More than a year has passed since the last release release of the network security scanner , designed for conducting network audits and identifying active network services. The package includes 3 new NSE scripts to automate various actions with Nmap. Over 1200 new signatures have been added for identifying network applications and operating systems.
Among the changes in Nmap 7.90:
- The project transitioned from a modified GPLv2 license to the , which has fundamentally not changed and is also based on GPLv2, but is better structured and contains clearer wording. The differences from GPLv2 are limited to the addition of several exceptions and conditions, such as the possibility to use Nmap code in products with licenses incompatible with GPL after obtaining permission from the author and the need for separate licensing of the delivery and use of nmap as part of proprietary products.
- Over 800 application and service version identifiers have been added, bringing the total number of identifiers to 11,878. Support for MySQL 8.x, Microsoft SQL Server 2019, MariaDB, Crate.io CrateDB, and PostgreSQL setups in Docker has been newly added. The accuracy of version identification for MS SQL has increased. The number of identified protocols has grown from 1193 to 1237, including support for airmedia-audio protocols,
banner-ivu, control-m, insteon-plm, pi-hole-stats, and
ums-webviewer. - About 400 operating system identifiers have been added, 330 for IPv4 and 67 for IPv6, including identifiers for iOS 12/13, macOS Catalina and Mojave, Linux 5.4, and FreeBSD 13. The number of identified OS versions has reached 5,678.
- New libraries have been added to the Nmap Scripting Engine (NSE), which is designed to automate various actions with Nmap: outlib with functions for output handling and string formatting, and dicom with the implementation of the DICOM protocol used for storing and transmitting medical images.
- New features have been added :
- dicom-brute for guessing AET (Application Entity Title) identifiers on (Digital Imaging and Communications in Medicine);
- dicom-ping for finding DICOM servers and determining connectivity using AET identifiers;
- uptime-agent-info for collecting system information from Idera Uptime Infrastructure Monitor agents.
- 23 new UDP probe checks have been added (, specific to protocols that elicit a response rather than ignoring the UDP packet), created for the Rapid7 InsightVM network scanning engine, allowing for increased accuracy in identifying various UDP services.
- UDP requests have been added to determine STUN (Session Traversal Utilities for NAT) and GPRS Tunneling Protocol (GTP).
- An option ‘—discovery-ignore-rst’ has been added to ignore TCP RST responses when assessing the target host's availability (helps when firewalls or traffic inspection systems RST packets to terminate the connection).
- An option ‘—ssl-servername’ has been added to change the value of the host name in TLS SNI.
- The option ‘—resume’ has been added to resume interrupted IPv6 scanning sessions.
- The nmap-update utility has been removed, which was developed to organize updates of identifier databases and NSE scripts, but the infrastructure for these actions was never created.
A few days ago, Npcap 1.0 release WinPcap NDIS 6 LWF . After more than a year since the last release, the network security scanner release has been presented.
Source: opennet.ru
