All pull requests

Pull requests

• [NSE] Add Php2Shell vulnerability detection script

  #3609·CyberWarrior10101 opened Nov 11, 2026·

  ·

• nselib/smbauth: surface MsvAvFlags and MsvAvChannelBindings on challenge table

  #3604·Pushpenderrathore opened Nov 9, 2026·

  ·

• [NSE] Add ssh-sshhole.nse: detect *sshole OpenSSH musl auth bypass (CVE-2026-123158)

  #3601·zsigisti opened Nov 7, 2026·

  ·

• stdnse: keep control bytes out of verbose and debug output

  #3600·VISHNU0906 opened Nov 5, 2026·

  ·
  1

• ssh2-enum-algos: stop crashing on modern-only SSH servers

  #3599·VISHNU0906 opened Nov 5, 2026·

  ·
  1

• Fix pcall usage in nselib/rdp.lua

  #3593·ttrampus opened Nov 3, 2026·

  ·
  1

• Add smtp-enhanced-scripts

  #3591·Aravind0066 opened Nov 2, 2026·

  ·

• ndiff: include version file in source distributions

  #3590·rylena opened Nov 2, 2026·

  ·
  1

• NSE: Add modbus-bus-counter script (FC 08 Diagnostics)

  #3586·MrBluely opened Oct 30, 2026·

  ·

• Fix MariaDB unauthorized version detection

  #3585·chauhand2463 opened Oct 29, 2026·

  ·

• NSE TLS: offer SHA-384 signature schemes by default

  #3584·adilalperenciftci opened Oct 29, 2026·

  ·
  1

  1

• fix(ncat): remove distrusted eMudhra roots from ca-bundle.crt

  #3582·gwillem opened Oct 27, 2026·

  ·

• http-trane-info: fix device attribution, 200-for-everything handling, nil crashes

  #3581·hkm opened Oct 26, 2026·

  ·

• feat(nse): extend explicit NetBuster identification

  #3577·thinksyncs opened Oct 25, 2026·

  ·

• Validate Nping Echo packet lengths

  #3576·sammwyy opened Oct 25, 2026·

  ·

• fix(nse): prevent false NetBuster identification on receive failure

  #3570·thinksyncs opened Oct 24, 2026·

  ·

• Add http-vuln-php2shell NSE script

  #3564·nbehar opened Oct 21, 2026·

  ·

• banner: Add host-level cross-port comparison and honeypot detection

  #3555·NINJA-1029 opened Oct 15, 2026·

  ·

• qscan: Add TCP connection reliability and port flap detection

  #3554·NINJA-1029 opened Oct 15, 2026·

  ·

• Add configurable SSDP search target to broadcast-upnp-info

  #3553·Yashwini-Krishna-Murthy-5 opened Oct 15, 2026·

  ·

• Handle duplicate SSDP discovery responses without aborting collection

  #3552·Yashwini-Krishna-Murthy-5 opened Oct 15, 2026·

  ·

• smb-os-discovery: pure-SMB2 fallback (fix #901) + fix crash on non-standard ports

  #3550·utksh1 opened Oct 14, 2026·

  ·
  1

• fix(winbox): harden mikrotik-routeros-username-brute, improve version probe

  #3543·abdo342003 opened Oct 11, 2026·

  ·

• ssh-hostkey: flag known-compromised host keys (#652), fix known_hosts crash

  #3542·OscarPastry opened Oct 11, 2026·

  ·
  1

• http-ntlm-info: add Negotiate/SPNEGO support. Fixes #2118

  #3541·OscarPastry opened Oct 11, 2026·

  ·
  1