dmiller
ed26487ae2
Convert base32 and base64 tests to unittest tests
2018-08-28 16:58:02 +00:00
dmiller
880f883029
Remove some leftover debug statements
2018-08-28 16:58:01 +00:00
dmiller
6ee1fa98d0
Convert bits.lua tests to unittest tests
2018-08-28 16:58:00 +00:00
dmiller
b222a0d7ee
Remove bit.lua
2018-08-28 15:56:47 +00:00
dmiller
7e5ef7130b
Move arshift from bit.lua to bits.lua
2018-08-28 15:56:46 +00:00
dmiller
24c5ff63b2
Remove nearly all bit.lua use
2018-08-28 15:56:45 +00:00
dmiller
e0af0179eb
Remove use of bit library from all NSE libs
2018-08-28 15:21:53 +00:00
dmiller
4d136359b3
Fix an error in checking the RETAIN bit in MQTT PUBLISH packet.
2018-08-28 15:21:51 +00:00
dmiller
d84ddbe3fd
Remove bit library from a few more libs
2018-08-28 03:52:55 +00:00
dmiller
7c3b9b40d2
Remove bit lib from gps.lua, add unittests
2018-08-28 03:52:54 +00:00
dmiller
199c844d8a
Remove unneeded requires
2018-08-27 22:00:14 +00:00
dmiller
71cc60d68c
Remove some unused requires
2018-08-27 22:00:13 +00:00
dmiller
46eca7f35f
Move date/time functions from stdnse to datetime. See #517
2018-08-27 22:00:10 +00:00
dmiller
9c3e676871
Strictly obey URI scheme when available, e.g. no SSL if scheme is http, no plain if https
2018-08-27 15:34:19 +00:00
dmiller
bc0935a51a
Warn if no ciphers support FS. See #1309
2018-08-27 15:02:48 +00:00
dmiller
069c76a1de
Handle https://example.com:80 and http://example.com:443 cases
...
The shortport.ssl check can be expensive (6-second timeout on HTTP
services if you don't use -sV), so we want to avoid it if possible. As
discussed at
b2deb019ed (commitcomment-30289632)
this commit restores the SSL check in cases where it might matter (http
and https default ports) and adds a bypass when the URI scheme is
explicitly requested, as in http.get_url and when following redirects.
2018-08-26 18:24:43 +00:00
nnposter
973b471c11
Corrects a few issues related to snprintf return values
2018-08-26 02:29:14 +00:00
nnposter
d22dbc63b8
Adds a necessary search restart to custom strcasestr().
...
Previously needle "ab" would not be found in haystack "aab".
2018-08-25 22:39:36 +00:00
nnposter
6725a34200
va_copy also requires va_end
2018-08-25 19:41:32 +00:00
nnposter
c1fa8219bd
Simplifies packet-mangling routines, fixes a few one-off bugs
2018-08-23 17:13:56 +00:00
dmiller
8bca8af23e
Close socket when connect fails. Possibly related to #1245
2018-08-23 02:58:39 +00:00
dmiller
1f3c083c25
Fix function name (copy-paste error)
2018-08-23 02:58:38 +00:00
dmiller
a7e20158a8
Fix a crash in nbstat.nse; stdnse.output_table can't have setmetatable called on it this way.
2018-08-21 19:36:38 +00:00
dmiller
7629f3b997
Fix a typo in a previous fix
2018-08-21 19:12:36 +00:00
dmiller
d8bcee17bd
Get LoopbackAdapter name from service reg key instead of software reg key
2018-08-21 18:21:06 +00:00
dmiller
7e644b391e
Use pcap_open and pcap_set_immediate_mode in nsock. Closes #1291
2018-08-21 16:03:30 +00:00
dmiller
d6a04c465e
Call pcap_set_immediate_mode to get results back immediately.
2018-08-21 04:51:33 +00:00
dmiller
7f1485f56d
Switch to pcap_create instead of pcap_live_open. See #1291
2018-08-20 22:08:56 +00:00
dmiller
4deb24fec4
Change configure check for libpcap to require pcap_create (libpcap 1.0.0 or later). See #1291
2018-08-20 22:08:55 +00:00
nnposter
9e77964022
Removes redundant error check
2018-08-20 01:10:32 +00:00
nnposter
0500b2ce42
Converts FromBytes routine from bin.unpack to string.unpack for internal consistency
2018-08-20 01:08:55 +00:00
nnposter
19693c334c
More string.sub vs. string.byte optimizations
2018-08-19 01:49:08 +00:00
nnposter
57a17415b7
more efficient match, avoiding strings
2018-08-18 01:00:16 +00:00
dmiller
59efc272ec
Don't allow -Pn to override a MAC address failure with --send-eth
2018-08-17 03:02:40 +00:00
dmiller
42661c4447
Avoid scanning targets we can't reach anyway.
...
See d8ff55b72e (commitcomment-30112744)
2018-08-16 22:38:12 +00:00
dmiller
6c4e02e89d
Use stdnse.format_timestamp in more places to avoid formatting issues. See #1255 , #1303
2018-08-16 21:26:48 +00:00
nnposter
834e37d475
Adds previously dropped GH reference
2018-08-14 22:29:12 +00:00
dmiller
d8ff55b72e
Start timeout clocks closer to first probe, not in batches. Closes #1150
2018-08-13 19:24:06 +00:00
dmiller
28f3b4910a
Don't script-scan targets that are already timed out
2018-08-13 19:24:05 +00:00
dmiller
0a0e9c4433
Changelog entry for #1147 , #1108 , CVE-2018-15173
2018-08-13 17:18:48 +00:00
dmiller
6c836c83e4
Add some new popular favicons verified through Shodan
2018-08-11 21:24:00 +00:00
dmiller
0e2683e079
Cache a static table instead of regenerating every time
2018-08-11 21:23:59 +00:00
dmiller
b2deb019ed
Don't use shortport.ssl to determine Host header.
...
The only reason this was used was to determine if port 443 was HTTPS.
Simply dropping the port if it's 80 or 443 yields the same outcome.
Maybe we want to be more clear, but then we'd need to have the caller
pass in the URI scheme, too. This is faster and avoids the new SSL
probes in shortport.ssl.
2018-08-11 21:23:58 +00:00
dmiller
7a790d3665
shortport.ssl: don't send 2 probes if the first gives obviously not-ssl response
2018-08-11 21:23:57 +00:00
dmiller
c892dab9a3
Handle large dates on platforms that can't. Fixes #1303
2018-08-10 19:42:50 +00:00
dmiller
c3113037b0
Avoid NULL ptr deref crash if pcre_study returns NULL. Fixes #1302
2018-08-10 17:12:19 +00:00
nnposter
302954fb3f
Rectifies incorrect use of va_start/va_end from stdarg.h. Closes #1297
2018-08-09 22:11:15 +00:00
dmiller
0c617b26d9
Add some missing library requires and remove trailing whitespace
2018-08-08 18:58:40 +00:00
nnposter
684803ce30
Fixes a comment to match opening ifdef
2018-08-08 17:33:01 +00:00
dmiller
6d8bb6df22
Set limits on PCRE matches to avoid issues like #1147
2018-08-08 16:36:21 +00:00