Home page logo
/

nmap-dev logo Nmap Development mailing list archives

Re: NSE script for OS identification / clarification using Netbios/SMB
From: Fyodor <fyodor () insecure org>
Date: Wed, 28 Nov 2007 14:12:57 -0800

On Wed, Nov 28, 2007 at 02:30:19PM -0500, Matthew Watchinski wrote:

The attached script written by Judy Novak, utilizes Netbios requests and
SMB AndX responses to help determine the OS and clarify the OS running
on a host that has Netbios and SMB running.  This can be helpful if OS
identification returns multiple possible fingerprints for a given
windows system.

Thanks Matt, this looks great.  It worked against a Linux box running
Samba which I tested it against:

Host flog (127.0.0.1) appears to be up ... good.
Interesting ports on flog (127.0.0.1):
PORT    STATE         SERVICE
139/tcp open          netbios-ssn
137/udp open|filtered netbios-ns

Host script results:
|_ Discover OS Version over NetBIOS and SMB: Unix

I have checked it into SVN for the next release.  We are now up to 40
NSE scripts shipping with Nmap.

Cheers,
-F

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]