1
0
mirror of https://github.com/nmap/nmap.git synced 2025-12-23 16:09:02 +00:00
Commit Graph

10291 Commits

Author SHA1 Message Date
paulino
5d35530075 Adds http-crossdomainxml 2015-04-08 15:58:20 +00:00
dmiller
215cebeec4 Enforce dependencies for test progs in ncat/Makefile, fixes build breakage with -j 2015-04-08 13:53:41 +00:00
dmiller
e114af114a CHANGELOG entry for IPv6 Hop limit feature 2015-04-07 21:31:08 +00:00
dmiller
4a491e35d8 Check address family before loading OS fingerprints
In addition to silencing an unnecessary fatal error when nmap-os-db is
not found but user has requested -6, this should make start times a bit
more efficient, since only 1 or the other database is loaded. Patch by
Alexandru Geana

Fixes #97
2015-04-07 21:31:06 +00:00
dmiller
d17ec63ba5 IPv6 hop limit feature for OS detection, patch by Alexandru Geana 2015-04-07 17:12:55 +00:00
jah
3c3d3bc55a Fix thread.info in Script:new_thread and new_worker
in nse_main - the pattern to capture the script thread ID did not
match on Windows.  See http://seclists.org/nmap-dev/2015/q1/205 .
2015-04-06 16:26:48 +00:00
dmiller
986f87be39 Remove call to deprecated BN_CTX_init http://seclists.org/nmap-dev/2015/q2/9 2015-04-06 12:27:17 +00:00
dmiller
be9793fe45 Remove accidental non-standard alternative token 'or' 2015-04-06 00:28:35 +00:00
fyodor
df26fa850c Remove --log-errors from Nmap quickref (help screen) because it has been the default behavior for a while and so does nothing 2015-04-04 01:43:08 +00:00
dmiller
8ac2c5e496 SSL/TLS port adjustments for version scan
Increased rarity of TLSSessionReq from 2 to 7, since SSLSessionReq
should catch most things.

Moved some obvious SSL ports (989-995) to sslports directives.

Added a few SSL ports to the existing SSL* probes.
2015-04-02 18:44:36 +00:00
dmiller
f93cab84eb Add TLS-compatible version probe for services (like MS RDP) that silently drop SSLv3 handshakes 2015-04-02 04:40:27 +00:00
dmiller
dab7b10ebe Add 3389 as an SSL port; Enhanced RDP Security requires TLS 2015-04-02 04:40:26 +00:00
dmiller
311c2c3065 Fix a crash due to ICMP type 3 code 2 received during service scan 2015-04-01 19:52:52 +00:00
dmiller
ab5b346352 Obey TLSv1.2 RFC regarding anonymous signature type 2015-03-25 19:35:20 +00:00
dmiller
170a45f21d Fix a typo in a debug message 2015-03-25 14:30:18 +00:00
dmiller
04fee3d14c Move TLSv1.2 signature_algorithms extension defaults into tls.lua 2015-03-25 02:29:25 +00:00
dmiller
ed86473b0c Send supported signature algorithms for TLSv1.2 2015-03-24 23:22:19 +00:00
dmiller
6d178c39bf Process 100 more IPv4 fingerprints (Windows done) 2015-03-24 14:57:13 +00:00
dmiller
6f08d4b81f Process 650 more IPv4 fingerprints (Linux done) 2015-03-24 03:54:10 +00:00
dmiller
660c408de9 Another 300 os fingerprint submissions 2015-03-23 21:54:49 +00:00
dmiller
3e19878190 Add service fingerprint for Gearman (Andrew Horton) 2015-03-23 19:37:12 +00:00
dmiller
95437a1468 Fix a crash in isTCPwrapped. Closes #89 2015-03-23 12:35:39 +00:00
fyodor
56c9f847f4 Regenerate nmap-services to correct a typo 2015-03-21 01:08:41 +00:00
dmiller
b200984fe7 Note a done task: Bug tracker is http://issues.nmap.org/ 2015-03-20 19:24:27 +00:00
dmiller
115f35ffca Process another 150 OS fingerprints 2015-03-20 14:10:43 +00:00
dmiller
279ba9b9b0 Process 550 new IPv4 OS fingerprints, incl OS X 10.10 2015-03-19 04:20:26 +00:00
dmiller
c0628fd141 Report IPv4 and IPv6 addresses resolved for each host
Previously, we would only request IPv4 addresses by default, or only
IPv6 when scanning with -6. Now, we'll request both (by not passing an
address family in the hints to getaddrinfo) and report them all in the
"Other addresses" line. This should encourage more users to scan with
-6. Additionally, it allows us to catch and report attempts to scan
IPv6-only hosts via IPv4, where previously we would just say "Failed to
resolve"

Closes #76
2015-03-11 04:14:26 +00:00
dmiller
fbbb64a190 Silence warnings: 'Makefile.in seems to ignore the --datarootdir setting' 2015-03-11 04:14:24 +00:00
dmiller
67be9e3ef9 Mark some Make targets as .PHONY 2015-03-10 13:16:58 +00:00
dmiller
270d1418fe Update OS X build info for minimum 10.8 (Mountain Lion) 2015-03-10 04:26:24 +00:00
dmiller
1cd6c40bf9 Keep phony targets out of the prereqs for ncat itself, otherwise it is built every time 2015-03-10 03:52:44 +00:00
dmiller
596675939d Let nmap-update be built alone (make build-nmap-update) 2015-03-10 03:52:42 +00:00
dmiller
cf6639e2b8 Separate libapr and libsvn LIBS variables in nmap-update Makefile 2015-03-07 05:37:42 +00:00
dmiller
f934e350a8 Keep -lssl and friends out of LIBS for Ncat, allows overriding with static libs 2015-03-07 05:37:40 +00:00
dmiller
564f654747 Fix leftovers from the whois => whois-ip name change 2015-03-07 04:24:31 +00:00
dmiller
55c3348fae Use tls.client_hello defaults for some scripts 2015-03-06 20:00:00 +00:00
dmiller
1fd4b3edd8 Use some sane defaults in tls.client_hello 2015-03-06 19:59:59 +00:00
dmiller
40945dc702 Send SSLv3 as record version in ClientHello for compatibility 2015-03-06 19:59:57 +00:00
dmiller
ee1156eb51 Fix a NULL pointer dereference in libdnet-stripped
Reported and diagnosed by Gisle Vanem.

Fixes #70
2015-03-05 22:09:49 +00:00
dmiller
e8f34f61a3 Statically link OpenSSL on OS X
Using the macports version, which is up-to-date, instead of the outdated
version included in the 10.5 SDK. As we update the minimum supported
version of OS X, that would improve, but not by much: 10.9 is still on
0.9.8y
2015-03-05 14:17:45 +00:00
fyodor
6e218d7d7f Regenerate man pages from the source XML 2015-03-04 02:58:45 +00:00
fyodor
8c680628a4 Add udp port 64738 for Murmur to nmap-services. It is the server-side software for Mumble voice chat software 2015-03-04 02:58:07 +00:00
dmiller
580c2555ea Disable libnl by default when building with included libpcap
Libpcap only needs libnl for monitor-mode sniffing. Disabling it lets us
not worry about which -lnl or -lnl-3 linker argument to include in our
own LIBS, so Nmap builds properly no matter whether libnl is present or
not.
2015-03-03 17:52:12 +00:00
dmiller
2e57f72bb0 Restrict http-cisco-anyconnect to https. Closes #62 2015-03-03 17:52:09 +00:00
dmiller
c19023dc0c UDP payload for DTLS 2015-03-03 04:48:19 +00:00
dmiller
e2bfa97920 Replace instances of bin.pack('A', x), which is equivalent to tostring(x), and a no-op on strings 2015-03-03 04:48:18 +00:00
dmiller
03110e7e89 String concat cleanup grab-bag
Mostly just eliminating concatenation-reassignments by chaining
concatenations, reordering assignments to allow better use of bin.pack,
and using tables to store intermediate results before concatenating
them. Used strbuf as a quick fix in dhcp.lua. Eliminated some unused
string variables in vulns.lua.
2015-03-02 14:39:29 +00:00
dmiller
c1b2429efd Remove some more creative ways of building a literal byte 2015-03-02 13:47:45 +00:00
dmiller
ea58c6bebb Replace chained concatenation reassignment with simple concatenation
Example:

x = y
x = x .. z

Fixed:

x = y
.. z

This simple fix would save 1 string creation/deletion. Most changes
involve many more than this.
2015-03-02 13:47:42 +00:00
dmiller
3025022f98 Optimize stdnse.debug and stdnse.verbose
Unnecessary, probably, but this eliminates 2 of 7 string
creations/collections due to concatenation and reassignment. Also
eliminates 2 unneeded table lookups and tests (since host always has
host.ip and port always has port.number), and eliminates 1 extra test
for prerule and postrule scripts, since we can't have a port if we don't
have a host.
2015-03-01 04:18:33 +00:00