SinFP 1.01, new version of the OS fingerprinting next generation tool
- From: GomoR <pt@xxxxxxxxx>
- Date: Sat, 06 May 2006 16:37:08 +0200
SinFP is a new approach to OS fingerprinting, which bypasses limitations
that nmap has.
Nmap approaches to fingerprinting as shown to be efficient for years.
Nowadays, with the omni-presence of stateful filtering devices, PAT/NAT
configurations and emerging packet normalization, its approach to OS
fingerprinting is becoming to be obsolete.
SinFP uses the aforementioned limitations as a basis for tests to be
obsolutely avoided in used frames to identify accurately the remote
operating system. That is, it only requires one open TCP port, sends only
fully standard TCP packets, and limits the number of tests to 2 or 3 (with
only 1 test giving the OS reliably in most cases).
Features list:
- full OS fingerprinting suite, built as a Perl module
- active fingerprinting
- passive fingerprinting (with signature matching made against active ones)
- works the same over IPv4 and IPv6 (yes, IPv6 fingerprinting)
- online mode
- offline mode (especially useful when you have a pcap file)
- heuristic matching algorithm to avoid the need to write new signature for
a target stack which has some TCP option deactivated, or changed window
size
To know more: http://www.gomor.org/sinfp .
Or simply download and try: http://www.gomor.org/files/SinFP-1.01-3.tar.gz .
--
^ ___ ___ http://www.GomoR.org/ <-+
| / __ |__/ Systems & Security Engineer |
| \__/ | \ ---[ zsh$ alias psed='perl -pe ' ]--- |
+--> Net::Packet <=> http://search.cpan.org/~gomor/ <--+
------------------------------------------------------------------------------
This List Sponsored by: Cenzic
Concerned about Web Application Security? Why not go with the #1 solution - Cenzic, the only one to win the Analyst's Choice Award from eWeek. As attacks through web applications continue to rise, you need to proactively protect your applications from hackers. Cenzic has the most comprehensive solutions to meet your application security penetration testing and vulnerability management needs. You have an option to go with a managed service (Cenzic ClickToSecure) or an enterprise software (Cenzic Hailstorm). Download FREE whitepaper on how a managed service can help you: http://www.cenzic.com/news_events/wpappsec.php And, now for a limited time we can do a FREE audit for you to confirm your results from other product. Contact us at request@xxxxxxxxxx for details.
------------------------------------------------------------------------------
- Prev by Date: Re: HTTP request working via hostname but not via IP address
- Next by Date: Pen testing Cisco 4700, and 6509 series
- Previous by thread: Idle scan rediscovered!!!
- Next by thread: Bridging as sniffing method?
- Index(es):
Relevant Pages
|
|
