Nmap Development mailing list archives
Re: More Service Detection Notes
From: doug () hcsw org
Date: Tue, 1 Aug 2006 16:43:27 -0700
Hi Fyodor, On Tue, Aug 01, 2006 at 12:28:21AM -0700 or thereabouts, Fyodor wrote:
BTW, I noticed that the Haxdoor trojan signature mentioned in your blog seems to be missing a p// element. So I added one (after a bit of Googling): -match backdoor m|^A-311 Death welcome\x001\.87| i/**BACKDOOR**/ o/Windows/ +match backdoor m|^A-311 Death welcome\x001\.87| p/Haxdoor trojan/ i/**BACKDOOR**/ o/Windows/
Oops! Good find, thanks for fixing that. Doug
_______________________________________________ Sent through the nmap-dev mailing list http://cgi.insecure.org/mailman/listinfo/nmap-dev
Current thread:
- More Service Detection Notes doug (Jul 25)
- Re: More Service Detection Notes (Skype) Brandon Enright (Jul 25)
- Re: More Service Detection Notes (Skype) doug (Jul 26)
- Re: More Service Detection Notes (Skype) Brandon Enright (Jul 26)
- Re: More Service Detection Notes (Skype) Fyodor (Jul 27)
- Re: More Service Detection Notes (Skype) Brandon Enright (Jul 27)
- Re: More Service Detection Notes (Skype) doug (Jul 26)
- Re: More Service Detection Notes (Skype) Brandon Enright (Jul 25)
- Re: More Service Detection Notes Fyodor (Aug 01)
- Re: More Service Detection Notes doug (Aug 01)
- Re: More Service Detection Notes Brandon Enright (Aug 02)
- Re: More Service Detection Notes Fyodor (Aug 02)