The release of the network security scanner Nmap 7.92 is now available, intended for conducting network audits and identifying active network services. In this new version, issues raised by the Fedora project regarding compatibility with the open-source software criteria of the NPSL license (based on GPLv2) have been addressed. The new license version replaces the mandatory purchase of a separate commercial license when using the code in proprietary software with recommendations for using OEM licensing and the possibility of purchasing a commercial license should the vendor not wish to open their product code in accordance with copyleft license requirements or intends to integrate Nmap into products incompatible with GPL.
Nmap 7.92's release is timed with the DEFCON 2021 conference and includes the following notable changes:
- A new option "--unique" has been added to prevent scanning the same (the key to connect to is specified, and iroh finds the associated host and establishes an encrypted connection using the QUIC protocol). Direct P2P connections are established whenever possible, but if not, it falls back to using relays, which are also employed for host discovery by keys. You can run your own relay or connect to public relays supported by the community. multiple times when different domain names resolve to one IP.
- Support for TLS 1.3 has been added to most NSE scripts. To utilize advanced features such as tunnel creation and certificate parsing, at least OpenSSL 1.1.1 is required. sslIncluded are 3 new NSE scripts to automate various actions with Nmap:
- nbns-interfaces to retrieve information about IP addresses of network interfaces via queries to NBNS (NetBIOS Name Service).
- openflow-info to get data about supported protocols from OpenFlow.
- port-states to output a list of network ports for each scan stage, including results "Not shown: X closed ports."
- The accuracy of UDP request checks has been improved (UDP payloads, protocol-specific requests that lead to a response rather than ignoring the UDP packet). New checks have been added: TS3INIT1 for UDP port 3389 and DTLS for UDP 3391.
- The code for parsing SMB2 protocol dialects has been revamped. The smb-protocols script's performance has been enhanced. The versions of the SMB protocol have been aligned with Microsoft documentation (3.0.2 instead of 3.02).
- New signatures have been added to identify network applications and operating systems.
- Добавлены новые сигнатуры для определения сетевых приложений и операционных систем.
- The capabilities of the Npcap library for capturing and injecting packets on the Windows platform have been expanded. The library is being developed as a replacement for WinPcap, built using the modern Windows API NDIS 6 LWF, demonstrating higher performance, security, and reliability. With the update of Npcap in Nmap 7.92, support for Windows 10 on ARM architecture systems is implemented, including devices like the Microsoft Surface Pro X and Samsung Galaxy Book G. Support for the WinPcap library has been discontinued.
- Windows builds have transitioned to using Visual Studio 2019, Windows 10 SDK, and UCRT. Support for Windows Vista and older versions has been discontinued.
Source: opennet.ru
