PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-27 09:59:04 +00:00
Code Issues Projects Releases Wiki Activity
8,927 Commits 2 Branches 0 Tags
e296cdea2a70ba1bb1663e4656dfe15d9c68e4d2
Commit Graph

218 Commits

Author SHA1 Message Date
dmiller
1575c63d7d Spellcheck for Ncat, Nping source files 2014-02-20 21:22:22 +00:00
henri
c9fe124e3d Moved variable definitions to the beginning of the block 2014-02-12 19:09:44 +00:00
d33tah
9365d50cad Fix coding style. 2014-02-12 09:50:27 +00:00
d33tah
b53187bad7 Apply a patch related to MSVC, reported by Gisle Vanem: http://seclists.org/nmap-dev/2014/q1/161 2014-02-12 09:49:39 +00:00
henri
21b7e3818d [Ncat] Added support for socks5 and corresponding regression tests. 
[Marek Lucaszuk, Petr Stodulka]
 2014-02-09 14:10:04 +00:00
dmiller
44e251306e Re-autoconf the configure scripts (using 2.69) 2013-12-11 23:17:47 +00:00
dmiller
a379a8ba2b Use CPPFLAGS for -I, not CFLAGS or CXXFLAGS 
CPPFLAGS is for the C Pre-Processor, and should be used for -I flags. In
a couple cases (nping, nmap) this was resulting in duplicate -Ilibpcap
arguments.
 2013-12-11 23:17:42 +00:00
dmiller
46eb0fed75 Be more compatible with SysV sh 
Although $((arithmetic expansion)) is POSIX-specified, some systems have
non-POSIX System V shell, which can't handle it. This patch replaces
$((something)) with $(expr something) to fix compatibility. This
actually slows things down considerably, since a subshell must be
launched for each increment operation, but the tests aren't that
critical. Bug report: http://seclists.org/nmap-dev/2013/q4/198
 2013-12-03 19:11:12 +00:00
dmiller
6d79c7646b Remove duplicate check for -ldl in ncat/configure 2013-12-03 18:04:38 +00:00
fyodor
65309b5c20 Fixed compilation when --without-liblua is specified 2013-11-10 02:04:17 +00:00
david
27af1d09df Use 1-indexing for first char of Lua string. 
sub(0, 1) worked, but it's more clear to do sub(1, 1).
 2013-10-14 01:35:44 +00:00
david
5657e7e00b Make test-environment.lua a bit more straightforward. 2013-10-04 22:42:13 +00:00
david
d05d8acd93 Revert r32397, r32398, r32399 (tempnam to mkstemp). 
I had intended the unlink to appy only to unix domain sockets, but it
was being called for every kind of local address.

http://seclists.org/nmap-dev/2013/q3/647
 2013-09-27 15:30:18 +00:00
dmiller
db6f6ea069 s/tempnam/mkstemp/ in error message to reflect actual usage. 2013-09-27 14:43:26 +00:00
david
e18b25bccd Use tempfile in place of tempnam. 
To avoid new GCC warnings about tempnam:
ncat_connect.c:789: warning: the use of `tempnam' is dangerous, better use `mkstemp'

Doing things this way has the same race condition as tempnam did,
because we are unlinking the file before binding it. (The race window is
smaller now.) The file must not exist before binding the Unix socket, or
else you get an "address already in use" error. Unlinking before binding
is the same thing that netcat-openbsd does. See this earlier thread:
http://seclists.org/nmap-dev/2012/q4/336.
 2013-09-26 07:17:08 +00:00
david
e4af8d90d8 Add tempfile function. 2013-09-26 07:17:03 +00:00
d33tah
b7a5a6cfc3 Replace some of the rules with per-directory ones. 2013-09-15 20:17:14 +00:00
d33tah
5f7acbb103 Change the comment. 2013-09-15 20:17:08 +00:00
d33tah
8fa61605ba Reorder the checks a bit. 2013-09-15 20:17:03 +00:00
d33tah
800acc5ac1 Change the comment. 2013-09-15 20:16:58 +00:00
d33tah
29d07d7748 Disallow any backslashes. 2013-09-15 15:45:01 +00:00
d33tah
541d49980b Whitespace. 2013-09-15 15:44:56 +00:00
d33tah
f595259310 Replace the current list of checks with a is_valid_path function. 2013-09-15 15:44:51 +00:00
d33tah
8654d12050 Update the httpd.lua comment, the "list the directory contents" is irrelevant. 2013-09-12 18:35:42 +00:00
d33tah
2fde134f36 fflush stderr in all messages sent by Ncat. This makes 
it more comfortable to test Ncat under Cygwin, which
doesn't fflush even if the message contains \n.
(At least not in my ssh+screen+zsh combination).
 2013-09-12 14:23:24 +00:00
david
28599f1567 Revert r32301..r32306. 
Committed accidentally.
 2013-09-12 08:20:13 +00:00
david
08e38545a3 Add connect-mode recv() and send() support. 2013-09-12 08:12:25 +00:00
david
bc96871709 Add null.lua, a filter meant for testing supersocket. 2013-09-12 08:12:20 +00:00
david
39fa14d614 Add script loading facilities. 2013-09-12 08:12:16 +00:00
david
8d796f8981 Add ncat_main.c facilities for -L. Currently still with the ugly 
o.script name.
 2013-09-12 08:12:11 +00:00
david
ecd7a45ec2 Restore the dump_stack routine, it's really useful for debugging. 2013-09-12 08:12:07 +00:00
david
42ce2bc9cc Apply my refactoring changes from r31989. 2013-09-12 08:12:03 +00:00
d33tah
ccd0c02a4c Add a lacking space in the license comment. The command I used to do this is: 
for file in `grep "* including the terms and conditions of this license text as well.       \*" * -r --files-with-match `; do sed "s/\* including the terms and conditions of this license text as well.       \*/* including the terms and conditions of this license text as well.        */g" -i $file; done
 2013-09-11 19:06:20 +00:00
d33tah
a0bd430087 Fix path traversal. Dots are escaped by % in Lua, not by \. 2013-09-10 23:42:59 +00:00
d33tah
5083b40527 Make the script detect \r\n correctly. 2013-09-10 23:24:09 +00:00
david
502339c92c Revert to r32212. 
My recent changes are causing problems when I try to integrate them into
the ncat-sa-take2 branch.
 2013-09-06 06:16:13 +00:00
david
4fdde97639 Factor out lua_call_traceback. 
This does a lua_pcall with the standard traceback error handler.
 2013-09-05 22:10:15 +00:00
david
3ada0d56c3 Don't use global o.cmdexec in lua_setup. 
Pass the name of the file to read as a parameter.
 2013-09-05 20:35:50 +00:00
david
a16dd65503 Get rid of static lua-exec state. 
Have lua_setup return the state it creates. Store the state created from
--lua-exec in the global options table. Use a temporary local for
--lua-exec-internal.
 2013-09-05 20:35:49 +00:00
david
7ab4da3581 Get rid of the global traceback index. 
Just push the traceback function before lua_pcall. The now has to be
less meticulously maintained between lua_setup and lua_run.
 2013-09-05 20:35:48 +00:00
david
c38367b8c8 Remove obsolete comment. 2013-09-05 20:35:46 +00:00
d33tah
ca3ceecbf3 Fix echo.lua bug related to how io.stdin:read(n) works. 2013-09-04 15:40:51 +00:00
d33tah
fad24ba53e Fix a typo. 2013-09-04 15:40:47 +00:00
d33tah
143a8acc8a Don't consider "\r" an end of line. 2013-09-04 15:40:41 +00:00
d33tah
4b07187873 Make conditional.lua use read_line too. 2013-09-04 14:33:39 +00:00
d33tah
e718536eaf Send 414 if the first line is longer than 8096 bytes. 2013-09-04 14:25:53 +00:00
d33tah
6f472f154c Replace io.stdin:read("*line") with a custom read_line function. 2013-09-04 14:04:55 +00:00
d33tah
bbadf79933 Copy httpd.lua from lua-exec-examples branch. 2013-09-03 18:44:46 +00:00
d33tah
ad2b15b88f Make ncat-test.pl work on both Windows and *nix without modification; 
feel free to revert it if you believe it needs some discussion first.
(I find it useful when working from both VM and Linux on a shared
directory)
 2013-09-03 01:01:38 +00:00
d33tah
695be03e60 Fix a copy-paste mistake in Ncat test suite. 2013-08-30 10:23:22 +00:00