1
0
mirror of https://github.com/nmap/nmap.git synced 2025-12-14 19:59:02 +00:00
Commit Graph

138 Commits

Author SHA1 Message Date
paulino
fc431f8df5 -Adds an administration password reset vulnerability in Seagate BlackArmor 110, 220 and 440. 2013-04-26 23:59:28 +00:00
david
a58e6d0f33 -Adds digest support to basic login method.
-Adds detection entry for Digital Sprite 2 ( Digital recorder )

Originally committed by paulino but recommitted by david after recovery
from backup.
2013-04-12 17:29:26 +00:00
patrik
56ef8fad06 fix flipped ip in BROWSER decoder 2013-03-16 03:18:35 +00:00
patrik
429b030c3d add BROWSER protocol support 2013-03-16 03:18:32 +00:00
patrik
b6492f96af add LLMNR support and cleaned up some result output 2013-03-16 03:18:28 +00:00
patrik
675000afe8 change debug level for missing decoders, more indent cleanup 2013-03-16 03:18:24 +00:00
patrik
560c97923b refactor MDNS code and add ipv6 to Generic table 2013-03-16 03:18:21 +00:00
patrik
bf24a53487 split Netbios up in Queries and Registrations 2013-03-16 03:18:18 +00:00
patrik
66335c6902 add support for decoding MacBooks from DDNS, support for DHCPv6 and CUPS 2013-03-16 03:18:15 +00:00
patrik
ddbc5d7297 indentation cleanup 2013-03-16 03:18:07 +00:00
paulino
666cda3048 Adds entry to detect several vulnerable versions of JCE Joomla extension. (Remote command exec)
Fingerprint taken from http://www.bugreport.ir/78/exploit.htm
2013-02-21 04:53:49 +00:00
paulino
913fbac6d1 Adds entry to detect SCADA SIMATIC S7. Signature taken from Jose Ramon Palanco's script https://github.com/drainware/nmap-scada/blob/master/SIEMENS-Simatic-HMI-miniweb.nse 2013-01-31 18:04:40 +00:00
paulino
b3d3553330 Adds entry to detect SCADA Siemens PCS7. Signature taken from Jose Ramon Palanco's script https://github.com/drainware/nmap-scada/blob/master/Siemens-PCS7.nse 2013-01-31 18:00:11 +00:00
david
37ab88e840 Change 'VPN' to 'security-misc' in ike-fingerprints.
We don't have a 'VPN' device type.
http://nmap.org/book/osdetect-device-types.html
2013-01-28 03:11:21 +00:00
david
710b460ac1 Add ike-version and ike library by Jesper Kückelhahn.
http://seclists.org/nmap-dev/2013/q1/49
2013-01-28 03:06:39 +00:00
paulino
76d4889eea Adds entry for Oracle GlassFish 2013-01-15 07:06:24 +00:00
david
ab802a6f21 Update some more headers. 2012-12-06 02:25:46 +00:00
david
ec53dc049a Update with new mailing list addresses. 2012-12-06 02:23:34 +00:00
david
4c9a3ef4de Add multicast group name output to broadcast-igmp-discovery.
Patch by Vasily Kulikov.
http://seclists.org/nmap-dev/2012/q4/350
2012-11-29 19:58:30 +00:00
david
b15d8825a3 Whitespace in http-fingerprints. 2012-11-21 00:47:30 +00:00
david
4c6253d544 New http-fingerprints.
Contributed by Jesper Kückelhahn.
Sitecore, Moodle, typo3, SquirrelMail, RoundCube.
http://seclists.org/nmap-dev/2012/q4/287
2012-11-21 00:47:29 +00:00
kroosec
ca43a6d59f Added http fingerprints by Jesper Kückelhahn for Sitecore CMS. 2012-09-12 21:57:49 +00:00
dmiller
86d1f0db47 Fix ARP decoder in packetdecoders.lua
Was throwing an exception when parsing a packet with a source IP that
had a fourth octet greater than 127, since the %d format specifier used
in the dups check is for signed integers, and the IP is little-endian.
Switched to %u (unsigned int) and it works great.
2012-08-15 19:25:44 +00:00
kroosec
8ff4cebbf7 Moved EIGRP decoding in packetdecoders.lua to use eigrp.lua library. 2012-08-15 09:17:20 +00:00
aca
16aa7a938d Merged jdwp library, scripts and java classes into trunk 2012-08-14 11:31:08 +00:00
david
1441aea655 Reduce the number of names tried by http-vhosts by default.
Vlatko reported that this script was taking an inordinate amount of time
even in typical scans. This patch reduces the number of domains tried by
default. The new http-vhosts.filelist script argument allows
substituting the original list or another of your choosing.

Patch by Vlatko.
http://seclists.org/nmap-dev/2012/q3/432
2012-07-29 03:39:11 +00:00
perdo
09f7b93949 Modify http-enum and http-fingerprints file so they work with http pipeline better. 2012-07-23 21:55:13 +00:00
dmiller
1aeec5790e Add more ssl-ciphers strength ratings
Ratings generated with this perl script:
https://gist.github.com/3130353
2012-07-18 22:14:30 +00:00
kroosec
aac6c1d03a Added OSPF support to broadcast-listener. 2012-07-13 15:02:09 +00:00
perdo
3b8c88aac4 Added a list of common sql errors. 2012-06-30 12:28:15 +00:00
perdo
f7a02d8d19 Added a list of webpage file formats. 2012-06-25 17:56:21 +00:00
aca
ba5a79acdc Added few aditional credentials to http-default-accounts fingerprints 2012-06-22 16:06:05 +00:00
patrik
bb359adaa1 Played a round of nse_check_globals and fixed a bunch of reported problems. 2012-06-15 19:32:36 +00:00
kroosec
2710e91ece ssl-fingerprints: Updated to use littleblackbox v0.1.3 database. 2012-06-13 01:02:54 +00:00
batrick
a04314beaa Add missing requires. 2012-05-29 18:34:34 +00:00
patrik
bdad2689ab added 'require' for missing libraries 2012-05-29 18:31:22 +00:00
patrik
425ced35ab o Improved the mysql library to handle multiple columns with the same name,
added a formatResultset function to format a query response to a table
  suitable for script output. [Patrik Karlsson]
2012-05-19 12:23:41 +00:00
batrick
3498086354 Corrected buggy formatting from lua-format. David had used the Lua formatter in
r28582.
2012-05-18 03:59:14 +00:00
kroosec
ced6a8cc01 o [NSE] Added the script http-drupal-modules, which enumerates the installed
Drupal modules using drupal-modules.lst. [Hani Benhabiles]
2012-05-16 00:14:16 +00:00
david
16334a19f6 Reindent http-fingerprints.lua using lua-format.
lua-format is Patrick's script and the reformatted file was done by
stripes.
2012-05-15 04:00:57 +00:00
david
fba5e4307a Fix backslash escapes in Windows paths in http-fingerprints.lua.
With the luac from Lua 5.2.0 I got this error:
luac: http-fingerprints.lua:2781: invalid escape sequence near '\.'
2012-05-15 03:24:35 +00:00
fyodor
2a2e929ed6 add check for /phpinfo.php. Example: http://ws1.surf-town.net/phpinfo.php 2012-04-04 02:04:42 +00:00
david
508f4e6155 Add .hgignore while we're at it. 2012-04-01 07:01:21 +00:00
david
b45b64af0d Add .gitignore and .bzrignore to http-fingerprints. 2012-04-01 04:39:19 +00:00
david
479b92ae0b Add a comment to wp-plugins.lst with a link to the script used to make it. 2012-03-08 21:21:51 +00:00
david
1bcc757d28 Updated wp-plugins.lst from Ange Gutek. 2012-03-07 03:22:23 +00:00
tomsellers
9f4fcc4da5 [NSE] Added support to broadcast-listener for extracting address, native vlan and management IP address from CDP packets. 2012-02-25 17:18:22 +00:00
tomsellers
8a0931b752 Improved EIGRP processing for broadcast-listener. The pattern match was insufficient so I added a check for IP protocol 88. 2012-02-14 23:38:01 +00:00
tomsellers
7807926f15 [NSE] Added support for decoding EIGRP broadcasts from Cisco routers to broadcast-listener.nse 2012-02-12 21:20:16 +00:00
patrik
fccccff960 * bugfixes to several http scripts related to new redirect code in http
library
* added option to httpspider that allows passing the redirect_ok closure to
  the http library
[Patrik]
2012-02-11 22:37:14 +00:00