dmiller
c4649cd0b8
Fix saving zenmap config to file in some cases.
2016-03-25 04:33:11 +00:00
dmiller
97b5aa2ced
Avoid file corruption from Zenmap configs reopening already-open config file
2016-03-24 18:03:34 +00:00
dmiller
a26f765546
Add a few changelog entries
2016-03-22 03:40:44 +00:00
dmiller
44b4bd2163
Avoid crashing with non-integer geometry in zenmap.conf
2016-03-22 01:11:06 +00:00
dmiller
dc09ef809f
Add dh group exchange support to ssh2.lua. Closes #341 , Fixes #129
2016-03-21 22:04:42 +00:00
dmiller
b76257d14b
fix a NSE bug when http-cross-domain-policy has no output. Closes #343
2016-03-21 22:04:42 +00:00
dmiller
dcfd7562f2
Avoid a crash in Zenmap config setting window geometry
...
Report: http://seclists.org/nmap-dev/2016/q1/315
Fix: http://stackoverflow.com/a/21485083/1183387
We can't set integer (or non-string) values in a ConfigParser.
2016-03-21 14:20:20 +00:00
dmiller
2b86ab11dc
Allow ssl-* to work with TDS (MS SQL server)
2016-03-19 20:44:33 +00:00
dmiller
7a430d154b
Auto-detect UTF-16 fields in certificates and transcode to UTF-8
2016-03-19 20:44:32 +00:00
fyodor
a6e35b47ea
just automated reordering
2016-03-18 19:25:53 +00:00
dmiller
53aac29d05
Avoid a zenmap crash if locale is not set properly
2016-03-18 15:44:25 +00:00
dmiller
91fc3e503f
Revert r33804, it was not a typo. http://seclists.org/nmap-dev/2016/q1/297
2016-03-18 03:46:13 +00:00
dmiller
8e87372692
Bump version numbers for a few fingerprints
2016-03-18 03:44:56 +00:00
dmiller
3df640b65a
Note the OpenSSL upgrade in the changelog for 7.10
2016-03-17 20:34:27 +00:00
dmiller
c97b56a1e9
sync CHANGELOG and bump version for 7.10SVN
2016-03-17 18:16:43 +00:00
dmiller
aff655e4c9
Actually, only Zenmap needs 2008 redist, so we won't bundle it with the zipfile
2016-03-17 02:52:40 +00:00
dmiller
26511b0c07
Update windows install info with latest VCredist versions. Fixes #327
2016-03-17 02:20:37 +00:00
dmiller
663271f95d
New shodan-api script for querying Shodan internet scan data
2016-03-16 05:47:58 +00:00
dmiller
ee481851f5
Silence warnings about the new any_af request option
2016-03-16 05:47:57 +00:00
dmiller
c7892e365f
Let http.lua functions optionally connect via any address family
...
Sometimes (e.g. when using an external API), a script wants to connect
by name to a server and doesn't care whether IPv4 or IPv6 is used. By
passing the "any_af" option, the first resolved address of any address
family will be used, allowing external-category scripts which used to
fail with -6 to succeed.
2016-03-16 05:07:59 +00:00
dmiller
f68650e51e
Remove pango modules that are built-in since pango 1.38.
2016-03-16 03:23:45 +00:00
dmiller
a011762e46
Be sure to export JHBUILD_PREFIX, as later steps need it.
2016-03-16 03:22:31 +00:00
dmiller
c6837fc3d0
Bump openssl version for OS X: 1.0.2g with enable-ssl
2016-03-16 03:16:34 +00:00
dmiller
56effd8438
Update macports diff
2016-03-16 03:14:55 +00:00
dmiller
239b94189d
Add a missing changelog entry
2016-03-15 13:25:03 +00:00
dmiller
3c994776f7
Make use of -4 with -6 illegal.
2016-03-14 23:54:51 +00:00
dmiller
4135ec518f
Add rpcinfo to version category, see previous commit
2016-03-14 20:42:52 +00:00
dmiller
0bb036cda2
Allow rpcinfo.nse to set version info
...
The rpcinfo script can now set version info just like rpc-grind. Since
this requires considerably less traffic than rpc-grind, I made rpc-grind
depend on rpcinfo so that it will avoid running if we can get the
version information this way instead.
Also changed rpcinfo to only run on port 111, not on "rpcbind" service
since that's what -sV labels any detected RPC service.
2016-03-14 20:42:51 +00:00
dmiller
5843cd95a4
Add rusers script
2016-03-14 16:03:47 +00:00
dmiller
5729d3844e
Only run http-apache-server-status on Apache or unknown http servers. Add version info.
2016-03-14 03:41:38 +00:00
dmiller
2ec6eb5110
Only report unique VHosts in http-apache-server-status. Too much output otherwise.
2016-03-14 03:41:37 +00:00
dmiller
a4b81f39b6
Add http-apache-server-status. Closes #322
2016-03-14 03:41:36 +00:00
dmiller
7271efe963
Restore '%' deleted when http-vuln-cve2013-7091 was renamed. Closes #332
2016-03-13 20:29:11 +00:00
dmiller
2db52ae951
Force numeric values to string to avoid assertion in tab.lua. Related #266
2016-03-13 20:29:10 +00:00
dmiller
616cf9730e
clear session data before attempting a reconnect without SSLv2-compatibility. Fixes #318 . Fixes #308
2016-03-12 23:26:26 +00:00
dmiller
d2136e5ad0
Force-clear SSL_OP_NO_SSLv2 flag (required for 1.0.2g and later to allow SSLv2)
2016-03-12 23:26:25 +00:00
dmiller
2c6be2776d
Add port 4433 (default port for openssl s_server) to SSL-related probes
2016-03-12 23:26:24 +00:00
dmiller
78132b68ea
Remove an accidental partial match line from nmap-service-probes
2016-03-12 20:45:54 +00:00
dmiller
b6778204cd
Fix http-brute, munged by me in r35584. Closes #317
2016-03-12 20:45:53 +00:00
dmiller
801a19f137
Integrate 12 IPv6 OS fingerprint submissions
2016-03-10 19:17:44 +00:00
dmiller
9bcc6c09e2
Apply patch from Kali package reputed to address #237
2016-03-09 14:52:00 +00:00
dmiller
3c566485e3
Upgrade included liblua to 5.2.4
2016-03-09 14:51:59 +00:00
dmiller
22c1856940
Add a service fingerprint for WolfSSL example server
2016-03-07 16:44:53 +00:00
dmiller
3749c04310
Sanity check in pcap_recieve to avoid crash. Fixes #313
2016-03-07 16:44:52 +00:00
dmiller
acd525315d
Add a service match for facebook's cross-domain policy
2016-03-06 23:59:43 +00:00
fyodor
c5127147c9
Actually I will stick with the spanish translation of these literals for now. It should be English I think, since that's what users will see from Nmap. But since the problem is all throughout the translation, changing just these two instances would be more confusion than help, I think
2016-03-05 00:56:08 +00:00
fyodor
d43889a673
Make correction suggested by Pepe Maldonado
2016-03-05 00:53:37 +00:00
dmiller
0577e3bb1e
Avoid crashing when Nsock connect calls the callback immediately due to parameter errors
2016-03-04 23:04:01 +00:00
dmiller
374d0a1392
Document CIDR support for IPv6 targets. Closes #307
2016-03-03 17:15:13 +00:00
dmiller
b39e055e32
Fix crash when field doesn't exist. Closes #306
2016-03-03 17:15:12 +00:00