https://github.com/nixawk/nmap_vscan
nmap service and application version detection (without nmap installation)
https://github.com/nixawk/nmap_vscan
fingerprint nmap recognition services versions
Last synced: 5 months ago
JSON representation
nmap service and application version detection (without nmap installation)
- Host: GitHub
- URL: https://github.com/nixawk/nmap_vscan
- Owner: nixawk
- License: other
- Created: 2017-12-07T00:27:41.000Z (over 7 years ago)
- Default Branch: master
- Last Pushed: 2017-12-12T00:32:16.000Z (over 7 years ago)
- Last Synced: 2024-05-02T13:10:00.131Z (12 months ago)
- Topics: fingerprint, nmap, recognition, services, versions
- Language: Python
- Size: 566 KB
- Stars: 107
- Watchers: 7
- Forks: 31
- Open Issues: 2
-
Metadata Files:
- Readme: README.rst
- License: LICENSE
Awesome Lists containing this project
README
==========
nmap_vscan
==========
**nmap_vscan** can finish Service and Application Version Detection without Nmap installation. It is not an official release from the Nmap Project.
Requirements
============
* Python 2.7
* Works on Linux, Windows, Mac OSX, BSD
Install
=======
The quick way::
pip install nmap_vscan
Usage
=====
Please download https://svn.nmap.org/nmap/nmap-service-probes at first.
>>> from nmap_vscan import vscan
>>> nmap = vscan.ServiceScan('./nmap-service-probes')
Let's try to scan HTTP, MYSQL, SSH, REDIS and so on.
>>> nmap.scan('www.apache.org', 80, "tcp")
{'match': {'pattern': '^HTTP/1\\.[01] \\d\\d\\d .*\\r\\nServer: Apache[/ ](\\d[-.\\w]+) ([^\\r\\n]+)',
'versioninfo': {'cpename': ['apache:http_server:2.4.7'],
'devicetype': [' v'],
'hostname': [],
'info': ['(Ubuntu)'],
'operatingsystem': [],
'vendorproductname': ['Apache httpd'],
'version': ['2.4.7']}},
'probe': {'probename': 'GetRequest',
'probestring': 'GET / HTTP/1.0\\r\\n\\r\\n'}}
>>> nmap.scan('192.168.1.245', 3306, 'tcp')
{'match': {'pattern': '^.\\0\\0\\0\\x0a(5\\.[-_~.+\\w]+)\\0',
'versioninfo': {'cpename': ['mysql:mysql:5.5.28-log'],
'hostname': [],
'info': [],
'operatingsystem': [],
'vendorproductname': ['MySQL'],
'version': ['5.5.28-log']}},
'probe': {'probename': 'NULL', 'probestring': ''}}
>>> nmap.scan('192.168.1.245', 6379, 'tcp')
{'match': {'pattern': '^\\$\\d+\\r\\n(?:#[^\\r\\n]*\\r\\n)*redis_version:([.\\d]+)\\r\\n',
'versioninfo': {'cpename': [],
'hostname': [],
'info': [],
'operatingsystem': [],
'vendorproductname': ['Redis key-value store'],
'version': ['2.6.12']}},
'probe': {'probename': 'redis-server',
'probestring': '*1\\r\\n$4\\r\\ninfo\\r\\n'}}
References
==========
- https://nmap.org/
- https://nmap.org/book/vscan.html
- https://nmap.org/book/vscan-fileformat.html
- https://github.com/nmap/nmap/blob/master/service_scan.cc
- https://svn.nmap.org/nmap/nmap-service-probes