david
dde083e900
Fix the formatting of the uptime in snmp-ssydescr.nse so it looks like
...
"0:03:02.72 (18272 timeticks)", not "0:3:2.72 (18272 timeticks)" (note padding
zeroes).
2009-02-12 04:23:41 +00:00
david
2d018963ca
Use dns.decStr in dns-zone-transfer.nse instead of a custom DNS decoder. This
...
avoids an infinite recursion bug present in the old decoder. I raised the
number of compression pointers that dns.decStr will follow from 1 to 3 because
I found a server that sent 2.
2009-02-10 00:53:26 +00:00
david
590e7b7574
Fix abug in the DNS parser in dns-zone-transfer.nse: All '0' characters in
...
domain names were changed to '.', probably as a result of some code that wasn't
updated when surrounding code was. This changed the name net360.example.com to
net36..example.com.
2009-02-08 04:33:43 +00:00
david
e6d6e8d83e
Fixed a DNS decoding bug in dns-zone-transfer.nse that created
...
garbage output and could crash Zenmap by including 0x0C bytes in XML
files. The Zenmap crash looked like
SAXParseException: .../zenmap-XXXXXX.xml:39:290: not well-formed (invalid token)
2009-02-06 19:25:11 +00:00
david
00b65b7768
Remove script args that are inherited from modules from sript documentation.
...
Such args are now included automatically in the generated documentation.
2009-02-05 23:45:12 +00:00
ron
5ec608507a
Backported a couple minor bugfixes from my experimental branch
2009-02-04 22:08:20 +00:00
jah
c622a1518e
Pass "ssl" as the third paramater to connect() in pop3.lua capabilities() and
...
smtp-commands.nse if version detection set the port service_tunnel to "ssl".
2009-02-03 02:43:24 +00:00
jah
c8442d3946
Fix error:
...
SCRIPT ENGINE (506.424s): ./scripts/pop3-capabilities.nse against a.b.1.47:995
ended with error: ./scripts/pop3-capabilities.nse:32: bad argument #1 to
'pairs' (table expected, got string)
which happens because pop3.lua returns a string error message instead of a table
of capabilities if it can't connect the socket or obtain a response from a
connected socket.
It now returns nil, err_message in these cases and the documentation now reflects
this - pop3-capabilities.nse silently returns and prints a debug message.
Added a 10s timeout for the socket in pop3.lua capabilities - 30s was a bit much.
2009-02-03 01:15:25 +00:00
david
a5b73cf906
Rename the xampp-default-auth script to ftp-brute. Incorporate some code
...
improvements in the script from Vlatko Kosturjak. Remove the nobody/e0e0e0e0
test credentials because I can't find a web source to substantiate them.
2009-01-26 06:02:45 +00:00
david
81886dc21d
Remove id variables from a couple of scripts.
2009-01-26 05:56:49 +00:00
fyodor
197b228b4d
remove complex timeout system (based on -T level) of Banner NSE script, and instead always wait five seconds.
2009-01-23 05:22:06 +00:00
david
0844aa18af
Remove redundant "Daytime: " from the output of daytime.nse. It looked like
...
|_ daytime: Daytime: Mon Jan 19 17:43:18 MST 2009
2009-01-20 00:42:32 +00:00
david
bad22b8c60
Give the default value ("public") in the NSEDoc for the snmpcommunity script
...
argument in snmp-sysdescr.nse.
2009-01-19 23:23:20 +00:00
david
7307d28e88
Let daytime.nse run against both TCP and UDP port 13. It only did UDP before.
...
RFC 867 says the service runs over both protocols.
2009-01-19 21:55:23 +00:00
david
a384e9016f
Document script arguments in
...
pop3-brute.nse: pop3loginmethod, userdb, passdb;
snmp-brute.nse: snmpcommunity, snmplist, userdb, passdb;
snmp-sysdecsr.nse: snmpcommunity;
snmp.lua: snmpcommunity;
unpwdb.lua: userdb, passdb.
2009-01-13 00:10:33 +00:00
kris
5725a169bf
Make robots.txt.nse be silent instead of printing reports for a file with no
...
disallowed entries
2009-01-03 16:54:47 +00:00
ron
1c08d02689
Updated the output section for smb-enum-processes.nse
2008-12-24 00:58:52 +00:00
ron
773000b65a
Merging changes from my experimental branch; the new versions of this scripts, which have significant changes to their core functionality, managed to hold their own against Brandon's network. More testing would be very helpful, though, especially with credentials (most of Brandon's scans were anonymous).
2008-12-24 00:53:01 +00:00
bmenrigh
c4bebb3a01
Starting in Lua 5.1, string.gfind was renamed to string.gmatch. This commit fixes a warning when gfind is used by using gmatch instead.
2008-12-17 20:43:57 +00:00
batrick
88419b0c6e
Cleaned up the creation of the string payload.
2008-12-09 06:00:50 +00:00
ron
86de493a3e
Changed smb-enum-shares to detect a host that returns the incorrect value for unknown shares (happened against what appears to be a EMC SANS). Also added a check to stdnse.strjoin() to ensure that the first parameter is either nil or a string, I got the parameters wrong and spent awhile trying to figure otu why.
2008-12-08 03:33:25 +00:00
ron
ea42f39faa
Merged in significant changes to Microsoft RPC calls
2008-12-07 16:16:11 +00:00
david
be28828544
Add a patch by Tom Sellers to use "html-title.nse" in the debug messages of the
...
script of that name, instead of the old name "showHTMLTitle."
2008-12-06 02:48:30 +00:00
jah
9f3a5e5210
Fix the closure of a multiline comment which is not strictly legal
...
http://www.lua.org/pil/1.3.html , but only impacts syntax
highlighting and not script execution.
2008-12-02 18:30:05 +00:00
david
85deff9ede
Use a more straightforward return style in script rules. Instead of
...
if cond then
return true
else
return false
end
just do
return cond
2008-11-18 16:59:09 +00:00
david
f4b970f889
Update skypev2-version.nse to match how it's shown in scripting.xml.
2008-11-18 16:47:57 +00:00
david
8247257ad0
Make the code that manipulates the filename local to a function in banner.nse.
...
--script-updatedb didn't work because scripts don't have the filename variable
in their environment during that.
2008-11-18 16:44:57 +00:00
jah
100aa9d122
Removed filename_len() from banner.nse and instead shorten var filename
...
to the script name minus its extension - in response to the change
in r11111.
Changed the width of output from 80 chars to 75 which is what was
originally intended.
2008-11-18 14:08:08 +00:00
jah
fece92c4f7
Add http-alt and https-alt to the services handled by html-title.nse
...
Modified http.request() to connect using ssl for the https-alt service.
html-title.nse can now deal with a redirect which changes the url scheme
as long as a port is present in the url and it is the port being scanned.
2008-11-17 22:06:58 +00:00
david
6bd949abb0
Add a little bit about POP3 capabilities to the pop3-capabilities.nse script.
2008-11-15 01:43:10 +00:00
david
c3ee93f056
Sort script.db entries by file name to make diffs comprehensible. Their
...
previous unsorted state was due to their coming straight out of opendir.
2008-11-15 00:58:36 +00:00
david
0d7243ad5a
Add banner.nse to script.db.
2008-11-15 00:55:59 +00:00
jah
17595d5f03
Removed an erroneous argument to a print_debug statement.
2008-11-14 20:57:45 +00:00
fyodor
cdfac4d6b2
spell check: recognise -> recognize
2008-11-11 20:33:48 +00:00
jah
fbea106cc2
Added banner.nse: A simple banner grabber which connects to an open TCP port and prints out anything issued by the listening service.
2008-11-11 11:59:05 +00:00
david
a709967cdd
Spell check script documentation.
2008-11-11 05:16:10 +00:00
david
dd586b90bd
Remove smb-check-vulns.nse from the vuln category, leaving it in intrusive.
2008-11-11 00:48:48 +00:00
david
03c9145785
Take smb-check-vulns.nse out of discovery and put it in vuln.
2008-11-11 00:35:41 +00:00
david
8f7d2c9974
Split dns-zone-transfer usage across two lines.
2008-11-11 00:35:08 +00:00
david
40394a19cd
Fix a whole bunch of script names I missed updating in @usage sections.
2008-11-11 00:23:59 +00:00
david
cb998f9af0
Rename the script arg table owned by dns-zone-transfer.nse from zoneTrans to
...
dnszonetransfer.
2008-11-11 00:19:51 +00:00
david
d293dec977
Rename the script zone-transfer.nse to dns-zone-transfer.nse.
2008-11-11 00:11:12 +00:00
david
e09dba77d1
Adjust the output of http-trace and pop3-capabilities to avoid overly long
...
lines.
2008-11-10 23:44:49 +00:00
david
5a418c9c23
Better format the output of smtp-commands.nse.
2008-11-10 23:35:31 +00:00
david
9d97468d48
Update some documenation in smb-check-vulns.nse.
2008-11-10 23:18:20 +00:00
jah
c38aa90312
Fix http.lua which ignores port.protocol and assumes it to be 'tcp' even if it is 'udp'.
...
Now http.request() returns nil if port.protocol is not 'tcp'.
Changed the portrule in html-title.nse to accept only TCP ports.
Fixed a redirect rule in html-title.nse which was comparing the string url.port with
the number port.number - which would always be false.
2008-11-10 22:55:08 +00:00
david
65348958eb
Rearrange some symbolic constants in smb-check-vulns.nse so as not to confuse
...
NSEDoc. Also fix a couple of typos.
2008-11-10 21:44:35 +00:00
ron
8e89a0e217
updated scriptdb/CHANGELOG, renamed smb-checkvulns.nse to nse-check-vulns.nse for consistency with the new naming standard
2008-11-10 19:06:50 +00:00
ron
82ce5f2a92
Merge from /nmap-exp/ron/ms08-067-test
2008-11-10 16:23:12 +00:00
fyodor
ce3835a4e3
changing name from identd-owners to auth-owners to match service name in nmap-services. We can always change it back if we change nmap-services
2008-11-08 05:12:44 +00:00
