diff --git a/nmap-service-probes b/nmap-service-probes index 8695b9f72..68486fde9 100644 --- a/nmap-service-probes +++ b/nmap-service-probes @@ -2713,6 +2713,7 @@ match telnet m|^\xff\xfb\0\xff\xfd\0\xff\xfb\x01\xff\xfd\x01\xff\xfb\x03\xff\xfd match telnet m|^\xff\xfd\x01\xff\xfd!\xff\xfb\x01\xff\xfb\x03Xcelerator IP \r\nLogin: | p/Vertical Xcelerator IP telnetd/ d/VoIP adapter/ match telnet m|^Console is locked by another telnet/SSH application!\n| p/Arris tm602g cable modem telnetd/ i/console in use/ d/broadband router/ match telnet m|^odec=\d+ u=\d+, p=\d+, i=\d+, max entries = \d+ \r\n\d+: IMGREQUEST: request_stats, image buffers available = \d+ \r\n\d+: MAIN: (\d+) images\(J=\d+, P=\d+, I=\d+\) stored on disk in last minute| p/Dedicated Micros Digital Sprite 2 DVR debug telnetd/ i/$1 images saved in last minute/ d/webcam/ +match telnet m|^\r\nSiemens 5940 T1E1 \[COMBO\] Router \([\w-_.]+\) v([\w-_.]+) Ready\r\n\xff\xfb\x01\xff\xfb\x03\xff\xfd\x01\xff\xfe\x01Username: | p/Siemens 5940 T1E1 router telnetd/ d/router/ v/$1/ match telnet-proxy m|^nodnsquery/[\d.]+ is not authorized to use the telnet proxy\r\n| p/Gauntlet telnet proxy/ match telnet-proxy m|^Eingabe Servername\[:Port\] : | p/JanaServer telnet proxy/ i/German/ @@ -2948,7 +2949,8 @@ match ftp m|^220 ftp\r\n$| p/Bulletproof ftp server/ o/Windows/ match ftp m|^220 FTP server ready\.\r\n200 NOOP command successful\.\r\n| p/Tektronix Phaser ftpd/ d/printer/ match ftp m|^220 \"Welcome to Bot FTP service\.\"\r\n331 Please specify the password\.\r\n230 Login successful\. Have fun\.\r\n| p/Unknown trojan ftpd/ match ftp m|^220 OK\n226 OK\n| p/Sasser worm minimal ftpd/ o/Windows/ -match ftp m|^220 FTPd ([\d.]+)\r\n500 Bad command\r\n| p/USR8022 router ftpd/ v/$1/ d/router/ +# USR8022 or AirLive WT-2000R WAPs +match ftp m|^220 FTPd ([\d.]+)\r\n500 Bad command\r\n| p/Generic WAP ftpd/ v/$1/ d/WAP/ match ftp m|^220 Telindus FTP server ready\.\r\n502 Command not implemented\.\r\n502 Command not implemented\.\r\n| p/Telindus ftpd/ d/router/ match ftp m|^220 Server ready\r\n500 '\r': command not understood\.\r\n500 '\r': command not understood\.\r\n| p/Welltech Wellgate VoIP adapter ftpd/ d/VoIP adapter/ match ftp m|^220 muddleftpd \(([\d.]+)\) server ready\. Enter Username\.\r\n500 Only one command at a time\.\r\n| p/Muddleftpd/ v/$1/ @@ -3524,6 +3526,7 @@ match http m|^HTTP/1\.0 200 OK\r\n.*\r\n\r\neMule (\d[-.\w]+) |s p/eMule P2P/ v/$1/ match http m|^HTTP/1\.1 \d\d\d .*\r\nServer: eMule\r\n.*eMule Plus (\d[-.\w]+) |s p/eMule Plus P2P/ v/$1/ match http m|^HTTP/1\.1 \d\d\d .*\r\nServer: eMule\r\n.*<title>Web Interface ([\w-_.]+)|s p/eMule P2P/ v/$1/ +match http m|^HTTP/1\.1 \d\d\d .*\r\nServer: eMule\r\n|s p/eMule P2P/ match http m|^HTTP/1\.1 \d\d\d .*\r\nServer: embedded\r\n.*eMule ([\w-_.]+) \[MorphXT v([\w-_.]+)\]|s p/eMule MorphXT P2P/ v|$1/$2| match http m|^HTTP/1\.1 \d\d\d .*\r\nServer: aMule\r\n.*<title>aMule (\d[-.\w]+) - Web Control Panel|s p/aMule P2P/ v/$1/ match http m|^HTTP/1\.1 \d\d\d .*\r\nServer: aMule\r\n| p/aMule P2P/ @@ -3657,6 +3660,7 @@ match http m|^HTTP/1\.[01] \d\d\d.*\r\nServer: Apache[- ]Coyote/(\d[-\d.]+)\r\n| match http m|^HTTP/1\.[01] \d\d\d .*\r\nServer: Apache/([\w-_.]+) Ben-SSL/([\w-_.]+) \(Unix\)\r\n|s p/Apache httpd/ v/$1/ i/Ben-SSL $1/ o/Unix/ match http m!^HTTP/1\.1 ([1235]\d\d|4(\d[1-9]|[1-9]\d)) .*\r\nServer: nginx/([\d.]+)\r\n! p/nginx web server/ v/$3/ +match http m|^HTTP/1\.1 \d\d\d OK\r\nServer: nginx\r\n| p/nginx web server/ match http m|^HTTP/1\.1.*\r\nServer: Netscape-Enterprise/([-.\w]+)\r\n| p/Netscape Enterprise httpd/ v/$1/ # Citrix NFuse 2.0 on MS IIS 5.0 @@ -4155,7 +4159,7 @@ match http m|^HTTP/1\.1 \d\d\d .*\r\nServer: Rapid Logic/([\d.]+)\r\n.*\r\n\r\n\r\n\r\n\r\nSELECTserver: License Manager\r\n|s p/SELECTserver license manager httpd/ match http m|^HTTP/1\.0 200 Document follows\r\nDate: .*\r\nServer: WebminServer\r\n| p/WebminServer httpd/ match http m|^HTTP/1\.1 200 OK.*\* Zimbra Collaboration Suite Web Client\n|s p/Zimbra http config/ +match http m|^HTTP/1\.1 302 Found\r\n.*\r\nLocation: https://[\d.:]+/zimbraAdmin\r\n|s p/Zimbra admin http config/ match http m|^HTTP/1\.1 \d\d\d .*\r\nWWW-Authenticate: Basic realm=\"CANOPY ([-\w]+)\"\r\n|s p/Motorola Canopy WAP http config/ d/WAP/ i/MAC $1/ match http m|^HTTP/1\.0 200 Document follows\nMIME-Version: 1\.0\nServer: Java Cell Server\n.*dCache service|s p/dCache httpd/ i/Distributed Storage Node/ d/storage-misc/ match http m|^HTTP/1\.0 200 OK\r\nDate:.*\r\nServer: HighPoint Raidman WebServer/([-.\w\d]+)\r\nAccept-Ranges: bytes\r\n| p/HighPoint Raidman web config http/ v/$1/ d/storage-misc/ @@ -4946,6 +4954,7 @@ match http m|^HTTP/1\.[01] \d\d\d .*\r\nDate: .*\r\nServer: BCReport/([\w-_.]+)\ match http m|^HTTP/1\.[01] \d\d\d .*\r\nDate: .*\r\nX-Powered-By: ASP\.NET\r\n| p/Microsoft IIS httpd/ o/Windows/ match http m|^HTTP/1\.1 200 OK\r\nContent-Type: text/html\r\nConnection: close\r\n\r\nU\.S\. Robotics Broadband Router Configuration| p/US Robotics aDSL router http config/ d/broadband router/ match http m|^HTTP/1\.0 \d\d\d .*\r\nServer: WYM/([\w-_.]+)\r\n.*\r\n|s p/Gadspot NC1000-L10 webcam http config/ d/webcam/ i/WYM httpd $1/ +match http m|^HTTP/1\.0 \d\d\d .*\r\nServer: WYM/([\w-_.]+)\r\n.*Video Server \(V([\w-_.]+)\)\n\n|s p/Gadspot Video Server httpd/ v/$2/ d/media device/ i/WYM httpd $1/ match http m|^HTTP/1\.0 200 OK\r\nContent-Type: text/html\r\n\r\n\r\n\r\nTallyGenicom Intelliprint (\w+)\r\n| p/TallyGenicom Intelliprint $1 http config/ d/printer/ match http m|^HTTP/1\.0 \d\d\d .*\r\n\r\n[^\r\n<]+ WJ-HD220 [^\r\n<]+|s p/Panasonic WJ-HD220 http config/ d/media device/ match http m|^HTTP/1\.1 \d\d\d .*WV-NS202A Network Camera|s p/Panasonic WV-NS202A webcam http config/ d/webcam/ @@ -5037,6 +5046,27 @@ match http m|^HTTP/1\.0 401 Unauthorized\r\nDate: .*\r\nServer: Agranat-EmWeb/R( match http m|^HTTP/1\.1 200 Okay\r\n.*\r\nServer: PLT Scheme\r\n|s p/PLT Scheme httpd/ match http m|^HTTP/1\.0 \d\d\d .*\r\nServer: Swazoo ([\w-_.]+) Smalltalk Web Server\r\n| p/Swazoo Smalltalk httpd/ v/$1/ match http m|^HTTP/1\.1 401 OK\r\nContent-Length: 0\r\nConnection: Keep-Alive\r\nWWW-Authenticate: Basic realm=\"/\"\r\nContent-Type: text/html\r\nCache-Control: no-cache\r\nEXT: UCoS, UPnP/1\.0, UDI/1\.0\r\n| p/Universal Devices Insteon home automation http config/ d/specialized/ +match http m|^HTTP/1\.1 200 OK\r\n.*Set-Cookie: AUTHKEY=\r\n.*Welcome to Mailtraq WebMail|s p/Mailtraq WebMail httpd/ o/Windows/ +match http m|^HTTP/1\.0 200 OK\r\nServer: TopLayer/([\w-_.]+)\r\n.*ALT=\"Welcome to the AppSwitch\"|s p|Top Layer Networks AppSafe/AppSwitch IDS http config| v/$1/ +match http m|^HTTP/1\.0 200 .*\r\nServer: Mbedthis-AppWeb/([\w-_.]+)\r\n.*BT Home Hub manager - Home|s p/BT Home Hub http config/ d/broadband router/ i/Mbedthis-AppWeb $1/ +match http m|^HTTP/1\.1 200 .*\r\nServer: MoxaHttp/([\w-_.]+)\r\n.*NPort Web Console|s p/Moxa NPort serial to IP http config/ i/MoxaHttp $1/ d/specialized/ +match http m|^HTTP/1\.1 200 OK\r\nConnection: close\r\nCache-Control: no-store\r\nContent-Length: \d+\r\nContent-Type: text/html\r\n\r\n\n\n\n
\n

Invalid Access

\n
\n

\n\n\n\n| p/Cisco ATA186 VoIP adapter http config/ d/VoIP adapter/ +match http m|^HTTP/1\.0 200 OK\r\nServer: http server ([\w-_.]+)\r\n.*NAS\n