fyodor
5bcfa6f920
Changes from chat with David today
2009-05-26 23:08:05 +00:00
david
753679d84c
Enhance the ncat-chat service match line so it works with IPv6 addresses
...
(ncat --chat -l -6).
2009-05-26 21:49:36 +00:00
david
7184ce9646
Add an nmap-service-probes match for ncat --chat.
2009-05-26 21:39:46 +00:00
ithilgore
36bbbf5b11
fixed typo at man page: defeat-rst-ratelimit
2009-05-26 08:48:13 +00:00
fyodor
eaa7b38623
add entry for sctp patch
2009-05-26 06:21:59 +00:00
david
5cb872a499
Fix a typo in a comment.
2009-05-25 01:49:27 +00:00
david
8d8554bc7d
Note which packages must be installed for OpenSSL support on Debian and
...
Red Hat (libssl-dev and libopenssl-devel respectively). This tripped
Venkat and me up for a while.
2009-05-25 00:46:16 +00:00
david
6e25eff176
Fix a bug I found by reading Daniel Roethlisberger's article at
...
http://www.linux-magazin.de/Heft-Abo/Ausgaben/2009/06/Alles-inklusive/(offset)/4 .
Don't print a "Not shown: " line if there were no extraports.
2009-05-24 18:59:19 +00:00
david
35eb7f1137
Use a datetime.date object to store the date criterion in the Zenmap
...
search dialog, not an ad-hoc (year, month, day) tuple. This fixes an
error introduced when I made the change to use strftime for date
formatting:
File "zenmapGUI\SearchGUI.pyo", line 583, in operator_changed
File "zenmapGUI\SearchGUI.pyo", line 566, in new_subcriterion
File "zenmapGUI\SearchGUI.pyo", line 751, in __init__
File "zenmapGUI\SearchGUI.pyo", line 816, in set_date
TypeError: argument must be sequence of length 9, not 3
2009-05-24 18:04:47 +00:00
fyodor
d971be11a8
Add links to some other sources of information on the vulnerability and this script
2009-05-22 19:59:07 +00:00
ron
bfd3c5b3df
Fixed the 'usage' section -- thanks to Raul Siles for pointing out the mistake
2009-05-22 12:35:59 +00:00
ron
db4b1df6d1
Fixed a nil-reference bug in the WebDAV code
2009-05-21 19:49:53 +00:00
ron
4d38f8c8c5
Fixed a spelling mistake on print_debug ('pring_debug')
2009-05-21 14:35:23 +00:00
fyodor
0b2b4bdc64
note MAC address prefix update
2009-05-21 00:48:11 +00:00
fyodor
f3e3b8699c
Update nmap-mac-prefixes to include the latest data from http://standards.ieee.org/regauth/oui/oui.txt
2009-05-21 00:44:38 +00:00
fyodor
dd7dcdf706
remove PCAP_TIMEOUT_IGNORED define since it isn't used anywhere currently
2009-05-20 21:15:37 +00:00
ron
9f21ec234c
Applied a patch to WebDAV checks created by Andrew Orr:
...
1) Checks if the root folder is protected and aborts if it is (we can't scan folders if the root folder is protected)
2) Checks if WebDAV is enabled on the server and aborts if it isn't. The check works on IIS 5, 5.1, and 6.0 (hasn't been tested on others)
3) Added support for finding the vulnerability on IIS 5.1 (Windows XP) -- 5.0 doesn't appear to be vulnerable in our tests
2009-05-20 18:44:01 +00:00
fyodor
4df611ff9b
Note an NSEDoc generation problem that Ron and I encountered today
2009-05-20 08:19:17 +00:00
fyodor
d3e623bf00
change the categories to vuln and intrusive
2009-05-20 00:51:54 +00:00
fyodor
4599d9f4f5
rename http-webdav-unicode-bypass.nse to http-iis-webdav-vuln.nse and update script.db
2009-05-20 00:43:30 +00:00
bmenrigh
f6eba7c5f1
Fixed Metasplit -> Metasploit typo
2009-05-20 00:05:37 +00:00
fyodor
60b4f7913c
remove an apostrophe which was causing us nsedoc generation problems
2009-05-20 00:01:41 +00:00
ron
7382e29cb0
Updated documentation
2009-05-19 23:56:05 +00:00
ron
2d8862524d
Gave credit to my friend (well, minion) who wrote the script with me
2009-05-19 23:27:31 +00:00
ron
51b9dd426b
Added a check at the start for a password-protected root folder. Prevents checking if we can't get useful results.
2009-05-19 21:27:05 +00:00
ron
571145d92a
Improved the script's ability to check subfolders by moving where the 'exploit' unicode characters (%c0%af) are to the beginning of the string.
2009-05-19 21:21:55 +00:00
ron
c213cc97b1
Added an initial WebDAV vulnerability-detection attempt for testing
2009-05-19 20:56:07 +00:00
batrick
5c9d8c1335
Removed some old comments and old commented code.
2009-05-19 02:00:21 +00:00
fyodor
2c41f84d7f
o Patched configure.ac to detect Lua include and library files in
...
"lua5.1" subdirectories of /usr/include and the like. Apparently
Debian puts them there. We still check the likes of
/usr/include/lua.h and /usr/include/lua/lua.h as well. [Jan
Christoph Nordholz]
2009-05-18 21:15:00 +00:00
fyodor
e8880137ee
o Patched configure.ac to detect Lua include and library files in
...
"lua5.1" subdirectories of /usr/include and the like. Apparently
Debian puts them there. We still check the likes of
/usr/include/lua.h and /usr/include/lua/lua.h as well. [Jan
Christoph Nordholz]
2009-05-18 21:14:12 +00:00
fyodor
4dbc21ff2b
Take some things out of the done category just so that I remember to chat with David about them when he gets back
2009-05-18 20:48:17 +00:00
fyodor
4e2b95ccb4
some build system tasks
2009-05-18 20:42:33 +00:00
batrick
a62a395392
Updated TODO to reflect recent fixes to NSE being done.
2009-05-18 05:46:44 +00:00
batrick
9338ee98c2
[NSE] Corrected a bug in nse_nsock.cc that could result in the use of
...
an invalid Lua state if the thread was collected due to timeout or other even
more rare reasons. Essentially, the callbacks from the nsock library
were using a collected Lua state. I have solved this by maintaining a
reference to the Lua State Thread in the nsock userdata's environment table.
This is a temporary patch for the stable release pending a more detailed
review of the NSE nsock library binding.
2009-05-18 05:27:44 +00:00
batrick
fc4764fa34
Cleaned up the whitespace in nse_nsock.cc as per David's suggestion (I agree
...
with it). The whitespace was various styles in often confusing places.
The whitespace also had many evil tabs. I used the indent program and
tried to follow the whitespace of the rest of NSE C code as closely as
possible.
2009-05-17 20:50:40 +00:00
batrick
94ff7eb079
[NSE] Upon connection failure, a socket will now unlock its "socket lock"
...
allowing other pending socket connections to succeed sooner. This change
only slightly speeds up the process as these sockets will be collected
eventually, causing the slots to be unlocked.
2009-05-17 20:05:39 +00:00
batrick
3b36da46b2
Corrected a log message to use format strings rather than use concatentation.
2009-05-17 19:51:01 +00:00
batrick
4a5bdd4a13
A warning is printed when a script in the script database cannot be located
...
using nmap_fetchfile. Nmap no longer exits due to this error.
2009-05-17 19:48:46 +00:00
batrick
fc6d15eb4f
Removed some extraneous whitespace.
2009-05-17 19:43:21 +00:00
jah
4f1e6e743c
Added uninstall entry for ca-bundle.crt (CAs for Ncat on Win32) to NSIS script.
2009-05-16 15:30:57 +00:00
fyodor
bc75854cb0
2009-05-15 23:02:04 +00:00
fyodor
e9225ce347
Linkify a title for the web version and regen man page.
2009-05-15 07:00:44 +00:00
fyodor
24db016c32
Finished some tasks -- Yay! Also added a new task or two and reorganized some
2009-05-15 06:51:08 +00:00
fyodor
e385d76b7f
Document that Nmap GPG detached signature files now use the more standard .asc extension rather than .gpg.txt
2009-05-15 06:45:34 +00:00
fyodor
c2f217b27f
oops, forgot to check in new build of zenmap man page
2009-05-15 06:44:45 +00:00
fyodor
9d4771901f
move legal-notices.xml and nmap-usage.xml to nmap docs directory since they are needed to build refguide (man page); add nmap-man-enclosures.xml which also eases building the refguide; add Nmap book details to refguide; rebuild man pages
2009-05-15 06:44:22 +00:00
fyodor
ab1fa58da2
o Fixed an assertion failure which could occur on at least SPARC Linux
...
The error looked like "nsock_core.c:294: handle_connect_result:
Assertion `0' failed. Aborted". [David Fifield, Fabio Pedretti]
2009-05-15 03:01:01 +00:00
fyodor
516928b07d
2009-05-14 04:40:00 +00:00
fyodor
a420fe3d4f
o Improved the Oracle DB version detection signatures. [Tom Sellers]
2009-05-14 04:32:50 +00:00
jah
89dc4fca57
Improved the parsing of host expressions to handle a few cases where supplying invalid targets would cause Nmap to scan unintended hosts.
...
See http://seclists.org/nmap-dev/2009/q2/0319.html for more detail.
2009-05-13 09:09:55 +00:00
