mo
2014-12-23 13:48:19 +00:00
dmiller
2421ec8933
New Chinese translation of Zenmap
...
http://seclists.org/nmap-dev/2014/q4/314
2014-12-23 13:48:17 +00:00
david
934de74bb0
Check string bounds looking for terminating ']'.
...
It was possible to trigger an out-of-bounds read by giving a port
specification with '[' but not ']'.
2014-12-20 19:12:09 +00:00
tomsellers
742444b87d
Fix a typo in the regex that was truncating the version string.
2014-12-20 01:34:26 +00:00
tomsellers
d5af9560c3
Add the full ntpd version string, for example v4.2.4p4@1.1520-o, to the
...
port's version attributes if the remote service provides it. Also capture
OS info as well as it can provide exact kernel versions in some cases.
2014-12-20 01:14:34 +00:00
paulino
f819655677
Adds fingerprint to detect the administration console of Oracle WebLogic Servers
2014-12-19 00:21:15 +00:00
dmiller
ae58ed62eb
Another chunk of service submissions
2014-12-18 05:22:02 +00:00
dmiller
9857aa6ac2
Service fingerprint lengths are in hex, not decimal
2014-12-18 03:29:20 +00:00
dmiller
425e407eb3
Use decoding instead of pattern match for protocol checking
2014-12-18 03:23:46 +00:00
dmiller
711f6d97c9
New script, snmp-info for querying snmpv3 services
2014-12-18 00:22:48 +00:00
dmiller
d9cf8adf04
New ipOps.str_to_ip function
2014-12-18 00:22:46 +00:00
dmiller
5aca2bd4f1
Correct some NSEdoc regarding datafiles.parse_file return values
2014-12-18 00:22:44 +00:00
dmiller
8e8935d2c0
Avoid comparing nil with an integer, potentially
2014-12-18 00:22:42 +00:00
dmiller
31ba95b918
Don't override port.protocol in comm.lua; socket.connect already defaults to tcp
2014-12-18 00:22:41 +00:00
tomsellers
845616623d
Add support to 'citrix-enum-apps-xml' for reporting if published applications in the list are enforcing/requiring the level of ICA/session data encryption shown in the script result. This information was already in the XML provided by the server, this change just adds parsing for it.
2014-12-17 11:56:52 +00:00
dmiller
9fb374c743
Make ssh1 and ssh2 fetch_host_key return the same structure
...
This was indirectly causing the crash reported here:
http://seclists.org/nmap-dev/2014/q4/332
ssh1.fetch_host_key now returns a table with the full_key value
containing a key as it would be output by ssh-keygen. The previous value
named full_key is now named "key".
2014-12-17 03:32:11 +00:00
dmiller
1653d846e6
Don't double-encode ssh key for XML output
2014-12-17 03:32:09 +00:00
dmiller
f9f2829e3c
Switch to tail-recursion
2014-12-15 05:20:42 +00:00
dmiller
5f5af2d573
Add XML output to modbus-discover
2014-12-15 05:20:39 +00:00
dmiller
ed7ec9a0ce
Integrate IPv6 fingerprints through July 25, 2014
2014-12-12 04:22:54 +00:00
dmiller
2353d5a913
Allow user to specify SSL ciphersuite choices
...
Fixes #19
2014-12-11 19:07:04 +00:00
dmiller
e81f9fba12
Better way of getting locale's encoding
2014-12-09 15:27:26 +00:00
dmiller
f10513b154
Make get_formatted_date return a unicode string instead of bytes
2014-12-09 14:18:02 +00:00
dmiller
9656d30661
Don't print debug messages if not debugging
...
This was Red Hat bug #1000770 , patched downstream in RHBA-2014-0683
https://bugzilla.redhat.com/show_bug.cgi?id=1000770
2014-12-08 23:16:30 +00:00
dmiller
d7d145d940
Use MSVCRT _unlink function (unlink was not setting errno)
2014-12-08 18:00:29 +00:00
dmiller
c3579c8b76
Another Raul Fuentes script: targets-ipv6-wordlist
2014-12-03 16:20:22 +00:00
dmiller
918d926913
Remove the unnecessary -recon portion of targets-ipv6 script
2014-12-03 16:02:16 +00:00
dmiller
b1c8c3f224
Handle the case of half-byte hex string in ipOps.hex_to_bin
2014-12-03 04:15:09 +00:00
dmiller
08709b41dc
Replace ipOps.hex_to_bin with a simpler implementation.
2014-12-03 04:15:08 +00:00
dmiller
e50e802c4b
Remove incomplete certificate_request parser in tls.record_read
2014-12-02 18:36:17 +00:00