Nmap fingerprint-strings NSE Script

Script Overview

---

Script source code: https://github.com/nmap/nmap/tree/master/scripts/fingerprint-strings.nse
Script categories: version
Target service / protocol: finger
Target network port(s): 79, any
List of CVEs: -

Script Description

---

The fingerprint-strings.nse script prints the readable strings from service fingerprints of unknown services.

Nmap's service and application version detection engine sends named probes to target services and tries to identify them based on the response. When there is no match, Nmap produces a service fingerprint for submission. Sometimes, inspecting this fingerprint can give clues as to the identity of the service. However, the fingerprint is encoded and wrapped to ensure it doesn't lose data, which can make it hard to read.

This script simply unwraps the fingerprint and prints the readable ASCII strings it finds below the name of the probe it responded to. The probe names are taken from the nmap-service-probes file, not from the response.

Fingerprint-strings NSE Script Arguments

---

This is a full list of arguments supported by the fingerprint-strings.nse script:

fingerprint-strings.n

The number of printable ASCII characters required to make up a "string" (Default: 4)

- - -
To use this script argument, add it to Nmap command line like in this example:

nmap --script=fingerprint-strings --script-args fingerprint-strings.n=value <target>

Fingerprint-strings NSE Script Example Usage

---

Here's an example of how to use the fingerprint-strings.nse script:

nmap -sV --script fingerprint-strings <target>

Fingerprint-strings NSE Script Example Output

---

Here's a sample output from the fingerprint-strings.nse script:

| fingerprint-strings:
|   DNSStatusRequest, GenericLines, LANDesk-RC, TLSSessionReq:
|     bobo
|     bobobo
|   GetRequest, HTTPOptions, LPDString, NULL, RTSPRequest, giop, oracle-tns:
|     bobobo
|   Help, LDAPSearchReq, TerminalServer:
|     bobobo
|     bobobo
|   Kerberos, NotesRPC, SIPOptions:
|     bobo
|   LDAPBindReq:
|     bobobo
|     bobo
|     bobobo
|   SSLSessionReq, SSLv23SessionReq:
|     bobo
|     bobobo
|     bobo
|   afp:
|     bobo
|_    bobo

Fingerprint-strings NSE Script Example XML Output

---

There is no sample XML output for this module. However, by providing the -oX <file> option, Nmap will produce a XML output and save it in the file.xml file.

Author

---

• Daniel Miller

References

---

• https://nmap.org/nsedoc/scripts/fingerprint-strings.html
• https://github.com/nmap/nmap/tree/master/scripts/fingerprint-strings.nse

See Also

---

Visit Nmap NSE Library for more scripts.