Commit Graph

585 Commits

Author SHA1 Message Date
justinbastress 2f5b77f5b6
Merge pull request #178 from zmap/jb/mysql-timeout
Stricter bounds checking on MySQL
2018-10-30 09:35:31 -04:00
Justin Bastress 50b77f285a don't trigger constant index-out-of-bounds exceptions 2018-10-24 12:58:11 -04:00
Justin Bastress 28626f0b94 address @parkanzky's comments in #178 2018-10-24 10:29:07 -04:00
justinbastress e5b7392ab4
Merge pull request #180 from codyprime/dev
Add support for BytesReadLimit parameter in BaseFlags
2018-10-23 10:54:30 -04:00
Jeff Cody ec59b49540
Add support for BytesReadLimit parameter in BaseFlags
Some protocols may require more data than others.  To accomodate those,
allow the BytesReadLimit to be changed by means of BaseFlags.

By setting BaseFlags.BytesReadLimit prior to calling .Open(), scanners
can override the default limit to one that is appropriate for the data
collected.
2018-10-22 21:59:01 -04:00
Justin Bastress 7294e41bce catch nil body 2018-10-22 13:23:07 -04:00
Oleg Broslavsky d5aaeca283 Add SSH banner grabbing when `userauth` enabled
- Bump lib/ssh from golang.org/x/crypto/ssh (just banner hadling)
- Add a banner field to the SSH module info
2018-10-20 03:39:24 -04:00
Justin Bastress 06b72315df add initial work 2018-10-17 16:07:12 -04:00
justinbastress 6c186abf2e
Merge pull request #175 from zmap/pr_172
PR #172 to master
2018-10-09 10:47:41 -04:00
Justin Bastress 8c71100b9e gofmt it 2018-10-08 11:27:06 -04:00
justinbastress e30f93c6df
Merge pull request #172 from chushuai/master
To ensure that the HTTP connection is not blocked!
2018-10-08 11:24:54 -04:00
cy 2e94480cce
To ensure that the HTTP connection is not blocked! 2018-10-05 14:59:28 +08:00
cy d5258bdc6e
To ensure that the HTTP connection is not blocked!
https://github.com/zmap/zgrab2/issues/171
2018-10-05 14:51:14 +08:00
justinbastress 15127f1b89
Merge pull request #169 from zmap/jb/mssqlBoundsChecking
add some tighter bounds checking in MSSQL scanner
2018-10-04 11:19:15 -04:00
Justin Bastress 0c6f231dee address @paul's comments and other golint errors 2018-10-02 10:01:41 -04:00
Justin Bastress 65a7c8a578 Merge branch 'jb/session-wide-timeout' into jb/mssqlBoundsChecking 2018-10-01 14:25:04 -04:00
Justin Bastress 6618920234 add some tighter bounds checking in MSSQL scanner, and if there is an uncaught panic, log the body that caused it 2018-10-01 11:08:26 -04:00
Justin Bastress 72dc9e7c5a fix UDP case 2018-09-28 11:52:02 -04:00
Justin Bastress b207f5ba68 add conn.go tests 2018-09-28 10:58:00 -04:00
Justin Bastress 900b0d5912 add bytelimit tests 2018-09-27 14:00:26 -04:00
parkanzky e7e7be1f6f
Merge pull request #168 from zmap/paul/fix-buildinfo-none
Omit empty build_info elm on mongodb output
2018-09-25 15:35:30 -04:00
Paul A. Parkanzky 04fa04a413 Omit empty build_info elm on mongodb output
Fixes CEN-817
2018-09-25 11:41:07 -04:00
justinbastress 412aefa977
Merge pull request #166 from zmap/paul/mongodb-fix-index-err
MongoDB - fix isMaster message length check.
2018-09-14 16:33:33 -04:00
Paul A. Parkanzky 122f945fb1 MongoDB - fix isMaster message length check.
Needs to account for OP_REPLY header
2018-09-14 16:09:36 -04:00
Justin Bastress 00682b1001 add tests 2018-09-13 14:55:27 -04:00
Justin Bastress a92a983159 Merge branch 'master' into jb/session-wide-timeout 2018-09-06 13:49:03 -04:00
justinbastress a8ed44d653
Update conn.go 2018-09-06 13:03:02 -04:00
justinbastress 1461f2d48d
Merge pull request #164 from zmap/jb/zcrypto-update-fixes
Fix for zcrypto updates
2018-09-05 18:03:06 -04:00
Justin Bastress c51faaf8f5 use functions introduced in https://github.com/zmap/zcrypto/pull/178 in place of functions removed in https://github.com/zmap/zcrypto/pull/173/files 2018-09-05 16:26:05 -04:00
Justin Bastress 45a4cb0e90 re #163 -- add outer whole-connection timeout to TimeoutConnection, and add scan-target-wide timeout to HTTP scanner (adding a max time spent across redirects, too) 2018-09-05 14:33:59 -04:00
parkanzky 24e4b4b4fc
Merge pull request #162 from zmap/paul/mongodb-fix-ismaster-BSON-case
BSON tag is case sensitive - s/isMaster/ismaster
2018-08-30 09:36:03 -04:00
Paul A. Parkanzky bb9324e00d BSON tag is case sensitive - s/isMaster/ismaster 2018-08-29 16:45:27 -04:00
parkanzky ad2fe2c924
Merge pull request #161 from zmap/paul/mongodb-msglen-zero
Fix possible index error on malformed msg
2018-08-28 16:41:33 -04:00
Paul A. Parkanzky 1a1aa96793 Put upper limit on buffer size alloc 2018-08-28 16:13:35 -04:00
Paul A. Parkanzky a7ddf61d74 Fix possible index error on malformed msg 2018-08-28 14:34:18 -04:00
parkanzky 264b811a72
Merge pull request #156 from zmap/paul/mongodb
Add MongoDB scanner.
2018-08-22 13:54:28 -04:00
Paul A. Parkanzky d9aec0ae40 Improve partial results for mongodb scanner
* Separate out isMaster and buildInfo commands
* Return results of both in separate sub-structs
* Include isMaster results regardless of whether buildInfo succeeds
2018-08-22 11:49:17 -04:00
justinbastress 3327114cd0
Merge pull request #160 from zmap/jb/addMissingPostgresErrorType
add missing 'constraint' field for postgres_error
2018-08-22 10:15:17 -04:00
Justin Bastress a139cc9349 add missing 'constraint' field for postgres_error 2018-08-22 10:07:59 -04:00
Paul A. Parkanzky 68bb3e9790 Return appropriate short write error 2018-08-21 17:08:01 -04:00
Paul A. Parkanzky 7419796cfc Address more PR comments
* Add error message to invalid BSON log msg
* Use snake case for json output
* Update affect integration tests
2018-08-21 16:34:35 -04:00
Paul A. Parkanzky 8b9c23f122 Fix typo and integration test which tested for it 2018-08-21 16:01:40 -04:00
Paul A. Parkanzky f891880db4 Make some PR-requested changes
* Generate static messages in Scanner Init()
* s/panic/log.Fatal/
* Remove unnecessary casting
* Use stack var and pass slice to avoid unnecessary alloc
2018-08-21 14:51:48 -04:00
Paul A. Parkanzky 7386c5d3fa Fix script #! invocations 2018-08-21 13:33:56 -04:00
Paul A. Parkanzky 2f316b2242 Add mongodb integration tests. 2018-08-21 13:11:34 -04:00
Chris Dzombak d8bba99313
Stop marking fields as “required” (#158)
This causes problems when trying to load data into BigQuery if, for example, an entire protocol or subrecord is unpopulated.
2018-08-21 12:33:26 -04:00
Paul A. Parkanzky 72cbe9ae63 Add support for mongodb >= 4.1 2018-08-20 16:16:05 -04:00
justinbastress 268294c16b
Merge pull request #157 from zmap/jb/fixCertTypeId
Fix CertType
2018-08-20 12:21:44 -04:00
Justin Bastress ecbd12f11a note source location 2018-08-20 12:04:35 -04:00
Justin Bastress 1e4f4b9b51 Enums are Strings, but this value is actually a uint32 2018-08-20 12:03:18 -04:00