Nmap 7.80
The Npcap Windows packet capturing library is faster and more stable than ever. Nmap 7.80 updates the bundled Npcap from version 0.99-r2 to 0.9982, including all of these changes from the last 15 Npcap releases. Added 11 NSE scripts, from 8 authors, bringing the total up to 598. broadcast-hid-discoveryd discovers HID devices on a LAN by sending a discoveryd network broadcast probe. broadcast-jenkins-discover discovers Jenkins servers on a LAN by sending a discovery broadcast probe. http-hp-ilo-info extracts information from HP Integrated Lights-Out (iLO) servers. http-sap-netweaver-leak detects SAP Netweaver Portal with the Knowledge Management Unit enabled with anonymous access. https-redirect detects HTTP servers that redirect to the same port, but with HTTPS. Some nginx servers do this, which made ssl-* scripts not run properly. lu-enum enumerates Logical Units (LU) of TN3270E servers. rdp-ntlm-info extracts Windows domain information from RDP services. smb-vuln-webexec checks whether the WebExService is installed and allows code execution. smb-webexec-exploit exploits the WebExService to run arbitrary commands with SYSTEM privileges. ubiquiti-discovery extracts information from the Ubiquiti Discovery service and assists version detection. vulners queries the Vulners CVE database API using CPE information from Nmap's service and application version detection. Fix reverse-DNS handling of PTR records that are not lowercase. Nmap was failing to identify reverse-DNS names when the DNS server delivered them like ".IN-ADDR.ARPA". IKE library was not properly populating the protocol number in aggressive mode requests. Added service fingerprinting for MySQL 8.x, Microsoft SQL Server 2019, MariaDB, and Crate.io CrateDB. Updated PostreSQL coverage and added specific detection of recent versions running in Docker. New XML output "hosthint" tag emitted during host discovery when a target is found to be up. This gives earlier notification than waiting for the hostgroup to finish all scan phases. New UDP payloads for GPRS Tunneling Protocol (GTP) on ports 2123, 2152, and 3386. SSH scripts now run on several ports likely to be SSH based on empirical data from Shodan.io, as well as the netconf-ssh service. Stop creating a debugging output file 'tmp.txt' on the desktop in macOS. Address build failure under libc++ due to "using namespace std;" in several headers, resulting in conflicting definitions of bind(). Fix a fatal error when connecting to a Linux VM socket with verbose output enabled. Proxy credentials can be alternatively passed onto Ncat by setting environment variable NCAT_PROXY_AUTH, which reduces the risk of the credentials getting captured in process logs. Fixed a crash on Windows when processing a GZIP-encoded HTTP body. Upgrade libpcap to 1.9.1, which addresses several CVE vulnerabilities. Upgrade libssh2 to 1.9.0, fixing compilation with OpenSSL 1.1.0 API. Processing of IP address CIDR blocks was not working correctly on ppc64, ppc64le, and s390x architectures. Add support for the new loopback behavior in Npcap 0.9983 and later. This enables Nmap to scan localhost on Windows without needing the Npcap Loopback Adapter to be installed, which was a source of problems for some users. MS SQL library has improved version resolution, from service pack level to individual cumulative updates With increased verbosity, script http-default-accounts now reports matched target fingerprints even if no default credentials were found IPP request object conversion to string was not working correctly IPP response parser was not correctly processing end-of-attributes-tag Script cups-info was failing due to erroneous double-decoding of the IPP printer status Oracle TNS parser was incorrectly unmarshalling DALC byte arrays The password hashing function for Oracle 10g was not working correctly for non-alphanumeric characters Virtual host probing list, vhosts-full.lst, was missing numerous entries present in vhosts-default.lst Script http-grep was