From 7bf769d654d99f45f0452102ebaf7fa7bd0f7d60 Mon Sep 17 00:00:00 2001 From: tomsellers Date: Sat, 11 Jun 2011 14:56:05 +0000 Subject: [PATCH] Adding an Apache related softmatch line to catch service banners such as: Server: Apache mod_fcgid/2.3.5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 It's a softmatch as it would match lines like Server: Apache Tomcat 1.2.3 (blah blah blah) --- nmap-service-probes | 3 +++ 1 file changed, 3 insertions(+) diff --git a/nmap-service-probes b/nmap-service-probes index bbbe3b810..99fc8106a 100644 --- a/nmap-service-probes +++ b/nmap-service-probes @@ -4710,6 +4710,9 @@ match http m|^HTTP/1\.[01] \d\d\d.*\r\nServer: Apache[- ]Coyote/(\d[-\d.]+)\r\n. match http m|^HTTP/1\.[01] \d\d\d.*\r\nServer: Apache[- ]Coyote/(\d[-\d.]+)\r\n|s p|Apache Tomcat/Coyote JSP engine| v|$1| match http m|^HTTP/1\.[01] \d\d\d .*\r\nServer: Apache/([\w._-]+) Ben-SSL/([\w._-]+) \(Unix\)\r\n|s p/Apache httpd/ v/$1/ i/Ben-SSL $1/ o/Unix/ +# Place hard matched Apache banners above this line +softmatch http m|^HTTP/1\.[01] \d\d\d.*\r\nDate: .*\r\nServer: Apache ([^\r\n]+)\r\n| p/Apache httpd/ i/$1/ + match http m|^HTTP/1\.[01] \d\d\d [^\r\n]*\r\n.*Server: nginx\r\n| p/nginx/ match http m!^HTTP/1\.[01] \d\d\d [^\r\n]*\r\n.*Server: nginx/([\d.]+)\r\n!s p/nginx/ v/$1/ match http m!^HTTP/1\.[01] \d\d\d [^\r\n]*\r\n.*Server: nginx/([\d.]+) \+ ([^\r\n]*)\r\n!s p/nginx/ v/$1/ i/$2/