1
0
mirror of https://github.com/nmap/nmap.git synced 2026-01-01 20:39:02 +00:00
Commit Graph

487 Commits

Author SHA1 Message Date
fyodor
6d52a3db77 o Updated showHTMLTitle NSE script to follow one HTTP redirect if
necessary as long as it is on the same server. [Jah]
2008-06-29 04:21:30 +00:00
fyodor
6e14332cdc o Added a UDP SNMPv3 probe to version detection, along with 9 vendor
match lines. [Tom Sellers]
2008-06-28 21:40:44 +00:00
fyodor
aef79acb23 trivial reorg 2008-06-22 05:11:46 +00:00
michael
30d60b97ed setServiceXMLBuf now uses the string class exclusively instead of the old c-string & string class combination. So it is no longer necessary to calculate the length of the XML service element before writing it to its buffer. 2008-06-21 05:45:11 +00:00
fyodor
92e39aa66f o Update the HTTP library to use the new timing_level functionality to
set connection and response timeouts. An error preventing the new
  timing_level feature from working was also fixed.  [Jah]
2008-06-18 00:15:27 +00:00
kris
5b034bf655 adding CHANGELOG entry for Ilja's bug reports 2008-06-14 07:12:21 +00:00
kris
3dc65c8b2c o Fixed several byte-order bugs in Traceroute. [Kris] 2008-06-14 07:06:12 +00:00
fyodor
ac12ab6b41 o Added a new timing_level() function to NSE which reports the Nmap
timing level from 0 to 5, as set by the Nmap -T option.  The default
  is 3. [Thomas Buchanan]
2008-06-14 00:22:05 +00:00
kris
2f9321360f o Added a new NSE Comm library for common network discovery tasks such
as banner-grabbing (get_banner()) and making a quick exchange of data
  (exchange()).  16 scripts were updated to use this library. [Kris]

I have *not* been able to test all of these scripts; however, I have
reviewed them and they should all work properly.  I would really like
some more testing, though :)

This commit includes scripting.xml documentation.
2008-06-12 14:32:25 +00:00
bmenrigh
7af6810d91 Added the BMC, CA-mq, and Goverlan service match lines from Tom Sellers. 2008-06-12 00:34:51 +00:00
kris
1d0456acad o Fixed a bug which caused -PN to erronously bail out for unprivileged
users.  Thanks to Jabra (jabra(a)spl0it.org) for the report. [Kris]

This was introduced when the ping probes were reorganized and moved
out of NmapOps (the o.pingtype check wasn't copied over)
2008-06-10 05:16:29 +00:00
batrick
0564b25559 Added jah's patch to fix Script Database bug: http://seclists.org/nmap-dev/2008/q2/0623.html 2008-06-09 19:46:54 +00:00
david
153f35351f Document zenmap r8086 (fix for loading non-ASCII results from the database) in
the CHANGELOG.
2008-06-09 19:31:33 +00:00
kris
743eb48856 o Fixed some memory leaks in NSE found with Valgrind. [Kris] 2008-06-09 16:54:08 +00:00
kris
ffedc7b69b making a changelog entry for the OpenSSL 0.9.8h upgrade earlier this week 2008-06-06 03:35:11 +00:00
jurand
7a08d348b5 o Install icons and pixmaps under /usr/share/zenmap/{icons,pixmaps}
so they don't get mixed in with the files in /usr/share/{icons,pixmaps}.
  [Jurand Nogiec]

o Modification to handle the problem where if a user modifies the
  command entry field, Zenmap does not necessarily execute this command
  and instead it will follow what the Target/Entry fields specify
  instead. This avoids a bug where if you edited a command, then selected
  a different target, the edited command line would be replaced with one
  from the currently selected profile. [Jurand Nogiec]
2008-06-06 03:22:28 +00:00
kris
3512576c9b zoneTrans.nse now takes a "domain" script argument to specify the domain name
to transfer.  I've only been able to examine the behavior through Wireshark
since I don't have a nameserver that transfers other domains (I always get
"Not Authoritative").  It seems to work fine, though
2008-06-05 04:22:27 +00:00
kris
5436c891fc o Fixed an integer overflow which prevented a target specification
of "*.*.*.*" from working.  Support for the CIDR /0 is now also
  available. [Kris]


A sendto() or connect() to IPv4 addresses with a first octet of 0
(excluding 0.0.0.0 on some OS's) returns EINVAL.  These addresses
are reserved for "self-identification" and should never go over the
wire (and at least on Linux a connect() to 0.0.0.0 gets redirected
to 127.0.0.1).  I'm talking with Fyodor on whether or not to skip
*all* of these addresses.
2008-06-03 19:25:16 +00:00
david
91d5eb45a5 Remove an FEFF byte order mark from the beginning of CHANGELOG. 2008-06-03 18:58:39 +00:00
kris
939a38d918 fixing the date/order in the CHANGELOG--new changes go above the last release 2008-06-03 18:35:09 +00:00
michael
9f64691427 On windows, the --iflist option was not reporting correct windevice values and not displaying all ethernet devices if the user had interface aliases set up. Now all Windevice values and interface device ID's will be properly linked together. 2008-06-03 18:05:45 +00:00
michael
c20b232ebc Updating the CHANGELOG for my previous patch. 2008-06-03 16:26:00 +00:00
fyodor
4ada795952 slight reorg 2008-06-02 00:40:24 +00:00
fyodor
7026766335 more tweaking 2008-06-01 07:04:54 +00:00
fyodor
bcf92751b9 minor improvements to CHANGELOG 2008-06-01 06:59:59 +00:00
fyodor
7df6406b4b slight reformat and fix a typo 2008-06-01 06:56:09 +00:00
kris
a5bf21e5db o The NSE nmap.registry.args table is now available, albeit empty, when
--script-args isn't used.  Now scripts don't need to check if it's nil
  before attempting to index it. [Kris]
2008-06-01 06:31:50 +00:00
fyodor
6593a74fc9 Update the CHANGELOG with latest changes in prep for release (tomorrow, hopefully) 2008-06-01 05:46:47 +00:00
fyodor
ed58c3cdf7 Changed to a more international style date format for release dates, also made some misc. minor changes 2008-06-01 03:41:18 +00:00
fyodor
cdcf26d420 Win32 installer improvements:
o Our WinPcap installer now starts the NPF driver running as a
  service immediately upon installation and after restarts. You can
  disable this with new checkboxes. This behavior is important for
  Vista and Windows Server 2008 machines when User Account
  Control (UAC) is enabled. [Rob Nicholls]

o Nmap and Nmap-Winpcap silent installation now works.  Nmap can
  be silently installed with the /S option to the installer.
  If you install Nmap from the zip file, you can install just
  Winpcap silently with the /S option to that
  installer. [Rob Nicholls]

o Our WinPcap installer is now included with the Nmap Win32 zip
  file. [Fyodor]

o Numerous miscellaneous improvements were made to our Win32
  installer, such as using the "Modern" NSIS UI for WinPcap,
  improving the option description labels, and showing a finish
  page in all cases. [Rob Nicholls]
2008-06-01 03:18:35 +00:00
michael
6692822a34 The information pretaining to the U1.RID probe for OS scans wasnt being properly converted to/from network byte order. This has resulted in several erronious entries in nmap-os-db and the failure of OS scan to perfectly detect some hosts (most of them are printers). 2008-05-31 01:41:13 +00:00
fyodor
f90bdc0a9b o Updated to include the latest MAC Address prefixes from the IEEE in
nmap-mac-prefixes [Fyodor]
2008-05-30 21:47:20 +00:00
michael
bbc2196eea Fixed one of the memory leaks in getpts_simple which occures when no ports are to be added to 'list'. 'porttbl' is now free'd regardless of how the function returns. 2008-05-28 20:14:44 +00:00
kris
ca5848efdb Updating ip_is_reserved(): 112/8 and 113/8 were allocated to APNIC 2008-05-27 18:31:26 +00:00
kris
ee876ada98 o Replaced kibuvDetection.nse with version detection match lines which
work better than the script. [Kris, Brandon]
2008-05-25 23:30:21 +00:00
fyodor
71a29d4e2d o Fixed a bug in the showOwner NSE script which caused it to try UDP
ports instead of just TCP ports.  This made it very slow in the
  common case where there are many UDP ports in the open|filtered
  state.  Thanks to Jason DePriest for reporting the problem and Jah
  for tracking it down and fixing it.
2008-05-25 01:38:48 +00:00
david
be46ec3054 Add to CHANGELOG:
o A bug was fixed that could cause Zenmap to crash when loading a
  results file that had multibyte characters in it. The error looked 
  like
    Gtk-ERROR **: file gtktextsegment.c: line 196 (_gtk_char_segment_new): assertion failed: (gtk_text_byte_begins_utf8_char (text))
2008-05-23 04:41:22 +00:00
david
48fd27a00d Announce the Mac OS X binary packages in CHANGELOG and give credit to the two
most active testers.
2008-05-22 15:05:06 +00:00
david
8663003c36 The NSE HTTP library now uses the host name specified on the command
line when making requests, which improves script scanning against web
servers with virtual hosts. Thanks to Sven Klemm for the patch.
2008-05-20 06:13:26 +00:00
david
fac8d52c1c Remove a test for the existence of $CXX in configure.ac. This was already done
better by AC_PROG_CXX and caused a failure when configured with ccache:

CXX="ccache /usr/bin/g++-4.0" ./configure
checking build system type... i386-apple-darwin9.2.2 
checking host system type... i386-apple-darwin9.2.2 
checking for gcc... ccache /usr/bin/gcc-4.0 
checking for C compiler default output file name... a.out 
checking whether the C compiler works... yes 
checking whether we are cross compiling... no 
checking for suffix of executables... 
checking for suffix of object files... o 
checking whether we are using the GNU C compiler... yes 
checking whether ccache /usr/bin/gcc-4.0 accepts -g... yes 
checking for ccache /usr/bin/gcc-4.0 option to accept ISO C89... none needed 
checking for inline... inline 
checking for gcc... (cached) ccache /usr/bin/gcc-4.0 
checking whether we are using the GNU C compiler... (cached) yes 
checking whether ccache /usr/bin/gcc-4.0 accepts -g... (cached) yes 
checking for ccache /usr/bin/gcc-4.0 option to accept ISO C89... 
(cached) none needed 
checking whether we are using the GNU C++ compiler... yes 
checking whether ccache /usr/bin/g++-4.0 accepts -g... yes 
checking for ccache /usr/bin/g++-4.0... MISSING 
configure: error: Could not locate a C++ compiler. If it exists, add it 
to your PATH or give configure the CXX=path_to_compiler argument. 
Otherwise, install a C++ compiler such as g++ or install a binary 
package of Nmap (see http://nmap.org/download.html ))
2008-05-20 05:31:53 +00:00
kris
7d38c4dc6e o Nmap now understands the RFC 4007 percent syntax for IPv6 Zone IDs.
On Windows, this ID has to be a numeric index.  On Linux and some
  other OS's, this ID can instead be an interface name.  Some examples
  of this syntax:
    fe80::20f:b0ff:fec6:15af%2
    fe80::20f:b0ff:fec6:15af%eth0

This was a lot simpler than the method I previously implemented and posted
to nmap-dev.  Now I just extract the zone ID from the already available
getaddrinfo() data rather than parsing it out myself.
2008-05-20 05:21:29 +00:00
michael
b32c2df695 Here is the updated changelog for my preceeding patch. 2008-05-15 22:44:50 +00:00
jurand
0708d3144d Fixed the nmap_command_path bug in Zenmap. The variable now actually accesses the nmap_command_path in zenmap.conf file. It is
accessed by a new class in UmitConf called PathsConfig, which represents the [paths] section in zenmap.conf. [Jurand Nogiec]
2008-05-15 21:10:20 +00:00
kris
abe470fba8 Change SSLv2-support.nse to only print cipher list if verbosity>=2 or debugging>0 2008-05-14 04:08:07 +00:00
kris
48a8bd757c Removing mswindowsShell.nse--there is a version detection match to accomplish the same thing 2008-05-10 20:52:16 +00:00
fyodor
e843583ef3 o Nmap now reports scan start and end times for individual hosts
within a larger scan. The information is added to the XML host
  element like so: [host starttime="1198292349" endtime="1198292370"]
  (but of couse with angle brackets rather than square ones).  It is
  also printed in normal output if -d or "-v -v" are
  specified. [Brandon, Kris, Fyodor]
2008-05-09 05:21:44 +00:00
david
ce83ee9a43 Add to CHANGELOG:
o "make uninstall" now uninstalls Zenmap as well. The uninstall_zenmap
  script now deletes directories that were installed. [David]
2008-05-07 18:25:12 +00:00
fyodor
bad1caa2e0 o Fixed a bug which caused Nmap to send bad checksums on Solaris 10
x86.  This was due to a workaround for an Ancient Solaris 2.1 bug
  which activated when the OS string matched "solaris2.1*".  The
  problem has now been resolved until Solaris 20 comes out and hits
  our "solaris2.2*" bug workarounds. Thanks to Nathan Bills for the
  problem report.  Fixed by Fyodor.
2008-05-06 23:28:34 +00:00
bmenrigh
65c650382f Simple typeo (XP->Vista) fix 2008-05-06 07:32:44 +00:00
fyodor
5e8515e5fd o We now compile in IPv6 support on Windows. In order to use this,
you need to have IPv6 set up.  It is installed by default on XP, but
  must be downloaded from MS for XP.  See
  http://www.microsoft.com/technet/network/ipv6/ipv6faq.mspx . [Kris]
2008-05-06 07:16:38 +00:00