david
a12d595052
Add new version probes and matches from Patrik Karlsson.
...
- Lotus Domino Console running on tcp/2050 (shows OS and hostname)
- IBM Informix Dynamic Server running native protocol (shows hostname, and file path)
- Database servers running the DRDA protocol
- IBM Websphere MQ (shows name of queue-manager and channel)
2010-08-11 16:55:54 +00:00
david
123b018c9c
Add some more information "telnetd" and "http config" to some of the new
...
nmap-service-probes signatures.
2010-08-09 21:51:47 +00:00
david
5809a30812
Add a handful of new service matches that came through experimentation
...
with CPE.
2010-08-09 20:12:44 +00:00
david
9e38d22717
Canonicalize some nmap-service-probes entries, mostly with regard to
...
case, using the command
egrep -o ' p/[^/]*/' nmap-service-probes | sort | uniq
2010-08-09 19:19:57 +00:00
david
442958a7cc
Change the service name from "http" to "oem-agent" for "Oracle
...
Enterprise Manager Agent httpd".
2010-08-09 03:08:31 +00:00
david
eb699270e9
Add a match line for an individually submitted service, Oracle
...
OVSAgentServer. This looks like standard Python SimpleXMLRPCServer with
BaseHTTP except that it can be distinguished by the HTML title. Also add
a related fingerprint for SimpleXMLRPCServer when it is used in its
DocXMLRPCServer mode, which distinguishes it from plain BaseHTTP.
2010-08-06 15:43:58 +00:00
fyodor
e91d722968
print a typo noticed by Ange Gutek
2010-08-03 00:24:33 +00:00
david
dbb30db4be
New and fixed nmap-service-probes probes from Matt Selsky.
2010-06-18 19:43:23 +00:00
david
43654abc71
o Combined service match lines for Oracle Enterprise Manager Agent
...
into one more effective line. This patch is from Matt Selsky.
2010-06-16 00:46:03 +00:00
david
316e20f8dc
o Fixed captures in the mupdate service probe matches. This patch is
...
from Matt Selsky.
2010-06-16 00:38:38 +00:00
fyodor
0f4bf784be
commented out an hp-pjl empty softmatch which was causing problems for other services as described by Tom Sellers in this thread: http://seclists.org/nmap-dev/2010/q2/753
2010-06-09 23:24:08 +00:00
tomsellers
7ada457645
Adding match lines for two services:
...
Cisco Site Selector ftpd
LanSafe UPS monitoring HTTPd
2010-06-05 15:55:14 +00:00
tomsellers
76ac0f5b85
Added 3 PostgreSQL softmatch lines. Two of these lines are
...
are French and Spanish and are derived from the English version
as well as text from other match lines for the appropriate language.
2010-06-05 15:31:59 +00:00
david
44d29adaa9
Add a serialnumberd match line that contains a host name, contributed by
...
Samuel Benson.
2010-05-25 19:00:31 +00:00
fyodor
32e6b837cb
Small updates to copyright headers in some files which don't have the headers automatically replaced
2010-05-24 23:52:34 +00:00
david
6a0bba72e1
Add a probe and matchline for Mac OS X Server serialnumberd, submitted
...
by Patrik Karlsson.
2010-05-24 19:15:53 +00:00
david
5c60064871
Fix some accidental duplicate template specifiers in
...
nmap-service-probes.
2010-05-17 16:21:56 +00:00
tomsellers
66714334dc
Including information in the nmap-service-probes file for
...
the Promise Array Manager matchline I just removed just in
case it is submitted again.
2010-05-14 01:18:15 +00:00
tomsellers
3d061b6ccf
Removing a matchline for the Promise Array Management Software
...
that was triggering false matches against TLS protected services.
See http://seclists.org/nmap-dev/2010/q2/465
2010-05-13 23:34:01 +00:00
patrik
3f7b440c49
Add match lines for
...
- Twisted web server (OS X 10.6.3 Server)
- Apple Filing Protocol (OS X 10.6.3 Server in VMware Fusion)
- Apple Mac OS X Password Server (OS X 10.6.3 Server)
- XAVi XG6546p Wireless Gateway
- Sun GlassFish Communications Server
- Comdasys, SIParator and Glassfish SIP services
2010-05-09 10:29:16 +00:00
david
63c614e003
Make a few adjustments to service matches after reviewing them for
...
highlights.
2010-05-08 13:46:18 +00:00
david
87c398970e
All 7 service corrections.
2010-05-06 05:10:26 +00:00
david
16d51c1036
The last of the miscellaneous service submissions.
2010-05-06 04:59:13 +00:00
david
79b9985b79
Some miscellaneous service submissions.
2010-05-04 23:59:50 +00:00
david
2e26cbf057
Here are all the http service submissions.
2010-05-04 16:45:15 +00:00
david
008c832056
Fix an nmap-service-probes entry (wrong delimiter).
2010-05-03 21:57:12 +00:00
david
6ffb1727dc
Normalize nmap-service-probes entries with "webserver" in the
...
description. In most cases this just got changed to "httpd".
2010-05-03 15:41:24 +00:00
david
f7b4fe717d
Do all the telnet service submissions.
2010-04-30 00:23:05 +00:00
david
1119207bc4
Do service submissions for upnp, crashplan, http-proxy, domain, sip,
...
pop3, afp, zarafa-gateway, time, rtsp, rtorrent, mysql, ldap, vsftp,
symantec-esm, skype, login, java, bash, and access-remote-pc.
2010-04-29 21:26:38 +00:00
david
1a9d2cb003
Do service submissions for ssh, ftp, bittorrent, smtp, and ssl.
2010-04-29 01:48:57 +00:00
david
c70de095bb
Add a comment to a service probe that came up in OS integration.
2010-04-22 16:32:32 +00:00
ron
82fe004f3b
Added matchline for the Arucer backdoor. The Arucer backdoor was found to be packaged with drivers for the Energizer USB recharger: http://www.kb.cert.org/vuls/id/154421
2010-03-08 18:22:50 +00:00
patrik
2ed728a6f1
Corrected incorrect match line for SqueezeCenter CLI and added song count
2010-02-16 16:09:54 +00:00
patrik
cd0e6496c6
Added a service probe for Logitech SqueezeCenter command line interface
2010-02-15 18:59:29 +00:00
patrik
fe8074c836
Improved PostgreSQL match lines by matching the line of the error to a specific version.
2010-02-13 08:15:58 +00:00
david
f269adcabc
Remove hostname matches in the Quake probes. The fields I was using
...
don't look like they really contain hostnames.
2010-01-30 04:40:37 +00:00
david
f4530d9ae4
Add Quake 2 and Quake 3 game server probes from Mak Kolybabi.
2010-01-30 04:18:19 +00:00
david
6804b8d435
Change our match line for "Mac OS X Kerberos" to "MIT Kerberos" because
...
of new fingerprints from Matt Selsky. Also add a match line for MIT
Kerberos 1.2 from Matt.
The susec field of the response may be represented as an encoded string
of 3, 2, or (rarely) 1 bytes. I adjusted the Kerberos matches to be
specific about how other fields may change when this one does.
2010-01-26 19:40:44 +00:00
david
5318e5a375
Improve date formatting in Kerberos matches.
...
From: 20100123014311Z
To: 2010-01-23 01:43:11Z
2010-01-23 01:45:53 +00:00
david
44ea93217c
Add another service match line for Mac OS X Kerberos on UDP.
2010-01-23 01:40:01 +00:00
david
0e913e4039
Add match line for GlimmerBlocker ad-blocking http proxy from Matt
...
Selsky.
2010-01-18 22:38:35 +00:00
david
53ee30c4db
o Added an Apple Filing Protocol service probe that detects Netatalk
...
servers. (Apple's AFP servers are coincidentally triggered by the
SSLSessionReq probe.) [Patrik Karlsson]
2010-01-18 20:30:25 +00:00
david
b04a80b557
o Added a service probe and match lines for the Logitech/SlimDevices
...
SqueezeCenter music server. [Patrik Karlsson]
2010-01-12 21:09:01 +00:00
david
1c745e513a
Add match lines for a Lexmark printer ftpd and HBN3 server. The HBN3 may
...
actually be mDNS. These were submitted by Patrik Karlsson.
2010-01-12 20:49:54 +00:00
david
2b6adfa8a3
Use "cso" instead of "ccso" for the CCSO/Qi protocol match line to
...
accord with the IANA list.
2010-01-02 22:29:30 +00:00
david
5437ac7da3
Add a new service match line for a service I just got some more
...
information on. It's the censorship proxy operated nationwide by
Etisalat, a United Arab Emirates telecom.
2010-01-02 19:13:16 +00:00
david
de2652e635
Fix a service name in nmap-service-probes; it was http when it should
...
have been http-proxy.
2010-01-02 19:03:50 +00:00
david
70ce7026fb
Add a service match for Columbia University QIL from Matt Selsky.
2010-01-01 02:38:58 +00:00
david
cc07d32df3
Adjust all the Freenet FProxy match line to be http-proxy and not http.
2010-01-01 00:36:13 +00:00
david
121d89b1c2
Add one more service fingerprint I missed.
2009-12-31 20:51:08 +00:00
