From 913fbac6d100a5566334f774249f1b3096385062 Mon Sep 17 00:00:00 2001 From: paulino Date: Thu, 31 Jan 2013 18:04:40 +0000 Subject: [PATCH] Adds entry to detect SCADA SIMATIC S7. Signature taken from Jose Ramon Palanco's script https://github.com/drainware/nmap-scada/blob/master/SIEMENS-Simatic-HMI-miniweb.nse --- nselib/data/http-fingerprints.lua | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/nselib/data/http-fingerprints.lua b/nselib/data/http-fingerprints.lua index e5f53e4e7..e660bd4a2 100644 --- a/nselib/data/http-fingerprints.lua +++ b/nselib/data/http-fingerprints.lua @@ -4302,6 +4302,22 @@ table.insert(fingerprints, { -- These checks will find specific installed software. If possible, it will also -- find versions, etc. +table.insert(fingerprints, { + category = 'security', + probes = { + { + path = '/CSS/Miniweb.css', + method = 'GET' + } + }, + matches = { + { + match = 'ad_header_form_sprachauswahl', + output = 'SCADA Siemens SIMATIC S7' + } + } + }); + table.insert(fingerprints, { category = 'security', probes = {