Nmap Development mailing list archives
[NSE] All-Seeing Eye version detection and info
From: Marin Maržić <marzic () gmail com>
Date: Tue, 12 Nov 2013 21:42:51 +0100
Here's a version detection solution for All-Seeing Eye, an old-school game server service that can (rarely) still be found lying around. There are a lot of port numbers because it differed from game to game, but these seem to be the most common ones. Maybe not that big of a deal on a high rarity? The script comes attached. Here's the nmap-service-probes bit: # All-Seeing Eye service provided by some game servers for querying # the server's status # For more info on the protocol see: # http://int64.org/docs/gamestat-protocols/ase.html # http://aluigi.altervista.org/papers.htm#ase # http://sourceforge.net/projects/gameq/ # (relevant files: games.ini, packets.ini, ase.php) Probe UDP ASE q|s| rarity 9 ports 1258,2126,3123,12444,13200,23196,26000,27138,27244,27777,28138 match ase m/^EYE1.(.*?)(?|\x02(\d)|\x03(\d{2})|\x04(\d{3})|\x05(\d{4})|\x06(\d{5}))/s p/All-Seeing Eye/ i/game: $1; port: $2/
Attachment:
ase-info.nse
Description:
_______________________________________________ Sent through the dev mailing list http://nmap.org/mailman/listinfo/dev Archived at http://seclists.org/nmap-dev/
Current thread:
- [NSE] All-Seeing Eye version detection and info Marin Maržić (Nov 12)
- Re: [NSE] All-Seeing Eye version detection and info Fyodor (Nov 19)
- Re: [NSE] All-Seeing Eye version detection and info Marin Maržić (Nov 25)
- Re: [NSE] All-Seeing Eye version detection and info Fyodor (Dec 01)
- Re: [NSE] All-Seeing Eye version detection and info Marin Maržić (Nov 25)
- Re: [NSE] All-Seeing Eye version detection and info Fyodor (Nov 19)