Re: Application-based fingerprinting ?

[Joris De Donder <joris () digitaldefense be>]

> Have there been any attempts to explore this area further?

http://www.thehackerschoice.com/releases.php

"THC-RUT comes with a OS host Fingerprinter which determines the remote
 OS by open/closed port characteristics, banner matching and nmap
 fingerprinting techniques (T1, tcpoptions)."

"Amap is a next-generation scanning tool, it identifies applications
 and services even if they are not listening on the default port by
 creating a bogus-communication."




Joris



----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/