PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-25 00:49:01 +00:00
Code Issues Projects Releases Wiki Activity

removed p/Windows XP identd/ due to report from Brandon Enright to nmap-dev that there is no native Windows XP identd and plus backdoors commonly trigger this signature. Those are Windows backdoors, so we'll keep o/Windows/ unless we see this matching other systems

Browse Source
This commit is contained in:
fyodor
2009-01-30 23:14:41 +00:00
parent b290ec93af
commit b1544ec5b5
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
nmap-service-probes
View File

@@ -2959,7 +2959,7 @@ match ident m|^: USERID : UNIX : CacheFlow Server\r\n| p/CacheFlow identd/ o/Cac
match ident m|^:USERID:OTHER:\d+-ident-is-a-completely-pointless-protocol-that-offers-no-security-or-traceability-at-all-so-take-this-and-log-it!\r\n| p/Fake identd/
match ident m|^ : USERID : UNIX : ([-\w_]+)$| p/Klient identd/ i/IRC Nick $1/
match ident m|^\r\n: ERROR : HIDDEN-USER\r\n$| p/Borderware Firewall identd/ d/firewall/
match ident m|^ : USERID : UNIX : [a-z]{4,8}\r\n$| p/Windows XP identd/ o/Windows/
match ident m|^ : USERID : UNIX : [a-z]{4,8}\r\n$| o/Windows/
match ident m|^1 , 1 : USERID : OTHER : chuck-the-bsd-deamon\r\n$| p/widentd/
match ident m|^, : USERID : UNIX : [^\r\n]+\r\n$| p/FTPRush FTP client identd/ o/Windows/
match ident m|^0 , 0 : ERROR : FORMAT-ERROR\r\n$| p/GTA GB-Ware firewall identd/ d/firewall/