1
0
mirror of https://github.com/nmap/nmap.git synced 2025-12-15 12:19:02 +00:00
Commit Graph

5079 Commits

Author SHA1 Message Date
fyodor
c0a554d54d some done tasks from discussion w/David 2011-03-02 02:30:33 +00:00
david
e73605e40a Add missing version fields to a gpsd match line. 2011-03-01 16:41:19 +00:00
patrik
58edddaedb o [NSE] Merged the ms-sql branch with several improvements and changes to the
ms-sql scripts and library:
  - Improved version detection
  - Improved server discovery
  - Add support for named pipes
  - Add support for integrated authentication
  - Add support for connecting to instances by name or port
  - Improved script and library stability
  - Improved script and library documentation
 [Patrik Karlsson, Chris Woodbury]
2011-02-26 22:41:10 +00:00
patrik
d6bbc6da8f o [NSE] Added probe for Apple iPhoto (DPAP) and the dpap-brute script that
performs password guessing against a shared iPhoto library. [Patrik]
2011-02-26 16:24:54 +00:00
david
33eb70b7f2 Regen configure. 2011-02-25 03:08:24 +00:00
david
c4cda67b99 Show which libraries are the ones included with Nmap and which are from
the system by prefixing "nmap-" to the former in -V output. Patch by
Ambarisha B.

Hard-code the included/non-included libraries in nmap_winconfig.h:
2011-02-24 21:06:59 +00:00
david
61543b681e Fix to http.validate_options from Sebastian Prengel: The cookies table
was being iterated over incorrectly.

Also from Sebastian: add "expires" to the list of handled keys in
validate_options.
2011-02-24 20:16:06 +00:00
david
b31a8aa875 Show the line number for matches without product information (only a
service name) too.
2011-02-23 17:23:21 +00:00
david
b1c1891a7d Show the line number in service scan match debug messages. 2011-02-23 17:18:57 +00:00
david
6d65382a24 Fix a double ^^ at the beginning of a match line. 2011-02-23 17:15:10 +00:00
david
53d71389da Patch to firewalk.nse from Henri Doreau; avoids an error when giving a
timespec.
2011-02-23 02:34:47 +00:00
david
19352635ed Add to CHANGELOG:
o [NSE] Added quake3-master-getservers, which gets a list of live
  Quake 3 servers from a master server. (It also works for many
  similar games.) [Toni Ruottu]
2011-02-22 21:55:28 +00:00
david
c334d570eb Use the tab library to line up output. 2011-02-22 21:55:26 +00:00
david
1c4e060f79 Don't randomly select the servers to show. Just show the ones at the
top. Display the total number when limiting output.
2011-02-22 21:55:25 +00:00
david
e5717f259a Add quake3-master-getservers from Toni Ruottu. Move the
quake3-master-protocols data file inside of
quake3-master-getservers.nse.
2011-02-22 21:55:23 +00:00
patrik
980a0878a8 Corrected documentation bug 2011-02-22 21:49:48 +00:00
david
ddaf29c3e4 Fix two bugs in the new shortport.ssl portrule, reported by Tom Sellers.
The first is that "sctp" was being treated as a list of port states,
when it should have been put in the same table as "tcp". The second is
the same bug that we've seen before, which is that it was returning a
function value instead of the result of calling the function.
2011-02-22 20:16:34 +00:00
robert
64be521758 Update the old blue eye with the modern "blue insecure eye". 2011-02-22 20:09:16 +00:00
fyodor
9759631b89 Note some scripts dealt with 2011-02-22 19:56:53 +00:00
patrik
e50d65755b * Add a new script snmp-ios-config that pulls the config from a Cisco devices
using SNMP and tftp. The script was created by Vikas Singhal.
* Add tftp library, used by the snmp-ios-config script, that acts as a server
  and receives the config file from the device. [Patrik]
2011-02-22 09:13:03 +00:00
david
60cd2ef9cf Turn the 6481/udp probe from servicetags.nse into a UDP payload. 2011-02-22 04:32:59 +00:00
david
6f0af76f08 Add to CHANGELOG:
o [NSE] Added servicetags.nse, which queries the Sun Service Tags
  agent and gets system information. [Matthew Flanagan]
2011-02-22 04:32:58 +00:00
david
770ecb7f66 Factor out three data-gathering functions in servicetags: one to get
agent information, one to get the list of svgtags, and one to get
information about a particular svctag. Don't crash if the TCP connection
can't be made (which will be the case when the stlisten service isn't
running).
2011-02-22 04:32:56 +00:00
david
5349d1619e Don't use strbuf to build payloads; it's unnecessary for these short
strings.
2011-02-22 04:32:54 +00:00
david
b1aaf2da8d Remove a level of indentation. 2011-02-22 04:32:53 +00:00
david
288c9c88bb Use data-driven XML grepping instead of repeating the same code many
times.
2011-02-22 04:32:53 +00:00
david
f751c0c386 Whitespace, spelling. 2011-02-22 04:32:52 +00:00
david
7ad53deb42 Add servicetags script. 2011-02-22 04:32:51 +00:00
david
12ae6a8930 Add to CHANGELOG:
o [NSE] Enhanced firewalk.nse to automatically find the gateways at
  which probes are dropped. [Henri Doreau]
2011-02-22 02:51:11 +00:00
david
73e80d1a0a Whitespace, typos. 2011-02-22 02:51:09 +00:00
david
cd4833f2a8 Rename firewalk-path to firewalk. 2011-02-22 02:51:08 +00:00
david
db50d964d4 Update firewalk.nse: add max-probed-ports argument and use
stdnse.get_timespec to parse time specifications.
2011-02-22 02:51:06 +00:00
david
da4a064291 Update firewalk.nse by Henri Doreau. (firewalk-path version from
http://seclists.org/nmap-dev/2011/q1/63.)
2011-02-22 02:51:04 +00:00
david
c3ab2d5ea4 Create a shortport.ssl function like shortport.http. Use it in ssl
scripts.
2011-02-22 00:46:28 +00:00
david
0b4de98d24 Whitespace. 2011-02-21 22:59:34 +00:00
patrik
562ee68df0 Applied patch recieved from Josh Amishav-Zlatin that addresses the problem
with the 550 User Unkown message being handled incorrectly as described here:
http://seclists.org/nmap-dev/2011/q1/585
http://seclists.org/nmap-dev/2011/q1/511
[Patrik]
2011-02-20 20:49:58 +00:00
david
38acaa80e5 Change a literal hostname in an ftp service match into a pattern. This
was probably accidentally left in during integration.
2011-02-19 00:38:55 +00:00
tomsellers
4d3a2ecef9 Consolidated and grouped matchlines related to the FTP service on
Lexmark (and rebranded) laser printers.  There was a near perfect
matchline that was being skipped due to an extra \d in the capture
pattern.  I moved it down with some others, removed some lines that
had included in the hostname and model in the discrete text and 
expanded the hostname match character set.

The format for the banner is:

220 <hostname> Lexmark <model> FTP Server <firmware revision> ready.
2011-02-19 00:24:37 +00:00
tomsellers
4c13add811 2011-02-19 00:08:10 +00:00
tomsellers
73a4a10769 Consistency change - edited all Apache TomCat related matchlines
to return "Apache Tomcat" as opposed to being split between "Apache Tomcat"
and "Apache Tomcat httpd".  Tomcat can run on top of Apache HTTPD, Microsoft
IIS, and Apache Coyote. - Tom
2011-02-19 00:01:32 +00:00
tomsellers
916ddc73f8 Adding three match lines for two embedded device httpd:
Tridium Niagara httpd - embedded control systems, HVAC, etc
   http://www.tridium.com/

Knoplerfish - various devices, included printers
   http://www.knopflerfish.org/
2011-02-18 23:55:04 +00:00
tomsellers
abeaffea33 Minor changes to nmap-service-probes to improve consistency with naming
Trend Micro products.
2011-02-18 23:47:47 +00:00
fyodor
46fc6b8f4c Update nmap-mac-prefis to include latest data from IEEE 2011-02-18 02:05:26 +00:00
djalal
0a9764709f Use the correct script name in the usage example of the smtp-enum-users. Reported by Jamuse, who also contributed the patch. 2011-02-17 18:41:51 +00:00
djalal
508fe849f9 Call nsock_dist_clean before nbase_dist_clean. 2011-02-16 19:54:43 +00:00
tomsellers
01bbf58b67 Fixed an undeclared variable. 2011-02-16 00:25:40 +00:00
tomsellers
c8fb3889e6 Addressed a condition in db2-das-info.nse where the script would crash
if the DB2 DAS service had discovery mode disabled.  While the service
would be listening, the data would be in an unexpected format.  This 
caused the script to crash at line 412 when it tried to extract the 
server profile from the DB2 response (db2response.info variable).

I will likely tweak the hard setting of the ports in the block that
follows after I perform more testing to verify that it behaves as
expected - Tom
2011-02-16 00:13:38 +00:00
tomsellers
972a72e130 Add a softmatch line for SMTP returning a 550 code as well as a
x.x.x format error code.  Discovered on Cisco gear but other SMTP
services may use the format as well. - Tom
2011-02-15 23:44:47 +00:00
david
bf99fb231b Check that the argument to freeaddrinfo is not NULL. The behavior may be
unspecified and causes a segmentation fault on Android Bionic libc.
Vlatko fixed the bug in his Android binaries and it was first reported
by @alexismm2.
2011-02-15 08:19:58 +00:00
djalal
f8b55e3253 Make the use of the SCRIPT_TYPE environment variable clearer. 2011-02-14 21:04:52 +00:00