PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-21 15:09:02 +00:00
Code Issues Projects Releases Wiki Activity
2,789 Commits 2 Branches 0 Tags
c5fcfefbea4638b7d69f400c7169035e2046f44c
Commit Graph

2789 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
david
78cc76e9f8 Update script.db. 2008-11-03 20:01:11 +00:00
david
cc7a58cd7a Merge from /nmap-exp/ron/nmap-smb. This adds the new scripts 
smb-serverstats.nse, smb-enumsessions.nse, and smb-enumshares.nse.
 2008-11-03 20:00:24 +00:00
david
2cceb5184c Separate the first paragraph from the rest of the description with a blank 
line, not "\n\n", in the SMB and MSRPC scripts and modules. There are newer
versions of these files pending review, so this is just a quick measure to let
me use first paragraphs as summaries rather than first sentences.
 2008-11-03 16:17:07 +00:00
david
4175c0a930 Give bruteTelnet.nse a less generic name "Telnet brute force" instead of 
"bruteforce".
 2008-11-03 16:03:17 +00:00
david
651cb6e486 Allow dns.get_servers to return a list of known DNS servers even when IPv6 
scanning, when system DNS resolution is used. This makes ASN.nse work for IPv6.
See the thread at http://seclists.org/nmap-dev/2008/q4/0081.html.
 2008-11-02 20:32:26 +00:00
david
a4f6dc6b6e Merge from /nmap-exp/david/nmap-os. 
This brings in four discrete changes:

1. The widening of ranges for T test expressions in nmap-os-db. Any expressions
   that were not already ranges were expanded to cover plus and minus five of
   their original values.
2. The normalization of TG expressions in nmap-os-db. Nmap is only capable of
   outputting 0x20, 0x40, 0x80, and 0xFF for a TG value, but many fingerprints
   had values other than these. They have all been rounded to their nearest
   likely value.
3. The elimination of the U1.TOS and IE.TOSI tests (both having to do with type
   of service). This was effected by setting their MatchPoints to 0.
4. A cleanup and refactoring of OS fingerprint output code. This should not
   have any impact on output, except in one case: when debugging is non-zero or
   verbosity is greater than one, and at least one perfect match was found,
   Nmap used to print "OS Fingerprint:" before the fingerprint. Now it prints
   "TCP/IP fingerprint:" in this case like in all the others.
 2008-10-31 22:46:07 +00:00
david
30d86e3cb0 Add a missing space in refguide.xml. 2008-10-31 18:20:12 +00:00
david
aeae42ddc3 Add an assertion that l_get_dns_servers doesn't return any DNS servers is 
!o.mass_dns. Simplify the loop that builds the server list.
 2008-10-30 22:06:37 +00:00
david
fef3ba7f37 Factor out the mass_dns code that builds the list of servers. 2008-10-30 21:47:27 +00:00
david
471310ae3f Remove a blank section for --max-rate that was left when its contents were 
merged with those of the --min-rate section.
 2008-10-30 19:22:17 +00:00
david
c3b2b3dbed Split parallel DNS resolution and system DNS resolution into separate 
functions. Previously system DNS resolution was encapulated inside the parallel
DNS function, inside a big if block. Now the if is on the outside and decides
which of the two functions to call.
 2008-10-30 19:17:59 +00:00
david
f8b4fc4cc1 Fix a couple of duplicate words found with the duplicate-words script. 2008-10-30 17:28:14 +00:00
sven
e9dd88b8a9 remove bignum_set_negative and bignum_is_negative because those functions are not available in older openssl versions 2008-10-30 13:10:01 +00:00
kris
c51f495a84 o The SSLv2-support NSE script no longer prints duplicate cyphers if 
they exist in the server's supported cypher list.
 2008-10-29 22:58:06 +00:00
fyodor
8734956cf3 Did an audit throughout the book and changed a bunch of numbers 0-9 to write out zero through nine. I guess this is more consistant, but I'm not sure it is any better. Shrug. 2008-10-29 08:31:55 +00:00
fyodor
bd18974ef8 rename the nse-library sect1 from 'Lua Extensions' to 'NSE Libraries' (more descriptive and better matches 'NSE Scripts' section). Also moved the Scripts section before Libraries. Emphasized the name libraries more than modules. Renamed nmap-scripts-list ID to nmap-scripts, which required moving the former nmap-scripts to nmap-script-format. 2008-10-29 01:25:10 +00:00
fyodor
f28c28af10 include extra info about fragmentation 2008-10-29 01:01:45 +00:00
kris
8c18093110 update ip_is_reserved(): 197/8 allocated 2008-10-27 21:28:57 +00:00
david
2f627728a5 Fix a typo in scripting.xml: newsocket -> new_socket. 2008-10-27 21:26:35 +00:00
david
49843daf56 Update some code excerpts in docs/scripting.xml. Make small changes to 
scripts/showOwner.nse for the purpose of better presentation. Remove the subtle
bug in the portrule example. We shouldn't put bad examples in print.
 2008-10-27 17:52:50 +00:00
david
f32ed8acfe Remove an ineffectual setting of port.version.fingerprint to nil in 
scripts/PPTPversion.nse.
 2008-10-27 17:16:53 +00:00
david
9ff7acfe0e Put empty parens after a few function names in scripting.xml; I think that's 
the style we use.
 2008-10-27 16:24:09 +00:00
david
0cba98422c Remove a space that was causing another spurious blank line in a programlisting. 2008-10-27 16:21:41 +00:00
david
3f678cee17 Move the section on NSEDoc of C modules from its own section to a paragraph in 
the section where the examples of NSEDoc are shown. Reword some things. Mention
that @name as well as @class is needed to document tables.
 2008-10-27 16:19:16 +00:00
david
6ecda0239c Improve idnexing in "Script Documentation Writing." 2008-10-27 15:45:41 +00:00
david
aac3a4e0ad Polish some markup in scripting.xml. Index ".luadoc". 2008-10-27 15:31:38 +00:00
david
f742c50008 Move some <programlisting> tags to the first column to avoid spurious blank 
lines at the end. Expand tabs to spaces in the "Version Detection Using NSE"
example; otherwise tabs become single spaces in PDF output.
 2008-10-27 15:21:33 +00:00
david
e24e94c251 Add a workaround in NmapParser.py for a bug in PyXML, an add-on Python 
XML library. We say
	if attrs.has_key("nmap_output"):
rather than
	if "nmap_output" in attrs:
because at least some versions of PyXML don't implement the __contains__
method. See http://mail.python.org/pipermail/xml-sig/2006-December/011627.html.
 2008-10-27 15:05:19 +00:00
batrick
9d45c24835 Updated NSEDoc C module documentation. Merged David's paragraph on the topic 
with mine.
 2008-10-25 03:58:52 +00:00
david
df2ac77764 Small nselib proofreading changes. 2008-10-25 03:35:00 +00:00
david
84afa54d3a Update and proofread documentation of all the scripts, with the exception of 
nbstat.nse and smb-*.nse, which Ron is going to do.
 2008-10-25 03:11:25 +00:00
david
879b33ad75 Replace showHTTPVersion.nse in scripting.xml with skype_v2-version.nse, a 
better example of a version-detection script. I made a few small changes to the
script: shortening long lines and removing some non-functional ones. See
http://seclists.org/nmap-dev/2008/q4/0311.html.
 2008-10-25 01:20:04 +00:00
david
578449da23 Remove the unused "confidence" member of the Port class. This is not the same 
as the "name_confidence" member of a service match. I grepped the whole source
tree and couldn't find any reference to "confidence" besides its declaration
and initialization; it builds fine without it.
 2008-10-25 00:24:32 +00:00
david
99de55975c Add an introductory paragraph to the "NSE Scripts" section of scripting.xml 
explaining that the docs are generated with NSEDoc and pointing to the online
documentation for the latest.
 2008-10-24 22:11:02 +00:00
david
15d0add1fe Remove RealVNC_auth_bypass.nse from the "malware" category. It doesn't have to 
do with any malware, just a security vulnerability. It remains in "default" and
"vuln". I think it was in "malware" because it used to be in the old "backdoor"
category.
 2008-10-24 22:04:30 +00:00
david
7c59faa380 Fix a syntax error in smb.lua. (My fault, it happened while I was testing 
documentation markup.)
 2008-10-24 22:02:22 +00:00
david
58389ab64b Remove a reference to running --script without any arguments. --script requires 
an argument:
	# nmap target --script >/dev/null
	nmap: option `--script' requires an argument
You can use --script= but that's weird enough not to need to be mentioned.
 2008-10-24 21:10:42 +00:00
david
07fc9a963b Fix a parameter list in openssl.luadoc. 2008-10-24 20:58:52 +00:00
david
af4497669b Proofread and update documentation of pop3, shortport, snmp, ssh1, ssh2, 
strbuf, tab, unpwdb, and url.
 2008-10-24 20:12:36 +00:00
david
d0e545b49c Proofread and update documentation of nmap, openssl, packet, and pcre. 2008-10-24 19:08:27 +00:00
fyodor
ddb5829dcf minor syntax updates to the help screen text 2008-10-24 19:07:39 +00:00
batrick
09f1bae240 Added C module NSEDoc generation documentation. 2008-10-24 17:35:01 +00:00
david
3ee17ecb5c Fix NSEDoc error messages, except for some "documenting undefined parameter" 
that happen when one function is defined to be another by assignment.
 2008-10-24 17:05:40 +00:00
david
a2ca60092c Remove module and object prefixes from function names in .luadoc files, as 
suggested by jah in http://seclists.org/nmap-dev/2008/q4/0232.html. This makes
@see cross-references to functions in these files work from other modules.
 2008-10-24 15:57:11 +00:00
david
d20ee8dbbc Proofread and update documentation of match. 2008-10-24 15:14:03 +00:00
fyodor
8532de4a49 apply a bunch of proofreading suggestions from Dan Henage 2008-10-24 08:55:17 +00:00
david
bf635081c3 Proofread and update documentation of http, ipOps, and listop. 2008-10-24 04:59:36 +00:00
david
114e1420bb Proofread and update documentation format in base64, bin, bit, comm, datafiles, 
and dns.
 2008-10-24 03:56:55 +00:00
kris
98ee3211f2 Fixing port numbers in output. The "%hi" conversion modifier was being used 
which treats port numbers as signed shorts, and this caused high ports numbers
to wrap around and be shown as negative.
 2008-10-24 00:48:19 +00:00
david
7e15f259a4 Standardize the @copyright fields of NSE modules; change "See nmaps COPYING for 
license" to "Same as Nmap--See http://nmap.org/book/man-legal.html" like
scripts commonly use. I added the field to some modules I know to be under the
Nmap license: bin, datafiles, dns, nmap, unpwdb. I left alone bin, bit, pcre,
and url, which come from outside sources.
 2008-10-24 00:44:22 +00:00