1
0
mirror of https://github.com/nmap/nmap.git synced 2025-12-19 05:59:01 +00:00
Commit Graph

4571 Commits

Author SHA1 Message Date
luis
110a687786 Removed a couple of items that have just been taken care of. Make a note for a todo that needs to be done after the nmap-dedup merge 2010-06-18 08:57:51 +00:00
fyodor
ec8e9e2c79 Add a task about syncing the latest iana port assignment file with nmap-services-all 2010-06-18 08:01:36 +00:00
luis
426d292e81 Removed a couple more items from the list. Some of the items removed lately are only implemented in the nmap-dedup branch but will be in the main trunk soon 2010-06-17 17:22:54 +00:00
luis
7d8e32efc3 Moved a few items to the DONE section 2010-06-17 17:14:44 +00:00
luis
7251b932fc Removed a few items that had been taken care of already 2010-06-17 11:02:46 +00:00
luis
0811640293 Move todo item about the BPF spec to the DONE category and added a new item for an issue with ARP replies 2010-06-17 10:27:28 +00:00
luis
dbfcd0251e Some new items from the meeting with David 2010-06-17 10:22:31 +00:00
luis
503c22f4af Added TODO entry about --icmp-advert-entry not handling IPs correctly 2010-06-16 16:21:37 +00:00
david
43654abc71 o Combined service match lines for Oracle Enterprise Manager Agent
into one more effective line. This patch is from Matt Selsky.
2010-06-16 00:46:03 +00:00
david
316e20f8dc o Fixed captures in the mupdate service probe matches. This patch is
from Matt Selsky.
2010-06-16 00:38:38 +00:00
patrik
b6744a3b6c Fixes crash when attempting to sort services that have no port. 2010-06-15 18:18:09 +00:00
kris
7c658dd3fd just whitespace fixes 2010-06-15 18:02:05 +00:00
fyodor
fabe05eae6 Change the term 'stolen from' in comments to 'inspired by', which sounds a little less felonious :) 2010-06-15 08:05:28 +00:00
fyodor
1428a1644b We generally put scripts in either safe or intrusive categories, but not both. So I removed intrusive. I also added discovery, as that seems to fit the ssh-hostkey script 2010-06-15 07:49:45 +00:00
fyodor
a2a35adfd1 some changes from chat w/David 2010-06-14 23:30:04 +00:00
drazen
204ed474e2 Added CHANGELOG entry for smb-check-vulns.nse update 2010-06-14 18:48:07 +00:00
drazen
124b4ef13c Merge from /nmap-exp/drazen/nmap-msrpc. This adds checks for MS06-025 and MS07-029 to smb-check-vulns.nse. 2010-06-14 18:42:54 +00:00
drazen
88a1653d72 Revert r18104. This was a broken merge that still had conflict markers. 2010-06-14 17:32:22 +00:00
drazen
79c14d935c Merged smb-check-vulns from my branch to trunk. 2010-06-14 17:03:15 +00:00
david
1038dc8bcd Fix an error in the documentation for get_ssl_certificate. 2010-06-13 23:34:13 +00:00
david
0bb200e105 Look for and link with libnl. This is needed when linking with the new
libpcap 1.1.1 on Linux, when libpcap is also linked with libnl (which is
is when available).
2010-06-13 23:24:41 +00:00
drazen
a99aa3b53b Added a check for the MS07-029 vulnerability within "smb-check-vulns".
Made some small changes to the function descriptions.
2010-06-13 02:55:26 +00:00
djalal
2ad517622b Add the nfs-ls script entry to the script.db 2010-06-12 23:53:20 +00:00
djalal
921f052f0b Merge r17766:18060 from /nmap-exp/djalal/nselib and nmap-exp/djalal/scripts contains new scripts nfs-ls.nse and lot of new code to the rpc.lua library to check files type and attributes to marshall/unmarshall file attributes and some new high level functions to manipulate NFS objects. 2010-06-12 23:45:59 +00:00
drazen
48ead20324 Added a NOTUP notification if the target service is down (not started). 2010-06-12 22:13:30 +00:00
drazen
0f4d199b1e Fixed a simple bad gameplay in which I attempt to close
an already closed SMB session.
2010-06-12 21:45:16 +00:00
djalal
24807128d2 Merge r17640:18062 from /nmap-exp/djalal/nmap, this is a port of the LuaFileSystem directory iterator in order to use Lua code to list scripts. 2010-06-12 21:41:09 +00:00
drazen
62c2d97f93 MS06-025:
-- Finished, tested and merged into smb-check-vulns
	-- msrpc.lua contains the code required to interface with the RASRPC interface
2010-06-12 19:32:50 +00:00
david
e4162e6771 o [NSE] Added dns-cache-snoop.nse by Eugene Alexeev. This script does
cache snooping by either sending non-recursive queries or by measuring
  response times.
2010-06-12 02:25:44 +00:00
fyodor
6cdc29e49c note an ipv6 problem task 2010-06-11 23:15:28 +00:00
david
35fbec3055 TODO: Testing the removal of PacketSetReadTimeout is done. 2010-06-11 22:49:47 +00:00
david
82e2cc323d Copy the nselib directory as we do in the POSIX makefile, to avoid installing
.svn directories. These were previously present in the Windows zip file, in the
nselib/data and nselib/data/psexec directories.
2010-06-11 22:39:10 +00:00
david
3291dcf898 Some done TODO items. 2010-06-11 16:48:58 +00:00
fyodor
35a28ea343 canonicalize some license text that differed in whitespace or quote character or line-ending or (in a couple cases) the slightly older wording 2010-06-11 06:54:56 +00:00
fyodor
3ceb44b4f7 Moved some information from the license field of these two scripts to the description field. I felt this was a better place since the URL leads to a description of the service rather than license information 2010-06-11 06:49:15 +00:00
fyodor
6ac6e2fad5 loosen the requirements for a split-handshake syn detection to allow the likes of SYN|PSH. See this thread: http://seclists.org/nmap-dev/2010/q2/739 2010-06-11 06:17:52 +00:00
fyodor
0585746788 latest todo updates 2010-06-11 06:15:41 +00:00
fyodor
e0652ac237 Update the vcredist URL to the one we currently use, also note the /q option to run it in quiet mode 2010-06-10 20:39:07 +00:00
luis
79c5e1564b Updated configure script to reflect the changes in r18001 2010-06-10 15:14:23 +00:00
luis
186c990bd9 Fixed a bug that caused Nping to be left out of the makeclean-ing or makedistclean-ing process 2010-06-10 15:13:39 +00:00
fyodor
46a819b034 changed a URL to use %28 and %29 rather than ( and ) to fix an nsedoc parsing issue noted by Jason DePriest 2010-06-10 05:36:39 +00:00
fyodor
0f4bf784be commented out an hp-pjl empty softmatch which was causing problems for other services as described by Tom Sellers in this thread: http://seclists.org/nmap-dev/2010/q2/753 2010-06-09 23:24:08 +00:00
luis
0c8dd438e1 Added a few common protocols to proto2ascii(). Some ifdef directives were included, to avoid breaking compilation if the protos are not defined in some systems. 2010-06-09 17:37:52 +00:00
luis
58c18f80cf Revert mistaken r17962. 2010-06-09 17:20:50 +00:00
luis
003e23c4e8 Merge r17853:17879 from /nmap-exp/luis/nping-dedup.
------------------------------------------------------------------------
r17854 | luis | 2010-06-06 15:47:34 +0200 (Sun, 06 Jun 2010) | 1 line

Removed a few things from the documentation that were rerefenced but not yet implemented
------------------------------------------------------------------------
r17855 | luis | 2010-06-06 15:53:45 +0200 (Sun, 06 Jun 2010) | 1 line

Fixed a bug that caused ARP Requests to be sent no matter what the user supplied as the ARP operation code
------------------------------------------------------------------------
r17856 | luis | 2010-06-06 16:23:47 +0200 (Sun, 06 Jun 2010) | 1 line

Fixed a bug that produced a buffer overflow when non-RFC-compliant ICMP types were set. Now, if user supplies a weird ICMP type, a regular 8-byte ICMP header will be sent
------------------------------------------------------------------------
r17858 | luis | 2010-06-06 22:08:13 +0200 (Sun, 06 Jun 2010) | 1 line

Added a function (and a helper) so the number parsing in Nping is consistent. The new function, parse_unsigned_number() may parse 8, 16, or 32 bit unsigned integers, specified in hexadecimal, octal or decimal. Alternatively, source string may be the special value <<rand>> or <<random>>, and the function will generate a random number of the desired length. Function validate_number_spec() is needed due to the limitations of strtoul() that doesn't report errors on things like 1zzzppp, and gives undesired results when a minus sign is supplied. validate_number_spec() performs various checks, trying to detect bogus input. However, if something is not catched by it, strtoul() may take care of it. I've been testing both functions for hours, even with automatically generated input and I haven't been able to find any bug, so I think its safe to start using this.
------------------------------------------------------------------------
r17859 | luis | 2010-06-06 23:43:04 +0200 (Sun, 06 Jun 2010) | 1 line

Added the possibility to supply special value <<rand>> in MAC address specification
------------------------------------------------------------------------
r17860 | luis | 2010-06-07 00:01:30 +0200 (Mon, 07 Jun 2010) | 1 line

Added the possibility to specify the special value <<broadcast>> so the address FF:FF:FF:FF:FF:FF is set. Also, fixed move string length check so the function does not return OP_FAILURE before checking for these special values
------------------------------------------------------------------------
r17866 | luis | 2010-06-07 01:05:31 +0200 (Mon, 07 Jun 2010) | 1 line

Implemented function getRandomTextPayload() to support <<random>> value in payload string specification
------------------------------------------------------------------------
r17867 | luis | 2010-06-07 01:08:29 +0200 (Mon, 07 Jun 2010) | 1 line

Lots of changes in Nping's  command-line argument parser to use the new parse_unsigned_number() function. Now virtually all parameters may be specified in hexadecimal, octal or decimal base, or even using the special value <<random>>
------------------------------------------------------------------------
r17868 | luis | 2010-06-07 01:12:02 +0200 (Mon, 07 Jun 2010) | 1 line

Removed useless var declarations. There is already an aux32 var declared at the start of the function
------------------------------------------------------------------------
r17869 | luis | 2010-06-07 01:24:00 +0200 (Mon, 07 Jun 2010) | 1 line

Fixed a bug that caused the SYN flag to be set even when the user had specified --flags 0x00.
------------------------------------------------------------------------
r17870 | luis | 2010-06-07 01:27:33 +0200 (Mon, 07 Jun 2010) | 1 line

Fixed another bug in flag parsing. When an empty string was being passed, the SYN bit was being set. Now if an empty string is passed, no flags will be set
------------------------------------------------------------------------
r17873 | luis | 2010-06-07 13:12:36 +0200 (Mon, 07 Jun 2010) | 1 line

Fixed a bug that caused -g to be ignored in TCP-Connect or UDP unprivileged modes. Now, providing the user has enough privileges on his system, the specified source port will be set, at least in the first packet send to each target.  I've tested this on Linux and the OS complains when Nping attempts to use the same source port twice for the same target IP address in TCP-Connect mode. For this reason, a new warning was added so the users know that it will probably fail.
------------------------------------------------------------------------
r17875 | luis | 2010-06-07 13:25:04 +0200 (Mon, 07 Jun 2010) | 1 line

Fixed a bug that caused message <<Operation now in progress>> to be displayed in TCP-Connect mode when RST packets were being received. The problem was that errno was being used and by the time it was referenced, its value had changed so the wrong message was being printed. Now, the error code is obtained from nsock trough a call to nse_errorcode() and the correct message is displayed: <<Connection refused>>
------------------------------------------------------------------------
r17876 | luis | 2010-06-07 13:29:04 +0200 (Mon, 07 Jun 2010) | 1 line

Minor fix
------------------------------------------------------------------------
r17877 | luis | 2010-06-07 13:49:52 +0200 (Mon, 07 Jun 2010) | 1 line

Fixed a bug that caused Nping to fail when the first supplied target was not resolvable (eg: nping bogushost.fkz scanme.insecure.com tcpdump.com).
------------------------------------------------------------------------
r17878 | luis | 2010-06-07 14:56:02 +0200 (Mon, 07 Jun 2010) | 1 line

Fixed a bug that causes Nping to fail when scanning an IP address assigned to a local network interface. The problem is complex and difficult to solve due to the way Nping handles targets and determines things like src IP addresses. This patch introduces an ugly hack (an explicit check for a particular situation in route_dst() ). This is not the most elegant solution and it probably only works in Linux, but it should be OK until a better solution is found.
------------------------------------------------------------------------
r17879 | luis | 2010-06-07 18:46:44 +0200 (Mon, 07 Jun 2010) | 1 line

Added a few wrappers for the new parse_unsigned_number() function. This should minimize the risks of calling it with an invalid pointer type. Also, its prototype has been removed from utils.h and it has been declared static. Additionally, the validate_number_spec() function was removed, relying on strtoul() to perform the appropriate validation.
------------------------------------------------------------------------
2010-06-09 17:16:09 +00:00
luis
021d8b1a14 Removed duplicate sentence 2010-06-09 07:22:26 +00:00
david
2a8d0f2301 Break apart host groups when a new host has the same address as one already in
the current host group. This was already done in nexthost but only affected
ping scanning. Here in nmap.cc it takes effect for port scanning.
2010-06-09 03:12:38 +00:00
david
d638f68826 New TODO items today. 2010-06-09 02:13:13 +00:00
ron
f91c3d0136 Added a minor patch contributed by the Nepenthes Development Team. It changes the 'alloc hint' argument to be the expected value, which happens to be the size of the arguments, instead of the static value I was using. No target I've ever seen cares about the value of this argument, but this brings us slightly more in line with the standard 2010-06-09 01:31:28 +00:00
fyodor
21ba2011a4 Some changes from chat w/David 2010-06-08 22:24:08 +00:00