dmiller
b7ee15c186
Add ssh banner to ssh-auth-methods
2024-03-27 19:51:37 +00:00
dmiller
4089b69ec0
Update MS SQL server fingerprints
2024-03-18 18:19:21 +00:00
nnposter
96dcf4e9ed
Remove various "the the" repeats. Closes #2804
2024-03-16 01:16:34 +00:00
dmiller
cc5759a6d2
Correctly decode MySql error packets.
2024-01-29 18:31:38 +00:00
dmiller
034ea73ce3
Fix EdDSA in default TLS 1.2 signature algorithms. Closes #2766
2024-01-29 18:31:36 +00:00
dmiller
66f43184f6
Strip carriage returns from unpwdb input files
2024-01-19 21:54:09 +00:00
dmiller
1a7a96274a
Avoid format-string bugs. Fixes #2634
2023-07-20 17:24:16 +00:00
dmiller
d131a096a8
Remove nse_pcrelib from build.
2023-06-24 01:53:09 +00:00
dmiller
828ab48764
Upgrade libpcre to PCRE2 10.42. Windows/macOS builds not completed.
2023-06-24 01:53:07 +00:00
dmiller
9adda8c0f3
Fix DNS TXT record parsing
2023-06-06 15:10:48 +00:00
dmiller
4a4253cc95
Add some tests for dns.lua
2023-06-06 15:10:48 +00:00
dmiller
5ee110f3a5
Be clear in unittest failures involving nil
2023-06-06 15:10:47 +00:00
dmiller
6a567c7c0a
Correctly handle parsing of invalid URL segments. Fixes #2651
2023-05-30 21:15:04 +00:00
dmiller
6bd98c22ea
Consolidate URL tests and add round-trip parsing checks
2023-05-30 21:15:03 +00:00
dmiller
94bbdba677
Localize a few functions used often
2023-05-01 17:44:41 +00:00
dmiller
cd135ab3e8
Lua 5.4 string.unpack() errors if no null in 'z' format
2023-05-01 17:44:40 +00:00
dmiller
b8fd19c8d9
Make lib load errors into unittest failures.
2023-05-01 17:44:40 +00:00
dmiller
b323270b7d
Fix wrong format specifier
2023-05-01 17:44:39 +00:00
dmiller
19d440fccf
Use BN_bn2mpi for ssh2. Add some tests.
2023-01-02 21:20:09 +00:00
dmiller
d4b46b5b43
ssh2: fix positive mpint packing. Closes #2338
2023-01-02 21:20:09 +00:00
dmiller
914cd2b272
Fix stdnse.tohex not adding separators. Fixes #2531
2022-09-30 20:03:37 +00:00
dmiller
32eaa828b7
Faster RPC number lookup
2022-09-29 22:19:28 +00:00
dmiller
d81ead72dc
New C backend for datafiles.lua; avoid copies of large data sets
2022-09-29 22:19:28 +00:00
dmiller
894bfd4976
New script tftp-version. Closes #548
2022-09-28 20:52:47 +00:00
dmiller
5e39a04749
Use Lua's built-in utf8 lib for unicode.lua ops
2022-09-23 01:35:09 +00:00
dmiller
e3ab97215d
Handle internationalized domain names (IDN)
2022-09-21 21:03:57 +00:00
dmiller
3cfe60c3ed
Minor optimization for caseless matching in lpeg-utility
2022-09-08 18:14:52 +00:00
dmiller
e11ff107de
Update service matches for predictable values [ci skip]
2022-08-30 22:35:10 +00:00
dmiller
00dfa15bc8
Update latest enterprise numbers from IANA [ci skip]
2022-08-30 20:53:43 +00:00
dmiller
3df8c7d79c
TLS registry number updates from IANA
2022-08-29 22:06:37 +00:00
dmiller
140dd72415
Fix build with OpenSSL 3.0
...
Updated all OpenSSL code to OpenSSL 3.0 API with no deprecated functions. Some
NSE functions were changed:
* openssl.rc4_options and openssl.rc4 were removed in favor of openssl.encrypt
* openssl.bignum_pseudo_rand is now an alias for openssl.bignum_rand
* openssl.bignum_is_prime and openssl.bignum_is_safe_prime will now ignore the
nchecks parameter, using a secure default instead.
2022-08-25 14:51:59 +00:00
dmiller
050da3c1b7
Ensure oops errors return a string. Fixes #2500
2022-08-15 16:35:07 +00:00
dmiller
b5b48befe3
Fix a typo [ci skip]
2022-03-10 17:24:36 +00:00
dmiller
dd690b3e0b
Bump copyright date and update some links [ci skip]
2022-02-18 17:38:46 +00:00
dmiller
e8df904e7e
Handle unknown/unexpected tokens in login. See #1554
2022-01-04 20:36:43 +00:00
dmiller
c3d54f1fac
Change how ms-sql NSE scripts run
...
MS SQL NSE scripts run on database instances, which can be TCP or named
pipes. With this change, all TCP instances on scanned ports will have
script output attached under the port as a portrule script. Named pipe
instances and TCP instances on unscanned ports will be displayed in the
hostrule script output at the end of the host's output. Utility function
mssql.Helper.InitScript makes it easy to write scripts that just work on
a per-instance basis, without bothering where to put the output.
Discovery will be done once per host, regardless of how many scripts are
run, and can be guaranteed to be done before the script's action takes
place.
2022-01-03 21:08:52 +00:00
dmiller
4124025d62
Clarify that args are strings [ci skip]
2022-01-03 21:08:50 +00:00
dmiller
3cf836c9b5
Register mssql instances found in port scan. See #927
2021-12-15 23:44:43 +00:00
dmiller
6a2260aea0
Fix mssql's SetVersionNumber to consider subbuild (not used currently)
2021-12-15 23:44:42 +00:00
dmiller
02c0354744
Avoid TOCTOU by checking discovery state in mssql.Discover
...
A script might check WasDiscoveryPerformed and get a negative response,
then call Discover, during which time another script already called
Discover. Instead, check the condition *after* acquiring the mutex.
2021-12-15 23:44:41 +00:00
dmiller
0b7dc80349
Fix TDS7 password encoding. Fixes #2388 .
2021-12-14 22:35:57 +00:00
dmiller
b281598a4e
Add a bit to nsedoc for nmap.list_interfaces
2021-12-12 23:42:35 +00:00
dmiller
87fe985f32
Move a reused function out to file scope
2021-12-07 19:50:47 +00:00
dmiller
8a85cdd06b
Minor perf boost: use locals, not class members, for string funcs in stdnse
2021-12-07 19:50:46 +00:00
dmiller
fa029ca531
Add BSON handlers for most data types. Fixes #2393
2021-12-07 19:33:40 +00:00
dmiller
d34d14416d
Performance improvement for stdnse.tohex
2021-12-07 19:33:39 +00:00
fyodor
158c2e493c
Change Insecure.Com LLC to Nmap Software LLC
2021-11-23 19:01:05 +00:00
dmiller
07811b8006
Avoid crashing script if bson can't be parsed. See #2393
2021-11-11 16:26:27 +00:00
dmiller
f062c59843
fix a typo in json test
2021-11-11 16:26:27 +00:00
ron
210d3c29f4
Add new fingerprint to http-fingerprints.lua (/api/ and /api-docs/)
2021-09-10 17:13:24 +00:00
