Re: [Plugins-writers] Identification of the ManHunt service

From: John Lampe (jwlampe@private)
Date: Sat Jan 08 2005 - 15:32:31 PST


Adam Baldwin wrote:
> I have figured out how to identify the ManHunt / Symantec Network
> Security service. As the management port for this product is
> configurable during setup it would have to be added to the
> find_service.c code.
> 
> I figured somebody out there woudl be better suited to add it than I.
> I have been looking and thought that I could just add on to the
> massive if, else statement. Since there are 7 bytes that need
> validation I thought I could just chain them in the if as in
> 
> if(buffer[0] == 0x00 && buffer[1] == 0x01...etc
> 
> but when I put in more than 4 &&'s I get a compilation error that states..
> "comparison is always false due to limited range of data type"
> 
> I'm sort of assuming that this is due to the fact that it is a char
> buffer. I have not been able to find much information on why this is.
> 
> Any assistance would be great. Thanks

you could do something like
match=raw_string(0x00,0x01,0x02,...,0x06)
if (buffer == match) do_somethin

John Lampe
Researcher, Tenable Network Security
http://www.tenablesecurity.com/


_______________________________________________
Plugins-writers mailing list
Plugins-writers@private
http://mail.nessus.org/mailman/listinfo/plugins-writers



This archive was generated by hypermail 2.1.3 : Sat Jan 08 2005 - 15:33:37 PST