fyodor
c45f5c2351
what to do about --sh-exec on windows if we add --exec?
2009-03-01 08:02:45 +00:00
fyodor
c1c9ba942a
ncat ideas
2009-03-01 08:01:12 +00:00
fyodor
b7dd3b3b15
an Ncat bug on Windows
2009-03-01 07:24:06 +00:00
david
62aa04c11a
In dns-zone-transfer.nse, return "<parse error>" in case domain decoding fails.
...
otherwise there is an assertion failure trying to insert a nil into an output
table in tab.lua. Increase the maximum number of message compression pointers
we will follow in dns.lua from 3 to 10, because Brandon found a server that
used 4..
2009-02-27 20:16:29 +00:00
fyodor
5924490adf
Include the brief Ncat/Ndiff descriptions
2009-02-27 09:24:24 +00:00
fyodor
83b83ee36c
comment out idps signature for now, since Brandon and Tom are still figuring out the best way to do this
2009-02-27 04:40:21 +00:00
fyodor
9a5ce9bfcc
A few version detection sigs contributed by Tom Sellers
2009-02-27 04:35:30 +00:00
david
940a7fbed4
In genfry (general array-scrambling function), don't swap an array element with
...
itself. memcpy is undefined when the source and destination overlap. Thanks to
Brandon for uncovering this.
2009-02-26 23:47:00 +00:00
fyodor
200ce037af
--without-sopenssl ncat issue
2009-02-26 23:16:07 +00:00
fyodor
5ff2a45235
latest builds
2009-02-26 08:00:00 +00:00
fyodor
b86633e152
Add some ncat ideas
2009-02-26 07:59:57 +00:00
doug
190f7ff6c4
Oops. Should have used a different character from =. # might
...
be OK but I usually don't use cause I was scared of interference
from comment character #.
Ended up using %
2009-02-26 01:50:56 +00:00
doug
994317f13d
Fix for assertion failure problem. Thanks to Brandon and David for finding this.
2009-02-26 01:45:02 +00:00
david
a041058243
Expand the low GCD values from 1-5 back to 1-6. See r12301, which changed <7 to
...
1-5.
2009-02-26 00:50:58 +00:00
david
209601b44a
Device type canonicalization. Put some videoconferencing system is "webcam",
...
not "telecom-misc". Put some temperature sensors in "specialized".
2009-02-25 23:34:37 +00:00
david
ee2e20fab5
Finish my revisions of device-types.txt.
2009-02-25 23:32:26 +00:00
fyodor
5ea1927b04
restore a SEQ.GCD element I previously deleted, but with the proper value of 0 now
2009-02-25 21:37:48 +00:00
david
ff79805ba7
Device type canonicalization. Move some nmap-os-db Linux fingerprints from
...
"specialized" to "general purpose".
2009-02-25 20:32:56 +00:00
david
c3fcd8ca9d
In nmap-os-db, change GCD=<7 to GCD=1-5. The "<7" value was meant to encompass
...
small multiples of 1 when a GCD of 1 was observed. But 0 should be excluded
because a GCD of 0 indicates constant sequence numbers, while a GCD of 1 is
usually a sign of a good sequence number generation algorithm. I lowered the
maximum value in the range from 6 to 5 because the fingerfix utility expands
other GCDs up to a multiple of 5.
2009-02-25 18:01:50 +00:00
david
6a6d18df6f
Fix a bug in the printing of OS fingerprints. When a perfect match was found,
...
the value of the SEQ.G test (print suitable for submission) was the opposite of
what it should have been. This doesn't matter much because in the case of a
perfect match the submission URL isn't shown and the print itself is not
normally displayed. We want perfect matches with the new SEQ.CI test and the
online submitter will reject them if G=N.
2009-02-25 17:44:37 +00:00
doug
85f4cb66e2
Fixed issue with RPM Print Manager match line
2009-02-25 01:44:41 +00:00
bmenrigh
f74f2f05d7
Cast a double seconds into time_t to eliminate a compiler warning that was showing up for my x86_64 box.
2009-02-25 01:27:35 +00:00
david
aa97b79e4c
Fix a little error in a comment: We decided to call the closed-port TCP IP ID
...
test CI, not CTI.
2009-02-25 00:40:47 +00:00
david
8827e6778a
Document SEQ.CI in CHANGELOG. Add it to nmap-os-db with MatchPoints of 0, not
...
that it matters because there are no prints that have it yet.
2009-02-25 00:37:21 +00:00
david
b230f7168c
Merge from /nmap-exp/david/nmap-closed-ipid.
...
This adds a new SEQ.CI OS detection test. It is based on the IP IDs of the
responses to the three probes sent to a closed port: T5, T6, and T7. This has
been reported to differ from TI and was observed to do so in Internet scans
using the nmap-closed-ipid branch.
2009-02-25 00:30:40 +00:00
david
588d629a6a
Copy the Subversion properties from osscan.cc to osscan2.cc. None were set on
...
osscan2.cc. I think osscan2.cc wasn't updating its $Id$ because it didn't have
the svn:keywords property set.
2009-02-24 22:04:54 +00:00
david
f5fb0fd691
Try fixing the $Id: $ line in osscan2.cc. It's not updating itself, perhaps
...
because it had the file name osscan.cc inside it.
2009-02-24 21:58:34 +00:00
david
ade608c766
Factor out a couple of essentially identical switch statements that filled in
...
the TCP/ICMP IP ID sequence generation class.
2009-02-24 21:53:40 +00:00
david
f9f928e9ce
OS fingerprints now include the SEQ.II test (ICMP IP ID sequence
...
generation) even if there are no other SEQ test results. Try it with
"nmap -O -d -p 113 scanme.nmap.org". Now you get SEQ(II=I) instead of no
SEQ line at all.
2009-02-24 21:08:38 +00:00
fyodor
9ede137210
rename crc16 function in nbase to crc32, as that seems to be what it actually is. Also change osscan2.cc to call it by the new name. Thsi fix was suggested by Marc Bevand
2009-02-24 02:01:03 +00:00
fyodor
fac0dacfda
changes after talking to David and also note a new OS detection issue
2009-02-24 01:44:44 +00:00
fyodor
f1d8f94920
sorting, plus fixed a couple likely bugs in the file. A Sun Solaris 2.6 signature was missing a % separater between fields in T6 and T7, and a 3Com SuperStack 3 Switch 4400 SE signature had an empty SEQ.GCD (I am not sure if this is OK or not, so I just deleted it). Thanks to Marc Bevand for spotting the flaws
2009-02-24 01:27:33 +00:00
david
0970e3c255
Add to CHANGELOG:
...
o [NSE] A new function stdnse.sleep allows a script to sleep for a
given time (and yield control to other scripts). [David]
2009-02-24 00:28:35 +00:00
david
486ff13e3a
Add the --stats-every option. See http://seclists.org/nmap-dev/2009/q1/0404.html .
2009-02-24 00:23:54 +00:00
david
a173fe6ce1
Add the stdnse.sleep function.
2009-02-23 23:57:39 +00:00
david
b819aa7f25
Document half-open and full-open IPv4 octet ranges.
2009-02-23 21:21:36 +00:00
david
5d2393d115
Add to CHANGELOG:
...
o [Ncat] The syntax accepted by the --allow, --deny, --allowfile, and
--denyfile options is now the same as Nmap's target specifications.
Additionally any errors in the allow or deny specifications are
reported when the program starts, not deferred until a connection is
received. [David]
2009-02-22 02:58:09 +00:00
david
73356bf715
Interpret '-' by itself as an IPv4 octet as being short for "0-255". So
...
192.168.-.0 is the same as 192.168.0-255.0. It looks like this was intended all
along, but a coding error kept it from working.
2009-02-21 04:00:21 +00:00
david
4b27c53433
Update target specification section in refguide.xml with newest revisions.
2009-02-21 02:09:20 +00:00
david
29cd3a2675
Some revision of device-types.txt.
2009-02-21 01:15:59 +00:00
david
1273142341
FIx a typo in nmap-service-probes, adjust some categorizations in nmap-os-db.
2009-02-21 00:34:33 +00:00
david
cdd24a6fb4
Add counts of how many of each device type is present in both nmap-os-db and
...
nmap-service-probes to device-types.txt.
2009-02-20 22:52:10 +00:00
david
c3606c3793
Document the four device types that were present in nmap-os-db but not
...
nmap-service-probes: encryption accelerator, proxy server, VoIP gateway, web
server.
2009-02-20 22:38:53 +00:00
david
1ca5e5b637
Canonicalize a device type in nmap-service-probes: "media-device" ->
...
"media device".
2009-02-20 19:36:49 +00:00
david
9323b53c68
Fix NSEDoc in msrpctypes.lua. A <code> was unterminated, and bullet lists can't
...
have newlines within each entry.
2009-02-20 18:46:26 +00:00
doug
531e2b7c22
MSSQL updates from Tom Sellers
2009-02-20 01:33:55 +00:00
doug
e13283b01e
Finished nmapsubmit-svfp-020309.mbx
2009-02-19 22:17:24 +00:00
doug
e087884f2c
Another batch of misc from nmapsubmit-svfp-020309.mbx (almost done)
2009-02-18 23:57:43 +00:00
fyodor
3d6a57c585
Khottabych movie
2009-02-18 03:33:50 +00:00
david
d8c3cf21a5
Add missing module name prefixes to usage examples in some NSE documentation.
2009-02-17 19:53:02 +00:00