vmap --- from security database tools watch

Version 0.7

Code cleanup

Fixed lots of bugs

Added support for nmap and amap logs

Added a "make install" (public dir is /usr/local/share/vmap)

Got rid of that damn /r/n-stuff, now every line ends just with /n

How does it work?

Every daemon has it’s own reply on commands. For example, the HELP command sends different replies on different FTP daemons.

This can be used to fingerprint the service. vmap connects to a host’s service and sends a list of commands from the directory commands/ to the daemon. Each reply is compared to a database, the fingerprint with most matches is displayed. You can run vmap with or without a valid login given for the remote service.

<a href="http://freeworld.thc.org/root/tools/vmap.tar.gz">Download vmap v0.7</a>