dmiller 9db8dfda1d Be more strict about NetBus protocol. Fixes false positives ...

Had a report via service fingerprint correction of netbus-version
reporting an unrelated service as NetBuster. This would happen for any
service on port 12345 that responds with a banner containing less than 2
carriage returns, or which closes the connection after the first NetBus
protocol message. Now, all netbus-* scripts require the banner to begin
with "NetBus" before they will continue.

2015-02-18 02:57:29 +00:00

1.8 KiB

Raw Blame History

View Raw