1
0
mirror of https://github.com/nmap/nmap.git synced 2026-01-05 22:19:03 +00:00
Commit Graph

7328 Commits

Author SHA1 Message Date
sean
ff9e6e52b9 Updated the windows install icons. Added new sizes and resolutions following theinstructions here http://msdn.microsoft.com/en-us/library/windows/desktop/aa511280.aspx 2012-08-02 01:30:01 +00:00
david
87e3c861aa Put a comment on L_NSE. 2012-08-01 19:44:31 +00:00
dmiller
762207f02e Handle empty snmpcommunity correctly 2012-08-01 17:50:00 +00:00
david
7fc0f3ee6d Add new matchlines for Sybase Backup. 2012-08-01 17:00:14 +00:00
kroosec
17d27f76b0 Updated documentation for rpc.lua latest changes. 2012-08-01 10:02:22 +00:00
kroosec
3cd7f8865d Added ability to disable for program and version support checking in rpc.lua. Authentication now defaults to NULL. 2012-08-01 09:58:48 +00:00
henri
d0e684735a Typo (identfy_404 -> identify_404). 2012-08-01 07:53:16 +00:00
henri
3c3b936391 Indentation fix. 2012-08-01 07:03:53 +00:00
david
d5e5d8c5bd Remove "Server time" from ssl-date output.
This makes it match http-date more closely.
2012-07-31 20:57:30 +00:00
david
7cb7cbe163 Docs and output in ssl-date.nse. 2012-07-31 19:18:10 +00:00
aca
fc102a5ef4 Added ssl-date script 2012-07-31 19:11:10 +00:00
henri
dfdaadccb1 Style changes:
- Consistent variable naming
  - Default parameters cleanup
  - removed unused variables (like "local t = nmap.timing_level()")
  - renamed functions consistently
  - removed typo from function name ("worker_schedluer")
  - consistent debug messages format
2012-07-31 18:12:28 +00:00
dmiller
92008abcfa Fix assertion error on pcap nsock_iod reuse
Discussion: http://seclists.org/nmap-dev/2012/q3/458
2012-07-31 16:20:43 +00:00
david
60d1720d4c Expand a fingerprint to include Windows Embedded Standard 2009. 2012-07-31 01:20:10 +00:00
henri
89537773ce Removed extra '\n', another one being added by the function. 2012-07-30 19:54:11 +00:00
david
a2c2863531 Remove "hardmatched" argument from calls to nmap.set_port_version.
This is the default and can be omitted. Seeing as the value of this
argument was "hardmatched" in 100% of cases, we're better off pretending
the parameter doesn't exist.
2012-07-30 18:58:32 +00:00
david
453131b820 set_port_version in servicetags.nse.
The name, servicetags, is the same one as for the TCP port, but it
doesn't have enough popularity in nmap-services-all to appear in
nmap-services.
2012-07-30 18:58:25 +00:00
kroosec
8c20c04d99 Documentation fixes. Changed host.name and host.targetname by host.ip and host.name 2012-07-30 13:33:05 +00:00
aca
4c4ce195df Added smb-vuln-ms10-061 script from my dev branch 2012-07-30 09:48:03 +00:00
aca
68b2efd3db Merged msrpc changes from my branch, including spoolss functionality 2012-07-30 09:39:23 +00:00
ron
e4823340d8 Fixed http-exif-spider - it used to be a symbolic link, by mistake - also updated script.db. 2012-07-29 21:49:32 +00:00
ron
4bd886cd9f Removing http-exif-spider temporarily 2012-07-29 21:48:51 +00:00
patrik
bca0025032 nse_check_global cleanup 2012-07-29 09:26:23 +00:00
david
1441aea655 Reduce the number of names tried by http-vhosts by default.
Vlatko reported that this script was taking an inordinate amount of time
even in typical scans. This patch reduces the number of domains tried by
default. The new http-vhosts.filelist script argument allows
substituting the original list or another of your choosing.

Patch by Vlatko.
http://seclists.org/nmap-dev/2012/q3/432
2012-07-29 03:39:11 +00:00
dmiller
b868e7f3ce Move caching code to datafiles lib
Scripts no longer need to implement caching of datafiles tables in the
registry, since the datafiles.lua library keeps its own cache in the
registry. A side-effect is that scripts should not change the tables
returned by datafiles.parse_{protocols,rpc,services,mac_prefixes}(), as
doing so will affect all other scripts that use those functions.
2012-07-27 20:07:38 +00:00
ron
959d9a67d3 Adding a new script - http-exif-spider.nse. It spiders a Web site looking for .jpeg images, and displays the image metadata (camera information, date, and geotag data). 2012-07-27 19:38:51 +00:00
henri
d1d1c7a6f4 Re-enabled connection attempts to RPC services when running in non-privileged
mode. This also fixes a bug in the privileged port binding loop, don't always try to
bind() to port 1000 but use the current resvport instead.
2012-07-27 17:23:03 +00:00
patrik
4b77d989e2 added newtarget support to snmp-netstat script, allowing it to identify and
add new targets to the scan queue.
2012-07-26 13:49:03 +00:00
patrik
6dc6b95377 fixed a bug in whitelisting code 2012-07-26 13:37:04 +00:00
david
5e588b53da More direct printing of remotes in http-git.
Show the uninterpreted remote URLs in every case. When matching specific
services, show the guesses about where the source might be hosted, but
remove verbose interpretation like "accessed over SSH".

Before:
|   Remote: git@github.com:skullspace/breachdb.git
|   GitHub remote: skullspace/breachdb (accessed over SSH)
|_   -> Source might be at https://github.com/skullspace/breachdb

After:
|   Remote: git@github.com:skullspace/breachdb.git
|_   -> Source might be at https://github.com/skullspace/breachdb
2012-07-26 06:00:48 +00:00
david
c367d03916 Extract raw remote URLs in http-git. 2012-07-26 06:00:47 +00:00
david
8f907ae853 Local variable. 2012-07-26 06:00:45 +00:00
ron
ea5e4e07ae Updated http-git - bugfixes, and also handles multiple roots with script-args 2012-07-25 01:47:43 +00:00
patrik
d397ac4076 Fixed bug that would result in the stun-version script incorrectly reporting
the stun port as open when the stun service would not respond to the service
probe and the port was reported as open|filtered.
2012-07-24 18:41:42 +00:00
kroosec
f536b34805 Added missing service name for Inter-Language Unification in nmap-rpc. 2012-07-24 12:32:31 +00:00
patrik
7880043ee2 minor fix in stun-version to remove a warning from ipOps.fromdword
indentation fix in stun-version
2012-07-24 12:05:57 +00:00
patrik
be858f4a7d further improoved http-google-malware.nse malware detection by adding response
code checks.
2012-07-24 10:33:39 +00:00
patrik
b0c8a758a0 fixed bug where script would return "Host is safe to browse.", when an invalid
API key was being used.
2012-07-24 10:11:09 +00:00
patrik
217b27bace nse_check_globals cleanup 2012-07-24 10:08:43 +00:00
david
f4e06ca3d7 Ignore RTN_UNREACHABLE routes in route_dst_netlink.
According to rtnetlink(7), such routes are "an unreachable destination."
I get such a route when I ifdown my he-ipv6 interface:

$ /sbin/route -n -A inet6
Kernel IPv6 routing table
Destination                    Next Hop                   Flag Met Ref Use If
::/0                           ::                         !n   -1  1 26122 lo

The problem with not ignoring such routes is that Nmap will think that
the interface to use is lo, and consequently that all the targets are
localhost addresses. Ping scan will succeed with a localhost-response,
but trying to send any packets will fail with "destination unreachable."

Maybe we should do the same thing for these additional values of
rtm_type?

              RTN_BLACKHOLE     a packet dropping route
              RTN_PROHIBIT      a packet rejection route
2012-07-24 00:24:11 +00:00
david
df55d1380a Comment typo. 2012-07-24 00:23:58 +00:00
perdo
8025ba5a5a Added some checks for http response's body being nil. 2012-07-23 22:47:11 +00:00
jah
a1abb40d50 Removed extraneous newline from a couple of print_debug strings. 2012-07-23 22:25:51 +00:00
perdo
612ca59323 Modify pipelining implementation a bit, allow a user to specify size of the pipeline, fix some debugging messages. 2012-07-23 21:58:40 +00:00
perdo
09f7b93949 Modify http-enum and http-fingerprints file so they work with http pipeline better. 2012-07-23 21:55:13 +00:00
kroosec
a32589f06f fixed small typo in the changelog. 2012-07-23 14:39:39 +00:00
kroosec
4aebcc973b Small typo fix in rpc.lua. 2012-07-23 09:58:30 +00:00
aca
6fec00655d Added smb-ms10-054 vuln check script to trunk 2012-07-23 09:52:38 +00:00
fyodor
c6560edae5 Add a minor task idea 2012-07-23 09:39:58 +00:00
patrik
977996e5fa o [NSE] Added rdp library and the script rdp-enum-encryption that enumerates
both the Security Layer and Encryption level of the RDP service. [Patrik
  Karlsson]
2012-07-21 21:24:14 +00:00