paulino
d7234e2582
Renames http-method-tamper to http-vuln-cve2010-0738 and adds the new version of http-method-tamper.
...
The new version improves the detection mechanism to cover PHP environments with .htaccess files and adds spidering to locate password protected resources automatically.
2012-09-07 23:42:39 +00:00
dmiller
00e37443ed
Update @output luadoc on ssl-date
2012-09-07 16:39:02 +00:00
dmiller
a456186e77
Keep delta readable in Normal output
...
per http://seclists.org/nmap-dev/2012/q3/756
2012-09-07 16:37:47 +00:00
dmiller
b8604e066c
ssl-date date formatting issues
...
Fix date format string to format as UTC (prepend "!") instead of local
time. Also changed "offset" xmloutput elem to "delta" to match http-date
2012-09-07 15:18:33 +00:00
robert
1a726ba337
Updated hashes to include PHP 5.3.15, 5.3.16, 5.4.5 and 5.4.6.
2012-09-07 10:03:05 +00:00
henri
f35cf8b93a
Fixed indentation.
2012-09-05 20:55:42 +00:00
henri
902000afad
Report an error instead of crashing when pipeline_go() returns nil.
2012-09-05 20:55:04 +00:00
patrik
13411ab6d1
Fixed a bunch of errors related to inproper responses from webservers.
2012-08-31 15:17:14 +00:00
patrik
b14a8518a3
replaced try/catch with silent failure
2012-08-31 14:59:25 +00:00
dmiller
e5129cf8bf
Update ip-geolocation-geobytes for structured output
...
Also fixed error handling as reported here:
http://seclists.org/nmap-dev/2012/q3/693
2012-08-31 11:46:44 +00:00
aca
c13d7c719a
Added msrpc-enum script and msrpc lua changes
2012-08-31 10:00:54 +00:00
dmiller
9c199916b8
ssl-known-key: return if sslcert fails
2012-08-30 23:29:06 +00:00
patrik
fe25ec912f
fixed bug that would result in a crash when the browser service would return
...
an empty result.
2012-08-30 18:39:49 +00:00
patrik
6c97e0721d
nse-check-globals cleanup
2012-08-29 05:42:27 +00:00
patrik
448bb5a71b
fixed a bug in a loop where the script would wait for a condition that was
...
supposed to be signalled by other threads which were no longer running.
2012-08-29 05:37:56 +00:00
dmiller
c71478d91f
Fix interfaces bug in broadcast-listener
...
Reported here: http://seclists.org/nmap-dev/2012/q3/672
2012-08-28 23:07:28 +00:00
kroosec
2f21e49cfb
Updated http-drupal-modules documentation.
2012-08-25 17:31:53 +00:00
kroosec
e3db186435
xml output support for http-drupal-modules.nse
2012-08-25 14:02:27 +00:00
aca
fd32aec639
Merged http-slowloris-check
2012-08-24 09:19:30 +00:00
patrik
a49667aa02
Reverted bad commit to http-title
2012-08-22 17:11:10 +00:00
patrik
a18d0b2ff0
nse_check_globals cleanup
2012-08-18 07:10:27 +00:00
dmiller
a329909fdf
Update nfs-{showmount,statfs} to new rpc-grind
2012-08-18 04:07:11 +00:00
dmiller
592f31fa0f
Make nfs-ls work with new rpc-grind
...
rpc-grind script puts version information in a different place. Also
switched from using file-local variables to host-registry entries for
nfs and mount ports and versions. I'm pretty sure the old way would have
failed on scans with more than one NFS version on separate machines.
2012-08-18 03:32:52 +00:00
dmiller
4728d7437d
Fixes to rpc-grind
...
NSE: rpc-grind Connect(): RPC library does not support: nil protocol
NSE: rpc-grind Connect(): RPC library does not support: rpcbind version
81578896
These errors caused by ChkProgram and ChkVersion called from
rpc.Comm.Connect. Added a dummy program in rpc-grind and a check for
self.checkprogver in ChkVersion, and everything works great.
Also fixed portrule to only fail if the non-rpcbind service name was not
the result of table lookup. Was failing on port 2049 (in nmap-services
as "nfs") without -sV.
2012-08-18 03:32:50 +00:00
dmiller
f8335fc3f0
Update ssl-enum-ciphers to use structured output
...
This includes a minor hack to stringify a structure with sorted keys.
This should probably be moved to a formatting library when one is
committed.
2012-08-17 20:14:46 +00:00
kroosec
b1990f2b33
Added rpc-grind.nse
2012-08-17 18:44:35 +00:00
patrik
4157e63c9e
nse_check_globals fixup
2012-08-17 05:37:59 +00:00
dmiller
6294398668
Update ssl-date to use structured output
2012-08-16 22:13:33 +00:00
dmiller
9fbd30f191
Use ISO8601 time for smb-os-discovery
2012-08-16 15:46:37 +00:00
dmiller
74a2168a15
Use base64-encoded key, not double-encoded type and key
2012-08-16 14:46:40 +00:00
david
8206146d2a
Put just the base64-encoded key in the ssh-hostkey "key" field.
...
Previously it had the key type prepended (already available in the
"type" field).
2012-08-16 11:59:02 +00:00
david
e96b7d55fb
Use key "type" not "algorithm" in ssh-hostkey structured output.
...
"algorithm" seems to be a mapping computed by our ssh2 library:
ssh-rsa → RSA
ssh-dss → DSA
"type" is just the string "ssh-rsa" or "ssh-dss". "Type" seems to be the
terminology used in the ssh-keygen man page.
2012-08-16 11:58:40 +00:00
david
7ebf300c0c
Use binary strings, not hex strings, as keys in ssl-known-key.
2012-08-16 10:51:51 +00:00
david
600ef58aa0
Don't check whether cert:digest succeeded.
...
The digest isn't something stored in the cert that may or may not be
present; it is calculated locally.
2012-08-16 10:51:37 +00:00
david
1ba18b4a39
Use structured key name "sha1" not "fingerprint" for uniformity with ssl-cert.
2012-08-16 10:51:24 +00:00
david
e037b3c416
Use lower case spaces for separation in ssl-known-key digests.
...
For uniformity with ssl-cert.
2012-08-16 10:37:33 +00:00
david
bd99ea17f8
Don't use colons in structured output digests.
2012-08-16 10:37:21 +00:00
david
aee57d6cdc
Kill <script></script> around @xmloutput.
2012-08-16 10:12:08 +00:00
dmiller
a61a6a5918
Add @xmloutput nsedoc to ssh-hostkey, smb-os-discovery
2012-08-16 03:00:00 +00:00
dmiller
f9ddf0fca6
Update ssl-known-key to use structured output
2012-08-16 02:59:58 +00:00
dmiller
e11a5a7b34
Update smb-os-discovery to use structured output
2012-08-15 22:22:08 +00:00
dmiller
466d0895df
Update ssh-hostkey to use structured output
2012-08-15 20:30:39 +00:00
kroosec
d25a2420e4
Added broadcast-pim-discovery.nse script.
2012-08-15 10:24:31 +00:00
kroosec
c1a6bcbd58
Added mtrace.nse script.
2012-08-15 10:07:20 +00:00
david
8d71da78de
Remove country and region from traceroute-geolocation structured output.
...
On second thought, we should use codes like "us" instead of "United
States" and omit the regision attribute rather than set
region="Unknown". Taking away these attributes until we can figure out
how.
2012-08-15 08:42:16 +00:00
kroosec
effc933d17
Added broadcast-eigrp-discovery script.
2012-08-15 01:50:47 +00:00
kroosec
fa1d29e617
Fixed warning for newtargets in llmnr-resolve.nse.
2012-08-15 01:09:04 +00:00
kroosec
d1662fe7b4
Added llmnr-resolve.nse script.
2012-08-15 00:11:02 +00:00
david
a928251baf
Add @xmloutput to traceroute-geolocation.
2012-08-14 22:06:28 +00:00
david
0f364e8485
Add rtt to traceroute-geolocation structured output.
2012-08-14 22:06:14 +00:00
