FingerprintHub/service_fingerprint/HTTPOptions.yaml at main · hackoadmin/FingerprintHub · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
protocol: TCP
directive_name: HTTPOptions
directive_str: OPTIONS / HTTP/1.0\r\n\r\n
rarity: 4
ports:
  - 80
  - 81
  - 82
  - 83
  - 84
  - 2301
  - 631
  - 641
  - 3128
  - 5232
  - 6000
  - 8080
  - 8888
  - 9999
  - 10000
  - 10031
  - 37435
  - 49400
fallback: GetRequest
matches:
  - service: apollo-server
    pattern: ^0000000001(?:3C|C0)0000$
    version_info: ' p/Apollo Server database access/'
  - service: dgld
    pattern: ^OPTI$
    version_info: ' p/IRIX Distributed GL Daemon/ o/IRIX/ cpe:/o:sgi:irix/a'
  - service: ets2
    pattern: ^\xff\xfe\\\0n\0e\0w\0f\0r\0e\0i\0g\0h\0t\0 \0E\0u\0r\0o\0 \0T\0r\0u\0c\0k\0
      \0S\0i\0m\0u\0l\0a\0t\0o\0r\0 \x002\0;([^;]+);
    version_info: ' p/newfreight Euro Truck Simulator 2/ i/level: $P(1)/ cpe:/a:scs_software:euro_truck_simulator_2/'
  - service: irc
    pattern: (^:[-.\w]+) 421 \* OPTIONS :Unknown command\r\n
    version_info: ' p/Webmaster Conferenceroom IRC server/ h/$1/'
  - service: kerberos-sec
    pattern: ^\0\0\0[\x50-\x90]~[\x4e-\x8e]0[\x4c-\x8c]\xa0\x03\x02\x01\x05\xa1\x03\x02\x01\x1e\xa4\x11\x18\x0f(\d\d\d\d)(\d\d)(\d\d)(\d\d)(\d\d)(\d\d)Z\xa5\x05\x02\x03...\xa6\x03\x02\x01=\xa9.\x1b.([\w.-]+)\xaa\x1d0\x1b\xa0\x03\x02\x01\0\xa1\x140\x12\x1b\x06kadmin\x1b\x08changepw
    version_info: 's p/MIT Kerberos/ i/server time: $1-$2-$3 $4:$5:$6Z/ h/$7/'
  - service: monsoon
    pattern: ^\0\x14\0\x01\xff\xff\xff\xfd\0\0\0\0\0\0\0\0\0\0\0\0$
    version_info: ' p/Monsoon HAVA media streaming/ d/media device/'
  - service: msdtc
    pattern: ^\x10\x1a\x0b\x00\x60\x4d$
    version_info: ' p/Microsoft Distributed Transaction Coordinator/ o/Windows/ cpe:/o:microsoft:windows/a'
  - service: policy
    pattern: '^action=defer_if_permit Policy Rejection: Invalid data\n\n$'
    version_info: ' p/Postfix mail policyd/'
  - service: pop3
    pattern: ^\+OK Citadel POP3 server <\d+@([-\w_.]+)>\r\n-ERR Not logged in\.\r\n-ERR
      Not logged in\.\r\n
    version_info: ' p/Citadel pop3d/ h/$1/ cpe:/a:citadel:ux/'
  - service: rtsp
    pattern: '^RTSP/1\.0 200 OK\r\nCSeq: 0\r\nPublic: OPTIONS, DESCRIBE, SETUP, TEARDOWN,
      PLAY\r\nBoard: MIPS\r\nDevCaps: VideoColor,IRLed,LightMode,\r\n\r\n'
    version_info: ' p/Maygion IPCamera rtspd/ d/webcam/'
  - service: sand-db
    pattern: ^\xff\x02\x04\0\x03\0r\n\x08\0@L\x01\0\x01\x01\0\0\0\0[A-Z]{16}$
    version_info: ' p/SAND database/'
  - service: stingray
    pattern: ^\x02\x004ComDU2\0\0\0\0\0\0\0\0\0ON\0\x08OPTIONS \0\0\0\0<\x9e\x0e\x08!\x8a6@@\xb2W@\0\0\0\00\xd8\xdd\xbf\xbe\x99\r9@\x0c\xe0\x0b\x08\xb5\xd6\x0f@\xe8\xdd\xbf\xbeh\xa6>@0O\x18\x08\xd4\xb4U@
    version_info: ' p/StingRay file transfer/'
  - service: tgcmd
    pattern: ^\d+ \d+ \d+,Invalid command\.\n$
    version_info: ' p/tgcmd.exe support daemon/ o/Windows/ cpe:/o:microsoft:windows/a'