mirror of
https://github.com/nmap/nmap.git
synced 2025-12-06 04:31:29 +00:00
147 lines
3.9 KiB
Lua
147 lines
3.9 KiB
Lua
--[[
|
|
This is compiled list of known TFTP responses.
|
|
]]
|
|
|
|
author = {"Mak Kolybabi <mak@kolybabi.com>"}
|
|
license = "Same as Nmap--See https://nmap.org/book/man-legal.html"
|
|
|
|
-- Fingerprints by opcode
|
|
fingerprints = {
|
|
|
|
--------------------------------------------------------------------------------
|
|
-- Example Fingerprint
|
|
--------------------------------------------------------------------------------
|
|
-- Based on the format of the 'match' directive used in service probes.
|
|
-- https://nmap.org/book/vscan-fileformat.html#vscan-tbl-versioninfo
|
|
--------------------------------------------------------------------------------
|
|
-- {
|
|
-- -- Optional:
|
|
-- rport = REMOTE_PORT_NUMBER, -- some software uses same port, some uses a data port
|
|
-- length = number, -- length of entire TFTP packet
|
|
-- errcode = TFTP_ERRCODE, -- also interpreted as DATA.block
|
|
-- -- Very unlikely, response is a RRQ or WRQ
|
|
-- mode = "mode",
|
|
-- -- Mandatory:
|
|
-- errmsg = "TFTP_ERRMSG", -- also interpreted as DATA.data or RRQ/WRQ.filename
|
|
-- product = {
|
|
-- p = "Product",
|
|
-- v = "Version",
|
|
-- i = "Extra Info",
|
|
-- h = "Hostname",
|
|
-- o = "Operating System",
|
|
-- d = "Device Type",
|
|
-- cpe = {"CPE", ...},
|
|
-- }}
|
|
|
|
-- opcode RRQ
|
|
[1] = {},
|
|
-- opcode WRQ
|
|
[2] = {},
|
|
-- opcode DATA
|
|
[3] = {},
|
|
-- opcode ACK
|
|
[4] = {},
|
|
-- opcode ERROR
|
|
[5] = {
|
|
-- SolarWinds
|
|
{ errcode = 2, errmsg = "The IP address is not in the range of allowable addresses.",
|
|
product = {
|
|
p = "SolarWinds tftpd",
|
|
e = "IP disallowed",
|
|
o = "Windows",
|
|
cpe = {"cpe:/a:solarwinds:tftp_server", "cpe:/o:microsoft:windows"},
|
|
}},
|
|
|
|
-- Cisco
|
|
{ errcode = 0, errmsg = "Invalid TFTP Opcode",
|
|
product = {
|
|
p = "Cisco tftpd",
|
|
cpe = {"cpe:/a:cisco:tftp_server"},
|
|
}},
|
|
|
|
-- Plan 9
|
|
{ errcode = 4, errmsg = "Illegal TFTP operation",
|
|
product = {
|
|
p = "Plan 9 tftpd",
|
|
o = "Plan 9",
|
|
cpe = {"cpe:/o:belllabs:plan_9"},
|
|
}},
|
|
|
|
-- Zoom X5 ADSL Modem
|
|
{ errcode = 4, errmsg = "Error: Illegal TFTP Operation",
|
|
product = {
|
|
p = "Zoom X5 ADSL modem tftpd",
|
|
d = "broadband router",
|
|
cpe = {"cpe:/h:zoom:x5"},
|
|
}},
|
|
|
|
-- Cisco Router
|
|
{ errcode = 4, errmsg = "Illegal operation",
|
|
product = {
|
|
p = "Cisco router tftpd",
|
|
o = "IOS",
|
|
d = "router",
|
|
cpe = {"cpe:/a:cisco:tftp_server", "cpe:/o:cisco:ios"},
|
|
}},
|
|
|
|
-- Microsoft Windows Deployment Services
|
|
{ errcode = 4, errmsg = "Illegal operation error.",
|
|
product = {
|
|
p = "Microsoft Windows Deployment Services tftpd",
|
|
o = "Windows",
|
|
cpe = {"cpe:/o:microsoft:windows"},
|
|
}},
|
|
|
|
-- SolarWinds Free
|
|
{ errcode = 4, errmsg = "Unknown operatation code: 0 received from",
|
|
product = {
|
|
p = "SolarWinds Free tftpd",
|
|
cpe = {"cpe:/a:solarwinds:tftp_server"},
|
|
}},
|
|
|
|
{ errcode = 4, errmsg = "Could not find file '",
|
|
product = {
|
|
p = "SolarWinds Free tftpd",
|
|
cpe = {"cpe:/a:solarwinds:tftp_server"},
|
|
}},
|
|
|
|
-- Brother MFC-9340CDW
|
|
{ errcode = 4, errmsg = "illegal (unrecognized) tftp operation",
|
|
product = {
|
|
p = "Brother printer tftpd",
|
|
d = "printer",
|
|
}},
|
|
|
|
-- HP Intelligent Management Center
|
|
{ errcode = 0, errmsg = "Not defined, see error message(if any).",
|
|
product = {
|
|
p = "HP Intelligent Management Center tftpd",
|
|
cpe = {"cpe:/a:hp:intelligent_management_center"},
|
|
}},
|
|
|
|
-- Windows 2003 Server Deployment Service
|
|
{ errcode = 4, errmsg = "Illegal TFTP operation",
|
|
product = {
|
|
p = "Windows 2003 Server Deployment Service",
|
|
o = "Windows",
|
|
cpe = {"cpe:/o:microsoft:windows_server_2003"},
|
|
}},
|
|
|
|
-- Enistic Zone Controller
|
|
{ errcode = 1, errmsg = "File not found.",
|
|
product = {
|
|
p = "Enistic zone controller tftpd",
|
|
}},
|
|
|
|
-- Netkit
|
|
{ errcode = 1, errmsg = "File not found",
|
|
product = {
|
|
p = "Netkit tftpd or atftpd",
|
|
cpe = {"cpe:/a:netkit:netkit", "cpe:/a:lefebvre:atftpd"},
|
|
}},
|
|
},
|
|
|
|
}
|
|
|
|
return fingerprints
|