[NSE] All-Seeing Eye version detection and info

[Marin Maržić <marzic () gmail com>]

Here's a version detection solution for All-Seeing Eye, an old-school
game server service that can (rarely) still be found lying around.

There are a lot of port numbers because it differed from game to game,
but these seem to be the most common ones. Maybe not that big of a deal
on a high rarity?

The script comes attached. Here's the nmap-service-probes bit:

# All-Seeing Eye service provided by some game servers for querying
# the server's status
# For more info on the protocol see:
# http://int64.org/docs/gamestat-protocols/ase.html
# http://aluigi.altervista.org/papers.htm#ase
# http://sourceforge.net/projects/gameq/
# (relevant files: games.ini, packets.ini, ase.php)
Probe UDP ASE q|s|
rarity 9
ports 1258,2126,3123,12444,13200,23196,26000,27138,27244,27777,28138

match ase m/^EYE1.(.*?)(?|\x02(\d)|\x03(\d{2})|\x04(\d{3})|\x05(\d{4})|\x06(\d{5}))/s p/All-Seeing Eye/ i/game: $1; 
port: $2/

Attachment: ase-info.nse
Description:

_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/