From aa496f20160cbf56561cc7f8bea02fa5918f7d38 Mon Sep 17 00:00:00 2001 From: fyodor Date: Fri, 21 Dec 2007 01:18:17 +0000 Subject: [PATCH] improve nginx detection. patch from Sven Klemm. See http://seclists.org/nmap-dev/2007/q4/0682.html --- nmap-service-probes | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nmap-service-probes b/nmap-service-probes index 63304b926..df917c7eb 100644 --- a/nmap-service-probes +++ b/nmap-service-probes @@ -4521,7 +4521,7 @@ match http-proxy m|^HTTP/1\.1 \d\d\d .*\r\nCache-Control: no-cache\r\nPragma: no match http-proxy m|^HTTP/1\.0 \d\d\d .*\r\nServer: BlueCoat-Security-Appliance\r\n|s p/BlueCoat http proxy/ match http-proxy m|^HTTP/1\.0 \d\d\d .*\r\nProxy-agent: BlueCoat-WinProxy\r\n| p/BlueCoat WinProxy http proxy/ o/Windows/ match http-proxy m|^HTTP/1\.0 200 Connection established\r\nPragma: no-cach\r\nContent-Type: text/html; charset=windows-1251\r\n\r\n$| p/UserGate http proxy/ o/Windows/ -match http-proxy m|^HTTP/1\.1 \d\d\d .*\r\nServer: nginx/([\d.]+)\r\n| p/nginx http proxy/ v/$1/ +match http-proxy m!^HTTP/1\.1 ([1235]\d\d|4(\d[1-9]|[1-9]\d)) .*\r\nServer: nginx/([\d.]+)\r\n! p/nginx http proxy/ v/$1/ match http-proxy m|^HTTP/1\.1 \d\d\d .*\r\nServer: Simple, Secure Web Server ([\d.]+)\r\n|s p/Symantec firewall http proxy/ i/Simple, Secure Web Server $1/ d/firewall/ match http-proxy m|^HTTP/1\.0 \d\d\d .*\r\nContent-Length: \d+\r\n.*\r\n\r\n.*KEN! Proxy|s p/AVM KEN! http proxy/ match http-proxy m|^HTTP/1\.0 400 Bad request\r\nContent-Type: text/html\r\nPragma: no-cache\r\n\r\n

Error parsing http request : 

GET / / HTTP/1\.0\r\n\r\n
| p/Kerio Winroute Pro http proxy/ o/Windows/