The release of the Nmap 7.95 network security scanner has been published, designed for network auditing and identifying active network services. The project code is provided under the NPSL (Nmap Public Source License), based on the GPLv2 license, which includes recommendations (not requirements) for using OEM licensing and purchasing a commercial license if the manufacturer does not wish to open their product's code in accordance with copyleft licensing requirements or intends to integrate Nmap into products incompatible with GPL.
The terms of the NPSL license apply only to parties that accept the license in exchange for receiving special rights, such as the right to redistribute Nmap. In this case, the participating party can do everything they need according to copyright provisions, such as fair use, and the developers of Nmap will not attempt to impose control over their work.
Key Changes:
- More than 2500 application and service version identifiers have been added, bringing the total size of the identifier database to 12089 entries. The number of identifiable protocols has increased from 1237 to 1246. Among other things, support for grpc, mysqlx, essnet, remotemouse, and tuya protocols has been added.
- 336 operating system identifiers have been added. The total number of identifiable OS versions has been brought to 6036. Versions of iOS 15 and 16, macOS 12 and 13, Linux kernel 6.1, OpenBSD 7.1, and lwIP 2.2 have been identified.
- The package includes 4 new NSE scripts to automate various actions with Nmap. The new scripts have been developed by the DINA community and are aimed at sending requests to various industrial controllers:
- hartip-info — request for information using the Highway Addressable Remote Transducer protocol.
- iec61850-mms — sending requests via Manufacturing Message Specification.
- multicast-profinet-discovery — sending multicast messages "PROFINET DCP Identify All" and outputting the response.
- profinet-cm-lookup — sending requests to DCERPC handlers through the PNIO-CM service.
- The bundled builds have updated versions of Lua 5.4.6, libpcre2 10.43, zlib 1.3.1, libssh2 1.11.0, and liblinear 2.47.
- When creating packages with Zenmap and Ndiff, the setuptools utilities were used instead of distutils.
- The signature matching code has been improved for operating system identification, and the syntax of nmap-os-db has been modified to support ranges in TCP option strings.
- The operating system detection engine has been improved, where the source network port number now changes with each retry.
- Some optimizations based on profiling results have been implemented in the port scanning engine.
Source: opennet.ru
