Re: Application-based fingerprinting ?

From: Joris De Donder <joris(at)digitaldefense.be>
Date: Tue Feb 04 2003 - 16:27:06 EST

>Have there been any attempts to explore this area further?

http://www.thehackerschoice.com/releases.php

"THC-RUT comes with a OS host Fingerprinter which determines the remote  OS by open/closed port characteristics, banner matching and nmap  fingerprinting techniques (T1, tcpoptions)."

"Amap is a next-generation scanning tool, it identifies applications  and services even if they are not listening on the default port by  creating a bogus-communication."

Joris

---

This list is provided by the SecurityFocus Security Intelligence Alert (SIA) Service. For more information on SecurityFocus' SIA service which automatically alerts you to the latest security vulnerabilities please see: https://alerts.securityfocus.com/ Received on Tue Feb 4 16:53:09 2003