Nmap /

Log

January 2011

1: Wrote instructions for bisecting an SSL regression. Wrote suggestions about a Quake 3 portrule.
2: Built a test Django project following the tutorial.
3: Finished the test Django project. Started a SecTools Django project. Added a home view and a tool model.
4: Added a check for EVP_PKEY_EC to build on Mac. Added tool listing to the home view. Added a tool view. Imported the tools database. Tried building a 5.36TEST3 release but found Mac releases were missing SSL. Had a meeting. Upgraded MediaWiki.
5: Added comments to tool pages.
6: Tested a Quake 3 master probe. Found some relevant documentation. Fixed the Mac release build with respect to SSL. Helped with the 5.36TEST3 release. Cleaned some Mac packaging. Removed email from being a required comment field. Added ratings to comments.
7: Added Quake 3 master probe. Added ratings to comments.
8: Made NSE verbosity changes. Added comments to tools pages.
9: Committed an hddtemp-info patch. Committed a Minecraft script. Evaluated http-server. Tested dns-update. Made some verbosity changes. Did initial review of snmp-ios-config. Merged port names from IANA list. Added nrpe-enum.
10: Tested servicetags. Fiddled with SecTools layout and data models. Added SecTools tags.
11: Made Nping link statically with OpenSSL in the Mac package. Posted a summary of Nsock read buffer. More SecTools categories, flags, and tags. Had a meeting.
12: Tested dynamic linking in RPMs. Made a new broadcast category. Committed a DropBox broadcast script.
13: Committed changes to RPM building. Fixed an Ncat proxy bug. Added initial tool ratings.
14: Made --exec and --idle-timeout work when connecting with --proxy in Ncat. Added SecTools stars and static files.
15: Added usage to gopher-ls. Applied a debugging patch.
16: Posted my SVM paper. Added SecTools description linkification. Add ratings histograms.
17: Commented on console script help. SecTools layout fiddling.
18: Applied a contributed nmap-os-db patch. Fixed quadratic-complexity output updating in Zenmap. Allowed sorting by rating and release date in SecTools. Added tool logos. Had a meeting.
19: Did some nmap-os-db canonicalization.
20: Applied new French translation. SecTools comment display.
21: Reproduced a Zenmap display bug. Did pagination of SecTools index pages.
23: Worked around a Zenmap printing crash. Tested and found that Zenmap's method of getting the script list is running broadcast scripts.
24: Summarized the problem with IPv6 interfaces. Adding tracking of comments by the same user.
25: Worked on --script-help. Added SecLists flag icons. Had a meeting.
26: Posted a --script-help implementation.
27: Fixed bugs in --script-help and did documentation. Had a meeting.
28: Added paths to --script-help output. More documentation of --script-help. Fixed a display error on the favicon page.
30: Checked an error in Mac packaging. Fixed it. Applied contributed nmap-os-db patches.
31: Fixed an ftp-anon crash. Fixed Zenmap host zooming. Answered some mailing list questions. Tested a version display patch. Made a patch to isolate a negative timeout in NSE.

February 2011

1: Upgraded MediaWiki. Posted version display samples. Added SecTools CAPTCHA validation. Had a meeting.
2: Wrote reviews of SCADA scripts: micrologix1400 mguard-10091201 eig lantronix. Applied an Ndiff DTD patch and added prerule and postrule support.
3: Applied portrule fixes.
4: Evaluated a version display patch.
5: Made more verbosity changes.
6: Added "Submit a tool" page. Added latest version number display. Added search. Added RSS. Added tool update form.
7: Asked about dns-nsec-enum. Commented on dns-brute.
8: Committed the version display patch. Had a meeting.
9: Posted options for displaying system vs. included libraries. Made a debug release to try to fix a Windows interface issue. Made a branch for debugging Windows interface problems.
10: Worked on a Windows interface problem. Disgnosed the problem and posted options.
11: Made another Windows interface test release. Helped with the 5.51 release.
12: Committed a workaround for saving to PNG on Windows. Made a branch to test using pcap to get the dnet interface list.
14: Added tool popularity and rank difference display.
15: Applied an Android patch.
16:
17: Decoupled tool rating and rank. Layout changes. Added a screenshot view.
18: Posted advice about version display. Screenshot thumbnails.
20: Added comment rate limiting.
21: Applied updates to firewalk. Committed servicetags. Made a servicetags UDP payload. Worked on ssl-known-key. Rearranged database schema a bit.
22: Posted changes and comments to ssl-known-key.nse. Committed quake3-master-getservers. Created a shortport.ssl portrule. Had a meeting.
23: Sent NEP security analysis to devs. Did fixing up of nmap-service-probes. Had a meeting.
24: Reviewed a DPAP script. Reviewed an http.lua patch and committed part of it. Committed Ambarisha's version display patch. Posted a howto on setting up DNSSEC.
25: Made a branch for dns-nsec-enum and did lots of cleanup.
26: Posted a long review of dns-nsec-enum. Made a sample of pages with different headings.
27: Made more mockups of page headings.
28: Did more testing and changes of dns-nsec-enum. Committed some Android patches.

March 2011

1: Fixed an nmap-service-probes line. Had a meeting.
2: Set up the RPM build to use compate-glibc and compat-gcc-34-c++ in an attempt to be compatible with older Linuxes. Committed ovs-agent-version.nse.
3: Posted license questions about dns-nsec-enum.
4: Inspected some cookie code. Change Ndiff output a bit.
5: Committed dns-brute. Did the opposite of a refguide patch. Made another test release for Windows interface issues.
7: SecTools layout changes. Added a "new" tag.
8: Added Wikipedia links. Added getting of version numbers from Wikipedia. Had a meeting.
9: Enhanced Wikipedia version retrieval. Tools database updates.
10: Checked an Avahi DoS script. Tried an nmap-rpc update script. More SecTools layout.
11: Checked a Zenmap patch for remembering file dialog locations. Tested nping-brute. More SecTools layout.
12: Removed the -sR option. Committed nping-brute. Fixed an NSEDoc build error.
13: Posted a summary of poll for Nsock. Tools database updates.
14: Investigated Nping server accept rate limiting. Tested a Zenmap topology display flaw and suggested options. Tested a new version of dns-nsec-enum.
15: Fixed a Mac packaging bug. Had a meeting.
16: Had a SecTools meeting. TODO reorganization. Added an "About" page. Did some performance optimization.
17:
18: Answered a SoC question. SecTools refactoring. SecTools layout. Prefilling of comment forms. Had a meeting. Reviewed SoC pages.
19: Answered more SoC questions. Migrated the new SecTools.
20: Fixed an NmapOptions bug. Did SecTools screenshots. Did a short skipfish run against SecTools.
21: Did a skipfish run against SecTools. Answered Summer of Code questions.
22: Answered Summer of Code questions. Committed ssl-known-key. Made Ndiff not print its banner if there are no other changes. Categorized new NSE TODO.
23: Wrote an nmap-rpc-merge.py program and used it to regenerate nmap-rpc.
27: Did Summer of Code page upkeep.
28: Did Summer of Code page upkeep.
29: Had a meeting.
30: Added ICMPv6 handling. Let IPv6 traceroute interpret Time Exceeded.

April 2011

1: Had a meeting. Added IPv6 TCP building. Refactored ultra_scan and made it work with IPv6 packets.
2: Made reasons store a sockaddr_storage, not a u32. Made get_pcap_result handle IPv6 replies.
4: Upgraded to Django 1.3. Committed epmd-info.
5: Had a meeting. Added Djalal's get_interface and get_interface_info functions. Added targets-sniffer by Nick Nikolaou.
6: Added IPv6 TCP traceroute. Did some refactoring of joint IPv4/IPv6 code. Enabled -sAFMNWX IPv6 scan. Answered some GSoC questions.
7: Added UDP IPv6 scan. Added ICMPv6 reasons.
8: Started trying to refactor ultra_scan. Fixed some portreasons output.
9: Did Summer of Code review.
11: Did Summer of Code review. Upgraded MediaWiki.
12: Had a meeting.
13: Had meetings about todo and Summer of Code. Wrote IPv6 metrics.
14: Had a metrics meeting. Upgraded MediaWiki.
15: Wrote long metric descriptions.
17: Added /crossdomain.xml to http-enum. Added command lines and expected output to metrics.
18: Added a Back Orifice probe. Reviewed backorifice-info. Refactored ssl-cert. Added a Zend Java Bridge probe.
19: Sent some suggestions on ssl-enum-ciphers. Committed some IPv4 patches. Added tor-orport to the likely SSL ports. Committed a quake3-master-getservers summary patch.
20: Committed an SMB patch. Committed OMP scripts. Committed backorifice-info. Made a program summary graphic.
21:
22: Rewrote intf-win32.c to use GetAdaptersAddresses to allow getting IPv6 adapters.
25: Fixed a service match. Added some ICMPv6 support to libdnet. Let IPv6 traceroute interpret ICMPv6 replies (intermediate hops). Added build_tcp_raw_ipv6 abstraction. Merged a whole bunch of pending nmap-ipv6 commits. Wrote SoC welcome letters.
26: Had a meeting.
27: Reviewed find-ssh-hostkey. Reviewed an Ndiff patch. Reviewed a version probe. Added a gkrellmd probe. Reviewed asn-to-prefix. Made a decision on http-wp-plugins. Changed an http-brute behavior. Fixed DNS updates in dns.encode.
28: Committed an Ndiff patch. Wrote SoC regrets.
29: Tested http-slowloris.
30: Tested a force-NSE patch. Rearranged some script categories. Removed credential guessing from http-auth.

May 2011

2: Reviewed backorifice-brute. Fixed a Zenmap crash ("TypeError: an integer is required"). Added reverse name resolution to IPv6 traceroute.
3: Had a meeting. Tested a scanme IPv6 box.
4: Had a meeting. Found a memory leak in drda-info.
5: Had a meeting. Removed lots of IPv4 assumptions.
6: Had an NSE meeting. Had a meeting with Weilin.
7: Made hostgroup splitting work for IPv6.
8: Debugged an OS X route problem.
9:
10: Had an NSE meeting. Had a meeting.
11: Reported some OS X testing results.
12: Revised metrics. Had a meeting.
13: Committed a libnl patch.
16: Had a meeting. Wrote some updater ideas. Added more explanatory text and measurements to metrics.
17: Had an NSE meeting.
18: Added --version to Zenmap. Added Ndiff measurements to metrics.
19: Had a meeting. Added Zenmap opening times to metrics.
20:
21: Did some Ncat support. Redesigned the Windows build environment. Made the routing fix for OS X work for other platforms.
23: Had a meeting.
24: Had an NSE meeting. Added option parsing to ipv6fp.py. Scheduled meetings with students.
25: Had a meeting. Added IPv6 routing table on Windows. Fixed a bug in getting Windows interfaces. Fixed some style problems in ND scan code.
26: Merged Weilin's ND scan code. Had a meeting with Shinnok. Had a meeting with Colin. Had a meeting with Weilin.
27: Had a meeting. Had a meeting with Luis. Reviewed a Zenmap topology patch. Tested a portreasons patch. Checked CA list possibilities. Made GetIpForwardTable2 load dynamically so it won't fail on Windows XP.
28: Fixed some portreasons code. Fixed some ICMP parsing.
29: Did test linking against libnetlink.
30: Started an nmap-netlink branch.
31: Had a meeting. Revised metrics. Had an NSE meeting.

June 2011

1: Debugged some netlink code. Did more metrics measurements.
2: Tested improved hostmap. More metrics table entries and measurements. Had a meeting with Colin.
3: Added database and P2P filesharing to metrics.
4: Had a meeting about metrics. Made a script GUI mockup. Added IPv6 OS detection to metrics. Add other metrics table entries.
6: Had a meeting. Fiddled with netlink code. Added route_dst_netlink.
7: Had a meeting. Had an NSE meeting. Wrote about quiet NSE error handling. Added ICMPv6 reason code handling.
8: Had a meeting with Luis. Merged nmap-ipv6. Reviewed an on-link IPv6 host discovery proposal. Made the RPM build work on both x86 and x86_64. Made Ncat's stderr inherit from the parent on Windows.
9: Reviewed an NSE patch. Added some metrics explanatory text.
10: Metrics explanatory text. Had a eeting.
11: Tested an SSL hang patch. Wrote a test for Ncat SSL not hanging for --exec either.
12: Explanatory text for remaining metrics.
13: Had a meeting. Reviewed some more SSL hang patch.
14: Had an NSE meeting. Reviewed http-barracuda-dir-traversal. Removed unused function parameters. Fixed a bug in localhost protoscan responses. Enabled -6 -sO. Added reason codes for ICMPv6 parameter problems.
15: Fixed a socket leak. Changed a service name. Debugged an assertion failure.
16: Had a meeting with Luis. Fixed a bug in IPv6 protocol scan. Messed with linking the addrset code merged by Colin.
17: Found a bug in build_icmp_raw and friends. Some protoscan refactoring. Fixed [-Wunused-but-set-variable] warnings. Allowed splitting hostgroups on different interfaces for IPv6. Added ipv6_get_data_any and ip_get_data_any abstractions. Tidied up for addrset merge.
18: Reverted merge of addrset so it can go in nbase instead.
20: Had a meeting. Corresponded with SoC students.
21: Had an NSE meeting. Fixed a Windows build failure. Reviewed SSL hang some more. Reviewed http-waf-detect. Found a Windows OpenSSL crash. Updated the Ncat CA list from the Windows default list.
22: Had a meeting with Colin. Had a meeting with Weilin. Had a meeting with Luis. Reviewed an incorrect fix. Tried building Ncat portable. Wrote thoughts on IPv6 ranges. Moved some script ideas to SecWiki. Set up a test updater server for Colin. Had IPR meeting.
23: Had a meeting with Shinnok. Reviewed a dual-listening patch. Wrote IPv4-only and IPv6-only tests. Reverted buggy dual-listening patch.
24: Started the address-info script. Make a source-address patch.
25: Made host.bin_ip work with IPv6 addresses. Fixed some ipv6fp.py test IDs. Began vectorizing IPv6 responses.
27: Had a meeting. Fixed a bug in the source-address patch. Did preprocessing of IPv6 fingerprints.
28: Had an NSE meeting. Had a meeting with Weilin. Had a meeting with Luis. Had a meeting. Figured out how to exclude expired certs and regenerated ca-bundle.crt. Did more work on preprocessing fingerprints.
29–30: Independence Day.

July 2011

1: Had a meeting with Colin. Had a meeting with Luis. Reviewed some json patches. Reviewed Nmap XML parser and wrote some use cases. Helped Colin merge ncat_dual. Tested Colin's updater and made some portability changes.
4–7: Independence Day.
8: Had a meeting. Had a meeting with Colin. Had a meeting with Luis. Had a meeting with Shinnok.Applied an XML fix. Posted address-info. Fixed some man page rendering.
9: Had a meeting with Weilin. Made some style changes and bugfixes in IPv6 multicast scripts.
10: Reviewed an IPv6 commit.
11: Made style changes and bugfixes in ncat_dual.
12: Had an NSE meeting. Led the NSE meeting. Refactored some Ncat listening code.
13: Had meetings with Luis, Colin, and Weilin. Code style and refactoring.
14: Did GSoC midterm reviews. Had a meeting with Shinnok.
15:
16: Classified existing 6fp files. Made primary.set, a list of OS features. Wrote train.py and predict.py. Added prediction accuracy.
18: Had a meeting. Looked at a torsocks library. Applied some suggested patches. Looked into NULL scan response errors.
19: Had an NSE meeting. Fixed some [-Wunused-but-get-variable] warnings. Fixed an ncat-test.pl error. Changed formatting in the crash reporter.
20: Had a meeting with Colin. Had a meeting with Weilin. Had a meeting with Luis. Reviewed IPv6 packet.lua changes. Make recommendations on IPv6 ranges. Removed a nonexistent build file that was forcing recompilation on Windows.
21: Had a meeting. Had a meeting with Luis. Had a meeting with Shinnok. Made a Cartesian product for OS feature set files. Added variable syntax for feature sets. Added liblinear. Added PLEN and TCPMSS features.
22: Had a meeting with Shinnok. Had a meeting. Fixed an Ncat test.
24: Made some ipv6fp.py changes. Added TCP option vectorization. Tried to make ipv6fp.py more portable.
25: Had a meeting. Removed unused packet.lib from Ncat Windows build.
26: Had an NSE meeting. Had a meeting with Weilin. Did 400 OS submissions.
27: Had a meeting. Had a meeting with Colin. Had a meeting with Luis. Did 400 OS submissions.
28: Had a meeting with Shinnok. Changed to static allocation for some local variables.
29: Had a meeting with Shinnok. Did 200 OS submissions. Fixed a scope error with exclude arguments. Refactored fingerprint parsing. Played with importing feature vectors into R and imputation.
30: Did 400 OS submissions.
31: Did 200-odd OS submissions and 69 corrections.

August 2011

1: Had a meeting. Updated a SOCKS5 patch, asked for tests. Reviewed suggested --min-parallism changes. Added ND scan to refguide.
2: Had an NSE meeting. Did ftp service submissions.
3: Had a meeting with Colin. Had a meeting with Weilin. Had a meeting with Luis. Added Nmap-specific set of OS features.
4–7: Def Con.
8: Went to Usenix FOCI.
9: Had an NSE meeting. Fixed some [-Wunused-but-set-variable] warnings.Looked over XMPP support for ssl-cert. Removed calculation of netmask in BPF filters (which doesn't work for IPv6).
10: Had a meeting with Colin. Had a meeting with Weilin. Had a meeting with Luis.
11: Had a meeting with Shinnok. Wrote ideas about usage examples. Wrote OS detection highlights. Tried deleting the host timeout output code. Went shopping for OS X Lion.
12: Made IPv6 FingerPrintResults.
13: Some refactoring of FPEngine.
14: Tested an IPv6 OS patch.
15: Had a meeting. Fixed bugs in IPv6 OS output.
16: Had an NSE meeting. Wrote c_struct.py. Added liblinear to nmap-os6. Added dummy classification. Made various things const.
17: Had a meeting with Colin. Had a meeting with Weilin. Had a meeting with Luis. Did some refactoring of addrset ranges code. Added some vectorization to Nmap. Did some PacketElement refactoring. Made some more things const.
18: Had a meeting with Luis. Asked about an Outlook script. Added liblinear to 3rd-party-licenses.txt. Changed to use raw logistic values as output. Added TC vectorization. Added OS classes to c_struct.py. Added Nmap-style names to Python fingerprint programs.
19: Did some refactoring of fp programs. Tried different ways of reporting accuracy. Addd wrapping and scrubbing of OS fingerprints. Made the IPv6 OS scan work on Windows.
21: Added separate MISSING and UNKNOWN values in feature vectors.
22: Had a meeting. Approved the committing of address-info. Wrote nmap26fp.py. Wrote cluster.py to group OS fingerprints.
23: Added WSCALE and SACK_OK vectorization. Added SCAN to fingerprints. Wrote impute.py. Did scaling of training data. Removed tiers in classification. Added manual groups for training data. Added run length encoding of fingerprints.
24: Had a meeting. Had a meeting with Luis. Applied a regexp patch. Changed some packet-matching conditions. Debugged an OS engine timeout error. Regnerated fp model. Did FPEngine portability for Windows.
25–27: Mountain climbing.
29: Had a meeting. Added better support for IPv6 zone IDs.
30: Added interface indexes to libdnet. Added more support for IPv6 zone IDs. Documented them.
31: Fixed Windows OpenSSL DLL ACL copying.

September 2011

1: Committed Weilin's IPv6 packet.lua patch. Committed Weilin's IPv6 discovery scripts. Did some rewriting. Studied and rewrote the invalid dst option construction.
2: Looked at a Windows batch output parser. Reviewed a sysconfdir patch. Applied an XML patch. Tested interactive HTML output. Applied some Solaris patches.
3: Fixed and tested a sockaddr bug. Fixed some structure alginment in netlink. Fixed RPC structure size on 64-bit hosts.
5: Reviewed a sysconfdir patch. Did a big review of ssl-enum-ciphers and cipher lists. Investigated a password list.
6: Had a meeting. Made a branch for CPE output. Added CPE for OS.
7: Fixed a host name comparison. Started added CPE for services.
8: Had a meeting. Fixed some nmap-service-probes errors. Refactored nmap-service-probes parsing. Did automatic CPEs for OS in services. Added CPE for the most common services. Reworked service syntax highlighting.
9: Did escaping of service CPE backreferences.Merged CPE output. Fixed an OS scan memory leak. Merged nmap-cpe.
11: Switched cpe://o:sun:solaris names to cpe://o:sun:sunos.
12: Had a meeting. Made the ms-sql-info hostrule less likely to trip. Made some things const. Added the NI OS probe.
13: Scrubbed target address in ICMPv6 NA. Used short names for probes. Refactored, changed Python fp programs. Added TCP_URGP vectorization. Set the OS scan flow label. Added flow label sequnce vectorization.
14: Applied an ssl-enum-ciphers cipher strength patch.Reviewed a --no-clobber patch. Applied an SSL compressor name patch. Added the IE1 and IE2 OS probes. Rearranged and renamed OS probes.
15: Asked about off-by-one in hop distance calculation. Refactored TCP probe generation. Added send a receive times to fingerprints. Did some backwards-compatible parsing in Python programs. Added TCP_ISR vectorization.
16: Fixed a build error on OS X. Changed feature vector scaling.
17: Applied a fix for OS X compilation. Fixed the hop limit on the NS probe.
18: Made a big change to allow setting certain extension headers as ancillary data.
19: Had a meeting. Made a call for IPv6 fingerprints. Made packet-sending functions take a destination address to support link-local zone IDs. Regenerated ca-bundle.crt. Added a hop-by-hop guard header to the IE2 probe for systems that require ancillary data. Added the FL pseudo-test.
20: Applied an IPv4 patch in nping-brute. Applied an irc-info patch. Tested an http-match library.
21: Committed quake3-info. Applied AIX patches, including use of getkerninfo. Solved other AIX 6.1 build problems.
22: Added feature name comments to c_struct.py.
23: Tested lltd-discover. Reviewed a manufacturer info patch. Added a signature to ovs-agent. Applied fixes for compilation on AIX 7.1. Standardized on the shorter Nmap names for probes. Added feature name comments to c_struct.py.
24: Gave some feedback on OS info.
25: Applied a routing bugfix. Documented AIX installation.
26: Had a meeting. Asked about a French-language crash. Applied more AIX build fixes.
27: Added proper IPv6 netmasks for AIX.
28: Had a meeting.
29: Had a meeting. Did much Solaris portability work. Turned on OS output reporting. Refactored fp programs. Retrained IPv6 OS model.
30: Changed hop distance calculation by 1. Answered some questions. Wrote a bit about IPv6 OS detection. Applied an http-wordpress-enum patch. Helped build 5.61TEST2.

October 2011

2: Answered some email. Caught up the log.
3: Committed amqp-info, openlookup-info, tftp-enum, ganglia-info, and http-cors.
4:
5:
6: Answered some mailing list questions. Backported a freeaddrinfo fix to the 5.51 branch and made a source release.
7: