Commit graph

2151 commits

Author SHA1 Message Date
nnposter
be802e321f Incorrect status variables were checked for errors. Closes #1504 2019-03-06 04:53:23 +00:00
dmiller
f519e64b1d Avoid matching ARP/ND response with probes sent after it was received. Fixes #863 2019-02-26 19:59:34 +00:00
nnposter
504e9d767e Mandatory use of square-bracket notation for literal IPv6 proxy address
Closes #1441
2019-02-23 23:23:47 +00:00
nnposter
dbed133fc5 Ability to control hostname resolution for ncat proxy destinations
Closes #1214, fixes #1230, closes #1439
2019-02-23 22:34:13 +00:00
nnposter
e006a18fa5 Prevent endless post-authentication looping when encountering SYST errors.
Closes #1478
2019-02-17 19:37:41 +00:00
tomsellers
75eed6799c New script to extract information from the Ubiquiti Discovery service and assist version detection. Closes #1457 2019-02-09 20:08:32 +00:00
tomsellers
5d5e11d8df Adds probe and matches for Ubiquiti Discovery Protocol. Closes #1454 2019-02-09 19:49:15 +00:00
paulino
96448ae5d4 Removes hostmap-ip2hosts as the service will be shut down soon. 2019-01-31 23:28:00 +00:00
paulino
1a2c506c5b Adds entry for tn3270 and enip-info updates 2019-01-08 21:44:11 +00:00
nnposter
25db5fbb0d Increases ncat temporary RSA key size to 2048 bits
This resolves a compatibility issue with OpenSSL library configured with
security level 2, as seen on current Debian or Kali. Closes #1310, closes #1409
2018-12-20 02:04:02 +00:00
nnposter
fc3c9159be Adds searching by fingerprint name 2018-12-18 17:30:30 +00:00
dmiller
6d420e82b2 Changelog for #1227 2018-12-02 05:54:58 +00:00
dmiller
bff7dcad4e Avoid crashing when PATH contains non-ascii/utf-8. Decode if possible 2018-11-15 16:23:32 +00:00
dmiller
adfc39f4f3 Fix crash when using dir: operator 2018-11-15 05:03:46 +00:00
dmiller
86d1f7e66e Don't quit on ERROR_IO_INCOMPLETE. Closes #1372 2018-10-26 20:50:58 +00:00
dmiller
d03b10ea36 Deprecate/disable -PR option as it was not really being checked.
Fixes #1361
2018-10-24 03:55:42 +00:00
paulino
de2b08e27a Adds http-sap-netweaver-leak to detect SAP instances with the Knowledge Management unit enabled with anonymous access. Closes #1243. 2018-10-19 05:00:46 +00:00
dmiller
0500811f5a Move string utility functions to stringaux.lua 2018-10-18 01:08:19 +00:00
dmiller
93edeefa3c Fix false positive in http-phpmyadmin-dir-traversal. Closes #1359 2018-10-17 20:21:05 +00:00
dmiller
dcc0e3ed7e New tableaux library containing table auxiliary functions. 2018-10-17 15:34:30 +00:00
dmiller
a0f55317f3 Fix inclusion of Lua headers. See #1355
We will need to do something similar for Ncat.
2018-10-16 05:18:31 +00:00
nnposter
74f1b37ff2 Adds protection against incomplete GeoPlugin results, such as 92.123.145.37. Fixes #1331 2018-10-09 00:15:07 +00:00
dmiller
466bf8ff65 Limit -v and -d to 10 max. 2018-10-08 20:49:20 +00:00
dmiller
e48361523b Fix the check for pcap_set_immediate_mode, which was failing every time. 2018-10-04 17:35:53 +00:00
fyodor
b3cece27e0 Update Npcap URL to new SSL version 2018-09-28 23:42:55 +00:00
dmiller
173a99ede4 Officially deprecate bin.lua. 2018-09-24 17:31:21 +00:00
dmiller
ceb4e2dd71 Upgrade lowest-offered proto version to TLSv1.0. See ssl-ccs-injection for example 2018-09-14 20:13:53 +00:00
dmiller
8c8f0fbf7c Be more strict to avoid false positives in ssl-ccs-injection. Fixes #1322 2018-09-14 20:13:53 +00:00
dmiller
b34e05d4fb Move common code to knx.lua, remove bin.lua dependency 2018-09-03 19:38:01 +00:00
dmiller
1f00f2fa05 Simplify backorifice crypt function, remove bin.lua packing. 2018-09-02 20:51:05 +00:00
fyodor
baef3f9b05 Added a CHANGELOG entry for David's Nmap birthday ordinal fix 2018-09-01 21:24:25 +00:00
dmiller
b222a0d7ee Remove bit.lua 2018-08-28 15:56:47 +00:00
dmiller
d6a04c465e Call pcap_set_immediate_mode to get results back immediately. 2018-08-21 04:51:33 +00:00
nnposter
834e37d475 Adds previously dropped GH reference 2018-08-14 22:29:12 +00:00
dmiller
d8ff55b72e Start timeout clocks closer to first probe, not in batches. Closes #1150 2018-08-13 19:24:06 +00:00
dmiller
0a0e9c4433 Changelog entry for #1147, #1108, CVE-2018-15173 2018-08-13 17:18:48 +00:00
nnposter
6353292c9f Re-wraps overly long line 2018-08-05 20:38:12 +00:00
nnposter
6c848f1c85 Improves compliance with RFC 7871 by properly zeroing out insignificant bits
and discarding insignificant octets.
2018-07-29 01:42:19 +00:00
nnposter
2e08baefd4 Replaces original experimental DNS ECS option code
with value prescribed by RFC 7871. Closes #1271
2018-07-28 23:06:27 +00:00
dmiller
f31ef12ca3 Fix ncat -e --ssl on Windows. Fixes #1267, #1274 2018-07-23 04:56:56 +00:00
dmiller
d95bc032c6 Upgrade libpcap to 1.8.1 2018-07-18 13:41:40 +00:00
nnposter
78601bc7c3 Rectifies a recently introduced bug that impacted fingerprint loading.
Incorrect registry entry was tested for cached fingerprints, which was
preventing the script to run against more than one target host/port.
2018-07-15 23:14:04 +00:00
dmiller
5318e42481 New script-arg http.host to force a particular Host header. Closes #1251 2018-07-12 03:43:11 +00:00
dmiller
33f0f050cf Use smtp.get_domain instead of example.com for STARTTLS. Closes #1258 2018-07-11 04:12:00 +00:00
dmiller
baed30beed Changelog entry for #1233 fix 2018-07-10 14:23:13 +00:00
dmiller
6e5e9478f2 Handle error condition. Closes #1254 2018-06-28 13:40:29 +00:00
dmiller
cd3253f5a2 New script, https-redirect 2018-06-28 03:43:27 +00:00
paulino
1335a19d7f Adds broadcast-jenkins-discover to discover Jenkins servers. Closes #1236 2018-06-23 19:46:51 +00:00
paulino
dc888d0918 Adds broadcast-hid-discoveryd to discover HID devices on a LAN by sending a discoveryd network broadcast probe. Closes #1232 2018-06-23 19:11:30 +00:00
nnposter
f6790a865e Allows HTTP response status lines without a reason phrase. RFC 7230,
section 3.1.2, syntactically requires its presence but prescribes that
clients should ignore it regardless. Some real-world servers do not
use it so NSE could not interact with them without this change.
2018-06-18 20:57:43 +00:00