Re: salt in version probes

[David Fifield <david () bamsoftware com>]

On Fri, Jan 14, 2011 at 09:07:31PM +0200, Toni Ruottu wrote:
> Some protocols require client to send a random number that is echoed
> back by the server. What kind of version probe should I write for such
> protocols? Is it okay to just create a random number and hard code
> that into the probe if the server seems to be okay with that?

If a static value works, just use a static value. (And document it so
people don't look for meaning in it.) Anything more complicated needs a
script.

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/