dmiller
e4eefb6ce3
More CPEs
2015-02-03 20:43:08 +00:00
dmiller
921457bc08
Copy some CPEs from matching products to others
2015-02-03 15:26:50 +00:00
dmiller
e3bdc92114
More CPE entries for service fingerprints
2015-02-03 15:19:05 +00:00
dmiller
c6511d3fa1
Auto-cpe services allowing captured model numbers
2015-02-03 04:23:08 +00:00
dmiller
daa14da723
Add CPEs through FTP
2015-02-03 03:52:17 +00:00
dmiller
e985053c6d
Add check for Cisco ASA version disclosure, CVE-2014-3398
2015-02-02 18:25:53 +00:00
dmiller
f560655605
Enhance NSE debugging messages slightly
2015-02-02 03:56:10 +00:00
batrick
e3b3deb7c8
Remove unnecessary string.format calls.
2015-01-31 05:35:26 +00:00
fyodor
3200f16753
Update man page to align with how Nmap currently handles icmp unreachable messages and then regenerated it. This was suggested by Tobias Glemser
2015-01-30 10:05:06 +00:00
dmiller
fb10f7a48b
Fix comment saying we 'hope to create' a system that already exists
2015-01-29 19:15:31 +00:00
dmiller
ae5a7f3217
Add a bunch of CPE entries
2015-01-29 06:43:25 +00:00
dmiller
96c8e7e9af
New cpe:/h automatic additions
2015-01-29 02:40:47 +00:00
dmiller
5b17815134
Re-cpeify nmap-os-db with updated script
2015-01-29 02:38:27 +00:00
dmiller
042a1ae0a5
Auto-add more cpes
2015-01-28 20:18:14 +00:00
dmiller
e5161352f1
Add some missing o/Linux/ templates
2015-01-28 18:34:09 +00:00
dmiller
ea7e725a1c
Add some service pack and language info to cpes
2015-01-28 17:49:02 +00:00
dmiller
9158ed7482
Svc fingerprint cleanup: more specific Windows o// templates
2015-01-28 14:40:30 +00:00
dmiller
b7790297ec
Service fingerprint cleanup: missing or incorrect o// templates
2015-01-28 14:14:22 +00:00
dmiller
0a0c85acd0
Add cpes to some Microsoft services
2015-01-28 05:37:17 +00:00
dmiller
fa94d0e33b
Auto-cpeify service fingerprints
2015-01-27 18:41:26 +00:00
dmiller
6954522440
More service fingerprint cleanup
...
Use i// template for things which used parentheses in the v// template.
Fix one instance of "Python BaseHTTPServer" to "BaseHTTPServer" (CPE will
reflect Python when it is auto-generated)
2015-01-27 17:18:43 +00:00
dmiller
2555da212a
Service fingerprint cleanup
...
GoAhead WebServer normalization. Was reported variously as "GoAhead-Webs",
"GoAhead httpd", or by device name it was embedded in.
2015-01-27 14:48:37 +00:00
dmiller
4bcafef56c
Service fingerprint cleanup
...
More specific o// templates for Windows (NT and CE, particularly), and
appropriate CPE adjustments.
2015-01-27 14:40:55 +00:00
dmiller
db20fc3053
Service fingerprints cleanup
...
* Busybox => BusyBox
* i/Windows/ => o/Windows/ etc.
* o/OS X/ => o/Mac OS X/
2015-01-27 14:30:26 +00:00
dmiller
17a5e77e0a
Add ARP_HRD_IEEE80211_PRISM identifier
2015-01-27 02:31:11 +00:00
david
b56c734530
The Golang implementation of Tor has a name and a github now.
2015-01-24 22:57:59 +00:00
dmiller
179e42a9c6
Update http-slowloris-check
...
Summary of changes:
* Clarified LIKELY_VULN status, since actual DoS may not be possible
(false positive)
* Made worker threads closures to simplify/fix testing multiple servers
at once.
* Added debug statements at script exit locations to clarify status when
script terminates early.
* Added CVE reference.
2015-01-23 15:37:09 +00:00
dmiller
e94f22e0a3
Final few odd service fingerprint submissions from the last batch
2015-01-23 04:39:44 +00:00
dmiller
137d2e3e94
The \z escape is Lua5.2 only, and NSEdoc portal uses 5.1, so this hack didn't work
2015-01-19 04:12:57 +00:00
dmiller
0952bed032
Merge final changes to support VS2013 build
...
Changes:
* Fix a collision of the name PS_NONE with a different constant in shlobj.h
* Update solution and project files for VS2013
* Update the NSIS installer to reference the VC 2013 redistributable
2015-01-17 04:35:01 +00:00
paulino
563498f473
Adds http-shellshock.nse to detect web applications vulnerable to shellshock
2015-01-17 03:01:58 +00:00
dmiller
fb6e1f013c
Fix some nsedoc issues with http-default-accounts
2015-01-15 19:50:13 +00:00
david
bfd1d61a5b
Add a new service probe for Tor.
...
http://seclists.org/nmap-dev/2015/q1/39
2015-01-15 06:04:20 +00:00
dmiller
9ffafe5334
Display empty server header as <empty> ( #37 )
2015-01-15 05:36:25 +00:00
dmiller
87fa397492
Let http-server-header handle an empty Server header
...
Patch by nnposter. Fixes #37
2015-01-15 05:36:23 +00:00
dmiller
7b0c3432e6
Update nmap.rc
2015-01-14 04:57:00 +00:00
dmiller
1f33c29db7
Update ncat.usage.txt
2015-01-14 04:56:59 +00:00
dmiller
48c29e99b3
Force nmap.rc to be rebuilt when nmap.h changes
...
The make rule for nmap.rc depended only on nmap.rc.in, which doesn't
change regularly. Since the rule itself adds version info based on
nmap.h, it makes sense to list this as one of its dependencies.
Fixes #45
2015-01-14 04:56:56 +00:00
dmiller
40ca4cb396
Document --ssl-ciphers. Fixes #20
2015-01-11 23:38:00 +00:00
david
6c41e00a5f
Link directly to the Team Cymru IP-to-ASN page.
2015-01-09 02:42:47 +00:00
fyodor
21949f4ee1
Note that -T4 sets the min-rtt-timeout to 100ms
2015-01-06 09:41:39 +00:00
dmiller
dbdf46a6b5
Nearly done with service fingerprint submissions
2015-01-04 02:28:03 +00:00
tomsellers
66981b2f72
MySQL match lines
...
- Edited info sections for consistency
- Changed regex based on MySQL packet spec to improve efficiency
- reorganized section
2015-01-02 01:15:38 +00:00
dmiller
ee4b2dfe5d
A TODO note for ssl-enum-ciphers
...
We recently became dependent on OpenSSL for some of ssl-enum-ciphers's
functionality (parsing certificates). We should have a decent fallback
(e.g. don't parse the certificate, issue a warning, and use a dummy
score).
[ci skip] This tells Travis to skip the CI build when this commit is
pushed, useful for documentation changes that don't affect the build.
2015-01-01 21:09:05 +00:00
dmiller
d1e429f42b
Don't crash when an NSE library (e.g. sasl) calls stdnse.debug during require
2015-01-01 21:09:03 +00:00
dmiller
2f02fa2935
Fix build when building without OpenSSL (since r33781)
2015-01-01 21:09:02 +00:00
tomsellers
10822d1633
More script updates to change Metasploit Redmine
...
references to valid Github URLs
2015-01-01 15:13:13 +00:00
tomsellers
d2622c0396
Fix reference in rmi-vuln-classloader.nse to point to Metasploit
...
Github repo as Metasploit Redmine is deprecated and requires
auth.
2015-01-01 14:59:35 +00:00
tomsellers
1371a3303e
Rework of PostgreSQL version detection -
...
Added detection for PostgreSQL 9.4 via line number match
Added windows platform detection
Reworked language specific sections for regex consistency and priority
Generated German softmatch from a more specific probe
Broadened French softmatch
Created language neutral universal softmatches for windows and non-windows platforms
2015-01-01 14:45:36 +00:00
dmiller
fc99bed706
Don't use unnecessary parens with __declspec
...
Reported by nnposter, this broke on VS2010. Pretty sure this was just a
simple mistake in the first place. Fixes #33
2015-01-01 13:39:47 +00:00
