diff --git a/CHANGELOG b/CHANGELOG index dddf4eeea..440e5b744 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,7 +1,45 @@ # Nmap Changelog ($Id$); -*-text-*- -o [NSE] Added host based registry, which allows scripts to share data between - scripts scanning a specific host. [Patrik] +o Integrated all of your IPv4 OS fingerprint submissions since June + 2011 (about 1,900 of them). Added about 256 new fingerprints (and + deleted some bogus ones), bringing the new total to 3,572. + Additions include Apple iOS 5.01, OpenBSD 4.9 and 5.0, FreeBSD 7.0 + through 9.0-PRERELEASE, and a ton of new WAPs, routers, and other + devices. Many existing fingerprints were improved. For more + details, see http://seclists.org/nmap-dev/2012/q1/431 [David + Fifield] + +o Integrated all of your service/version detection fingerprints + submitted since November 2010--more than 2,500 of them! Our + signature count increased more than 10% to 7,423 covering 862 + protocols. Some amusing and bizarre new services are described at + http://seclists.org/nmap-dev/2012/q1/359 [David Fifield] + +o Integrated latest IPv6 OS submissions and corrections. We're still + low on IPv6 fingerprints, so please scan any IPv6 systems you own or + administer and submit them to http://nmap.org/submit/. Both new + fingerprints (if Nmap doesn't find a good match) and corrections (if + Nmap guesses wrong) are useful. + +o [NSE] Added a host-based registry, which only persists until all + scripts have finished scanning the host. The normal registry saves + information until it is deleted or the Nmap scan ends. Use the host + based registry if you can to save memory. See + http://nmap.org/book/nse-api.html#nse-api-registry. [Patrik Karlsson] + +o IPv6 OS detection now includes a novelty detection phase that avoids + printing a match when an observed fingerprint is too different from + fingerprints seen before. As the OS database is still small, this + will help avoid making (essentially) wild guesses when seeing a new + operating system. [David Fifield] + +o Refactored the nsock library add "nsock-engines", support for + system-specific scalable IO notification facilities while + maintaining the portable Nsock API. This initial version comes with + an epoll(7)-based engine for Linux and a select(2)-based fallback + engine for all other operating systems. Also added the + --nsock-engine option to nmap, nping and ncat to enforce use of a + given Nsock IO engine. [Henri Doreau] o [NSE] Added 43(!) NSE scripts, bringing the total up to 340. They are all listed at http://nmap.org/nsedoc/, and the summaries are @@ -12,7 +50,8 @@ o [NSE] Added 43(!) NSE scripts, bringing the total up to 340. They and Reporting System) data in real time. [Brendan Coles] + asn-to-prefix produces a list of IP prefixes for a given AS number - (ASN). [John Bond] + (ASN). It uses the external Shadowserver API (with their + permission). [John Bond] + broadcast-dhcp6-discover sends a DHCPv6 request (Solicit) to the DHCPv6 multicast address, parses the response, then extracts and @@ -20,8 +59,7 @@ o [NSE] Added 43(!) NSE scripts, bringing the total up to 340. They server. [Patrik Karlsson] + broadcast-networker-discover discovers the EMC Networker backup - software server on a LAN by using network broadcasts. [Patrik - Karlsson] + software server on a LAN by using network broadcasts. [Patrik Karlsson] + broadcast-pppoe-discover discovers PPPoE servers using the PPPoE Discovery protocol (PPPoED). [Patrik Karlsson] @@ -32,7 +70,7 @@ o [NSE] Added 43(!) NSE scripts, bringing the total up to 340. They devices. [Patrik Karlsson] + broadcast-versant-locate discovers Versant object databases using - the srvloc protocol. [Patrik Karlsson] + the srvloc protocol. [Patrik Karlsson] + broadcast-xdmcp-discover discovers servers running the X Display Manager Control Protocol (XDMCP) by sending a XDMCP broadcast @@ -167,39 +205,65 @@ o [NSE] Added 43(!) NSE scripts, bringing the total up to 340. They o [NSE] Added 14 new protocol libraries! They were all written by Patrik Karlsson, except for the EAP library by Riccardo Cecolin: - + dhcp6 (Dynamic Host Configuration Protocol for IPv6) - + eap (Extensible Authentication Protocol) - + iax2 (Inter-Asterisk eXchange v2 VoIP protocol) - + membase (Couchbase Membase TAP protocol) - + natpmp (NAT Port Mapping Protocol) - + ndmp (Network Data Management Protocol) - + pppoe (Point-to-point protocol over Ethernet) - + redis (in-memory key-value data store) - + rpcap (WinPcap Remote Capture Deamon) - + rsync (remote file sync) - + socks (proxy protocol) - + sslcert (for collecting SSL certificates and storing them in the - host-based registry) - + versant (an object database) - + xdmcp (X Display Manager Control Protocol) + + dhcp6 (Dynamic Host Configuration Protocol for IPv6) + + eap (Extensible Authentication Protocol) + + iax2 (Inter-Asterisk eXchange v2 VoIP protocol) + + membase (Couchbase Membase TAP protocol) + + natpmp (NAT Port Mapping Protocol) + + ndmp (Network Data Management Protocol) + + pppoe (Point-to-point protocol over Ethernet) + + redis (in-memory key-value data store) + + rpcap (WinPcap Remote Capture Deamon) + + rsync (remote file sync) + + socks (proxy protocol) + + sslcert (for collecting SSL certificates and storing them in the + host-based registry) + + versant (an object database) + + xdmcp (X Display Manager Control Protocol) -o [NSE] Added authentication support to MongoDB library and modified existing - scripts to support it. [Patrik] +o CPE (Common Platform Enumeration) OS classification is now supported + for IPv6 OS detection (previously it was only available for + IPv4). [David Fifield] + +o [NSE] Scripts can now access CPE (common platform enumeration) + information for the detected remote OS and applications in the + host.os table and port.version.cpe values described at + http://nmap.org/book/nse-api.html. Note that we're already planning + to change how host.os is structured (see the Nmap TODO + file). [Henri Doreau] + +o Added the new --script-args-file option which allows you to specify + the name of a file containing all of your desired NSE script + arguments. The arguments may be separated with commas or newlines + and may be overridden by arguments specified on the command-line + with --script-args. [Daniel Miller] + +o Audited the nmap-service-probes database to remove all unused + captures, fixing dozens of bugs with captures either being ignored + or two fields erroneously using the same capture. This was done by + Lauri Kokkonen, David Fifield, and Rob Nicholls. + +o Split the nmap-update client in to its own RPM to avoid the Nmap RPM + having a dependency on subversion and APR libraries. We're not yet + distributing this binary nmap-update RPM since the system isn't + complete, but the source code is available in the Nmap tarball and + source RPM. [David] + +o [NSE] Added authentication support to the MongoDB library and + modified existing scripts to support it. [Patrik Karlsson] o [NSE] Added support to broadcast-listener for extracting address, native vlan - and management IP address from CDP packets. [Tom] + and management IP address from CDP packets. [Tom Sellers] o [NSE] Added RPC Call CALLIT to the RPC library and modified UDP sockets to be - unconnected in order to support broadcast. [Patrik] - -o Integrated latest IPv6 OS submissions and corrections. + unconnected in order to support broadcast. [Patrik Karlsson] o [NSE] Modified the ssl-cert and ssl-google-cert-catalog scripts to take advantage of the new sslcert library which retrieves and caches SSL certificates in the registry. o [NSE] Applied patch from Andrew Orr that supports recent changes in - the BitCoin protocol. [Patrik] + the BitCoin protocol. [Patrik Karlsson] o Fixed an error where very long long messages could cause an assertion failure: "log_vwrite: vsnprintf failed. Even after @@ -211,86 +275,91 @@ o Fixed an assertion failure that was printed when a fatal error ..\xml.cc, line 401". This was reported by David Hingos. o [NSE] Added support for decoding EIGRP broadcasts from Cisco routers - to broadcast-listener. [Tom] + to broadcast-listener. [Tom Sellers] -o [NSE] Added redirect support to the http library. All calls to http.get and - http.head now transparently handle any HTTP redirects. [Patrik] +o [NSE] Added redirect support to the http library. All calls to + http.get and http.head now transparently handle any HTTP + redirects. The number and destination of redirects are limited by + default to avoid endless loops or unwanted follows of redirects to + different servers, but they can be configured. [Patrik Karlsson] o [NSE] Modified the sql-injection script to use the httpspider library. [Lauri Kokkonen] o Added --with-apr and --with-subversion configuration options to support systems where those libraries aren't in the usual places. - [David] + [David Fifield] o [NSE] Added voldemort-info, that retrieves cluster and store information - from the Voldemort distributed key-value store. [Patrik] + from the Voldemort distributed key-value store. [Patrik Karlsson] o [NSE] Fixed a bunch of global access errors in various libraries reported by - the nse_check_globals script. [Patrik] + the nse_check_globals script. [Patrik Karlsson] o Fixed an assertion failure which could occur when connecting to an SSL server: nsock_core.c:186: update_events: Assertion `(ev_inc & ev_dec) == 0' failed. - Thanks to Ron for reporting the bug and testing. [Henri] + Thanks to Ron for reporting the bug and testing. [Henri Doreau] -o Audited the nmap-service-probes database to remove all unused - captures, fixing dozens of bugs with captures either being ignored - or two fields erroneously using the same capture. This was done by - Lauri Kokkonen, David Fifield, and Rob Nicholls. - -o Added service probe for the Erlang Port Mapper Daemon. [Patrik] - -o IPv6 OS detection now includes a novelty detection phase that avoids - printing a match when an observed fingerprint is too different from - fingerprints seen before. As the OS database is still small, this - will help not to make what is essentially a wild guess when seeing a - new operating system. [David] +o Added new version detection probes and match lines for: + + Erlang Port Mapper Daemon + + Couchbase Membase NoSQL database + + Basho Riak distributed database protocol buffers client (PBC) + + Tarantool in-memory data store + [Patrik Karlsson] o [NSE] Applied patch to DNS library by John Bond that adds support for the CHAOS class and NSID requests. o [NSE] Changed the dnsbl library to take a threaded approach into querying - DNSBL provides drastically improving performance. [Patrik] + DNSBL provides drastically improving performance. [Patrik Karlsson] o [NSE] Applied patch from Duarte Silva to dnsbl adding new services and the ATTACK category. [Duarte Silva] -o [NSE] Made gathered CPE codes available to NSE. [Henri] - o [NSE] Fixed a memory leak in PortList::setServiceProbeResults() noticed and - reported by David. The leak was triggered by set_port_version calls from NSE. - [Henri] + reported by David Fifield. The leak was triggered by set_port_version calls from NSE. + [Henri Doreau] o [NSE] Fixed a race condition in broadcast-dhcp-discover.nse that could cause responses to be missed on fast networks. It was noticed - by Vasiliy Kulikov. [David] + by Vasiliy Kulikov. [David Fifield] -o Added IPv6 support to firewalk.nse. [Henri] +o Added IPv6 support to firewalk.nse. [Henri Doreau] o Fixed a bug in reverse name resolution: a name of "." would leave the hostname unintialized, which would manifest as Illegal character(s) in hostname -- replacing with '*' errors. [Gisle Vanem] -o Merged nsock-engines from nmap-exp. This rewrite of the nsock - library adds support for system-specific scalable IO notification - facilities without breaking portability. This initial version comes - with an epoll(7)-based engine for Linux and a select(2)-based - fallback engine for all other operating systems. Also added the - --nsock-engine option to nmap, nping and ncat to enforce use of a - given nsock IO engine. [Henri] +o Allow overriding the AR variable to use a different version of ar + when creating the liblinear library. [Nuno Gonçalves] -o Added probe and matchline for Couchbase Membase NoSQL database [Patrik] +o Added vcredist2008_x86.exe to the Windows zipfile. This installer + from MS must be run on new Windows 2008 systems (those which don't + already have it) befure running Nmap. The Nmap Windows installer + already takes care of this. [David Fifield] -o Added the new --script-args-file option which allows you to specify - the name of a file containing all of your desired NSE script - arguments. The arguments may be separated with commas or newlines - and may be overridden by arguments specified on the command-line - with --script-args. [Daniel Miller] +o Removed about 5MB of not-needed DocBook XSL from the Nping docs + directory. [David Fifield] -o Added two new probes for the Basho Riak PBC and Tarantool protocols. - [Patrik] +o The packet library now uses consistent naming of the address fields + for IPv4 and IPv6 packets (ip_bin_src, ip_bin_dst, ip_src, and + ip_dst). [Henri Doreau] + +o Update to the latest MAC address prefix assignments from IEEE as of + March 8, 2012. [Fyodor] + +o Fied a problem in the ippackethdrinfo function which was leading to + warning messages like: "BOGUS! Can't parse supposed IP packet" during + certain IPv6 scans. [David Fifield] + +o Fixed building on Arch Linux. The PCAP_IS_SUITABLE test had to be + modified to ensure that -lnl was passed on the build line. See the + r28202 svn log for further information. [David Fifield] + +o Include net/if.h before net/if_arp.h in netutil.cc and tcpip.cc to + hopefully fix some build problems on AIX 5.3. Nmap 5.61TEST4 [2012-01-02]