1
0
mirror of https://github.com/nmap/nmap.git synced 2025-12-19 14:09:02 +00:00
Commit Graph

4399 Commits

Author SHA1 Message Date
ron
9365ad46e9 Added a README explaining the purpose of the encoded binary. 2010-01-25 21:22:22 +00:00
kris
e4c1ad93d8 Just add changelog entries for my changes in r16541 and r16559 2010-01-25 03:56:39 +00:00
kris
c9e68798c9 Updating ip_is_reserved(): 001/8 and 027/8 allocated 2010-01-25 01:52:37 +00:00
kris
d1e4ae6dc7 Set header variables like ip_ttl when calling ip_set_ttl() rather than just
setting the packet data.  This was confusing watching packets go correctly
over the wire but having incorrect variables.
2010-01-24 20:16:40 +00:00
bmenrigh
9ad0a206db Fixing compilation when --without-liblua is used. 2010-01-24 08:57:38 +00:00
batrick
92564b9b00 Merge from 16504:16554 from /nmap-exp/patrick/docs-parallelism.
Adding documentation for the various new parallelism features
NSE has recently added including mutexes, condition variables,
child coroutine support, and new threads.
2010-01-23 19:45:44 +00:00
ron
ba9532c2d4 Changed an error message throughout smb.lua that I never really liked. 2010-01-23 17:25:30 +00:00
ron
b00f6234d5 Fixed some bugs found by Brandon Enright in smb.lua. They were all caused by servers returning less bytes than they're supposed to. This revision basically makes the broken-server detection more robust. 2010-01-23 17:23:57 +00:00
ron
13f8f95a5f nmap_service.exe is now encoded locally by xor'ing each byte by 0xFF. It is decoded in line before it is uploaded. This is to prevent antivirus false positives from picking it up. 2010-01-23 16:56:49 +00:00
ron
49d8db7ba5 Fixed a bug in smb-enum-sessions discovered by Brandon Enright -- most error conditions would cause a nil-pointer exception. 2010-01-23 16:55:54 +00:00
ron
00b2c842e2 smb-brute now checks the hosts lockout policy before starting. If accounts can be locked out, it bails with an error message telling the user how to force it to run. 2010-01-23 16:31:40 +00:00
david
4c57d3f8c8 Unconditionally set the port state to PORT_OPEN when receiving a service
scan response, instead of checking for a current state of
PORT_OPENFILTERED. The code calls getPortState, but the port may not
have been assigned a state, again because of the new Port allocation
architecture, so the function returns -1.

It would make sense to have getPortState return the default port state
if a Port has not been allocated, but there are two other places it is
used where the code relies on it returning -1 to indicate that a port
has not received a state yet.
2010-01-23 02:01:50 +00:00
david
12ccaa7786 Remove a speck of uncertainty from favicon-db. 2010-01-23 01:54:32 +00:00
david
5318e5a375 Improve date formatting in Kerberos matches.
From: 20100123014311Z
To:   2010-01-23 01:43:11Z
2010-01-23 01:45:53 +00:00
david
44ea93217c Add another service match line for Mac OS X Kerberos on UDP. 2010-01-23 01:40:01 +00:00
david
e942244ba2 Add a patch to dns.lua from Patrik Karlsson to cope with some mDNS
implementations.
2010-01-22 23:44:51 +00:00
david
86c3be8180 Remove local declarations from the usage example in unpwdb.lua on a
suggestion from Patrick Donnelly. The for loops already localize their
variables.
2010-01-22 21:54:52 +00:00
david
5d7f91a6b2 Add a @usage section to unpwdb.lua showing how to use the iterators. 2010-01-22 21:10:55 +00:00
david
a066cd7bdc Add the missing dirname function to http-favicon.nse. I missed this when
I copied parse_url_relative from favicon-survey.nse. Ron Meldau reported
that this error is raised:
  http-favicon.nse:141: variable 'dirname' is not declared
It happens when a web page specifies a relative icon URL in a link
element. (dirname is used to absolutize the URL.)

Also, I changed to code to be sure to pass a plain string and number for
the host and port to parse_url_relative. Otherwise parse_url_relative
may return the tables that it receives and complicate the matching code
to decide if a URL should be followed.
2010-01-22 18:45:04 +00:00
kris
c6508cceb6 Fix http-enum.nse so it uses the full pathname for the fingerprints file (from
fetchfile) so it doesn't throw an error and quit running.

Reported by Ron Meldau and Brandon:

http://seclists.org/nmap-dev/2010/q1/222
2010-01-22 18:38:46 +00:00
ron
354eaca0ff Re-wrote smb-enum-domains.nse to be more generic and rely on library functions. Ultimately, I want to use these same functions in smb-brute to trim out impossible passwords and figure out account lockout policies before the bruteforce starts. It'll make smb-brute a little cleaner after the changes. 2010-01-22 04:43:51 +00:00
ron
d8bd5c399e Fixed a bug in smb-brute that wouldn't detect properly if an account became locked out, and would proceed to lock out every account. It was a totally braindead mistake on my part, I don't know how I did it, but I got a condition backwards. It's fixed now, though\! 2010-01-22 03:25:22 +00:00
david
b4c34134c0 Add to CHANGELOG:
o Fixed an error that occurred when UDP scan was combined with version
  scan. UDP ports would appear in the state "unknown" at the end of
  the scan, and in some cases an assertion failure would be raised.
  This was an unintended side effect of the memory use reduction
  changes in 5.20. The bug was reported by Jon Kibler. [David]
2010-01-22 01:53:23 +00:00
david
f1551332be Set the default port state and reason whenever PortList::createPort is
called. Formerly the only way to create a port was to call
PortList::addPort, which also set the state. Now ports are allocated on
demand whenever anything about a port is set. If we don't set the state
and reason, they're "unknown" and "unknown-reason". Because of the
special handling of PORT_UNKNOWN in the output table, this could lead to
an assertion failure reported by Jon Kibler.
2010-01-21 23:40:10 +00:00
david
349f0edad0 Let http.next_response receive a body in response to a HEAD request, if
there is one. Even though section 4.4 of RFC 2616 says that sending a
body in response to a HEAD request is a MUST NOT, pyllyukko sent me a
sample from a server that does--"LuCI - Lua Configuration Interface".
2010-01-21 19:42:52 +00:00
batrick
b6d57382e3 Fix bug where Lua will load original, optional Lua libraries when we have
custom libraries that must be used instead. (So, try to load our libaries
first, then look through system paths.) This bug is very rare since these
optional libraries are very rarely installed in most distributions.

Bug found by Onur K. [1].

[1] http://seclists.org/nmap-dev/2010/q1/197
2010-01-21 18:56:30 +00:00
david
929042a690 Fix the first round of HTTP pipeline requests. The pipeline makes an
initial request to get a value stored in the Keep-Alive header, which is
the size of the pipeline. It then iterates, doignt hat many requests at
once until the list of requests is exhausted. The prbolem was that in
the first round, it didn't count its initial Keep-Alive probe. So if the
server said it was good for 40 requests, we would send 41 before closing
the connection. Even worse was when the initial probe returned a
"Connection: close"; the pipeline would try another request before
closing the connection for the first time.
2010-01-21 17:43:23 +00:00
david
c7b4af21db o [NSE] Fixed a bug in http.lua that could lead to an assertion
failure. It happened when there was an error getting the a response
  at the beginning of a batch in http.pipeline. The symptoms of the
  bug were:
    NSE: Received only 0 of 1 expected reponses.
    Decreasing max pipelined requests to 0.
    NSOCK (0.1870s) Write request for 0 bytes...
    nmap: nsock_core.c:516: handle_write_result: Assertion `bytesleft > 0' failed.
  The error was reported by Brandon Enright and pyllyukko.
2010-01-21 16:28:39 +00:00
fyodor
bd0c7f8a34 add the 5.20 release date and fix a trivial wording issue 2010-01-21 04:51:16 +00:00
david
ad0a63deef Add dns-service-discovery.nse from Patrik Karlsson. See
http://seclists.org/nmap-dev/2010/q1/87 for more information.
2010-01-21 01:53:46 +00:00
david
d390452e36 Fix a string format error in the HTTP dechunking code. 2010-01-21 00:35:12 +00:00
david
8a895ff0d9 Fix an error with http.request: If there was a parsing error or a
network error, it was returning nil instead of a table as documented.
2010-01-21 00:23:56 +00:00
david
a105f13975 afp script updates from Patrik Karlsson. 2010-01-20 23:47:04 +00:00
david
ceaf1a9b16 Additions to dns.lua from Patrik Karlsson. Adds an answer fetcher for
TXT and SRV records, and a function get answers from the additional
section.
2010-01-20 22:54:20 +00:00
david
69000c63f0 Add afp.lua and afp-showmount.nse from Patrik Karlsson. See
http://seclists.org/nmap-dev/2010/q1/97.
2010-01-20 21:49:30 +00:00
fyodor
b14044e832 Whine about some aspects of web page rendering 2010-01-20 21:05:19 +00:00
david
a8f2d87c72 Add pending script review to TODO. 2010-01-20 19:27:26 +00:00
david
ac2cbcc97f Fix the decoding of OID component values greater than 127 in snmp.lua.
This is analogous to r16265, which did the same thing for encoding.
2010-01-19 23:45:58 +00:00
fyodor
dd0774c7bc Some changes from discussion w/David 2010-01-19 22:59:24 +00:00
fyodor
88cbb875ce Another canonicalization fix (making the author line the same for scripts written by the same author -- among other minor benefits, makes it easy to count how many scripts each person has written) 2010-01-19 08:32:26 +00:00
fyodor
785126a4a9 Some minor canonicalization of the author fileds in NSE scripts 2010-01-19 08:28:30 +00:00
david
0e913e4039 Add match line for GlimmerBlocker ad-blocking http proxy from Matt
Selsky.
2010-01-18 22:38:35 +00:00
david
53ee30c4db o Added an Apple Filing Protocol service probe that detects Netatalk
servers. (Apple's AFP servers are coincidentally triggered by the
  SSLSessionReq probe.) [Patrik Karlsson]
2010-01-18 20:30:25 +00:00
fyodor
1636f41ba9 Fix the description of --min/max parallelism in the help screen 2010-01-18 08:19:11 +00:00
david
84648aaeab Document gcc-4.0 magic. 2010-01-16 02:25:26 +00:00
david
4388f4b78f Update macsox Makefile for 10.6. 2010-01-16 02:06:21 +00:00
batrick
da041cb0b3 Get rid of <em>/<strong> tags because there is no uniform
way to use them across DocBook and HTML.
2010-01-16 01:59:12 +00:00
batrick
d1a4984d8d Fixed a typo. 2010-01-16 01:38:38 +00:00
fyodor
0f417b08b9 Add a little more info about the giant favicon survey 2010-01-15 20:18:16 +00:00
david
fb56e85681 Remove an NSI label that's now unused. 2010-01-15 20:15:49 +00:00