Re: More Service Detection Notes

[doug () hcsw org]

Hi Fyodor,

On Tue, Aug 01, 2006 at 12:28:21AM -0700 or thereabouts, Fyodor wrote:
> BTW, I noticed that the Haxdoor trojan signature mentioned in your
> blog seems to be missing a p// element.  So I added one (after a bit
> of Googling):
>
> -match backdoor m|^A-311 Death welcome\x001\.87| i/**BACKDOOR**/ o/Windows/
> +match backdoor m|^A-311 Death welcome\x001\.87| p/Haxdoor trojan/ i/**BACKDOOR**/ o/Windows/

Oops! Good find, thanks for fixing that.

Doug



_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev