CERBERUS/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-10-21 11:22:05 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
7164 commits 6 branches 2 tags 596 MiB
Commit graph

1469 commits

Author SHA1 Message Date
perdo
e41d4a4e7e Added http-sitemap-generator script which spiders a webserver and displays its directory structure along with number and types of files in each folder. 2012-07-01 09:55:47 +00:00
aca
4030bf6c1a Added metasploit-msgrpc-brute to trunk 2012-06-30 12:02:54 +00:00
kroosec
95f7d0d74a Added firewall-bypass script. 2012-06-30 09:42:12 +00:00
david
6a3295143e Reduced Port size two thirds, not one third. 2012-06-30 02:01:00 +00:00
sean
b8d65571b5 Moved my last change from the bottom to the top 2012-06-30 01:51:41 +00:00
sean
5c602916b8 Updated the changelog 2012-06-30 01:48:05 +00:00
kroosec
886f64f1f9 Typo in changelog. 2012-06-27 15:46:00 +00:00
fyodor
5826ebbc4c Removed some instances of '<' and '>' in the CHANGELOG to avoid HTML escaping problems on pages such as http://nmap.org/changelog.html. This is actually a pretty lame solution. First of all, things like XML output examples are best shown using angle brackets. Second, there are still other angle brackets in the file. It would probably be better to fix the changelog.html to handle the escaping or to create an escaped version automatically. But, for now, I'm choosing the easy but short-term fix 2012-06-26 10:05:45 +00:00
david
3e50107f23 Use less memory for ip_addr in port_reason. 
This was a sockaddr_storage, which is 128 bytes. This is a lot for a
structure that is part of Port. It is now a union of sockaddr_in and
sockaddr_in6, which is 28 bytes. A new set_ip_addr method sets the union
from a sockaddr_storage, where plain assignment was used before.

The sockaddr_storage was introduced in r23778, the first big IPv6 merge.
 2012-06-26 03:23:14 +00:00
kroosec
98a68b7407 Added default values for Expires, Call-ID, Allow and Content-Length headers in SIP requests and removed redundant code. 2012-06-22 12:17:55 +00:00
david
2404fc7d64 Return nil and an error message when a socket is not connected. 
Daniel Miller noticed that the behavior of socket functions didn't match
the documentation when a socket was not connected. The code would raise
a Lua error (ending the script) instead of returning a false status code
as documented.

http://seclists.org/nmap-dev/2011/q3/840
http://seclists.org/nmap-dev/2012/q2/505
 2012-06-21 03:11:17 +00:00
david
360ba052e9 AUTH_UNIX support for rpc.lua. 
http://seclists.org/nmap-dev/2012/q2/54

This patch is from Daniel Miller. He writes:

I've just finished enhancing the nfs-ls, nfs-statfs, and nfs-showmount
scripts so that they can run based on version detection information,
for cases where the portmapper is firewalled. For nfs-ls and
nfs-statfs, this required making a hostrule to check that both a
mountd service and a nfs service were detected. In the process, I
ended up adding the AUTH_UNIX flavor to rpc.lua, since the RFC states
that AUTH_NULL can only be used for the NULL procedure (and my Linux
nfs-kernel-server was enforcing that).

Other minor changes:

* If running privileged, attempt to bind to a reserved port. Many NFS
servers refuse to talk to source ports >1024, as a "security measure"
* handle an odd case in nfs-ls where READDIRPLUS does not return file
attributes. Chose to use all ?'s, but in the future maybe a direct
GETATTR call?
* remove reference to nfs.dirlist argument from nfs-ls doc, since it is unused
 2012-06-20 02:12:58 +00:00
david
be24e6d5c4 Catch exceptions when running a sub-Nmap in the profile editor. 2012-06-19 17:10:58 +00:00
david
7f5d53184c Uniform handling of makefile.dep in makefiles. 
"make clean" keeps makefile.dep and "make distclean" deletes it. This
patch is by Michael McTiernan.

http://seclists.org/nmap-dev/2012/q2/827
 2012-06-19 14:06:49 +00:00
david
a9a621f5bd Make ncat --output logging work in UDP mode. 2012-06-19 02:52:57 +00:00
aca
7e47c6507d Added pcanywhere-brute script 2012-06-18 18:16:50 +00:00
fyodor
5fd8b52973 Just made the Nmap 6.01 release -- note the changes which made it into the release (we cherry picked the most important) 2012-06-16 19:39:41 +00:00
perdo
b10119bd9f Added http-rfi-spider script that spiders webservers in search of RFI vulnerabilities. 2012-06-15 22:37:33 +00:00
fyodor
6fc2e38aa3 Note Python update for the next version of our Windows build 2012-06-14 01:56:02 +00:00
david
0cffea7238 Add CHANGELOG entries for Zenmap host filter crash and OS X 10.7 hang. 2012-06-14 01:18:42 +00:00
paulino
d4a093e6de Adds entry about mysql-vuln-cve2012-2122 2012-06-13 06:11:45 +00:00
aca
f747ad8084 removed .exe, added info to Changelog 2012-06-12 20:33:34 +00:00
kroosec
d8ccfa31a6 Added the script http-waf-fingerprint which tries to detect the presence of a web application firewall and its type and version. 2012-06-12 10:41:19 +00:00
patrik
71e26189f6 o [NSE] More Windows 7 and Windows 2008 fixes for the smb library and smb-ls 
scripts. [Patrik Karlsson]
 2012-06-10 22:40:02 +00:00
patrik
bc0defc8ff o [NSE] Added SPNEGO authentication supporting Windows 7 and Windows 2008 to 
the smb library. [Patrik Karlsson]
 2012-06-09 12:17:01 +00:00
david
5a66f5710a CHANGELOG for get_srcaddr fix. 2012-06-08 00:07:11 +00:00
fyodor
1f8c689ea1 o [NSE] Changed http-brute so that it works against the root path 
("/") by default rather than always requiring the http-brute.path
  script argument.

I also upgraded it to use get_script_args function rather than access registry.args directly
 2012-06-04 19:49:21 +00:00
patrik
b683234f45 o [NSE] Applied patch from Daniel Miller that fixes bug in several scripts and 
libraries http://seclists.org/nmap-dev/2012/q2/593 [Daniel Miller]
 2012-06-04 04:37:29 +00:00
patrik
0372cf9e7a o [NSE] Added the script smb-ls that lists files on SMB shares and produces 
output similar to the dir command on Windows. [Patrik Karlsson]
 2012-06-03 18:10:49 +00:00
djalal
8e7edbd008 o Fixed a bug that caused Nmap to fail to find any network interface when 
at least one of them is in the monitor mode. The fix was to define the
  ARP_HRD_IEEE80211_RADIOTAP 802.11 radiotap header identifier in the
  libdnet-stripped code. Network interfaces that are in this mode are used
  by radiotap for 802.11 frame injection and reception. The bug was
  reported by Tom Eichstaedt and Henri Doreau.
  http://seclists.org/nmap-dev/2012/q2/449
  http://seclists.org/nmap-dev/2012/q2/478
  [Djalal Harouni, Henri Doreau]
 2012-06-02 19:35:08 +00:00
fyodor
eeda7cef0e Merged Nmap 6.00 release into CHANGELOG 2012-05-30 21:54:25 +00:00
david
0a334c1237 Add Italian Zenmap translation by Francesco Tombolini. 
http://seclists.org/nmap-dev/2012/q2/550
 2012-05-30 05:07:46 +00:00
patrik
6da1b367a5 o [NSE] Added the script eppc-enum-processes that enumerates active 
applications, their PID and the UID under which they run through the Apple
  Remote Event protocol. [Patrik Karlsson]
 2012-05-29 18:25:49 +00:00
patrik
3d7250ecc4 o [NSE] Added the Internet Storage Name Service (iSNS) library and the 
isns-info script that lists information about portals and iSCSI devices.
  [Patrik Karlsson]
 2012-05-29 18:02:19 +00:00
aca
ba67aa5993 Commited rmi-vuln-classloader script 2012-05-28 18:04:28 +00:00
aca
a839e69449 Rewrote mysql-brute to use brute library 2012-05-25 17:57:04 +00:00
jah
f116a4133a Added entry for r28658. 2012-05-22 21:08:45 +00:00
david
7cd074f02e Add Japanese Zenmap translation by Yuji Tounai a.k.a. Yousuke Yamamoto. 2012-05-22 19:52:38 +00:00
patrik
61501038d2 o [NSE] Added the script icap-info, which tries to identify common ICAP 
service names and list service and tag information. [Patrik Karlsson]
 2012-05-22 18:34:25 +00:00
kroosec
855bdbd289 Added http-traceroute script which exploits Max-Forwards HTTP header to detect reverse proxies. 2012-05-20 15:42:33 +00:00
patrik
322ed971a2 o Added the script distcc-CVE-2004-2687 that checks and exploits a remote 
command execution vulnerability in distcc. [Patrik Karlsson]
 2012-05-19 17:39:53 +00:00
patrik
af950450b7 o Added two new scripts mysql-query and mysql-dump-hashes, which add support 
for performing custom MySQL queries and dump MySQL password hashes. [Patrik
  Karlsson]
 2012-05-19 17:33:41 +00:00
patrik
425ced35ab o Improved the mysql library to handle multiple columns with the same name, 
added a formatResultset function to format a query response to a table
  suitable for script output. [Patrik Karlsson]
 2012-05-19 12:23:41 +00:00
fyodor
660cb42825 fix a tiny typo 2012-05-19 08:37:25 +00:00
david
70d728ffcf Make "failed to determine route" a warning, not a fatal error. 2012-05-16 23:50:03 +00:00
fyodor
0e73946e9b Add an entry about our awesome Summer of Code team 2012-05-16 07:57:16 +00:00
kroosec
1baf0077b0 CHANGELOG for http-drupal-modules.nse 2012-05-16 00:18:57 +00:00
david
ab293593f1 CHANGELOG for http-vuln-cve2012-1823.nse. 2012-05-15 00:08:32 +00:00
patrik
60c62a3514 o [NSE] Added the script dict-info, which retrieves information from a 
DICT server, by issuing the SHOW SERVER command. [Patrik Karlsson]
 2012-05-14 21:37:39 +00:00
patrik
b1fa1f567c o [NSE] Added the script gkrellm-info, which displays information retrieved 
from the GKRellm monitoring service. [Patrik Karlsson]
 2012-05-14 21:34:01 +00:00