| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
| |
+ updated fingerprint database
+ multi-portlist -- specify different ranges for TCP & UDP
|
| |
|
| |
|
|
|
|
|
|
|
|
|
| |
The coolest feature is a new scan type -- Idlescan!
The quick synopsis is that this is a completely blind scan (meaning no
packets are sent to the target from your real IP address). Instead, a
unique side-channel attack exploits predictable "IP fragmentation ID"
sequence generation on the zombie host to glean information about the
open ports on the target.
|
|
|
|
|
|
|
|
|
| |
-- Added a whole bunch of new OS fingerprints (and adjustments)
ranging from big important ones (Linux 2.4.X, OpenBSD 2.9, FreeBSD
4.3, Cisco 12.2.1, MacOS X, etc) to some that are more obscure (
such as Apple Color LaserWriter 12/660 PS and VirtualAccess
LinxpeedPro 120 )
-- Tweaked TCP Timestamp and IP.ID sequence classification algorithms
|
|
|
|
|
|
| |
+ fixes a problem that kept UDP RPC scanning from working unless you were
also doing a TCP scan.
+ updated to latest version of rpc program number list
|
| |
|
| |
|
|
|
|
| |
Submitted by: steve
|
|
|
|
| |
this version's sources.
|
| |
|
|
|
|
|
| |
doing an upgrade. This patch does not fix a bug, takes away the original
author's right to free speach, and we have no technical reason to patch.
|
|
|
|
| |
the Porter's Handbook. :-)
|
|
|
|
| |
(fix commenting bug that caused major problems for some non-gcc users)
|
|
|
|
| |
[fixes minor typos in 2.51]
|
|
|
|
|
| |
2.51 fixes a target parsing bug which could in some cases cause Nmap to
crash with the error "Assertion `t->nleft > 1' failed".
|
| |
|
| |
|
| |
|
|
|
|
|
| |
* Fixed a very important bug that occurred when SYN scanning localhost.
* Fixed "-vv" to mean "-v -v" as it did in previous versions.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Added ACK scanning. This scan technique is great for testing firewall
rulesets. It can NOT find open ports, but it can distinguish between
filtered/unfilterd by sending an ACK packet to each port and waiting for
a RST to come back. Filtered ports will not send back a RST (or will
send ICMP unreachables). This scan type is activated with -sA .
* Documented the Window scan (-sW)
* "Protocol" field in output eliminated. It is now printed right
next to the number (/etc/services style). Like "22/tcp".
* Added --resume option to continue a large network scan where you left off.
It also allows you to start and stop for policy reasons
|
| |
|
| |
|
| |
|
|
|
|
| |
Submitted by: David McNett <nugget@slacker.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Among bug fixes, we have the new skript kiddie output mode! Try it out by
adding "-oS - " to your nmap command line:
amy# nmap -sS -oS - -O -v vectra
$TartInG nmap V. 2.3B3tA14 bY fy0D0r@!n$ecure.org ( www.ins3cuR3.0Rg/nmap/)
!nt3r3$t|nG pOrtz On v3cTrA.yuma.nEt (192.168.0.5):
P0rt $tate PrOtOc0L $3rv!c3
13 Op3n tCp Dayt|m3
22 0pEn Tcp $SH
23 open tcp tEln3t
79 op3N tcp f!ng3r
513 0peN Tcp lOgIn
514 OpEn tcp $h3ll
TcP S3QuEncE PReDiCtion: ClA$s=random p0$|TivE incr3m3nts
DIffIculty=24696 (WorthY Challeng3)
s3quEnce numb3rz: 61B825b7 61b83793 61B88114 61b8B073 61B90DB2 61BA306B
R3m0t3 operAtInG sy$t3m gue$z: OpeNBSD 2.2 - 2.3
NMAP run c0mpleteD -- 1 IP adDR3ss (1 h0sT up) $CAnNed in 1 SEC0nd
|
| |
|
| |
|
|
|
|
| |
Submitted by: taguchi@tohoku.iij.ad.jp
|
|
|
|
| |
This speeds up OS scans.
|
|
|
|
|
|
|
|
|
|
|
| |
* Added "firewall mode" timing optimizations which can decrease the
amount of time neccessary to SYN or connect scan some heavily filtered
hosts.
* Changed "TCP Ping" to use a random ACK value rather than 0 (an IDS
called Snort was using this to detect Nmap TCP pings).
* better FDDI support
* changes which should lead to tremendous speedups against some firewalled
hosts.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Added sophisticated timing controls to give the user much more control
over Nmap's speed. This allows you to make Nmap much more aggressive to
scan hosts faster, or you can make Nmap more "polite" -- slower but less
likely to wreak havoc on your Network. You can even enforce large delays
between sending packets to sneak under IDS thresholds and prevent
detection. See the new "Timing Options" section of the Nmap man page for
more information on using this.
* New "Window scan" that does fun things with ACK packets. -sW activates
this scan type. It is mostly effective against BSD, AIX, Digital UNIX, and
various older HP/UX, SunOS, and VAX.
|
| |
|
|
|
|
|
| |
This includes new RPC scanning ability & 100's of new OS fingerprints.
The machine parseable output has been cleaned up and made more regular.
|
| |
|
|
|
|
|
|
| |
limited path.
Bug reported by: Andre Albsmeier <andre.albsmeier@mchp.siemens.de>
|
|
|
|
| |
simplifies the running of nmap for the point and shoot crowd.
|
|
|
|
|
|
|
|
|
|
|
|
| |
[Has anyone figured-out what makes the number 393 so interesting to PW, now?]
I wonder what was going through Jordan's head during his infamous
$Id$-smashing commit.
Before I forget....
Thanks to naddy@mips.rhein-neckar.de (Christian Weisgerber) for prompting
this commit. See msg-id: 7geokh$tje$1@mips.rhein-neckar.de
|
| |
|
|
|
|
| |
Found by: building ports with sysctl not in my path
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|