appdefs.trig

###V:2###DO NOT EDIT THIS LINE!
#
# This is the trigger file "appdefs.trig" for amap
#
# Triggers have the following format:
#
# NAME:[COMMON_PORT,[COMMON_PORT,...]]:[IP_PROTOCOL]:0|1:TRIGGER_STRING
#
# NAME -        the name of the trigger (for "-p NAME" or trigger dependancy
#		in the response file appdefs.resp)
# COMMON_PORT -	(optional) specifies on which port this application is
#		usually found. You can specify more than one port if you
#		seperate them with a comma. In the future, the "-1" option
#		will try triggers first which match the target port. 
#		HOWEVER THIS IS NOT IMPLEMENTED YET!
# IP_PROTOCOL -	(optional) only send this trigger if the protocol of the
#		target port equals the protocol defined here, the tcp or
#		udp protocol. default is both.
#               Valid values: empty, "both", "tcp", "udp" (in any case)
#		NOTE: set this value! a trigger usually does NOT apply to
#		both tcp and udp, even if it is the same service!
#		The more triggers are defined, the longer it takes to map!
# HARMFUL - 	If this trigger string can crash applications, set a "1",
#		otherwise "0". This is really arbitary, as any string could
#		crash any application. Thats why by default all triggers are
#		sent, and you need to apply the "-H" switch NOT to send
#		triggers marked as harmful.
#		Note: Set only "0" value if the trigger data contains
#		normal printable characters (letters, numbers, punctuation,
#		whitespace) and a "1" otherwise.
# TRIGGER - 	The trigger data to send to the ports. You can specify them
#		in two ways: 1) ascii strings enclosed with " or as hex
#		string prepended with "0x".
#
# Examples:
#   ftp:21:tcp:0:"USER AMAP\r\n"	The trigger with the name "ftp" is
#	send to all TCP ports and has got the value "USER AMAP" followed by
#	a carriage return and linefeed.
#   ms-sql::udp:1:0x02	The trigger "my-sql" sends the hex value \x02 to all
#	UDP ports
# 
# If you add new triggers, please send them and their corresponding response
# definitions  to amap-dev@thc.org so we can add these for the next release!
# Thank you very much!
#

# neither change name or value of this one
http:80,81,82,8000,8080,8081,8888:tcp:0:"GET / HTTP/1.0\r\n\r\n"

#
# ENTER YOUR RESPONSES HERE
#



#
# CURRENT TRIGGER DATABASE
#
ssl:443:tcp:1:0x80 80 01 03 01 00 57 00 00 00 20 00 00 16 00 00 13 00 00 0a 07 00 c0 00 00 66 00 00 07 00 00 05 00 00 04 05 00 80 03 00 80 01 00 80 08 00 80 00 00 65 00 00 64 00 00 63 00 00 62 00 00 61 00 00 60 00 00 15 00 00 12 00 00 09 06 00 40 00 00 14 00 00 11 00 00 08 00 00 06 00 00 03 04 00 80 02 00 80 63 b9 b9 19 c0 2b ae 90 74 4c 73 eb 8b cf d8 55 ea d0 69 82 1b ef 23 c3 39 9b 8e b2 49 3c 5a 79
ms-remote-desktop-protocol:3389:tcp:1:0x03 00 00 0b 06 e0 00 00 00 00 00
#ms-remote-desktop-protocol:3389:tcp:1:0x03 00 00 0b 06 e0 00 00 00 00 00 43 6f 6f 6b 69 65 3a 20 6d 73 68 3d 61 6d 61 70 0d 0a
netbios-session:135,137,139::1:0x79 08 00 00 00 01 00 00 00 00 00 00 20 43 4b 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 00 00 21 00 01
netbios-session:139:tcp:0:0x81 00 00 44 20 45 42 45 4e 45 42 46 41 43 41 43 41 43 41 43 41 43 41 43 41 43 41 43 41 43 41 43 41 43 41 43 41 00 20 45 42 45 4e 45 42 46 41 43 41 43 41 43 41 43 41 43 41 43 41 43 41 43 41 43 41 43 41 43 41 43 41 00
ms-ds:445:tcp:1:0x00 00 00 85 FF 53 4D 42 72 00 00 00 00 18 53 C8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FF FE 00 00 00 00 00 62 00 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 32 00
smtp:25:tcp:0:"HELO AMAP\r\n"
ftp:21:tcp:0:"USER AMAP\r\n"
rpc:111,2049:udp:1:0x03 9b 65 42 00 00 00 00 00 00 00 02 00 0f 42 43 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
rpc:111,2049:tcp:1:0x80 00 00 28 18 72 db 5a 00 00 00 00 00 00 00 02 00 01 86 a0 00 00 00 02 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
dns:53:udp:1:0x00 00 10 00 00 00 00 00 00 00 00 00
dns:53:tcp:1:0x00 0c 00 00 10 00 00 00 00 00 00 00 00 00
dns-bind:53:udp:1:0x00 06 01 00 00 01 00 00 00 00 00 00 07 76 65 72 73 69 6f 6e 04 62 69 6e 64 00 00 10 00 03
ldap:389:tcp:1:0x30 0c 02 01 01 60 07 02 01 02 04 00 80 00
oracle-tns-listener:1521:tcp:1:0x00 A6 00 00 01 00 00 00 01 34 01 2C 00 00 08 00 7F FF 4F 98 00 00 00 01 00 84 00 22 00 00 00 00 01 01 28 44 45 53 43 52 49 50 54 49 4F 4E 3D 28 43 4F 4E 4E 45 43 54 5F 44 41 54 41 3D 28 53 49 44 3D 74 65 73 74 29 28 43 49 44 3D 28 50 52 4F 47 52 41 4D 3D 29 28 48 4F 53 54 3D 5F 5F 6A 64 62 63 5F 5F 29 28 55 53 45 52 3D 29 29 29 28 41 44 44 52 45 53 53 3D 28 50 52 4F 54 4F 43 4F 4C 3D 74 63 70 29 28 48 4F 53 54 3d 31 36 32 2e 32 37 2e 35 39 2e 31 33 35 29 28 50 4F 52 54 3D 31 35 32 31 29 29 29
x-windows:6000:tcp:1:0x6c 00 0b 00 00 00 12 00 10 00 00 00 4d 49 54 2d 4d 41 47 49 43 2d 43 4f 4f 4b 49 45 2d 31 00 00 c6 17 34 b7 89 ed 65 c0 93 fd d8 56 66 fa 52 40 
sap-r3:3299:tcp:1:0x00 00 01 06 ff ff ff ff 0a 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 3e 00 00 00 00 ff ff ff ff ff ff 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 65 6e 74 65 73 74 00 20 20 20 20 20 20 20 20 20 20 20 20 00 00 00 00 00 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 00 00 00 00 00 00 00 00 ff ff ff ff 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 04 02 00 0c 00 01 87 68 00 00 04 4c 00 00 03 e8 10 04 0b 00 20 ff 7f ca 0d c8 b3 66 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
ntp:123:udp:1:0xcb 00 04 fa 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bf be 70 99 cd b3 40 00
ms-sql:1433:tcp:1:0x12 01 00 34 00 00 00 00 00 00 15 00 06 01 00 1b 00 01 02 00 1c 00 0c 03 00 28 00 04 ff 08 00 00 c2 00 00 00 4d 53 53 51 4c 53 65 72 76 65 72 00 ac 07 00 00
snmp-public:161:udp:1:0x30 82 00 2f 02 01 00 04 06 70 75 62 6c 69 63 a0 82 00 20 02 04 4c 33 a7 56 02 01 00 02 01 00 30 82 00 10 30 82 00 0c 06 08 2b 06 01 02 01 01 05 00 05 00 
ms-sql::udp:1:0x02
jrmi::tcp:1:0x4a 52 4d 49 00 02 4b
nessus:1241:tcp:0:"< NTP/1.2 >\n"
webmin:10000:tcp:0:0x47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a 0d 0a
netop:6502:udp:0:0xd6 81 81 52 00 00 00 f3 87 4e 01 02 32 00 a8 c0 00 00 01 13 c1 d9 04 dd 03 7d 00 00 0d 00 54 48 43 54 48 43 54 48 43 54 48 43 54 48 43 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 02 32 00 a8 c0 00 00 00 00 00 00 0 0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
db2::tcp:1:0x00 35 00 00 01 00 00 00 29 00 00 00 53 51 4c 44 42 32 52 41 01 00 00 00 00 00 07 00 01 00 02 00 01 00 00 00 01 00 00 80 00 00 00 01 04 00 00 00 01 00 00 80 01
jinilookupservice::tcp:0:0x00 00 00 01
slp:427:tcp:0:0x02 03 00 00 4b 00 00 00 00 00 00 00 00 02 65 6e 00 ff ff 00 1c 73 65 72 76 69 63 65 3a 74 68 63 3a 2f 2f 31 32 37 2e 30 2e 30 2e 31 3a 31 33 33 37 00 00 0b 73 65 72 76 69 63 65 3a 74 68 63 00 07 64 65 66 61 75 6c 74 00 00 00
tivoli_tsm-server:1500:tcp:0:0x00 04 1d a5
norman-njeeves:2868:tcp:0:0x11
#old:
#oracle-tns-listener:1521:tcp:1:0x01 0c 00 00 01 00 00 00 01 36 01 2c 00 00 08 00 7f ff a3 0a 00 00 01 00 00 d2 00 3a 00 00 02 00 61 61 00 00 00 00 00 00 00 00 00 00 06 18 00 01 32 80 00 00 00 00 00 00 00 00 28 44 45 53 43 52 49 50 54 49 4f 4e 3d 28 41 44 44 52 45 53 53 3d 28 50 52 4f 54 4f 43 4f 4c 3d 54 43 50 29 28 48 4f 53 54 3d 31 31 31 2e 31 31 2e 31 31 2e 31 31 29 28 50 4f 52 54 3d 31 35 32 31 29 29 28 43 4f 4e 4e 45 43 54 5f 44 41 54 41 3d 28 53 45 52 56 49 43 45 5f 4e 41 4d 45 3d 68 69 68 69 29 28 53 52 56 52 3d 44 45 44 49 43 41 54 45 44 29 28 43 49 44 3d 28 50 52 4f 47 52 41 4d 3d 43 3a 5c 50 72 6f 67 72 61 6d 20 46 69 6c 65 73 5c 4f 72 61 63 6c 65 5c 6a 72 65 5c 31 2e 31 2e 37 5c 62 69 6e 5c 6a 72 65 77 2e 65 78 65 29 28 48 4f 53 54 3d 41 41 41 41 41 41 41 41 41 29 28 55 53 45 52 3d 41 41 41 41 41 41 41 29 29 29 29