djalal
546b8c4749
o [NSE] Fix a bug reported by Daniel Miller that was causing the nfs-ls
...
script to ignore NFS mounts when the Mount version is 1.
2011-04-22 21:52:20 +00:00
robert
737bb9e2dc
Updated Visual C++ Redistributables and UID/Display names as appropriate for the April 2011 MFC Security Update (MS11-025)
...
http://www.microsoft.com/technet/security/bulletin/ms11-025.mspx
http://support.microsoft.com/kb/2467173
http://support.microsoft.com/kb/2467174
2011-04-21 09:59:54 +00:00
david
fef214063a
Add omp2-brute and omp2-enum-targets from Henri Doreau.
2011-04-20 23:44:16 +00:00
david
3447e2a6a2
Use get_script_args to handle smb-related flag options, to use our
...
common true/false logic and not hardcode "1" and "true" in places. Patch
by Chris Woodbury.
2011-04-20 21:35:10 +00:00
david
e0f589a37f
Document backorifice-info script args.
2011-04-20 07:45:13 +00:00
david
7880167e48
Localize functions and variables.
2011-04-20 07:45:12 +00:00
david
5726c875e9
Add backorifice-info.nse.
2011-04-20 07:45:10 +00:00
david
ec4db04494
Add checks for nmap.address_family == "inet" to scripts that require
...
that. Patch by Henri Doreau.
2011-04-19 18:09:15 +00:00
david
46c29d3f60
Use stdnse.print_debug instead of log_write. Patch by Henri Doreau.
2011-04-19 18:09:13 +00:00
david
94d0720515
Add quake3-master-getservers postrule summary patch from Toni.
2011-04-19 04:41:10 +00:00
david
9cabf868ed
Add new NSE TODO.
2011-04-19 03:13:01 +00:00
david
0a0de6eb8b
Add missing "s" qualifier from BackOrifice match line.
2011-04-19 02:30:12 +00:00
david
dd22e26f43
Add a BackOrifice service probe from Gorjan Petrovski.
2011-04-19 02:25:10 +00:00
david
95bca0d2c7
Add port 9001, tor-orport, to LIKELY_SSL_PORTS and LIKELY_SSL_SERVICES.
2011-04-19 00:51:10 +00:00
david
f00142f439
o Added a service probe for Zend Java Bridge, which is vulnerable if
...
exposed to an untrusted network. It was contributed by Michael
Schierl.
2011-04-18 19:32:11 +00:00
david
7c613a7469
Revert r22905. Some of these "jabber" services are xmpp-server, some are
...
xmpp-client, and for some others it's not clear. I'm putting it back
until we can look at them some more.
2011-04-18 19:03:26 +00:00
david
0f4be2ccb6
Change the "jabber" service in nmap-service-probes to "xmpp-server" to
...
match nmap-services.
2011-04-18 18:33:48 +00:00
david
e9294bbb2e
Change the lookup for specialized negotiation functions in ssl-cert.nse.
...
Instead of having an array called STARTTLS_PORTS, with linear lookup for
membership, defined SPECIALIZED_FUNCS, mapping port numbers to
negotiation functions. This make sit a little easier to add other SSL
negotiation mechanisms, like HTTP Upgrade.
2011-04-18 16:07:49 +00:00
david
7a2b7781f7
Add an http-enum fingerprint for /crossdomain.xml, which is used to
...
grant permission to Adobe Flash players to make connections.
2011-04-17 18:32:37 +00:00
fyodor
fc39ab542b
Some updates (recently finished tasks) for the week
2011-04-13 20:08:40 +00:00
david
fb18ead35c
Fix typoed variable name in http-vhosts.nse.
2011-04-11 02:35:49 +00:00
david
fc1f3a7ed1
Fix off-by-one array alignment in port reasons.
...
The affected codes were those between ER_ECHOREPLY and
ER_ADDRESSMASKREPLY.
# symbol reason_text reason_pl_text
-- ------ ----------- --------------
12 ER_ECHOREPLY echo-reply echo-replies
13 -- unknown unknowns
14 ER_DESTUNREACH unknown unknowns
15 ER_SOURCEQUENCH dest-unreach dest-unreaches
16 ER_NETPROHIBITED source-quench source-quenches
17 ER_HOSTPROHIBITED net-prohibited net-prohibiteds
18 -- host-prohibited host-prohibiteds
19 -- unknown unknowns
20 ER_ADMINPROHIBITED unknown unknowns
21 -- admin-prohibited admin-prohibiteds
22 ER_TIMEEXCEEDED unknown unknowns
23 -- time-exceeded time-exceededs
24 -- unknown unknowns
25 ER_TIMESTAMPREPLY unknown unknowns
26 -- timestamp-reply timestamp-replies
27 -- unknown unknowns
28 -- unknown unknowns
29 -- unknown unknowns
30 ER_ADDRESSMASKREPLY addressmask-reply addressmask-replies
2011-04-08 20:18:55 +00:00
david
544753fb4f
Add missing final entry in reason_pl_text.
2011-04-08 07:34:28 +00:00
batrick
9d2463b9cd
comment clarifying -1 case
2011-04-05 19:34:34 +00:00
patrik
bbbccd4e01
o [NSE] Added the afp-ls script that lists files accessible on remote
...
AFP Volumes. [Patrik]
2011-04-05 08:31:34 +00:00
david
f43ca1ae27
Restore a check for nmap.is_privileged to targets-sniffer.nse. I asked
...
Nick to remove this, but it turns out nmap.pcap_open has a bad failure
mode when you're not root. It sleeps for several seconds then throws an
error. So rather than tackle that I'll add this check back to the
script.
2011-04-05 06:12:03 +00:00
david
d0bcacd18a
Check if we have an interface to work with in the prerule of
...
targets-sniffer.nse.
2011-04-05 06:12:02 +00:00
david
067d7d9660
Put targets-sniffer.nse in "broadcast".
2011-04-05 06:12:00 +00:00
david
aa3a9baac8
Add the targets-sniffer script by Nick Nikolaou.
2011-04-05 06:11:59 +00:00
david
c36cf833e6
Add the nmap.get_interface and nmap.get_interface_info functions by
...
Djalal Harouni.
2011-04-05 06:11:58 +00:00
david
d0ea18119c
Add epmd-info script from Toni Ruottu.
2011-04-04 18:28:33 +00:00
fyodor
8663bf9b17
Note minor NSEDoc issues discovered by Toni Ruottu in http://seclists.org/nmap-dev/2011/q1/1095
2011-04-04 15:49:39 +00:00
david
8757392fb5
Remove "-p 5353 <target>" from the @usage of
...
broadcast-dns-service-disocvery.nse. It's not needed for the broadcast
script.
2011-04-03 21:00:37 +00:00
patrik
c7af8736a7
Applied the following patch from Chris Woodbury to make ms-sql-info run less
...
often: http://seclists.org/nmap-dev/2011/q1/1102 [Patrik]
2011-04-03 20:44:42 +00:00
djalal
4ea062b1e3
Check if the added target is too long. Currently we are using std::string objects to store new targets but we want to make sure that the script is not adding long strings.
2011-04-03 14:38:34 +00:00
patrik
0ee33e4cb7
o Moved afp.username and afp.password arguments to afp-library.
...
o Add support for getting file-dates, acls and sizes
[Patrik]
2011-04-03 12:53:12 +00:00
david
a97ae2d949
Remove the todo about version scripts and service fingerprints. This was
...
based on a misunderstanding by me and wasn't a real problem.
2011-04-03 01:36:44 +00:00
david
4d1b301f43
Enable NSEDoc for json.generate; this should be a public function.
2011-04-02 16:28:14 +00:00
david
650ede916a
Remove unused send_ip_raw function.
2011-04-01 21:17:01 +00:00
luis
e04f9d24ec
Add note about how the current echo server zeroes application layer data before encapsulating packets in NEP_ECHO messages, and how in the future we may want to extend the echo protocol to allow stripped-packet transport
2011-04-01 14:38:18 +00:00
david
603082755d
Change the http-affiliate-id registry key to be named after the script.
2011-04-01 06:48:55 +00:00
david
e63a6b7d4c
Include the path in http-affiliate-id postrule output.
2011-04-01 06:48:53 +00:00
david
585e25ba02
Add postrule to http-affiliate-id.nse by Daniel Miller that shows groups
...
of targets using the same ID.
2011-04-01 06:48:52 +00:00
david
1d9bf8bef5
Expanded Amazon pattern for http-affiliate-id from Daniel Miller.
2011-04-01 06:17:15 +00:00
david
a37ea09b90
Add TODO not to show a service fingerprint if the service is matched by
...
NSE; http://seclists.org/nmap-dev/2011/q1/1055 .
2011-04-01 06:17:14 +00:00
batrick
e791c0e4ab
style changes
2011-03-31 20:42:49 +00:00
david
6fdca6e01f
Better Amazon associates match: allow '?'.
2011-03-31 20:32:56 +00:00
david
d4dd71261d
Documentation, whitespace, style in http-affiliate-id.
2011-03-31 20:32:55 +00:00
david
f522332a89
Add http-affiliate-id.nse, originally from Hani Benhabiles, then patched
...
by Daniel Miller.
2011-03-31 20:32:50 +00:00
fyodor
674b8ffecb
Note some done tasks
2011-03-30 22:15:09 +00:00