Upgrade to Pro — share decks privately, control downloads, hide ads and more …

p0f: confidence-2012 lightning talk

majek04
May 25, 2012

p0f: confidence-2012 lightning talk

What’s new in nmap, p0f and a few words on SSL fingerprinting,

majek04

May 25, 2012
Tweet

More Decks by majek04

Other Decks in Research

Transcript

  1. What’s new in
    nmap, p0f
    and a few words on
    SSL fingerprinting
    Marek Majkowski
    Friday, May 25, 12

    View Slide

  2. Fingerprinting
    Friday, May 25, 12

    View Slide

  3. nmap
    Friday, May 25, 12

    View Slide

  4. Friday, May 25, 12

    View Slide

  5. nmap 6.0
    Friday, May 25, 12

    View Slide

  6. !
    Friday, May 25, 12

    View Slide

  7. Friday, May 25, 12

    View Slide

  8. ncat, nping
    Friday, May 25, 12

    View Slide

  9. RTFM
    Friday, May 25, 12

    View Slide

  10. Friday, May 25, 12

    View Slide

  11. 348
    Friday, May 25, 12

    View Slide

  12. Friday, May 25, 12

    View Slide

  13. p0f within nmap
    Friday, May 25, 12

    View Slide

  14. p0f
    Friday, May 25, 12

    View Slide

  15. Friday, May 25, 12

    View Slide

  16. p0f is back!
    Friday, May 25, 12

    View Slide

  17. p0f 3
    Friday, May 25, 12

    View Slide

  18. p0f 3 beta
    Friday, May 25, 12

    View Slide

  19. • SYN, SYN+ACK
    Friday, May 25, 12

    View Slide

  20. • SYN, SYN+ACK
    • NAT
    • HTTP
    Friday, May 25, 12

    View Slide

  21. • SYN, SYN+ACK
    • NAT
    • HTTP
    • SSL (experimental)
    Friday, May 25, 12

    View Slide

  22. Friday, May 25, 12

    View Slide

  23. Friday, May 25, 12

    View Slide

  24. work in progress
    https://p0f.popcnt.org
    Friday, May 25, 12

    View Slide

  25. That’s all folks!
    Friday, May 25, 12

    View Slide