ron c9a62acf31 A major overhaul of the http-enum.nse script: ... * Cleaned up and function-ized the code. Planning to move the functions to http.lua or similar to let other scripts (like http-userdir-enum.nse) use them. * Better support for different HTTP error codes * Significantly improved detection of 404 pages to prevent false positives. Some of the techniques used: - Request a non-existent page and check the status code - If it's 200, try to remove anything that may change (times, URI, filenames, etc), md5 it if ssl is available, and store it. Request a second 404 page and do the same. If they don't match, abort. - If it's any other error code, store it, and look for it in addition to 404 Not Found - Request the root folder, / - If it returns a 301 Move Permanently or 401 Authentication Required, abort * Abstracted the fingerprints into files in the nselib/data directory: - http-fingerprints: common files/folders - yokoso-fingerprints: common applications (from the Yokoso project, by InGuardians -- used under the Nmap license with pemission from Kevin Johnson -- http://seclists.org/nmap-dev/2009/q3/0685.html) * Added a script-arg that can display all output (except known 404s), instead of just 200 OK and 401 Authentication Required * Added a lot of debugging messages		2009-08-22 23:19:16 +00:00
..
asn-query.nse	Changed the handling of the values returned from dns.query() (changed in r14493)	2009-07-22 10:10:42 +00:00
auth-owners.nse	Use CRLF, not just LF, in auth-owners.nse. Send CRLF in the request and	2009-07-15 14:54:03 +00:00
auth-spoof.nse
banner.nse	Fixed banner.nse to remove surrounding whitespace in the banner.	2009-04-06 16:00:18 +00:00
daytime.nse	Now works for udp again. The port table has a "protocol" field, not "proto".	2009-03-13 03:41:28 +00:00
dns-random-srcport.nse
dns-random-txid.nse
dns-recursion.nse
dns-zone-transfer.nse	dns-zone-transfer.nse now accepts new syntax argument table	2009-07-05 10:01:10 +00:00
finger.nse
ftp-anon.nse
ftp-bounce.nse
ftp-brute.nse
html-title.nse	Changed the handling of the values returned from dns.query() (changed in r14493)	2009-07-22 10:12:17 +00:00
http-auth.nse
http-date.nse	In http-date.nse, don't pad the minutes with a 0 if there are no hours	2009-07-23 23:17:00 +00:00
http-enum.nse	A major overhaul of the http-enum.nse script:	2009-08-22 23:19:16 +00:00
http-iis-webdav-vuln.nse	Updated http-iis-webdav-vuln.nse: gives less output by default (unless -v or -d is given). Also updated it to reflect Microsoft's MS09-020 bulletin.	2009-06-11 21:57:42 +00:00
http-open-proxy.nse	Scripts now use fallback requests when valid codes are received but pattern was not found.	2009-07-30 02:08:55 +00:00
http-passwd.nse	wrap a couple of long doc lines	2009-03-30 20:35:38 +00:00
http-trace.nse	Fixing locals/globals on following scripts	2009-07-16 22:54:38 +00:00
http-userdir-enum.nse	Renamed apache-userdir-enum.nse to http-userdir-enum.nse to better indicate its	2009-08-22 22:04:32 +00:00
iax2-version.nse
imap-capabilities.nse	Adding the imap-capabilities script and supporting imap library.	2009-06-08 23:21:56 +00:00
irc-info.nse	Fixing locals/globals on following scripts	2009-07-16 22:54:38 +00:00
ms-sql-info.nse
mysql-info.nse	wrap a couple of long doc lines	2009-03-30 20:35:38 +00:00
nbstat.nse	Merge in changes from my private branch, primarily smb-brute.nse and smb-pwdump.nse, among other smaller changes.	2009-03-05 02:03:29 +00:00
p2p-conficker.nse	Further improvements to the output format. It now always prints the vuln table if an infection is found, but it no longer prints anything for clean machines unless verbosity is 2+	2009-06-04 19:39:24 +00:00
pjl-ready-message.nse	pjl-ready-message.nse: Add more error checking, shorten the output to	2009-07-16 23:24:42 +00:00
pop3-brute.nse	Remove unused and undeclared variable name "method".	2009-08-06 09:50:36 +00:00
pop3-capabilities.nse	Merged -r13793:HEAD from nmap-exp/dev/nmap branch now that we're opening up trunk development	2009-06-29 23:48:19 +00:00
pptp-version.nse
realvnc-auth-bypass.nse
robots.txt.nse	Fixing locals/globals on following scripts	2009-07-16 22:54:38 +00:00
rpcinfo.nse	Exit the script cleanly rather than throwing an error when attempting to	2009-08-08 01:51:32 +00:00
script.db	update script.db now that apache-userdir-enum has been renamed to http-userdir-enum	2009-08-22 22:31:40 +00:00
skypev2-version.nse
smb-brute.nse	Fix the indexing of Globals - found with the help of strict.lua	2009-07-17 22:34:27 +00:00
smb-check-vulns.nse	Cleaned up the output for smb-check-vulns.nse. Messages are no longer displayed by default if a vulnerability (or infection) isn't found. With -v, messages indicating a vulnerability was fixed or malware wasn't found are displayed. With -d, error messages are displayed.	2009-06-09 17:56:41 +00:00
smb-enum-domains.nse	Merge in changes from my private branch, primarily smb-brute.nse and smb-pwdump.nse, among other smaller changes.	2009-03-05 02:03:29 +00:00
smb-enum-processes.nse	Merged -r13793:HEAD from nmap-exp/dev/nmap branch now that we're opening up trunk development	2009-06-29 23:48:19 +00:00
smb-enum-sessions.nse	Merge in changes from my private branch, primarily smb-brute.nse and smb-pwdump.nse, among other smaller changes.	2009-03-05 02:03:29 +00:00
smb-enum-shares.nse	Merge in changes from my private branch, primarily smb-brute.nse and smb-pwdump.nse, among other smaller changes.	2009-03-05 02:03:29 +00:00
smb-enum-users.nse	Wrapped a long line	2009-03-11 14:13:17 +00:00
smb-os-discovery.nse	Merge in changes from my private branch, primarily smb-brute.nse and smb-pwdump.nse, among other smaller changes.	2009-03-05 02:03:29 +00:00
smb-pwdump.nse	Miscellaneous code cleanups in my smb-* libraries/scripts (removed unused includes, old debug code, etc.)	2009-06-10 23:13:15 +00:00
smb-security-mode.nse	Merge in changes from my private branch, primarily smb-brute.nse and smb-pwdump.nse, among other smaller changes.	2009-03-05 02:03:29 +00:00
smb-server-stats.nse	Cleaned up output of smb-server-stats.nse	2009-03-12 14:56:23 +00:00
smb-system-info.nse	Fix a typo in smb-system-info.nse.	2009-08-17 20:31:26 +00:00
smtp-commands.nse	Merged -r13793:HEAD from nmap-exp/dev/nmap branch now that we're opening up trunk development	2009-06-29 23:48:19 +00:00
smtp-open-relay.nse	Merged -r13793:HEAD from nmap-exp/dev/nmap branch now that we're opening up trunk development	2009-06-29 23:48:19 +00:00
smtp-strangeport.nse
sniffer-detect.nse	Removed packet.hextobin and packet.bintohex. Both are unnecessary	2009-05-28 03:59:02 +00:00
snmp-brute.nse	Prevent an error ocuring when --script-arg snmplist is not supplied.	2009-08-06 09:56:07 +00:00
snmp-sysdescr.nse
socks-open-proxy.nse	Scripts now use fallback requests when valid codes are received but pattern was not found.	2009-07-30 02:08:55 +00:00
sql-injection.nse	sql-injection with pipeline support and with two new arguments:	2009-08-12 01:46:46 +00:00
ssh-hostkey.nse	ssh-hostkey no longer looks for the action global which	2009-07-16 03:41:36 +00:00
sshv1.nse
ssl-cert.nse	Add the ssl-cert.nse script, which retrieves the server SSL certificate.	2009-08-13 23:38:05 +00:00
sslv2.nse
telnet-brute.nse	Fixing locals/globals on following scripts	2009-07-16 22:54:38 +00:00
upnp-info.nse
whois.nse	Fix the indexing of Globals - found with the help of strict.lua	2009-07-17 21:09:00 +00:00
x11-access.nse	Put x11-access in the "auth" category.	2009-08-08 20:06:38 +00:00