ron
056b63833a
Add new fingerprints to http-fingerprints.lua (Wordpress, Health)
2021-02-19 20:21:09 +00:00
nnposter
d4f4124c91
Clarify the expected format of the Nikto database
2021-02-17 04:13:20 +00:00
nnposter
6d1c3f091e
Fix Nikto db path resolution
2021-02-17 03:42:33 +00:00
dmiller
d4bf034df9
Fix TDS7/mssql login packet for non-ascii usernames. See #2056
2021-02-08 22:49:19 +00:00
dmiller
e2f1df924c
Fix expansion of %F strftime-like filenames.
2021-01-27 21:38:46 +00:00
dmiller
b305ba6b5d
Prevent ssl-* from printing to jetdirect ports. Fixes #2237
2021-01-25 17:00:40 +00:00
dmiller
c425bb6d62
Changelog entry for previous changes [ci skip]
2021-01-19 19:57:38 +00:00
dmiller
a20fda6480
Respect --max-retries in UDP scan even when some payloads haven't been sent.
2021-01-19 19:57:37 +00:00
dmiller
6310b7d9e3
Ensure all UDP payloads get sent before giving up on a port.
2021-01-18 22:23:55 +00:00
nnposter
58617a79f7
SMB2 dialect refactoring. Fixes #2203 , closes #2208
2021-01-18 21:21:43 +00:00
nnposter
4564749ccd
Reject non-useable routes. Fixes #2206
2021-01-18 20:11:40 +00:00
dmiller
5258ac6b3c
Be clear about why unpwdb/passdb are not valid. See #2224
2021-01-18 18:15:03 +00:00
dmiller
6fadd16d6a
Document iocp nsock engine in Nmap man page; note the default for --nsock-engine
2021-01-17 16:19:58 +00:00
fyodor
3bb502fcb0
Update author name/email
2021-01-14 18:26:56 +00:00
fyodor
80a9f4b2e3
Add the NPSL 0.92 to 0.93 upgrade to the CHANGELOG, noting that Nmap 7.90 and 7.91 may be used under this newer version if desired
2021-01-13 00:02:25 +00:00
fyodor
a3c846c368
Rewrite a poorly worded clause which was not interpreted in the way it was intended and bump the version number to 0.93
2021-01-12 23:40:30 +00:00
nnposter
2f78ac2eb5
Fix broken JSON unit tests. Closes #2222
2021-01-08 04:14:21 +00:00
dmiller
67cccec38d
Use checked_fd_set in 2 more places: bounce scan and pcap_select
2021-01-07 18:31:09 +00:00
dmiller
28bfe0dfd2
Use checked versions of FD_* macros. Closes #2202
2021-01-07 17:52:24 +00:00
dmiller
3ecec3f4dc
Correct to DTD, explicitly show empty output. See #2216
...
This shouldn't happen, so we'll print a "bug" error message so users
notify us.
2021-01-01 19:25:56 +00:00
dmiller
9a3a8d1593
Check for output before returning. See #2212
2020-12-30 23:31:36 +00:00
dmiller
1943c0a2fc
Simplify output_table __index metamethod
...
From Lua 5.3 docs: "Despite the name, the metamethod for this event can
be either a function or a table. [...] If it is a table, the final
result is the result of indexing this table with key."
2020-12-30 23:31:35 +00:00
dmiller
e7b40571ef
Correct the DTD for hosthint element. Fixes #2217
2020-12-30 23:31:35 +00:00
nnposter
77f764fe72
Add script nbns-interfaces. Closes #2201
2020-12-30 03:51:21 +00:00
dmiller
ef2bafb09c
Report system error message when fopen fails
2020-12-28 17:51:16 +00:00
nnposter
f6fbb29481
Improve output formatting
...
- EHLO output no longer has a trailing separator
- Strings "214" and "250" are now removed only from the line beginning
2020-12-27 00:38:53 +00:00
nnposter
eecf225310
Fix word-wrapping
2020-12-27 00:25:40 +00:00
nnposter
9334c9fd5d
Ncat certs should last for one year
...
Old Ncat versions were using one year but during OpenSSL API refresh (r36533),
the duration was accidentally changed to one minute by copying Ncat test code
from ncat/test/test-wildcard.c
Fixes #2167 , closes #2168
2020-12-24 00:35:38 +00:00
dmiller
cd63da6ba0
Update DTD and changelog entry for previous change
2020-12-17 22:12:05 +00:00
dmiller
38671f2225
Enhance output to print proto, reason, and port list for ignored ports
...
Normal output will report count, protocol, and reason for each group of
ports in an ignored state (usually closed or filtered when there are
more than 25 ports in one of those states).
XML output will contain a consolidated list of port numbers as well.
2020-12-17 22:12:04 +00:00
dmiller
19daadfd31
Short-circuit 0-ports-scanned case, which already gets special treatment as 'Skipped port scan' output
2020-12-17 22:12:04 +00:00
dmiller
bad0e61739
Fix grepable output when all scanned ports are ignored
...
Previous behavior was to output an extra host status line "Status: up"
New behavior outputs an empty "Ports: \t" then the "Ignored State"
field.
2020-12-17 17:34:32 +00:00
dmiller
790beb2419
Simplify: No way to have only 1 scanned port in ignored state.
2020-12-17 17:34:32 +00:00
nnposter
d0cf36c0a7
Fix false positives due to missing start/boot time
...
SMB field ServerStartTime ['start_time'] of zero should be interpreted
as "no time provided", not as the start of the epoch.
The field is zeroed out in SMB dialect 3.1.1.
2020-12-16 19:19:15 +00:00
nnposter
003849f795
Minor code simplification using tableaux.invert
2020-12-16 18:03:08 +00:00
nnposter
1b39988bf9
Correct the return value of smb2.negotiate_v2
...
As documented, the function should return the negotiated SMB2 dialect,
not just reflect back the dialect override table.
2020-12-16 17:54:15 +00:00
dmiller
57b7e56a68
Fix a couple isIgnoredState calls to the new prototype.
2020-12-15 22:16:36 +00:00
dmiller
1566da56f8
Reduce/cache calls to getStateCounts
2020-12-15 21:45:56 +00:00
nnposter
27b9a90f3e
Document Nmap option --noninteractive. See #1152
2020-12-07 00:52:53 +00:00
nnposter
a0172dff48
MS SQL build map true-up
2020-12-04 03:16:33 +00:00
nnposter
15e529c64f
Clarify default script behavior
2020-12-04 01:16:08 +00:00
nnposter
1293291ac8
Skip lease time in DHCP client packets by default
...
The old behavior (of using the default time of 1s) did not allow constructing
packets without this option, which in turn resulted in (1) DHCPINFORM packets
being non-compliant with RFC 2131 and (2) DHCP discovery scripts potentially
receiving non-default IP lease information. Fixes #2197
2020-12-04 00:38:12 +00:00
dmiller
d1b39a6003
Use unsigned format specifier for unsigned value (was showing negative hosts scanned)
2020-12-02 15:30:24 +00:00
dmiller
6f57df02be
Don't strip leading 0s in stdnse.tobinary
...
Every place this function is used, the result is padded with 0s anyway,
so may as well not strip them here. Didn't remove the padding code since
this could return only 4 chars, and most padding is to 8-char width.
2020-11-30 23:22:07 +00:00
dmiller
86deb87187
Use local functions instead of anonymous functions for gsub (less GC overhead)
2020-11-30 23:22:06 +00:00
dmiller
c8fdcd80b5
Precalc/reuse some tables and values
2020-11-30 17:59:18 +00:00
nnposter
d3ef26b229
Silence GCC warning about string truncation. Fixes #2186
2020-11-26 02:29:39 +00:00
nnposter
c00f054d3c
Fix crashes when decoding codepoints larger than 255. Fixes #2192
...
These codepoint references are now left intact. If necessary, it would be
a trivial change to replace them with corresponding UTF sequences.
Note that the previous code was decoding the character references recursively,
which was probably not the intent.
2020-11-25 02:14:03 +00:00
dmiller
169d7e5a92
Restore call to post_connect in non-ssl case. Fixes #2149
2020-11-19 17:34:24 +00:00
dmiller
f4fb91912d
New script port-states expands hidden port state summaries
2020-11-16 21:41:46 +00:00