SinFP3 v1.00 The operating system fingerprinting tool released

sinfp3.pl is more than a passive and active OS fingerprinting tool. Some examples below showing how to make sinfp3 dancing

# Single port active fingerprinting
sinfp3.pl -target example.com -port 80 -input-ipport -verbose 1
# Single port IPv6 active fingerprinting
sinfp3.pl -target example.com -port 80 -input-ipport -verbose 1 -6
# SynScan active fingerprinting of a single target
sinfp3.pl -target example.com -port top100 -verbose 1
# SynScan IPv6 active fingerprinting of a single target
sinfp3.pl -target example.com -port top100 -verbose 1 -6
# SynScan active fingerprinting of a target subnet
sinfp3.pl -target 192.0.43.0/24 -port top100 -verbose 1
# Passive fingerprinting
sinfp3.pl -mode-passive -search-active -input-sniff -verbose 1
# Passive IPv6 fingerprinting
sinfp3.pl -mode-passive -search-active -input-sniff -verbose 1 -6
# Active fingerprinting of LAN
sinfp3.pl -input-arpdiscovery -verbose 1
# Active fingerprinting of IPv6 LAN
sinfp3.pl -input-arpdiscovery -verbose 1 -6
# Simply SynScan the target
sinfp3.pl -target example.com -port full -mode-null -search-null -db-null -verbose 1

Changelog

 - improvement: added a score (easier to understant than matching masks)

   - improvement: added patternTcpWScale and patternTcpOLength
   - improvement: -4 parameter no more required
     => new algo matches all signatures, and keeps the best matches
   - improvement:
     => new algo matches all signatures (v4 and v6), and keeps the best
   - improvement: new passive fingerprinting engine
   - feature: multiple output modules are available
   - feature: update database argument
   - feature: now using Net::Frame modules
   - feature: generated pcap file now contains hostname i/o IP
   - feature: generate IPv6 anonymous pcap as with IPv4
   - feature: auto-lookup IPv6 target MAC address
   - update: P1 now uses TCP MSS option to avoid filtering device to
             drop packets without this option
   - update: SQL database schema (OsVersionChildren table)
   - update: sinfp.pl and sinfp.db becomes sinfp3.pl and sinfp3.db
   - ... and lots of bug fixes

NJ Ouchn

"Passion is needed for any great work, and for the revolution, passion and audacity are required in big doses"