Re: Microsoft SQL Server fingerprint question

[doug () hcsw org]

On Fri, Jan 04, 2008 at 07:52:45PM -0600 or thereabouts, Tom Sellers wrote:
> Doug,
>
>       Is there a listing of the helper functions somewhere?  I am almost
> ready to post the info on the MS SQL probe/match lines.  If it is possible
> to do a hex to decimal conversion of a substring in the match line I could
> return exact program versions.

Hi Tom,

The only helper functions are currently $P() and $SUBST(). However, I just
hacked up a quick patch that adds $HEX2DEC(). I'm attaching the patch. Please
let me know if it works for you. Here is an example:

match test m|^Version (\w\w)\w| v/$HEX2DEC(1)/

If this sees "Version 7FA" then the version field will be "127". This is
what you meant, right?

Best,

Doug

Attachment: nmap-hex2dec.patch
Description:

Attachment: signature.asc
Description: Digital signature

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org