1
0
mirror of https://github.com/nmap/nmap.git synced 2025-12-18 21:49:01 +00:00
Commit Graph

3106 Commits

Author SHA1 Message Date
ron
bc55de0c6e Adding new check for Conficker.C and up, using the peer-to-peer ports. 2009-04-21 18:30:40 +00:00
david
314b79b901 Document the --xml option in the Ndiff man page. (It claimed it was
unsupported.)
2009-04-21 06:11:44 +00:00
david
b69afa3046 Fix a couple of typos in CHANGELOG. 2009-04-20 22:07:43 +00:00
david
017339e372 [Ndiff] The setup.py installation script now suggests installing the
python-dev package in a certain error situation. Previously the
error message it printed was misleading:
  error: invalid Python installation: unable to open
  /usr/lib/python2.6/config/Makefile (No such file or directory)
The change was suggested by Aaron Leininger.
2009-04-20 19:15:00 +00:00
david
ea36c6c890 Require -d3, not just -d, for the message
Found whacked packet protocol 17 in get_ping_pcap_result
and rewrite it
	Received packet with protocol 17; ignoring.

The message is printed when we receive a packet we can't use during a
ping scan, but it's not "whacked" to receive a UDP packet during a TCP
scan for example.
2009-04-20 16:37:11 +00:00
ron
a251c563c3 fixed a <code> tag in smb.lua's NSEDoc 2009-04-19 17:44:45 +00:00
david
edde5c5686 Add a missing newline to the "Fetchfile" message. 2009-04-18 16:36:59 +00:00
david
27e94c0b28 Remove documentation for the bit.cast NSE function, which doesn't seem
to exist.
2009-04-17 16:35:43 +00:00
ron
1fbc9e62cf defaulted to basic login for smb-check-vulns (the test infected box I found doens't like extended logins, not sure whether it's because of Conficker or if it was random chance 2009-04-17 01:13:57 +00:00
ron
dd9f063b1f Updated Conficker.D-detection code 2009-04-17 01:09:29 +00:00
ron
14f2c0c6db Added experimental checks for Conficker.D/E 2009-04-17 00:34:13 +00:00
david
e8dbcb7093 Note new Ncat web proxy GET, HEAD, and POST in CHANGELOG. 2009-04-16 21:42:24 +00:00
daniel
da6cb1d19e o [Nbase] The checksum functions now have an nbase_ prefix. This
should prevent name collisions with internal but exported functions
  in shared libraries Nmap links against (e.g. adler32() in zlib).
  Such collisions seem to confuse the runtime linker on some platforms.
  [Daniel Roethlisberger]
2009-04-16 09:38:13 +00:00
fyodor
d0e21e1d03 Suggest that people send patches to nmap-dev rather than to me directly 2009-04-15 00:37:03 +00:00
fyodor
9422c338fb logical operators for NSE script selection 2009-04-14 22:49:00 +00:00
bmenrigh
3164ea7a20 I ran into a case where Hummingbird Exceed X11 reported slightly
different bytes in a few X11 fields.  I've made the match more
generic.  I have a feeling that the X11 fields might contain useful
information that we could include in i// but I don't know enough about
X11 to do that myself.
2009-04-14 22:06:31 +00:00
fyodor
f71875130c Some changes after chat w/David 2009-04-13 21:37:24 +00:00
fyodor
1c94622d0f Oops, forgot to check this in after last chat w/David 2009-04-13 20:58:29 +00:00
batrick
05fdc6ed90 Added note about NSE being rewritten in Lua. 2009-04-12 01:41:19 +00:00
david
6b4c3c5532 Replace random-1.xml and random-2.xml with bigger scans that include OS
detection. Update README.
2009-04-10 19:14:18 +00:00
david
4c13088d1e Use "Host is up.", not "Host appears to be up." to match Nmap output. 2009-04-10 19:08:48 +00:00
david
c701b9559b Merge from /nmap-exp/david/ndiff-mkii and
/nmap-exp/david/zenmap-ndiff-alt. This is the new Ndiff output format
described in http://seclists.org/nmap-dev/2009/q1/0825.html and
http://seclists.org/nmap-dev/2009/q2/0127.html.
2009-04-10 19:07:39 +00:00
david
e69ae791cb Fix an identifier in a TODO comment. 2009-04-08 20:04:54 +00:00
bmenrigh
24fbedd748 Changed two OS scan error() calls to LOG_STDOUT instead. They aren't
errors and having them go to STDERR could be confusing.
2009-04-08 01:14:48 +00:00
bmenrigh
b38b5f6270 Changed a few error() calls to log_write(). Removed the (redundant)
"\n" from a few error() calls.  Changed a few f?printf() calls to
error() or log_write().

Most notably, I didn't change any of the --interactive printf()s or
the usage printf() call.

I think we should draw up some internal notes on when to use
LOG_STDOUT versus LOG_PLAIN versus all the other LOG_* options.
2009-04-07 23:10:51 +00:00
bmenrigh
ae9def6d85 Handled all of our stray uses of .*\r\n.* and variations like .*\n.*\n
by collapsing them to a single .* and making sure that the DOTALL
(PCRE s modifier) is set on the match.  This should dramatically cut
down on cases where MATCHLIMIT is returned.  See
http://seclists.org/nmap-dev/2009/q2/0086.html for a discussion.  I
chose to only use .* in this patch even though .*? will be faster in
some cases.  I felt the speed benefit of .*? did not outweigh the
relative obscurity of lazy quantifiers.  I have some ideas on how
audit matches for performance and some ideas on optimizations that can
be done.  .*? and friends will have wait.
2009-04-07 21:51:36 +00:00
david
be8e612547 Note Zenmap Cancel button in CHANGELOG. 2009-04-06 17:09:58 +00:00
batrick
918a3955d5 Fixed banner.nse to remove surrounding whitespace in the banner.
For example, this removed SSH greetings final two characters: carriage return
and newline.
2009-04-06 16:00:18 +00:00
david
0be972cbc5 Merge from /nmap-exp/david/ncat-proxy. This adds support for
--proxy-auth in listen mode.
2009-04-06 15:42:58 +00:00
jah
7a23fa793e Added nse_main.lua to NSIS installer and zip package. 2009-04-05 20:09:51 +00:00
jah
8017d98f9f Remove nse_init.cc and nse_init.h from nmap.vcproj - files deleted during
nse-lua-merge in r12887
2009-04-05 19:50:32 +00:00
batrick
37bbb40520 Merge of nse-lua (nse-lua-merge) minus most enchancements that were
not directly related to the change from C++ to Lua for the NSE main
procedures.

The changes are discussed in the nse-lua thread here:
http://seclists.org/nmap-dev/2009/q1/0047.html
2009-04-05 06:01:27 +00:00
bmenrigh
9bf557485b o Expanded and tweaked the product/version/info of service scans in an
attempt to reduce the number of warnings like "Warning: Servicescan
  failed to fill info_template...".  Parts of this change include:
  o Improved the text of the warning to be less confusing
  o Increased the internal version info buffer to 256 chars from 128
  o Increased the final version string length to 160 from 128 chars
  o Changed the behavior when constructing the final version string so
    that if it runs out of space, rather than dropping the output of that
    template it truncates the template with ...
  o Fixed the printing of unneeded spaces between templates when one of the
    templates isn't going to be printed at all.
2009-04-05 02:02:15 +00:00
david
5baf65e653 Work around a Windows Zenmap crash reported by Henry Nymann. It is caused by a
GTK+ bug:
http://bugzilla.gnome.org/show_bug.cgi?id=552681
The workaround, to use a gtk.Notebook with tabs on top rather than on the side,
was suggested by Guilherme Polo.
2009-04-03 19:13:30 +00:00
david
1736b28317 [Zenmap] Gracefully handle unrecognized port states in the hosts
viewer. Apparently old versions of Nmap can return a state of
"unknown". This prevents this crash:
    File "radialnet\gui\NodeNotebook.pyo", line 107, in __init__
    File "radialnet\gui\NodeNotebook.pyo", line 257, in __create_widgets
  KeyError: u'unknown'
2009-04-03 15:31:08 +00:00
ron
80b53d8ffa Fixed a comment -- said 'windows 2003' where it should have been 'windows 2000' 2009-04-03 13:29:04 +00:00
bmenrigh
c01e0c56e3 Added match by Tom Sellers for Service Pack 3 of Microsoft SQL Server 2005. 2009-04-03 00:15:38 +00:00
david
7e2b32e6ed Fix an error with smb-check-vulns.nse Conficker error help. I was catching the
error at the wrong level, so not all possible errors were being run through the
help table. Specifically, errors returned msrpc.start_smb and msrpc.bind, which
included at least NT_STATUS_OBJECT_NAME_NOT_FOUND, didn't get the explanatory
text. I made a mistake in testing the error reporting the first time around.
2009-04-02 17:26:04 +00:00
ron
cd9098c48b Revert part of my previous commit -- forgot to remove some test code 2009-04-02 14:10:56 +00:00
ron
08fadd08fc Fixed a bug where the scan would hit a nil-pointer exception when scanning broken implementations (reported by Steve Horejsi -- http://www.skullsecurity.org/blog/?p=209&cpage=2#comment-219). This was due to using incorrect variable names. 2009-04-02 14:09:52 +00:00
fyodor
28c491c744 Improve wording 2009-04-02 03:51:30 +00:00
fyodor
fe08d0631d A couple more updates for the CHANGELOG 2009-04-02 02:49:40 +00:00
fyodor
ce8fc3ea9b CHANGELOG for 4.85BETA7 2009-04-02 02:40:24 +00:00
david
09762c4d85 Add helpful text for the two most common errors seen in the Conficker
check in smb-check-vulns.nse: NT_STATUS_OBJECT_NAME_NOT_FOUND and
NT_STATUS_ACCESS_DENIED. Ron and I found the best explanations for these
that we could. There is another error, NT_STATUS_NOT_SUPPORTED, which is
less common than these but has been observed. We still don't have a clue
as to the cause of that one.
2009-04-02 02:27:47 +00:00
fyodor
fbb8a659a5 New generated files in prep for 4.85BETA7 release 2009-04-02 01:42:15 +00:00
ron
4b81a92681 Fixed a bug reported where running openssl.encrypt() on an emptys tring would cause an assertion failure. I fixed it by printing a warning message if an empty challenge is encountered and faking out the challenge (if they sent an empty challenge, they're breaking the protocol anyways). This will cause the login to fail, and it will fall back to an anonymous check. 2009-04-02 01:14:15 +00:00
fyodor
46695b1a60 An idea that Brandon is working on 2009-04-01 22:56:08 +00:00
ron
5939934979 Fixed a potential global variable mistake in smb-server-stats.nse 2009-04-01 18:23:18 +00:00
ron
dde55ed602 Added a change to eliminate possible false negatives 2009-04-01 12:23:21 +00:00
ron
f157387be1 Changed message when checks are disabled (it seemed to be confusing people) 2009-04-01 03:31:13 +00:00