CERBERUS/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-09-21 15:46:45 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
Nmap - the Network Mapper. Github mirror of official SVN repository. https://svn.nmap.org/
8573 commits 5 branches 1 tag 570 MiB
Find a file
sophron 9561155701 Patch by nnposter that improves performance of http-default-accounts 
http://seclists.org/nmap-dev/2013/q3/346

For any given fingerprint from http-default-accounts-fingerprints
script http-default-accounts currently tests corresponding default
credentials if at least one  of the probe URLs succeeded, namely
returned with status other than 404.

Some web servers, such as Linksys devices, respond with HTTP/401 even
for non-existent URLs. This causes the script to assume that these URLs
do exist and to test the credentials, while ideally they should be
tested only on those servers where they make sense.

The purpose of the attached patches is to reduce unnecessary credential
guessing by implementing a new optional fingerprint element, function
target_check(), which takes some already collected target information,
including a probe URL response, and returns true or false, indicating
whether the credential guessing should be attempted or not.

All of the current fingerprints have been retrofitted with simple
target validations as follows:

* If the fingerprint uses native HTTP authentication, validate that the
target's realm matches the server type.

* If the fingerprint uses form-based authentication, validate that the
probe URL returned with HTTP/200 (as opposed to perhaps HTTP/401).

When testing against the above-mentioned Linksys the difference was
notable: 14 login attempts before the patch versus 1 attempt after the
patch.

This functionality provides opportunity for further improvement by
being able to match page content to differentiate between real HTTP/200
and a custom error page. (As of now the script completely skips targets
that return HTTP/200 for non-existent pages.)
2013-08-18 01:42:48 +00:00
docs Regen man pages 2013-08-17 20:09:25 +00:00
libdnet-stripped Fix rt_msghdr padding on NetBSD. 2013-06-01 16:28:44 +00:00
liblinear Use the default value of MultiThreadedDLL where possible. 2013-02-09 20:30:01 +00:00
liblua Upgrade 5.2.1 to 5.2.2. 2013-05-02 14:59:06 +00:00
libnetutil Make format string specifiers better match types. 2013-08-15 08:07:26 +00:00
libpcap
libpcre Use the default value of MultiThreadedDLL where possible. 2013-02-09 20:30:01 +00:00
macosx
mswin32 Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
nbase Fix the syntax error from the previous commit (tried to compile under Linux). 2013-08-09 17:16:48 +00:00
ncat Regen man pages 2013-08-17 20:09:25 +00:00
ndiff Regen man pages 2013-08-17 20:09:25 +00:00
nmap-update
nping Regen man pages 2013-08-17 20:09:25 +00:00
nselib Patch by nnposter that improves performance of http-default-accounts 2013-08-18 01:42:48 +00:00
nsock Windows compatibility fix. 2013-08-13 12:36:28 +00:00
scripts Patch by nnposter that improves performance of http-default-accounts 2013-08-18 01:42:48 +00:00
todo Add some Nsock proxy todos and note some done tasks 2013-08-17 20:13:00 +00:00
zenmap Remove the "" entry from search_keywords. 2013-07-31 21:12:51 +00:00
acinclude.m4
aclocal.m4
BSDmakefile
CHANGELOG Update --proxies docs 2013-08-17 20:09:03 +00:00
charpool.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
charpool.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
config.guess
config.sub
configure Remove COMPAT_SRCS and COMPAT_OBJS. 2013-05-13 04:21:11 +00:00
configure.ac Remove COMPAT_SRCS and COMPAT_OBJS. 2013-05-13 04:21:11 +00:00
COPYING Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
depcomp
FingerPrintResults.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
FingerPrintResults.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
FPEngine.cc Nsock-pcap cleanup 2013-07-31 19:11:16 +00:00
FPEngine.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
FPModel.cc IPv6 OS submissions from 20130614. 2013-07-16 00:51:47 +00:00
global_structures.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
HACKING Update some mailing list references. 2012-12-06 02:34:28 +00:00
idle_scan.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
idle_scan.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
INSTALL
ltmain.sh
MACLookup.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
MACLookup.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
main.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
Makefile.in Run ncat tests with "make check" too. 2013-05-18 19:22:33 +00:00
missing
nmap-header-template.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
nmap-mac-prefixes Update to the latest MAC address prefixes from IEEE, current as of just now 2013-07-17 16:39:22 +00:00
nmap-os-db Sort nmap-os-db 2013-08-17 00:39:44 +00:00
nmap-payloads TeamSpeak 3 version probe and UDP payload. 2013-08-05 23:52:55 +00:00
nmap-protocols Update nmap-protocols from IANA (5 additions) 2013-04-12 17:29:18 +00:00
nmap-rpc Update some more headers. 2012-12-06 02:25:46 +00:00
nmap-service-probes TeamSpeak 3 version probe and UDP payload. 2013-08-05 23:52:55 +00:00
nmap-services Name port 31727/tcp "diagd". 2013-07-03 04:30:43 +00:00
nmap.cc Update --proxies docs 2013-08-17 20:09:03 +00:00
nmap.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
nmap.spec.in
nmap_amigaos.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
nmap_config.h.in Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
nmap_dns.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
nmap_dns.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
nmap_error.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
nmap_error.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
nmap_tty.cc formatting 2013-08-06 21:41:09 +00:00
nmap_tty.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
nmap_winconfig.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
NmapOps.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
NmapOps.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
NmapOutputTable.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
NmapOutputTable.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
nse_binlib.cc
nse_binlib.h
nse_bit.cc
nse_bit.h
nse_debug.cc
nse_debug.h
nse_dnet.cc
nse_dnet.h
nse_fs.cc
nse_fs.h
nse_main.cc
nse_main.h
nse_main.lua With debugging, NSE prints out the script-args string and the pretty printed 2013-06-23 02:40:28 +00:00
nse_nmaplib.cc
nse_nmaplib.h
nse_nsock.cc Nsock-pcap cleanup 2013-07-31 19:11:16 +00:00
nse_nsock.h
nse_openssl.cc
nse_openssl.h
nse_pcrelib.cc
nse_pcrelib.h
nse_ssl_cert.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
nse_ssl_cert.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
nse_utility.cc
nse_utility.h Use a HAVE_STDINT_H guard. 2013-02-09 22:46:47 +00:00
osscan.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
osscan.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
osscan2.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
osscan2.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
output.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
output.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
payload.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
payload.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
portlist.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
portlist.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
portreasons.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
portreasons.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
protocols.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
protocols.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
README-WIN32
scan_engine.cc Match icmpid in icmp_probe_match. 2013-08-17 02:18:09 +00:00
scan_engine.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
service_scan.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
service_scan.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
services.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
services.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
shtool
struct_ip.h Update my email address in the places which had the old one 2012-12-10 01:34:21 +00:00
Target.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
Target.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
TargetGroup.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
TargetGroup.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
targets.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
targets.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
tcpip.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
tcpip.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
timing.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
timing.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
traceroute.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
traceroute.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
utils.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
utils.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
xml.cc Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
xml.h Update an email address, fix a typo, and slightly reword a sentence. 2013-07-30 00:02:00 +00:00
zenmap.spec.in

docs/README 

Here is some documentation for Nmap, but these files are much less
comprehensive than what you'll find at the actual Nmap documentation
site ( http://nmap.org ).