sven
5d12eb7a3d
add missing local reference to error() to stdnse
2008-10-12 18:39:00 +00:00
sven
841ab6647a
show meaningful error messages on OpenSSL errors
2008-10-12 13:47:44 +00:00
batrick
8eb929d868
Fixed documentation error.
2008-10-10 13:17:39 +00:00
sven
809784ed20
use shortport library in ircServerInfo script
2008-10-10 10:45:21 +00:00
sven
375f34f0ca
use shortport library in PPTPversion script
2008-10-10 10:41:20 +00:00
sven
b9d76ac933
add changelog entry for new openssl NSE library
2008-10-10 07:08:41 +00:00
sven
ece81da41a
add linebreaks to @output section of rpcinfo and SSH-hostkey script
2008-10-10 06:27:10 +00:00
david
9d6c638dbb
Change some wording in scripting.xml.
2008-10-09 03:52:25 +00:00
david
2f1898fe49
Whoops, SSH-weak_key.nse isn't a merged script. I just had an unversioned copy in my scripts directory. Remove it from script.db.
2008-10-09 00:45:42 +00:00
david
9ed44c721b
Proofread and index the scripting.xml documentation on the openssl NSE module.
2008-10-09 00:26:46 +00:00
david
367274bf35
Update the section on compiled NSE modules to refer to the openssl module
...
rather than the hash module.
2008-10-08 23:51:28 +00:00
david
cb00282519
--update-scriptdb to add SSH-hostkey.nse and SSH-weak_key.nse.
2008-10-08 23:10:33 +00:00
david
e7cc30b6c2
Make some changes to allow a Windows build of the new openssl code. (Just
...
rearragement of some includes and defines.)
2008-10-08 22:58:29 +00:00
david
66c775ad96
Remove some commented-out code from mswin32/nsis/Nmap.nsi that associated the
...
file extension .usr with Zenmap. We don't use .usr any more.
2008-10-08 22:51:05 +00:00
sven
d8714befb1
merging nse_openssl branch
2008-10-08 22:21:41 +00:00
david
70bfb42915
Add to CHANGELOG:
...
o [Zenmap] Host information windows are now like any other windows,
and will not become unclosable by having their controls offscreen.
Thanks to Robert Mead for the bug report.
2008-10-08 21:00:23 +00:00
david
ddb66f1c07
Revert r10335, which had the NSE loader track require errors and handle them
...
specially. This was to hide the any errors raised by scripts using an openssl
module when OpenSSL itself wasn't available. For now this will be handled by
having each script check for openssl.
2008-10-08 16:46:12 +00:00
david
9bd8b7b399
Add a few "see" indexterms to refguide.xml.
2008-10-08 01:23:17 +00:00
david
3191e09595
Remove a duplicate paragraph in refguide.xml. The paragraph about port
...
selection wildcards was under the idle scan heading also.
2008-10-08 00:07:10 +00:00
david
c91f49ab80
Canonicalize an indexterm in scripting.xml.
2008-10-07 14:22:27 +00:00
sven
8f83450228
revert tonumber() conversion in stdnse.tohex() because tonumber() discards whitespace
2008-10-07 07:28:10 +00:00
fyodor
840b276b6c
From Jason R. DePriest:
...
Fixed it to normalize the line endings before replacing them with
commas and I have it remove extra spaces.
2008-10-07 03:54:46 +00:00
batrick
2c6554a435
Updated stdnse.tohex() to coerce strings to numbers if possible for the first
...
argument. That is, the first argument is interpretted as a number if possible.
2008-10-07 02:24:31 +00:00
batrick
f71135f796
Changed stdnse.tohex to no longer create tables unnecessarily if options
...
are ommitted.
2008-10-07 02:22:17 +00:00
fyodor
84bb81d6ee
1-line fix from Jah:
...
The attached fixes an error in ipOps.ip_to_bin() when a string is passed
to stdnse.tohex(). This should always be (and should always have been)
a number.
2008-10-07 02:17:08 +00:00
fyodor
9e4772dc50
Improvements to the nsedoc comments by Arturo 'Buanzo' Busleiman
2008-10-07 00:10:40 +00:00
sven
6057449ae0
add comments to stdnse.tohex()
2008-10-06 09:52:55 +00:00
sven
2dd98df5b9
don't split and concat hex string in stdnse.tohex() if no separator is given
2008-10-06 09:29:27 +00:00
david
01ca5f9188
Encapsulate the redirect decision rules in showHTMLTitle.nse into their own
...
function.
2008-10-06 00:03:33 +00:00
david
ac19339d5f
o showHTMLTitle.nse can now follow (non-standard) relative redirects,
...
and may do a DNS lookup to find if the redirected-to host has the
same IP address as the scanned host. [Jah]
2008-10-05 23:46:22 +00:00
david
342272eca7
Revert r10484, which added checks for GTK+ and PyGTK in configure. The checks
...
failed if a user didn't have the development versions of those libraries
installed; in particular, they tried to compile a GTK+ program and looked for
pkg-config's .pc files. It is better to err on the side of building Zenmap when
it may not be supported than not building it when it may in fact be supported
(which was the previous behavior anyway). See discussion at
http://seclists.org/nmap-dev/2008/q4/0054.html .
2008-10-05 00:42:25 +00:00
david
ae7455279e
Add a new msrpc.lua module, plus new scripts smb-enumdomains.nse,
...
smb-enumshares.nse, and smb-enumusers.nse. Also enhance the netbios.lua and
smb.lua modules. Remove the smb-enum.nse script. All these changes are from Ron
Bowes.
2008-10-04 21:58:39 +00:00
david
13663fb649
Have configure check for GTK+ 2.8.0 and PyGTK 2.8.0 in addition to Python 2.4
...
when deciding whether to build Zenmap. Those versions are required for the
Cairo functions used by RadialNet.
2008-10-04 01:24:38 +00:00
sven
565a5ee3ed
o Enhanced the tohex() function in the NSE stdnse library to support strings
...
and added options to control the formatting. [Sven]
2008-10-03 19:55:58 +00:00
david
7f9bac76b2
Make the buffer for formatting the SCAN.DS test value in an OS fingerprint a
...
little bit bigger, so some seriously wrong distances aren't truncated. The
buffer size used to be 8, which couldn't hold an observed network distance of
-190:
%DS=-19\0
01234567
I increased it to 10.
2008-10-03 18:46:22 +00:00
sven
83ec6aa665
It is unnecessary to prefer targetname over the ip in the request()
...
function since host is only passed to socket:connect() which would have to
resolve the targetname back to the ip.
2008-10-03 17:17:45 +00:00
david
d8e40a3546
Add Sven's modifications to http.lua. In his words:
...
It is unnecessary to prefer targetname over the ip in the request()
function since host is only passed to socket:connect() which would have to
resolve the targetname back to the ip.
I've rewritten the header/body separation to use a single regex which
should do the same as your code and since the first match is non-greedy
should always prefer the shorter version.
I've done something similar for the header splitting.
I've removed the type checks for header and body since they are always
strings.
2008-10-03 15:43:38 +00:00
david
ebaf939f5f
Make the http NSE module better handle different delimiters in the headers of
...
messages (and in the body when chunked encoding is used). The patch is from
jah.
2008-10-03 01:00:55 +00:00
david
168e38357e
When launching Zenmap's help, properly convert the pathname of the local help
...
file to a URL, using "file:///C|/Program Files/..." rather than
"file://C:\Program Files\...". This is apparently needed by some web browsers.
2008-10-02 17:12:28 +00:00
david
1b4782d9df
Add a missing word "script" in CHANGELOG.
2008-10-02 17:06:47 +00:00
david
08c98a26e6
Update HTTP_open_proxy.nse to use Google Web Server's changed header field:
...
"Server: gws" instead of "Server: GWS/". The patch is based on one from Vlatko
Kosturjak. Sven suggested a better portrule.
2008-10-02 16:11:22 +00:00
david
62d840d8ce
In nmap-os-db, change the OS family of a couple of IOS devices from "12.2" to
...
"12.X".
2008-10-01 21:58:16 +00:00
sven
1444e02a86
apply Matt Selsky's patch for ssh version detection signatures to properly detect daemons only supporting protocol version 2
2008-10-01 21:05:03 +00:00
david
87c6a7ef50
Make Zenmap's Nmap output viewer automatically scroll.
2008-10-01 20:49:18 +00:00
fyodor
f2e3648470
misc. changes, most of which came from review feedback by Dan Henage
2008-09-30 09:04:53 +00:00
fyodor
d14e9345b3
Update a bunch of Nmap scan examples (sometimes required rescanning and/or changing surrounding text
2008-09-30 07:29:03 +00:00
david
05b5c87558
Make the filename_to_url function static.
2008-09-29 21:50:34 +00:00
david
e0870ade30
Index the URL string with a std::string::size_type rather than an unsigned int.
...
Fyodor got the warning
NmapOps.cc: In function âchar* filename_to_url(const char*)â:
NmapOps.cc:195: warning: comparison is always true due to limited range of data type
and later a segmentation fault.
2008-09-29 21:44:12 +00:00
david
e37020553e
When making a file:// URL, additionally percent-escape the percent character
...
itself. Also fix a signedness warning.
2008-09-29 17:03:53 +00:00
david
63b0689834
As long as we're converting file names to URLs we may as well do it right and
...
do percent-encoding to avoid interpretation of characters such as ? and #.
2008-09-29 16:47:20 +00:00