PageSourceSearch

https://seclists.org/nmap-dev/

html seclists.org collected 2026-10-01 07:31:26 UTC 24,838 bytes, 521 lines download raw bytes

1<!DOCTYPE html>
2<html lang="en">
3<head>
4<title>Nmap Development Mailing List</title>
5<link rel="alternate" type="application/rss+xml" title="RSS" href="https://seclists.org/rss/nmap-dev.rss">
6<meta name="description" content="SecLists.org archive for the Nmap Development mailing list: Unmoderated technical development forum for debating ideas, patches, and suggestions regarding proposed changes to Nmap and related projects. Subscribe to nmap-dev here.">
7<link rel="canonical" href="https://seclists.org/nmap-dev/">
8<meta name="viewport" content="width=device-width,initial-scale=1">
9<meta name="theme-color" content="#2A0D45">
10<link rel="preload" as="image" href="/images/sitelogo.png" imagesizes="168px" imagesrcset="/images/sitelogo.png, /images/sitelogo-2x.png 2x">
11<link rel="preload" as="image" href="/shared/images/nst-icons.svg">
12<link rel="stylesheet" href="/shared/css/nst.css?v=2">
13<script async src="/shared/js/nst.js?v=2"></script>
13
14<link rel="stylesheet" href="/shared/css/nst-foot.css?v=2" media="print" onload="this.media='all'">
15<link rel="stylesheet" href="/site.css">
16<!--Google Analytics Code-->
17<link rel="preload" href="https://www.google-analytics.com/analytics.js" as="script">
18<script>
vendor: 328 bytes, lines 18-23
18
19(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
20(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
21m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
22})(window,document,'script','//www.google-analytics.com/analytics.js','ga');
23ga('create', '
23UA-11009417-1
vendor: 36 bytes, lines 23-24
23', 'auto');
24ga('send', 'pageview');
25</script>
25
26<!--END Google Analytics Code-->
27<META NAME="ROBOTS" CONTENT="NOARCHIVE">
28<link rel="shortcut icon" href="/shared/images/tiny-eyeicon.png" type="image/png">
29</head>
30<body><div id="nst-wrapper">
31
32<div id="menu">
33 <div class="blur">
34  <header id="nst-head">
35
36    <a id="menu-open" href="#menu" aria-label="Open menu">
37     <img width="44" height="44" alt="" aria-hidden="true"
38      src="/shared/images/nst-icons.svg#menu">
39    </a>
40    <a id="menu-close" href="#" aria-label="Close menu">
41     <img width="44" height="44" alt="" aria-hidden="true"
42      src="/shared/images/nst-icons.svg#close">
43    </a>
44
45   <a id="nst-logo" href="/" aria-label="Home page">
46    <img alt="Home page logo" srcset="/images/sitelogo.png, /images/sitelogo-2x.png 2x" src="/images/sitelogo.png" onerror="this.onerror=null;this.srcset=this.src" height=90 width=168></a>
47
48   <nav id="nst-gnav">
49    <a class="nlink" href="https://nmap.org/">Nmap.org</a>
50    <a class="nlink" href="https://npcap.com/">Npcap.com</a>
51    <a class="nlink" href="https://seclists.org/">Seclists.org</a>
52    <a class="nlink" href="https://sectools.org">Sectools.org</a>
53    <a class="nlink" href="https://insecure.org/">Insecure.org</a>
54   </nav>
55
56   <form class="nst-search" id="nst-head-search" action="/search/">
57    <input class="nst-search-q" name="q" type="search" placeholder="Site Search">
58    <button class="nst-search-button" title="Search">
59     <img style="width:100%;aspect-ratio:1/1;" alt="" aria-hidden="true"
60      src="/shared/images/nst-icons.svg#search">
61     </button>
62   </form>
63
64  </header>
65 </div>
66</div>
67
68<main id="nst-content">
69<img src="/images/nmap-dev-logo.png" width="80" class="l-logo right" alt="nmap-dev logo"><h1 class="list-title">Nmap Development Mailing List</h1><ul class="inline"><li class="first"><a href="/nmap-dev/2026/q3/index.html"><img src="/images/current-icon-16x16.png" width=16 height=16 alt="Current period icon">Previous Quarter</a>
70<li><a href="/rss/nmap-dev.rss"><img src="/images/feed-icon-16x16.png" width=16 height=16 alt="RSS icon">RSS Feed</a>
71<li><a href="https://nmap.org/mailman/listinfo/dev"><img src="/images/about-icon-16x16.png" width=16 height=16 alt="About icon">About List</a>
72<li><a href="/"><img src="/images/up-icon-16x16.png" width=16 height=16 alt="Up icon">All Lists</a>
73</ul>
74<p class="l-abstract">Unmoderated technical development forum for debating ideas, patches, and suggestions regarding proposed changes to <a href="https://nmap.org">Nmap</A> and related projects. <a href="https://nmap.org/mailman/listinfo/dev">Subscribe to nmap-dev here</a>.</p>
75<form class="nst-search center" action="/search/nmap-dev">
76<input class="nst-search-q" name="q" type="search" placeholder="List Archive Search">
77<button class="nst-search-button" title="Search">
78<img style="width:100%;aspect-ratio:1/1;" alt="" aria-hidden="true"
79src="/shared/images/nst-icons.svg#search">
80</button>
81</form>
82<h2>List Archives</h2>
83<ul class="calendar Quarterly">
84<li class="period">Jan&ndash;Mar<li class="period">Apr&ndash;Jun<li class="period">Jul&ndash;Sep<li class="period">Oct&ndash;Dec<li class="year">2026<li class="q1"><a href="/nmap-dev/2026/q1/">6</a>
85<li class="q2"><a href="/nmap-dev/2026/q2/">9</a>
86<li class="q3"><a href="/nmap-dev/2026/q3/">6</a>
87<li class="q4">&ndash;
88<li class="year">2025<li class="q1"><a href="/nmap-dev/2025/q1/">14</a>
89<li class="q2"><a href="/nmap-dev/2025/q2/">3</a>
90<li class="q3">&ndash;
91<li class="q4"><a href="/nmap-dev/2025/q4/">8</a>
92<li class="year">2024<li class="q1"><a href="/nmap-dev/2024/q1/">1</a>
93<li class="q2"><a href="/nmap-dev/2024/q2/">12</a>
94<li class="q3"><a href="/nmap-dev/2024/q3/">14</a>
95<li class="q4"><a href="/nmap-dev/2024/q4/">9</a>
96<li class="year">2023<li class="q1"><a href="/nmap-dev/2023/q1/">10</a>
97<li class="q2"><a href="/nmap-dev/2023/q2/">26</a>
98<li class="q3"><a href="/nmap-dev/2023/q3/">17</a>
99<li class="q4"><a href="/nmap-dev/2023/q4/">24</a>
100<li class="year">2022<li class="q1"><a href="/nmap-dev/2022/q1/">10</a>
101<li class="q2"><a href="/nmap-dev/2022/q2/">12</a>
102<li class="q3"><a href="/nmap-dev/2022/q3/">12</a>
103<li class="q4"><a href="/nmap-dev/2022/q4/">
1034</a>
104<li class="year">2021<li class="q1"><a href="/nmap-dev/2021/q1/">33</a>
105<li class="q2"><a href="/nmap-dev/2021/q2/">14</a>
106<li class="q3"><a href="/nmap-dev/2021/q3/">11</a>
107<li class="q4"><a href="/nmap-dev/2021/q4/">15</a>
108<li class="year">2020<li class="q1"><a href="/nmap-dev/2020/q1/">12</a>
109<li class="q2"><a href="/nmap-dev/2020/q2/">39</a>
110<li class="q3"><a href="/nmap-dev/2020/q3/">29</a>
111<li class="q4"><a href="/nmap-dev/2020/q4/">38</a>
112<li class="year">2019<li class="q1"><a href="/nmap-dev/2019/q1/">98</a>
113<li class="q2"><a href="/nmap-dev/2019/q2/">44</a>
114<li class="q3"><a href="/nmap-dev/2019/q3/">50</a>
115<li class="q4"><a href="/nmap-dev/2019/q4/">16</a>
116<li class="year">2018<li class="q1"><a href="/nmap-dev/2018/q1/">55</a>
117<li class="q2"><a href="/nmap-dev/2018/q2/">54</a>
118<li class="q3"><a href="/nmap-dev/2018/q3/">49</a>
119<li class="q4"><a href="/nmap-dev/2018/q4/">58</a>
120<li class="year">2017<li class="q1"><a href="/nmap-dev/2017/q1/">303</a>
121<li class="q2"><a href="/nmap-dev/2017/q2/">199</a>
122<li class="q3"><a href="/nmap-dev/2017/q3/">202</a>
123<li class="q4"><a href="/nmap-dev/2017/q4/">68</a>
124<li class="year">2016<li class="q1"><a href="/nmap-dev/2016/q1/">356</a>
125<li class="q2"><a href="/nmap-dev/2016/q2/">269</a>
126<li class="q3"><a href="/nmap-dev/2016/q3/">310</a>
127<li class="q4"><a href="/nmap-dev/2016/q4/">192</a>
128<li class="year">2015<li class="q1"><a href="/nmap-dev/2015/q1/">427</a>
129<li class="q2"><a href="/nmap-dev/2015/q2/">375</a>
130<li class="q3"><a href="/nmap-dev/2015/q3/">384</a>
131<li class="q4"><a href="/nmap-dev/2015/q4/">308</a>
132<li class="year">2014<li class="q1"><a href="/nmap-dev/2014/q1/">358</a>
133<li class="q2"><a href="/nmap-dev/2014/q2/">571</a>
134<li class="q3"><a href="/nmap-dev/2014/q3/">501</a>
135<li class="q4"><a href="/nmap-dev/2014/q4/">390</a>
136<li class="year">2013<li class="q1"><a href="/nmap-dev/2013/q1/">422</a>
137<li class="q2"><a href="/nmap-dev/2013/q2/">534</a>
138<li class="q3"><a href="/nmap-dev/2013/q3/">664</a>
139<li class="q4"><a href="/nmap-dev/2013/q4/">337</a>
140<li class="year">2012<li class="q1"><a href="/nmap-dev/2012/q1/">739</a>
141<li class="q2"><a href="/nmap-dev/2012/q2/">993</a>
142<li class="q3"><a href="/nmap-dev/2012/q3/">1068</a>
143<li class="q4"><a href="/nmap-dev/2012/q4/">533</a>
144<li class="year">2011<li class="q1"><a href="/nmap-dev/2011/q1/">1148</a>
145<li class="q2"><a href="/nmap-dev/2011/q2/">1302</a>
146<li class="q3"><a href="/nmap-dev/2011/q3/">925</a>
147<li class="q4"><a href="/nmap-dev/2011/q4/">
147638</a>
148<li class="year">2010<li class="q1"><a href="/nmap-dev/2010/q1/">1248</a>
149<li class="q2"><a href="/nmap-dev/2010/q2/">1035</a>
150<li class="q3"><a href="/nmap-dev/2010/q3/">916</a>
151<li class="q4"><a href="/nmap-dev/2010/q4/">793</a>
152<li class="year">2009<li class="q1"><a href="/nmap-dev/2009/q1/">928</a>
153<li class="q2"><a href="/nmap-dev/2009/q2/">846</a>
154<li class="q3"><a href="/nmap-dev/2009/q3/">1116</a>
155<li class="q4"><a href="/nmap-dev/2009/q4/">732</a>
156<li class="year">2008<li class="q1"><a href="/nmap-dev/2008/q1/">568</a>
157<li class="q2"><a href="/nmap-dev/2008/q2/">911</a>
158<li class="q3"><a href="/nmap-dev/2008/q3/">1038</a>
159<li class="q4"><a href="/nmap-dev/2008/q4/">809</a>
160<li class="year">2007<li class="q1"><a href="/nmap-dev/2007/q1/">305</a>
161<li class="q2"><a href="/nmap-dev/2007/q2/">509</a>
162<li class="q3"><a href="/nmap-dev/2007/q3/">479</a>
163<li class="q4"><a href="/nmap-dev/2007/q4/">832</a>
164<li class="year">2006<li class="q1"><a href="/nmap-dev/2006/q1/">410</a>
165<li class="q2"><a href="/nmap-dev/2006/q2/">497</a>
166<li class="q3"><a href="/nmap-dev/2006/q3/">447</a>
167<li class="q4"><a href="/nmap-dev/2006/q4/">326</a>
168<li class="year">2005<li class="q1"><a href="/nmap-dev/2005/q1/">175</a>
169<li class="q2"><a href="/nmap-dev/2005/q2/">257</a>
170<li class="q3"><a href="/nmap-dev/2005/q3/">202</a>
171<li class="q4"><a href="/nmap-dev/2005/q4/">251</a>
172<li class="year">2004<li class="q1"><a href="/nmap-dev/2004/q1/">173</a>
173<li class="q2"><a href="/nmap-dev/2004/q2/">80</a>
174<li class="q3"><a href="/nmap-dev/2004/q3/">131</a>
175<li class="q4"><a href="/nmap-dev/2004/q4/">178</a>
176<li class="year">2003<li class="q1"><a href="/nmap-dev/2003/q1/">58</a>
177<li class="q2"><a href="/nmap-dev/2003/q2/">113</a>
178<li class="q3"><a href="/nmap-dev/2003/q3/">141</a>
179<li class="q4"><a href="/nmap-dev/2003/q4/">91</a>
180<li class="year">2002<li class="q1"><a href="/nmap-dev/2002/q1/">58</a>
181<li class="q2"><a href="/nmap-dev/2002/q2/">90</a>
182<li class="q3"><a href="/nmap-dev/2002/q3/">59</a>
183<li class="q4"><a href="/nmap-dev/2002/q4/">77</a>
184<li class="year">2001<li class="q1"><a href="/nmap-dev/2001/q1/">18</a>
185<li class="q2"><a href="/nmap-dev/2001/q2/">3</a>
186<li class="q3"><a href="/nmap-dev/2001/q3/">51</a>
187<li class="q4"><a href="/nmap-dev/2001/q4/">46</a>
188<li class="year">2000<li class="q1">&ndash;
189<li class="q2">&ndash;
190<li class="q3"><a href="/nmap-dev/2000/q3/">77</a>
191<li class="q4"><a href="/nmap-dev/2000/q4/">20</a>
192</ul>
193<h2>Latest Posts</h2>
194<!-- MHonArc v2.6.19 -->
195
196 
197
198<p class="excerpt">
199<strong><a href="https://seclists.org/nmap-dev/2026/q3/5">Re:New OS fingerprint: China Unicom ONT/ONU (Realtek/Boa)</a></strong>
200<em>gbfdhenr (Liang Xiangan) (Aug 01)</em><br>
201Hi Nmap developers,<br>
202<br>
203I&apos;d like to submit service fingerprints for a China Unicom GPON ONT (model PT927G) that I found in my home network. <br>
204This device runs a Linux-based firmware (kernel 3.18.24) and exposes several services.<br>
205<br>
206**Device Information**:<br>
207- Model: PT927G<br>
208- Vendor: China Unicom (customized)<br>
209- Hardware hint: SMB share comment mentions &quot;Realtek&quot;, suggesting a Realtek chipset.<br>
210<br>
211**Service Fingerprints**:<br>
2121. **HTTP (port...<br>
213</p>
214<p class="excerpt">
215<strong><a href="https://seclists.org/nmap-dev/2026/q3/4">Re:Correction: Huawei router misidentified as Netgear switch (fingerprint included)</a></strong>
216<em>gbfdhenr (Liang Xiangan) (Aug 01)</em><br>
217Hi developers,<br>
218<br>
219I&apos;d like to add a service fingerprint for port 37443/tcp on the Huawei AX3 router.<br>
220<br>
221This port runs SSL/TLS and requires client certificate authentication (mTLS). When connecting with a self-signed client <br>
222certificate, the server rejects it with a &quot;unknown ca&quot; alert, indicating that it verifies the client certificate <br>
223against a trusted CA.<br>
224<br>
225**Certificate details:**<br>
226<br>
227Subject: CN=Master.ws7100-10, O=Huawei Technologies...<br>
228</p>
229<p class="excerpt">
230<strong><a href="https://seclists.org/nmap-dev/2026/q3/3">Re:Correction: Huawei router misidentified as Netgear switch (fingerprint included)</a></strong>
231<em>gbfdhenr (Liang Xiangan) (Aug 01)</em><br>
232Hi Nmap developers,<br>
233<br>
234Following up on my previous submissions (OS fingerprint and NSE script for the Huawei AX3), I&apos;ve conducted a full port <br>
235scan and discovered two additional services that may help refine the service fingerprint database.<br>
236<br>
237**1. Port 37215/tcp – UPnP**<br>
238- Service identified as: `Huawei ATP gateway upnpd`<br>
239- This seems to be already correctly matched in `nmap-service-probes`. I just wanted to confirm its presence.<br>
240<br>
241**2. Port...<br>
242</p>
243
244
245<p class="excerpt">
246<strong><a href="https://seclists.org/nmap-dev/2026/q3/2">Re:Correction: Huawei router misidentified as Netgear switch (fingerprint included)</a></strong>
247<em>gbfdhenr (Liang Xiangan) (Aug 01)</em><br>
248PATCH] New NSE script: huawei-ax3-info.nse<br>
249<br>
250Hi Nmap developers,<br>
251<br>
252Following up on my previous OS fingerprint submission for the Huawei AX3 router (Message-ID: <br>
253&lt;335797c9.5fe8.19fb73084b0.Coremail.gbfdhenr () 163 com&gt;), I&apos;ve developed an NSE script to extract device information <br>
254from the router&apos;s /api/system/deviceinfo endpoint.<br>
255<br>
256The script retrieves:<br>
257- Device model (CustDeviceName)<br>
258- Hardware version<br>
259- Serial number<br>
260- Uptime<br>
261-...<br>
262</p>
263
264
265<p class="excerpt">
266<strong><a href="https://seclists.org/nmap-dev/2026/q3/1">Re:Correction: Huawei router misidentified as Netgear switch (fingerprint included)</a></strong>
267<em>gbfdhenr (Liang Xiangan) (Jul 31)</em><br>
268Supplemental device metadata for my previous submission (Message-ID: &lt;335797c9.5fe8.19fb73084b0.Coremail.gbfdhenr () <br>
269163 com&gt;):<br>
270<br>
271- Product: Huawei Router AX3<br>
272- Hardware Version: VER.A (HiSilicon chipset)<br>
273- Firmware/Software Version: 4.2.0.18 (V5R2)<br>
274- HarmonyOS Version: 4.2.0<br>
275- Uptime at scanning: 7 days (stable state, non-reboot)<br>
276- MAC OUI: 30:A9:98 (Huawei)<br>
277<br>
278Note: Both WAN and LAN MACs share the same OUI. Please use this to reclassify the...<br>
279</p>
280<p class="excerpt">
281<strong><a href="https://seclists.org/nmap-dev/2026/q3/0">Correction: Huawei router misidentified as Netgear switch (fingerprint included)</a></strong>
282<em>gbfdhenr (Liang Xiangan) (Jul 31)</em><br>
283Hi Nmap team,<br>
284<br>
285I&apos;ve encountered a clear OS detection misidentification that I believe should be corrected.<br>
286<br>
287**Device in question**:<br>
288- A Huawei home router (MAC OUI: 30:A9:98 -&gt; Huawei Device)<br>
289- Open ports: 53, 80, 443 (typical router/AP, not a headless switch)<br>
290- Running: Linux-based firmware (likely 3.18.24)<br>
291<br>
292**Current incorrect result**:<br>
293Nmap 7.99 reports it as: &quot;Netgear GS108Tv3, GS110Tv3, or GS308T switch (Linux 3.18.24)&quot;...<br>
294</p>
295
296 
297
298<!-- MHonArc v2.6.19 -->
299<!-- MHonArc v2.6.19 -->
300
301 
302
303<p class="excerpt">
304<strong><a href="https://seclists.org/nmap-dev/2026/q2/8">Re: NSE submission: detect &amp;
304 enumerate AI infrastructure (MCP servers + LLM inference APIs)</a></strong>
305<em>Arturo &apos;Buanzo&apos; Busleiman (Jun 30)</em><br>
306Hi, nice work! This may also be useful, I mentioned it to Fyodor privately<br>
307a couple weeks ago and forgot to mention here:<br>
308<br>
309<a  rel="nofollow" href="https://github.com/buanzo/lua-mcp">https://github.com/buanzo/lua-mcp</a><br>
310<a  rel="nofollow" href="https://github.com/buanzo/lua-mcp/blob/liblua-mcp-latest/examples/nmap/mcp-listen.nse">https://github.com/buanzo/lua-mcp/blob/liblua-mcp-latest/examples/nmap/mcp-listen.nse</a><br>
311<br>
312Cheers!<br>
313</p>
314
315
316<p class="excerpt">
317<strong><a href="https://seclists.org/nmap-dev/2026/q2/7">NSE submission: detect &amp; enumerate AI infrastructure (MCP servers + LLM inference APIs)</a></strong>
318<em>Ben Williams via dev (Jun 20)</em><br>
319Hi,<br>
320I&apos;ve opened a PR adding three NSE scripts and two shared nselibs to detect and enumerate two classes of AI <br>
321infrastructure that nmap doesn&apos;t currently cover:<br>
322<br>
323  *   mcp-info (discovery, safe, version) + mcp-enum (discovery, safe): MCP server detection (initialize handshake over <br>
324Streamable HTTP + legacy SSE), OAuth 2.1 protected-resource discovery (RFC 9728), and read-only tools/resources/prompts <br>
325enumeration with schema-based risk...<br>
326</p>
327
328
329<p class="excerpt">
330<strong><a href="https://seclists.org/nmap-dev/2026/q2/6">[PATCH] nselib/bitcoin: add address classification helpers (refs #2857, PR #3371)</a></strong>
331<em>Melo via dev (May 25)</em><br>
332PR #3371 adds three functions to nselib/bitcoin.lua:<br>
333<br>
334- looks_like_address(value) -- regex candidate detection<br>
335- validate_address(value) -- Base58Check, Bech32, Bech32m validation<br>
336- classify_address(value) -- high-level classification<br>
337<br>
338Supports mainnet, testnet, and regtest with full unittest (38/38 pass).<br>
339No network calls, no external APIs, no real keys, no changes to existing scripts.<br>
340<br>
341PR: <a  rel="nofollow" href="https://github.com/nmap/nmap/pull/3371">https://github.com/nmap/nmap/pull/3371</a><br>
342Issue:...<br>
343</p>
344
345
346<p class="excerpt">
347<strong><a href="https://seclists.org/nmap-dev/2026/q2/5">[NSE] matter-identify: identify Matter smart-home devices via mDNS</a></strong>
348<em>Balázs Zoltán (May 11)</em><br>
349 Hi,<br>
350<br>
351  Attached is matter-identify.nse, a new discovery script for identifying<br>
352  Matter (formerly Project CHIP) smart-home devices.<br>
353<br>
354  It sends DNS PTR queries to 5353/udp for the three Matter service types<br>
355  defined in the Matter Core Spec section 4:<br>
356<br>
357    _matter._tcp.local   commissioned / operational nodes<br>
358    _matterc._udp.local  nodes in commissioning mode<br>
359    _meshcop._udp.local  Thread border routers<br>
360<br>
361  TXT records are decoded into VID,...<br>
362</p>
363
364
365<p class="excerpt">
366<strong><a href="https://seclists.org/nmap-dev/2026/q2/4">Re:</a></strong>
367<em>Rahmat Ramadhan (May 01)</em><br>
368gaa<br>
369<br>
370Pada Sen, 9 Mar 2026 08:20, Juan jose Rodriguez &lt;<br>
371juanjoserodriguezmontoya35 () gmail com&gt; menulis:<br>
372</p>
373
374
375<p class="excerpt">
376<strong><a href="https://seclists.org/nmap-dev/2026/q2/3">[PATCH 0/5] ALPN-based HTTP/2 service detection improvements</a></strong>
377<em>Urval Kheni (Apr 14)</em><br>
378Hi,<br>
379<br>
380This patch series introduces ALPN-based improvements to service detection<br>
381for TLS services.<br>
382<br>
383It adds support for extracting the negotiated ALPN protocol and uses<br>
384&quot;h2&quot; as a conservative fallback signal to infer HTTP over TLS when<br>
385service detection fails.<br>
386<br>
387This improves detection of HTTP/2-only services, which return binary<br>
388responses not recognized by existing probes.<br>
389<br>
390The changes are structured as follows:<br>
391<br>
392 1. Fix OpenSSL provider...<br>
393</p>
394<p class="excerpt">
395<strong><a href="https://seclists.org/nmap-dev/2026/q2/2">Bug Report: ssl-enum-ciphers fails (EOF) on CloudFront/ECDSA targets supporting TLS 1.2</a></strong>
396<em>Jack Seredyniecki via dev (Apr 14)</em><br>
397Hello nmap dev team,<br>
398<br>
399I am reporting a false negative where ssl-enum-ciphers fails to detect TLS<br>
4001.2 on a CloudFront target (itwisegroup.com:443) that uses an ECDSA<br>
401certificate and Post-Quantum hybrid key exchange (X25519MLKEM768).<br>
402While sslscan and openssl confirm TLS 1.2 is active, Nmap reports only TLS<br>
4031.3. My debug logs show the server is dropping the connection (EOF) during<br>
404the Nmap TLS 1.2 handshake attempt:<br>
405NSE: [ssl-enum-ciphers...<br>
406</p>
407<p class="excerpt">
408<strong><a href="https://seclists.org/nmap-dev/2026/q2/1">[PATCH] Support Linux capabilities for non-root raw packet scanning</a></strong>
409<em>Ali Norouzi via dev (Apr 14)</em><br>
410Hi everyone,<br>
411<br>
412I just opened a PR that adds support for Linux capabilities, allowing nmap to<br>
413perform raw packet scans without sudo when the binary has `CAP_NET_RAW` set via<br>
414setcap:<br>
415<br>
416    <a  rel="nofollow" href="https://github.com/nmap/nmap/pull/3333">https://github.com/nmap/nmap/pull/3333</a><br>
417<br>
418Please review.<br>
419<br>
420Best,<br>
421Ali<br>
422</p>
423<p class="excerpt">
424<strong><a href="https://seclists.org/nmap-dev/2026/q2/0">Fix for issue #3326</a></strong>
425<em>advait deshmukh (Apr 14)</em><br>
426Issue link &lt;<a  rel="nofollow" href="https://github.com/nmap/nmap/issues/3326">https://github.com/nmap/nmap/issues/3326</a>&gt;<br>
427Pull request link &lt;<a  rel="nofollow" href="https://github.com/nmap/nmap/pull/3337">https://github.com/nmap/nmap/pull/3337</a>&gt;<br>
428I read the source code and, from what I understood, the current output<br>
429appears to be intentional. The ipv4 value being shown seems to refer to the<br>
430next header, i.e., the protocol of the packet encapsulated within the outer<br>
431packet, which in this case is IPv6.<br>
432Since the user has explicitly specified -6 in the command, it...<br>
433</p>
434
435 
436
437<!-- MHonArc v2.6.19 -->
438<h2>More Lists</h2>
439<p>
440Dozens of other network security lists are archived at
441<a href="https://seclists.org/">SecLists.Org</a>.
442</p>
443</main><!-- content -->
444
445<footer id="nst-foot">
446   <form class="nst-search" id="nst-foot-search" action="/search/">
447    <input class="nst-search-q" name="q" type="search" placeholder="Site Search">
448    <button class="nst-search-button" title="Search">
449     <img style="width:100%;aspect-ratio:1/1;" alt="" aria-hidden="true"
450      src="/shared/images/nst-icons.svg#search">
451     </button>
452   </form>
453<div class="flexlists">
454<div class="fl-unit">
455<h2><a class="nlink" href="https://nmap.org/">Nmap Security Scanner</a></h2>
456<ul>
457<li><a class="nlink" href="https://nmap.org/book/man.html">Ref Guide</a>
458<li><a class="nlink" href="https://nmap.org/book/install.html">Install Guide</a>
459<li><a class="nlink" href="https://nmap.org/docs.html">Docs</a>
460<li><a class="nlink" href="https://nmap.org/download.html">Download</a>
461<li><a class="nlink" href="https://nmap.org/oem/">Nmap OEM</a>
462</ul>
463</div>
464<div class="fl-unit">
465<h2><a class="nlink" href="https://npcap.com/">Npcap packet capture</a></h2>
466<ul>
467<li><a class="nlink" href="https://npcap.com/guide/">User's Guide</a>
468<li><a class="nlink" href="https://npcap.com/guide/npcap-devguide.html#npcap-api">API docs</a>
469<li><a class="nlink" href="https://npcap.com/#download">Download</a>
470<li><a class="nlink" href="https://npcap.com/oem/">Npcap OEM</a>
471</ul>
472</div>
473<div class="fl-unit">
474<h2><a class="nlink" href="https://seclists.org/">Security Lists</a></h2>
475<ul>
476<li><a class="nlink" href="https://seclists.org/nmap-announce/">Nmap Announce</a>
477<li><a class="nlink" href="https://seclists.org/nmap-dev/">Nmap Dev</a>
478<li><a class="nlink" href="https://seclists.org/fulldisclosure/">Full Disclosure</a>
479<li><a class="nlink" href="https://seclists.org/oss-sec/">Open Source Security</a>
480<li><a class="nlink" href="https://seclists.org/dataloss/">BreachExchange</a>
481</ul>
482</div>
483<div class="fl-unit">
484<h2><a class="nlink" href="https://sectools.org">Security Tools</a></h2>
485<ul>
486<li><a class="nlink" href="https://sectools.org/tag/vuln-scanners/">Vuln scanners</a>
487<li><a class="nlink" href="https://sectools.org/tag/pass-audit/">Password audit</a>
488<li><a class="nlink" href="https://sectools.org/tag/web-scanners/">Web scanners</a>
489<li><a class="nlink" href="https://sectools.org/tag/wireless/">Wireless</a>
490<li><a class="nlink" href="https://sectools.org/tag/sploits/">Exploitation</a>
491</ul>
492</div>
493<div class="fl-unit">
494<h2><a class="nlink" href="https://insecure.org/">About</a></h2>
495<ul>
496<li><a class="nlink" href="https://insecure.org/fyodor/">About/Contact</a>
497<li><a class="nlink" href="https://insecure.org/privacy.html">Privacy</a>
498<li><a class="nlink" href="https://insecure.org/advertising.html">Advertising</a>
499<li><a class="nlink" href="https://nmap.org/npsl/">Nmap Public Source License</a>
500</ul>
501</div>
502<div class="fl-unit social-links">
503<a class="nlink" href="https://twitter.com/nmap" title="Visit us on Twitter">
504 <img width="32" height="32" src="/shared/images/nst-icons.svg#twitter" alt="" aria-hidden="true">
505 </a>
506<a class="nlink" href="https://facebook.com/nmap" title="Visit us on Facebook">
507 <img width="32" height="32" src="/shared/images/nst-icons.svg#facebook" alt="" aria-hidden="true">
508 </a>
509<a class="nlink" href="https://github.com/nmap/" title="Visit us on Github">
510 <img width="32" height="32" src="/shared/images/nst-icons.svg#github" alt="" aria-hidden="true">
511 </a>
512<a class="nlink" href="https://reddit.com/r/nmap/" title="Discuss Nmap on Reddit">
513 <img width="32" height="32" src="/shared/images/nst-icons.svg#reddit" alt="" aria-hidden="true">
514 </a>
515</div>
516</div>
517</footer>
518
519</div><!-- wrapper -->
520</body>
521</html>

Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.