ciscocxsecurity / bannergrab Goto Github PK
View Code? Open in Web Editor NEWBannerGrab is a tool that performs connection, trigger-based and basic information collection from network services
License: GNU General Public License v3.0
BannerGrab is a tool that performs connection, trigger-based and basic information collection from network services
License: GNU General Public License v3.0
Bannergrab - README =================== 1. Overview Bannergrab is a simple tool, designed to collect information from network services. It can do this using two different methods; grab the connection banners and send triggers and collect the responses. Bannergrab defaults to sending triggers. Additionally, Bannergrab supports SSL-based services and will report on SSL connection characteristics. 2. Requirements * The GNU C Compiler (to compile it) * OpenSSL libraries (to connect to SSL-based services) 3. Compiling from source gcc -lssl -o bannergrab bannergrab.c To compile without OpenSSL support... gcc -DNOSSL -o bannergrab bannergrab.c 4. Usage Bannergrab provides online help using the standard --help command option. However, in its simplist form to grab a banner from a service: bannergrab <ip address> <port> 5. Triggers I like software that is open, you can read my source to discover exactly how bannergrab sends triggers to services. However, for those of you that do not want to go through the code here is a brief description. This is of course dependant on the user not simply disabling triggers. Bannergrab will look at the port number that the is being used and try to match it to a trigger/set of triggers. It does NOT probe the service to determine this. If a trigger is found for that port then it will use that, otherwise it will use the default one. The triggers will be sent one after another and the response captured. It is as simple as that. The triggers do the following: FTP * Asks for help. * Attempts to login anonymously. * Quits. SMTP * Says Hello. * Asks for help. * Attempts to VRFY postmaster. * Attempts to VRFY bannergrab123. * Attempts to EXPN postmaster. * Quits. Finger * Attempts to enumerate a few users. HTTP(S) * Asks for OPTIONS. POP2/3 * Quits. NNTP * Asks for HELP. * Lists the newsgroups. * Quits. FW1 Admin * Attempts to list IPs. LDAP(S) * Performs an Anonymous bind. * Gets a list of base Distinguished Names (DN). MSSQL * Attempts a login using BannerGrab user. MySQL * Waits longer for a MySQL response. Discard/Echo * Send echo. Chargen/Daytime/QOTD/SSH/VMWare/Printer * Send nothing. NTP * Queries time * Queries read list * Queries peers SNMP * Sends "public" community string * Sends "private" community string NetBIOS Name Service * Name query ALL OTHERS (Default) * Send OPTIONS and ask for HELP. 6. License This program is covered by the GPL version 3 license. You can get this from loads of places and it should be supplied with this program. If not, look no further than my web site: http://www.titania.co.uk In addition, as a special exception, the copyright holders give permission to link the code of portions of this program with the OpenSSL library under certain conditions as described in each individual source file, and distribute linked combinations including the two. You must obey the GNU General Public License in all respects for all of the code used other than OpenSSL. If you modify file(s) with this exception, you may extend this exception to your version of the file(s), but you are not obligated to do so. If you do not wish to do so, delete this exception statement from your version. If you delete this exception statement from all source files in the program, then also delete it here.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.