1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
|
package com.it_jaros.jscanner;
import java.nio.charset.StandardCharsets;
import java.util.List;
import java.util.regex.Pattern;
public class ServiceDetector {
private static final List<ServicePattern> patterns = List.of(
new ServicePattern(ServiceType.DNS, Pattern.compile("(?i)\\bDNS\\b")),
new ServicePattern(ServiceType.DNS, Pattern.compile("(?i)\\bBIND\\b")),
new ServicePattern(ServiceType.DNS, Pattern.compile("(?i)\\bNSD\\b")),
new ServicePattern(ServiceType.DNS, Pattern.compile("(?i)\\bPowerDNS\\b")),
new ServicePattern(ServiceType.DNS, Pattern.compile("(?i)\\bUnbound\\b")),
new ServicePattern(ServiceType.FTP, Pattern.compile("(?i)^220.*\\bFTP\\b")),
new ServicePattern(ServiceType.HTTP, Pattern.compile("(?i)\\bServer:\\s*")),
new ServicePattern(ServiceType.HTTP, Pattern.compile("(?i)^HTTP/")),
new ServicePattern(ServiceType.IMAP, Pattern.compile("(?i)^\\* OK.*\\bIMAP\\b")),
new ServicePattern(ServiceType.POP3, Pattern.compile("(?i)^\\+OK.*\\bPOP3\\b")),
new ServicePattern(ServiceType.SMTP, Pattern.compile("(?i)^220.*\\bESMTP\\b")),
new ServicePattern(ServiceType.SMTP, Pattern.compile("(?i)^220.*\\bSMTP\\b")),
new ServicePattern(ServiceType.SSH, Pattern.compile("(?i)^SSH-"))
);
public static ServiceType detect(byte[] banner) {
if (banner == null || banner.length == 0) {
return ServiceType.UNKNOWN;
}
String bannerString = new String(banner, StandardCharsets.UTF_8);
for (ServicePattern servicePattern : patterns) {
if (servicePattern.matches(bannerString)) {
return servicePattern.serviceType();
}
}
return ServiceType.UNKNOWN;
}
private record ServicePattern(
ServiceType serviceType,
Pattern pattern
) {
boolean matches(String banner) {
return pattern.matcher(banner).find();
}
}
}
|
