{"id":852,"date":"2008-05-16T06:40:39","date_gmt":"2008-05-16T06:40:39","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=852"},"modified":"2017-09-15T03:01:21","modified_gmt":"2017-09-14T19:01:21","slug":"xprobe2-active-os-fingerprinting-tool","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2008\/05\/xprobe2-active-os-fingerprinting-tool\/","title":{"rendered":"Xprobe2 Download &#8211; Active OS Fingerprinting Tool"},"content":{"rendered":"<p>xprobe2 is an active operating system fingerprinting tool with a different approach to operating system fingerprinting. xprobe2 relies on fuzzy signature matching, probabilistic guesses, multiple matches simultaneously, and a signature database.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2008\/05\/Xprobe2-Download-Active-OS-Fingerprinting-Tool-640x402.jpg\" alt=\"Xprobe2 Download - Active OS Fingerprinting Tool\" width=\"640\" height=\"402\" class=\"aligncenter size-medium wp-image-4747\" srcset=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2008\/05\/Xprobe2-Download-Active-OS-Fingerprinting-Tool-640x402.jpg 640w, https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2008\/05\/Xprobe2-Download-Active-OS-Fingerprinting-Tool.jpg 780w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/><\/p>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<p>As xprobe2 uses raw sockets to send probes, you must have root privileges in order for xprobe2 to be able to use them. Some of its logic has been absorbed into Nmap and it&#8217;s basically an active OS fingerprinting tool meaning it sends actual data to the machine it&#8217;s fingerprinting rather than a passive tool like <a href=\"https:\/\/www.darknet.org.uk\/2008\/10\/p0f-advanced-passive-os-fingerprinting-tool\/\">p0f<\/a> which just listens.<\/p>\n<h2>Xprobe2 Active OS Fingerprinting Tool Features<\/h2>\n<ul>\n<li>Port scanning is now available through the usage of the -T (TCP) and -U (UDP) command line option<\/li>\n<li>Added the -B command line option (&#8216;blind port guess&#8217;) used for searching an open TCP port among the following ports: 80,21, 25, 22, 139<\/li>\n<li>Include XSD schema with distribution and make our XML comply with that XSD<\/li>\n<li>loopback (lo) is supported<\/li>\n<\/ul>\n<p>If you want to understand more in depth you can check out the paper: <a href=\"http:\/\/www.ouah.org\/Xprobe2.pdf\">xprobe2 &#8211; A &#8216;Fuzzy&#8217; Approach to Remote Active Operating System Fingerprinting<\/a><\/p>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<h2>How to use Xprobe2 For OS Fingerprinting<\/h2>\n<pre>xprobe2 [ -v ] [ -r ] [ -p proto:portnum:state ] [ -c configfile ] [ -o logfile ] [ -p port ] [ -t receive_timeout ] [ -m numberofmatches ] [ -D modnum ] [ -F ] [ -X ] [ -B ] [ -A ] [ -T port spec ] [ -U port spec ] host\r\n\r\n-v be verbose.\r\n-r display route to target (traceroute-like output).\r\n-c use configfile to read the configuration file, xprobe2.conf, from a non-default location.\r\n-D disable module number modnum.\r\n-m set number of results to display to numofmatches.\r\n-o use logfile to log everything (default output is stderr).\r\n-p specify port number (portnum), protocol (proto) and it's state for xprobe2 to use during rechability\/fingerprinting tests of remote host. Possible values for proto are tcp or udp, portnum can only take values from 1 to 65535, state can be either closed (for tcp that means that remote host replies with RST packet, for udp that means that remote host replies with ICMP Port Unreachable packet) or open (for tcp that means that remote host replies with SYN ACK packet and for udp that means that remote host doesn't send any packet back).\r\n-t set receive timeout to receive_timeout in seconds (the default is set to 10 seconds).\r\n-F generate signature for specified target (use -o to save fingerprint into file)\r\n-X write XML output to logfile specified with -o\r\n-B causes xprobe2 to be a bit more noisy, as -B makes TCP handshake module to try and blindly guess an open TCP port on the target, by sending sequential probes to the following well-known ports: 80, 443, 23, 21, 25, 22, 139, 445 and 6000 hoping to get SYN ACK reply. If xprobe2 receives RST|ACK or SYN|ACK packets for a port in the list above, it will be saved in the target port database to be later used by other modules (i.e. RST module).\r\n-T, -U enable built-in portscanning module, which will attempt to scan TCP and\/or UDP ports respectively, which were specified in port spec\r\n-A enable experimental support for detection of transparent proxies and firewalls\/NIDSs spoofing RST packets in portscanning module. Option should be used in conjunction with -T. All responses from target gathered during portscanning process are divided in two classes (SYN|ACK and RST) and saved for analysis. During analysis module will search for different packets, based on some of the fields of TCP and IP headers, withing the same class and if such packets are found, message will be displayed showing different packets withing the same class.<\/pre>\n<h3>Xprobe2 Download<\/h3>\n<p>Download Xprobe2 here:<\/p>\n<p><a href=\"http:\/\/prdownloads.sourceforge.net\/xprobe\/xprobe2-0.3.tar.gz?download\">xprobe2-0.3.tar.gz<\/a><\/p>\n<p>Or read more <a href=\"https:\/\/sourceforge.net\/projects\/xprobe\/\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>xprobe2 is an active operating system fingerprinting tool with a different approach to operating system fingerprinting. xprobe2 relies on fuzzy signature matching, probabilistic guesses, multiple matches simultaneously, and a signature database. As xprobe2 uses raw sockets to send probes, you must have root privileges in order for xprobe2 to be able to use them. Some [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"xprobe2 is an active operating system fingerprinting tool with a different approach to operating system fingerprinting with fuzzy signature matching & more.","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[5],"tags":[2128,2345,8858,59,516,237,47],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/852"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=852"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/852\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=852"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=852"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=852"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}