dmiller
|
a668a21b7a
|
Make Nsock handle all connect errors without fatal
|
2017-03-20 17:12:40 +00:00 |
|
dmiller
|
ac8b866d73
|
Fix Ncat SSL server. Closes #773 and potentially #197
|
2017-03-19 02:26:12 +00:00 |
|
dmiller
|
4629f6d836
|
Ncat supports DNS failover, including fallback to IPv4 from IPv6
|
2017-03-16 21:54:26 +00:00 |
|
nnposter
|
bbfb5dfed6
|
Corrects a debug message. Removes confusion about any_af.
|
2017-03-16 19:36:50 +00:00 |
|
dmiller
|
e973ad72f5
|
Optionally brute force usernames for VNC
|
2017-03-15 20:31:24 +00:00 |
|
dmiller
|
d244738246
|
Support ATEN/Supermicro KVM VNC
|
2017-03-15 19:39:34 +00:00 |
|
dmiller
|
c98a547104
|
Check for RealVNC auth bypass even if other auth types are offered
|
2017-03-15 16:19:55 +00:00 |
|
dmiller
|
8854d2e33a
|
Handle cases of no tunnels and no auth types for TightVNC
|
2017-03-15 16:19:54 +00:00 |
|
dmiller
|
772bd8d824
|
Correct typos: receive, successfully, length
|
2017-03-15 02:23:09 +00:00 |
|
dmiller
|
83c9e060fc
|
Fix a typo in vulns.lua
|
2017-03-15 02:23:07 +00:00 |
|
dmiller
|
f89d7610b0
|
Replace IP address parsing with functions from ipOps
|
2017-03-14 18:59:12 +00:00 |
|
dmiller
|
cc644955c4
|
Use string unpacking instead of manual bit manipulation in bittorrent.lua
|
2017-03-14 14:36:14 +00:00 |
|
dmiller
|
629e50a900
|
Replace bin.pack('H') calls with fromhex or equivalent simplifications
|
2017-03-14 14:36:12 +00:00 |
|
dmiller
|
edfc5e3835
|
Remove useless bin.pack('A') calls (equivalent to tostring)
|
2017-03-14 02:51:06 +00:00 |
|
dmiller
|
32b1d1711e
|
Convert ospf.lua from bin.lua to string.pack/unpack
|
2017-03-14 02:51:05 +00:00 |
|
dmiller
|
84a824c2cf
|
New script broadcast-ospf2-discover. Closes #743
|
2017-03-14 00:15:22 +00:00 |
|
dmiller
|
2091ce3199
|
Fix endianness in unpacking IP addresses, since ipOps.fromdword is fixed. Fixes #750
|
2017-03-13 14:58:57 +00:00 |
|
dmiller
|
3e3f600b8a
|
Update default-category scripts to use bitwise operators instead of bit.lua
|
2017-03-13 14:58:56 +00:00 |
|
dmiller
|
090b522c06
|
new tests for ipOps.fromdword and todword
|
2017-03-13 14:58:55 +00:00 |
|
dmiller
|
3140dbe115
|
New script for Apache Struts RCE
|
2017-03-10 17:53:45 +00:00 |
|
dmiller
|
eff6c09118
|
Change ssl scripts to use string unpacking instead of bin.lua
|
2017-03-10 17:29:53 +00:00 |
|
dmiller
|
14bd4e7899
|
Use stdnse.fromhex in ssl-dh-params
|
2017-03-10 17:29:52 +00:00 |
|
dmiller
|
d334620aa0
|
New stdnse function 'fromhex' does hex decoding like bin.pack('H')
|
2017-03-10 17:29:51 +00:00 |
|
dmiller
|
8cbd5d8391
|
Replace bin.lua with string packing in a couple of my scripts
|
2017-03-09 05:13:46 +00:00 |
|
dmiller
|
001318408c
|
Localize string.(un)pack functions for a little performance boost in ipOps which uses them heavily
|
2017-03-09 05:13:45 +00:00 |
|
dmiller
|
a2e22523a4
|
Use string packing instead of bitwise operators in ipOps.lua
|
2017-03-09 05:13:45 +00:00 |
|
dmiller
|
5fe8df548d
|
Convert json.lua to native bitwise operators
|
2017-03-09 05:13:44 +00:00 |
|
dmiller
|
bc7026e378
|
Convert unicode.lua to use native bitwise ops
|
2017-03-09 04:04:06 +00:00 |
|
dmiller
|
5f87f3a1ac
|
Update unicode.lua to use string.(un)pack over bin.(un)pack
|
2017-03-09 04:04:06 +00:00 |
|
dmiller
|
46c27957a5
|
Process 179 service fingerprint submissions
|
2017-03-08 20:58:51 +00:00 |
|
dmiller
|
d68e4d7cab
|
Fix spelling of Vasiliy's name. Sorry!
|
2017-03-07 21:25:37 +00:00 |
|
dmiller
|
611a27fc64
|
New commands to extract info for redis-info by Vasily Kulikov
|
2017-03-07 21:24:32 +00:00 |
|
dmiller
|
2a902d05e1
|
Fix parsing output from multiple redis commands returning strings.
|
2017-03-07 21:24:31 +00:00 |
|
dmiller
|
4a5ff0472a
|
Convert ipOps from bin.lua to string.pack. Improved efficiency and added tests
|
2017-03-07 21:24:30 +00:00 |
|
dmiller
|
73963022dd
|
Avoid a crash when description is a list. http://seclists.org/nmap-dev/2017/q1/176
|
2017-03-06 23:18:08 +00:00 |
|
nnposter
|
dcac460ad6
|
Belkin and Arris share this code so the detected device can be either one of them.
|
2017-03-06 03:44:46 +00:00 |
|
nnposter
|
40e61967e8
|
Unifies variable naming across fingerprints
|
2017-03-05 17:42:41 +00:00 |
|
nnposter
|
d7c8bf912d
|
Adjusts data extraction patterns to match the updated Robtex layout.
Original patch submitted by aDoN. Fixes #679, closes #681.
|
2017-03-05 16:52:25 +00:00 |
|
nnposter
|
99fa80851c
|
Preserves targetname for connections requested with option any_af.
Relocates option any_af to comm.lua to make it more broadly available.
|
2017-03-05 15:41:46 +00:00 |
|
dmiller
|
b4924eb362
|
Avoid warning about --defeat-rst-ratelimit when TCP scan was not even done. Fixes #727
|
2017-03-05 04:25:39 +00:00 |
|
dmiller
|
36301d6ddd
|
Fix dnet raw packet sending on Npcap Loopback on Windows in NSE
|
2017-03-05 04:10:46 +00:00 |
|
dmiller
|
0b93e8da2e
|
New script impress-remote-discover. Closes #713
|
2017-03-04 19:54:56 +00:00 |
|
dmiller
|
b61d517a71
|
Fix lookup order of script args and allow plain 'name.arg' to be specified as 'arg'
|
2017-03-04 19:54:55 +00:00 |
|
dmiller
|
d5038e82c9
|
Remove unused function. Closes #695
|
2017-03-04 04:07:23 +00:00 |
|
nnposter
|
fe622e182d
|
Adds 8 new http-enum fingerprints for Hadoop infrastructure components.
Originally submitted as NSE scripts by Thomas Debize. (Closes #620)
Refactored as entries for http-fingerprints by Varunram Ganesh. (Closes #715)
|
2017-03-03 23:41:12 +00:00 |
|
dmiller
|
1164a8e7df
|
Update output section for realvnc-auth-bypass
|
2017-03-03 20:35:08 +00:00 |
|
dmiller
|
2f5b154f9e
|
Fix a couple NSEdoc cross-refs (requires '.nse')
|
2017-03-03 20:35:07 +00:00 |
|
dmiller
|
522b85693e
|
Note interaction with realvnc-auth-bypass
|
2017-03-03 19:43:33 +00:00 |
|
dmiller
|
76f7c48c17
|
Allow vnc-title to exploit RealVNC auth bypass if discovered.
|
2017-03-03 19:39:57 +00:00 |
|
dmiller
|
2a5b23f025
|
Make realvnc-auth-bypass a vulns script, store result for other scripts to exploit
|
2017-03-03 19:39:56 +00:00 |
|