nnposter
472b586767
Refactor the script to address multiple issues
...
- Add support for HTTPS
- Add support for IPv6
- Add support for more than one path argument
- Properly identify the Location header in the HTTP response
- Properly identify the destination host in the Location header
- Leverage normalized IP address comparison
- Avoid processing the HTTP response body, possibly "endless"
- Add the found IP address as a new scan target (optionally)
Close #3218 , close #3191 )
2025-12-02 23:55:01 +00:00
nnposter
c0a01aa7e1
Keep a local function local
2025-12-02 04:49:44 +00:00
nnposter
f5a3251e97
Use the correct the port range, 512-1023, not 513-1024.
...
Detect if binding a socket to a given port failed and retry.
Close #3196
2025-11-01 22:52:49 +00:00
nnposter
fcf6f0cb19
Use simpler/cheaper portrule
2025-10-08 23:08:04 +00:00
dmiller
6637d76846
Use SOA request to get domain name in dns-zone-transfer. Fixes #3014
2025-07-14 19:17:09 +00:00
dmiller
b8a344ca20
ssh-run: enable keyboard-interactive auth if needed
2025-06-12 23:25:36 +00:00
dmiller
8d66c7fbd4
ssh-brute: enable keyboard-interactive auth if necessary
2025-06-12 23:24:36 +00:00
dmiller
aae135fa91
Fix a typo: did not update loop variable.
2025-06-09 19:58:45 +00:00
nnposter
c58eb84340
Avoid hard-coded ethertypes
2025-06-06 19:06:09 +00:00
dmiller
671b6490bf
Add features/fixes to multicast-profinet-discovery. Closes #1846
2025-06-05 16:38:26 +00:00
dmiller
65ec31cf6f
Fix some scoring/detection for TLSv1.3 in ssl-enum-ciphers
2025-06-02 14:31:42 +00:00
dmiller
18ccf2dc14
Update ALPN names
2025-05-21 20:47:35 +00:00
dmiller
7c29b558d1
Fix some nonstandard NSEdoc
2025-05-16 19:28:10 +00:00
nnposter
c04ad609a9
Mitigate false-positives when Nmap files are getting scanned. Fix #3088
2025-05-08 16:55:07 +00:00
dmiller
7f630e1ee9
Add targets-ipv6-eui64 script
2025-03-13 21:47:54 +00:00
dmiller
b2ebc18360
NSEdoc fixes
2025-03-13 18:13:21 +00:00
dmiller
4138483627
Update script.db with new categories for some scripts
2025-03-12 17:30:29 +00:00
dmiller
f6b7c062cc
New scripts and probes for winbox service. Closes #2973
2025-03-12 17:30:28 +00:00
nnposter
1166133806
Add SHA-256 fingerprint, refresh documentation. Closes #2978
2024-12-15 23:49:31 +00:00
dmiller
e2ccdb8074
Fix a typo in ssh-run
2024-11-11 21:07:01 +00:00
dmiller
5d14851aaa
Fix error in ldap-brute: 'no string output'
2024-11-11 21:06:59 +00:00
dmiller
f8d4531b1f
Make some broadcast scripts 'safe' category
2024-10-08 21:14:40 +00:00
dmiller
0bae611494
Don't use 1ms timeout for writes. Actual time can be >100ms because of NSE overhead
2024-10-08 21:14:40 +00:00
dmiller
f1325d7c6f
Handle libssh2 errors on connect. Closes #2616 . Fixes #1014
2024-10-04 18:21:25 +00:00
nnposter
fbadb5256b
Add a new username prompt to telnet-brute. Closes #2629
2024-09-02 23:48:25 +00:00
nnposter
ec17ad7e02
Remove redundant code, already part of Frame:new()
2024-08-25 18:27:05 +00:00
nnposter
2646596f0f
Resolves ether_type incompatibility in packet.Frame
...
Frame:new() was populating the value as a 16-bit integer while
Frame:build_ether_frame() was expectng a two-byte string
Ethertype constants from various locations have been migrated to packet.lua
2024-08-25 17:43:17 +00:00
nnposter
92995af023
Fix a typo in calling stdnse.format_ouptut(). See #2622
2024-07-04 20:31:02 +00:00
dmiller
32c1272bfa
Fix error in targets-sniffer: interface name not set
2024-06-20 20:14:29 +00:00
dmiller
e82d515416
Correctly observe timeout in broadcast-ping
2024-06-13 17:45:09 +00:00
nnposter
8f88a575f4
Fix spelling of "endianness". Closes #2850
2024-06-12 23:42:55 +00:00
dmiller
74b2b6fc05
Update upnp-info: structured output, correct targets added, etc.
2024-06-07 16:34:07 +00:00
dmiller
f43878f0f5
Update dnssd.lua and related scripts
...
* Structured output
* Fix adding new targets: was adding the multicast address, not the
discovered unicast address.
* Extract service name and host name from responses
* broadcast-dns-service-discovery now lists services under each unicast
address instead of under the single multicast/broadcast address.
2024-06-07 16:34:07 +00:00
dmiller
74a88c0804
Let ssl-cert grab certs from DTLS services. Fix rules for TCP-only scripts
2024-06-03 19:00:33 +00:00
dmiller
929a29d310
Fix a crash in rpc-grind when scanning a non-RPC service
2024-06-03 19:00:29 +00:00
dmiller
453f9a7e25
Use stdnse.get_script_interfaces() for all relevant scripts
2024-05-24 19:01:16 +00:00
dmiller
9ef418af4e
Allow lltd-discovery to work in IPv6 mode and add IPv6 addresses
2024-05-21 18:49:39 +00:00
dmiller
881d741dab
Remove NSEdoc for newtargets arg, provided by targets.lua instead
2024-05-21 18:49:38 +00:00
dmiller
8dfa9aef41
Note some future IPv6 possibilities
2024-05-21 18:49:38 +00:00
dmiller
41ec64ab14
Enable IPv6 capability for broadcast-bjnp-discover
2024-05-21 18:49:37 +00:00
dmiller
1c751cf6d3
Check for connected socket before continuing
2024-04-25 17:12:27 +00:00
dmiller
c4a4e0db45
Add 4 scripts from the DINA Community
2024-04-11 16:02:48 +00:00
dmiller
b7ee15c186
Add ssh banner to ssh-auth-methods
2024-03-27 19:51:37 +00:00
nnposter
004bb4f3e9
Add new ALPN protocol IDs. Closes #2758
2024-03-16 02:25:56 +00:00
nnposter
96dcf4e9ed
Remove various "the the" repeats. Closes #2804
2024-03-16 01:16:34 +00:00
nnposter
6814bc4cdd
Correct packet size testing in KNX scripts. Fixes #2727 , fixes #2728
2023-11-12 23:02:33 +00:00
dmiller
1a7a96274a
Avoid format-string bugs. Fixes #2634
2023-07-20 17:24:16 +00:00
fyodor
57461ac06b
Change example usage since multiple --script-args arguments apparently don't work (reported by Eric Thomas)
2023-02-13 22:44:54 +00:00
nnposter
e4fd4bd2fe
Fix misplaced parentheses. Closes #2544
2022-10-23 22:42:11 +00:00
dmiller
894bfd4976
New script tftp-version. Closes #548
2022-09-28 20:52:47 +00:00
