1
0
mirror of https://github.com/nmap/nmap.git synced 2025-12-15 12:19:02 +00:00
Commit Graph

6102 Commits

Author SHA1 Message Date
henri
f181470fac Whitespace fixes: removed trailing whitespaces, always use tabs for indentation. 2011-11-07 21:32:43 +00:00
patrik
b66a4849c4 o [NSE] Modified the http library to support servers that don't return valid
chunked encoded data, such as the Citrix XML service. [Patrik]
2011-11-07 06:04:13 +00:00
fyodor
03a75885e7 Minor rewording 2011-11-07 06:00:07 +00:00
fyodor
c12d343ccc fix a typo 2011-11-07 04:51:42 +00:00
fyodor
f73e2b27d1 Update and canonicalize a bunch of script descriptions 2011-11-07 04:08:29 +00:00
david
3c75f0f43c New Wordpress http fingerprint from Duarte Silva. 2011-11-06 22:37:22 +00:00
patrik
dd32e88b66 o [NSE] Added brute scripts rlogin-brute and rexec-brute for the rlogin and
rexec services [Patrik]
2011-11-04 21:17:33 +00:00
patrik
fb3b019de4 Fixed small NSEDOC error in xmpp-brute.nse [Patrik] 2011-11-02 19:20:19 +00:00
david
d3c6976fca Change CRLF line endings to LF in ip-geolocation-*.nse. 2011-11-02 16:50:38 +00:00
david
aceb760703 Change CRLF line endings back to LF in dns-brute.nse. 2011-11-02 16:50:37 +00:00
patrik
fee0ddb527 o [NSE] Added broadcast-rip-discover which gets RIPv2 routers and their routing
information by querying the multicast address [Patrik]
2011-11-02 10:23:50 +00:00
paulino
ea31c702ad Minor modification to add the entry "direct" to the default host list. This is a common dns entry found in hosts protected by Cloudflare (www.cloudflare.com) It is Cloudflare's default dns name for the entry pointing to the real host ip. 2011-11-02 10:16:30 +00:00
patrik
cbf71a1668 o [NSE] Fixed a bug where the brute library would not abort even after all
retries were exhausted [Patrik]
2011-11-02 09:48:33 +00:00
david
842bf0b8f3 o Added a service probe for VMware ESX Server. The probe is based on a
script written by Aleksey Tyurin.
2011-11-01 01:29:17 +00:00
fyodor
4eced641cf add a task for letting nmap.send_Ip take explicit interface address 2011-11-01 00:23:19 +00:00
patrik
c48bb3f3f9 Minor changes to the usage documentation of dns-zeustracker [Patrik] 2011-10-31 18:22:57 +00:00
patrik
ad28a527dc o [NSE] Added dns-zeustracker, which checks whether an IP is part of the Zeus
botnet. [Mikael Keri]
2011-10-31 18:11:54 +00:00
tomsellers
41145a414c Added support for the LDAP extensibleMatch filter to ldap.lua. LDAP searches using this take the following format:
attributename:ruleOID:=value

for example the following finds AD Domain controllers:

(userAccountControl:1.2.840.113556.1.4.803:=8192)

Also added the above as a quickfilter (ad_dcs) to ldap-search.nse to serve as a code example.

Added documentation to explain the values used in some field.
2011-10-31 00:27:03 +00:00
david
57fc9a5545 Add ipv6-node-info. 2011-10-29 19:40:21 +00:00
david
ef5dfd8479 Compress strings of zeros in packet.toipv6.
I do this just by passing the uncompressed names through nmap.resolve.

Before:
fe80:0000:0000:0000:0000:0000:0000:0001, 2001:0470:1f05:155e:0000:0000:0000:0003
After:
fe80::1, 2001:470:1f05:155e::3
2011-10-29 19:40:19 +00:00
david
3fe86cca72 Add a note that ip_send is broken for IPv6 link-local destinations.
The function always extracts the address from the packet contents, but
the scope_id cannot be recovered from the packet contents.
2011-10-29 19:40:18 +00:00
david
fd556a76fe Make dnet:ip_send able to send IPv6. 2011-10-29 19:40:16 +00:00
david
06b69fa9a3 Make some args const. 2011-10-29 19:40:15 +00:00
david
17e54e2d0e Document ip_get_data and ip_get_data_any. 2011-10-29 19:40:14 +00:00
david
622e2e08a7 Standardize on ip6_nhdr in packet.lua.
Some places were using ip6_nxt_hdr and some were using ip6_nhdr.
ip6_nhdr seemed to be the prevailing usage.
2011-10-29 19:40:14 +00:00
tomsellers
bca60ba8de Added support for LDAP substring searches to ldap.lua. These can now be performed alone or in conjunction with other LDAP query types.
Added a new quick filter (qfilter) to ldap-search.nse that allows the user to specify, on the command line, an attribute and corresponding value to search the LDAP directory for.  The use of the asterisk '*' as a wildcard is permitted in the value parameter.

Updated asn1.lua with some minor notes on a hex value that was used.
2011-10-29 10:18:52 +00:00
david
1b469acdae Add OS fingerprint from my localhost. 2011-10-29 01:53:24 +00:00
david
81a312e6d1 Add/modify Solaris 11 IPv4 OS fingerprints. 2011-10-29 01:41:37 +00:00
david
a3cb925699 Add a constructor to FingerMatch.
Not initializing OS_name was causing problems in
parse_single_fingerprint, used by OSassist. I believe the initialization
was being done manually wherever this was used in Nmap itself.
2011-10-29 01:41:28 +00:00
david
6e423e861d Update member name in comment. 2011-10-28 10:55:17 +00:00
david
7197d18d52 Cherry-pick changes to require <linux/compiler.h>.
I needed this to build with --with-libpcap=included on Linux 2.6.16,
otherwise I got this error:

gcc -g -O2 -O2 -fpic -I.  -DHAVE_CONFIG_H  -D_U_="__attribute__((unused))" -c ./pcap-usb-linux.c
./pcap-usb-linux.c: In function ‘probe_devices’:
./pcap-usb-linux.c:234: error: storage size of ‘ctrl’ isn’t known
./pcap-usb-linux.c:279: error: ‘USBDEVFS_CONTROL’ undeclared (first use in this function)
./pcap-usb-linux.c:279: error: (Each undeclared identifier is reported only once
./pcap-usb-linux.c:279: error: for each function it appears in.)
make[1]: *** [pcap-usb-linux.o] Error 1

commit a092bafeee07c97352d2c6d06780220286ab2db0
Author: Guy Harris <guy@alum.mit.edu>
Date:   Tue Nov 30 15:52:45 2010 -0800

    In test programs, just as in pcap-usb-linux.c, if we have
    <linux/compiler.h> we (probably need to include it before including
    <linux/usbdevice_fs.h>, otherwise the test may fail when it shouldn't.

commit b019cc06cb4fdc01f99a36581fe7b55e2533d663
Author: Guy Harris <guy@alum.mit.edu>
Date:   Thu Nov 25 14:06:01 2010 -0800

    Check whether we have <linux/compiler.h>.

    Not all distributions have it in /usr/include; I guess the ones that
    don't have it have versions of other kernel headers that don't require
    it.

commit 0920898be2ede72baafa2a02e77ea223ecbe4f9a
Author: Guy Harris <guy@alum.mit.edu>
Date:   Thu Nov 25 13:49:16 2010 -0800

    Include <linux/compiler.h> before including <linux/usbdevice_fs.h>.

    Some versions of the Linux kernel require that.

commit 85089fea5732acc004dcc7e6aebcb0510c37f675
Author: Guy Harris <guy@alum.mit.edu>
Date:   Fri Jun 4 10:48:16 2010 -0700

    Do filtering on USB and Bluetooth capturing.

    Do the standard userland filtering on USB and Bluetooth captures, rather
    than returning "success" when the filter is installed without doing
    anything with the filter.

    Also, squelch some "dereferencing type-punned pointer will break
    strict-aliasing rules" warnings in pcap-bt-linux.c, by using memcpy
    rather than pointer-casting.
2011-10-27 15:38:30 +00:00
patrik
05187ede6f o [NSE] Added the script irc-brute that performs password guessing against
password protected IRC servers. [Patrik]
2011-10-26 21:55:35 +00:00
patrik
1ab0544ab8 o [NSE] Added the script nessus-brute that performs password guessing against
Nessus using the NTP 1.2 protocol. [Patrik]
2011-10-26 21:45:33 +00:00
patrik
0270368e69 o [NSE] Added the scripts rtsp-url-brute, rtsp-methods and the supporting rtsp
library. The scripts check the supported RTSP methods and attempt to brute
  force valid RTSP urls. [Patrik]
2011-10-26 21:36:37 +00:00
patrik
c9888b6596 o [NSE] Added the http-robtex-reverse-ip script that uses the Robtex service to
perform a reverse lookup in order to discover all names associated with the
  IP. [riemann]
2011-10-26 20:52:56 +00:00
patrik
c055b316b0 o [NSE] Updated script.db to correct some of the category changes made
previously and to remove the accidental addition of non-existing snmp-brute2
  script. [Patrik]
2011-10-26 20:40:54 +00:00
fyodor
fbbd03becc Add a task 2011-10-26 02:05:42 +00:00
david
52da18b72d Include the target address in the NI IPv6 OS probe.
This was missing; likely this probe was never getting any responses. The
same probe in ipv6fp.py worked.
2011-10-25 09:41:19 +00:00
fyodor
1ba3b554f8 some updates from chat w/David 2011-10-24 21:24:57 +00:00
patrik
188209bc62 o [NSE] Fixed an error in the mssql library that was causing the
broadcast-ms-sql-discover script to fail when trying to update port version
  information. [Patrik]
2011-10-24 16:42:02 +00:00
patrik
3d01895e83 o [NSE] Added the missing broadcast category to the broadcast-listener script.
[Jason DePriest]
2011-10-24 16:21:59 +00:00
henri
26c3da4c58 Added CPEs for WU-FTPD 2011-10-24 14:16:59 +00:00
henri
254ac63d4a Added a couple CPEs for Oracle DB server 2011-10-24 13:07:49 +00:00
henri
a501347b85 Added CPE for Subversion.
I could have replaced "subversion" by "svnserve" but it seems that the official
CPE dictionary uses the former only.
2011-10-24 08:50:40 +00:00
patrik
2e8519fd6a o [NSE] Made changes to the categories of the following scripts. Their new
categories are:
    - http-userdir-enum.nse (auth,intrusive)
    - mysql-users.nse (auth,intrusive)
    - http-wordpress-enum.nse (auth,intrusive,vuln)
    - krb5-enum-users.nse (auth,intrusive)
    - snmp-win32-users.nse (default,auth,safe)
    - smtp-enum-users.nse (auth,external,intrusive)
    - ncp-enum-users.nse (auth,safe)
    - smb-enum-users.nse (auth,intrusive)
  [Duarte Silva]
2011-10-22 19:00:33 +00:00
djalal
07b21c1565 Add Henri to the vulns.lua CHANGELOG entry, really sorry. 2011-10-22 09:48:03 +00:00
djalal
0d6051880b o [NSE] Added a vulnerability management library (vulns.lua) to store and to
report discovered vulnerabilities.
2011-10-22 08:40:08 +00:00
david
c21d62d4e6 Revert r26741.
This makes Nmap assume that pcap sockets are selectable on Solaris again. I had
originally tested this on Solaris x86, and couldn't get a scan to complete witho
ut this change. But it was reported that it fails on Solaris SPARC (scans take a
 long time, indicating that pcap calls are blocking longer than their timeout).
I just tested it again on Solaris x86, and now I can't get a scan to complete wi
th r26741. So reverting.
2011-10-22 01:09:30 +00:00
patrik
e543894b99 Updated code style, and changed categories of http-put [Patrik] 2011-10-20 11:18:24 +00:00
patrik
b640b1f312 o [NSE] Added a new script krb5-enum-users.nse that performs user enumeration
against Kerberos. [Patrik]
2011-10-20 02:49:00 +00:00