|
![]() [ View full size screenshot ] |
| Version | Date Released | Status | Release Notes |
| 6.00 | May 22, 2012 | New Release | · [NSE] Added the script http-traceroute, which exploits the Max-Forwards HTTP header to detect reverse proxies. · Added the script distcc-CVE-2004-2687 that checks and exploits a remote command execution vulnerability in distcc. · Added two new scripts mysql-query and mysql-dump-hashes, which add support for performing custom MySQL queries and dump MySQL password hashes. · Improved the mysql library to handle multiple columns with the same name, added a formatResultset function to format a query response to a table suitable for script output. · The message "nexthost: failed to determine route to ..." is now a warning rather than a fatal error. Addresses that are skipped in this way are recorded in the XML output as elements. · [NSE] Added the script http-drupal-modules, which enumerates the installed Drupal modules using drupal-modules.lst. · [NSE] Added http-vuln-cve2012-1823.nse, which checks for PHP CGI installations with a remote code execution vulnerability. |
| 5.61 Test 4 | Jan 5, 2012 | New Release | · [NSE] Added a new httpspider library which is used for recursively crawling web sites for information. New scripts using this functionality include http-backup-finder, http-email-harvest, http-grep, http-open-redirect, and http-unsafe-output-escaping. · We set up a new SVN server for the Nmap codebase. This one uses SSL for better security, WebDAV rather than svnserve for greater functionality, is hosted on a faster (virtual) machine, provides Nmap code history back to 1998 rather than 2005, and removes the need for the special "guest" username. The new server is at https://svn.nmap.org. · [NSE] Added a vulnerability management library (vulns.lua) to store and to report discovered vulnerabilities. Modified these scripts to use the new library: - ftp-libopie.nse - http-vuln-cve2011-3192.nse - ftp-vuln-cve2010-4221.nse - ftp-vsftpd-backdoor.nse - smtp-vuln-cve2011-1720.nse - smtp-vuln-cve2011-1764.nse - afp-path-vuln.nse [Djalal, Henri] |