jah
a17609e6b4
Ports are now considered open during a SYN scan if a SYN packet (without the ACK
...
flag) is received in response. This can be due to an extremely rare TCP feature
known as a simultaneous open or split handshake connection.
see http://nmap.org/misc/split-handshake.pdf
Added a reason code: ER_SYN and associated reason string: "split-handshake-syn".
2010-06-08 01:50:45 +00:00
fyodor
77ef606d52
Update the refguide (man page) to note our new (soon-to-be) support for TCP simultaneous-open/split-handshake connections
2010-06-08 00:47:08 +00:00
david
58e1d664a6
Force a new host group whenever the next host has the same IP address as
...
one already present in the current group. This is because ultra_scan
does not cope with multiple targets sharing the same IP address. However
this alone isn't enough to force a new host group, because the loop in
nmap.cc concatenates groups that nexthost splits apart, with its own
duplicate logic for breaking up groups.
2010-06-07 23:43:07 +00:00
david
a70b8dd5fd
Break apart target_needs_new_hostgroup to it's easier to read, not just
...
one big expression. Also fix a dumb bug I just introduced where I was
comparing the same value with itself.
2010-06-07 22:36:21 +00:00
david
f6358d1f3a
Factor out the logic that decides if a target needs to go into a
...
different host group. Also insert the target into the group only after
we're sure we want it, instead of provisionally inserting it and then
removing it after we find it's unwanted.
2010-06-07 22:13:20 +00:00
david
3a0b829ea1
Make const these methods of Target:
...
deviceName
deviceFullName
directlyConnected
directlyConnectedOrUnset
2010-06-07 22:09:37 +00:00
david
138745fda6
Remove the unused gethostnum static function. I think this was used in
...
checking responses for weird_responses, which we don't do anymore.
2010-06-07 21:27:04 +00:00
david
2111c0ab54
Fix up indentation in targets.cc.
2010-06-07 21:25:53 +00:00
david
7c790dbf3b
Update pcap-int.h from http://www.winpcap.org/install/bin/WpcapSrc_4_1_1.zip .
...
We use this file to get at the LPADAPTER member of struct pcap on Windows,
which we need in order to pass to PacketSetReadTimeout in a few places.
(Normally pcap_t is an opaque type so we're not supposed to see inside it.) I
don't see an easy way to get rid of the calls to PacketSetReadTimeout right
now.
2010-06-07 20:34:33 +00:00
david
2501b14e23
Remove nbase/Gnuc.h. This doesn't seem to actually be required for anything. It
...
was originally part of WinPcap, currently at
http://www.winpcap.org/install/bin/WpcapSrc_4_1_1.zip in
winpcap/wpcap/libpcap/Win32/Include/Gnuc.h.
2010-06-07 19:43:41 +00:00
david
198282a9c3
Remove some Windows-only function prototypes that are obsolete. There are not
...
defined anywhere.
void nmapwin_init();
void nmapwin_cleanup();
void nmapwin_list_interfaces();
int if2nameindex(int ifi);
2010-06-07 18:42:17 +00:00
robert
3859e3dc64
Latest version number.
2010-06-07 07:05:48 +00:00
tomsellers
7ada457645
Adding match lines for two services:
...
Cisco Site Selector ftpd
LanSafe UPS monitoring HTTPd
2010-06-05 15:55:14 +00:00
tomsellers
76ac0f5b85
Added 3 PostgreSQL softmatch lines. Two of these lines are
...
are French and Spanish and are derived from the English version
as well as text from other match lines for the appropriate language.
2010-06-05 15:31:59 +00:00
robert
565d6a524d
Improved anonymous ftp detection. Now supports ACCT and has improved parsing of server responses.
2010-06-05 12:37:39 +00:00
kris
3a0aa06db1
Fix a bug in qscan.nse which kept a confidence level of 0.9995 from working;
...
Marcin Hoffmann reported the problem.
2010-06-05 00:46:48 +00:00
david
8174849509
TODO item: check out pcap-int.h.
2010-06-04 22:51:36 +00:00
jah
722f10670a
Some improvements based on a review by David: comments, less convoluted code and
...
a silly mistake. Also removed some length checks for Mode 7 implementation 2
data which are no longer used.
2010-06-04 10:05:32 +00:00
jah
cb879a313f
Update script.db with added ntp-monlist.nse
2010-06-03 12:37:05 +00:00
jah
ab6e84b40d
Added ntp-monlist discovers NTP server, peer and client hosts associated with a
...
scanned target by sending NTPv2 Private Mode 'monitor' and 'peers' commands to
the target.
2010-06-03 12:15:40 +00:00
jah
5bdc8cda93
ntp-monlist discovers NTP server, peer and client hosts associated with a
...
scanned target by sending NTPv2 Private Mode 'monitor' and 'peers' commands to
the target.
2010-06-03 12:14:15 +00:00
fyodor
a07870678f
Note that an item was finished by David
2010-06-03 09:15:18 +00:00
kris
0f4a5e305c
update ip_is_reserved(): 177/8 and 181/8 allocated
2010-06-02 21:24:37 +00:00
patrik
e411e35fc6
Fixed a bug that would prevent the rpcinfo script from returning any results
...
if the rpc program could not be matched to a name.
2010-06-01 14:09:58 +00:00
fyodor
91c95d81b2
regenerate the man pages
2010-05-28 07:14:41 +00:00
fyodor
9df063b5ba
References in refguide.xml to other chapters in the book need to be shielded with <notman>. For the man page itself we need to give URLs instead.
2010-05-28 07:14:12 +00:00
fyodor
247d4ef9fb
I don't think the mswin32/ARPA directory is required. At least none of our files seem to include nameser.h or tftp.h, and it compiles fine without this on my Windows 7 box. If it turns out there is some need for it, we can put it back
2010-05-28 02:06:08 +00:00
fyodor
ee15804c89
Add task related to seeing if we can get rid of (or at least upgrade) mswin32/pcap-include/pcap-int.h
2010-05-28 01:55:39 +00:00
fyodor
10a083501f
Update to latest version of pcap include files from the official pcap developer pack version 4.1.1 ( http://www.winpcap.org/install/bin/WpdPack_4_1_1.zip ) include directory. Keeping pcap-int.h for now as we currently need it for compilation, though it seems a bit sketchy. I'm going to add a TODO task related to that
2010-05-28 01:50:37 +00:00
fyodor
bb100f1bbc
Moved Gnuc.h from mswin32/pcap-include to nbase, since it is a portability file for Windows and I don't think it is really related to pcap (at least it isn't included in 4.1.1 official Pcap developer pack
2010-05-28 01:42:14 +00:00
fyodor
bdc508db04
Add entry about source port setting problem
2010-05-27 22:38:16 +00:00
luis
5edaabd200
Added a note on payload spec in ARP mode. I thought it was possible to do it already, but apparently it's not.
2010-05-27 19:57:01 +00:00
luis
20599d15b7
Added a note about Nping's behaviour when doing --traceroute. this is something that needs to be discussed
2010-05-27 19:36:22 +00:00
luis
3db9bc3b7c
Added to-do item about documentation for the new possible time specification, implemented by David
2010-05-27 09:48:06 +00:00
fyodor
54313a53af
Change --webxml nmap.xsl stylesheet location from http://nmap.org/data/nmap.xsl to http://nmap.org/svn/docs/nmap.xsl . The former just redirected to the latter anyway. Maybe it would be better to just use http://nmap.org/nmap.xsl and make that a symlink to the appropriate place. Oh well, I think this is fine for now.
2010-05-27 02:28:40 +00:00
david
38019ded5c
o [libpcap] Added a --disable-packet-ring option to force the use of
...
an older, slower packet capture mechanism on Linux. Before Linux
2.6.27, the packet ring mechanism uses different-sized kernel
structures on 32- and 64-bit architectures, so a 32-bit program will
not run correctly on a 64-bit kernel. The older mechanism does not
have this flaw.
2010-05-26 20:43:09 +00:00
fyodor
1fe9546cfc
Some updates from chat w/David
2010-05-26 17:16:39 +00:00
david
aae22b340e
Update the description of UDP payloads to point to a new section on
...
nmap-payloads instead of referring to payload.cc.
2010-05-26 05:20:12 +00:00
djalal
75e6d4d5e1
C modules added to NSE must be included in the list of standard libraries in nse_main.cc
2010-05-26 01:43:23 +00:00
david
44d29adaa9
Add a serialnumberd match line that contains a host name, contributed by
...
Samuel Benson.
2010-05-25 19:00:31 +00:00
david
7b1a1d46f8
Add nmap-payloads to the Windows build.
2010-05-25 18:51:44 +00:00
david
0760591a8f
Remove <netinet/in.h> include from payload.cc. It doesn't seem to be required
...
and it was breaking Windows compilation.
2010-05-25 18:39:50 +00:00
david
4118427819
Fix two discrepancies in the nmap-payloads compared to old payload.cc:
...
Remove port 222 from the RIP probe and add 44400 to the Quake 3.
2010-05-25 18:35:48 +00:00
david
79a66bf313
Normalize formatting in nmap-payloads.
2010-05-25 18:32:17 +00:00
david
fe8a7cf991
Add copyright header to nmap-payloads, expand on the format
...
documentation. Set the "Id" keyword on the file.
2010-05-25 18:13:30 +00:00
david
acba4356c4
Make it a warning, not a fatal error, when nmap-payloads can't be found.
2010-05-25 17:58:28 +00:00
david
ed8a04b5a7
Adjust whitespace, order, scoping in payload.cc.
2010-05-25 17:51:03 +00:00
david
4a9558288d
Re-add the serialnumberd probe to the new nmap-payloads file.
2010-05-25 17:44:15 +00:00
david
994da96f9c
Merge Jay Fink's patch that puts UDP payloads in an external data file
...
instead of being hard-coded in payloads.cc. This is the patch from
http://seclists.org/nmap-dev/2010/q2/497 .
2010-05-25 17:38:23 +00:00
fyodor
32e6b837cb
Small updates to copyright headers in some files which don't have the headers automatically replaced
2010-05-24 23:52:34 +00:00