Hi folks, after amap was voted into the top-75 security tools, we took the time to expand amap two times this month :-) for general initiation: amap - application mapper - identifies protcols on ports by sending various triggers and anlyzing the responses. By this it is able to identify a telnetd on port 4000, an SSL protected FTP server on port 2100, Oracle, SAP R/3 and many, many more applications, and even very esoteric things like an SSL protected rpc-mountd running nfs version 3 on tcp port 1 ... Current features: * 22 triggers (more are not necessary at this point) * 190 response identification * supports nmap output files (-oM) * Can identify SSL effectivly and look at the protocol behind it * Can identify RPC service type and version * Checks parallel on hosts and ports to prevent flood detection/crashes * can do in-depth checks or just take the first ID which is very fast * fast (except on rpc type identification, as it is in its nature ;-) * machine readable output files * it's also one of the fastest banner grabber available ... Get v2.5 at http://www.thc.org Ciao... van Hauser / THC - [The Hacker's Choice] Visit our web page at http://www.thc.org Type Bits/KeyID Date User ID pub 2048/CDD6A571 1998/04/27 van Hauser / THC <vhat_private> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i mQENAzVE0A4AAAEIAOzKPhKBDFDyeTvMKQ1xx6781tEdIYgrkrsUEL6VoJ8H8CIU SeXDuCVu3JlMKITD6nPMFJ/DT0iKHgnHUZGdCQEk/b1YHUYOcig1DPGsg3WeTX7L XL1M4DwqDvPz5QUQ+U+VHuNOUzgxfcjhHsjJj2qorVZ/T5x4k3U960CMJ11eOVNC meD/+c6a2FfLZJG0sJ/kIZ9HUkY/dvXDInOJaalQc1mYjkvfcPsSzas4ddiXiDyc QcKX+HAXIdmT7bjq5+JS6yspnBvIZC55tB7ci2axTjwpkdzJBZIkCoBlWsDXNwyq s70Lo3H9dcaNt4ubz5OMVIvJHFMCEtIGS83WpXEABRG0J3ZhbiBIYXVzZXIgLyBU SEMgPHZoQHJlcHRpbGUucnVnLmFjLmJlPokAlQMFEDVE0D7Kb9wCOxiMfQEBvpAD /3UCDgJs1CNg/zpLhRuUBlYsZ1kimb9cbB/ufL1I4lYM5WMyw+YfGN0p02oY4pVn CQN6ca5OsqeXHWfn7LxBT3lXEPCckd+vb9LPPCzuDPS/zYnOkUXgUQdPo69B04dl C9C1YXcZjplYso2q3NYnuc0lu7WVD0qT52snNUDkd19ciQEVAwUQNUTQDhLSBkvN 1qVxAQGRTwgA05OmurXHVByFcvDaBRMhX6pKbTiVKh8HdJa8IdvuqHOcYFZ2L+xZ PAQy2WCqeakvss9Xn9I28/PQZ+6TmqWUmG0qgxe5MwkaXWxszKwRsQ8hH+bcppsZ 2/Q3BxSfPege4PPwFWsajnymsnmhdVvvrt69grzJDm+iMK0WR33+RvtgjUj+i22X lpt5hLHufDatQzukMu4R84M1tbGnUCNF0wICrU4U503yCA4DT/1eMoDXI0BQXmM/ Ygk9bO2Icy+lw1WPodrWmg4TJhdIgxuYlNLIu6TyqDYxjA/c525cBbdqwoE+YvUI o7CN/bJN0bKg1Y/BMTHEK3mpRLLWxVMRYw== =MdzX -----END PGP PUBLIC KEY BLOCK-----
This archive was generated by hypermail 2b30 : Mon Jun 02 2003 - 11:13:12 PDT