dmiller
9450cb725a
Avoid boolean tautologies of the form 'not x == y'
...
Lua operator 'not' has higher precedence than '==', so the statement
not x == "something"
is equivalent to:
(not x) == "something"
which will always be false, since the value of 'not x' will be either
'true' or 'false' and the string "something" is not the boolean 'true'
or 'false'. This is usually resolved by using the '~=' operator.
2016-05-23 04:30:06 +00:00
dmiller
5be0ac591b
Avoid a crash when host has no domain configured
2016-05-23 04:30:05 +00:00
paulino
363397b948
Fixes #379 . Script was not reporting the NOT_VULN state correctly
2016-05-16 15:11:32 +00:00
dmiller
2b77e83abb
Avoid output when ssl-date fails (e.g. non-STARTTLS SMTP)
2016-05-02 16:09:28 +00:00
dmiller
fb6d2a5567
Deprecate SHA-1 certs in ssl-enum-ciphers. Closes #370
2016-05-02 13:55:17 +00:00
dmiller
b341915722
Deprecate RC4 ciphersuites
2016-05-02 13:55:16 +00:00
dmiller
fbdd7f53d9
Don't crash when portmapper reports non-tcp/udp transports. Fixes #363
2016-04-18 05:11:57 +00:00
dmiller
20d6d17c2c
Support (unlikely) TLS NPN checking for STARTTLS-type services
2016-04-11 20:42:03 +00:00
dmiller
a24006e0b7
Check the appropriate functions in portrules for SSL/TLS
2016-04-11 20:42:02 +00:00
tomsellers
0699edbe05
NSE: ldap-rootdse.nse improve error handling
2016-04-11 18:04:53 +00:00
tomsellers
12e9af5b1b
Adjust indentation on rpcinfo.nse, no fuctionality changes
2016-04-10 14:19:51 +00:00
tomsellers
ee4ed66956
Added support for LDAP over udp to ldap-rootdse.nse.
...
Also added version detection and information extraction to match the
new LDAP LDAPSearchReq and LDAPSearchReqUDP probes. Closes #362
2016-04-09 21:33:26 +00:00
dmiller
4b341c4311
Clarify vnc handshake/login process and correctly send chosen security type
2016-04-04 04:47:37 +00:00
dmiller
6c7655c24f
Add Tight VNC auth type
2016-04-02 15:22:30 +00:00
dmiller
41de3b1d60
New script vnc-title
2016-04-01 22:29:40 +00:00
dmiller
3af66a0445
VNC revamp and extension
2016-04-01 22:29:39 +00:00
tomsellers
e2cfda9dc0
Change to smb-os-discovery to enable it to augment SMB version detection. Closes #348
2016-03-31 10:56:29 +00:00
dmiller
81bb435ad9
Add TLS auth support to vnc.lua and vnc-brute
2016-03-28 16:46:32 +00:00
paulino
9b53acb1c0
Fixes bad indexed global
2016-03-26 19:52:37 +00:00
dmiller
6a0c3e8219
Allow ascii values in cert fields (broke in r35714)
2016-03-25 14:02:02 +00:00
dmiller
b76257d14b
fix a NSE bug when http-cross-domain-policy has no output. Closes #343
2016-03-21 22:04:42 +00:00
dmiller
7a430d154b
Auto-detect UTF-16 fields in certificates and transcode to UTF-8
2016-03-19 20:44:32 +00:00
dmiller
663271f95d
New shodan-api script for querying Shodan internet scan data
2016-03-16 05:47:58 +00:00
dmiller
c7892e365f
Let http.lua functions optionally connect via any address family
...
Sometimes (e.g. when using an external API), a script wants to connect
by name to a server and doesn't care whether IPv4 or IPv6 is used. By
passing the "any_af" option, the first resolved address of any address
family will be used, allowing external-category scripts which used to
fail with -6 to succeed.
2016-03-16 05:07:59 +00:00
dmiller
4135ec518f
Add rpcinfo to version category, see previous commit
2016-03-14 20:42:52 +00:00
dmiller
0bb036cda2
Allow rpcinfo.nse to set version info
...
The rpcinfo script can now set version info just like rpc-grind. Since
this requires considerably less traffic than rpc-grind, I made rpc-grind
depend on rpcinfo so that it will avoid running if we can get the
version information this way instead.
Also changed rpcinfo to only run on port 111, not on "rpcbind" service
since that's what -sV labels any detected RPC service.
2016-03-14 20:42:51 +00:00
dmiller
5843cd95a4
Add rusers script
2016-03-14 16:03:47 +00:00
dmiller
5729d3844e
Only run http-apache-server-status on Apache or unknown http servers. Add version info.
2016-03-14 03:41:38 +00:00
dmiller
2ec6eb5110
Only report unique VHosts in http-apache-server-status. Too much output otherwise.
2016-03-14 03:41:37 +00:00
dmiller
a4b81f39b6
Add http-apache-server-status. Closes #322
2016-03-14 03:41:36 +00:00
dmiller
7271efe963
Restore '%' deleted when http-vuln-cve2013-7091 was renamed. Closes #332
2016-03-13 20:29:11 +00:00
dmiller
b6778204cd
Fix http-brute, munged by me in r35584. Closes #317
2016-03-12 20:45:53 +00:00
dmiller
b39e055e32
Fix crash when field doesn't exist. Closes #306
2016-03-03 17:15:12 +00:00
dmiller
5b5524d4ba
Change names of SSLv2 ciphersuites to match draft specification. Closes #314 .
2016-03-03 04:58:24 +00:00
tomsellers
318accba6e
NSE add STARTTLS to sslv2 improving detection of SSLv2 and DROWN oracles. Closes #320
2016-03-03 02:06:05 +00:00
dmiller
abb827a759
Let http-title fetch different url via script-args
2016-02-21 14:28:09 +00:00
dmiller
ab79e7ad88
Fix a mistake in merging #36 : append items instead of nesting lists
2016-02-17 13:26:29 +00:00
dmiller
0be412e50e
Add XML output to http-rfi-spider (nnposter). See #36
2016-02-14 14:42:19 +00:00
dmiller
4da5cfebc7
Avoid blank output from broadcast-dhcp-discover
2016-02-11 23:50:48 +00:00
gyani
cf326ea74f
Corrected a spelling. Had misspelt JSON as J0SON.
2016-02-10 20:07:35 +00:00
jah
3da6feda13
Treat stale, unwritable files as unreadable.
2016-02-07 15:28:26 +00:00
jah
a40fe5413c
Handle file io error messages on Windows
...
which prepends the file path to the error string.
2016-02-07 15:11:24 +00:00
jah
a9e7f696b9
Improve handling of locally cached assignment data
...
so that whois-ip will not make HTTP requests to iana.org unless it is
permitted to write the remote resources to a local file and to
subsequently read from the local file.
2016-02-07 14:10:09 +00:00
jah
a50e8cfa21
Seperate addr family check for assignment file use
...
A problem encountered while obtaining or locally caching a remote IANA
assignment file for one address family will not prevent the use of an
assignment file corresponding to a different address family.
2016-02-07 14:08:44 +00:00
jah
b7e597ed8f
Various non-functional improvements
...
such as white space corrections, removal of redundant function arguments
and cetera.
2016-02-07 14:07:57 +00:00
dmiller
10bddaf1cf
Update http-php-version based on scan data
2016-02-05 22:53:43 +00:00
dmiller
3dec95dcf8
Fix host header for http-brute; nsedoc and refactoring
2016-01-19 15:44:20 +00:00
dmiller
26510fe8a7
Remove hardcoded IP from ftp-bounce
...
Instead of hard-coding the many-years-invalid IP address of
scanme.nmap.org, look it up via DNS. Even better, you can override the
host used for this purpose, in case you don't want to tip your hand.
2016-01-15 20:19:55 +00:00
dmiller
4da091f1f0
Update http-robtex-shared-ns
2016-01-15 05:55:16 +00:00
dmiller
709fcfbefa
Fix http-robtex-reverse-ip and make it a bit more resilient
2016-01-15 05:55:15 +00:00
