1674 commits

Author	SHA1	Message	Date
nnposter	d1e8388b7e	Trivial documentation clean-up	2017-07-07 20:11:53 +00:00
nnposter	78486c1b89	Removes potentially confusing comment	2017-07-07 19:19:00 +00:00
dmiller	3ad6ca0a28	Fix line endings in oracle-sids	2017-07-07 03:15:56 +00:00
vinamra	706fd7c130	Adds Express in http-devframework-fingerprints.lua Closes #790	2017-07-06 20:57:43 +00:00
dmiller	baac7e705e	Add basic unicode character encoding detection	2017-07-05 22:43:57 +00:00
evangel	0c142333bb	Merged gsoc-ssh branch. Closes #910	2017-06-29 21:27:35 +00:00
nnposter	db975219f1	Improves APC versioning information	2017-06-29 15:39:48 +00:00
vinamra	2c98b309a8	Corrects URL-Redirection in Relative Paths closes #918	2017-06-24 19:04:06 +00:00
rewanth	984a670c4c	Removes ambiguous file extensions from httpspider.lua	2017-06-21 17:47:22 +00:00
rewanth	3566f2ba8b	Escapes metacharacter in http-sql-errors.lst	2017-06-17 19:19:26 +00:00
rewanth	f481e795b5	Updates list of SQL errors. Closes #776.	2017-06-12 06:20:30 +00:00
waituck	b4e1daef74	Fixed bug in smb.lua share_get_list function to use anonymous connections first. Closes #904	2017-06-11 19:42:33 +00:00
dmiller	fbafac8084	Update wordpress themes and plugins	2017-06-08 12:27:51 +00:00
dmiller	b5ad238397	Update multicast group assignments from IANA	2017-06-08 12:27:48 +00:00
dmiller	4bfee91bd5	Add a couple new EAP method types	2017-06-08 12:27:47 +00:00
dmiller	40f74c3936	Update enterprise numbers registry	2017-06-08 12:27:46 +00:00
dmiller	d6e7148d9e	Add some more TLS registry items (no new ciphers at this time)	2017-06-08 12:27:45 +00:00
rewanth	ab1eb4c037	Adds case insensitive pattern generator function. Closes ... #853	2017-06-08 08:20:19 +00:00
paulino	98c9005b42	Fixes method for detecting spring endpoints	2017-06-07 03:39:58 +00:00
paulino	be40d55552	Adds interesting endpoints that reveal sensitive information in Spring applications	2017-06-07 03:38:33 +00:00
rewanth	1af06b4a1b	Adds common folders to http-folders. Closes #846	2017-06-02 19:09:46 +00:00
rewanth	9104cbe810	Add missing file extensions to httpspider blacklist. Closes #860	2017-06-02 17:42:24 +00:00
dmiller	8d04c3b850	Avoid a crash if ldap decode fails in sslcert. See #888	2017-06-01 17:45:07 +00:00
paulino	ba992765b3	Closes smb connection properly.	2017-05-29 19:48:35 +00:00
paulino	850ae6ef52	Instead of requesting less information, let's try access level 2 first then fallback to 1 if necessary.	2017-05-29 19:47:26 +00:00
paulino	b0228a212b	Updates smb.lua and msrpc.lua to support fully qualified path names as share names and updates match for OID. Modern Windows versions require FQPN and older version work the same. The level of information requested with the call NetShareGetInfo was reduced to support newer versions of Windows. This closes #266, closes #704, closes #238, and closes #883.	2017-05-27 07:28:44 +00:00
paulino	7f2b6d2eb4	Adds signature for various xmeye/cheap chinese made ip cams. Closes #873	2017-05-11 06:32:39 +00:00
dmiller	49ba383eee	Avoid crash if AuthMethod key is not set in iscsi handshake. Fixes #631	2017-04-30 13:18:06 +00:00
nnposter	d478199ada	Allows cookies to have unrecognized attributes (see RFC 6265, Section 5.2). Fixes #866	2017-04-29 14:36:46 +00:00
nnposter	0b36ba5cea	Allows unquoted cookie values to contain whitespace, as defined in RFC 6265. Fixes #844	2017-04-29 14:05:57 +00:00
dmiller	5953b817ac	A couple tests for http.lua; see #844	2017-04-27 17:28:46 +00:00
nnposter	c324237cf0	Converts the login check from a negative test to a positive one (Apache Axis2)	2017-04-25 23:06:38 +00:00
nnposter	2a07563f1d	Simplifies a match pattern	2017-04-25 21:41:43 +00:00
dmiller	b3849c478c	New script arg vulns.short	2017-04-24 13:53:47 +00:00
dmiller	13d06eb738	Use creds username as SNMP community if no ':' indicates password. Fixes #862	2017-04-22 19:31:24 +00:00
nnposter	b9aac1d6ba	Cleans up inline documentation for the default HTTP redirect behavior. Fixes #831	2017-04-19 18:42:51 +00:00
nnposter	cfa57758ad	Changes the redirect rule to return false in case of a missing path. This ... change aligns the code with the corresponding comment. Fixes #830	2017-04-19 18:39:20 +00:00
nnposter	ab96f9c2e7	Corrects a default HTTP redirect rule for hostname/domain matching. Fixes #829	2017-04-19 18:35:31 +00:00
nnposter	17c37b7e8d	Corrects a default HTTP redirect rule: ... A redirect should not be carried out if credentials are embedded in the URL. Fixes #826	2017-04-19 18:30:13 +00:00
nnposter	e80976a13a	Provides a common function, url.get_default_port(), for obtaining ... the default port number for a given scheme. Fixes #781	2017-04-19 18:00:36 +00:00
nnposter	af6bbc35bb	Changes the port type returned from url.parse() to an actual integer, as ... opposed to a string that represents an integer. Fixes #833, fixes #817.	2017-04-19 17:02:32 +00:00
nnposter	3a6deb0075	Removes trailing ".0" from clock artifacts	2017-04-14 01:41:26 +00:00
nnposter	12a89bfa7a	Improves a few matching patterns	2017-04-09 15:27:55 +00:00
nnposter	558b70645b	Converts the login check from a negative test to a positive one	2017-04-09 15:10:56 +00:00
nnposter	b80141d69e	Updates two fingerprints to use the JSON library	2017-04-09 14:57:51 +00:00
nnposter	665ee2ad66	Corrects a fingerprint category for ExtraHop	2017-04-09 14:31:22 +00:00
nnposter	5ef8d01a7f	Simplifies a few logical expressions	2017-04-09 14:25:08 +00:00
nnposter	3952e2fd62	Fixes an issue that caused long integers to be expressed in scientific notation. Fixes #807	2017-04-09 13:33:31 +00:00
dmiller	44a315b548	Fix a unit test in asn1.lua	2017-04-04 16:26:09 +00:00
nnposter	e4d923f076	Allows the port to be a simple number	2017-04-01 22:33:37 +00:00