Nmap - the Network Mapper. Github mirror of official SVN repository. https://svn.nmap.org/
Find a file
david 5c85f224c0 Accuracy and speed improvements to irc-unrealircd-backdoor.nse. The main
problem was that the timer was including the time taken by the server to
do reverse-DNS resolution and an ident lookup, before it handled the
magic "AB" sleep command. So if a server took 10 seconds to time out the
ident lookup, the time recorded would be 10 seconds greater than it
should have been. If the timeout was long enough, as server would be
reported as vulnerable even if not. To compensate for this, the delay
was set high, but false positives were still possible and this slowed
down the script.

First, remove the mutex that allowed only one instance of the script to
run at a time. The mutex was meant to provide more accurate timing, but
it wasn't really needed because scritp parallelism wasn't the cause of
inaccuracy.

Next, make sure the server is done sending its initialization messages
(and hence is done with its timeouts) before sending the magic "AB"
sleep command and starting the timer. This is done by sending an
innocuous TIME command immediately upon connection. This is partly
because comm.tryssl has to send something, and partly because we can
detect when the server has processed the TIME command by looking for a
message like ":hostname 451 TIME :You have not registered". Once this is
done, we start the timer and send the "AB" command. If we haven't gotten
a response to TIME in 60 seconds, go ahead and send the "AB" command
anyway.

Finally, reduce the delay to 8 seconds from 25. The delay only has to be
long enough to overcome any network delay, now that confounding timeouts
have been eliminated. In a test of around 600 hosts, the only times I
recorded were 0, 1, 8, and 9 seconds, so this looks like a good enough
safety margin.
2010-07-01 00:11:59 +00:00
docs Add a section on generating and installing deb files from the RPMs using alien and dpkg on Debian/Ubuntu - thanks to Jason for posting details at http://seclists.org/nmap-dev/2010/q2/982 2010-06-30 05:08:36 +00:00
libdnet-stripped Document r17542 in NMAP_MODIFICATIONS. 2010-05-14 16:53:46 +00:00
liblua
libnetutil Revert r18424. This was mean to fix OpenBSD compilation but it broken on 2010-06-30 00:11:07 +00:00
libpcap o [libpcap] Added a --disable-packet-ring option to force the use of 2010-05-26 20:43:09 +00:00
libpcre Revert mistaken r17962. 2010-06-09 17:20:50 +00:00
macosx Use capital letters in package names. The Snow Leopard PackageMaker seems to 2010-03-07 05:36:26 +00:00
mswin32 Use lzma compression in the winpcap-nmap.nsi too. This reduces the size of the 2010-06-30 15:04:42 +00:00
ndiff regenerate the man pages 2010-05-28 07:14:41 +00:00
nselib Merge r18160:18278 from nmap-exp/djalal/nmap-nse/ to fix NSE not honoring the exclude directive bug. 2010-06-29 21:56:59 +00:00
scripts Accuracy and speed improvements to irc-unrealircd-backdoor.nse. The main 2010-07-01 00:11:59 +00:00
todo Moved a few items to the DONE section and fixed a few minor style and formatting issues 2010-06-30 16:00:11 +00:00
acinclude.m4 Add a check to see if the libpcap library needs and has a workaround for the 2010-04-20 23:22:48 +00:00
aclocal.m4 Add --enable-nls and --disable-nls options to configure. These are used 2009-11-05 19:50:33 +00:00
BSDmakefile Merged -r13793:HEAD from nmap-exp/dev/nmap branch now that we're opening up trunk development 2009-06-29 23:48:19 +00:00
CHANGELOG Add to CHANGELOG: 2010-06-30 15:38:19 +00:00
charpool.cc Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
charpool.h Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
config.guess Update config.sub and config.guess from 2009-08-19 01:16:21 +00:00
config.sub Update config.sub and config.guess from 2009-08-19 01:16:21 +00:00
configure Merged nmap-dedup branch from nmap-exp/luis/nmap-dedup. This completes the Nmap/Nping code de-duplication phase. 2010-06-22 17:24:34 +00:00
configure.ac Merged nmap-dedup branch from nmap-exp/luis/nmap-dedup. This completes the Nmap/Nping code de-duplication phase. 2010-06-22 17:24:34 +00:00
COPYING Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
COPYING.OpenSSL
depcomp
FingerPrintResults.cc Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
FingerPrintResults.h Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
global_structures.h Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
HACKING Fixed a couple of trivial errors 2010-05-23 17:42:44 +00:00
idle_scan.cc Merged nmap-dedup branch from nmap-exp/luis/nmap-dedup. This completes the Nmap/Nping code de-duplication phase. 2010-06-22 17:24:34 +00:00
idle_scan.h Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
INSTALL
ltmain.sh Update ltmain.sh to version 2.2.6 for libdnet. 2009-08-07 17:42:12 +00:00
MACLookup.cc Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
MACLookup.h Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
main.cc Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
Makefile.in Merged nmap-dedup branch from nmap-exp/luis/nmap-dedup. This completes the Nmap/Nping code de-duplication phase. 2010-06-22 17:24:34 +00:00
missing
nmap-header-template.cc Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
nmap-mac-prefixes Update nmap-mac-prefixes to include latest IEEE data 2010-06-30 22:14:12 +00:00
nmap-os-db Small updates to copyright headers in some files which don't have the headers automatically replaced 2010-05-24 23:52:34 +00:00
nmap-payloads Fix two discrepancies in the nmap-payloads compared to old payload.cc: 2010-05-25 18:35:48 +00:00
nmap-protocols
nmap-rpc
nmap-service-probes New and fixed nmap-service-probes probes from Matt Selsky. 2010-06-18 19:43:23 +00:00
nmap-services Small updates to copyright headers in some files which don't have the headers automatically replaced 2010-05-24 23:52:34 +00:00
nmap.cc Merged nmap-dedup branch from nmap-exp/luis/nmap-dedup. This completes the Nmap/Nping code de-duplication phase. 2010-06-22 17:24:34 +00:00
nmap.h remove unneeded OS_SCAN_DEFAULT #define (multi-gen support is long gone) 2010-05-06 23:00:09 +00:00
nmap.spec.in Try adding the 0. version number prefix to the nping RPM package. 2010-03-29 20:45:10 +00:00
nmap_amigaos.h Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
nmap_config.h.in Merged nmap-dedup branch from nmap-exp/luis/nmap-dedup. This completes the Nmap/Nping code de-duplication phase. 2010-06-22 17:24:34 +00:00
nmap_dns.cc Merged nmap-dedup branch from nmap-exp/luis/nmap-dedup. This completes the Nmap/Nping code de-duplication phase. 2010-06-22 17:24:34 +00:00
nmap_dns.h Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
nmap_error.cc Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
nmap_error.h Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
nmap_rpc.cc Merged nmap-dedup branch from nmap-exp/luis/nmap-dedup. This completes the Nmap/Nping code de-duplication phase. 2010-06-22 17:24:34 +00:00
nmap_rpc.h Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
nmap_tty.cc Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
nmap_tty.h Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
nmap_winconfig.h Move the WIN32 definition of __func__ from nmap_winconfig.h to nbase_winconfig.h. 2010-05-06 14:15:27 +00:00
NmapOps.cc Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
NmapOps.h Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
NmapOutputTable.cc Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
NmapOutputTable.h Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
nse_binlib.cc Updated uses of the ctype function to support explict casting of the arguments 2009-08-06 15:10:00 +00:00
nse_binlib.h
nse_bit.cc
nse_bit.h
nse_debug.cc
nse_debug.h
nse_fs.cc Merge r17640:18062 from /nmap-exp/djalal/nmap, this is a port of the LuaFileSystem directory iterator in order to use Lua code to list scripts. 2010-06-12 21:41:09 +00:00
nse_fs.h Merge r17640:18062 from /nmap-exp/djalal/nmap, this is a port of the LuaFileSystem directory iterator in order to use Lua code to list scripts. 2010-06-12 21:41:09 +00:00
nse_main.cc Merge r17640:18062 from /nmap-exp/djalal/nmap, this is a port of the LuaFileSystem directory iterator in order to use Lua code to list scripts. 2010-06-12 21:41:09 +00:00
nse_main.h Use a list instead of a vector for ScriptResults; it's 8 bytes instead 2009-12-20 03:29:35 +00:00
nse_main.lua Merge r17640:18062 from /nmap-exp/djalal/nmap, this is a port of the LuaFileSystem directory iterator in order to use Lua code to list scripts. 2010-06-12 21:41:09 +00:00
nse_nmaplib.cc Merge r18160:18278 from nmap-exp/djalal/nmap-nse/ to fix NSE not honoring the exclude directive bug. 2010-06-29 21:56:59 +00:00
nse_nmaplib.h Use defines for library names "nmap" and "stdnse.c" 2010-02-06 00:59:33 +00:00
nse_nsock.cc Merged nmap-dedup branch from nmap-exp/luis/nmap-dedup. This completes the Nmap/Nping code de-duplication phase. 2010-06-22 17:24:34 +00:00
nse_nsock.h Make some changes to nse_ssl_cert.cc for Windows compilation. 2009-08-14 04:44:19 +00:00
nse_openssl.cc Fix a problem in the changes to the openssl NSE library made in r17002 2010-03-28 21:18:02 +00:00
nse_openssl.h
nse_pcrelib.cc Fix a memory leak in nse_pcrelib.cc. A string was being copied with 2009-07-23 02:59:57 +00:00
nse_pcrelib.h
nse_ssl_cert.cc Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
nse_ssl_cert.h Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
osscan.cc Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
osscan.h Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
osscan2.cc Merged nmap-dedup branch from nmap-exp/luis/nmap-dedup. This completes the Nmap/Nping code de-duplication phase. 2010-06-22 17:24:34 +00:00
osscan2.h Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
output.cc Merged nmap-dedup branch from nmap-exp/luis/nmap-dedup. This completes the Nmap/Nping code de-duplication phase. 2010-06-22 17:24:34 +00:00
output.h Merged nmap-dedup branch from nmap-exp/luis/nmap-dedup. This completes the Nmap/Nping code de-duplication phase. 2010-06-22 17:24:34 +00:00
payload.cc just whitespace fixes 2010-06-15 18:02:05 +00:00
payload.h Merge Jay Fink's patch that puts UDP payloads in an external data file 2010-05-25 17:38:23 +00:00
portlist.cc Merged nmap-dedup branch from nmap-exp/luis/nmap-dedup. This completes the Nmap/Nping code de-duplication phase. 2010-06-22 17:24:34 +00:00
portlist.h Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
portreasons.cc Ports are now considered open during a SYN scan if a SYN packet (without the ACK 2010-06-08 01:50:45 +00:00
portreasons.h Ports are now considered open during a SYN scan if a SYN packet (without the ACK 2010-06-08 01:50:45 +00:00
protocols.cc Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
protocols.h Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
README-WIN32
scan_engine.cc Merged nmap-dedup branch from nmap-exp/luis/nmap-dedup. This completes the Nmap/Nping code de-duplication phase. 2010-06-22 17:24:34 +00:00
scan_engine.h Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
service_scan.cc Merge r18160:18278 from nmap-exp/djalal/nmap-nse/ to fix NSE not honoring the exclude directive bug. 2010-06-29 21:56:59 +00:00
service_scan.h Merge r18160:18278 from nmap-exp/djalal/nmap-nse/ to fix NSE not honoring the exclude directive bug. 2010-06-29 21:56:59 +00:00
services.cc Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
services.h Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
shtool
Target.cc Make const these methods of Target: 2010-06-07 22:09:37 +00:00
Target.h Merged nmap-dedup branch from nmap-exp/luis/nmap-dedup. This completes the Nmap/Nping code de-duplication phase. 2010-06-22 17:24:34 +00:00
TargetGroup.cc Fixed small format specifier error that caused a compiler warning 2010-06-22 17:47:32 +00:00
TargetGroup.h Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
targets.cc Check for target->deviceName == NULL in target_needs_new_hostgroup in 2010-06-25 05:34:08 +00:00
targets.h Merged nmap-dedup branch from nmap-exp/luis/nmap-dedup. This completes the Nmap/Nping code de-duplication phase. 2010-06-22 17:24:34 +00:00
tcpip.cc Merged nmap-dedup branch from nmap-exp/luis/nmap-dedup. This completes the Nmap/Nping code de-duplication phase. 2010-06-22 17:24:34 +00:00
tcpip.h Merged nmap-dedup branch from nmap-exp/luis/nmap-dedup. This completes the Nmap/Nping code de-duplication phase. 2010-06-22 17:24:34 +00:00
timing.cc Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
timing.h Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
traceroute.cc Merged nmap-dedup branch from nmap-exp/luis/nmap-dedup. This completes the Nmap/Nping code de-duplication phase. 2010-06-22 17:24:34 +00:00
traceroute.h Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
utils.cc Merged nmap-dedup branch from nmap-exp/luis/nmap-dedup. This completes the Nmap/Nping code de-duplication phase. 2010-06-22 17:24:34 +00:00
utils.h Merged nmap-dedup branch from nmap-exp/luis/nmap-dedup. This completes the Nmap/Nping code de-duplication phase. 2010-06-22 17:24:34 +00:00
xml.cc Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
xml.h Update copyright year from 2009 to 2010 2010-05-03 21:20:25 +00:00
zenmap.spec.in Cope with not having the pysqlite2 or sqlite3 modules in Zenmap by 2009-06-12 22:34:50 +00:00

Here is some documentation for Nmap, but these files are much less
comprehensive than what you'll find at the actual Nmap documentation
site ( http://nmap.org ).