From 498811be4c8e9134ab2ccff90aa64c32612c75b8 Mon Sep 17 00:00:00 2001 From: dmiller Date: Mon, 27 Jun 2016 14:30:35 +0000 Subject: [PATCH] Fix detection of RDP: http://seclists.org/nmap-dev/2016/q2/236 --- nmap-service-probes | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/nmap-service-probes b/nmap-service-probes index 3bb12d427..56bdb3a4d 100644 --- a/nmap-service-probes +++ b/nmap-service-probes @@ -12265,7 +12265,8 @@ match xamarin m|^ERROR: Another instance is running\n| p/Xamarin MonoTouch/ # in the match lines) Probe TCP TLSSessionReq q|\x16\x03\0\0\x69\x01\0\0\x65\x03\x03U\x1c\xa7\xe4random1random2random3random4\0\0\x0c\0/\0\x0a\0\x13\x009\0\x04\0\xff\x01\0\0\x30\0\x0d\0,\0*\0\x01\0\x03\0\x02\x06\x01\x06\x03\x06\x02\x02\x01\x02\x03\x02\x02\x03\x01\x03\x03\x03\x02\x04\x01\x04\x03\x04\x02\x01\x01\x01\x03\x01\x02\x05\x01\x05\x03\x05\x02| rarity 1 -ports 443,444,465,636,989,990,992,993,994,995,1241,1311,2252,3389,4433,4444,5061,6679,6697,8443,9001 +# port 3389 not listed because we can't figure out what to send to it after negotiating TLS +ports 443,444,465,636,989,990,992,993,994,995,1241,1311,2252,4433,4444,5061,6679,6697,8443,9001 fallback GetRequest # SSLv3 - TLSv1.2 ServerHello