nnposter
3af4a0c20c
Adds a fingerprint for Schneider Modicon Web Server
2016-08-30 21:09:24 +00:00
nnposter
3419a71b24
Adds a fingerprint for HP Storage Management Utility
2016-08-30 21:06:02 +00:00
dmiller
3d377e07ee
tftp-enum: Don't brute cisco names with custom wordlists. Fixes #117 . Closes #355
2016-08-30 18:59:57 +00:00
dmiller
bacf620fed
Update ip-geolocation-maxmind to use structured output, cache database. Closes #240
2016-08-30 16:07:09 +00:00
dmiller
8779c1e376
Fix a crash in ssl-enum-ciphers when parsing unsupported cert types
2016-08-30 16:07:08 +00:00
dmiller
da8d868a9e
Fix false positive in smb-vuln-cve2009-3103
2016-08-30 04:56:16 +00:00
dmiller
92f52de958
Remove trailing whitespace
2016-08-29 20:30:26 +00:00
dmiller
59d9e31ab2
Update some urls to https
2016-08-29 20:30:23 +00:00
nnposter
74769a0da6
Corrects categories listed in the description to reflect actually implemented fingerprints
2016-08-29 01:34:03 +00:00
dmiller
8c10485689
Fix MySQL version detection, greeting parsing. Fixes #529
2016-08-25 23:05:50 +00:00
dmiller
d4ed90381f
Update @output for ssl-enum-ciphers to reflect 3DES changes
2016-08-24 16:12:40 +00:00
dmiller
9a21104bd6
Clarify kex weakness warning with actual kex info
2016-08-24 16:07:58 +00:00
dmiller
fc948c437b
Add warning for SWEET32 on CBC with block size <= 64 bits
2016-08-24 16:07:57 +00:00
nnposter
fb2fc62a0b
Penalizes 3DES for SWEET32 attack (CVE-2016-2183)
2016-08-24 14:56:25 +00:00
jah
86da86007c
Fix "bad argument #1 to 'match' (string expected, got nil)" in hostrule
...
by returning early when nfs-ls and nfs-statfs do not have the required
version numbers for the nfs and mountd ports.
2016-08-23 22:39:29 +00:00
paulino
429215565c
Removes obsolete script. Closes #519
2016-08-22 01:34:02 +00:00
paulino
442b82e260
Adds nil check
2016-08-21 23:16:40 +00:00
paulino
cb9a184732
Fixes error handling and improves error message by including the URL to download the database
2016-08-21 22:31:48 +00:00
dmiller
b5656da197
Fix a bug in dns-fuzz, missing table.concat
2016-08-20 04:53:35 +00:00
dmiller
11c2662a40
Avoid integer overflow in signed pack by using literal string
2016-08-20 00:08:00 +00:00
dmiller
5022aaf794
Avoid error thrown when pcap read times out on firewall-bypass.nse
2016-08-20 00:07:59 +00:00
dmiller
66fb5fba22
Avoid an error thrown in ssl-enum-ciphers with connect problems
2016-08-20 00:07:58 +00:00
dmiller
df4ef0cb91
Add a cache for geoip lookups.
2016-08-19 18:33:02 +00:00
dmiller
907ea3793f
geolocation lat, lon are floats, not integers.
2016-08-19 18:33:01 +00:00
nnposter
14cfbc6084
Improves efficiency of script http-default-accounts by sharing probe results across fingerprints. Closes #516
2016-08-19 15:01:04 +00:00
dmiller
265e32dbd6
Avoid a couple potential format string problems
2016-08-18 23:53:45 +00:00
abhishek
6e983b9e45
Fix timeout problem for http-slowloris
2016-08-17 06:33:30 +00:00
dmiller
23ed953352
Check for non-200 responses that may indicate url is present.
2016-08-16 04:52:11 +00:00
nnposter
aaa4508ceb
Updated @output and @xmloutput documentation sections in script ssl-enum-cpihers to be consistent. Fixes #475
2016-08-11 23:56:18 +00:00
nnposter
f3ee542683
Changed weak cipher strength threshold from 128 to 112 bits in script ssl-enum-ciphers. Fixes #474
2016-08-11 23:47:31 +00:00
paulino
26bec9be41
Fixes incorrect argument name in documentation
2016-07-30 21:58:56 +00:00
nnposter
367dc67f5a
Re-wrapped description output in script ssl-poodle. Fixes #481
2016-07-29 21:47:27 +00:00
nnposter
b9c4c12462
Re-wrapped description output in script ssl-dh-params. Fixes #476
2016-07-29 16:50:32 +00:00
dmiller
4486148760
Remove an unnecessary debug statement from development
2016-07-28 05:11:33 +00:00
dmiller
4fa478cea4
Check for non-404 file nonexistence responses in http-config-backup
2016-07-22 15:52:30 +00:00
dmiller
b019b4a369
Add clock-skew.nse to version control (oops!)
2016-07-22 14:33:47 +00:00
dmiller
f002aee6a9
Add TLSA type to dns-zone-transfer, refactor bto16
2016-07-21 22:27:30 +00:00
dmiller
5b7a07b6c9
Add clock-skew script, datetime library
2016-07-21 17:05:25 +00:00
dmiller
be3cd99dbc
Add missing require
2016-07-21 17:05:23 +00:00
dmiller
033d77540a
Use formulas.lua for mean, stddev in dns-cache-snoop
2016-07-21 17:05:22 +00:00
dmiller
e81b4a719a
Update wdb-version to Lua5.3 syntax
2016-07-17 04:56:30 +00:00
dmiller
95f7b76d9f
Avoid 'baseoid' output when snmp-hh3c-logins fails.
2016-07-13 17:51:09 +00:00
dmiller
0ac0d8f505
Fix globals, whitespace
2016-07-08 04:36:31 +00:00
dmiller
b47c55dc6e
Add sslv2-drown. Closes #365
2016-07-07 16:35:39 +00:00
dmiller
17040f4cf1
Move core of sslv2.nse into sslv2.lua so other scripts can use it. Cache results in registry.
2016-07-07 16:35:37 +00:00
dmiller
d6fbe8b2ca
Refactor some code from sslv2.nse into sslv2.lua
2016-07-07 16:35:36 +00:00
tomsellers
63c9a1f8c0
NSE: added output to docker-version.nse
2016-07-07 00:04:15 +00:00
tomsellers
5ca3902b3a
NSE: fix bug in docker-version.nse that transposed version and name
2016-07-06 19:37:56 +00:00
batrick
7f5ec526fe
Merge branch 'nse-lua53'
...
Lua 5.3 adds several awesome features of particular interest to nmap including
bitwise operators and integers, a utf8 library, and standard binary pack/unpack
functions.
In addition to adding Lua 5.3, this branch changes:
o Complete removal of the NSE bit library (in C), It has been replaced with
a new Lua library wrapping Lua 5.3's bit-wise operators.
o Complete removal of the NSE bin library (in C). It has been replaced with a
new Lua library wrapping Lua 5.3's string.pack|unpack functions.
o The bin.pack "B" format specifier (which has never worked correctly) is
unimplemented. All scripts/libraries which use it have been updated. Most
usage of this option was to allow string based bit-wise operations which are no
longer necessary now that Lua 5.3 provides integers and bit-wise operators.
o The base32/base64 libraries have been reimplemented using Lua 5.3's new
bitwise operators. (This library was the main user of the bin.pack "B" format
specifier.)
o A new "bits" library has been added for common bit hacks. Currently only has
a reverse function.
Thanks to David Fifield, Daniel Miller, Jacek Wielemborek, and Paulino
Calderon for testing this branch.
2016-07-02 17:02:27 +00:00
dmiller
0d12307030
Improve parsing and request building in sslv2. Part of #365
2016-06-30 17:01:21 +00:00
