1
0
mirror of https://github.com/nmap/nmap.git synced 2025-12-23 07:59:03 +00:00
Commit Graph

11010 Commits

Author SHA1 Message Date
dmiller
187d9190c0 Add missing nsedoc tags, needed because stdnse.module not used 2016-07-07 22:12:13 +00:00
dmiller
b47c55dc6e Add sslv2-drown. Closes #365 2016-07-07 16:35:39 +00:00
dmiller
8c346ba3b4 Encrypted SSLv2 messages have no message type 2016-07-07 16:35:38 +00:00
dmiller
529a1fb4bd Fix index returned by sslv2.read_record, handle errors and encrypted records 2016-07-07 16:35:37 +00:00
dmiller
17040f4cf1 Move core of sslv2.nse into sslv2.lua so other scripts can use it. Cache results in registry. 2016-07-07 16:35:37 +00:00
dmiller
d6fbe8b2ca Refactor some code from sslv2.nse into sslv2.lua 2016-07-07 16:35:36 +00:00
tomsellers
99d47e6210 Version detection: docker - fixed bugs related to missing pattern negation, added two match lines when Job Name is missing 2016-07-07 00:50:30 +00:00
tomsellers
63c9a1f8c0 NSE: added output to docker-version.nse 2016-07-07 00:04:15 +00:00
dmiller
221ad15f43 Fix flags for Travis CI build. --without-ssl was incorrect. 2016-07-06 22:24:51 +00:00
tomsellers
5ca3902b3a NSE: fix bug in docker-version.nse that transposed version and name 2016-07-06 19:37:56 +00:00
tomsellers
4f3f8cd4fc Remove generic matchline causing FP against Docker 2016-07-06 19:36:12 +00:00
dmiller
9058596e1e Separate CFLAGS from CXXFLAGS. Was breaking with -std=c++11 on clang 2016-07-06 16:20:56 +00:00
dmiller
f58315fa59 Make nmap-update depend on nbase for compilation on MSVC 2016-07-05 20:03:42 +00:00
batrick
7f5ec526fe Merge branch 'nse-lua53'
Lua 5.3 adds several awesome features of particular interest to nmap including
bitwise operators and integers, a utf8 library, and standard binary pack/unpack
functions.

In addition to adding Lua 5.3, this branch changes:

o Complete removal of the NSE bit library (in C), It has been replaced with
  a new Lua library wrapping Lua 5.3's bit-wise operators.

o Complete removal of the NSE bin library (in C). It has been replaced with a
  new Lua library wrapping Lua 5.3's string.pack|unpack functions.

o The bin.pack "B" format specifier (which has never worked correctly) is
  unimplemented.  All scripts/libraries which use it have been updated. Most
  usage of this option was to allow string based bit-wise operations which are no
  longer necessary now that Lua 5.3 provides integers and bit-wise operators.

o The base32/base64 libraries have been reimplemented using Lua 5.3's new
  bitwise operators. (This library was the main user of the bin.pack "B" format
  specifier.)

o A new "bits" library has been added for common bit hacks. Currently only has
  a reverse function.

Thanks to David Fifield, Daniel Miller, Jacek Wielemborek, and  Paulino
Calderon for testing this branch.
2016-07-02 17:02:27 +00:00
vincent
0f22680426 Correct format string specifiers
The formats has been tested and verified on Mac OS X 10.8.5,
Mac OS X 10.11.5 and Ubuntu 14.04 LTS, all on x86_64 machines
and OSs. It mainly silences warnings. There were no warnings on
Ubuntu but a few on Mac OS, so the fix is intended to silence
warnings on Mac OS whithout triggering new warnings on other OSs.
Example of warnings previously encountered:

netutil.cc:2828:74: warning: format specifies type 'unsigned short'
but the argument has type 'int' [-Wformat]
2016-07-01 11:44:26 +00:00
vincent
9703feace9 Avoid hidden overloaded virtual functions
Since the functions were hidden for the comiler, I specified every
function that was being hidden in the IPv*Header.h header files.
This allows us to use both overloaded functions and the original one
instead of having one being hidden by the others.
Here is the compiler warning output before the fix:

warning: 'file::function' hides overloaded virtual function
note: hidden overloaded virtual function 'file2::function' declared
here: different qualifiers
2016-07-01 11:36:20 +00:00
vincent
900f015726 Silencing sizeof() warning
Here, the sizeof() function return the size of 'char *' instead of 
INTF_NAME_LEN. I replaced the use of the latter function by INTF_NAME_LEN 
(maximum size of the array intf_name). Here is the compiler warning output:

route-bsd.c:171:38: warning: sizeof on array function parameter will return 
size of 'char *' instead of 'char [16]' [-Wsizeof-array-argument] 
strlcpy(intf_name, namebuf, sizeof(intf_name));
2016-07-01 11:27:37 +00:00
vincent
d0774e7ed5 Closes #342 by thebinarymutant: Fix semantic for python3 2016-07-01 10:37:25 +00:00
dmiller
0d12307030 Improve parsing and request building in sslv2. Part of #365 2016-06-30 17:01:21 +00:00
dmiller
9c42f852c7 Fix incorrectly labeled prime in ssl-dh-params. Closes #347 2016-06-30 14:25:59 +00:00
dmiller
bd99365851 Change rpc's GetAdditionalBytes to error on a short read without an extra timeout 2016-06-28 02:19:44 +00:00
abhishek
9e3c7d526d implements map data structure to speed up search in process_result() of nmap_dns. Closes #401 2016-06-27 20:19:11 +00:00
dmiller
498811be4c Fix detection of RDP: http://seclists.org/nmap-dev/2016/q2/236 2016-06-27 14:30:35 +00:00
batrick
2cbd36443e Fix indentation leading to gcc warnings. 2016-06-26 21:34:58 +00:00
dmiller
59451640d1 Change deprecated RAND_pseudo_bytes call to RAND_bytes
Excellent discussion of the issues with RAND_pseudo_bytes here:
https://jbp.io/2014/01/16/openssl-rand-api/

Essentially, RAND_pseudo_bytes is the same function as RAND_bytes,
except with worse documentation and broken implementations in some
cases.
2016-06-26 14:37:21 +00:00
dmiller
0188383036 pep8 error fixed. Closes #337
15:13: E126 continuation line over-indented for hanging indent
16:13: E126 continuation line over-indented for hanging indent
17:13: E126 continuation line over-indented for hanging indent
2016-06-26 04:39:29 +00:00
dmiller
26fb5d6f99 Return NOT_VULN report instead of 'false' in http-frontpage-login 2016-06-26 04:15:17 +00:00
dmiller
c6be42d88b Avoid blank output from http-fileupload-exploiter 2016-06-26 04:15:16 +00:00
dmiller
822b2d593a Don't run tor-consensus-checker on private/reserved IPs 2016-06-26 04:15:15 +00:00
dmiller
dc4c9927d9 Fix a format string crash (missing formatted value) in targets-ipv6-map4to6 2016-06-25 20:22:01 +00:00
dmiller
91c379fa92 Avoid an error in imap-ntlm-info when starttls fails 2016-06-25 19:43:31 +00:00
dmiller
1c16a55227 New script: http-mcmp. Closes #304 2016-06-25 19:23:26 +00:00
dmiller
72f3a17c60 Let Nping use Npcap on Windows. 2016-06-25 05:00:02 +00:00
dmiller
c52d865b22 Add legend for Topography window. Closes #279, Fixes #258 2016-06-25 03:53:00 +00:00
dmiller
f4bcaadee0 Correct point numbering. Closes #282 by @anchitjain1234 2016-06-24 19:03:37 +00:00
dmiller
f6955c52e8 Revert r35895: unrelated changes were committed 2016-06-24 19:02:57 +00:00
dmiller
a206569215 Correct point numbering. Closes #282 by @anchitjain1234 2016-06-24 18:59:58 +00:00
dmiller
941a4800ba Add a missing OS class 2016-06-24 01:31:26 +00:00
dmiller
05a14f92d7 Add .gitignore 2016-06-24 01:31:25 +00:00
vincent
50015e6954 Change the README file name to README.md
In order to properly make in macosx/, specifics files are copied into
the final .DMG, so I had to correct the name of the file.
2016-06-23 07:59:05 +00:00
dmiller
0072fc4856 Rewrite nroff comments on new lines. Fixes #417, fixes #114 2016-06-22 19:46:59 +00:00
dmiller
1d3aa1ee57 Clarify and avoid compiler warning
clang 3.4.1 on FreeBSD gave this warning:

    nmap.cc:3064:48: warning: use of logical '||' with constant operand
          [-Wconstant-logical-operand]
        return file_is_readable(filename_returned) || 1;
    nmap.cc:3064:48: note: use '|' for a bitwise operation

Changed to match the intent: return 1 if file_is_readable returns 0, otherwise
return that non-0 value.
2016-06-21 23:40:36 +00:00
paulino
bff2dc4563 Adds clamav-exec.nse to detect ClamAV servers vulnerable to remote clamav command execution 2016-06-20 05:50:04 +00:00
dmiller
ce1daa8135 Fix a reference to an unset global 'unpack' 2016-06-18 17:29:42 +00:00
dmiller
a2ed5c4a30 Lua strings are 1-indexed. This is not a bug for now, but is incorrect. 2016-06-18 15:49:18 +00:00
paulino
540494a92d Adds http-aspnet-debug to detect ASP.NET applications with debugging enabled. 2016-06-18 14:51:03 +00:00
dmiller
b012b84a8e Avoid undefined behavior from calling front() on possibly empty std::list 2016-06-17 16:11:33 +00:00
dmiller
60a1c85a93 Properly cache enterprise numbers for snmp-info (was parsing for every target) 2016-06-17 16:11:33 +00:00
vincent
a57002e760 Rewrite a clean documentation
This commit is intended to use mardown files for documentation.
I added a Table of content in each file, with interactive/internal links
and a few more explanations for Mac developers.
2016-06-17 09:07:48 +00:00
vincent
4c1ef96578 Add checks for $lang variable
We now use AppleLanguages to provide a good language to Zenmap.
This should prevent Zenmap from choosing wrong locale/languages settings.
2016-06-17 08:55:34 +00:00