1
0
mirror of https://github.com/nmap/nmap.git synced 2025-12-15 12:19:02 +00:00
Commit Graph

2236 Commits

Author SHA1 Message Date
gyani
e60b65b016 fixed doccumentation 2015-05-21 15:42:58 +00:00
gyani
6a4c2ab7e5 A script to check RCE in Elastic Search 2015-05-21 10:02:56 +00:00
dmiller
9c04123ad5 Remove some http headers that http.lua sets already. 2015-05-19 19:11:18 +00:00
dmiller
cfac127194 Mark a service as tftp if tftp-enum says it is 2015-05-15 19:35:15 +00:00
dmiller
daf8c58a79 Fix snmp-brute output 2015-05-02 13:25:47 +00:00
henri
0877bf8e7f afp-ls: prevent script from stopping when an error occurs
Patch by Pierre LALET <pierre.lalet@cea.fr>
2015-04-30 17:58:49 +00:00
henri
9dafb0fa05 smb-ls: do not report connection errors by default
Patch by Pierre LALET <pierre.lalet@cea.fr>
2015-04-30 17:58:34 +00:00
henri
4d0e7c9000 Script smb-ls can now use results from smb-enum-shares
- smb-ls parameter `path` is now optional (defaults to '\').

  - smb-ls parameter `maxdepth` now defaults to 1 (no recursion)
    instead of 0 (infinite recursion).

  - smb-ls has a new `shares` parameter to specify a comma-separated
    list of shares to browse.

  - smb-enum-shares adds found shares to an array in the host
    registry, and smb-ls uses this array when no `share` or `shares`
    parameter have been specified.

Patch by Pierre LALET <pierre.lalet@cea.fr>
2015-04-30 17:58:19 +00:00
dmiller
2b2411e2ec Allow http-server-header to softmatch http even without a server header 2015-04-28 13:18:19 +00:00
paulino
4a95d8f9b2 Removes duplicate credential structure in favor of NSE library creds. Patch submitted by nnposter fixes #58 2015-04-16 18:51:45 +00:00
dmiller
54543b303c Clean up some documentation regarding http redirects 2015-04-10 12:56:05 +00:00
dmiller
fcd93e141f Use http.lua's default redirect follower for http-generator.nse 2015-04-10 03:42:46 +00:00
paulino
d76dd6b5b8 Fixes typo in author's name 2015-04-08 20:04:58 +00:00
paulino
5d35530075 Adds http-crossdomainxml 2015-04-08 15:58:20 +00:00
dmiller
04fee3d14c Move TLSv1.2 signature_algorithms extension defaults into tls.lua 2015-03-25 02:29:25 +00:00
dmiller
ed86473b0c Send supported signature algorithms for TLSv1.2 2015-03-24 23:22:19 +00:00
dmiller
564f654747 Fix leftovers from the whois => whois-ip name change 2015-03-07 04:24:31 +00:00
dmiller
55c3348fae Use tls.client_hello defaults for some scripts 2015-03-06 20:00:00 +00:00
dmiller
2e57f72bb0 Restrict http-cisco-anyconnect to https. Closes #62 2015-03-03 17:52:09 +00:00
dmiller
e2bfa97920 Replace instances of bin.pack('A', x), which is equivalent to tostring(x), and a no-op on strings 2015-03-03 04:48:18 +00:00
dmiller
4d106cbe23 Remove unneeded requires 2015-02-28 12:43:59 +00:00
dmiller
41c4b9fbc8 Fix issues with afp-serverinfo using non-standard format library 2015-02-27 20:00:59 +00:00
dmiller
0e74dd7a35 Replace some string.char and bin.pack calls with literals 2015-02-27 19:42:56 +00:00
dmiller
204d37e4d7 Replace packet.toip* and ip*tobin with ipOps.ip_to_str and str_to_ip 2015-02-27 19:42:46 +00:00
dmiller
10dce0382c Clean up string concatenations
Building a string with var = var .. "something" has miserable time
complexities. This commit cleans up a lot of that in scripts, focusing
on packing of data with bin.pack and concatenations within loops.
Additionally, a few instances were replaced with string.rep
2015-02-25 19:58:42 +00:00
dmiller
ddb3905b20 Avoid excessive string concatenations
psl_tree now takes an accumulator argument. It adds lines to the result
table instead of concatenating them together in a string. Then psl_print
concats all the lines together.
2015-02-25 19:58:35 +00:00
dmiller
afd025c191 Lua 5.2 allows null chars in patterns, so this hack is unnecessary 2015-02-25 19:58:33 +00:00
dmiller
db717c7543 Standardize random string generation on stdnse.generate_random_string 2015-02-25 05:06:08 +00:00
dmiller
f6733b2d89 Replace msrpc.random_crap with stdnse.generate_random_string 2015-02-25 05:06:05 +00:00
dmiller
3ee9fee2e2 XML structured output for afp-serverinfo.nse 2015-02-25 03:34:33 +00:00
dmiller
c6b8199c14 Use string.gsub to strip nulls instead of a lua loop. 2015-02-25 03:34:31 +00:00
dmiller
b136a4a80f Replace lua function with equivalent bin.unpack 2015-02-25 03:34:30 +00:00
dmiller
66e235b98e Replace bacnet hex blobs with full dissection 2015-02-24 03:57:32 +00:00
dmiller
6b9796d86a Add Vendor Name to bacnet-info [Stephen Hilt] 2015-02-24 03:57:30 +00:00
jah
836c6e25bc Remove target IP address from debug messages in whois-ip.nse
stdnse.debug writes the IP to messages so scripts don't have to.
A couple of functions no longer needed the target IP passed to them: their
signature and nsedoc were updated accordingly, along with any calls to them.
Also fix some white space.
2015-02-20 03:34:57 +00:00
dmiller
6139ed22e7 Replace host.ip, port.number with host, port
In most cases (e.g. any of the nmap.socket operations), functions can
take full host and port tables instead of just host.ip and port.number.
This makes for cleaner-looking code and easier extensibility if we
decide to check for a protocol on both TCP and UDP, for instance.
2015-02-18 14:38:42 +00:00
dmiller
9db8dfda1d Be more strict about NetBus protocol. Fixes false positives
Had a report via service fingerprint correction of netbus-version
reporting an unrelated service as NetBuster. This would happen for any
service on port 12345 that responds with a banner containing less than 2
carriage returns, or which closes the connection after the first NetBus
protocol message. Now, all netbus-* scripts require the banner to begin
with "NetBus" before they will continue.
2015-02-18 02:57:29 +00:00
dmiller
430f8a1f13 Save a request when running banner against unknown services 2015-02-12 20:04:28 +00:00
dmiller
9294365d9b Fix some NSE globals 2015-02-11 14:20:30 +00:00
jah
859ae15b9f Obtain whois remote assignments files over https. 2015-02-10 17:30:22 +00:00
jah
a26b28b635 Improve script output by removal of the empty line which follows two fields on
the same line.
2015-02-10 17:26:12 +00:00
dmiller
c37923f4e5 Use better packing to avoid excessive concatenations 2015-02-10 05:58:44 +00:00
dmiller
dd40ba14ea Remove data packing atrocities from broadcast-ping.nse
Use of the "H" bin.unpack template should be discouraged, since it leads
to use of blobs of hex data without dissection. NSE scripts should be
self-documenting with regard to packet contents. Similarly, chaining
bin.pack and bin.unpack is usually an anti-pattern for some simpler
construct. In this case, converting a number to hex, padding it with
"0", and packing it is unnecessary, since the original number can be
packed directly with the proper endianness and width.
2015-02-10 04:49:28 +00:00
paulino
c4eee98d07 Fixes documentation of script argument 2015-02-09 07:44:49 +00:00
paulino
40c806d50a Removes http-wordpress-plugins 2015-02-09 07:19:07 +00:00
paulino
617be2ea28 Renames the original http-wordpress-enum to http-wordpress-users and adds the new version of http-wordpress-enum which detects plugins and themes of Wordpress installations 2015-02-09 07:14:55 +00:00
dmiller
27bb53e295 Sanity check for ssh-hostkey to avoid many requests to tcpwrapped sshd 2015-02-06 19:50:26 +00:00
dmiller
d38b46e75c ssh-hostkey: don't print output if no keys found 2015-02-06 19:50:24 +00:00
dmiller
afc9f6f301 Remove unnecessarily-specific 'port.number' from comm.lua calls 2015-02-05 04:18:10 +00:00
dmiller
40652f215b Remove redundant 'proto=port.protocol' from comm.lua calls 2015-02-05 04:17:58 +00:00