5 Commits

Author	SHA1	Message	Date
fyodor	f79a11aeeb	o [NSE] Oops, there was a vulnerability in one of our 437 NSE scripts. ... If you ran the (fortunately non-default) http-domino-enum-passwords script with the (fortunately also non-default) domino-enum-passwords.idpath parameter against a malicious server, it could cause an arbitrarily named file to to be written to the client system. Thanks to Trustwave researcher Piotr Duszynski for discovering and reporting the problem. We've fixed that script, and also updated several other scripts to use a new stdnse.filename_escape function for extra safety. This breaks our record of never having a vulnerability in the 16 years that Nmap has existed, but that's still a fairly good run. [David, Fyodor]	2013-07-29 06:19:24 +00:00
david	67aa5516f4	Fix various NSEDoc problems. ... Found by David Matousek. http://seclists.org/nmap-dev/2013/q1/88	2013-01-24 18:04:42 +00:00
batrick	000f6dc4d9	Lua 5.2 upgrade [1] for NSE. ... [1] http://seclists.org/nmap-dev/2012/q2/34	2012-05-27 08:53:32 +00:00
fyodor	a84c2e4498	Did some NSEDoc cleanup on many of the 45 NSE scripts which are new since the 5.35DC1 Nmap release. Emphasis was on the first paragraph of the description, since that is shown on the front page of http://nmap.org/nsedoc and I'm planning to use that description verbatim (except for removing tags like <code>) for the CHANGELOG	2011-01-14 10:20:51 +00:00
david	00652cb231	o [NSE] Added stuxnet-detect.nse by Mak Kolybabi, which detects ... infections of the Stuxnet worm and can optionally download the Stuxnet executable.	2010-12-12 22:40:42 +00:00