TCP/IP stack fingerprinting: Difference between revisions

Revision as of 16:49, 19 June 2020

Revision as of 09:25, 21 May 2021

Line 30:

A list of TCP/OS Fingerprinting Tools

* [[Ettercap (computing)|Ettercap]] – passive TCP/IP stack fingerprinting.

* [[NetworkMiner]] – passive [[DHCP]] and TCP/IP stack fingerprinting (combines p0f, Ettercap and Satori databases)

* [[Nmap]] – comprehensive active stack fingerprinting.

* [[p0f]] – comprehensive passive TCP/IP stack fingerprinting.

* NetSleuth – free passive fingerprinting and analysis tool

* [[PacketFence]]<ref>{{cite web|url=http://www.packetfence.org/ |title=PacketFence |publisher=PacketFence |date=2011-11-21 |accessdate=2011-11-25}}</ref> – open source [[Network Access Control|NAC]] with passive DHCP fingerprinting.

* [[PRADS]] – Passive comprehensive TCP/IP stack fingerprinting and service detection

* Satori – passive [[Cisco Discovery Protocol|CDP]], DHCP, ICMP, [[HP Switch Protocol|HPSP]], [[HTTP]], TCP/IP and other stack fingerprinting.

* SinFP – single-port active/passive fingerprinting.