fyodor
2a2e929ed6
add check for /phpinfo.php. Example: http://ws1.surf-town.net/phpinfo.php
2012-04-04 02:04:42 +00:00
david
508f4e6155
Add .hgignore while we're at it.
2012-04-01 07:01:21 +00:00
david
b45b64af0d
Add .gitignore and .bzrignore to http-fingerprints.
2012-04-01 04:39:19 +00:00
david
479b92ae0b
Add a comment to wp-plugins.lst with a link to the script used to make it.
2012-03-08 21:21:51 +00:00
david
1bcc757d28
Updated wp-plugins.lst from Ange Gutek.
2012-03-07 03:22:23 +00:00
tomsellers
9f4fcc4da5
[NSE] Added support to broadcast-listener for extracting address, native vlan and management IP address from CDP packets.
2012-02-25 17:18:22 +00:00
tomsellers
8a0931b752
Improved EIGRP processing for broadcast-listener. The pattern match was insufficient so I added a check for IP protocol 88.
2012-02-14 23:38:01 +00:00
tomsellers
7807926f15
[NSE] Added support for decoding EIGRP broadcasts from Cisco routers to broadcast-listener.nse
2012-02-12 21:20:16 +00:00
patrik
fccccff960
* bugfixes to several http scripts related to new redirect code in http
...
library
* added option to httpspider that allows passing the redirect_ok closure to
the http library
[Patrik]
2012-02-11 22:37:14 +00:00
patrik
bd1b7dfaad
o [NSE] Applied patch to http-fingerprints adding support for identifying DCVS
...
systems Git, Mercurial and Bazaar. [Hani Benhabiles]
2011-12-25 21:57:11 +00:00
patrik
215f697171
o Added new fingerprints to http-enum for Subversion, CVS and Apache Archiva
...
[Duarte Silva]
2011-12-18 19:11:24 +00:00
patrik
acb1455874
o [NSE] Applied patch that replaces a number of GET requests to HEAD in http-
...
fingerprints.lua where no matching was performed on the returned contents.
[Hani Benhabiles]
2011-12-06 15:57:21 +00:00
david
46bcc85069
Add some more JBoss fingerprints.
...
These are from a talk I saw recently (page 19).
http://www.matasano.com/research/OWASP3011_Luca.pdf
2011-12-02 19:28:54 +00:00
david
3c75f0f43c
New Wordpress http fingerprint from Duarte Silva.
2011-11-06 22:37:22 +00:00
patrik
0270368e69
o [NSE] Added the scripts rtsp-url-brute, rtsp-methods and the supporting rtsp
...
library. The scripts check the supported RTSP methods and attempt to brute
force valid RTSP urls. [Patrik]
2011-10-26 21:36:37 +00:00
paulino
859e35bc2e
Adds entry for Easy Hosting Control Panel. There are a lot of vulnerable installations and an auth bypass vulnerability:
...
http://www.1337day.com/exploits/17010
2011-10-04 07:46:16 +00:00
david
dd2a2677c5
Add tftp-enum.nse by Alexander Rudakov.
2011-10-03 22:17:57 +00:00
david
44fcc2f455
ssl-enum-ciphers update for cipher strength from Gabriel Lawrence.
2011-09-14 17:57:47 +00:00
patrik
ae75aa7fd3
o [NSE] Added new default credential list for Oracle and modified the
...
oracle-brute script to make use of it. [Patrik]
2011-09-05 08:13:34 +00:00
patrik
a1d515e548
o [NSE] Added script broadcast-listener that attempts to discover hosts by
...
passively listening to the network. It does so by decoding ethernet and IP
broadcast and multicast messages. [Patrik]
2011-08-10 16:46:55 +00:00
gorjan
d509ad055a
Adding the optimized snmp-brute script, unpwdb library , snmpcommunities wordlist
2011-08-03 21:37:27 +00:00
paulino
deded46038
Adds apache axis2 login signature.
2011-07-15 23:43:10 +00:00
paulino
6a8a10794f
Adds more paths for Coldfusion and Apache Axis2
2011-07-15 23:33:03 +00:00
paulino
b291f28e62
Added new entries for awstats totals under 'general'
2011-07-11 07:48:16 +00:00
paulino
248b53abfa
Adds entries under 'attack' for:
...
-OrangeHRM: http://www.exploit-db.com/exploits/17212/
-Tikiwiki: http://www.exploit-db.com/exploits/1244/
2011-07-09 20:44:22 +00:00
paulino
0528868eb9
Includes new fingerprints for Joomla submitted by Hani, moves drupal signatures to the cms section and adds new ones for Cisco, Airaya and Cirronet routers
2011-07-09 20:29:11 +00:00
paulino
84a4bb2506
Added signature of a Cisco router
2011-07-08 18:44:23 +00:00
paulino
4348f6fa07
Adds fingerprints for Drupal and Arris 2307
2011-07-04 21:34:08 +00:00
paulino
e9e4b6d27d
Adds new fingerprint and new login template.
2011-07-04 20:56:06 +00:00
paulino
4f21388faa
Adds http-default-accounts fingerprint database
2011-07-01 21:43:53 +00:00
paulino
5fcfb8abc6
* Adds Wikipedia path to the wiki signatures.
2011-07-01 20:47:06 +00:00
paulino
47a338c85a
* Adds note about a desired feature: cache system for http pipelines
...
* Adds note about the new signatures added to http-enum
2011-07-01 20:45:28 +00:00
paulino
d69d7aa820
No more duplicates in this database.
2011-07-01 19:27:53 +00:00
paulino
fb07b4082a
Moves lotus domino fingerprints under the same one
2011-07-01 19:07:34 +00:00
paulino
ee66dfe6a5
Fixes duplicates and a couple of signatures that got copied incorrectly. These new fingerprints come from going through exploit-db.com's archives since July 1 2011 to July 1 2009.
2011-07-01 19:02:34 +00:00
paulino
e420332846
Adds 120 new entries under the categories: general, attacks, cms, security, management and database.
2011-07-01 10:18:10 +00:00
paulino
29ff392125
Added new entries under 'general' and 'cms' . Extracted from exploit-db archives so the new software added is known to be vulnerable.
2011-06-27 03:40:22 +00:00
paulino
c8bb5ac526
Added more fingerprints under 'general'
2011-06-26 21:43:25 +00:00
paulino
0c3728edd2
Added more fingerprints under 'cms' and 'general'
2011-06-25 23:24:14 +00:00
paulino
baba2fe7c5
Adds fingerprint data for the following routers:
...
-Huawei HG530
-Thomson 585v8
-2WIRE 1701HG
2011-06-22 03:39:17 +00:00
paulino
90153308cb
Adds around 350 new entries that look for:
...
-admin directories
-jboss
-tomcat
-tikiwiki
-majordomo2
-microsoft sql
-wordpress
2011-06-18 04:09:04 +00:00
patrik
0a3bf95897
o [NSE] Added a MySQL audit script and a rulebase that supports auditing a
...
subset of the MySQL CIS 1.0.2 Benchmark. [Patrik]
2011-06-17 06:12:01 +00:00
ron
c9a964d8a3
Added some updated http-fingerprints checks from Ange Gutek
2011-06-16 22:38:54 +00:00
paulino
7e2e4bc591
Added information to fingerprint versions of CakePHP applications.
2011-05-20 09:26:31 +00:00
henri
7e2a85cab9
Added the http-wp-plugins script by Ange Gutek.
2011-04-29 07:43:41 +00:00
david
7a2b7781f7
Add an http-enum fingerprint for /crossdomain.xml, which is used to
...
grant permission to Adobe Flash players to make connections.
2011-04-17 18:32:37 +00:00
david
6142158b43
Updates to ssl-known-key by Mak Kolybabi,
...
http://seclists.org/nmap-dev/2011/q1/934 . Change the database format.
Change the output.
2011-03-22 19:44:45 +00:00
david
0e970b4bc6
ssl-known-key.nse: Use shortport.ssl. Rename ssl-fingerprints.txt to
...
ssl-fingerprints; no extension appears to be the prevailing convention
in nselib/data. Allow comments and blank lines in ssl-fingerprints. Add
Little Black Box copyright and attribution to ssl-fingerprints. Boost
some print_debug thresholds.
2011-03-22 19:44:42 +00:00
david
47557a108b
o [NSE] Added ssl-known-key.nse, which checks SSL certificates against a
...
list of certificates with known keys that have been extracted from
firmware files. [Mak Kolybabi]
2011-03-22 19:44:40 +00:00
robert
e7e40bb43a
Added some extra Microsoft fingerprints for FrontPage and Remote Desktop Web.
2011-03-09 09:34:02 +00:00
