1
0
mirror of https://github.com/nmap/nmap.git synced 2026-01-09 07:59:03 +00:00
Commit Graph

11610 Commits

Author SHA1 Message Date
dmiller
d84ddbe3fd Remove bit library from a few more libs 2018-08-28 03:52:55 +00:00
dmiller
7c3b9b40d2 Remove bit lib from gps.lua, add unittests 2018-08-28 03:52:54 +00:00
dmiller
199c844d8a Remove unneeded requires 2018-08-27 22:00:14 +00:00
dmiller
71cc60d68c Remove some unused requires 2018-08-27 22:00:13 +00:00
dmiller
46eca7f35f Move date/time functions from stdnse to datetime. See #517 2018-08-27 22:00:10 +00:00
dmiller
9c3e676871 Strictly obey URI scheme when available, e.g. no SSL if scheme is http, no plain if https 2018-08-27 15:34:19 +00:00
dmiller
bc0935a51a Warn if no ciphers support FS. See #1309 2018-08-27 15:02:48 +00:00
dmiller
069c76a1de Handle https://example.com:80 and http://example.com:443 cases
The shortport.ssl check can be expensive (6-second timeout on HTTP
services if you don't use -sV), so we want to avoid it if possible. As
discussed at
b2deb019ed (commitcomment-30289632)
this commit restores the SSL check in cases where it might matter (http
and https default ports) and adds a bypass when the URI scheme is
explicitly requested, as in http.get_url and when following redirects.
2018-08-26 18:24:43 +00:00
nnposter
973b471c11 Corrects a few issues related to snprintf return values 2018-08-26 02:29:14 +00:00
nnposter
d22dbc63b8 Adds a necessary search restart to custom strcasestr().
Previously needle "ab" would not be found in haystack "aab".
2018-08-25 22:39:36 +00:00
nnposter
6725a34200 va_copy also requires va_end 2018-08-25 19:41:32 +00:00
nnposter
c1fa8219bd Simplifies packet-mangling routines, fixes a few one-off bugs 2018-08-23 17:13:56 +00:00
dmiller
8bca8af23e Close socket when connect fails. Possibly related to #1245 2018-08-23 02:58:39 +00:00
dmiller
1f3c083c25 Fix function name (copy-paste error) 2018-08-23 02:58:38 +00:00
dmiller
a7e20158a8 Fix a crash in nbstat.nse; stdnse.output_table can't have setmetatable called on it this way. 2018-08-21 19:36:38 +00:00
dmiller
7629f3b997 Fix a typo in a previous fix 2018-08-21 19:12:36 +00:00
dmiller
d8bcee17bd Get LoopbackAdapter name from service reg key instead of software reg key 2018-08-21 18:21:06 +00:00
dmiller
7e644b391e Use pcap_open and pcap_set_immediate_mode in nsock. Closes #1291 2018-08-21 16:03:30 +00:00
dmiller
d6a04c465e Call pcap_set_immediate_mode to get results back immediately. 2018-08-21 04:51:33 +00:00
dmiller
7f1485f56d Switch to pcap_create instead of pcap_live_open. See #1291 2018-08-20 22:08:56 +00:00
dmiller
4deb24fec4 Change configure check for libpcap to require pcap_create (libpcap 1.0.0 or later). See #1291 2018-08-20 22:08:55 +00:00
nnposter
9e77964022 Removes redundant error check 2018-08-20 01:10:32 +00:00
nnposter
0500b2ce42 Converts FromBytes routine from bin.unpack to string.unpack for internal consistency 2018-08-20 01:08:55 +00:00
nnposter
19693c334c More string.sub vs. string.byte optimizations 2018-08-19 01:49:08 +00:00
nnposter
57a17415b7 more efficient match, avoiding strings 2018-08-18 01:00:16 +00:00
dmiller
59efc272ec Don't allow -Pn to override a MAC address failure with --send-eth 2018-08-17 03:02:40 +00:00
dmiller
42661c4447 Avoid scanning targets we can't reach anyway.
See d8ff55b72e (commitcomment-30112744)
2018-08-16 22:38:12 +00:00
dmiller
6c4e02e89d Use stdnse.format_timestamp in more places to avoid formatting issues. See #1255, #1303 2018-08-16 21:26:48 +00:00
nnposter
834e37d475 Adds previously dropped GH reference 2018-08-14 22:29:12 +00:00
dmiller
d8ff55b72e Start timeout clocks closer to first probe, not in batches. Closes #1150 2018-08-13 19:24:06 +00:00
dmiller
28f3b4910a Don't script-scan targets that are already timed out 2018-08-13 19:24:05 +00:00
dmiller
0a0e9c4433 Changelog entry for #1147, #1108, CVE-2018-15173 2018-08-13 17:18:48 +00:00
dmiller
6c836c83e4 Add some new popular favicons verified through Shodan 2018-08-11 21:24:00 +00:00
dmiller
0e2683e079 Cache a static table instead of regenerating every time 2018-08-11 21:23:59 +00:00
dmiller
b2deb019ed Don't use shortport.ssl to determine Host header.
The only reason this was used was to determine if port 443 was HTTPS.
Simply dropping the port if it's 80 or 443 yields the same outcome.
Maybe we want to be more clear, but then we'd need to have the caller
pass in the URI scheme, too. This is faster and avoids the new SSL
probes in shortport.ssl.
2018-08-11 21:23:58 +00:00
dmiller
7a790d3665 shortport.ssl: don't send 2 probes if the first gives obviously not-ssl response 2018-08-11 21:23:57 +00:00
dmiller
c892dab9a3 Handle large dates on platforms that can't. Fixes #1303 2018-08-10 19:42:50 +00:00
dmiller
c3113037b0 Avoid NULL ptr deref crash if pcre_study returns NULL. Fixes #1302 2018-08-10 17:12:19 +00:00
nnposter
302954fb3f Rectifies incorrect use of va_start/va_end from stdarg.h. Closes #1297 2018-08-09 22:11:15 +00:00
dmiller
0c617b26d9 Add some missing library requires and remove trailing whitespace 2018-08-08 18:58:40 +00:00
nnposter
684803ce30 Fixes a comment to match opening ifdef 2018-08-08 17:33:01 +00:00
dmiller
6d8bb6df22 Set limits on PCRE matches to avoid issues like #1147 2018-08-08 16:36:21 +00:00
dmiller
8ae3ee2c7c Avoid crash if only testing port for likely SSL, not host. Fixes #1286 2018-08-06 21:23:07 +00:00
dmiller
c95330ddf0 Avoid calling GetLastError twice. 2018-08-06 21:23:06 +00:00
nnposter
a4237019ac Fixes indentation 2018-08-05 21:30:42 +00:00
nnposter
1e1f7c80c2 Simplifies code; possibly ipOps candidate 2018-08-05 21:29:37 +00:00
nnposter
3fc825b15e Takes advantage of freshly implemented ipOps.get_first_ip() 2018-08-05 21:11:48 +00:00
nnposter
57f9a46f73 Changes ipOps.get_ips_from_range() behavior to return true first IP address
from a supplied range, not simply copying over the address used to specify
the range. Specifically in case of CIDR notation, the supplied address may
be any address in the range, such as "192.168.1.10/24". Closes #1285
2018-08-05 20:45:08 +00:00
nnposter
6353292c9f Re-wraps overly long line 2018-08-05 20:38:12 +00:00
dmiller
16193bc5e8 Don't quit if no MAC can be found, just mark the target as down. Unusual case, see #1293 2018-08-05 20:22:43 +00:00