mirror of
https://github.com/nmap/nmap.git
synced 2026-08-04 14:49:29 +00:00
Almost done with CHANGELOG
This commit is contained in:
fyodor
parent
3de3c7c8b0
commit
7c4cb56bbe
1 changed files with 138 additions and 69 deletions
207
CHANGELOG
207
CHANGELOG
|
|
@ -1,7 +1,45 @@
|
|||
# Nmap Changelog ($Id$); -*-text-*-
|
||||
|
||||
o [NSE] Added host based registry, which allows scripts to share data between
|
||||
scripts scanning a specific host. [Patrik]
|
||||
o Integrated all of your IPv4 OS fingerprint submissions since June
|
||||
2011 (about 1,900 of them). Added about 256 new fingerprints (and
|
||||
deleted some bogus ones), bringing the new total to 3,572.
|
||||
Additions include Apple iOS 5.01, OpenBSD 4.9 and 5.0, FreeBSD 7.0
|
||||
through 9.0-PRERELEASE, and a ton of new WAPs, routers, and other
|
||||
devices. Many existing fingerprints were improved. For more
|
||||
details, see http://seclists.org/nmap-dev/2012/q1/431 [David
|
||||
Fifield]
|
||||
|
||||
o Integrated all of your service/version detection fingerprints
|
||||
submitted since November 2010--more than 2,500 of them! Our
|
||||
signature count increased more than 10% to 7,423 covering 862
|
||||
protocols. Some amusing and bizarre new services are described at
|
||||
http://seclists.org/nmap-dev/2012/q1/359 [David Fifield]
|
||||
|
||||
o Integrated latest IPv6 OS submissions and corrections. We're still
|
||||
low on IPv6 fingerprints, so please scan any IPv6 systems you own or
|
||||
administer and submit them to http://nmap.org/submit/. Both new
|
||||
fingerprints (if Nmap doesn't find a good match) and corrections (if
|
||||
Nmap guesses wrong) are useful.
|
||||
|
||||
o [NSE] Added a host-based registry, which only persists until all
|
||||
scripts have finished scanning the host. The normal registry saves
|
||||
information until it is deleted or the Nmap scan ends. Use the host
|
||||
based registry if you can to save memory. See
|
||||
http://nmap.org/book/nse-api.html#nse-api-registry. [Patrik Karlsson]
|
||||
|
||||
o IPv6 OS detection now includes a novelty detection phase that avoids
|
||||
printing a match when an observed fingerprint is too different from
|
||||
fingerprints seen before. As the OS database is still small, this
|
||||
will help avoid making (essentially) wild guesses when seeing a new
|
||||
operating system. [David Fifield]
|
||||
|
||||
o Refactored the nsock library add "nsock-engines", support for
|
||||
system-specific scalable IO notification facilities while
|
||||
maintaining the portable Nsock API. This initial version comes with
|
||||
an epoll(7)-based engine for Linux and a select(2)-based fallback
|
||||
engine for all other operating systems. Also added the
|
||||
--nsock-engine option to nmap, nping and ncat to enforce use of a
|
||||
given Nsock IO engine. [Henri Doreau]
|
||||
|
||||
o [NSE] Added 43(!) NSE scripts, bringing the total up to 340. They
|
||||
are all listed at http://nmap.org/nsedoc/, and the summaries are
|
||||
|
|
@ -12,7 +50,8 @@ o [NSE] Added 43(!) NSE scripts, bringing the total up to 340. They
|
|||
and Reporting System) data in real time. [Brendan Coles]
|
||||
|
||||
+ asn-to-prefix produces a list of IP prefixes for a given AS number
|
||||
(ASN). [John Bond]
|
||||
(ASN). It uses the external Shadowserver API (with their
|
||||
permission). [John Bond]
|
||||
|
||||
+ broadcast-dhcp6-discover sends a DHCPv6 request (Solicit) to the
|
||||
DHCPv6 multicast address, parses the response, then extracts and
|
||||
|
|
@ -20,8 +59,7 @@ o [NSE] Added 43(!) NSE scripts, bringing the total up to 340. They
|
|||
server. [Patrik Karlsson]
|
||||
|
||||
+ broadcast-networker-discover discovers the EMC Networker backup
|
||||
software server on a LAN by using network broadcasts. [Patrik
|
||||
Karlsson]
|
||||
software server on a LAN by using network broadcasts. [Patrik Karlsson]
|
||||
|
||||
+ broadcast-pppoe-discover discovers PPPoE servers using the PPPoE
|
||||
Discovery protocol (PPPoED). [Patrik Karlsson]
|
||||
|
|
@ -32,7 +70,7 @@ o [NSE] Added 43(!) NSE scripts, bringing the total up to 340. They
|
|||
devices. [Patrik Karlsson]
|
||||
|
||||
+ broadcast-versant-locate discovers Versant object databases using
|
||||
the srvloc protocol. [Patrik Karlsson]
|
||||
the srvloc protocol. [Patrik Karlsson]
|
||||
|
||||
+ broadcast-xdmcp-discover discovers servers running the X Display
|
||||
Manager Control Protocol (XDMCP) by sending a XDMCP broadcast
|
||||
|
|
@ -167,39 +205,65 @@ o [NSE] Added 43(!) NSE scripts, bringing the total up to 340. They
|
|||
|
||||
o [NSE] Added 14 new protocol libraries! They were all written by
|
||||
Patrik Karlsson, except for the EAP library by Riccardo Cecolin:
|
||||
+ dhcp6 (Dynamic Host Configuration Protocol for IPv6)
|
||||
+ eap (Extensible Authentication Protocol)
|
||||
+ iax2 (Inter-Asterisk eXchange v2 VoIP protocol)
|
||||
+ membase (Couchbase Membase TAP protocol)
|
||||
+ natpmp (NAT Port Mapping Protocol)
|
||||
+ ndmp (Network Data Management Protocol)
|
||||
+ pppoe (Point-to-point protocol over Ethernet)
|
||||
+ redis (in-memory key-value data store)
|
||||
+ rpcap (WinPcap Remote Capture Deamon)
|
||||
+ rsync (remote file sync)
|
||||
+ socks (proxy protocol)
|
||||
+ sslcert (for collecting SSL certificates and storing them in the
|
||||
host-based registry)
|
||||
+ versant (an object database)
|
||||
+ xdmcp (X Display Manager Control Protocol)
|
||||
+ dhcp6 (Dynamic Host Configuration Protocol for IPv6)
|
||||
+ eap (Extensible Authentication Protocol)
|
||||
+ iax2 (Inter-Asterisk eXchange v2 VoIP protocol)
|
||||
+ membase (Couchbase Membase TAP protocol)
|
||||
+ natpmp (NAT Port Mapping Protocol)
|
||||
+ ndmp (Network Data Management Protocol)
|
||||
+ pppoe (Point-to-point protocol over Ethernet)
|
||||
+ redis (in-memory key-value data store)
|
||||
+ rpcap (WinPcap Remote Capture Deamon)
|
||||
+ rsync (remote file sync)
|
||||
+ socks (proxy protocol)
|
||||
+ sslcert (for collecting SSL certificates and storing them in the
|
||||
host-based registry)
|
||||
+ versant (an object database)
|
||||
+ xdmcp (X Display Manager Control Protocol)
|
||||
|
||||
o [NSE] Added authentication support to MongoDB library and modified existing
|
||||
scripts to support it. [Patrik]
|
||||
o CPE (Common Platform Enumeration) OS classification is now supported
|
||||
for IPv6 OS detection (previously it was only available for
|
||||
IPv4). [David Fifield]
|
||||
|
||||
o [NSE] Scripts can now access CPE (common platform enumeration)
|
||||
information for the detected remote OS and applications in the
|
||||
host.os table and port.version.cpe values described at
|
||||
http://nmap.org/book/nse-api.html. Note that we're already planning
|
||||
to change how host.os is structured (see the Nmap TODO
|
||||
file). [Henri Doreau]
|
||||
|
||||
o Added the new --script-args-file option which allows you to specify
|
||||
the name of a file containing all of your desired NSE script
|
||||
arguments. The arguments may be separated with commas or newlines
|
||||
and may be overridden by arguments specified on the command-line
|
||||
with --script-args. [Daniel Miller]
|
||||
|
||||
o Audited the nmap-service-probes database to remove all unused
|
||||
captures, fixing dozens of bugs with captures either being ignored
|
||||
or two fields erroneously using the same capture. This was done by
|
||||
Lauri Kokkonen, David Fifield, and Rob Nicholls.
|
||||
|
||||
o Split the nmap-update client in to its own RPM to avoid the Nmap RPM
|
||||
having a dependency on subversion and APR libraries. We're not yet
|
||||
distributing this binary nmap-update RPM since the system isn't
|
||||
complete, but the source code is available in the Nmap tarball and
|
||||
source RPM. [David]
|
||||
|
||||
o [NSE] Added authentication support to the MongoDB library and
|
||||
modified existing scripts to support it. [Patrik Karlsson]
|
||||
|
||||
o [NSE] Added support to broadcast-listener for extracting address, native vlan
|
||||
and management IP address from CDP packets. [Tom]
|
||||
and management IP address from CDP packets. [Tom Sellers]
|
||||
|
||||
o [NSE] Added RPC Call CALLIT to the RPC library and modified UDP sockets to be
|
||||
unconnected in order to support broadcast. [Patrik]
|
||||
|
||||
o Integrated latest IPv6 OS submissions and corrections.
|
||||
unconnected in order to support broadcast. [Patrik Karlsson]
|
||||
|
||||
o [NSE] Modified the ssl-cert and ssl-google-cert-catalog scripts to
|
||||
take advantage of the new sslcert library which retrieves and caches
|
||||
SSL certificates in the registry.
|
||||
|
||||
o [NSE] Applied patch from Andrew Orr that supports recent changes in
|
||||
the BitCoin protocol. [Patrik]
|
||||
the BitCoin protocol. [Patrik Karlsson]
|
||||
|
||||
o Fixed an error where very long long messages could cause an
|
||||
assertion failure: "log_vwrite: vsnprintf failed. Even after
|
||||
|
|
@ -211,86 +275,91 @@ o Fixed an assertion failure that was printed when a fatal error
|
|||
..\xml.cc, line 401". This was reported by David Hingos.
|
||||
|
||||
o [NSE] Added support for decoding EIGRP broadcasts from Cisco routers
|
||||
to broadcast-listener. [Tom]
|
||||
to broadcast-listener. [Tom Sellers]
|
||||
|
||||
o [NSE] Added redirect support to the http library. All calls to http.get and
|
||||
http.head now transparently handle any HTTP redirects. [Patrik]
|
||||
o [NSE] Added redirect support to the http library. All calls to
|
||||
http.get and http.head now transparently handle any HTTP
|
||||
redirects. The number and destination of redirects are limited by
|
||||
default to avoid endless loops or unwanted follows of redirects to
|
||||
different servers, but they can be configured. [Patrik Karlsson]
|
||||
|
||||
o [NSE] Modified the sql-injection script to use the httpspider library.
|
||||
[Lauri Kokkonen]
|
||||
|
||||
o Added --with-apr and --with-subversion configuration options to
|
||||
support systems where those libraries aren't in the usual places.
|
||||
[David]
|
||||
[David Fifield]
|
||||
|
||||
o [NSE] Added voldemort-info, that retrieves cluster and store information
|
||||
from the Voldemort distributed key-value store. [Patrik]
|
||||
from the Voldemort distributed key-value store. [Patrik Karlsson]
|
||||
|
||||
o [NSE] Fixed a bunch of global access errors in various libraries reported by
|
||||
the nse_check_globals script. [Patrik]
|
||||
the nse_check_globals script. [Patrik Karlsson]
|
||||
|
||||
o Fixed an assertion failure which could occur when connecting to an
|
||||
SSL server:
|
||||
nsock_core.c:186: update_events: Assertion `(ev_inc & ev_dec) == 0' failed.
|
||||
Thanks to Ron for reporting the bug and testing. [Henri]
|
||||
Thanks to Ron for reporting the bug and testing. [Henri Doreau]
|
||||
|
||||
o Audited the nmap-service-probes database to remove all unused
|
||||
captures, fixing dozens of bugs with captures either being ignored
|
||||
or two fields erroneously using the same capture. This was done by
|
||||
Lauri Kokkonen, David Fifield, and Rob Nicholls.
|
||||
|
||||
o Added service probe for the Erlang Port Mapper Daemon. [Patrik]
|
||||
|
||||
o IPv6 OS detection now includes a novelty detection phase that avoids
|
||||
printing a match when an observed fingerprint is too different from
|
||||
fingerprints seen before. As the OS database is still small, this
|
||||
will help not to make what is essentially a wild guess when seeing a
|
||||
new operating system. [David]
|
||||
o Added new version detection probes and match lines for:
|
||||
+ Erlang Port Mapper Daemon
|
||||
+ Couchbase Membase NoSQL database
|
||||
+ Basho Riak distributed database protocol buffers client (PBC)
|
||||
+ Tarantool in-memory data store
|
||||
[Patrik Karlsson]
|
||||
|
||||
o [NSE] Applied patch to DNS library by John Bond that adds support for the
|
||||
CHAOS class and NSID requests.
|
||||
|
||||
o [NSE] Changed the dnsbl library to take a threaded approach into querying
|
||||
DNSBL provides drastically improving performance. [Patrik]
|
||||
DNSBL provides drastically improving performance. [Patrik Karlsson]
|
||||
|
||||
o [NSE] Applied patch from Duarte Silva to dnsbl adding new services and the
|
||||
ATTACK category. [Duarte Silva]
|
||||
|
||||
o [NSE] Made gathered CPE codes available to NSE. [Henri]
|
||||
|
||||
o [NSE] Fixed a memory leak in PortList::setServiceProbeResults() noticed and
|
||||
reported by David. The leak was triggered by set_port_version calls from NSE.
|
||||
[Henri]
|
||||
reported by David Fifield. The leak was triggered by set_port_version calls from NSE.
|
||||
[Henri Doreau]
|
||||
|
||||
o [NSE] Fixed a race condition in broadcast-dhcp-discover.nse that
|
||||
could cause responses to be missed on fast networks. It was noticed
|
||||
by Vasiliy Kulikov. [David]
|
||||
by Vasiliy Kulikov. [David Fifield]
|
||||
|
||||
o Added IPv6 support to firewalk.nse. [Henri]
|
||||
o Added IPv6 support to firewalk.nse. [Henri Doreau]
|
||||
|
||||
o Fixed a bug in reverse name resolution: a name of "." would leave
|
||||
the hostname unintialized, which would manifest as
|
||||
Illegal character(s) in hostname -- replacing with '*'
|
||||
errors. [Gisle Vanem]
|
||||
|
||||
o Merged nsock-engines from nmap-exp. This rewrite of the nsock
|
||||
library adds support for system-specific scalable IO notification
|
||||
facilities without breaking portability. This initial version comes
|
||||
with an epoll(7)-based engine for Linux and a select(2)-based
|
||||
fallback engine for all other operating systems. Also added the
|
||||
--nsock-engine option to nmap, nping and ncat to enforce use of a
|
||||
given nsock IO engine. [Henri]
|
||||
o Allow overriding the AR variable to use a different version of ar
|
||||
when creating the liblinear library. [Nuno Gonçalves]
|
||||
|
||||
o Added probe and matchline for Couchbase Membase NoSQL database [Patrik]
|
||||
o Added vcredist2008_x86.exe to the Windows zipfile. This installer
|
||||
from MS must be run on new Windows 2008 systems (those which don't
|
||||
already have it) befure running Nmap. The Nmap Windows installer
|
||||
already takes care of this. [David Fifield]
|
||||
|
||||
o Added the new --script-args-file option which allows you to specify
|
||||
the name of a file containing all of your desired NSE script
|
||||
arguments. The arguments may be separated with commas or newlines
|
||||
and may be overridden by arguments specified on the command-line
|
||||
with --script-args. [Daniel Miller]
|
||||
o Removed about 5MB of not-needed DocBook XSL from the Nping docs
|
||||
directory. [David Fifield]
|
||||
|
||||
o Added two new probes for the Basho Riak PBC and Tarantool protocols.
|
||||
[Patrik]
|
||||
o The packet library now uses consistent naming of the address fields
|
||||
for IPv4 and IPv6 packets (ip_bin_src, ip_bin_dst, ip_src, and
|
||||
ip_dst). [Henri Doreau]
|
||||
|
||||
o Update to the latest MAC address prefix assignments from IEEE as of
|
||||
March 8, 2012. [Fyodor]
|
||||
|
||||
o Fied a problem in the ippackethdrinfo function which was leading to
|
||||
warning messages like: "BOGUS! Can't parse supposed IP packet" during
|
||||
certain IPv6 scans. [David Fifield]
|
||||
|
||||
o Fixed building on Arch Linux. The PCAP_IS_SUITABLE test had to be
|
||||
modified to ensure that -lnl was passed on the build line. See the
|
||||
r28202 svn log for further information. [David Fifield]
|
||||
|
||||
o Include net/if.h before net/if_arp.h in netutil.cc and tcpip.cc to
|
||||
hopefully fix some build problems on AIX 5.3.
|
||||
|
||||
Nmap 5.61TEST4 [2012-01-02]
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue