diff --git a/docs/refguide.xml b/docs/refguide.xml index ed0718c09..531b4c6af 100644 --- a/docs/refguide.xml +++ b/docs/refguide.xml @@ -776,12 +776,14 @@ you would expect. packet will be empty, though some use a protocol-specific payload that is more likely to elicit a response. -The payload database is described at . -See for a description of the database of payloads. -protocol-specific -payloadsUDPPacket -content can also be affected with the , -, and options. + protocol-specific payloadsUDP + The payloads are the same probes used in service and version + detection and are defined in the + nmap-service-probes + nmap-service-probes + file. Packet content can also be affected with the + , , and + options. The port list takes the same format as with the previously discussed diff --git a/mswin32/nsis/Nmap.nsi b/mswin32/nsis/Nmap.nsi index 6127f6bc9..47f581476 100644 --- a/mswin32/nsis/Nmap.nsi +++ b/mswin32/nsis/Nmap.nsi @@ -221,7 +221,6 @@ Section "Nmap Core Files" SecCore File ${STAGE_DIR}\LICENSE File ${STAGE_DIR}\nmap-mac-prefixes File ${STAGE_DIR}\nmap-os-db - File ${STAGE_DIR}\nmap-payloads File ${STAGE_DIR}\nmap-protocols File ${STAGE_DIR}\nmap-rpc File ${STAGE_DIR}\nmap-service-probes diff --git a/nmap-service-probes b/nmap-service-probes index 1f0737544..d4eeecaa1 100644 --- a/nmap-service-probes +++ b/nmap-service-probes @@ -16453,7 +16453,14 @@ sslports 5684 softmatch coap m|^`E| ##############################NEXT PROBE############################## -# DTLS Client Hello. Dissection available in nmap-payloads +# DTLS Client Hello. +# 0x00 - 0x0c : DTLS 1.0, length 52 +# 0x0d - 0x18 : ClientHello, length 40, sequence 0, offset 0 +# 0x19 - 0x20 : DTLS 1.2 +# 0x21 - 0x41 : Random +# 0x42 - 0x43 : Session id length 0, cookie length 0 +# 0x44 - 0x47 : Cipher suites, mandatory TLS_RSA_WITH_AES_128_CBC_SHA +# 0x48 - 0x49 : Compressors (NULL) Probe UDP DTLSSessionReq q|\x16\xfe\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x36\x01\x00\x00\x2a\x00\x00\x00\x00\x00\x00\x00\x2a\xfe\xfd\x00\x00\x00\x00\x7c\x77\x40\x1e\x8a\xc8\x22\xa0\xa0\x18\xff\x93\x08\xca\xac\x0a\x64\x2f\xc9\x22\x64\xbc\x08\xa8\x16\x89\x19\x30\x00\x00\x00\x02\x00\x2f\x01\x00| rarity 2 ports 443,853,3391,4433,4740,5349,5684,5868,6514,6636,8232,10161,10162,12346,12446,12546,12646,12746,12846,12946,13046 diff --git a/payload.h b/payload.h index 38a8a30ff..c2716aa27 100644 --- a/payload.h +++ b/payload.h @@ -65,7 +65,6 @@ #define PAYLOAD_H #include "service_scan.h" -#define PAYLOAD_FILENAME "nmap-payloads" // Semi-arbitrary limit, but we use u8 for indexing/retrieval // and we send all payloads at once and need to not overwhelm.