From b3d3553330b31f0ada83cbba41a22492a5feff9b Mon Sep 17 00:00:00 2001 From: paulino Date: Thu, 31 Jan 2013 18:00:11 +0000 Subject: [PATCH] Adds entry to detect SCADA Siemens PCS7. Signature taken from Jose Ramon Palanco's script https://github.com/drainware/nmap-scada/blob/master/Siemens-PCS7.nse --- nselib/data/http-fingerprints.lua | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/nselib/data/http-fingerprints.lua b/nselib/data/http-fingerprints.lua index 1f6bb11e3..e5f53e4e7 100644 --- a/nselib/data/http-fingerprints.lua +++ b/nselib/data/http-fingerprints.lua @@ -4302,6 +4302,30 @@ table.insert(fingerprints, { -- These checks will find specific installed software. If possible, it will also -- find versions, etc. +table.insert(fingerprints, { + category = 'security', + probes = { + { + path = '/S7Web.css', + method = 'GET' + }, + { + path = '/Portal0000.htm', + method = 'GET' + } + }, + matches = { + { + match = '(.-)', + output = 'SCADA Siemens PCS7: \\1' + }, + { + match = '', + output = 'SCADA Siemens PCS7' + } + } + }); + table.insert(fingerprints, { category = 'security', probes = {