1
0
mirror of https://github.com/nmap/nmap.git synced 2025-12-21 23:19:03 +00:00
Commit Graph

4571 Commits

Author SHA1 Message Date
fyodor
7e6d183799 Increase the default concurrency level for version scanning from 10-20 based on timing level to 20-40 based on results from Patrick's testing 2009-08-18 21:39:27 +00:00
david
3932139e40 Use an unsigned int instead of size_t in the argument to X509_digest.
Compilation was broken on 64-bit platforms where the size of unsigned
int and size_t differed.
2009-08-18 21:36:09 +00:00
fyodor
27e7273c49 2009-08-18 19:25:23 +00:00
david
f6463017db Add a service probe for DNS-based service discovery (DNS-SD). See
http://seclists.org/nmap-dev/2009/q3/0610.html.
2009-08-18 19:00:59 +00:00
david
b27a9ce439 For some reason I thought that hexadecimal escapes in strings were not
ANSI C. They are, so use them to define UDP payloads in preference to
octal.
2009-08-18 05:47:30 +00:00
fyodor
ed6695b6a2 note that we may want to update config.sub/guess 2009-08-18 02:37:02 +00:00
ron
f2ed53ebfc Removed an undeclared variable in http.lua. 2009-08-18 02:20:33 +00:00
david
2204f79d57 Add a UDP payload for 2049/nfs. This payload, taken from unicornscan, is
a call to the NFSPROC_NULL procedure, which is explicitly documented to
do nothing.
2009-08-18 01:43:46 +00:00
ron
6aee1ce91c Fixed a spelling mistake in http.lua. 2009-08-18 01:40:33 +00:00
david
5f8ac9a9db Add the RPCCheck payload for UDP port 111/sunrpc. 2009-08-18 01:27:49 +00:00
david
1ffb2f6ec6 Add a UDP payload for ports 1645 and 1812, radius. It is an
Access-Request packet containing no username or password, intended to
get an Access-Reject in response.
2009-08-18 00:46:31 +00:00
jah
4830a3ea29 Removed the restriction in the portrule that would prevent this script from
running against non-Apache (or non-Apache based) services.  Updated the comments
to reflect this change.
2009-08-17 22:50:19 +00:00
david
537e938378 Fix a typo in smb-system-info.nse. 2009-08-17 20:31:26 +00:00
batrick
5e362ac43d Changed a global variable to a local to avoid an error from the strict
module.
2009-08-15 14:57:52 +00:00
batrick
d5748b1d83 If the response is already a table (from an error in http.request) then do not
try to parse a result, instead return nil.  This fixes an error where we try to
index match as though response is a string.
2009-08-15 14:53:28 +00:00
joao
a2dcbb7cd5 Fixing a bug where getPipelineMax was not returning any value, when it sould, at least, return 1. 2009-08-15 14:32:17 +00:00
david
c5576e5a1e Add another thing to consider for UDP payloads: Some protocols can
benefit from variable payloads.
2009-08-14 23:42:52 +00:00
david
c062f69b44 Add a UDP payload for 500/udp, isakmp. 2009-08-14 23:27:18 +00:00
david
0698cb186c Add a UDP payload for DNS-based service discovery on 5353/udp, zeroconf. 2009-08-14 19:37:03 +00:00
david
2bd2bf87cc Add a UDP payload for port 520/udp, route. 2009-08-14 17:26:08 +00:00
david
fae45d2c3c Remove the last byte from the end of the xdmcp version probe. According
to the XDMCP specification at
http://cgit.freedesktop.org/xorg/doc/xorg-docs/plain/hardcopy/XDMCP/xdmcp.PS.gz,
it's just a junk trailer following the zero-length array of
authentication names, and that "no padding of any sort will occur within
the packets." It still correctly identifies an xdm running locally in my
testing.

The specification also says "Packets that have too little or too much
data should be ignored," but that must not be taken seiously because the
X server that comes with Mac OS X sends several junk null bytes at the
end of its XDMCP queries.
2009-08-14 16:56:05 +00:00
david
2309d9af4a Add a payload for port 177/udp, xdmcp. 2009-08-14 16:31:28 +00:00
david
4768c00631 Make some changes to nse_ssl_cert.cc for Windows compilation. 2009-08-14 04:44:19 +00:00
david
45380cf202 Put a HAVE_CONFIG_H guard around the inclusion of nmap_config.h in nse_nsock.h. 2009-08-14 04:15:33 +00:00
david
3cc4ec9939 Add the ssl-cert.nse script, which retrieves the server SSL certificate. 2009-08-13 23:38:05 +00:00
david
6c766c58cd Add the nmap.get_ssl_certificate NSE function, which returns the peer
certificate of an SSL socket.
2009-08-13 23:32:33 +00:00
fyodor
0df6272cf9 Signal handling fixes: fixed nbase configure to actually set HAVE_SIGNAL
properly so our signal handing code actually activates.  But our signal
handling code was a bit questionable in many respects, so I removed most
of it under the theory that it hasn't been working for years and nobody
seemed to notice/care, so we presumably don't really need it.  And if we
do decide to add it again, we basically will need to do it over because
we now want to do it safely from a reentrancy perspective.  In particular,
I removed sigdie() and reaper().  We still have a few signal() calls.  In
particular, we ignore SIGPIPE and we set SIGINT, SIGTERM, SIGHUP, and
SIGSEGV to the defaults (SIG_DFL) explicitly.  Thanks to Ithilgore, Luis,
and Solar Designer in particular for fidning or commenting on the issue.
2009-08-13 21:54:55 +00:00
fyodor
5767865bba some very minor changes to existing items 2009-08-13 21:18:47 +00:00
david
68a7724194 [Ncat] The --idle-timeout option now exits when *both* stdin and the
socket have been idle for the given time. Previously it would exit
when *either* of them had been idle, meaning that the program would
quit contrary to your expectation when downloading a large file
without sending anything, for example.
2009-08-13 02:38:28 +00:00
david
48a008e2d7 Ncat now always prefixes its own output messages with "Ncat: "
or "NCAT DEBUG: " to make it clear that they are not coming from the
remote host. This only matters when output goes to a terminal, where
the standard output and standard error streams are mixed. [David]
2009-08-12 23:36:01 +00:00
joao
bf4599385e Added pipeline support to http-enum.nse 2009-08-12 01:52:03 +00:00
joao
ecaf3e90a9 sql-injection with pipeline support and with two new arguments:
sql-injection.start (to define start crawling url)
sql-injection.maxdepth (to set maximum depth to crawling)
2009-08-12 01:46:46 +00:00
joao
0a3a1b091c Applying a lot of new features to http.lua:
- Cookie Support
- Pipelining Support
- New lib modularization (previously, single functions were taking care of too many tasks, we have splitted these tasks for better code reuse)
2009-08-12 01:40:06 +00:00
david
4ab213a34d svn:ignore libpcre/autom4te.cache. 2009-08-11 18:20:54 +00:00
batrick
990cb8965d Removed unused bopt variable. 2009-08-11 05:56:41 +00:00
batrick
6bbfb06704 Check the stack size before moving elements to the thread.
Some threads have truncated stacks after finishing with an error causing
a Lua assertion failure when we put elements on the stack without first
checking whether space is available.
2009-08-11 05:56:10 +00:00
jah
0847535287 Apologies, the previous commit changed all the line-endings. Changing them back. 2009-08-11 01:40:37 +00:00
jah
4c3c2b770e Include apache-userdir-enum.nse 2009-08-11 01:33:20 +00:00
jah
00fd828d17 apache-userdir-enum attempts to enumerate valid usernames on webservers
running with the mod_userdir module enabled.
2009-08-11 01:24:43 +00:00
batrick
ac55b3ca78 Fixed a regexp escape sequence and shortened code. 2009-08-10 12:51:14 +00:00
joao
8e145d6994 Fixing script categories 2009-08-10 11:17:52 +00:00
joao
bcce197537 Fixed http-enum.nse categories 2009-08-10 11:17:28 +00:00
joao
11be55c93c Included new ports to common ssl ports,
Fix for resource leak, explicitly closing sockets when connection was not considered succesful
2009-08-10 04:39:11 +00:00
daniel
7fa1ecabdc Update the SCTP TODO file with latest progress on Ncat. 2009-08-09 12:17:21 +00:00
daniel
e73cd9ee99 Fixing typo in libdnet ./configure notice. 2009-08-09 12:09:46 +00:00
batrick
4ec75b15b7 Removed an unnecessary intermediary buffer for string copying. 2009-08-09 02:55:29 +00:00
david
f71b98ecd1 Change x11-access.nse CHANGELOG credit from "vladz" to "jlanthea" by
author request.
2009-08-08 20:51:36 +00:00
david
9e244b05af Put x11-access in the "auth" category. 2009-08-08 20:06:38 +00:00
david
ffa9178f2b One more whitespace change in x11-access.nse. 2009-08-08 20:03:45 +00:00
david
7002052746 Normalize whitespace in x11-access.nse. 2009-08-08 20:02:47 +00:00