Service and Application Version Detection

Table of Contents

Introduction

Usage and Examples

Technique Described

Cheats and Fallbacks

Probe Selection and Rarity

Technique Demonstrated

Post-processors

Nmap Scripting Engine Integration

RPC Grinding

SSL Post-processor Notes

nmap-service-probes File Format

Exclude Directive

Probe Directive

match Directive

softmatch Directive

ports and sslports Directives

totalwaitms Directive

rarity Directive

fallback Directive

Putting It All Together

Community Contributions

Submit Service Fingerprints

Submit Database Corrections

Submit New Probes

SOLUTION: Hack Version Detection to Suit Custom Needs, such as Open Proxy Detection

SOLUTION: Find All Servers Running an Insecure or Nonstandard Application Version