1
0
mirror of https://github.com/nmap/nmap.git synced 2025-12-22 15:39:03 +00:00
Commit Graph

4571 Commits

Author SHA1 Message Date
david
c3fcd8ca9d In nmap-os-db, change GCD=<7 to GCD=1-5. The "<7" value was meant to encompass
small multiples of 1 when a GCD of 1 was observed. But 0 should be excluded
because a GCD of 0 indicates constant sequence numbers, while a GCD of 1 is
usually a sign of a good sequence number generation algorithm. I lowered the
maximum value in the range from 6 to 5 because the fingerfix utility expands
other GCDs up to a multiple of 5.
2009-02-25 18:01:50 +00:00
david
6a6d18df6f Fix a bug in the printing of OS fingerprints. When a perfect match was found,
the value of the SEQ.G test (print suitable for submission) was the opposite of
what it should have been. This doesn't matter much because in the case of a
perfect match the submission URL isn't shown and the print itself is not
normally displayed. We want perfect matches with the new SEQ.CI test and the
online submitter will reject them if G=N.
2009-02-25 17:44:37 +00:00
doug
85f4cb66e2 Fixed issue with RPM Print Manager match line 2009-02-25 01:44:41 +00:00
bmenrigh
f74f2f05d7 Cast a double seconds into time_t to eliminate a compiler warning that was showing up for my x86_64 box. 2009-02-25 01:27:35 +00:00
david
aa97b79e4c Fix a little error in a comment: We decided to call the closed-port TCP IP ID
test CI, not CTI.
2009-02-25 00:40:47 +00:00
david
8827e6778a Document SEQ.CI in CHANGELOG. Add it to nmap-os-db with MatchPoints of 0, not
that it matters because there are no prints that have it yet.
2009-02-25 00:37:21 +00:00
david
b230f7168c Merge from /nmap-exp/david/nmap-closed-ipid.
This adds a new SEQ.CI OS detection test. It is based on the IP IDs of the
responses to the three probes sent to a closed port: T5, T6, and T7. This has
been reported to differ from TI and was observed to do so in Internet scans
using the nmap-closed-ipid branch.
2009-02-25 00:30:40 +00:00
david
588d629a6a Copy the Subversion properties from osscan.cc to osscan2.cc. None were set on
osscan2.cc. I think osscan2.cc wasn't updating its $Id$ because it didn't have
the svn:keywords property set.
2009-02-24 22:04:54 +00:00
david
f5fb0fd691 Try fixing the $Id: $ line in osscan2.cc. It's not updating itself, perhaps
because it had the file name osscan.cc inside it.
2009-02-24 21:58:34 +00:00
david
ade608c766 Factor out a couple of essentially identical switch statements that filled in
the TCP/ICMP IP ID sequence generation class.
2009-02-24 21:53:40 +00:00
david
f9f928e9ce OS fingerprints now include the SEQ.II test (ICMP IP ID sequence
generation) even if there are no other SEQ test results. Try it with
"nmap -O -d -p 113 scanme.nmap.org". Now you get SEQ(II=I) instead of no
SEQ line at all.
2009-02-24 21:08:38 +00:00
fyodor
9ede137210 rename crc16 function in nbase to crc32, as that seems to be what it actually is. Also change osscan2.cc to call it by the new name. Thsi fix was suggested by Marc Bevand 2009-02-24 02:01:03 +00:00
fyodor
fac0dacfda changes after talking to David and also note a new OS detection issue 2009-02-24 01:44:44 +00:00
fyodor
f1d8f94920 sorting, plus fixed a couple likely bugs in the file. A Sun Solaris 2.6 signature was missing a % separater between fields in T6 and T7, and a 3Com SuperStack 3 Switch 4400 SE signature had an empty SEQ.GCD (I am not sure if this is OK or not, so I just deleted it). Thanks to Marc Bevand for spotting the flaws 2009-02-24 01:27:33 +00:00
david
0970e3c255 Add to CHANGELOG:
o [NSE] A new function stdnse.sleep allows a script to sleep for a
  given time (and yield control to other scripts). [David]
2009-02-24 00:28:35 +00:00
david
486ff13e3a Add the --stats-every option. See http://seclists.org/nmap-dev/2009/q1/0404.html. 2009-02-24 00:23:54 +00:00
david
a173fe6ce1 Add the stdnse.sleep function. 2009-02-23 23:57:39 +00:00
david
b819aa7f25 Document half-open and full-open IPv4 octet ranges. 2009-02-23 21:21:36 +00:00
david
5d2393d115 Add to CHANGELOG:
o [Ncat] The syntax accepted by the --allow, --deny, --allowfile, and
  --denyfile options is now the same as Nmap's target specifications.
  Additionally any errors in the allow or deny specifications are
  reported when the program starts, not deferred until a connection is
  received. [David]
2009-02-22 02:58:09 +00:00
david
73356bf715 Interpret '-' by itself as an IPv4 octet as being short for "0-255". So
192.168.-.0 is the same as 192.168.0-255.0. It looks like this was intended all
along, but a coding error kept it from working.
2009-02-21 04:00:21 +00:00
david
4b27c53433 Update target specification section in refguide.xml with newest revisions. 2009-02-21 02:09:20 +00:00
david
29cd3a2675 Some revision of device-types.txt. 2009-02-21 01:15:59 +00:00
david
1273142341 FIx a typo in nmap-service-probes, adjust some categorizations in nmap-os-db. 2009-02-21 00:34:33 +00:00
david
cdd24a6fb4 Add counts of how many of each device type is present in both nmap-os-db and
nmap-service-probes to device-types.txt.
2009-02-20 22:52:10 +00:00
david
c3606c3793 Document the four device types that were present in nmap-os-db but not
nmap-service-probes: encryption accelerator, proxy server, VoIP gateway, web
server.
2009-02-20 22:38:53 +00:00
david
1ca5e5b637 Canonicalize a device type in nmap-service-probes: "media-device" ->
"media device".
2009-02-20 19:36:49 +00:00
david
9323b53c68 Fix NSEDoc in msrpctypes.lua. A <code> was unterminated, and bullet lists can't
have newlines within each entry.
2009-02-20 18:46:26 +00:00
doug
531e2b7c22 MSSQL updates from Tom Sellers 2009-02-20 01:33:55 +00:00
doug
e13283b01e Finished nmapsubmit-svfp-020309.mbx 2009-02-19 22:17:24 +00:00
doug
e087884f2c Another batch of misc from nmapsubmit-svfp-020309.mbx (almost done) 2009-02-18 23:57:43 +00:00
fyodor
3d6a57c585 Khottabych movie 2009-02-18 03:33:50 +00:00
david
d8c3cf21a5 Add missing module name prefixes to usage examples in some NSE documentation. 2009-02-17 19:53:02 +00:00
fyodor
f0c645b9f2 2009-02-17 07:30:23 +00:00
fyodor
7917f7ae92 2009-02-17 07:12:52 +00:00
fyodor
874318bb34 note LQ award 2009-02-17 05:28:41 +00:00
fyodor
b226bdea98 Changes from chat with David and some of my own brainstorming 2009-02-17 00:00:54 +00:00
doug
7b862ddd1e Another batch of misc from nmapsubmit-svfp-020309.mbx (hah - gopher) 2009-02-16 22:27:30 +00:00
david
827bf68360 Remove nmap-$(NMAP_VERSION)-win32.zip before rebuilding. If this isn't done,
then old files that were in a previous build can be in the zip file of a new
build that doesn't have those files anymore. When the zip command sees an
existing archive, it modifies the archive rather than rebuilding it from
scratch.
2009-02-16 19:04:41 +00:00
david
de3b94ac54 Remove the /OPT:NOWIN98 option from the Windows linker options. This gets rid
of a warning:
6>Linking...
6>LINK : warning LNK4224: /OPT:NOWIN98 is no longer supported;  ignored
2009-02-16 18:50:36 +00:00
david
111146a717 Use script ids instead of full paths in NSE start/finish/error debug output. 2009-02-16 17:40:55 +00:00
david
0b3ff10e1d Simplify the retrieval of script ids. Make get_id a method of struct
thread_record. Pass that directly to ScritpResult::set_id. The function
process_getScriptId is no longer needed.
2009-02-16 17:37:14 +00:00
doug
91129a3830 Lots more misc services from nmapsubmit-svfp-020309.mbx 2009-02-15 03:00:02 +00:00
fyodor
2f15befaf8 2009-02-15 02:40:12 +00:00
fyodor
8fe1c1226d 2009-02-15 01:54:23 +00:00
doug
bae386daa4 * Lots of misc fingerprints from nmapsubmit-svfp-020309.mbx
* Update to socks5 probe. Big thanks to Brandon for letting me test his machines!
2009-02-14 21:31:36 +00:00
david
31e62d195d Fix an awkward cross-reference in scripting.xml. The generated text looked like
"These five variables are described in <versioninfo>" because the reference was
to a list item, not to its enclosing section. I changed it so it becomes 'These
five variables are the same as those described under <versioninfo> in the
section called "match Directive"'.
2009-02-14 16:26:50 +00:00
david
fb0f1cdd93 Remove an unnecessary call to keyWasPressed right before service_scan;
service_scan does that itself.
2009-02-14 16:25:46 +00:00
david
df25884daa Add to CHANGELOG:
o [Ncat] The --send-only and --recv-only options now work in listen
  mode as well as connect mode. [David]
2009-02-13 21:21:22 +00:00
david
77a304fb24 Eliminate a couple of (false) uninitialized variable warnings in
scan_engine.cc. Patch by Daniel Roethlisberger.
2009-02-13 16:14:20 +00:00
doug
7d6ead8b39 Last of the HTTP fingerprints from nmapsubmit-svfp-020309.mbx. 710 out of 1746 remaining FPs 2009-02-12 21:13:29 +00:00