1
0
mirror of https://github.com/nmap/nmap.git synced 2025-12-22 07:29:01 +00:00
Commit Graph

4571 Commits

Author SHA1 Message Date
david
5a522c647f Add a spinning progress throbber to Zenmap that animates while a scan is
running.
2009-05-06 20:32:30 +00:00
batrick
b32881993a [NSE] Significantly shortend hextobin function for packet module. 2009-05-06 08:32:59 +00:00
fyodor
b32ff0f98c 2009-05-06 05:44:45 +00:00
fyodor
4f3abca824 TODO changes from discussion with David 2009-05-05 22:04:46 +00:00
david
bee956bf44 Make the NSE "Usage Examples" conform to the style used in the rest of
the section. Rename the subsection "Complete Examples" because there are
already a lot of other partial examples. Add some indexterms.
2009-05-05 18:10:07 +00:00
david
089f3628fa Overhaul the "Usage and Examples" section of scripting.xml for better
exposition. Add lots more examples.
2009-05-05 17:52:11 +00:00
david
d4eafba473 Fix a compiler warning. 2009-05-04 23:25:46 +00:00
david
5c222c6965 Also increment o.numhosts_scanned during ping and list scan. 2009-05-04 23:23:50 +00:00
david
fac82a011b Only increment o.numhosts_scanned when we have truly finished scanning a
host, which means that it is either found down or else all
port/script/traceroute/etc. scanning is finished. In r12798 I made it be
updated as soon as DNS resolution happened, to make the status display
"X undergoing Ping Scan" accurate. However the main loop also uses this
variable to count how many addresses have been generated so it knows
when to stop scanning random addresses. If -iR was used, only the first
hostgroup out of all the random addresses would be fully scanned and
then the scan would end. This change fixes that and also makes the
output more like it was pre-r12798; for example, if you had done name
resolution on 1024 hosts with --max-hostgroup 8, and had found the 8th
up host at the 280th one pinged, the output was
Stats: 0:00:29 elapsed; 1016 hosts completed (8 up), 8 undergoing Connect Scan
and is now
Stats: 0:00:29 elapsed; 272 hosts completed (8 up), 8 undergoing Connect Scan
2009-05-04 22:59:35 +00:00
david
51e7f1f4f9 Make hexify in nse_nsock.cc take an unsigned char * to work around an assertion
in Visual C++ in Debug mode. The isprint, isalpha, etc. functions from ctype.h
have an assertion that the value of the character passed in is <= 255. If you
pass a character whose value is >= 128, it is cast to an unsigned int, making
it a large positive number and failing the assertion. This is the same thing
that was reported in http://seclists.org/nmap-dev/2007/q2/0257.html, in regard
to non-ASCII characters in nmap-mac-prefixes.
2009-05-04 17:57:27 +00:00
daniel
ed77fa1e48 o [Ncat] When using --send-only, Ncat will now close the network
connection and terminate after receiving EOF on standard input.
  [Daniel Roethlisberger]
2009-05-04 07:04:53 +00:00
batrick
061eace2db Fixed the redundant log message during compilation:
echo Compiling Nmap
Compiling Nmap

to

Compiling Nmap

:)
2009-05-04 07:02:18 +00:00
david
4816c7880e Fix misleading indentation in nse_nsock.cc. 2009-05-03 22:09:25 +00:00
jah
d757338fa2 Fix http.table_augment which was preventing user-supplied HTTP headers from
being sent in HTTP requests.
2009-05-03 19:03:53 +00:00
fyodor
e286a8fdfa Some changes made during SoC NSE meeting 2009-05-03 04:34:33 +00:00
fyodor
1324a3151a o Fixed a bug in the su-to-zenmap.sh script so that, in the cases
where it calls su, it uses the proper -c option rather than
  -C. [Michal Januszewski, Henry Gebhardt]
2009-05-03 04:33:50 +00:00
batrick
572b6fd4c0 Updated relevant section in the book concerning the --script switch which may
now use boolean operators.
2009-05-02 05:55:59 +00:00
batrick
4209947f9b Removed escape_magic function in favor of a simple substitution. 2009-05-02 04:43:27 +00:00
jah
55ded906f2 Fix a problem, reported by David, which resulted in an error arising from an
unexpected value for the "data" table after repeating queries at the same
service for the same IP (which should not ever happen).
2009-05-01 23:35:44 +00:00
daniel
d3651a95ee o [Ncat] Unbreak hostname resolution on BSD systems where a recently
fixed libc bug caused getaddrinfo(3) to fail unless a socket type
  hint is provided. Patch originally provided by Hajimu UMEMOTO of
  FreeBSD. [Daniel Roethlisberger]
2009-05-01 22:04:59 +00:00
david
7a84920e63 Put some conditions like o.idlescan and o.bouncescan outside of the
loops that iterate over targets, not inside them. That prevents having
to iterate over every target doing nothing in the common case when those
scan types aren't used.
2009-05-01 20:51:52 +00:00
david
4c4fe0b4d4 Reword a CHANGELOG entry, fix a typo. 2009-05-01 17:00:20 +00:00
batrick
79eaf3edc3 Updated script database to the new format required by NSE --script
boolean operators.
2009-04-30 05:56:00 +00:00
batrick
98e51ec007 [NSE] Added Boolean Operators for --script. You may now use a boolean operator
("and", "or", or "not") combined with categories, filenames, and filenames with
a '*', wildcard, to match many files.  This change requires the script database
to be recompiled. Please see the thread at
http://seclists.org/nmap-dev/2009/q2/0100.html for more information.
2009-04-30 05:49:47 +00:00
jah
6b1421db69 Fixed leading backslash appearing in script filenames after running
--script-updatedb which caused an error when choosing which scripts to be run.
See: http://seclists.org/nmap-dev/2009/q2/0266.html
2009-04-29 23:51:28 +00:00
david
22a77a865c Use host.ip, not just (undefined) ip in whois.nse exception error
messages. Instead of handling an error nicely, it caused a format string
error of its own:
./nselib/stdnse.lua:61: bad argument #3 to 'format' (string expected, got nil)
It seems that a deadlock happens immediately after one of these errors
occurs. This change doesn't fix the deadlock but allows the underlying
error message to be printed.
2009-04-29 23:33:44 +00:00
kris
318688acd5 updating ip_is_reserved(): 180/8 and 183/8 allocated 2009-04-29 19:20:42 +00:00
david
b4243e23f2 Fix all the compiler warnings when building with Visual C++ 2008. 2009-04-29 17:56:30 +00:00
batrick
3a06a43a24 Added a more useful error message when the script database is corrupt or
out of date. Here is an example:

NSE: failed to initialize the script engine:
./nse_main.lua:289: database appears to be corrupt or out of date;
        please update using: nmap --script-updatedb
2009-04-29 10:16:27 +00:00
fyodor
9292eaef8a further investigate proxy patch by ZP 2009-04-29 08:34:51 +00:00
david
121c11d426 Install and use ca-bundle.crt on Unix. Rename ncat/ncat_exec.c to
ncat/ncat_posix.c as it now contains POSIX-specific functiosn beyond
exec-related ones.
2009-04-29 04:14:04 +00:00
david
79fa5e0e1d Add a default bundle of trusted CA certificates for Ncat, extracted from
Windows. Use this bundle if no other was specified with --ssl-trustfile.
Instructions for extracting the certificates are included. I have to go back
now and make this compile on Unix.
2009-04-29 03:36:26 +00:00
jah
3235065a1e Fixed: dns.query() calls dns.sendPackets() with the wrong number of parameters
which makes the 'to' value in a for .. to loop of type 'nil' - causing:

nselib/dns.lua:54: 'for' limit must be a number
stack traceback:
	nselib/dns.lua:54: in function 'sendPackets'
	nselib/dns.lua:194: in function 'query'
2009-04-28 22:41:53 +00:00
fyodor
d85fbc318d some priority reordering of NSE items in TODO list 2009-04-28 00:25:41 +00:00
fyodor
8a7eb78604 some priority reordering of NSE items in TODO list 2009-04-28 00:24:48 +00:00
fyodor
fec5bbd4a0 Changes from first 3.5 hours of Today's meeting with David 2009-04-28 00:19:49 +00:00
david
eecff03f35 Add a link relevant to web application fingerprinting to docs/TODO. 2009-04-27 20:34:55 +00:00
batrick
e770f37aaa Applied Jah's patch [1]. This now makes ports show for port scripts
in Starting & Finished debug messages.

[1] http://seclists.org/nmap-dev/2009/q2/0091.html
2009-04-27 11:28:29 +00:00
fyodor
7640aca5bb Added some new NSE ideas and moved most of the NSE entries to the same place in the file so they can be more easily compared 2009-04-27 07:43:01 +00:00
fyodor
af6a8fcedf Note that we upgraded VC++ to 2008 SP1 2009-04-26 00:43:36 +00:00
fyodor
b1a86e5f10 There are a handful of annoying warnings when compiling on Windows, we should fix those where practical (e.g. where the fix doesn't cause problems on other platforms) 2009-04-25 21:46:06 +00:00
fyodor
8049fcad26 We now recommend Visual Studio C++ Express 2008 SP1 2009-04-25 21:45:23 +00:00
fyodor
5cdff73553 latest version number 2009-04-25 21:20:53 +00:00
fyodor
dd814aeebc remove duplicate word 2009-04-25 20:26:46 +00:00
fyodor
bc7fc4399e Upgrade vcredist_x86.exe from the Visual C++ 2008 version to Visual C++ 2008 SP1. I'm currently testing compilation with that compiler version. If it causes problems, I'll revert this change. 2009-04-25 20:23:50 +00:00
batrick
0924a6826f This patch fixes a bug reported here [1]. The bug was due to the nsock_yield
struct not being set in any of the pcap functions. Because of this,
the callback routines would attempt to use a NULL pointer for the lua_State *
and would then SEGFAULT.

[1] http://seclists.org/nmap-dev/2009/q2/0180.html
2009-04-25 10:06:58 +00:00
david
d122b91891 Merge from /nmap-exp/david/nmap-ssl, /nmap-exp/david/ncat-ssl, and
/nmap-exp/david/nsock-ssl. This brings in secure SSL connections for
Ncat. See http://seclists.org/nmap-dev/2009/q2/0183.html.
2009-04-25 03:24:00 +00:00
batrick
ea388dc454 Corrected the bug reported here http://seclists.org/nmap-dev/2009/q2/0192.html
by Michael Pattrick.
2009-04-25 01:31:58 +00:00
david
1fba10f142 In the Mac build, discard local changes on export and rebuild the script
database to remove any entries that might have been added accidentally.
2009-04-24 18:59:27 +00:00
david
1b2e726629 Sort script.db, remove erroneous smb-check-vulns-2.nse entry. 2009-04-24 18:45:00 +00:00