Release of the Network Security Scanner Nmap 7.80

Nearly a year and a half has passed since the last release introduced release of the network security scanner Nmap 7.80, designed for conducting network audits and identifying active network services. The package includes enabled 11 new NSE scripts for automating various actions with Nmap. Signature databases for identifying network applications and operating systems have been updated.

Recently, the main focus has been on enhancing and stabilizing the library Npcap, developed for the Windows platform as a replacement for WinPcap and using the modern Windows API for packet capture. Many minor improvements have been made to the Nmap Scripting Engine (NSE) and related libraries. Support for AF_VSOCK-addressed sockets has been added to Nsock and Ncat, which operate over virtio and are used for interaction between virtual machines and the hypervisor. Detection of the adb service (Android Debug Bridge), enabled by default on many mobile devices, has been implemented.

New NSE scripts:

• broadcast-hid-discoveryd — detects the presence of HID devices (Human Interface Devices) in the local network by sending broadcast requests;
• broadcast-jenkins-discover — identifies Jenkins servers in the local network through broadcasting requests;
• http-hp-ilo-info — extracts information from HP servers supporting remote management technology iLO;
• http-sap-netweaver-leak — detects the presence of the SAP Netweaver Portal with the Knowledge Management Unit module enabled, allowing anonymous access;
• https-redirect — identifies HTTP servers redirecting requests to HTTPS without changing the port number;
• lu-enum — enumerates logical units (LU) of TN3270E servers;
• rdp-ntlm-info — extracts Windows domain information from RDP services;
• smb-vuln-webexec — checks for the installation of the WebExService (Cisco WebEx Meetings) and whether it contains a vulnerability, allowing code execution;
• smb-webexec-exploit — exploits a vulnerability in WebExService to execute code with SYSTEM privileges;
• ubiquiti-discovery — extracts information from the Ubiquiti Discovery service and helps determine the version number;
• vulners — sends queries to the database Vulners, to check for vulnerabilities based on the service and application version specified when starting Nmap.

Source: opennet.ru