templates icon indicating copy to clipboard operation
templates copied to clipboard

RDP的指纹探测包中包含Nmap的特征

Open lovelyjuice opened this issue 1 year ago • 2 comments

https://github.com/chainreactors/templates/blob/c81fd395299626b649fc6fd42ed7e46917d4f955/fingers/socket/tcpfingers.yaml#L183 image

已经成为态势感知检测nmap的特征了:

image

我觉得可以把里面nmap四个字符替换成其它用户名,比如默认的Administrator 参考:https://blog.csdn.net/qimo601/article/details/83564566

lovelyjuice avatar Sep 11 '24 04:09 lovelyjuice

感谢你的反馈,会在下个版本修改

M09Ic avatar Sep 14 '24 06:09 M09Ic

Done

M09Ic avatar Sep 24 '24 11:09 M09Ic