david
f1a9fdd165
Add a GKrellM service probe from Toni Ruotto.
2011-04-28 02:40:11 +00:00
david
381ac05b7f
Add HTTP fingerprint for server that was tripped in the dominoconsole
...
match.
2011-04-25 21:06:35 +00:00
david
9e0c58b55e
Make a dominoconsole match more specific. It was matching an HTTP
...
response that happened to have some '/' and ':' in it. This was reported
by Chris Clements.
2011-04-25 21:06:30 +00:00
david
715338f9cb
Add a distinguishing byte (\x01 for PING reply) to the BackOrifice
...
probe.
2011-04-23 00:23:49 +00:00
david
0a0de6eb8b
Add missing "s" qualifier from BackOrifice match line.
2011-04-19 02:30:12 +00:00
david
dd22e26f43
Add a BackOrifice service probe from Gorjan Petrovski.
2011-04-19 02:25:10 +00:00
david
f00142f439
o Added a service probe for Zend Java Bridge, which is vulnerable if
...
exposed to an untrusted network. It was contributed by Michael
Schierl.
2011-04-18 19:32:11 +00:00
david
7c613a7469
Revert r22905. Some of these "jabber" services are xmpp-server, some are
...
xmpp-client, and for some others it's not clear. I'm putting it back
until we can look at them some more.
2011-04-18 19:03:26 +00:00
david
0f4be2ccb6
Change the "jabber" service in nmap-service-probes to "xmpp-server" to
...
match nmap-services.
2011-04-18 18:33:48 +00:00
david
e73605e40a
Add missing version fields to a gpsd match line.
2011-03-01 16:41:19 +00:00
patrik
d6bbc6da8f
o [NSE] Added probe for Apple iPhoto (DPAP) and the dpap-brute script that
...
performs password guessing against a shared iPhoto library. [Patrik]
2011-02-26 16:24:54 +00:00
david
6d65382a24
Fix a double ^^ at the beginning of a match line.
2011-02-23 17:15:10 +00:00
david
38acaa80e5
Change a literal hostname in an ftp service match into a pattern. This
...
was probably accidentally left in during integration.
2011-02-19 00:38:55 +00:00
tomsellers
4d3a2ecef9
Consolidated and grouped matchlines related to the FTP service on
...
Lexmark (and rebranded) laser printers. There was a near perfect
matchline that was being skipped due to an extra \d in the capture
pattern. I moved it down with some others, removed some lines that
had included in the hostname and model in the discrete text and
expanded the hostname match character set.
The format for the banner is:
220 <hostname> Lexmark <model> FTP Server <firmware revision> ready.
2011-02-19 00:24:37 +00:00
tomsellers
73a4a10769
Consistency change - edited all Apache TomCat related matchlines
...
to return "Apache Tomcat" as opposed to being split between "Apache Tomcat"
and "Apache Tomcat httpd". Tomcat can run on top of Apache HTTPD, Microsoft
IIS, and Apache Coyote. - Tom
2011-02-19 00:01:32 +00:00
tomsellers
916ddc73f8
Adding three match lines for two embedded device httpd:
...
Tridium Niagara httpd - embedded control systems, HVAC, etc
http://www.tridium.com/
Knoplerfish - various devices, included printers
http://www.knopflerfish.org/
2011-02-18 23:55:04 +00:00
tomsellers
abeaffea33
Minor changes to nmap-service-probes to improve consistency with naming
...
Trend Micro products.
2011-02-18 23:47:47 +00:00
tomsellers
972a72e130
Add a softmatch line for SMTP returning a 550 code as well as a
...
x.x.x format error code. Discovered on Cisco gear but other SMTP
services may use the format as well. - Tom
2011-02-15 23:44:47 +00:00
tomsellers
21ee742ca3
Addition Tomcat/Coyote match line to capture Tomcat version data
...
when the server provides it.
2011-02-09 11:55:02 +00:00
fyodor
dd9ae71020
Add a service signature I created for Nping echo
2011-01-20 10:09:04 +00:00
david
1ef55b81d1
Add a Quake3_master_getservers service probe from Toni Ruotto.
2011-01-08 05:03:44 +00:00
david
12b762517d
Canonicalize some nmap-service-probes entries using the
...
nmap-service-probes-report.py script.
2010-12-28 20:58:33 +00:00
david
c77761b0b1
All 10 service corrections.
2010-12-28 18:52:31 +00:00
david
84fb8f2bb3
A few miscellaneous service probe changes.
2010-12-28 18:52:30 +00:00
david
016bea6276
Rearrange the ssh match lines so that the uncategorized ones are towards
...
the bottom of the file. This is how other blocks of matches are
arranged.
2010-12-28 18:52:28 +00:00
tomsellers
54657f0fc4
Added IBM HTTP Server match line, improved consistency among the
...
match output for this product.
2010-12-28 18:36:53 +00:00
david
68f14b9f5a
The last 100 service submissions.
2010-12-28 05:52:02 +00:00
david
da6ed2d39a
100 service submissions.
2010-12-28 03:16:00 +00:00
david
4b14ccf8f8
100 service submissions.
2010-12-27 17:41:05 +00:00
david
c6721aae80
100 service submissions.
2010-12-21 16:59:46 +00:00
david
0b21a33414
100 more miscellaneous service submissions.
2010-12-21 05:04:45 +00:00
david
e36fe37c87
A bunch of miscellaneous service submissions.
2010-12-21 00:51:45 +00:00
david
3b849d64e1
upnp service submissions; also reclassify some "http" as "upnp".
2010-12-19 18:57:02 +00:00
david
f448f62b82
The last of the http service submissions.
2010-12-18 15:20:47 +00:00
david
bb55769fb4
More http submissions.
2010-12-18 05:02:37 +00:00
david
1a2a892610
This is about 75% of the http service submissions.
2010-12-17 05:25:40 +00:00
david
dd7f04aebc
Service submissions for
...
bittorrent pop3 afp imap time backupexec-remote backupexec beremote.exe
domain vnc-http vnc teamviewer mysql irc irc-proxy skype rtorrent nessus
bitcoin printer icecast 3dm-http.
2010-12-16 06:00:39 +00:00
david
4e018f1638
unknown and ssl service submissions.
2010-12-15 20:13:40 +00:00
david
3af5da503f
sip service submissions.
2010-12-15 02:16:17 +00:00
david
80308fb84f
smtp service submissions.
2010-12-14 23:03:41 +00:00
david
5642029a4c
telnet service submissions.
2010-12-14 23:03:38 +00:00
david
6710b2deff
ssh service submissions.
2010-12-14 19:42:11 +00:00
david
e8a9ff65e8
Do ftp service submissions.
2010-12-14 09:12:06 +00:00
david
3f35888405
Fix a service match line on information from Corey Quinn. I found the
...
"Connection too fast, throttled" message in the source code of ratbox,
charybdis, and ircd-seven, but not Unreal ircd.
2010-12-07 22:36:50 +00:00
bmenrigh
df99409651
The dominoconsole match is too general and can match things that it
...
shouldn't. Also, because of the use of ([...]*), captures can be too
long to fill into the template. This change forces hostname and
domain name to be non-empty. This match should be made more specific
but without example content any changes would involve guessing.
2010-09-30 23:14:57 +00:00
patrik
0ef84cf443
o [NSE] Added nat-pmp-info script that uses the nat-pmp service to
...
discover the external IP address of a router. [Patrik]
2010-09-28 19:43:06 +00:00
bmenrigh
5ead386c07
Added a bunch of Apple and Netatalk AFP service matches. There are a
...
few mystery variations in bytes that don't match up with the
descriptions in the submissions or what users have told me they are
running. I've done my best to get the OS X versions correct.
Corrections may be required to loosen the strict versioning in this
commit.
2010-09-27 22:00:10 +00:00
tomsellers
c974a51d07
Single line update to correct spelling error in service field.
...
shoutcase => shoutcast
2010-09-26 19:27:45 +00:00
tomsellers
04e0b3b4f6
Two modifications to APC PowerChute detection. One is to comment
...
out a false positive that is likely java-rmi. The other is to
add an additional version to a version label.
2010-09-26 15:51:00 +00:00
tomsellers
6b75d40ae7
Fixed a few spelling errors and 1 consistency issue in the
...
device labels in nmap-service-probes
2010-09-26 13:15:45 +00:00