dmiller
28f3b4910a
Don't script-scan targets that are already timed out
2018-08-13 19:24:05 +00:00
dmiller
0a0e9c4433
Changelog entry for #1147 , #1108 , CVE-2018-15173
2018-08-13 17:18:48 +00:00
dmiller
6c836c83e4
Add some new popular favicons verified through Shodan
2018-08-11 21:24:00 +00:00
dmiller
0e2683e079
Cache a static table instead of regenerating every time
2018-08-11 21:23:59 +00:00
dmiller
b2deb019ed
Don't use shortport.ssl to determine Host header.
...
The only reason this was used was to determine if port 443 was HTTPS.
Simply dropping the port if it's 80 or 443 yields the same outcome.
Maybe we want to be more clear, but then we'd need to have the caller
pass in the URI scheme, too. This is faster and avoids the new SSL
probes in shortport.ssl.
2018-08-11 21:23:58 +00:00
dmiller
7a790d3665
shortport.ssl: don't send 2 probes if the first gives obviously not-ssl response
2018-08-11 21:23:57 +00:00
dmiller
c892dab9a3
Handle large dates on platforms that can't. Fixes #1303
2018-08-10 19:42:50 +00:00
dmiller
c3113037b0
Avoid NULL ptr deref crash if pcre_study returns NULL. Fixes #1302
2018-08-10 17:12:19 +00:00
nnposter
302954fb3f
Rectifies incorrect use of va_start/va_end from stdarg.h. Closes #1297
2018-08-09 22:11:15 +00:00
dmiller
0c617b26d9
Add some missing library requires and remove trailing whitespace
2018-08-08 18:58:40 +00:00
nnposter
684803ce30
Fixes a comment to match opening ifdef
2018-08-08 17:33:01 +00:00
dmiller
6d8bb6df22
Set limits on PCRE matches to avoid issues like #1147
2018-08-08 16:36:21 +00:00
dmiller
8ae3ee2c7c
Avoid crash if only testing port for likely SSL, not host. Fixes #1286
2018-08-06 21:23:07 +00:00
dmiller
c95330ddf0
Avoid calling GetLastError twice.
2018-08-06 21:23:06 +00:00
nnposter
a4237019ac
Fixes indentation
2018-08-05 21:30:42 +00:00
nnposter
1e1f7c80c2
Simplifies code; possibly ipOps candidate
2018-08-05 21:29:37 +00:00
nnposter
3fc825b15e
Takes advantage of freshly implemented ipOps.get_first_ip()
2018-08-05 21:11:48 +00:00
nnposter
57f9a46f73
Changes ipOps.get_ips_from_range() behavior to return true first IP address
...
from a supplied range, not simply copying over the address used to specify
the range. Specifically in case of CIDR notation, the supplied address may
be any address in the range, such as "192.168.1.10/24". Closes #1285
2018-08-05 20:45:08 +00:00
nnposter
6353292c9f
Re-wraps overly long line
2018-08-05 20:38:12 +00:00
dmiller
16193bc5e8
Don't quit if no MAC can be found, just mark the target as down. Unusual case, see #1293
2018-08-05 20:22:43 +00:00
dmiller
087b445f17
Changing lots of patterns to only match within HTTP headers. See #1196
2018-08-02 16:20:56 +00:00
dmiller
6a2bfdfb2a
Use more efficient regexes in some matches. See #1196
2018-08-01 16:22:03 +00:00
nnposter
6c848f1c85
Improves compliance with RFC 7871 by properly zeroing out insignificant bits
...
and discarding insignificant octets.
2018-07-29 01:42:19 +00:00
nnposter
40e6327c64
* Fixes a bug causing the same DNS ECS option table to be useable only once
...
because of a side effect on the address family member.
* Allows the ECS address family to be supplied either as string or integer.
2018-07-29 00:15:24 +00:00
nnposter
ddd48caec0
Removes unused local variables
2018-07-28 23:49:29 +00:00
nnposter
2e08baefd4
Replaces original experimental DNS ECS option code
...
with value prescribed by RFC 7871. Closes #1271
2018-07-28 23:06:27 +00:00
dmiller
f31ef12ca3
Fix ncat -e --ssl on Windows. Fixes #1267 , #1274
2018-07-23 04:56:56 +00:00
dmiller
12f7822950
Add libpcap/grammar.h to avoid build problems. Fixes #1275
2018-07-22 23:08:31 +00:00
dmiller
420618c0db
Check for SSL_ERROR_WANT_READ after SSL_write error. Possibly related: #1267
2018-07-19 05:39:02 +00:00
dmiller
d95bc032c6
Upgrade libpcap to 1.8.1
2018-07-18 13:41:40 +00:00
dmiller
172ef58889
libpcap: Disable unnecessary features
...
The following features are disabled:
* monitor-mode sniffing of wireless interfaces on Linux, via libnl
* building shared libraries
* Bluetooth support
* usb support
* dbus capture support
2018-07-18 13:41:38 +00:00
dmiller
87107dd6b1
libpcap: Don't autogenerate Lex/Yacc files
2018-07-18 13:41:38 +00:00
dmiller
3fc4a6fc95
Upgrade libpcap to 1.8.1 (Nmap-specific patches not yet applied)
2018-07-18 13:41:35 +00:00
nnposter
cbb54f79a8
Minor code clean-up
2018-07-16 03:17:24 +00:00
nnposter
ece05c34ee
Miscellaneous code clean-up
2018-07-15 23:42:31 +00:00
nnposter
78601bc7c3
Rectifies a recently introduced bug that impacted fingerprint loading.
...
Incorrect registry entry was tested for cached fingerprints, which was
preventing the script to run against more than one target host/port.
2018-07-15 23:14:04 +00:00
dmiller
aaf5075c67
Move probespec to its own header to reduce includes of scan_engine.h
2018-07-13 18:18:28 +00:00
dmiller
b2e0efb960
Remove unneeded header include
2018-07-13 18:18:27 +00:00
dmiller
622c14c115
Some fixes for script crashes due to updated shortport.ssl
2018-07-12 04:14:35 +00:00
dmiller
5318e42481
New script-arg http.host to force a particular Host header. Closes #1251
2018-07-12 03:43:11 +00:00
dmiller
e16b6bff83
Update Zenmap copyright date
2018-07-11 21:27:02 +00:00
dmiller
073a3efb23
Let all ssl scripts check for SSL and cache/check SSL status. https://security.stackexchange.com/q/189268/9209
2018-07-11 05:03:13 +00:00
dmiller
33f0f050cf
Use smtp.get_domain instead of example.com for STARTTLS. Closes #1258
2018-07-11 04:12:00 +00:00
dmiller
baed30beed
Changelog entry for #1233 fix
2018-07-10 14:23:13 +00:00
dmiller
3c88c17efe
Correctly wrap sockets, avoiding mixups. Fixes #1233
2018-07-10 14:23:12 +00:00
dmiller
6d72dbb9df
Add more assertions and checks for cross-thread socket use. See #1233
2018-07-07 21:13:46 +00:00
dmiller
cdae588782
Check for additional libs required for inet_pton/ntop, as on Solaris
2018-07-02 16:20:39 +00:00
dmiller
14f439a29e
Use integer division for timestamps. Fixes #1255
2018-06-29 02:53:40 +00:00
dmiller
d25b4df8be
Return not-vuln results, too.
2018-06-28 13:40:30 +00:00
dmiller
6e5e9478f2
Handle error condition. Closes #1254
2018-06-28 13:40:29 +00:00
