Slide 1

Slide 1 text

What’s new in nmap, p0f and a few words on SSL fingerprinting Marek Majkowski Friday, May 25, 12

Slide 2

Slide 2 text

Fingerprinting Friday, May 25, 12

Slide 3

Slide 3 text

nmap Friday, May 25, 12

Slide 4

Slide 4 text

Friday, May 25, 12

Slide 5

Slide 5 text

nmap 6.0 Friday, May 25, 12

Slide 6

Slide 6 text

! Friday, May 25, 12

Slide 7

Slide 7 text

Friday, May 25, 12

Slide 8

Slide 8 text

ncat, nping Friday, May 25, 12

Slide 9

Slide 9 text

RTFM Friday, May 25, 12

Slide 10

Slide 10 text

Friday, May 25, 12

Slide 11

Slide 11 text

348 Friday, May 25, 12

Slide 12

Slide 12 text

Friday, May 25, 12

Slide 13

Slide 13 text

p0f within nmap Friday, May 25, 12

Slide 14

Slide 14 text

p0f Friday, May 25, 12

Slide 15

Slide 15 text

Friday, May 25, 12

Slide 16

Slide 16 text

p0f is back! Friday, May 25, 12

Slide 17

Slide 17 text

p0f 3 Friday, May 25, 12

Slide 18

Slide 18 text

p0f 3 beta Friday, May 25, 12

Slide 19

Slide 19 text

• SYN, SYN+ACK Friday, May 25, 12

Slide 20

Slide 20 text

• SYN, SYN+ACK • NAT • HTTP Friday, May 25, 12

Slide 21

Slide 21 text

• SYN, SYN+ACK • NAT • HTTP • SSL (experimental) Friday, May 25, 12

Slide 22

Slide 22 text

Friday, May 25, 12

Slide 23

Slide 23 text

Friday, May 25, 12

Slide 24

Slide 24 text

work in progress https://p0f.popcnt.org Friday, May 25, 12

Slide 25

Slide 25 text

That’s all folks! Friday, May 25, 12