master
Update http urls for nmap.org to https
Label the function as intentionally empty See https://seclists.org/nmap-dev/2021/q1/31
Speed improvement for script afp-ls. Closes #2098
Move comma-separated list code to outlib
Use BruteSocket in a bunch of brute scripts
Fix wrong library typo
Move string utility functions to stringaux.lua
Convert more bin.lua packings
Add 's' service names to portrules
more efficient match, avoiding strings
Fix a typo from debugging.
Fix a typo: modify the correct variable
Simplify backorifice crypt function, remove bin.lua packing.
Change explicit X==false to not X
Move in_port_range to shortport.port_range, expand portnumber to match ranges
Move date/time functions from stdnse to datetime. See #517
Remove some unused requires
Check torrent/magnet parsing result
Remove many ERROR outputs from non-debug NSE output
Remove redundant code, already part of Frame:new()
Enable IPv6 capability for broadcast-bjnp-discover
Resolves ether_type incompatibility in packet.Frame Frame:new() was populating the value as a 16-bit integer while Frame:build_ether_frame() was expectng a two-byte string Ethertype constants from various locations have been migrated to packet.lua
Use stdnse.get_script_interfaces() for all relevant scripts
Update dnssd.lua and related scripts
Check for parsing errors from Packet:new()
Move stdnse.generate_random_string to new rand.lua
Remove nearly all bit.lua use
Change explicit X==true to X
Change more bin lib to string packing/fromhex. Closes #755. Closes #769
Fix a packet check: command should be Response, need 'or' not 'and'
Remove bin.lua unpacking from more scripts
Update upnp-info: structured output, correct targets added, etc.
Change a few more bin.pack to string.pack
Don't use 1ms timeout for writes. Actual time can be >100ms because of NSE overhead
Remove bin.lua from a couple more scripts
Remove unused NSE library requires
Updates TN3270.lua and scripts. It also adds an argument to disable TN3270. Closes #1455
Remove unused requires
Remove bin.lua packing from more scripts
port_or_service takes 2 args, not a table. Fixes #1748
Remove an unused include [ci skip]
Remove unused socket connect/close from ipp.Helper. Close #3245
New oops.lua library
Fix spelling of "endianness". Closes #2850
Credential object is creds.Account, not brute.Account. See #2086
Add support for DHCP client identifier see https://datatracker.ietf.org/doc/html/rfc2132#section-9.14 Closes #2468
fix license url: http -> https
Removes OSVDB references from scripts. Closes #1534 Code specific to OSVDB in vulns.lua is retained for historical reasons
Add or fix See Also links between scripts
Replaces original experimental DNS ECS option code with value prescribed by RFC 7871. Closes #1271
Simplifies packet-mangling routines, fixes a few one-off bugs
Fix misplaced parentheses. Closes #2544
Update default-category scripts to use bitwise operators instead of bit.lua
Use SOA request to get domain name in dns-zone-transfer. Fixes #3014
NSE: added output to docker-version.nse
Use simpler/cheaper portrule
Fix some swapped return values
Remove unneeded retries around send/receive_buf(numbytes) left from when different behavior was used
Remove an unneeded very verbose debug statement.
Make sure to use version_intensity checks for version category scripts
Avoid empty script output
Keep a local function local
Check for a prefix, not a substring, and trivial cosmetics
Disable Robtex NSE scripts due to API changes.
NSEdoc fixes and cross-references
Update some urls to https
Add cross references for several scripts
Provides a common function, url.get_default_port(), for obtaining the default port number for a given scheme. Fixes #781
Adds script http-bigip-cookie. Closes #892
Check for non-404 file nonexistence responses in http-config-backup
Add some cross-references to NSEdoc for recent scripts
Refresh script http-default-accounts. Close #3327
Simplify code by using random_alpha
Avoid clobbering ignore_404 and severity values in http-enum. Closes #1467
Add a todo comment. Closes #552
Return NOT_VULN report instead of 'false' in http-frontpage-login
Document some undocumented script-args.
Fix some NSEdoc using the wrong script names
Streamline Luhn checksum code Removes various floating-point hazards. Fixes #1931, closes #1932
Clean up response matching and avoid requiring string lib
Change some http scripts to use host table instead of IP in requests
Add the option to preload stdnse.make_buffer with data. Close #3253
Do not include whitespace in the size string
Remove unused ip param from smbauth functions. Fixes #268
Canonicalize authors as tables instead of comma-separated strings
Fix false positive in http-phpmyadmin-dir-traversal. Closes #1359
Merge branch 'nse-lua53'
Fix some nonstandard NSEdoc
Corrects a typo. Closes #1816
http-server-header: interfere less with -sV results, especially softmatches
Fix line wrapping
Use a legit HTTP probe for detecting SSL in http-slowloris and -check
Note a potential enhancement. Closes #63
Removes unused dependencies from all files in scripts folder.
Cross-reference http-unsafe-output-escaping as relating to XSS scripts
Fixes bug that prevented the script to generate a vulnerability report. Closes #1220
NSE: Prevent http.identify_404 from following HTTP redirects, standardize calls to it. Closes #251
Let ssl-cert grab certs from DTLS services. Fix rules for TCP-only scripts
Correct function name for rand.random.alpha. Closes #1449
Add needed service name to portrule. Fixes #1066
Added http-vuln-cve2017-8917.nse. Closes #916
Report and record recovered creds in http-vuln-wnr1000-creds
Fix /author/.../feed/ capture in http-wordpress-users.nse.
Avoid a crash by making sure response *has* a location header
Add iec-identify script
Add 4 scripts from the DINA Community
More output from ike-version
New script impress-remote-discover. Closes #713
Consolidate some error handling, standardize geoip coordinates, fix output bugs. Fixes #1744
Fix some bad patterns with excessive backtracking
Refactor IP ID capture loop. Fixes #2464 Rectify use of inaccessible library function packet.u16, incidentally introduced in r38135 (041838d)
Update more source links to https
Check more common IRC ports by default. Send SSL probes to ircs ports. See #941
Fix some http->https urls
Remove bin.lua calls from some scripts and libraries
Correct packet size testing in KNX scripts. Fixes #2727, fixes #2728
Remove bin.lua from more scripts
Fix error in ldap-brute: 'no string output'
Add missing require
Do not return empty table as a result. Close #3325.
New scripts and probes for winbox service. Closes #2973
Fix NSE hangs when service sends non-matching data to receive_buf
Updates execution rule to include alternate ports. Closes #1565
Oops! Missed the actual script. #352
Change how ms-sql NSE scripts run
Fix a typo in calling stdnse.format_ouptut(). See #2622
Fix a typo: did not update loop variable.
Default rule base for script mysql-audit. See #2125
Check for correct schema. Fixes #2221
Removes default timeout value of 5s as there are reports (and it makes sense) that this default value is too short for some environments. Now the default timeout for sockets is used. Closes #1312
Fix up NSEdoc for NAT-PMP scripts and add cross references.
Add script nbns-interfaces. Closes #2201
NDMP fixes. Closes #930
Improved debugging/output for NFS scripts
Remove bin.lua from the last of the NSE scripts (libraries still use it)
Remove bin.lua from a few more scripts
Remove various "the the" repeats. Closes #2804
Add openflow-info.nse. Closes #711
Convert test data in comment to assertion checks
Propagate unpwdb errors to script output. Fixes #2011
Change PJL command termination from LF to CR/LF The PJL specification (HP publication 5021-0380) makes the CR optional but apparently it is required by some implementations. Fixes #2182
Avoid testing invalid usernames
New script port-states expands hidden port state summaries
Use string unpack instead of string.byte
Fix some missing requires, globals, whitespace
add missing local
Add NSE script rdp-ntlm-info. Closes #1633
Better socket error handling in rdp-vuln-ms12-020
Check for RealVNC auth bypass even if other auth types are offered
Improve parsing of CLUSTER NODES responses - Avoid crash due to potentially unrecognized format - Fix parsing of node flags, which may contain non-alphabetic characters Example: "failed?" - Fix parsing of field ip:port@cport - Add support for IPv6 nodes - Remove parsing of unused node ID field
Note that resolveall.nse is replaced by --resolve-all option [ci skip]
Use the correct the port range, 512-1023, not 513-1024. Detect if binding a socket to a given port failed and retry. Close #3196
Align portrule with script rmi-dumpregistry. Closes #1531
Fix a crash in rpc-grind when scanning a non-RPC service
Support RPCBIND 3 and 4, not only portmap 2. See #1469
Bump version to 7.991SVN
New shodan-api script for querying Shodan internet scan data
Correct typos: receive, successfully, length
Prevent smb-flood from using all sockets. Fixes #947
Avoid traversing dot and dot-dot directories
SMB2 dialect refactoring. Fixes #2203, closes #2208
Improve output formatting - EHLO output no longer has a trailing separator - Strings "214" and "250" are now removed only from the line beginning
SNMP scripts are enabled on non-standard ports. See #1473
Ability to set SNMP protocol version. Closes #1473
Handle libssh2 errors on connect. Closes #2616. Fixes #1014
ssh-brute: enable keyboard-interactive auth if necessary
Fix error when comm.opencon fails and banner is an oops object
ssh-run: enable keyboard-interactive auth if needed
Update the SSH protocol flow. Closes #1460 Allows the server to start the key exchange before the protocol version exchange (banner exchange) is completed
New, broader portrule for SSH scripts. Closes #1825
Add SHA-256 fingerprint, refresh documentation. Closes #2978
Fix some scoring/detection for TLSv1.3 in ssl-enum-ciphers
Updates category in NSE scripts. Closes #728. Fixes #726. Patch provided by Varunram.
Add targets-ipv6-eui64 script
Reintegrate Nmap 7.99 release branch
Make some broadcast scripts 'safe' category
Add targets-xml for inputting targets from Nmap XML files
Fix some incorrect conversions from bin to string unpacking
New script tftp-version. Closes #548
Update ALPN names
Fix tor-consensus-checker, several issues.
Adds protection against incomplete GeoPlugin results, such as 92.123.145.37. Fixes #1331
New script to extract information from the Ubiquiti Discovery service and assist version detection. Closes #1457
New script uptime-agent-info
New script vmware-version
Use BruteSocket for vnc-brute
Support ATEN/Supermicro KVM VNC
Fix a couple NSEdoc cross-refs (requires '.nse')
Remove bin.lua from vuzedht.lua, support IPv6 addresses properly
NSEdoc fixes
Add cross references between the 2 whois scripts