From bc1091d387cce5e930e6663f8ddbd6722117ade8 Mon Sep 17 00:00:00 2001
From: dmiller <dmiller@e0a8ed71-7df4-0310-8962-fdc924857419>
Date: Sun, 12 Dec 2021 23:42:35 +0000
Subject: [PATCH] Improve TFTP detection. See #2406

---
 nmap-payloads | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/nmap-payloads b/nmap-payloads
index 73e2eb573..599567ebd 100644
--- a/nmap-payloads
+++ b/nmap-payloads
@@ -37,7 +37,8 @@
 # GenericLines. Use for the echo service.
 udp 7 "\x0D\x0A\x0D\x0A"
 # DNSStatusRequest
-udp 53,5353,26198 "\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00"
+# Sent for TFTP (69) as well due to its ability to provoke an error response
+udp 53,69,5353,26198 "\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00"
 # DNS VER
 udp 53,5353,26198
   "\x77\x77\x01\x00\x00"