diff --git a/scripts/http-server-header.nse b/scripts/http-server-header.nse index f273e828f..207ad26d5 100644 --- a/scripts/http-server-header.nse +++ b/scripts/http-server-header.nse @@ -30,7 +30,7 @@ portrule = function(host, port) if type(port.version) == "table" and (port.version.name_confidence > 3 or port.version.product ~= nil) then return false end - return shortport.http(host,port) + return (shortport.http(host,port) and nmap.version_intensity() >= 7) end action = function(host, port) diff --git a/scripts/jdwp-version.nse b/scripts/jdwp-version.nse index b630f789c..29ab02357 100644 --- a/scripts/jdwp-version.nse +++ b/scripts/jdwp-version.nse @@ -28,6 +28,7 @@ portrule = function(host, port) return port.service == "tcpwrapped" and port.protocol == "tcp" and port.state == "open" and not(shortport.port_is_excluded(port.number,port.protocol)) + and nmap.version_intensity() >= 7 end action = function(host, port) diff --git a/scripts/mcafee-epo-agent.nse b/scripts/mcafee-epo-agent.nse index a33aa9e74..410c0ace9 100644 --- a/scripts/mcafee-epo-agent.nse +++ b/scripts/mcafee-epo-agent.nse @@ -31,10 +31,12 @@ local string = require "string" portrule = function(host, port) if port.version ~= nil and port.version.product ~= nil then - return (port.version.product:find("[eE][pP]olicy Orch") + return ((port.version.product:find("[eE][pP]olicy Orch") or port.version.product:find("[eE]PO [aA]gent")) + and nmap.version_intensity() >= 7) else - return (port.number == 8081 and port.protocol == "tcp") + return ((port.number == 8081 and port.protocol == "tcp") + and nmap.version_intensity() >= 7) end end diff --git a/scripts/quake1-info.nse b/scripts/quake1-info.nse index 4db02816e..a5f247376 100644 --- a/scripts/quake1-info.nse +++ b/scripts/quake1-info.nse @@ -74,6 +74,7 @@ function portrule(host, port) and port.protocol == 'udp' and ((26000 <= port.number and port.number <= 26004) or port.service == 'quake') + and nmap.version_intensity() >= 7 end diff --git a/scripts/rpc-grind.nse b/scripts/rpc-grind.nse index 1836bafd3..2cd967a0f 100644 --- a/scripts/rpc-grind.nse +++ b/scripts/rpc-grind.nse @@ -52,7 +52,7 @@ portrule = function(host, port) -- different than rpcbind. return false end - return true + return nmap.version_intensity() >= 7 end --- Function that determines if the target port of host uses RPC protocol. diff --git a/scripts/skypev2-version.nse b/scripts/skypev2-version.nse index 17e1f2766..d93d61046 100644 --- a/scripts/skypev2-version.nse +++ b/scripts/skypev2-version.nse @@ -24,6 +24,7 @@ portrule = function(host, port) and port.protocol == "tcp" and port.state == "open" and port.version.name_confidence < 10 and not(shortport.port_is_excluded(port.number,port.protocol)) + and nmap.version_intensity() >= 7 end action = function(host, port) diff --git a/scripts/weblogic-t3-info.nse b/scripts/weblogic-t3-info.nse index 3771644fc..ca5dac421 100644 --- a/scripts/weblogic-t3-info.nse +++ b/scripts/weblogic-t3-info.nse @@ -10,7 +10,7 @@ categories = {"default","safe","discovery","version"} portrule = function(host, port) if type(port.version) == "table" and port.version.name_confidence > 3 and port.version.product ~= nil then - return string.find(port.version.product, "WebLogic", 1, true) + return string.find(port.version.product, "WebLogic", 1, true) and nmap.version_intensity() >= 7 end return shortport.version_port_or_service({7001,7002,7003},"http")(host,port) end