In this example to execute Xprobe against a target, type:
xprobe2 172.16.1.40
78
Practical Hacking Techniques and Countermeasures
The results of the Xprobe application will be listed.
From the results of this example:
The primary guess is the target is running Microsoft Windows XP
The other guesses include:
Microsoft Windows 2000 Server Service Pack 4
Microsoft Windows 2000 Server Service Pack 3
Microsoft Windows 2000 Server Service Pack 2
Microsoft Windows 2000 Server Service Pack 1
Microsoft Windows XP SP1
Microsoft Windows 2000 Workstation Service Pack 4
Microsoft Windows 2000 Workstation Service Pack 4
Microsoft Windows 2000 Workstation Service Pack 4
Microsoft Windows 2000 Workstation Service Pack 4
In this example, the primary guess of Xprobe2 was incorrect as the target
was actually Microsoft Windows 2000 Server with no updates or service packs
installed.
*Note: Even though Xprobe2 misidentified the target, it is possible that Xprobe has
identified the host computer, which in this case is Microsoft Windows XP.
Even so, Xprobe2 did identify that the target was Microsoft Windows in origin.
Banner Identification 79
Lab 5: Banner Identification
Banner Grabbing: AMAP
Prerequisites: None
Countermeasures: Uninstall/disable unnecessary Services, banner alteration
Description: The amap application is used to obtain specific banner
information from other running services by connecting to other ports
on the target.
Pages:
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54