11090 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
nnposter	a7b8d0df4f	Cleans up a few fingerprint trivialities	2017-03-30 01:04:00 +00:00
nnposter	512e620899	Abstracts out code for testing cookie values	2017-03-30 00:37:16 +00:00
nnposter	afc310c0c9	Cleans up XML request build-up by externalizing XML encoding and allowing for white-space indentation	2017-03-30 00:06:03 +00:00
nnposter	95c42025d7	Suppresses empty output if no credentials are found	2017-03-29 23:23:22 +00:00
dmiller	7e6146d4c5	Convert snmp.lua from bin to string packing	2017-03-29 21:12:42 +00:00
dmiller	877136858f	Tag decoder stub for Report-PDU	2017-03-29 20:58:37 +00:00
dmiller	783e0fb05c	Replace bit.lua with bitwise ops in asn1.lua	2017-03-29 20:58:36 +00:00
dmiller	b75446db64	Note bitwise operator replacements for most of bit.lua	2017-03-29 20:58:36 +00:00
dmiller	4cef14a873	Switch to string packing instead of bin packing and return order for asn1-related libs	2017-03-29 20:42:01 +00:00
dmiller	3dec043ead	Fix NSE hangs when service sends non-matching data to receive_buf	2017-03-29 20:41:59 +00:00
dmiller	85e10c6b2b	Use byte values instead of hex strings for ASN.1 types, avoiding upper/lower case mixups	2017-03-29 20:41:57 +00:00
dmiller	49231a2782	Fix decoding of OID sequences caused by Lua 5.3 integer/number handling	2017-03-29 17:10:40 +00:00
nnposter	af5f88dd00	Implements a new member, fragment, of the HTTP response body. It contains ... a partially received body (if any) when the overall request fails to complete.	2017-03-29 15:58:39 +00:00
dmiller	0073334d30	Fix snmp.lua after conversion to tohex instead of pack('H') changed hex to lowercase	2017-03-29 14:14:39 +00:00
dmiller	19acf2feaf	Update Redis version probe to skip comments. Fixes #789	2017-03-28 15:40:23 +00:00
dmiller	0e7f11673c	Change more bin lib to string packing/fromhex. Closes #755. Closes #769	2017-03-25 13:39:44 +00:00
dmiller	d66dd69df2	Fix some swapped return values	2017-03-25 13:29:52 +00:00
dmiller	7c72319ab5	Change a few more bin.pack to string.pack	2017-03-24 22:05:52 +00:00
dmiller	1d3b5142be	Fix some NSEdoc using the wrong script names	2017-03-24 22:05:51 +00:00
dmiller	312fbbfcf1	Report and record recovered creds in http-vuln-wnr1000-creds	2017-03-24 16:20:02 +00:00
dmiller	3220cbd62b	Fix a crash in http-vuln-wnr1000-creds when request fails (i.e. not vuln)	2017-03-24 16:20:00 +00:00
dmiller	87fb195c3f	Use a legit HTTP probe for detecting SSL in http-slowloris and -check	2017-03-23 22:42:02 +00:00
dmiller	b4f10146e4	Process 94 service fingerprint submissions	2017-03-22 14:30:06 +00:00
nnposter	4bffd26c0b	Adds support for user-selectable HTTP method. Closes #759	2017-03-22 00:28:01 +00:00
dmiller	d80a4e4e59	Print number of threads per script if <5 scripts. See #701	2017-03-21 16:20:41 +00:00
dmiller	48641e3a14	Make os calls local in nse_main.lua	2017-03-21 16:20:40 +00:00
nnposter	36702702e5	Removes duplicate entries. Patch provided by Rewanth Cool. Closes #782	2017-03-21 14:17:01 +00:00
nnposter	2e3b49728f	Normalizes tag ordering; fixes word wrapping	2017-03-21 13:56:20 +00:00
nnposter	b34eaabb3b	Allows the HTTP Set-Cookie parser to handle a trailing semicolon. Fixes #731	2017-03-21 13:46:30 +00:00
dmiller	8b8f56eced	Fix a bug in ospf.lua added in the recent changes. Closes #761	2017-03-20 17:26:25 +00:00
dmiller	a668a21b7a	Make Nsock handle all connect errors without fatal	2017-03-20 17:12:40 +00:00
dmiller	ac8b866d73	Fix Ncat SSL server. Closes #773 and potentially #197	2017-03-19 02:26:12 +00:00
dmiller	4629f6d836	Ncat supports DNS failover, including fallback to IPv4 from IPv6	2017-03-16 21:54:26 +00:00
nnposter	bbfb5dfed6	Corrects a debug message. Removes confusion about any_af.	2017-03-16 19:36:50 +00:00
dmiller	e973ad72f5	Optionally brute force usernames for VNC	2017-03-15 20:31:24 +00:00
dmiller	d244738246	Support ATEN/Supermicro KVM VNC	2017-03-15 19:39:34 +00:00
dmiller	c98a547104	Check for RealVNC auth bypass even if other auth types are offered	2017-03-15 16:19:55 +00:00
dmiller	8854d2e33a	Handle cases of no tunnels and no auth types for TightVNC	2017-03-15 16:19:54 +00:00
dmiller	772bd8d824	Correct typos: receive, successfully, length	2017-03-15 02:23:09 +00:00
dmiller	83c9e060fc	Fix a typo in vulns.lua	2017-03-15 02:23:07 +00:00
dmiller	f89d7610b0	Replace IP address parsing with functions from ipOps	2017-03-14 18:59:12 +00:00
dmiller	cc644955c4	Use string unpacking instead of manual bit manipulation in bittorrent.lua	2017-03-14 14:36:14 +00:00
dmiller	629e50a900	Replace bin.pack('H') calls with fromhex or equivalent simplifications	2017-03-14 14:36:12 +00:00
dmiller	edfc5e3835	Remove useless bin.pack('A') calls (equivalent to tostring)	2017-03-14 02:51:06 +00:00
dmiller	32b1d1711e	Convert ospf.lua from bin.lua to string.pack/unpack	2017-03-14 02:51:05 +00:00
dmiller	84a824c2cf	New script broadcast-ospf2-discover. Closes #743	2017-03-14 00:15:22 +00:00
dmiller	2091ce3199	Fix endianness in unpacking IP addresses, since ipOps.fromdword is fixed. Fixes #750	2017-03-13 14:58:57 +00:00
dmiller	3e3f600b8a	Update default-category scripts to use bitwise operators instead of bit.lua	2017-03-13 14:58:56 +00:00
dmiller	090b522c06	new tests for ipOps.fromdword and todword	2017-03-13 14:58:55 +00:00
dmiller	3140dbe115	New script for Apache Struts RCE	2017-03-10 17:53:45 +00:00