Re: Mongodb service probe

[Patrik Karlsson <patrik () cqure net>]

On Tue, Nov 1, 2011 at 2:16 PM, Martin Holst Swende <martin () swende se>wrote:

> Hi,
>
> I made a service probe for MongoDB, based on packet capture and the
> protocol as defined on
> http://www.mongodb.org/display/DOCS/Mongo+Wire+Protocol .
>
> ##############################NEXT PROBE##############################
> # MongoDB probe, this is a status request
> # See http://www.mongodb.org/display/DOCS/Mongo+Wire+Protocol for more
> details
> Probe TCP mongodb
>
> q|\x41\0\0\0\x3a\x30\0\0\xff\xff\xff\xff\xd4\x07\0\0\0\0\0\0test.$cmd\0\0\0\0\0\xff\xff\xff\xff\x1b\0\0\0\x01serverStatus\0\0\0\0\0\0\0\xf0\x3f\0|
> rarity 8
> ports 27017
> match mongodb m|^.*version.....([\.\d]+)| p/MongoDB/ v/$1/
>
>
> Regards,
> Martin Holst Swende
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://seclists.org/nmap-dev/

Thanks Martin! I've committed the probe as r27068.

//Patrik
-- 
Patrik Karlsson
http://www.cqure.net
http://twitter.com/nevdull77
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/