kroosec
|
aac6c1d03a
|
Added OSPF support to broadcast-listener.
|
2012-07-13 15:02:09 +00:00 |
|
perdo
|
3b8c88aac4
|
Added a list of common sql errors.
|
2012-06-30 12:28:15 +00:00 |
|
perdo
|
f7a02d8d19
|
Added a list of webpage file formats.
|
2012-06-25 17:56:21 +00:00 |
|
aca
|
ba5a79acdc
|
Added few aditional credentials to http-default-accounts fingerprints
|
2012-06-22 16:06:05 +00:00 |
|
patrik
|
bb359adaa1
|
Played a round of nse_check_globals and fixed a bunch of reported problems.
|
2012-06-15 19:32:36 +00:00 |
|
kroosec
|
2710e91ece
|
ssl-fingerprints: Updated to use littleblackbox v0.1.3 database.
|
2012-06-13 01:02:54 +00:00 |
|
batrick
|
a04314beaa
|
Add missing requires.
|
2012-05-29 18:34:34 +00:00 |
|
patrik
|
bdad2689ab
|
added 'require' for missing libraries
|
2012-05-29 18:31:22 +00:00 |
|
patrik
|
425ced35ab
|
o Improved the mysql library to handle multiple columns with the same name,
added a formatResultset function to format a query response to a table
suitable for script output. [Patrik Karlsson]
|
2012-05-19 12:23:41 +00:00 |
|
batrick
|
3498086354
|
Corrected buggy formatting from lua-format. David had used the Lua formatter in
r28582.
|
2012-05-18 03:59:14 +00:00 |
|
kroosec
|
ced6a8cc01
|
o [NSE] Added the script http-drupal-modules, which enumerates the installed
Drupal modules using drupal-modules.lst. [Hani Benhabiles]
|
2012-05-16 00:14:16 +00:00 |
|
david
|
16334a19f6
|
Reindent http-fingerprints.lua using lua-format.
lua-format is Patrick's script and the reformatted file was done by
stripes.
|
2012-05-15 04:00:57 +00:00 |
|
david
|
fba5e4307a
|
Fix backslash escapes in Windows paths in http-fingerprints.lua.
With the luac from Lua 5.2.0 I got this error:
luac: http-fingerprints.lua:2781: invalid escape sequence near '\.'
|
2012-05-15 03:24:35 +00:00 |
|
fyodor
|
2a2e929ed6
|
add check for /phpinfo.php. Example: http://ws1.surf-town.net/phpinfo.php
|
2012-04-04 02:04:42 +00:00 |
|
david
|
508f4e6155
|
Add .hgignore while we're at it.
|
2012-04-01 07:01:21 +00:00 |
|
david
|
b45b64af0d
|
Add .gitignore and .bzrignore to http-fingerprints.
|
2012-04-01 04:39:19 +00:00 |
|
david
|
479b92ae0b
|
Add a comment to wp-plugins.lst with a link to the script used to make it.
|
2012-03-08 21:21:51 +00:00 |
|
david
|
1bcc757d28
|
Updated wp-plugins.lst from Ange Gutek.
|
2012-03-07 03:22:23 +00:00 |
|
tomsellers
|
9f4fcc4da5
|
[NSE] Added support to broadcast-listener for extracting address, native vlan and management IP address from CDP packets.
|
2012-02-25 17:18:22 +00:00 |
|
tomsellers
|
8a0931b752
|
Improved EIGRP processing for broadcast-listener. The pattern match was insufficient so I added a check for IP protocol 88.
|
2012-02-14 23:38:01 +00:00 |
|
tomsellers
|
7807926f15
|
[NSE] Added support for decoding EIGRP broadcasts from Cisco routers to broadcast-listener.nse
|
2012-02-12 21:20:16 +00:00 |
|
patrik
|
fccccff960
|
* bugfixes to several http scripts related to new redirect code in http
library
* added option to httpspider that allows passing the redirect_ok closure to
the http library
[Patrik]
|
2012-02-11 22:37:14 +00:00 |
|
patrik
|
bd1b7dfaad
|
o [NSE] Applied patch to http-fingerprints adding support for identifying DCVS
systems Git, Mercurial and Bazaar. [Hani Benhabiles]
|
2011-12-25 21:57:11 +00:00 |
|
patrik
|
215f697171
|
o Added new fingerprints to http-enum for Subversion, CVS and Apache Archiva
[Duarte Silva]
|
2011-12-18 19:11:24 +00:00 |
|
patrik
|
acb1455874
|
o [NSE] Applied patch that replaces a number of GET requests to HEAD in http-
fingerprints.lua where no matching was performed on the returned contents.
[Hani Benhabiles]
|
2011-12-06 15:57:21 +00:00 |
|
david
|
46bcc85069
|
Add some more JBoss fingerprints.
These are from a talk I saw recently (page 19).
http://www.matasano.com/research/OWASP3011_Luca.pdf
|
2011-12-02 19:28:54 +00:00 |
|
david
|
3c75f0f43c
|
New Wordpress http fingerprint from Duarte Silva.
|
2011-11-06 22:37:22 +00:00 |
|
patrik
|
0270368e69
|
o [NSE] Added the scripts rtsp-url-brute, rtsp-methods and the supporting rtsp
library. The scripts check the supported RTSP methods and attempt to brute
force valid RTSP urls. [Patrik]
|
2011-10-26 21:36:37 +00:00 |
|
paulino
|
859e35bc2e
|
Adds entry for Easy Hosting Control Panel. There are a lot of vulnerable installations and an auth bypass vulnerability:
http://www.1337day.com/exploits/17010
|
2011-10-04 07:46:16 +00:00 |
|
david
|
dd2a2677c5
|
Add tftp-enum.nse by Alexander Rudakov.
|
2011-10-03 22:17:57 +00:00 |
|
david
|
44fcc2f455
|
ssl-enum-ciphers update for cipher strength from Gabriel Lawrence.
|
2011-09-14 17:57:47 +00:00 |
|
patrik
|
ae75aa7fd3
|
o [NSE] Added new default credential list for Oracle and modified the
oracle-brute script to make use of it. [Patrik]
|
2011-09-05 08:13:34 +00:00 |
|
patrik
|
a1d515e548
|
o [NSE] Added script broadcast-listener that attempts to discover hosts by
passively listening to the network. It does so by decoding ethernet and IP
broadcast and multicast messages. [Patrik]
|
2011-08-10 16:46:55 +00:00 |
|
gorjan
|
d509ad055a
|
Adding the optimized snmp-brute script, unpwdb library , snmpcommunities wordlist
|
2011-08-03 21:37:27 +00:00 |
|
paulino
|
deded46038
|
Adds apache axis2 login signature.
|
2011-07-15 23:43:10 +00:00 |
|
paulino
|
6a8a10794f
|
Adds more paths for Coldfusion and Apache Axis2
|
2011-07-15 23:33:03 +00:00 |
|
paulino
|
b291f28e62
|
Added new entries for awstats totals under 'general'
|
2011-07-11 07:48:16 +00:00 |
|
paulino
|
248b53abfa
|
Adds entries under 'attack' for:
-OrangeHRM: http://www.exploit-db.com/exploits/17212/
-Tikiwiki: http://www.exploit-db.com/exploits/1244/
|
2011-07-09 20:44:22 +00:00 |
|
paulino
|
0528868eb9
|
Includes new fingerprints for Joomla submitted by Hani, moves drupal signatures to the cms section and adds new ones for Cisco, Airaya and Cirronet routers
|
2011-07-09 20:29:11 +00:00 |
|
paulino
|
84a4bb2506
|
Added signature of a Cisco router
|
2011-07-08 18:44:23 +00:00 |
|
paulino
|
4348f6fa07
|
Adds fingerprints for Drupal and Arris 2307
|
2011-07-04 21:34:08 +00:00 |
|
paulino
|
e9e4b6d27d
|
Adds new fingerprint and new login template.
|
2011-07-04 20:56:06 +00:00 |
|
paulino
|
4f21388faa
|
Adds http-default-accounts fingerprint database
|
2011-07-01 21:43:53 +00:00 |
|
paulino
|
5fcfb8abc6
|
* Adds Wikipedia path to the wiki signatures.
|
2011-07-01 20:47:06 +00:00 |
|
paulino
|
47a338c85a
|
* Adds note about a desired feature: cache system for http pipelines
* Adds note about the new signatures added to http-enum
|
2011-07-01 20:45:28 +00:00 |
|
paulino
|
d69d7aa820
|
No more duplicates in this database.
|
2011-07-01 19:27:53 +00:00 |
|
paulino
|
fb07b4082a
|
Moves lotus domino fingerprints under the same one
|
2011-07-01 19:07:34 +00:00 |
|
paulino
|
ee66dfe6a5
|
Fixes duplicates and a couple of signatures that got copied incorrectly. These new fingerprints come from going through exploit-db.com's archives since July 1 2011 to July 1 2009.
|
2011-07-01 19:02:34 +00:00 |
|
paulino
|
e420332846
|
Adds 120 new entries under the categories: general, attacks, cms, security, management and database.
|
2011-07-01 10:18:10 +00:00 |
|
paulino
|
29ff392125
|
Added new entries under 'general' and 'cms' . Extracted from exploit-db archives so the new software added is known to be vulnerable.
|
2011-06-27 03:40:22 +00:00 |
|