mirror of
https://github.com/nmap/nmap.git
synced 2025-12-29 02:49:01 +00:00
Add a TLS-PSK probe and match for Steam streaming service. http://seclists.org/nmap-dev/2015/q2/47
This commit is contained in:
@@ -14073,3 +14073,18 @@ match tor-orport m|^\x00\x00\x07\x00\x02\x00\x03| p/Tor/ v/0.2.3.7 - 0.2.4.11/ i
|
||||
# https://github.com/tvdw/gotor
|
||||
# https://lists.torproject.org/pipermail/tor-dev/2015-January/008135.html
|
||||
match tor-orport m|^\x00\x00\x07\x00\x02\x00\x04| p/GoTor/ i/supported protocol versions: 4/
|
||||
|
||||
##############################NEXT PROBE##############################
|
||||
# TLS with Pre-Shared Key handshake, generated by NSE's tls.lua
|
||||
# SSL services that only support PSK will not respond to other probes.
|
||||
# http://seclists.org/nmap-dev/2015/q2/47
|
||||
Probe TCP TLS-PSK q|\x16\x03\x00\x00u\x01\x00\x00q\x03\x03U8*bETXSJDSZNHMDFAONDKJXXZYZHWHR\x00\x000\x00\x8a\x00\x8b\x00\x8c\x00\x8d\x00\x8e\x00\x8f\x00\x90\x00\x91\x00\x92\x00\x93\x00\x94\x00\x95\x00\xa8\x00\xa9\x00\xaa\x00\xab\x00\xac\x00\xad\x00\xae\x00\xaf\x00\xb2\x00\xb3\x00\xb6\x00\xb7\x01\x00\x00\x18\x00\r\x00\x14\x00\x12\x00\x01\x00\x02\x00\x03\x01\x01\x01\x02\x01\x03\x02\x01\x02\x02\x02\x03|
|
||||
rarity 9
|
||||
ports 27036
|
||||
|
||||
match ssl/steam m|^\x16\x03\x03\0.\x02\0\0.\x03\x03.*\x16\x03\x03\0\x0b\x0c\0\0\x07\0\x05steam|s p/Valve Steam In-Home Streaming service/ i/TLSv1.2 PSK/
|
||||
|
||||
match ssl m=^\x16\x03[\0-\x03]..\x02\0\0.\x03[\0-\x03].*\x16\x03[\0-\x03]\0.\x0c.....(.+?)(?:\x16\x03[\0-\x03]|$)=s p/TLS PSK/ i/PSK identity hint: $P(1)/
|
||||
|
||||
# SSLv3 - TLSv1.2 Alert
|
||||
match ssl m|^\x15\x03[\0-\x03]\0\x02[\x01\x02].$|s
|
||||
|
||||
Reference in New Issue
Block a user