diff --git a/CHANGELOG b/CHANGELOG index 250a6dacc..a98b31eed 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,12 +1,65 @@ # Nmap Changelog ($Id$); -*-text-*- -o [NSE][GH#606] Three new scripts render IP geolocation data as maps. - ip-geolocation-map-bing uses Bing Maps, ip-geolocation-map-google uses Google - Maps, and ip-geolocation-map-kml outputs KML map data for import into other - mapping software. [Mak Kolybabi] +Nmap 7.40 [2016-12-20] -o [NSE][GH#606] New NSE library, geoip.lua, provides a common framework for - storing and retrieving IP geolocation results. [Mak Kolybabi] +o [Windows] Updated the bundled Npcap from 0.10r9 to 0.78r5, with an + improved installer experience, driver signing updates to work with + Windows 10 build 1607, and bugfixes for WiFi connectivity + problems. [Yang Luo, Daniel Miller] + +o Integrated all of your IPv4 OS fingerprint submissions from April to + September (568 of them). Added 149 fingerprints, bringing the new total to + 5,336. Additions include Linux 4.6, macOS 10.12 Sierra, NetBSD 7.0, and more. + Highlights: http://seclists.org/nmap-dev/2016/q4/110 [Daniel Miller] + +o Integrated all of your service/version detection fingerprints submitted from + April to September (779 of them). The signature count went up 3.1% to 11,095. + We now detect 1161 protocols, from airserv-ng, domaintime, and mep to + nutcracker, rhpp, and usher. Highlights: http://seclists.org/nmap-dev/2016/q4/115 + [Daniel Miller] + +o Fix reverse DNS on Windows which was failing with the message "mass_dns: + warning: Unable to determine any DNS servers." This was because the interface + GUID comparison needed to be case-insensitive. [Robert Croteau] + +o [NSE] Added 12 NSE scripts from 4 authors, bringing the total up to 552! + They are all listed at https://nmap.org/nsedoc/, and the summaries are below: + + + cics-enum enumerates CICS transaction IDs, mapping to screens in TN3270 + services. [Soldier of Fortran] + + + cics-user-enum brute-forces usernames for CICS users on TN3270 services. + [Soldier of Fortran] + + + fingerprint-strings will print the ASCII strings it finds in the service + fingerprints that Nmap shows for unidentified services. [Daniel Miller] + + + [GH#606] ip-geolocation-map-bing renders IP geolocation data as an image + via Bing Maps API. [Mak Kolybabi] + + + [GH#606] ip-geolocation-map-google renders IP geolocation data as an image + via Google Maps API. [Mak Kolybabi] + + + [GH#606] ip-geolocation-map-kml records IP geolocation data in a KML file + for import into other mapping software [Mak Kolybabi] + + + nje-pass-brute brute-forces the password to a NJE node, given a valid RHOST + and OHOST. Helpfully, nje-node-brute can now brute force both of those + values. [Soldier of Fortran] + + + [GH#557] ssl-cert-intaddr will search for private IP addresses in TLS + certificate fields and extensions. [Steve Benson] + + + tn3270-screen shows the login screen from mainframe TN3270 Telnet services, + including any hidden fields. The script is accompanied by the new tn3270 + library. [Soldier of Fortran] + + + tso-enum enumerates usernames for TN3270 Telnet services. [Soldier of Fortran] + + + tso-brute brute-forces passwords for TN3270 Telnet services. [Soldier of Fortran] + + + vtam-enum brute-forces VTAM application IDs for TN3270 services. + [Soldier of Fortran] o [NSE][GH#518] Brute scripts are faster and more accurate. New feedback and adaptivity mechanisms in brute.lua help brute scripts use resources more @@ -19,28 +72,14 @@ o [GH#353] New option --defeat-icmp-ratelimit dramatically reduces UDP scan "closed|filtered". Ports which give a UDP protocol response to one of Nmap's scanning payloads will be marked "open". [Sergey Khegay] -o [NSE] Script cics-enum enumerates CICS transaction IDs, mapping to screens in - TN3270 services. [Soldier of Fortran] +o [NSE][GH#533] Removed ssl-google-cert-catalog, since Google shut off that + service at some point. Reported by Brian Morin. -o [NSE] Script cics-user-enum brute-forces usernames for CICS users on TN3270 - services. [Soldier of Fortran] +o [NSE][GH#606] New NSE library, geoip.lua, provides a common framework for + storing and retrieving IP geolocation results. [Mak Kolybabi] -o [NSE] Script tso-enum enumerates usernames for TN3270 Telnet services, and - tso-brute brute-forces passwords for the same services. [Soldier of Fortran] - -o [NSE] Script vtam-enum brute-forces VTAM application IDs for TN3270 services. - [Soldier of Fortran] - -o [NSE] Script tn3270-screen shows the login screen from mainframe TN3270 - Telnet services, including any hidden fields. The script is accompanied by - the new tn3270 library. [Soldier of Fortran] - -o [NSE] Script nje-pass-brute brute-forces the password to a NJE node, given a - valid RHOST and OHOST. Helpfully, nje-node-brute can now brute force both of - those values. [Soldier of Fortran] - -o [NSE][GH#557] Script ssl-cert-intaddr will search for private IP addresses in - TLS certificate fields and extensions. [Steve Benson] +o [Ncat] Restore the connection success message that Ncat prints with -v. This + was accidentally suppressed when not using -z. o [GH#316] Added scan resume from Nmap's XML output. Now you can --resume a canceled scan from all 3 major output formats: -oN, -oG, and -oX. @@ -50,16 +89,10 @@ o [Ndiff][GH#591] Fix a bug where hosts with the same IP but different hostnames were shown as changing hostnames between scans. Made sort stable with regard to hostnames. [Daniel Miller] -o [NSE][GH#533] Removed ssl-google-cert-catalog, since Google shut off that - service at some point. Reported by Brian Morin. - o [NSE][GH#540] Add tls.servername script-arg for forcing a name to be used for TLS Server Name Indication extension. The argument overrides the default use of the host's targetname. [Bertrand Bonnefoy-Claudet] -o [NSE] Script fingerprint-strings will print the ASCII strings it finds in the - service fingerprints that Nmap shows for unidentified services. [Daniel Miller] - o [GH#505] Updated Russian translation of Zenmap by Alexander Kozlov. o [NSE][GH#588] Fix a crash in smb.lua when using smb-ls due to a @@ -74,13 +107,6 @@ o The --open option now implies --defeat-rst-ratelimit. This may result in inaccuracies in the numbers of "Not shown:" closed and filtered ports, but only in situations where it also speeds up scan times. [Daniel Miller] -o Fix reverse DNS on Windows which was failing with the message "mass_dns: - warning: Unable to determine any DNS servers." This was because the interface - GUID comparison needed to be done case-insensitive. [Robert Croteau] - -o [Ncat] Restore the connection success message that Ncat prints with -v. This - was accidentally suppressed when not using -z. - o [NSE] Added known Diffie-Hellman parameters for haproxy, postfix, and IronPort to ssl-dh-params. [Frank Bergmann] @@ -93,18 +119,15 @@ o Added service probe and UDP payload for Quick UDP Internet Connection (QUIC), o [NSE] Enabled resolveall to run against any target provided as a hostname, so the resolveall.hosts script-arg is no longer required. [Daniel Miller] -o [NSE] Updated fingerprints for script http-default-accounts with 21 new - fingerprints. 5 fingerprints have been broadened to cover more variants. - [nnposter] - -o [NSE] Revised script http-default-accounts in several ways: +o [NSE] Revised script http-default-accounts in several ways [nnposter]: + - Added 21 new fingerprints, plus broadened 5 to cover more variants. - [GH#577] It can now can test systems that return status 200 for - non-existent pages. [nnposter] + non-existent pages. - [GH#604] Implemented XML output. Layout of the classic text output has also changed, including reporting blank usernames or passwords as "", - instead of just empty strings. [nnposter] + instead of just empty strings. - Added CPE entries to individual fingerprints (where known). They are - reported only in the XML output. [nnposter] + reported only in the XML output. o [NSE][GH#573] Updated http.lua to allow processing of HTTP responses with malformed header names. Such header lines are still captured in the rawheader