|
![]() [ View full size screenshot ] |
| Version | Date Released | Status | Release Notes |
| 6.00 | May 22, 2012 | New Release | · [NSE] Added the script http-traceroute, which exploits the Max-Forwards HTTP header to detect reverse proxies. · Added the script distcc-CVE-2004-2687 that checks and exploits a remote command execution vulnerability in distcc. · Added two new scripts mysql-query and mysql-dump-hashes, which add support for performing custom MySQL queries and dump MySQL password hashes. · Improved the mysql library to handle multiple columns with the same name, added a formatResultset function to format a query response to a table suitable for script output. · The message "nexthost: failed to determine route to ..." is now a warning rather than a fatal error. Addresses that are skipped in this way are recorded in the XML output as elements. · [NSE] Added the script http-drupal-modules, which enumerates the installed Drupal modules using drupal-modules.lst. · [NSE] Added http-vuln-cve2012-1823.nse, which checks for PHP CGI installations with a remote code execution vulnerability. |
| 5.61 Test 4 | Jan 5, 2012 | New Release | · [NSE] Added a new httpspider library which is used for recursively crawling web sites for information. New scripts using this functionality include http-backup-finder, http-email-harvest, http-grep, http-open-redirect, and http-unsafe-output-escaping. · We set up a new SVN server for the Nmap codebase. This one uses SSL for better security, WebDAV rather than svnserve for greater functionality, is hosted on a faster (virtual) machine, provides Nmap code history back to 1998 rather than 2005, and removes the need for the special "guest" username. The new server is at https://svn.nmap.org. · [NSE] Added a vulnerability management library (vulns.lua) to store and to report discovered vulnerabilities. Modified these scripts to use the new library: - ftp-libopie.nse - http-vuln-cve2011-3192.nse - ftp-vuln-cve2010-4221.nse - ftp-vsftpd-backdoor.nse - smtp-vuln-cve2011-1720.nse - smtp-vuln-cve2011-1764.nse - afp-path-vuln.nse [Djalal, Henri] |
| 5.61 Test 2 | Dec 7, 2011 | New Release | · o Added IPv6 OS detection system! The new system utilizes many tests · similar to IPv4, and also some IPv6-specific ones that we found to · be particularly effective. And it uses a machine learning approach · rather than the static classifier we use for IPv4. We hope to move · some of the IPv6 innovations back to our IPv4 system if they work · out well. The database is still very small, so please submit any · fingerprints that Nmap gives you to the specified URL (as long as · you are certain that you know what the target system is · running). Usage and results output are basically the same as with · IPv4, but we will soon document the internal mechanisms at · http://nmap.org/book/osdetect.html, just as we have for IPv4. For an · example, try "nmap -6 -O scanme.nmap.org". [David, Luis] · o [NSE] Added 3 scripts, bringing the total to 246! You can learn · more about them at http://nmap.org/nsedoc/. Here they are (authors · listed in brackets) · lltd-discovery uses the Microsoft LLTD pr |