1
0
mirror of https://github.com/nmap/nmap.git synced 2025-12-19 14:09:02 +00:00
Commit Graph

4571 Commits

Author SHA1 Message Date
jah
a17609e6b4 Ports are now considered open during a SYN scan if a SYN packet (without the ACK
flag) is received in response. This can be due to an extremely rare TCP feature
known as a simultaneous open or split handshake connection.
see http://nmap.org/misc/split-handshake.pdf
Added a reason code: ER_SYN and associated reason string: "split-handshake-syn".
2010-06-08 01:50:45 +00:00
fyodor
77ef606d52 Update the refguide (man page) to note our new (soon-to-be) support for TCP simultaneous-open/split-handshake connections 2010-06-08 00:47:08 +00:00
david
58e1d664a6 Force a new host group whenever the next host has the same IP address as
one already present in the current group. This is because ultra_scan
does not cope with multiple targets sharing the same IP address. However
this alone isn't enough to force a new host group, because the loop in
nmap.cc concatenates groups that nexthost splits apart, with its own
duplicate logic for breaking up groups.
2010-06-07 23:43:07 +00:00
david
a70b8dd5fd Break apart target_needs_new_hostgroup to it's easier to read, not just
one big expression. Also fix a dumb bug I just introduced where I was
comparing the same value with itself.
2010-06-07 22:36:21 +00:00
david
f6358d1f3a Factor out the logic that decides if a target needs to go into a
different host group. Also insert the target into the group only after
we're sure we want it, instead of provisionally inserting it and then
removing it after we find it's unwanted.
2010-06-07 22:13:20 +00:00
david
3a0b829ea1 Make const these methods of Target:
deviceName
deviceFullName
directlyConnected
directlyConnectedOrUnset
2010-06-07 22:09:37 +00:00
david
138745fda6 Remove the unused gethostnum static function. I think this was used in
checking responses for weird_responses, which we don't do anymore.
2010-06-07 21:27:04 +00:00
david
2111c0ab54 Fix up indentation in targets.cc. 2010-06-07 21:25:53 +00:00
david
7c790dbf3b Update pcap-int.h from http://www.winpcap.org/install/bin/WpcapSrc_4_1_1.zip.
We use this file to get at the LPADAPTER member of struct pcap on Windows,
which we need in order to pass to PacketSetReadTimeout in a few places.
(Normally pcap_t is an opaque type so we're not supposed to see inside it.) I
don't see an easy way to get rid of the calls to PacketSetReadTimeout right
now.
2010-06-07 20:34:33 +00:00
david
2501b14e23 Remove nbase/Gnuc.h. This doesn't seem to actually be required for anything. It
was originally part of WinPcap, currently at
http://www.winpcap.org/install/bin/WpcapSrc_4_1_1.zip in
winpcap/wpcap/libpcap/Win32/Include/Gnuc.h.
2010-06-07 19:43:41 +00:00
david
198282a9c3 Remove some Windows-only function prototypes that are obsolete. There are not
defined anywhere.

void nmapwin_init();
void nmapwin_cleanup();
void nmapwin_list_interfaces();
int if2nameindex(int ifi);
2010-06-07 18:42:17 +00:00
robert
3859e3dc64 Latest version number. 2010-06-07 07:05:48 +00:00
tomsellers
7ada457645 Adding match lines for two services:
Cisco Site Selector ftpd
LanSafe UPS monitoring HTTPd
2010-06-05 15:55:14 +00:00
tomsellers
76ac0f5b85 Added 3 PostgreSQL softmatch lines. Two of these lines are
are French and Spanish and are derived from the English version
as well as text from other match lines for the appropriate language.
2010-06-05 15:31:59 +00:00
robert
565d6a524d Improved anonymous ftp detection. Now supports ACCT and has improved parsing of server responses. 2010-06-05 12:37:39 +00:00
kris
3a0aa06db1 Fix a bug in qscan.nse which kept a confidence level of 0.9995 from working;
Marcin Hoffmann reported the problem.
2010-06-05 00:46:48 +00:00
david
8174849509 TODO item: check out pcap-int.h. 2010-06-04 22:51:36 +00:00
jah
722f10670a Some improvements based on a review by David: comments, less convoluted code and
a silly mistake. Also removed some length checks for Mode 7 implementation 2
data which are no longer used.
2010-06-04 10:05:32 +00:00
jah
cb879a313f Update script.db with added ntp-monlist.nse 2010-06-03 12:37:05 +00:00
jah
ab6e84b40d Added ntp-monlist discovers NTP server, peer and client hosts associated with a
scanned target by sending NTPv2 Private Mode 'monitor' and 'peers' commands to
the target.
2010-06-03 12:15:40 +00:00
jah
5bdc8cda93 ntp-monlist discovers NTP server, peer and client hosts associated with a
scanned target by sending NTPv2 Private Mode 'monitor' and 'peers' commands to
the target.
2010-06-03 12:14:15 +00:00
fyodor
a07870678f Note that an item was finished by David 2010-06-03 09:15:18 +00:00
kris
0f4a5e305c update ip_is_reserved(): 177/8 and 181/8 allocated 2010-06-02 21:24:37 +00:00
patrik
e411e35fc6 Fixed a bug that would prevent the rpcinfo script from returning any results
if the rpc program could not be matched to a name.
2010-06-01 14:09:58 +00:00
fyodor
91c95d81b2 regenerate the man pages 2010-05-28 07:14:41 +00:00
fyodor
9df063b5ba References in refguide.xml to other chapters in the book need to be shielded with <notman>. For the man page itself we need to give URLs instead. 2010-05-28 07:14:12 +00:00
fyodor
247d4ef9fb I don't think the mswin32/ARPA directory is required. At least none of our files seem to include nameser.h or tftp.h, and it compiles fine without this on my Windows 7 box. If it turns out there is some need for it, we can put it back 2010-05-28 02:06:08 +00:00
fyodor
ee15804c89 Add task related to seeing if we can get rid of (or at least upgrade) mswin32/pcap-include/pcap-int.h 2010-05-28 01:55:39 +00:00
fyodor
10a083501f Update to latest version of pcap include files from the official pcap developer pack version 4.1.1 (http://www.winpcap.org/install/bin/WpdPack_4_1_1.zip) include directory. Keeping pcap-int.h for now as we currently need it for compilation, though it seems a bit sketchy. I'm going to add a TODO task related to that 2010-05-28 01:50:37 +00:00
fyodor
bb100f1bbc Moved Gnuc.h from mswin32/pcap-include to nbase, since it is a portability file for Windows and I don't think it is really related to pcap (at least it isn't included in 4.1.1 official Pcap developer pack 2010-05-28 01:42:14 +00:00
fyodor
bdc508db04 Add entry about source port setting problem 2010-05-27 22:38:16 +00:00
luis
5edaabd200 Added a note on payload spec in ARP mode. I thought it was possible to do it already, but apparently it's not. 2010-05-27 19:57:01 +00:00
luis
20599d15b7 Added a note about Nping's behaviour when doing --traceroute. this is something that needs to be discussed 2010-05-27 19:36:22 +00:00
luis
3db9bc3b7c Added to-do item about documentation for the new possible time specification, implemented by David 2010-05-27 09:48:06 +00:00
fyodor
54313a53af Change --webxml nmap.xsl stylesheet location from http://nmap.org/data/nmap.xsl to http://nmap.org/svn/docs/nmap.xsl. The former just redirected to the latter anyway. Maybe it would be better to just use http://nmap.org/nmap.xsl and make that a symlink to the appropriate place. Oh well, I think this is fine for now. 2010-05-27 02:28:40 +00:00
david
38019ded5c o [libpcap] Added a --disable-packet-ring option to force the use of
an older, slower packet capture mechanism on Linux. Before Linux
  2.6.27, the packet ring mechanism uses different-sized kernel
  structures on 32- and 64-bit architectures, so a 32-bit program will
  not run correctly on a 64-bit kernel. The older mechanism does not
  have this flaw.
2010-05-26 20:43:09 +00:00
fyodor
1fe9546cfc Some updates from chat w/David 2010-05-26 17:16:39 +00:00
david
aae22b340e Update the description of UDP payloads to point to a new section on
nmap-payloads instead of referring to payload.cc.
2010-05-26 05:20:12 +00:00
djalal
75e6d4d5e1 C modules added to NSE must be included in the list of standard libraries in nse_main.cc 2010-05-26 01:43:23 +00:00
david
44d29adaa9 Add a serialnumberd match line that contains a host name, contributed by
Samuel Benson.
2010-05-25 19:00:31 +00:00
david
7b1a1d46f8 Add nmap-payloads to the Windows build. 2010-05-25 18:51:44 +00:00
david
0760591a8f Remove <netinet/in.h> include from payload.cc. It doesn't seem to be required
and it was breaking Windows compilation.
2010-05-25 18:39:50 +00:00
david
4118427819 Fix two discrepancies in the nmap-payloads compared to old payload.cc:
Remove port 222 from the RIP probe and add 44400 to the Quake 3.
2010-05-25 18:35:48 +00:00
david
79a66bf313 Normalize formatting in nmap-payloads. 2010-05-25 18:32:17 +00:00
david
fe8a7cf991 Add copyright header to nmap-payloads, expand on the format
documentation. Set the "Id" keyword on the file.
2010-05-25 18:13:30 +00:00
david
acba4356c4 Make it a warning, not a fatal error, when nmap-payloads can't be found. 2010-05-25 17:58:28 +00:00
david
ed8a04b5a7 Adjust whitespace, order, scoping in payload.cc. 2010-05-25 17:51:03 +00:00
david
4a9558288d Re-add the serialnumberd probe to the new nmap-payloads file. 2010-05-25 17:44:15 +00:00
david
994da96f9c Merge Jay Fink's patch that puts UDP payloads in an external data file
instead of being hard-coded in payloads.cc. This is the patch from
http://seclists.org/nmap-dev/2010/q2/497.
2010-05-25 17:38:23 +00:00
fyodor
32e6b837cb Small updates to copyright headers in some files which don't have the headers automatically replaced 2010-05-24 23:52:34 +00:00