[Attention: Linux users] Help gather fingerprint

zaidaiman — Fri, 07 Mar 2008 23:12:19 +0800

Hello all,

The reason I needed help here is because I needed to gather a few of Nmap 1st generation fingerprint for my final year project.

To start things off first, here is some introduction:
Nmap is a de facto network security scanner which include an operating system detection tool.

Nmap 1st generation fingerprint is one of earliest Nmap's operating system detection method, which when scan a targeted PC, it will execute 9 series of test and obtain the targeted user's fingerprint.
This fingerprint will be compare with the reference database for its corresponding operating system.

So, why do I need your fingerprint?
In short, I'm currently developed a system to analyze the fingerprint and compare it with reference database.
Of course, it will be a lot better than Nmap's analyzing algorithm as it use Hamming Distance.
Instead of calculating distance, I'm using correlation matrix, Principal Component Analysis and neural network to do the calculation.

OK, I don't really want to go that technical, but the point is, I need fingerprint to train my neural network.

Don't worry about your privacy or anything that's related to it, I only want your fingerprint result.
It does not contain any information like your IP address and stuffs

Some might wonder why only Linux? No Windows?
Answer: Windows is everywhere! I can just scan them anytime I want, but Linux? erh... (you probably get my point anyway)

To install Nmap v4.20 (Yes! v4.20 as v4.53 remove 1st generation fingerprint)
1. Download here: http://nmap.org/dist/nmap-4.20.tar.bz2
2. Extract it.
3. Open up your terminal, type cd [nmap directory]
4. type ./configure
5. If some package were not found, just do sudo apt-get install [package name] - for Ubuntu user
6. type make
7. type sudo make install

Once you're done with Nmap installation, you can start with scanning your own PCs.

CODE

sudo nmap localhost -sSU -F -P0 -O1 -d -oX temp.xml

-sSU = stealth and UDP scan
-F = fast scan
-P0 = assume the targeted PC is online, no ping
-O1 = 1st generation fingerprint
-d = debug, force nmap to print fingerprint result
-oX temp.xml = save scan result in temp.xml as XML file

OK, here I admit once it's save in the XML file, it does contain a little bit of your PC information.
But again, screw that, you can just copy paste your fingerprint result here.
And again, I only want fingerprint, nothing else than that.

Or you can email me the XML file to zaidaiman@gmail.com if you don't mind that is.

Here's an example of my fingerprint result:

CODE

SCAN(V=4.20%D=3/6%OT=631%CT=1%CU=%PV=N%G=N%TM=47CEC912%P=i686-pc-linux-gnu)
TSeq(Class=TD%gcd=66%SI=0%IPID=Z)
T1(Resp=Y%DF=Y%W=8000%ACK=S++%Flags=AS%Ops=MNNTNW)
T2(Resp=N)
T3(Resp=Y%DF=Y%W=8000%ACK=S++%Flags=AS%Ops=MNNTNW)
T4(Resp=Y%DF=Y%W=0%ACK=O%Flags=R%Ops=)
T5(Resp=Y%DF=Y%W=0%ACK=S++%Flags=AR%Ops=)
T6(Resp=Y%DF=Y%W=0%ACK=O%Flags=R%Ops=)
T7(Resp=Y%DF=Y%W=0%ACK=S++%Flags=AR%Ops=)
PU(Resp=Y%DF=N%TOS=C0%IPLEN=164%RIPTL=148%RID=E%RIPCK=E%UCK=E%ULEN=134%DAT=E)

If this thread is consider un-appropriate, do contact me and lock this thread.

Thank you for your help.

-ZaiD-

Lowyat.NET: Latest topics by zaidaiman

[Attention: Linux users] Help gather fingerprint