changes

Ubuntu packages of security software。 相当不错的源码

Changelog

v5.2	September 2005 (THC public release)
	! THIS IS A THC TAX ANNIVERSARY SPECIAL RELEASE ! HAVE FUN !
	* Included patch from [e-mail] for cleaner gcc compile
	* Added SSL_Pending() to prevent rare locking on SSL ports,
	  thanks to michel(at)arboi.fr.eu.org for reporting
	* Added lots of fingerprints, most from Johnny Cyberpunk / THC - THANKS!

v5.1	June 2005 (THC public release)
	* Big appdefs.resp update. Thanks to all contributors!
	* Finally and forever fixed the --prefix= issue
	* Fixed the web update function for bad inet_pton implementations
	* Added support for nmap files with IPv6 addresses
	* You can scan/check port 0 now (wish from nbach<at>deloitte.dk)
	* Less error prone "make install"

v5.0	February 2005 (THC public release)
	* IPv6 support added, use -6 to activate
	* Made the help screen easier to read
	* No Cygwin detection needed anymore
	* Dump -d option will only print "Unrecognized" response prior those
	  responses which are *really* not unrecognized
	* Uh, appdefs.* files were installed to both, bin/ and etc/, duh
	  finally they are really only in .../etc/
	* Removed the "error - ignored" messages from Makefile
	* Added amap-lib - an open interface so incorporation can be made
	  easily into other programs. See the text file AMAP-LIB-INTERFACE
	* Fixed "lvalue deprecated" warnings during compilation, lets hope
	  amap still compiles on old UNIXes. Please report if not.
	* Fixed prefix issue if "./configure --prefix=/bla" was used

v4.9    February 2005 (THC internal release)
        - internal, see v5.0

v4.8	January 2005 (THC public release)
	* A project web page for amap was set-up: http://www.thc.org/thc-amap
	* Added an Online Update feature for the application fingerprints!
	  Just run it as "amap -W" and there you go! Includes version
	  checking and some nice other features.
	* The application fingerprints of amap will now be installed to
	  /usr/local/etc - this has been asked for sooo long :-)
	* Added many new responses (thanks to [e-mail],
	  [e-mail] and others)
	* Fixed a bug in the -q option
	* Note: the license changed, and is now the same as hydra
	* Added autodetection for Cygwin and MacOS/X, enhanced openssl
	  detection

v4.7	October 2004 (THC public release)
	* Fixed a bug in the SSL analyzing function, seems openssl changed
	  behaviour, fingerprinting behing SSL ports works now again
	* Added more triggers and responses (especially [e-mail]
	  sent in lots of stuff, thanks a lot)

v4.6	June 2004 (THC public release)
	* Added 9 new responses (thanks to [e-mail], Alf, and more)
	* Fixed a small string termination bug (thanks to [e-mail])

v4.5	November 2003 (THC public release)
	* Added portability fixes for openbsd (thanks to [e-mail])
	* Added portability fixes for cygwin (thanks to [e-mail])
	* Added 6 responses (thanks to [e-mail], [e-mail] and
	  [e-mail])

v4.4	September 2003 (unreleased)
	* Added mkdir -p to the Makefile (thanks to [e-mail])
	* Added a few responses

v4.3	September 2003 (THC public release)
	* Trigger names are now always printed with unrecognized responses
	* Added 8 new responses (thanks to [e-mail],
	  [e-mail], [e-mail], [e-mail]
	  and [e-mail])
	* Fixed a off-by-one overflow (which would not fuck up anything :-)
	  was found by z33d (thanks to [e-mail])
	* Added --prefix option to configure script, and honoring PREFIX
	* Enhanced ssl library searching
	* Added PCRE_DOTALL to the pcre regex definition to enhance
	  response identifications
	* Fixed typos :-) (thanks to guys from the CCC Camp presentation)

v4.2	August 2003 (THC public release)
	* Added 10 new responses (thanks to [e-mail],
	  [e-mail], [e-mail] and [e-mail])
	* Enhanced again the max size for an nmap line, lets hope 64k are
	  enough now! (thanks to [e-mail])
	* Due a bug, amap would only check the last host line in nmap files
	* Fixed a compiler warning (thanks to [e-mail])
	* Trigger name is now displayed in verbose mode by unrecognized
	  responses
        - 4.1 - THC beta release -
	* 28 new response ids and triggers (thanks to [e-mail],
	  [e-mail], [e-mail] and [e-mail])
	* It was possible to define ports to be scanned > 65535, fixed
	  (found by [e-mail])
	* If appdefs.* files are in MS-DOS file format, this is not a problem
	  any more :-) no need for dos2unix etc. if you received appdefs.*
	  files via M$-Outlook

v4.0	July 2003 (THC public release)
	! This is the first public release of amap after its complete rewrite !
	! If you would like to be an amap beta tester, subscribe yourself to
	  our amap mailing list! send an email to: [e-mail]
	! What is new from the last public version (2.7):
	  + TCP connection reuse for RPC identification
	  + Banner grab mode, Portscan mode (-B, -P)
	  + for response identification (appdefs.resp):
		  * response strings are now real perl regular expressions
		  * can hit only on a defined trigger if wished so
		  * can have a minimum and maximum length set on the reply data
		  * can require the ip protocol (tcp or udp)
	  + Put as many ports on the command line as you like and ranges are
	    supported too! :-)
	  + much faster
	  + more reliable
	  + bug fixes, better platform support
	  + more application responses (of course)
	  + added -q (uiet) switch which will not report any closed ports,
	    and wont mark them as unidentified.
	! What changed from the last public version (2.7):
	  - switched the meaning of the -u and -U options
	  - Renamed -C options (number of parallel connections) to -c ...
	  - -C now specifies the number of retries on connection timeouts
	  - file formats for appdefs.* changed
	  - output changed a bit (it is much better now)
	  - README, man page, etc. are all up to date now
	! Finally: thanks a lot to Skyper for the pcre library hint and all
	  the beta testers who helped to make amap stable, reliable and
	  bugfree :-) - and of course added many, many application ids.
	! Have fun !

//=============================== OLD ======================================\\

v3.8	July 2003 (unreleased)
	* Fix in skip functions and SSL shutdown
	* Added new responses (thanks to [e-mail] and [e-mail])
	* Reworked the README file, added an INSTALL file
	! v3.8 will now be renamed to v4.0 and made public

v3.7	July 2003 (THC beta release)
	* Thanks to [e-mail] for providing a patch for my configure
	  script to let it run on Solaris successfully
	* Amap crashed when the nmap input file was not containing correct
	  data. Fixed. (thanks to [e-mail] and [e-mail])
	* Enhanced a few responses (thanks to [e-mail], [e-mail],
	  [e-mail])
	* Added man page directory detection to the configure script :-)
	* Fixed a typo in an error message (thanks to [e-mail])

v3.6	July 2003 (THC beta release)
	* Amap segfaulted when executed like ./amap -B localhost 1-10000
	  for no known reason. disallowing socket 0 solved it.
	  (thanks to [e-mail] for reporting)
	* Amap would loop endlessly in portscan mode against too many UDP ports.
	  UDP timeout checks were not correctly implemented. (thanks to  
	  [e-mail] for reporting)
	* Small enhancements

v3.5	July 2003 (THC beta release)
	! There is now a betatest mailinglist available !
	* Added port range support (e.g. 20-25) on commandline
	* Amap needs now less memory and is a little bit faster
	* Added -q (uiet) switch which will not report any closed ports,
	  and wont mark them as unidentified.
	* Added more response IDs (thanks to [e-mail] and
	  [e-mail]
	* Added a Solaris library definition (thanks to [e-mail])

v3.4	June 2003 (THC special release)
	* Added -B option, which just grabs a banner, no triggers are sent
	* Added -P option, which makes amap a full connect port scanner.
	  Note: Amap is a little bit faster than nmap -sT, cool ...
	* Added another data definition to the -m (achine readable) logfile
	  output. It also has got a :PORT_STATUS: field now, which is set to
	  either: open, closed, timeout.
	* Amap now reuses sockets, which is needed for port scanning :-)

v3.3	June 2003 (THC beta release)
	* Renamed -C options (number of parallel connections) to -c ...
	  -C is now a hidden option to specify the number of retries on
	  connection timeouts [vH]
	* More efficient checks on last timeout waiting routine
	* Minor display message fixes [vH]
	* Oops due a bug in the makefile, no openssl support was in, fixed.
	  (introduced in 3.1) [vH]
	* Reconnects were made to the wrong target/port, fixed.
	  (introduced in 3.2) [vH]

v3.2	June 2003 (THC beta release)
	* Made all connects unblocked. this speeeeeds things up and prevents
	  hangs on scans to firewalled ports [vH]
	* Made the tcp port reuse for rpc scanning more effective [vH]