From eb699270e929921f6d3fa9685d74e127ea0f0002 Mon Sep 17 00:00:00 2001 From: david Date: Fri, 6 Aug 2010 15:43:58 +0000 Subject: [PATCH] Add a match line for an individually submitted service, Oracle OVSAgentServer. This looks like standard Python SimpleXMLRPCServer with BaseHTTP except that it can be distinguished by the HTML title. Also add a related fingerprint for SimpleXMLRPCServer when it is used in its DocXMLRPCServer mode, which distinguishes it from plain BaseHTTP. --- nmap-service-probes | 3 +++ 1 file changed, 3 insertions(+) diff --git a/nmap-service-probes b/nmap-service-probes index b236e9260..c65f4a21b 100644 --- a/nmap-service-probes +++ b/nmap-service-probes @@ -3992,6 +3992,9 @@ match hp-logic-analyzer m|^\r\n\r0\.1/PTTH / TEG.\r\n$| p/HP 1662C logic analyze # Needs to go before the Apache match lines -Doug match http-proxy m|^HTTP/1\.[01] \d\d\d .*\r\nServer: Apache\r\n.*X-orenosp-filt:|s p/Orenosp reverse http proxy/ +# Needs to go before BaseHTTP match lines. +match ovs-agent m|^HTTP/1\.0 200 OK\r\n.*Server: BaseHTTP/([\d.]+) Python/([\w.]+)\r\n.*Python: OVSAgentServer Document|s p/Oracle OVSAgentServer/ v/22/ i/BaseHTTP $1; Python SimpleXMLRPCServer; Python $2/ +match http m|^HTTP/1\.0 200 OK\r\n.*Server: BaseHTTP/([\d.]+) Python/([\w.]+)\r\n.*This server exports the following methods through the XML-RPC protocol.|s p/BaseHTTP/ v/$1/ i/Python SimpleXMLRPCServer; Python $2/ match http m|^HTTP/1\.0 \d\d\d .*\r\n(.*\r\n)?Server: MochiWeb/(\d[-.\w]+) \([-.'\w\s]+\)\r\n| p/MochiWeb Erlang HTTP library/ v/$2/ match http m|^HTTP/1\.0 200 OK\r\nServer: Apache/([\d.]+)\r\nPragma: no-cache\r\nDate: .*\r\n.*\r\nvar my_upnp = 1;\r\n// backup log and config\r\nvar PM = \"7004ABR\";|s p/SMC Broadband router 7004ABR http config/ i/Identifies as Apache $1/ d/broadband router/