Home page logo

nmap-dev logo Nmap Development mailing list archives

Re: Sun Service Tags Nmap Discovery script
From: David Fifield <david () bamsoftware com>
Date: Mon, 10 Jan 2011 20:57:04 -0800

On Thu, Dec 30, 2010 at 10:16:16AM +1100, Matthew Flanagan wrote:
On 30 December 2010 09:45, David Fifield <david () bamsoftware com> wrote:
On Wed, Dec 29, 2010 at 05:39:06PM -0500, Jonathan Rethorn wrote:
Matthew, is this Service Tags agent something that's easy to install on

Supposedly Windows too.

What I mean is, can you give me instructions on how to set this up to
test it? Or is it some proprietary thing?

You can download all the different OS versions from http://arseh.at/svctags

You will also find that some of the ILOM (integrated lights out
management) cards respond to service tags requests as well if they are
ethernet connected. They are running some kind of Linux on an embedded
powerpc chip.

Is my script the kind of thing that could be considered to be included
with nmap?

It is definitely something we can include. We just haven't gotten any
feedback yet.

I found out that service tags is installed by default in OpenSolaris. I
booted osol-0906-x86.iso in text mode (no need to install), then ran

$ svcadm enable '*std*'

I intended '*std*' to match in.stdiscover, but I'm not sure that's what
it's doing. Anyway, it opens port 6481. I ran the script and got this

Discovered open port 6481/udp on
NSE: 'servicetags' (thread: 0x8e75ca0) against threw an error!
stack traceback:
        [C]: in function 'try'
        ./scripts/servicetags.nse:141: in function <./scripts/servicetags.nse:83>
        (tail call): ?

I'm attaching a packet capture. The scanning machine sends
"[PROBE] 1294721585\r\n" and receives " 6481\n".

David Fifield
Sent through the nmap-dev mailing list
Archived at http://seclists.org/nmap-dev/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]