Where have all the good fingerprinters gone?
Historically, there are a lot of programs that attempted to do this. They werenít necessarily very good, but at least they attempted to figure out what was running where. Some examples are the smtp scanner SMTPScan, TelnetFP, fpdns and HTTPPrint.
There are many more examples out there, such as Jeremiah Grossmanís HTTP Fingerprinter released at BlackHat Asia 2002, but most of them never got to a point where they were good enough to be considered supported/usable. (As a side note, fpdns is actually very good). Now, each of these programs had their own flaws and none of them were that accurate, but it gave members of the security and administration comunity a good tool to use when they needed to know what is running where.
[ Read more ]