From: Ralph [ralph@tink.org] Sent: Monday, March 11, 2002 2:22 PM To: ah@securityfocus.com; sectools@securityfocus.com Subject: New application scanning tool from THC Hi folks, THC (www.thehackerschoice.com) is proud to present a new tool for pentesters and folks alike. Amap is a tool that will identify applications running on network ports, by sending a (bogus) handshake. The response from the daemon or app is then looked up in a list to identify the protocol (such as SSL, DNS etc). So even if you have SSL running on port 2534 or LDAP on port 62225, amap will identify the application. We encourage you to add your own application definitions (can be done in an easy to read text file) and send your additions to us (amap-defs@tink.org). By DJ.Revmoon (revmoon@tink.org) and Van Hauser (vh@reptile.rug.ac.be). Amap can be downloaded from www.thehackerschoice.com/releases.php. Kind Regards, RevMoon & Van Hauser