ZMap Files

What's Changed - Highlights

• Fixed bug where an array access out-of-bounds was possible on Mac with many interfaces
• Added a RTT measurement to the TCP SYN probe
• Adds a "blank" --output-fields to the TCP SYN module to allow for easier piping into ZGrab2 in multi-port mode
• Fixes issues with rate-limiting (--bandwidth, --rate, etc.) not being respected when using --probes and resulting in really bursty traffic patterns at low scan rates
• Fixes bug where --iface wasn't being respected on Linux (#956)
• Adds optional JA4TS fingerprints of SYN-ACKs, see --help on enabling this with --probe-args

What's Changed - Full List

• Update README.md by @zakird in https://github.com/zmap/zmap/pull/940
• Remove unused aesrand_free function by @phillip-stephens in https://github.com/zmap/zmap/pull/944
• Add dummy return to get_group() by @tacerus in https://github.com/zmap/zmap/pull/945
• Increase the size of buffer for GW detection by @phillip-stephens in https://github.com/zmap/zmap/pull/949
• README update - include mention of scanning ethics and example by @phillip-stephens in https://github.com/zmap/zmap/pull/954
• Bug fix with rate-limit and --probes by @phillip-stephens in https://github.com/zmap/zmap/pull/953
• Fix failing FreeBSD integration by @phillip-stephens in https://github.com/zmap/zmap/pull/957
• Fix bug of not explicitly binding to socket in send-linux by @phillip-stephens in https://github.com/zmap/zmap/pull/956
• security: fix heap corruption in DNS TXT rdlength=0 crash by @mitre88 in https://github.com/zmap/zmap/pull/963
• Fix FreeBSD CI runner by @phillip-stephens in https://github.com/zmap/zmap/pull/965
• Fix array out-of-bounds indexing in get_gateway-bsd.h by @phillip-stephens in https://github.com/zmap/zmap/pull/966
• Link our getting started guides on the README by @phillip-stephens in https://github.com/zmap/zmap/pull/964
• [check_manfile.py] Fix file handle leak by @mitre88 in https://github.com/zmap/zmap/pull/967
• [zmap.c] Fix sprintf buffer overflow - use snprintf by @mitre88 in https://github.com/zmap/zmap/pull/968
• Adds a "blank" output field for easy multi-port scans with ZGrab2 by @phillip-stephens in https://github.com/zmap/zmap/pull/969
• Adds a RTT measurement to the TCP SYN probe by @phillip-stephens in https://github.com/zmap/zmap/pull/970
• update github actions to latest versions by @Project516 in https://github.com/zmap/zmap/pull/973
• Fix link to subsurface in CONTRIBUTING by @Project516 in https://github.com/zmap/zmap/pull/972
• Fix grammar in README regarding ZMap capabilities by @zakird in https://github.com/zmap/zmap/pull/975
• [tcp_synscan] add optional JA4TS fingerprint of SYN-ACK responses by @apowis in https://github.com/zmap/zmap/pull/974

New Contributors

• @tacerus made their first contribution in https://github.com/zmap/zmap/pull/945
• @mitre88 made their first contribution in https://github.com/zmap/zmap/pull/963
• @Project516 made their first contribution in https://github.com/zmap/zmap/pull/973
• @apowis made their first contribution in https://github.com/zmap/zmap/pull/974

Full Changelog: https://github.com/zmap/zmap/compare/v4.3.3...v4.3.5