From 1feef872b2a1f5a07a23daaf9fd2b017b8c18ef6 Mon Sep 17 00:00:00 2001 From: fyodor Date: Sun, 13 Jan 2008 03:33:50 +0000 Subject: [PATCH] o Add Radmin remote control software probe and signatures to the Nmap version detection DB. [Tom Sellers, Fyodor] --- CHANGELOG | 3 +++ nmap-service-probes | 12 ++++++++++++ 2 files changed, 15 insertions(+) diff --git a/CHANGELOG b/CHANGELOG index 88e1f193f..9dc8515f0 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,4 +1,7 @@ # Nmap Changelog ($Id$); -*-text-*- +o Add Radmin remote control software probe and signatures to the Nmap + version detection DB. [Tom Sellers, Fyodor] + 4.53 o Impoved Windows executable installer by making uninstall work better diff --git a/nmap-service-probes b/nmap-service-probes index b31158df6..6ecc94016 100644 --- a/nmap-service-probes +++ b/nmap-service-probes @@ -5969,6 +5969,18 @@ ports 1098,1099,1981 match jrmi m|^N..[0-9.]+\0\0..$|s p/Java RMI/ +##############################NEXT PROBE############################## +Probe TCP Radmin q|\x01\x00\x00\x00\x01\x00\x00\x00\x08\x08| +ports 4899 +rarity 8 + +match radmin m|^\x01\x00\x00\x00\x25\x09\x00\x01\x10\x08\x01\x00\x09\x08| p/Radmin remote control software/ v/2.X/ o/Windows/ i/Using Windows Authentication/ +match radmin m|^\x01\x00\x00\x00\x25\x0a\x00\x01\x10\x08\x01\x00\x0a\x08| p/Radmin 2.x remote control software/ v/2.X/ o/Windows/ i/Using Radmin Authentication/ +match radmin m|^\x01\x00\x00\x00\x25\x00\x00\x02\x12\x08\x02\x00\x00\x0a| p/Radmin remote control software/ v/3.X/ o/Windows/ i/Using Radmin Authentication/ +match radmin m|^\x01\x00\x00\x00\x25\x71\x00\x02\x12\x08\x02\x00\x71\x0a| p/Radmin remote control software/ v/3.X/ o/Windows/ i/Using Windows Authentication/ + + + ##############################NEXT PROBE############################## Probe UDP Sqlping q|\x02| rarity 6