david
b04a80b557
o Added a service probe and match lines for the Logitech/SlimDevices
...
SqueezeCenter music server. [Patrik Karlsson]
2010-01-12 21:09:01 +00:00
david
1c745e513a
Add match lines for a Lexmark printer ftpd and HBN3 server. The HBN3 may
...
actually be mDNS. These were submitted by Patrik Karlsson.
2010-01-12 20:49:54 +00:00
david
2b6adfa8a3
Use "cso" instead of "ccso" for the CCSO/Qi protocol match line to
...
accord with the IANA list.
2010-01-02 22:29:30 +00:00
david
5437ac7da3
Add a new service match line for a service I just got some more
...
information on. It's the censorship proxy operated nationwide by
Etisalat, a United Arab Emirates telecom.
2010-01-02 19:13:16 +00:00
david
de2652e635
Fix a service name in nmap-service-probes; it was http when it should
...
have been http-proxy.
2010-01-02 19:03:50 +00:00
david
70ce7026fb
Add a service match for Columbia University QIL from Matt Selsky.
2010-01-01 02:38:58 +00:00
david
cc07d32df3
Adjust all the Freenet FProxy match line to be http-proxy and not http.
2010-01-01 00:36:13 +00:00
david
121d89b1c2
Add one more service fingerprint I missed.
2009-12-31 20:51:08 +00:00
david
ceba472e44
Add some of Willem de Groot's http service fingerprints from
...
http://seclists.org/nmap-dev/2009/q4/591 .
2009-12-31 19:17:40 +00:00
david
054cc8b722
Do service fingerprint corrections.
2009-12-31 17:44:35 +00:00
david
2cf7ccf91e
Do the last of the service fingerprint submissions.
2009-12-31 03:37:57 +00:00
david
bf20111d05
Another batch of uncategorized service submissions.
2009-12-30 04:08:05 +00:00
david
72aaaeaca8
A batch of miscellaneous service submissions. About 700 remain.
2009-12-29 02:36:27 +00:00
david
4dd8d5faeb
Do all the http service submissions.
2009-12-27 06:57:59 +00:00
david
d5b2404441
Fix the RTSPRequest service probe, which I accidentally changed to read
...
"RTSP/2.0" instead of "RTSP/1.0" during an integration commit, r16327.
Patch by Matt Selsky.
2009-12-24 22:41:24 +00:00
david
37d83a28d5
Do version submissions for backdoor, finger, freeciv, hp, imaps, irc,
...
landesk, netbios-ssn, netsupport, nntp, oracle, radmin, routersetup,
rtorrent, serv-u, shoutcast, ssh, tcpmux, torrent, utorrent, vnc.
2009-12-24 01:22:14 +00:00
david
c4b9d0e651
Fix a typo in nmap-service-probes.
2009-12-23 01:50:25 +00:00
david
f6d695d01c
Do service integration for sip, printer, transmission, svnserve, vmware,
...
domain, and ipp.
2009-12-23 01:48:13 +00:00
david
d75ba5b6aa
Add a Kerberos service probe (udp/88) and match lines contributed by
...
Patrik Karlsson.
2009-12-22 16:47:24 +00:00
david
b133ce9e42
Do pop3 and afp service submissions.
2009-12-22 06:42:55 +00:00
david
9801a5f2f2
Change a couple of match lines with i/Chinese/ to i/Korean/. I tried
...
decoding the bytes with various Chinese encodings but they were all
gibberish in Google translate. It turns out they are EUC-KRâencoded
Korean, translating to "The server version 6.5.7226.0 (a) has been
prepared."
2009-12-19 10:01:01 +00:00
david
1cfa4d940a
Handle imap version submissions.
2009-12-19 09:31:55 +00:00
david
5020f2bb94
Remove 11 nmap-service-probes match lines that are identical within a
...
probe.
2009-12-18 23:48:27 +00:00
david
a12c181883
Add new service matches for a couple of submissions handled today.
2009-12-18 07:11:56 +00:00
david
f4262ff0cf
Add 5061 to the sslports for the TCP SIPOptions probe in
...
nmap-service-probes.
2009-12-13 04:07:27 +00:00
tomsellers
26c5722d81
Added matchlines for Microsoft SQL Server 2008 RTM and SP1, tweaked
...
matchline for CTP.
2009-12-06 21:48:27 +00:00
tomsellers
08d80d81e6
Added update to Microsoft SQL Server 2005 matchlines
...
to support detection of recent Microsoft security
update (MS09-062) [Tom]
2009-12-01 11:53:53 +00:00
tomsellers
85012c858b
Add version probe/matchline for IBM DB2 DAS service
...
listening on 523/UDP provided by Patrik Karlsson.
2009-12-01 11:49:54 +00:00
fyodor
c993172b87
Cyrus POP3 v2.3.12 through v2.3.13 have an extra space before the hostname. - signature update by Matt Selsky
2009-11-30 22:53:40 +00:00
fyodor
f0d8b0b702
Improve a couple Polycom SoundStation sip match lines - patch by Matt Selsky
2009-11-30 06:10:37 +00:00
david
a4c2e4fc9b
Add a UDP SIPOptions service probe.
2009-11-26 01:52:13 +00:00
david
7f21296ec2
Adjust the Citrix MetaFrame (icabrowser) match line. The final two bytes
...
were part of an IP address (\xc0\xa8 = 192.168) and could vary in
different environments.
2009-11-25 20:40:48 +00:00
david
d1d910f13e
Add a Citrix MetaFrame (icabrowser) service probe from Thomas Buchanan.
2009-11-24 17:28:21 +00:00
fyodor
8c6093581f
Applied a patch from Matt Selsky which improves Oracle TNS Listener signature
2009-11-18 08:59:08 +00:00
tomsellers
3432ae3ad5
Updated DB2 port ranges to be broader in order to improve detection of the database instances that typically live in the 50000-50025 and 60000-60025 range. [Tom]
2009-11-11 13:45:57 +00:00
fyodor
1b767b9cbc
Add Oracle Enterprise Manager Agent version detection signature (and added it to the ports list). Patch by Matt Selsky
2009-10-10 00:27:14 +00:00
david
c7fccb4d0c
Implement the proposed changes from docs/device-types.txt to being the
...
device types in nmap-os-db and nmap-service-probes in line with that
document.
2009-08-28 23:52:41 +00:00
david
ceb10ffe29
Add an extra blank line to nmap-service-probes for uniformity.
2009-08-27 20:43:09 +00:00
david
f6d8d8b290
Add an HP Printer Job Language version probe from Brandon Enright. It is
...
inactive at the moment because its ports 9100-9107 are in the default
Exclude list. (In fact, they are the default exclude list.) Users will
have to comment out the Exclude line to test these.
2009-08-27 20:37:15 +00:00
david
f6463017db
Add a service probe for DNS-based service discovery (DNS-SD). See
...
http://seclists.org/nmap-dev/2009/q3/0610.html .
2009-08-18 19:00:59 +00:00
david
fae45d2c3c
Remove the last byte from the end of the xdmcp version probe. According
...
to the XDMCP specification at
http://cgit.freedesktop.org/xorg/doc/xorg-docs/plain/hardcopy/XDMCP/xdmcp.PS.gz ,
it's just a junk trailer following the zero-length array of
authentication names, and that "no padding of any sort will occur within
the packets." It still correctly identifies an xdm running locally in my
testing.
The specification also says "Packets that have too little or too much
data should be ignored," but that must not be taken seiously because the
X server that comes with Mac OS X sends several junk null bytes at the
end of its XDMCP queries.
2009-08-14 16:56:05 +00:00
fyodor
a678608afd
add probe for Apache JServ Protocol (AJP) and a match line for Apache Jserv 1.3 from Tom Sellers
2009-07-07 06:42:03 +00:00
fyodor
97f3bb4502
added Traffic Spicer ICAP signature by Tom Sellers
2009-07-07 06:38:49 +00:00
bmenrigh
f20150351e
Added and improved Famatech Radmin service matches/softmatch to better
...
support various 3.X releases. Also added a match for Radmin when the
source IP is ACL'd. Thanks to Tom Sellers for the hard work and
providing a patch!
2009-06-12 22:01:31 +00:00
bmenrigh
0c937eec65
Updated the slow ser2net match that we had with the original
...
fingerprint submission. The service was telnet and so the protocol
has been changed to telnet and ser2net has been put into the product
field.
2009-06-09 20:09:09 +00:00
bmenrigh
635f464a7c
I updated our 5 slowest match lines with slightly more efficient
...
matching strategies. It is really great that we have so few match
lines that really need any performance attention. As long as a match
has an anchor (though ^ seems better than $ with PRCE) it should be
fast enough. We also want to avoid things like
"m|^whatever.*something.*" but we got rid of all of those in a
previous review.
The only "bad" match we have now is:
match ser2net m|\r\nser2net port \d+ device (/dev/[-\w_]+) ...snip...
I think this match should be commented out so that we can get a better
submission. With a big release coming up so soon though I don't want
to remove any useful features. I've left a comment about it's
performance and maybe myself, Doug, or somebody else will think about
the match more at a later date.
2009-06-09 00:00:51 +00:00
david
753679d84c
Enhance the ncat-chat service match line so it works with IPv6 addresses
...
(ncat --chat -l -6).
2009-05-26 21:49:36 +00:00
david
7184ce9646
Add an nmap-service-probes match for ncat --chat.
2009-05-26 21:39:46 +00:00
fyodor
a420fe3d4f
o Improved the Oracle DB version detection signatures. [Tom Sellers]
2009-05-14 04:32:50 +00:00
bmenrigh
3164ea7a20
I ran into a case where Hummingbird Exceed X11 reported slightly
...
different bytes in a few X11 fields. I've made the match more
generic. I have a feeling that the X11 fields might contain useful
information that we could include in i// but I don't know enough about
X11 to do that myself.
2009-04-14 22:06:31 +00:00
