Fingerprinting Windows O/S based on ports open?

From: Robert Masse (rmasse@gosecure.ca)
Date: Mon Oct 20 2003 - 14:59:13 EDT


Hi
 
Does anyone have a matrix of TCP/UDP ports open per default install of
Windows (OS focused, not application focused like having tcp 80 for
iis)? I cannot use classic O/S fingerprinting with NMAP nor can I use
passive fingerprinting like P0f....
 
I need a simple table like:
 
Win95 Win98 NT4 W2K
ME XP
 
TCP 133455 y n y
n n y
UDP 1234535 y n
TCP 1543637
TCP 4434565
 
Etc
 
Etc
 
Of course the example I used above is bogus but I am too lazy to type in
all the results. I don't have access to 95, 98, ME etc so I cannot
verify myself.
 
Any help would be appreciated; I need a list of ports per O/S soon for a
personal project.
 
Once I have my information, I will post the results.
 
Thanks
 
Rob

---------------------------------------------------------------------------
FREE Whitepaper: Better Management for Network Security

Looking for a better way to manage your IP security?
Learn how Solsoft can help you:
- Ensure robust IP security through policy-based management
- Make firewall, VPN, and NAT rules interoperable across heterogeneous
networks
- Quickly respond to network events from a central console

Download our FREE whitepaper at:
http://www.securityfocus.com/sponsor/Solsoft_pen-test_031015
----------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:41 EDT