www_fingerprinting_hmap.nasl

漏洞扫描源码,可以扫描linux,windows,交换机路由器

#
# **** THIS SCRIPT IS EXPERIMENTAL! ****
#
# (C) 2003 Michel Arboi <[e-mail]>
#
# Redistribution and use in source, with or without modification, are 
# permitted provided that the following conditions are met:
#
# 1. Redistributions of source code must retain the above copyright
#    notice, this list of conditions and the following disclaimer.
# 2. All advertising materials mentioning features or use of this software
#    must display the following acknowledgement:
#     This product includes software developed and data gathered by 
#     Michel Arboi
#
# This script is not a transcription in NASL of HMAP, which is much 
# more complex. It is only based upon ideas that are described in 
# Dustin Lee's thesis:
# HMAP: A Technique and Tool For Remote Identification of HTTP Servers
#
# To receive useful contributions, we have to generate a significant 
# signature for unknown servers. This signature should be compact, 
# so only the most significant tests should be selected. An interesting 
# side effect is that the plugin will be quicker!
# As I don't have enough web servers, versions, sub-versions, and strange
# or typical configurations, I run into a chicken & egg problem:
# so we must keep in mind that the test set may change, and the known
# signatures will have to be adapted, or recomputed.
#
# NOTE TO SIGNATURE CONTRIBUTORS
# If you have different servers that return the _same_ signature, this 
# means that the test has to be enhanced. Please download hmap from
# http://ujeni.murkyroc.com/hmap/ and runs it against your servers, and
# send us the generated files.
#
# To look for duplicated signatures, run:
# egrep '^(...:){20,}' www_fingerprinting_hmap.nasl | awk -F: '{print $1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15,$16,$17,$18,$19,$20,$21,$22,$23,$24,$25; }' | sort | uniq -d
#
# Contributors: 
# Chava Alvarez, Greg Armer, Rafael Ausejo Prieto, Alex Bartl, Jochen Bartl, 
# Pascal B閐er鑔e, Bob T. Berge, Luca Bigliardi, 
# Henk Bokhoven, Wayne Boline, 
# Andrew Brampton, J Barger, Jorge Blat, Randy Bias, Paul Bowsher,
# Dustin Butler, Niels B黷tner, 
# James Chenvert, Joe Clifton, Russ Cohen, 
# Lionel Cons, Owen Crow, Kevin Davidson, Stephen Davies, Renaud Deraison, 
# Peters Devon, Sean Dreilinger, Shaun Drutar, Franck Dubray, 
# Thierry Dussuet, 
# Daniel C. Endrizzi, Aizat Faiz, Joshua Fielden, Tomasz Finke, 
# Stephen Flanagan, Dennis Freise, Scott Fringer, Raul Gereanu, Chad Glidden, 
# Volker Goller, Thomas Graham, Rick Gray, Matthew Gream, Daniel Griswold, 
# Gary Gunderson, Tim Hadlow, Stuart Halliday,
# Tomi Hanninen, 
# Chris Hanson, Chris Harrington, Maarten Hartsuijker, Greg Hartwig, 
# James Haworth, Jeffrey G Heller, Rolando Hernandez, John Hester, 
# John T Hoffoss, Florian Huber, Thomas Hunter, Fabien Illide, Ron Jackson,
# Jay Jacobson,
# Simen Graff Jenssen, Bill Johnson, Paul Johnston, 
# Maciek Jonakowski, Michiel Kalkman, 
# Imre K醠骳zi, Pavel Kankovsky, Boris Karnaukh, Egon Kastelijn, 
# Eddie Kilgore, Don M. Kitchen, Yuval Kogman,
# Robert Kolaczynski, Michael Kohne, Pierre Kroma, Nerijus Krukauskas, 
# Paul Kurczaba, David Kyger, Andre Lewis, Tarmo Lindstr鰉, 
# S閎astien Louafi, Richard Lowe, St閜hane Lu,
# Martin Ma鑟k, Florin Mariuteac, Raul Mateos Martin, 
# Mats Martinsson, Thomas Maurer, Zul Mohd, Mick Montgomery, Greg Mooney,
# Jose Manuel Rodriguez Moreno, Mike Nelson, Kevin O'Brien, 
# Warren Overholt, C. Paparelli, Eric F Paul, Ashesh Patel, Nicolas Pouvesle,
# Federico Petronio, John Pignata, Abri du Plooy, Xavier Poli, Dave Potts, 
# Matthew Pour, Jason Radley, Jim Rather, Dmytro O. Redchuk, Mark Rees, 
# Thomas Reinke, Jon Repaci, Iben Rodriguez, Brooks Rosenow, 
# Mark Sayer, Michael Scheidell, Frank Schreiner, Don Senzig, 
# Beat Siegenthaler, Barn Ski, Adam Smith, Marco Spoel, Ricardo Stella, 
# Andr