david
719f026891
sv-tidy.
2012-10-14 00:31:14 +00:00
david
4d0c36b88c
Add some missing CPE versions where v// was present.
2012-10-13 23:45:06 +00:00
david
3e8cd823ab
More nmap-service-probes CPE from Dillon Graham.
...
http://seclists.org/nmap-dev/2012/q4/92
2012-10-13 23:45:03 +00:00
david
cd90838c2e
Change CPE from cpe:/o:linux:kernel to cpe:/o:linux:linux_kernel.
...
This reflects a deprecation in the official CPE dictionary, which seems
to have happened on 2012-03-08.
<cpe-item deprecation_date="2012-03-08T20:00:15.120Z" deprecated_by="cpe:/o:linux:linux_kernel:2.6.0" deprecated="true" name="cpe:/o:linux:kernel:2.6.0">
<title xml:lang="en-US">Linux Kernel 2.6.0</title>
<meta:item-metadata modification-date="2012-03-08T20:00:15.120Z" status="DRAFT" deprecated-by-nvd-id="35565" nvd-id="91585" />
</cpe-item>
2012-10-11 06:46:28 +00:00
david
8e0ed1e83e
nmap-service-probes CPE for nginx, activesync, antivirus.
...
http://seclists.org/nmap-dev/2012/q4/57
2012-10-10 17:00:07 +00:00
dmiller
7751a61e82
Fix broken service matches
...
Discussion: http://seclists.org/nmap-dev/2012/q3/929
Similar situation to http://seclists.org/nmap-dev/2009/q2/75
Fixed by changing .*\n.* to .* (since s modifier was in place)
2012-09-20 19:21:34 +00:00
david
c5d3bf247b
Add CPE for Minix services.
2012-08-28 14:30:20 +00:00
david
7fc0f3ee6d
Add new matchlines for Sybase Backup.
2012-08-01 17:00:14 +00:00
david
913bbd60a3
sv-tidy.
2012-07-17 18:33:40 +00:00
david
2202781cba
Resolve some language i// and cpe:// mismatches.
2012-07-17 18:33:39 +00:00
david
9002e84ff4
Move various product names from i// to p// templates.
...
Generally, when we know the specific name of a web server, for example,
running on an embedded system, we prefer to list the server itself in
p// and v//, and the hardware in i//, like so:
match m|| p/thttpd/ v/$1/ i/Foobar 2000 ADSL router http config/
But it's very common that match lines instead look like this:
match m|| p/Foobar 2000 ADSL router http config/ i/thttpd $1/
This commit fixes many of these, with assistance from sv-tidy.
2012-07-17 18:33:37 +00:00
david
db594ed246
Fix the few instances of a capture being used in unrelated templates.
2012-07-17 16:19:19 +00:00
david
4f84ae1f13
Reorder character classes so they don't look like ranges.
...
sv-tidy complains:
8487: can't parse m regex (bad character range): |^HTTP/1\.0 405 Method Not Allowed\r\nServer: Membase Server ([\w-.]+)\r\nPragma:|
8488: can't parse m regex (bad character range): |^HTTP/1\.0 405 Method Not Allowed\r\nServer: Couchbase Server ([\w-.]+)\r\nPragma:|
2012-07-17 15:54:01 +00:00
tomsellers
c87a6b4b0a
A change to matchline for Atmail IMAP4 server to make it more flexible when dealing with different capabilities configurations.
2012-07-09 02:05:06 +00:00
tomsellers
22ae4ae108
Added couchbase matchline that does not require a database name. This is useful when the service response is so large that the database info is pushed outside the capture buffer. This was added *after* the matchline that captures the dbname if it is present.
...
Also added space and a ':' to the database name capture character set to allow for when the database is on a windows server.
2012-07-04 17:09:21 +00:00
tomsellers
17fe702314
Service detection for Couchbase and Membase NoSQL server's web based administrative portal. By default this is on 8091 but can occur on any port.
2012-07-04 14:57:27 +00:00
tomsellers
1c1b257c62
Version detection matchline updates:
...
Barracuda HTTP filter - adjustment to match more versions
GlobalScape CuteFTP sshd - additional match line
Cisco ASA WebVPN - additional match line
VMware View - additional match line
Bomgar Remote Access - new product detection
Sybase SQLAnywhere httpd - new product detection, version string
2012-07-03 03:47:41 +00:00
tomsellers
2a8f2f4f0d
Update Microsoft Exchange detection string for pop3 and imap to indiciate that the current match string also matches Exchange 2010.
2012-07-02 23:58:41 +00:00
david
6a0771f3b7
Add Metasploit remote API probe and matchline.
2012-06-29 23:21:52 +00:00
david
531dd2348c
I'm guessing the dot in the kumo-server match should match '\n'.
2012-06-29 16:35:40 +00:00
david
f1b7b54da2
Get rid of useless trailing .* in matchline.
2012-06-29 16:35:38 +00:00
david
65c4f0f6d7
Capitalization of pcAnywhere.
2012-06-15 16:33:47 +00:00
david
250520ed17
Add CPE for pcanywheredata.
2012-06-15 16:22:24 +00:00
david
afdedbbcbc
Oracle OVM Manager is called Oracle VM Manager now.
2012-06-12 14:41:53 +00:00
david
755b3fc959
Put RomPager in p//, not in i//.
2012-05-29 04:48:54 +00:00
david
706d147dc5
Fix some CPE language codes that were not in i// templates.
...
Plus many misspellings of "Portuguese."
2012-05-29 04:24:59 +00:00
david
b680824399
Add CesarFTPD CPE.
2012-05-29 04:24:58 +00:00
david
4b061b6239
Add Microsoft Exchange CPE.
2012-05-29 04:24:57 +00:00
david
ede9b9b6f1
Add CPE for Microsoft Exchange.
2012-05-29 04:24:55 +00:00
david
0d843ca261
Fix some "sp" CPE language codes (should be "es").
2012-05-29 03:41:07 +00:00
patrik
7f12d63392
o [NSE] Added the script mmouse-exec that connects to a Mobile Mouse server,
...
starts an application, and sends a sequence of keystrokes to it. [Patrik
Karlsson]
o [NSE] Added the script mmouse-brute that performs brute force password
auditing against the Mobile Mouse service. [Patrik Karlsson]
2012-05-01 14:29:36 +00:00
david
ac3773a0e4
CPE for dnsmasq.
2012-04-27 06:27:05 +00:00
david
d78d0c37e2
Add CPE for mini_httpd.
2012-04-27 06:27:04 +00:00
david
63072d89d7
Move a specific Oracle OVM match above a more general Java RMI match.
2012-04-17 17:30:54 +00:00
david
6976fde2e2
sv-tidy.
2012-04-17 03:14:43 +00:00
david
e52839eb7c
Add some new service CPE, mostly for telnet.
2012-04-17 03:14:42 +00:00
david
5dae0c74e4
Add hp_procurve_switch_software CPE.
2012-04-17 03:14:40 +00:00
david
f694c3352c
Add some SSH CPE.
2012-04-17 03:14:38 +00:00
david
71ff95ae66
Danaea -> Dionaea in nmap-service-probes.
...
This seems to have been a typo in a service submission. At least I don't
get any relevant web search results for "danaea honeypot".
2012-04-04 21:20:50 +00:00
patrik
0825fa24c9
Added Kumofs probe and matches for kumo-server and kumo-manager
2012-04-01 21:14:37 +00:00
david
aa4800d76c
Expand a FreeSWITCH service fingerprint.
...
Allow '+' for a time zone offset.
2012-03-27 19:40:25 +00:00
david
c04148c346
Decode some ASCII in service probes.
2012-03-16 04:19:38 +00:00
fyodor
5de1ea1dc3
standardize the name of Microsoft Terminal Services to official IANA name ms-wbt-server rather than inconsistently using ms-term-serv and microsoft-rdp. Suggested by Tom Sellers
2012-02-16 07:32:28 +00:00
david
ebf2f7b07c
nmap-service-probes spelling fixes from Matt Selsky.
2012-02-16 04:33:48 +00:00
david
9fd1a1720b
The official CPE dictionary uses "dlink" not "d-link".
2012-02-14 02:59:28 +00:00
david
eda6636bf0
sv-tidy.
2012-02-12 11:35:41 +00:00
david
9052b528e7
Last of the service submissions and corrections.
2012-02-12 11:35:39 +00:00
david
8026f8ed27
200 http service submissions.
2012-02-11 20:03:59 +00:00
tomsellers
eb21a7d1ee
Minor change to add detail on recent MS SQL fingerprint addition.
2012-02-11 03:27:35 +00:00
david
582cb0c11d
More service submissions.
2012-02-11 01:10:23 +00:00