Home page logo
/

nmap-dev logo Nmap Development mailing list archives

Re: Mongodb service probe
From: Patrik Karlsson <patrik () cqure net>
Date: Fri, 11 Nov 2011 21:31:57 +0100

On Tue, Nov 1, 2011 at 2:16 PM, Martin Holst Swende <martin () swende se>wrote:

Hi,

I made a service probe for MongoDB, based on packet capture and the
protocol as defined on
http://www.mongodb.org/display/DOCS/Mongo+Wire+Protocol .

##############################NEXT PROBE##############################
# MongoDB probe, this is a status request
# See http://www.mongodb.org/display/DOCS/Mongo+Wire+Protocol for more
details
Probe TCP mongodb

q|\x41\0\0\0\x3a\x30\0\0\xff\xff\xff\xff\xd4\x07\0\0\0\0\0\0test.$cmd\0\0\0\0\0\xff\xff\xff\xff\x1b\0\0\0\x01serverStatus\0\0\0\0\0\0\0\xf0\x3f\0|
rarity 8
ports 27017
match mongodb m|^.*version.....([\.\d]+)| p/MongoDB/ v/$1/


Regards,
Martin Holst Swende
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/


Thanks Martin! I've committed the probe as r27068.

//Patrik
-- 
Patrik Karlsson
http://www.cqure.net
http://twitter.com/nevdull77
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]