PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-18 21:49:01 +00:00
Code Issues Projects Releases Wiki Activity
12,968 Commits 2 Branches 0 Tags
adc7f02503cd0224fb65a28bcc89ffd6c8de48d3
Commit Graph

2968 Commits

Author SHA1 Message Date
david
2b898d61f7 o [NSE] ssh-hostkey now additionally has a postrule that prints hosts 
that have the same hostkey. [Toni Ruottu]
 2011-03-27 22:04:13 +00:00
david
6d90b593b7 Change the "name" member of a decoded NSEC record to be called 
"next_dname" instead.
 2011-03-27 05:07:16 +00:00
david
477bd66fc9 Merge r22369:22777 from /nmap-exp/david/nmap-nsec. This adds the 
dns-nsec-enum script, originally by John Bond and improved by him and
me.

Changes in dns.lua:
  Add dnssec option to dns.query that adds an OPT RR with the DO (DNSSEC
    okay) flag set.
  Add answer fetcher for NSEC records (unused currently).
  Add decoder for NSEC records.
  Add rudimentary handling of the additional section in dns.encode.
  Add a check that a decoder exists before trying to call it.
 
Also added a copy of the simplified BSD license that the new script is
under.
 2011-03-27 04:24:43 +00:00
jah
5a32f584d4 Modified regex used to parse the 'last modified' line of whois assignments files 
to allow for the absence of the etag on that line.
 2011-03-24 12:49:00 +00:00
david
ae11175ad8 Put ssl-known-key in {"safe", "discovery", "vuln"} (was {"discovery"}). 2011-03-22 19:44:46 +00:00
david
6142158b43 Updates to ssl-known-key by Mak Kolybabi, 
http://seclists.org/nmap-dev/2011/q1/934. Change the database format.
Change the output.
 2011-03-22 19:44:45 +00:00
david
0e970b4bc6 ssl-known-key.nse: Use shortport.ssl. Rename ssl-fingerprints.txt to 
ssl-fingerprints; no extension appears to be the prevailing convention
in nselib/data. Allow comments and blank lines in ssl-fingerprints. Add
Little Black Box copyright and attribution to ssl-fingerprints. Boost
some print_debug thresholds.
 2011-03-22 19:44:42 +00:00
david
47557a108b o [NSE] Added ssl-known-key.nse, which checks SSL certificates against a 
list of certificates with known keys that have been extracted from
  firmware files. [Mak Kolybabi]
 2011-03-22 19:44:40 +00:00
david
93aa8e052b More names for http-vhosts from Carlos Pantelides. 2011-03-21 23:19:36 +00:00
patrik
4528f52188 Deleted the ms-sql-discover script per the following discussion: 
http://seclists.org/nmap-dev/2011/q1/725 [Patrik]
 2011-03-19 20:09:43 +00:00
fyodor
0e68420cc6 Oops, I forgot to add the comment symbols to my nsedoc @output changes to this script. 2011-03-19 18:58:31 +00:00
fyodor
8e9ef47bff Add a header line to rpcinfo program listing. I also updated the @usage docs to include results against 58.224.52.156 2011-03-19 08:57:17 +00:00
patrik
b62cebc7b3 o [NSE] Fixed a problem in oracle-brute that would fail due to connection 
exhaustion. Fixed some debugging messages in the brute library [Patrik]
 2011-03-19 08:26:33 +00:00
fyodor
e896e27e8a Put rpcinfo in the default category and also improve the NSEDoc documentation for it slightly 2011-03-19 08:06:34 +00:00
robert
7b27940ada Updated the hash information to include PHP/5.3.6 (released today). 2011-03-17 15:42:56 +00:00
david
4fc1ea786b Remove redundant "Result:" label from dns-brute.nse output. Use the 
"name" feature of format_output instead of inserting putative data rows
for labels.
 2011-03-15 17:12:45 +00:00
david
656109a31f Add a link to Nping Echo Mode documentation. 2011-03-13 02:02:29 +00:00
david
a3ec901899 Add nping-brute.nse from Toni Ruottu. 2011-03-13 02:02:27 +00:00
jah
8b0f87e91c Conditionally write the HTTP etag response header value to the IPv4 and IPv6 
Assignments text files, i.e. don't try and write the header value if it wasn't
received!
 2011-03-10 12:32:27 +00:00
fyodor
0b7b41d05f Trivial reword to fix a little grammar/typo problem 2011-03-06 09:34:57 +00:00
david
eacb827eee Don't require the dns-brute.domain argument to be given to add new 
targets.
 2011-03-05 21:16:18 +00:00
david
66a7e95105 Simple portrule: trust whatever the user gives us. 2011-03-05 21:16:16 +00:00
david
da79e0aaa2 Use a rewritten guess_domain function and bail out if the domain isn't 
known.

Previously it would solider on even if given only an IP address, trying
names like ftp.168.0.1 and www.168.0.1.
 2011-03-05 21:16:13 +00:00
david
cc4019aedd Make domainname local rather than global. I expect this would cause 
problems more tha one instance of this script were run at once.
 2011-03-05 21:16:12 +00:00
david
4e43fff90a Signal the condvars when threads are finished. 2011-03-05 21:16:11 +00:00
david
6399fe23c3 Look up IPv6 records unconditionally. 2011-03-05 21:16:08 +00:00
david
10ae05791c Localize functions. 2011-03-05 21:16:07 +00:00
david
c2ca0ded54 Pass an interator instead of separate arguments to thread functions. 2011-03-05 21:16:06 +00:00
david
4225147e6c Use stdnse.print_debug. 2011-03-05 21:16:04 +00:00
david
bdbf332562 Use a unified resolve function. 2011-03-05 21:16:03 +00:00
david
3626dacbca Put the lists of host names and srv names at the file level. 2011-03-05 21:16:01 +00:00
david
3f7649b4ec Remove the dns-brute.cclass reverse name resolution. It's probably 
better to use Nmap's existing fast reverse resolver.
 2011-03-05 21:16:00 +00:00
david
3fe40dd995 Add dns-brute.nse. 2011-03-05 21:15:58 +00:00
david
987d5f19a4 --script-updatedb. 2011-03-05 21:05:28 +00:00
david
bb4a4203a5 Add ovs-agent-version.nse, a script to detect the ovs-agent service for 
which existing single probes are ambiguous.
 2011-03-02 07:39:31 +00:00
david
824b1c0d6f Fix typo. 2011-03-02 07:39:29 +00:00
patrik
58edddaedb o [NSE] Merged the ms-sql branch with several improvements and changes to the 
ms-sql scripts and library:
  - Improved version detection
  - Improved server discovery
  - Add support for named pipes
  - Add support for integrated authentication
  - Add support for connecting to instances by name or port
  - Improved script and library stability
  - Improved script and library documentation
 [Patrik Karlsson, Chris Woodbury]
 2011-02-26 22:41:10 +00:00
patrik
d6bbc6da8f o [NSE] Added probe for Apple iPhoto (DPAP) and the dpap-brute script that 
performs password guessing against a shared iPhoto library. [Patrik]
 2011-02-26 16:24:54 +00:00
david
53d71389da Patch to firewalk.nse from Henri Doreau; avoids an error when giving a 
timespec.
 2011-02-23 02:34:47 +00:00
david
c334d570eb Use the tab library to line up output. 2011-02-22 21:55:26 +00:00
david
1c4e060f79 Don't randomly select the servers to show. Just show the ones at the 
top. Display the total number when limiting output.
 2011-02-22 21:55:25 +00:00
david
e5717f259a Add quake3-master-getservers from Toni Ruottu. Move the 
quake3-master-protocols data file inside of
quake3-master-getservers.nse.
 2011-02-22 21:55:23 +00:00
patrik
980a0878a8 Corrected documentation bug 2011-02-22 21:49:48 +00:00
patrik
e50d65755b * Add a new script snmp-ios-config that pulls the config from a Cisco devices 
using SNMP and tftp. The script was created by Vikas Singhal.
* Add tftp library, used by the snmp-ios-config script, that acts as a server
  and receives the config file from the device. [Patrik]
 2011-02-22 09:13:03 +00:00
david
770ecb7f66 Factor out three data-gathering functions in servicetags: one to get 
agent information, one to get the list of svgtags, and one to get
information about a particular svctag. Don't crash if the TCP connection
can't be made (which will be the case when the stlisten service isn't
running).
 2011-02-22 04:32:56 +00:00
david
5349d1619e Don't use strbuf to build payloads; it's unnecessary for these short 
strings.
 2011-02-22 04:32:54 +00:00
david
b1aaf2da8d Remove a level of indentation. 2011-02-22 04:32:53 +00:00
david
288c9c88bb Use data-driven XML grepping instead of repeating the same code many 
times.
 2011-02-22 04:32:53 +00:00
david
f751c0c386 Whitespace, spelling. 2011-02-22 04:32:52 +00:00
david
7ad53deb42 Add servicetags script. 2011-02-22 04:32:51 +00:00