Nmap Development mailing list archives

New version detection probe for memcached


From: doug () hcsw org
Date: Thu, 21 Feb 2008 23:02:35 -0800

Hi nmap-dev,

Just checked in a new probe to SVN that uses memcache's stats command
to get some interesting info from the service. The probe's rarity
is 8 so it is only applied against memcache's default port of 11211
in the normal scan. Nmap results before:

PORT      STATE SERVICE   REASON  VERSION
11211/tcp open  memcached syn-ack memcached

And after:

PORT      STATE SERVICE   REASON  VERSION
11211/tcp open  memcached syn-ack memcached 1.2.4 (PID 3807; uptime 25490 seconds; curr items: 800; total items: 800; 
bytes cached: 3276800)

Should also support AF_UNIX if you either

a) bridge it to port 11211

or

b) use --version-intensity 8 and bridge to any port

Best,

Doug

Attachment: signature.asc
Description: Digital signature


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org

Current thread: