luis
c069b10c27
Added missing rules to clean and distclean Nping
2010-06-22 11:12:58 +00:00
luis
ff1b76ab83
Updated with the latest DONE items
2010-06-22 11:05:49 +00:00
david
5b4e171444
o [NSE] Added ftp-libopie.nse by Gutek. This script checks for an
...
off-by-one stack overflow vulnerability in libopie by giving the FTP
service an overlong name. See
http://security.freebsd.org/advisories/FreeBSD-SA-10:05.opie.asc for
details.
2010-06-21 20:25:11 +00:00
david
424385b541
Add to CHANGELOG:
...
o Fixed name resolution in environments where gethostbyname can return
IPv6 (or other non-IPv4 addresses). In such an environment, Nmap
would wrongly use the first four bytes of the IPv6 address as an
IPv4 address. You could force this, at least on Debian, by adding
the line "options inet6" to /etc/resolv.conf or by running with
RES_OPTIONS=inet6 in the environment. This was reported by Mats Erik
Andersson, who also suggested the fix. [David]
2010-06-19 00:16:54 +00:00
david
d90b7b15a7
Make a new function called resolve_all in tcpip.cc, which is like
...
resolve except that it returns all resolved addresses. Use this new
function to resolve IPv4 addresses instead of gethostbyname in
TargetGroup.cc. The gethostbyname code assumed that only IPv4 addresses
would be returned. If the resolver returned IPv6 addresses, TargetGroup
would blindly copy the first four bytes of the IPv6 address into the
IPv4 struct. This was first reported by Mats Erik Andersson at
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584301 ; he also
suggested the fix.
2010-06-19 00:13:44 +00:00
david
bf9e17778c
Add another mailing list link for the "Zenmap fails to start" todo item.
2010-06-18 22:30:27 +00:00
david
c50c7a2c0b
o Added http-php-version.nse from Gutek. This script retrieves
...
version-specific pages through a couple of magic PHP queries, which
can identify the PHP version even when a server doesn't advertise
it.
2010-06-18 22:12:17 +00:00
david
5135cf678a
Add mailing list links to new todo items. Add an item for a PHP version
...
disclosure script.
2010-06-18 21:06:51 +00:00
david
dbb30db4be
New and fixed nmap-service-probes probes from Matt Selsky.
2010-06-18 19:43:23 +00:00
fyodor
a045aa939e
latest changes from chat w/David
2010-06-18 19:13:20 +00:00
david
e3e9dedc78
Regenerate configure with Autoconf 2.63 for ease of merging with
...
nmap-dedup.
2010-06-18 15:28:31 +00:00
luis
220e462cbb
Removed extra character in the Nping logo
2010-06-18 10:25:17 +00:00
luis
3d0c3af1c2
Removed another two items
2010-06-18 10:24:37 +00:00
luis
110a687786
Removed a couple of items that have just been taken care of. Make a note for a todo that needs to be done after the nmap-dedup merge
2010-06-18 08:57:51 +00:00
fyodor
ec8e9e2c79
Add a task about syncing the latest iana port assignment file with nmap-services-all
2010-06-18 08:01:36 +00:00
luis
426d292e81
Removed a couple more items from the list. Some of the items removed lately are only implemented in the nmap-dedup branch but will be in the main trunk soon
2010-06-17 17:22:54 +00:00
luis
7d8e32efc3
Moved a few items to the DONE section
2010-06-17 17:14:44 +00:00
luis
7251b932fc
Removed a few items that had been taken care of already
2010-06-17 11:02:46 +00:00
luis
0811640293
Move todo item about the BPF spec to the DONE category and added a new item for an issue with ARP replies
2010-06-17 10:27:28 +00:00
luis
dbfcd0251e
Some new items from the meeting with David
2010-06-17 10:22:31 +00:00
luis
503c22f4af
Added TODO entry about --icmp-advert-entry not handling IPs correctly
2010-06-16 16:21:37 +00:00
david
43654abc71
o Combined service match lines for Oracle Enterprise Manager Agent
...
into one more effective line. This patch is from Matt Selsky.
2010-06-16 00:46:03 +00:00
david
316e20f8dc
o Fixed captures in the mupdate service probe matches. This patch is
...
from Matt Selsky.
2010-06-16 00:38:38 +00:00
patrik
b6744a3b6c
Fixes crash when attempting to sort services that have no port.
2010-06-15 18:18:09 +00:00
kris
7c658dd3fd
just whitespace fixes
2010-06-15 18:02:05 +00:00
fyodor
fabe05eae6
Change the term 'stolen from' in comments to 'inspired by', which sounds a little less felonious :)
2010-06-15 08:05:28 +00:00
fyodor
1428a1644b
We generally put scripts in either safe or intrusive categories, but not both. So I removed intrusive. I also added discovery, as that seems to fit the ssh-hostkey script
2010-06-15 07:49:45 +00:00
fyodor
a2a35adfd1
some changes from chat w/David
2010-06-14 23:30:04 +00:00
drazen
204ed474e2
Added CHANGELOG entry for smb-check-vulns.nse update
2010-06-14 18:48:07 +00:00
drazen
124b4ef13c
Merge from /nmap-exp/drazen/nmap-msrpc. This adds checks for MS06-025 and MS07-029 to smb-check-vulns.nse.
2010-06-14 18:42:54 +00:00
drazen
88a1653d72
Revert r18104. This was a broken merge that still had conflict markers.
2010-06-14 17:32:22 +00:00
drazen
79c14d935c
Merged smb-check-vulns from my branch to trunk.
2010-06-14 17:03:15 +00:00
david
1038dc8bcd
Fix an error in the documentation for get_ssl_certificate.
2010-06-13 23:34:13 +00:00
david
0bb200e105
Look for and link with libnl. This is needed when linking with the new
...
libpcap 1.1.1 on Linux, when libpcap is also linked with libnl (which is
is when available).
2010-06-13 23:24:41 +00:00
drazen
a99aa3b53b
Added a check for the MS07-029 vulnerability within "smb-check-vulns".
...
Made some small changes to the function descriptions.
2010-06-13 02:55:26 +00:00
djalal
2ad517622b
Add the nfs-ls script entry to the script.db
2010-06-12 23:53:20 +00:00
djalal
921f052f0b
Merge r17766:18060 from /nmap-exp/djalal/nselib and nmap-exp/djalal/scripts contains new scripts nfs-ls.nse and lot of new code to the rpc.lua library to check files type and attributes to marshall/unmarshall file attributes and some new high level functions to manipulate NFS objects.
2010-06-12 23:45:59 +00:00
drazen
48ead20324
Added a NOTUP notification if the target service is down (not started).
2010-06-12 22:13:30 +00:00
drazen
0f4d199b1e
Fixed a simple bad gameplay in which I attempt to close
...
an already closed SMB session.
2010-06-12 21:45:16 +00:00
djalal
24807128d2
Merge r17640:18062 from /nmap-exp/djalal/nmap, this is a port of the LuaFileSystem directory iterator in order to use Lua code to list scripts.
2010-06-12 21:41:09 +00:00
drazen
62c2d97f93
MS06-025:
...
-- Finished, tested and merged into smb-check-vulns
-- msrpc.lua contains the code required to interface with the RASRPC interface
2010-06-12 19:32:50 +00:00
david
e4162e6771
o [NSE] Added dns-cache-snoop.nse by Eugene Alexeev. This script does
...
cache snooping by either sending non-recursive queries or by measuring
response times.
2010-06-12 02:25:44 +00:00
fyodor
6cdc29e49c
note an ipv6 problem task
2010-06-11 23:15:28 +00:00
david
35fbec3055
TODO: Testing the removal of PacketSetReadTimeout is done.
2010-06-11 22:49:47 +00:00
david
82e2cc323d
Copy the nselib directory as we do in the POSIX makefile, to avoid installing
...
.svn directories. These were previously present in the Windows zip file, in the
nselib/data and nselib/data/psexec directories.
2010-06-11 22:39:10 +00:00
david
3291dcf898
Some done TODO items.
2010-06-11 16:48:58 +00:00
fyodor
35a28ea343
canonicalize some license text that differed in whitespace or quote character or line-ending or (in a couple cases) the slightly older wording
2010-06-11 06:54:56 +00:00
fyodor
3ceb44b4f7
Moved some information from the license field of these two scripts to the description field. I felt this was a better place since the URL leads to a description of the service rather than license information
2010-06-11 06:49:15 +00:00
fyodor
6ac6e2fad5
loosen the requirements for a split-handshake syn detection to allow the likes of SYN|PSH. See this thread: http://seclists.org/nmap-dev/2010/q2/739
2010-06-11 06:17:52 +00:00
fyodor
0585746788
latest todo updates
2010-06-11 06:15:41 +00:00
