Re: Mail stoppage

Yes, this was my fault. Mail to the Nmap dev list from non-subscribers goes through moderation to keep out the spam. I regularly go through the moderation queue to find and approve the "real" messages, but I was a bit slow this time. We strongly recommend that folks posting to the list first sub

Mail stoppage

Several messages received today seem to have been stuck on nmap.org for up to a month. Example (edited for clarity): > Subject: Version: 7.94+SVN TypeError: > Couldn't find foreign struct converter for 'cairo.Context' > To: "dev@nmap.org" > From: Hendrick Halim > Date: Wed, 15 Jan 2025 02:55:3

First Go

Hello!, I just started learning Lua for writing NSEs and had a go at a HTTP crawler that identifies XSS vulnerabilities on sites. I used Juice-Shop OWASP to confirm it works. (Thats why the source code uses port 3000 in addition to 80) Id love feedback! Doing my best to learn as much as I can.

High-Priority HTML Parsing script

Hello, I noticed that under the high priority script ideas was the need for a library that parses HTML info from sites. I wrote a script that uses a web crawler and extracts html info from attached pages and accompanying urls within the html body. Let me know if this is what yall were after? T

Re: First Go

Here is an updated version with more XSS patterns integrated into it. As well as some clean up! I also created a separate .lua with just the http crawler function. On Friday, January 24th, 2025 at 4:29 PM, astrotoki wrote: > Hello!, > > I just started learning Lua for writing NSEs and had a go

Version: 7.94+SVN TypeError: Couldn't find foreign struct converter for 'cairo.Context'

Version: 7.94+SVN TypeError: Couldn't find foreign struct converter for 'cairo.Context' ___ Sent through the dev mailing list https://nmap.org/mailman/listinfo/dev Archived at https://seclists.org/nmap-dev/

topology tab crash

zenmap crashes when topology tab clicked. Output message below Version: 7.94+SVN TypeError: Couldn't find foreign struct converter for 'cairo.Context' Doug Kent ___ Sent through the dev mailing list https://nmap.org/mailman/listinfo/dev Archived at

PR #2954, Fix out of bounds reads in packet parsing

Hi, I've submitted a pull request a few months ago: https://github.com/nmap/nmap/pull/2954 The PR includes following three commits: - Fix out of bounds read in HopByHopHeader::validate - Fix out of bounds read in PacketParser::split - Add AFL test code for PacketParser This was found as a part o

URL Pathfinder

Hello all! I just wrote up another script, trying to practice and maybe have some added to the master list for nmap. This script enumerates possible hidden path extensions on urls. As always, Id love input on it, changes or updates. Thanks all! Ryan LaPierre pathfinder.nse.lua Description: Bi

Null Byte Poisoning NSE

Here is my submission of a script I wrote that should test a site for null byte poisoning vulnerabilities. nul_byte_poison.nse.lua Description: Binary data ___ Sent through the dev mailing list https://nmap.org/mailman/listinfo/dev Archived at https://s