dmiller
|
b75446db64
|
Note bitwise operator replacements for most of bit.lua
|
2017-03-29 20:58:36 +00:00 |
|
dmiller
|
4cef14a873
|
Switch to string packing instead of bin packing and return order for asn1-related libs
|
2017-03-29 20:42:01 +00:00 |
|
dmiller
|
3dec043ead
|
Fix NSE hangs when service sends non-matching data to receive_buf
|
2017-03-29 20:41:59 +00:00 |
|
dmiller
|
85e10c6b2b
|
Use byte values instead of hex strings for ASN.1 types, avoiding upper/lower case mixups
|
2017-03-29 20:41:57 +00:00 |
|
dmiller
|
49231a2782
|
Fix decoding of OID sequences caused by Lua 5.3 integer/number handling
|
2017-03-29 17:10:40 +00:00 |
|
nnposter
|
af5f88dd00
|
Implements a new member, fragment, of the HTTP response body. It contains
a partially received body (if any) when the overall request fails to complete.
|
2017-03-29 15:58:39 +00:00 |
|
dmiller
|
0073334d30
|
Fix snmp.lua after conversion to tohex instead of pack('H') changed hex to lowercase
|
2017-03-29 14:14:39 +00:00 |
|
dmiller
|
19acf2feaf
|
Update Redis version probe to skip comments. Fixes #789
|
2017-03-28 15:40:23 +00:00 |
|
dmiller
|
0e7f11673c
|
Change more bin lib to string packing/fromhex. Closes #755. Closes #769
|
2017-03-25 13:39:44 +00:00 |
|
dmiller
|
d66dd69df2
|
Fix some swapped return values
|
2017-03-25 13:29:52 +00:00 |
|
dmiller
|
7c72319ab5
|
Change a few more bin.pack to string.pack
|
2017-03-24 22:05:52 +00:00 |
|
dmiller
|
1d3b5142be
|
Fix some NSEdoc using the wrong script names
|
2017-03-24 22:05:51 +00:00 |
|
dmiller
|
312fbbfcf1
|
Report and record recovered creds in http-vuln-wnr1000-creds
|
2017-03-24 16:20:02 +00:00 |
|
dmiller
|
3220cbd62b
|
Fix a crash in http-vuln-wnr1000-creds when request fails (i.e. not vuln)
|
2017-03-24 16:20:00 +00:00 |
|
dmiller
|
87fb195c3f
|
Use a legit HTTP probe for detecting SSL in http-slowloris and -check
|
2017-03-23 22:42:02 +00:00 |
|
dmiller
|
b4f10146e4
|
Process 94 service fingerprint submissions
|
2017-03-22 14:30:06 +00:00 |
|
nnposter
|
4bffd26c0b
|
Adds support for user-selectable HTTP method. Closes #759
|
2017-03-22 00:28:01 +00:00 |
|
dmiller
|
d80a4e4e59
|
Print number of threads per script if <5 scripts. See #701
|
2017-03-21 16:20:41 +00:00 |
|
dmiller
|
48641e3a14
|
Make os calls local in nse_main.lua
|
2017-03-21 16:20:40 +00:00 |
|
nnposter
|
36702702e5
|
Removes duplicate entries. Patch provided by Rewanth Cool. Closes #782
|
2017-03-21 14:17:01 +00:00 |
|
nnposter
|
2e3b49728f
|
Normalizes tag ordering; fixes word wrapping
|
2017-03-21 13:56:20 +00:00 |
|
nnposter
|
b34eaabb3b
|
Allows the HTTP Set-Cookie parser to handle a trailing semicolon. Fixes #731
|
2017-03-21 13:46:30 +00:00 |
|
dmiller
|
8b8f56eced
|
Fix a bug in ospf.lua added in the recent changes. Closes #761
|
2017-03-20 17:26:25 +00:00 |
|
dmiller
|
a668a21b7a
|
Make Nsock handle all connect errors without fatal
|
2017-03-20 17:12:40 +00:00 |
|
dmiller
|
ac8b866d73
|
Fix Ncat SSL server. Closes #773 and potentially #197
|
2017-03-19 02:26:12 +00:00 |
|
dmiller
|
4629f6d836
|
Ncat supports DNS failover, including fallback to IPv4 from IPv6
|
2017-03-16 21:54:26 +00:00 |
|
nnposter
|
bbfb5dfed6
|
Corrects a debug message. Removes confusion about any_af.
|
2017-03-16 19:36:50 +00:00 |
|
dmiller
|
e973ad72f5
|
Optionally brute force usernames for VNC
|
2017-03-15 20:31:24 +00:00 |
|
dmiller
|
d244738246
|
Support ATEN/Supermicro KVM VNC
|
2017-03-15 19:39:34 +00:00 |
|
dmiller
|
c98a547104
|
Check for RealVNC auth bypass even if other auth types are offered
|
2017-03-15 16:19:55 +00:00 |
|
dmiller
|
8854d2e33a
|
Handle cases of no tunnels and no auth types for TightVNC
|
2017-03-15 16:19:54 +00:00 |
|
dmiller
|
772bd8d824
|
Correct typos: receive, successfully, length
|
2017-03-15 02:23:09 +00:00 |
|
dmiller
|
83c9e060fc
|
Fix a typo in vulns.lua
|
2017-03-15 02:23:07 +00:00 |
|
dmiller
|
f89d7610b0
|
Replace IP address parsing with functions from ipOps
|
2017-03-14 18:59:12 +00:00 |
|
dmiller
|
cc644955c4
|
Use string unpacking instead of manual bit manipulation in bittorrent.lua
|
2017-03-14 14:36:14 +00:00 |
|
dmiller
|
629e50a900
|
Replace bin.pack('H') calls with fromhex or equivalent simplifications
|
2017-03-14 14:36:12 +00:00 |
|
dmiller
|
edfc5e3835
|
Remove useless bin.pack('A') calls (equivalent to tostring)
|
2017-03-14 02:51:06 +00:00 |
|
dmiller
|
32b1d1711e
|
Convert ospf.lua from bin.lua to string.pack/unpack
|
2017-03-14 02:51:05 +00:00 |
|
dmiller
|
84a824c2cf
|
New script broadcast-ospf2-discover. Closes #743
|
2017-03-14 00:15:22 +00:00 |
|
dmiller
|
2091ce3199
|
Fix endianness in unpacking IP addresses, since ipOps.fromdword is fixed. Fixes #750
|
2017-03-13 14:58:57 +00:00 |
|
dmiller
|
3e3f600b8a
|
Update default-category scripts to use bitwise operators instead of bit.lua
|
2017-03-13 14:58:56 +00:00 |
|
dmiller
|
090b522c06
|
new tests for ipOps.fromdword and todword
|
2017-03-13 14:58:55 +00:00 |
|
dmiller
|
3140dbe115
|
New script for Apache Struts RCE
|
2017-03-10 17:53:45 +00:00 |
|
dmiller
|
eff6c09118
|
Change ssl scripts to use string unpacking instead of bin.lua
|
2017-03-10 17:29:53 +00:00 |
|
dmiller
|
14bd4e7899
|
Use stdnse.fromhex in ssl-dh-params
|
2017-03-10 17:29:52 +00:00 |
|
dmiller
|
d334620aa0
|
New stdnse function 'fromhex' does hex decoding like bin.pack('H')
|
2017-03-10 17:29:51 +00:00 |
|
dmiller
|
8cbd5d8391
|
Replace bin.lua with string packing in a couple of my scripts
|
2017-03-09 05:13:46 +00:00 |
|
dmiller
|
001318408c
|
Localize string.(un)pack functions for a little performance boost in ipOps which uses them heavily
|
2017-03-09 05:13:45 +00:00 |
|
dmiller
|
a2e22523a4
|
Use string packing instead of bitwise operators in ipOps.lua
|
2017-03-09 05:13:45 +00:00 |
|
dmiller
|
5fe8df548d
|
Convert json.lua to native bitwise operators
|
2017-03-09 05:13:44 +00:00 |
|