paulino
c51c0b6e86
Updates script to detect other vulnerable services and removes useless redirection ports from the execution rule. See GH#876
2017-05-09 17:24:55 +00:00
dmiller
edbb4c90ed
Process 124 service fingerprints
2017-05-09 16:12:05 +00:00
paulino
7bd54ab098
Adds http-vuln-cve2017-5689 to detect vulnerable Intel AMT enabled systems (INTEL-SA-00075). Closes #876
2017-05-07 01:33:57 +00:00
paulino
6274868dee
Renames memcached probe and adds a new match for Apache ZooKeeper
2017-05-05 00:03:31 +00:00
dmiller
95850d5ac3
New script vmware-version
2017-05-03 18:22:02 +00:00
dmiller
8649f07a7c
noshutdown handling was missing for connect mode
2017-05-03 03:56:41 +00:00
dmiller
e09cb62439
Only report warning about ratelimits when filtered ports exist
2017-05-02 20:36:08 +00:00
dmiller
4b65a1a247
Process 188 service fingerprints
2017-05-02 20:06:34 +00:00
dmiller
0022c5021b
Some formatting fixups for README.md
2017-04-30 13:18:07 +00:00
dmiller
49ba383eee
Avoid crash if AuthMethod key is not set in iscsi handshake. Fixes #631
2017-04-30 13:18:06 +00:00
fyodor
78f8b39b92
Add further clarification to the Nmap license summary in the new README.md
2017-04-30 01:56:39 +00:00
nnposter
d478199ada
Allows cookies to have unrecognized attributes (see RFC 6265, Section 5.2). Fixes #866
2017-04-29 14:36:46 +00:00
nnposter
0b36ba5cea
Allows unquoted cookie values to contain whitespace, as defined in RFC 6265. Fixes #844
2017-04-29 14:05:57 +00:00
david
6d8a64423f
dnscurve.org has https.
2017-04-28 18:43:38 +00:00
dmiller
5953b817ac
A couple tests for http.lua; see #844
2017-04-27 17:28:46 +00:00
dmiller
ab5e247cee
Include netutil.h for IPPROTO_SCTP constant where necessary. Fixes #868
2017-04-26 18:55:16 +00:00
nnposter
c324237cf0
Converts the login check from a negative test to a positive one (Apache Axis2)
2017-04-25 23:06:38 +00:00
nnposter
2a07563f1d
Simplifies a match pattern
2017-04-25 21:41:43 +00:00
dmiller
b2ed1d58b5
Process 129 service fingerprints
2017-04-24 20:05:46 +00:00
dmiller
b3849c478c
New script arg vulns.short
2017-04-24 13:53:47 +00:00
dmiller
4307615b50
Update snmp scripts with backwards-compatible script-arg syntax
2017-04-22 19:31:25 +00:00
dmiller
13d06eb738
Use creds username as SNMP community if no ':' indicates password. Fixes #862
2017-04-22 19:31:24 +00:00
dmiller
8f3137bac7
Add a README.md for Github
2017-04-21 19:47:50 +00:00
dmiller
69084bbd38
Update scripting documentation
2017-04-21 15:13:08 +00:00
dmiller
c8d5cf86b2
Correct reference to snmpcommunity script-arg. Fixes #861
2017-04-21 13:28:55 +00:00
dmiller
87991d57a2
Revert an incorrect change from r36730
2017-04-21 13:10:23 +00:00
dmiller
e813de759a
Reduce use of utils.h for error functions
2017-04-20 22:39:08 +00:00
dmiller
0ff217dc53
Re-add some needed includes on Windows
2017-04-20 17:24:33 +00:00
nnposter
6d3eac9d3b
Puts together recent CHANGELOG entries related to http.lua
2017-04-19 19:18:21 +00:00
dmiller
86edcb0e5b
Remove some unused includes
2017-04-19 19:06:47 +00:00
nnposter
920fc785b0
Adds a CHANGELOG entry for commits r36722-r35725
2017-04-19 19:03:40 +00:00
nnposter
b9aac1d6ba
Cleans up inline documentation for the default HTTP redirect behavior. Fixes #831
2017-04-19 18:42:51 +00:00
nnposter
cfa57758ad
Changes the redirect rule to return false in case of a missing path. This
...
change aligns the code with the corresponding comment. Fixes #830
2017-04-19 18:39:20 +00:00
nnposter
ab96f9c2e7
Corrects a default HTTP redirect rule for hostname/domain matching. Fixes #829
2017-04-19 18:35:31 +00:00
nnposter
17c37b7e8d
Corrects a default HTTP redirect rule:
...
A redirect should not be carried out if credentials are embedded in the URL.
Fixes #826
2017-04-19 18:30:13 +00:00
dmiller
256378df5c
Fix up some more header includes
2017-04-19 18:18:38 +00:00
nnposter
e80976a13a
Provides a common function, url.get_default_port(), for obtaining
...
the default port number for a given scheme. Fixes #781
2017-04-19 18:00:36 +00:00
nnposter
af6bbc35bb
Changes the port type returned from url.parse() to an actual integer, as
...
opposed to a string that represents an integer. Fixes #833 , fixes #817 .
2017-04-19 17:02:32 +00:00
dmiller
339283d4b0
Remove some unused/overused includes
2017-04-19 14:53:24 +00:00
dmiller
34841655c3
Remove un-checked HAVE_RPC_TYPES_H as we have no test for it
2017-04-19 14:24:43 +00:00
dmiller
77457d5f9b
Remove an unused include
2017-04-19 14:23:42 +00:00
dmiller
891c3be3b9
remove tcpip.h from other headers' includes
2017-04-19 13:53:57 +00:00
dmiller
59d9069e32
Add missing source files
2017-04-19 13:16:14 +00:00
dmiller
24f6cec25a
Move scan lists structs and functions to scan_lists files.
2017-04-19 04:14:43 +00:00
dmiller
71f86bf2ec
Remove some unused function prototypes
2017-04-19 02:17:20 +00:00
dmiller
214d527632
New script smb-double-pulsar-backdoor. Closes #854
2017-04-18 18:09:10 +00:00
dmiller
e2546efe02
Changelog entry for previous commit
2017-04-15 03:30:28 +00:00
dmiller
9e81835ccb
Ignore ICMP Time Exceeded for the purpose of host discovery.
...
http://seclists.org/nmap-dev/2015/q2/68
From: David Fifield <david () bamsoftware com>
Date: Wed, 29 Apr 2015 10:13:40 -0700
Previously, a Time Exceeded message meant the host was immediately
marked down, even if there were other probes still in transit. Now it
gets treated the same as no-response.
I found that a concurrent ICMP traceroute was interfering with host
discovery. Nmap was receiving and acting on the Time Exceeded messages
produced by the traceroute process. This caused it to mark a host as
down that actually was up.
2017-04-15 03:30:27 +00:00
nnposter
c58aa814f3
Suppresses empty output if no vulnerable parameters are found
2017-04-15 00:08:49 +00:00
nnposter
3a6deb0075
Removes trailing ".0" from clock artifacts
2017-04-14 01:41:26 +00:00
