1<!DOCTYPE html> 2<html lang="en"> 3<head> 4<title>Nmap Development Mailing List</title> 5<link rel="alternate" type="application/rss+xml" title="RSS" href="https://seclists.org/rss/nmap-dev.rss"> 6<meta name="description" content="SecLists.org archive for the Nmap Development mailing list: Unmoderated technical development forum for debating ideas, patches, and suggestions regarding proposed changes to Nmap and related projects. Subscribe to nmap-dev here."> 7<link rel="canonical" href="https://seclists.org/nmap-dev/"> 8<meta name="viewport" content="width=device-width,initial-scale=1"> 9<meta name="theme-color" content="#2A0D45"> 10<link rel="preload" as="image" href="/images/sitelogo.png" imagesizes="168px" imagesrcset="/images/sitelogo.png, /images/sitelogo-2x.png 2x"> 11<link rel="preload" as="image" href="/shared/images/nst-icons.svg"> 12<link rel="stylesheet" href="/shared/css/nst.css?v=2">
13<script async src="/shared/js/nst.js?v=2"></script>
13 14<link rel="stylesheet" href="/shared/css/nst-foot.css?v=2" media="print" onload="this.media='all'"> 15<link rel="stylesheet" href="/site.css"> 16<!--Google Analytics Code--> 17<link rel="preload" href="https://www.google-analytics.com/analytics.js" as="script">
18<script>
vendor: 328 bytes, lines 18-23
18 19(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){ 20(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o), 21m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m) 22})(window,document,'script','//www.google-analytics.com/analytics.js','ga'); 23ga('create', '
23UA-11009417-1
vendor: 36 bytes, lines 23-24
23', 'auto'); 24ga('send', 'pageview');
25</script>
25 26<!--END Google Analytics Code--> 27<META NAME="ROBOTS" CONTENT="NOARCHIVE"> 28<link rel="shortcut icon" href="/shared/images/tiny-eyeicon.png" type="image/png"> 29</head> 30<body><div id="nst-wrapper"> 31 32<div id="menu"> 33 <div class="blur"> 34 <header id="nst-head"> 35 36 <a id="menu-open" href="#menu" aria-label="Open menu"> 37 <img width="44" height="44" alt="" aria-hidden="true" 38 src="/shared/images/nst-icons.svg#menu"> 39 </a> 40 <a id="menu-close" href="#" aria-label="Close menu"> 41 <img width="44" height="44" alt="" aria-hidden="true" 42 src="/shared/images/nst-icons.svg#close"> 43 </a> 44 45 <a id="nst-logo" href="/" aria-label="Home page"> 46 <img alt="Home page logo" srcset="/images/sitelogo.png, /images/sitelogo-2x.png 2x" src="/images/sitelogo.png" onerror="this.onerror=null;this.srcset=this.src" height=90 width=168></a> 47 48 <nav id="nst-gnav"> 49 <a class="nlink" href="https://nmap.org/">Nmap.org</a> 50 <a class="nlink" href="https://npcap.com/">Npcap.com</a> 51 <a class="nlink" href="https://seclists.org/">Seclists.org</a> 52 <a class="nlink" href="https://sectools.org">Sectools.org</a> 53 <a class="nlink" href="https://insecure.org/">Insecure.org</a> 54 </nav> 55 56 <form class="nst-search" id="nst-head-search" action="/search/"> 57 <input class="nst-search-q" name="q" type="search" placeholder="Site Search"> 58 <button class="nst-search-button" title="Search"> 59 <img style="width:100%;aspect-ratio:1/1;" alt="" aria-hidden="true" 60 src="/shared/images/nst-icons.svg#search"> 61 </button> 62 </form> 63 64 </header> 65 </div> 66</div> 67 68<main id="nst-content"> 69<img src="/images/nmap-dev-logo.png" width="80" class="l-logo right" alt="nmap-dev logo"><h1 class="list-title">Nmap Development Mailing List</h1><ul class="inline"><li class="first"><a href="/nmap-dev/2026/q3/index.html"><img src="/images/current-icon-16x16.png" width=16 height=16 alt="Current period icon">Previous Quarter</a> 70<li><a href="/rss/nmap-dev.rss"><img src="/images/feed-icon-16x16.png" width=16 height=16 alt="RSS icon">RSS Feed</a> 71<li><a href="https://nmap.org/mailman/listinfo/dev"><img src="/images/about-icon-16x16.png" width=16 height=16 alt="About icon">About List</a> 72<li><a href="/"><img src="/images/up-icon-16x16.png" width=16 height=16 alt="Up icon">All Lists</a> 73</ul> 74<p class="l-abstract">Unmoderated technical development forum for debating ideas, patches, and suggestions regarding proposed changes to <a href="https://nmap.org">Nmap</A> and related projects. <a href="https://nmap.org/mailman/listinfo/dev">Subscribe to nmap-dev here</a>.</p> 75<form class="nst-search center" action="/search/nmap-dev"> 76<input class="nst-search-q" name="q" type="search" placeholder="List Archive Search"> 77<button class="nst-search-button" title="Search"> 78<img style="width:100%;aspect-ratio:1/1;" alt="" aria-hidden="true" 79src="/shared/images/nst-icons.svg#search"> 80</button> 81</form> 82<h2>List Archives</h2> 83<ul class="calendar Quarterly"> 84<li class="period">Jan–Mar<li class="period">Apr–Jun<li class="period">Jul–Sep<li class="period">Oct–Dec<li class="year">2026<li class="q1"><a href="/nmap-dev/2026/q1/">6</a> 85<li class="q2"><a href="/nmap-dev/2026/q2/">9</a> 86<li class="q3"><a href="/nmap-dev/2026/q3/">6</a> 87<li class="q4">– 88<li class="year">2025<li class="q1"><a href="/nmap-dev/2025/q1/">14</a> 89<li class="q2"><a href="/nmap-dev/2025/q2/">3</a> 90<li class="q3">– 91<li class="q4"><a href="/nmap-dev/2025/q4/">8</a> 92<li class="year">2024<li class="q1"><a href="/nmap-dev/2024/q1/">1</a> 93<li class="q2"><a href="/nmap-dev/2024/q2/">12</a> 94<li class="q3"><a href="/nmap-dev/2024/q3/">14</a> 95<li class="q4"><a href="/nmap-dev/2024/q4/">9</a> 96<li class="year">2023<li class="q1"><a href="/nmap-dev/2023/q1/">10</a> 97<li class="q2"><a href="/nmap-dev/2023/q2/">26</a> 98<li class="q3"><a href="/nmap-dev/2023/q3/">17</a> 99<li class="q4"><a href="/nmap-dev/2023/q4/">24</a> 100<li class="year">2022<li class="q1"><a href="/nmap-dev/2022/q1/">10</a> 101<li class="q2"><a href="/nmap-dev/2022/q2/">12</a> 102<li class="q3"><a href="/nmap-dev/2022/q3/">12</a> 103<li class="q4"><a href="/nmap-dev/2022/q4/">
1034</a> 104<li class="year">2021<li class="q1"><a href="/nmap-dev/2021/q1/">33</a> 105<li class="q2"><a href="/nmap-dev/2021/q2/">14</a> 106<li class="q3"><a href="/nmap-dev/2021/q3/">11</a> 107<li class="q4"><a href="/nmap-dev/2021/q4/">15</a> 108<li class="year">2020<li class="q1"><a href="/nmap-dev/2020/q1/">12</a> 109<li class="q2"><a href="/nmap-dev/2020/q2/">39</a> 110<li class="q3"><a href="/nmap-dev/2020/q3/">29</a> 111<li class="q4"><a href="/nmap-dev/2020/q4/">38</a> 112<li class="year">2019<li class="q1"><a href="/nmap-dev/2019/q1/">98</a> 113<li class="q2"><a href="/nmap-dev/2019/q2/">44</a> 114<li class="q3"><a href="/nmap-dev/2019/q3/">50</a> 115<li class="q4"><a href="/nmap-dev/2019/q4/">16</a> 116<li class="year">2018<li class="q1"><a href="/nmap-dev/2018/q1/">55</a> 117<li class="q2"><a href="/nmap-dev/2018/q2/">54</a> 118<li class="q3"><a href="/nmap-dev/2018/q3/">49</a> 119<li class="q4"><a href="/nmap-dev/2018/q4/">58</a> 120<li class="year">2017<li class="q1"><a href="/nmap-dev/2017/q1/">303</a> 121<li class="q2"><a href="/nmap-dev/2017/q2/">199</a> 122<li class="q3"><a href="/nmap-dev/2017/q3/">202</a> 123<li class="q4"><a href="/nmap-dev/2017/q4/">68</a> 124<li class="year">2016<li class="q1"><a href="/nmap-dev/2016/q1/">356</a> 125<li class="q2"><a href="/nmap-dev/2016/q2/">269</a> 126<li class="q3"><a href="/nmap-dev/2016/q3/">310</a> 127<li class="q4"><a href="/nmap-dev/2016/q4/">192</a> 128<li class="year">2015<li class="q1"><a href="/nmap-dev/2015/q1/">427</a> 129<li class="q2"><a href="/nmap-dev/2015/q2/">375</a> 130<li class="q3"><a href="/nmap-dev/2015/q3/">384</a> 131<li class="q4"><a href="/nmap-dev/2015/q4/">308</a> 132<li class="year">2014<li class="q1"><a href="/nmap-dev/2014/q1/">358</a> 133<li class="q2"><a href="/nmap-dev/2014/q2/">571</a> 134<li class="q3"><a href="/nmap-dev/2014/q3/">501</a> 135<li class="q4"><a href="/nmap-dev/2014/q4/">390</a> 136<li class="year">2013<li class="q1"><a href="/nmap-dev/2013/q1/">422</a> 137<li class="q2"><a href="/nmap-dev/2013/q2/">534</a> 138<li class="q3"><a href="/nmap-dev/2013/q3/">664</a> 139<li class="q4"><a href="/nmap-dev/2013/q4/">337</a> 140<li class="year">2012<li class="q1"><a href="/nmap-dev/2012/q1/">739</a> 141<li class="q2"><a href="/nmap-dev/2012/q2/">993</a> 142<li class="q3"><a href="/nmap-dev/2012/q3/">1068</a> 143<li class="q4"><a href="/nmap-dev/2012/q4/">533</a> 144<li class="year">2011<li class="q1"><a href="/nmap-dev/2011/q1/">1148</a> 145<li class="q2"><a href="/nmap-dev/2011/q2/">1302</a> 146<li class="q3"><a href="/nmap-dev/2011/q3/">925</a> 147<li class="q4"><a href="/nmap-dev/2011/q4/">
147638</a> 148<li class="year">2010<li class="q1"><a href="/nmap-dev/2010/q1/">1248</a> 149<li class="q2"><a href="/nmap-dev/2010/q2/">1035</a> 150<li class="q3"><a href="/nmap-dev/2010/q3/">916</a> 151<li class="q4"><a href="/nmap-dev/2010/q4/">793</a> 152<li class="year">2009<li class="q1"><a href="/nmap-dev/2009/q1/">928</a> 153<li class="q2"><a href="/nmap-dev/2009/q2/">846</a> 154<li class="q3"><a href="/nmap-dev/2009/q3/">1116</a> 155<li class="q4"><a href="/nmap-dev/2009/q4/">732</a> 156<li class="year">2008<li class="q1"><a href="/nmap-dev/2008/q1/">568</a> 157<li class="q2"><a href="/nmap-dev/2008/q2/">911</a> 158<li class="q3"><a href="/nmap-dev/2008/q3/">1038</a> 159<li class="q4"><a href="/nmap-dev/2008/q4/">809</a> 160<li class="year">2007<li class="q1"><a href="/nmap-dev/2007/q1/">305</a> 161<li class="q2"><a href="/nmap-dev/2007/q2/">509</a> 162<li class="q3"><a href="/nmap-dev/2007/q3/">479</a> 163<li class="q4"><a href="/nmap-dev/2007/q4/">832</a> 164<li class="year">2006<li class="q1"><a href="/nmap-dev/2006/q1/">410</a> 165<li class="q2"><a href="/nmap-dev/2006/q2/">497</a> 166<li class="q3"><a href="/nmap-dev/2006/q3/">447</a> 167<li class="q4"><a href="/nmap-dev/2006/q4/">326</a> 168<li class="year">2005<li class="q1"><a href="/nmap-dev/2005/q1/">175</a> 169<li class="q2"><a href="/nmap-dev/2005/q2/">257</a> 170<li class="q3"><a href="/nmap-dev/2005/q3/">202</a> 171<li class="q4"><a href="/nmap-dev/2005/q4/">251</a> 172<li class="year">2004<li class="q1"><a href="/nmap-dev/2004/q1/">173</a> 173<li class="q2"><a href="/nmap-dev/2004/q2/">80</a> 174<li class="q3"><a href="/nmap-dev/2004/q3/">131</a> 175<li class="q4"><a href="/nmap-dev/2004/q4/">178</a> 176<li class="year">2003<li class="q1"><a href="/nmap-dev/2003/q1/">58</a> 177<li class="q2"><a href="/nmap-dev/2003/q2/">113</a> 178<li class="q3"><a href="/nmap-dev/2003/q3/">141</a> 179<li class="q4"><a href="/nmap-dev/2003/q4/">91</a> 180<li class="year">2002<li class="q1"><a href="/nmap-dev/2002/q1/">58</a> 181<li class="q2"><a href="/nmap-dev/2002/q2/">90</a> 182<li class="q3"><a href="/nmap-dev/2002/q3/">59</a> 183<li class="q4"><a href="/nmap-dev/2002/q4/">77</a> 184<li class="year">2001<li class="q1"><a href="/nmap-dev/2001/q1/">18</a> 185<li class="q2"><a href="/nmap-dev/2001/q2/">3</a> 186<li class="q3"><a href="/nmap-dev/2001/q3/">51</a> 187<li class="q4"><a href="/nmap-dev/2001/q4/">46</a> 188<li class="year">2000<li class="q1">– 189<li class="q2">– 190<li class="q3"><a href="/nmap-dev/2000/q3/">77</a> 191<li class="q4"><a href="/nmap-dev/2000/q4/">20</a> 192</ul> 193<h2>Latest Posts</h2> 194<!-- MHonArc v2.6.19 --> 195 196 197 198<p class="excerpt"> 199<strong><a href="https://seclists.org/nmap-dev/2026/q3/5">Re:New OS fingerprint: China Unicom ONT/ONU (Realtek/Boa)</a></strong> 200<em>gbfdhenr (Liang Xiangan) (Aug 01)</em><br> 201Hi Nmap developers,<br> 202<br> 203I'd like to submit service fingerprints for a China Unicom GPON ONT (model PT927G) that I found in my home network. <br> 204This device runs a Linux-based firmware (kernel 3.18.24) and exposes several services.<br> 205<br> 206**Device Information**:<br> 207- Model: PT927G<br> 208- Vendor: China Unicom (customized)<br> 209- Hardware hint: SMB share comment mentions "Realtek", suggesting a Realtek chipset.<br> 210<br> 211**Service Fingerprints**:<br> 2121. **HTTP (port...<br> 213</p> 214<p class="excerpt"> 215<strong><a href="https://seclists.org/nmap-dev/2026/q3/4">Re:Correction: Huawei router misidentified as Netgear switch (fingerprint included)</a></strong> 216<em>gbfdhenr (Liang Xiangan) (Aug 01)</em><br> 217Hi developers,<br> 218<br> 219I'd like to add a service fingerprint for port 37443/tcp on the Huawei AX3 router.<br> 220<br> 221This port runs SSL/TLS and requires client certificate authentication (mTLS). When connecting with a self-signed client <br> 222certificate, the server rejects it with a "unknown ca" alert, indicating that it verifies the client certificate <br> 223against a trusted CA.<br> 224<br> 225**Certificate details:**<br> 226<br> 227Subject: CN=Master.ws7100-10, O=Huawei Technologies...<br> 228</p> 229<p class="excerpt"> 230<strong><a href="https://seclists.org/nmap-dev/2026/q3/3">Re:Correction: Huawei router misidentified as Netgear switch (fingerprint included)</a></strong> 231<em>gbfdhenr (Liang Xiangan) (Aug 01)</em><br> 232Hi Nmap developers,<br> 233<br> 234Following up on my previous submissions (OS fingerprint and NSE script for the Huawei AX3), I've conducted a full port <br> 235scan and discovered two additional services that may help refine the service fingerprint database.<br> 236<br> 237**1. Port 37215/tcp â UPnP**<br> 238- Service identified as: `Huawei ATP gateway upnpd`<br> 239- This seems to be already correctly matched in `nmap-service-probes`. I just wanted to confirm its presence.<br> 240<br> 241**2. Port...<br> 242</p> 243 244 245<p class="excerpt"> 246<strong><a href="https://seclists.org/nmap-dev/2026/q3/2">Re:Correction: Huawei router misidentified as Netgear switch (fingerprint included)</a></strong> 247<em>gbfdhenr (Liang Xiangan) (Aug 01)</em><br> 248PATCH] New NSE script: huawei-ax3-info.nse<br> 249<br> 250Hi Nmap developers,<br> 251<br> 252Following up on my previous OS fingerprint submission for the Huawei AX3 router (Message-ID: <br> 253<335797c9.5fe8.19fb73084b0.Coremail.gbfdhenr () 163 com>), I've developed an NSE script to extract device information <br> 254from the router's /api/system/deviceinfo endpoint.<br> 255<br> 256The script retrieves:<br> 257- Device model (CustDeviceName)<br> 258- Hardware version<br> 259- Serial number<br> 260- Uptime<br> 261-...<br> 262</p> 263 264 265<p class="excerpt"> 266<strong><a href="https://seclists.org/nmap-dev/2026/q3/1">Re:Correction: Huawei router misidentified as Netgear switch (fingerprint included)</a></strong> 267<em>gbfdhenr (Liang Xiangan) (Jul 31)</em><br> 268Supplemental device metadata for my previous submission (Message-ID: <335797c9.5fe8.19fb73084b0.Coremail.gbfdhenr () <br> 269163 com>):<br> 270<br> 271- Product: Huawei Router AX3<br> 272- Hardware Version: VER.A (HiSilicon chipset)<br> 273- Firmware/Software Version: 4.2.0.18 (V5R2)<br> 274- HarmonyOS Version: 4.2.0<br> 275- Uptime at scanning: 7 days (stable state, non-reboot)<br> 276- MAC OUI: 30:A9:98 (Huawei)<br> 277<br> 278Note: Both WAN and LAN MACs share the same OUI. Please use this to reclassify the...<br> 279</p> 280<p class="excerpt"> 281<strong><a href="https://seclists.org/nmap-dev/2026/q3/0">Correction: Huawei router misidentified as Netgear switch (fingerprint included)</a></strong> 282<em>gbfdhenr (Liang Xiangan) (Jul 31)</em><br> 283Hi Nmap team,<br> 284<br> 285I've encountered a clear OS detection misidentification that I believe should be corrected.<br> 286<br> 287**Device in question**:<br> 288- A Huawei home router (MAC OUI: 30:A9:98 -> Huawei Device)<br> 289- Open ports: 53, 80, 443 (typical router/AP, not a headless switch)<br> 290- Running: Linux-based firmware (likely 3.18.24)<br> 291<br> 292**Current incorrect result**:<br> 293Nmap 7.99 reports it as: "Netgear GS108Tv3, GS110Tv3, or GS308T switch (Linux 3.18.24)"...<br> 294</p> 295 296 297 298<!-- MHonArc v2.6.19 --> 299<!-- MHonArc v2.6.19 --> 300 301 302 303<p class="excerpt"> 304<strong><a href="https://seclists.org/nmap-dev/2026/q2/8">Re: NSE submission: detect &
304 enumerate AI infrastructure (MCP servers + LLM inference APIs)</a></strong> 305<em>Arturo 'Buanzo' Busleiman (Jun 30)</em><br> 306Hi, nice work! This may also be useful, I mentioned it to Fyodor privately<br> 307a couple weeks ago and forgot to mention here:<br> 308<br> 309<a rel="nofollow" href="https://github.com/buanzo/lua-mcp">https://github.com/buanzo/lua-mcp</a><br> 310<a rel="nofollow" href="https://github.com/buanzo/lua-mcp/blob/liblua-mcp-latest/examples/nmap/mcp-listen.nse">https://github.com/buanzo/lua-mcp/blob/liblua-mcp-latest/examples/nmap/mcp-listen.nse</a><br> 311<br> 312Cheers!<br> 313</p> 314 315 316<p class="excerpt"> 317<strong><a href="https://seclists.org/nmap-dev/2026/q2/7">NSE submission: detect & enumerate AI infrastructure (MCP servers + LLM inference APIs)</a></strong> 318<em>Ben Williams via dev (Jun 20)</em><br> 319Hi,<br> 320I've opened a PR adding three NSE scripts and two shared nselibs to detect and enumerate two classes of AI <br> 321infrastructure that nmap doesn't currently cover:<br> 322<br> 323 * mcp-info (discovery, safe, version) + mcp-enum (discovery, safe): MCP server detection (initialize handshake over <br> 324Streamable HTTP + legacy SSE), OAuth 2.1 protected-resource discovery (RFC 9728), and read-only tools/resources/prompts <br> 325enumeration with schema-based risk...<br> 326</p> 327 328 329<p class="excerpt"> 330<strong><a href="https://seclists.org/nmap-dev/2026/q2/6">[PATCH] nselib/bitcoin: add address classification helpers (refs #2857, PR #3371)</a></strong> 331<em>Melo via dev (May 25)</em><br> 332PR #3371 adds three functions to nselib/bitcoin.lua:<br> 333<br> 334- looks_like_address(value) -- regex candidate detection<br> 335- validate_address(value) -- Base58Check, Bech32, Bech32m validation<br> 336- classify_address(value) -- high-level classification<br> 337<br> 338Supports mainnet, testnet, and regtest with full unittest (38/38 pass).<br> 339No network calls, no external APIs, no real keys, no changes to existing scripts.<br> 340<br> 341PR: <a rel="nofollow" href="https://github.com/nmap/nmap/pull/3371">https://github.com/nmap/nmap/pull/3371</a><br> 342Issue:...<br> 343</p> 344 345 346<p class="excerpt"> 347<strong><a href="https://seclists.org/nmap-dev/2026/q2/5">[NSE] matter-identify: identify Matter smart-home devices via mDNS</a></strong> 348<em>Balázs Zoltán (May 11)</em><br> 349 Hi,<br> 350<br> 351 Attached is matter-identify.nse, a new discovery script for identifying<br> 352 Matter (formerly Project CHIP) smart-home devices.<br> 353<br> 354 It sends DNS PTR queries to 5353/udp for the three Matter service types<br> 355 defined in the Matter Core Spec section 4:<br> 356<br> 357 _matter._tcp.local commissioned / operational nodes<br> 358 _matterc._udp.local nodes in commissioning mode<br> 359 _meshcop._udp.local Thread border routers<br> 360<br> 361 TXT records are decoded into VID,...<br> 362</p> 363 364 365<p class="excerpt"> 366<strong><a href="https://seclists.org/nmap-dev/2026/q2/4">Re:</a></strong> 367<em>Rahmat Ramadhan (May 01)</em><br> 368gaa<br> 369<br> 370Pada Sen, 9 Mar 2026 08:20, Juan jose Rodriguez <<br> 371juanjoserodriguezmontoya35 () gmail com> menulis:<br> 372</p> 373 374 375<p class="excerpt"> 376<strong><a href="https://seclists.org/nmap-dev/2026/q2/3">[PATCH 0/5] ALPN-based HTTP/2 service detection improvements</a></strong> 377<em>Urval Kheni (Apr 14)</em><br> 378Hi,<br> 379<br> 380This patch series introduces ALPN-based improvements to service detection<br> 381for TLS services.<br> 382<br> 383It adds support for extracting the negotiated ALPN protocol and uses<br> 384"h2" as a conservative fallback signal to infer HTTP over TLS when<br> 385service detection fails.<br> 386<br> 387This improves detection of HTTP/2-only services, which return binary<br> 388responses not recognized by existing probes.<br> 389<br> 390The changes are structured as follows:<br> 391<br> 392 1. Fix OpenSSL provider...<br> 393</p> 394<p class="excerpt"> 395<strong><a href="https://seclists.org/nmap-dev/2026/q2/2">Bug Report: ssl-enum-ciphers fails (EOF) on CloudFront/ECDSA targets supporting TLS 1.2</a></strong> 396<em>Jack Seredyniecki via dev (Apr 14)</em><br> 397Hello nmap dev team,<br> 398<br> 399I am reporting a false negative where ssl-enum-ciphers fails to detect TLS<br> 4001.2 on a CloudFront target (itwisegroup.com:443) that uses an ECDSA<br> 401certificate and Post-Quantum hybrid key exchange (X25519MLKEM768).<br> 402While sslscan and openssl confirm TLS 1.2 is active, Nmap reports only TLS<br> 4031.3. My debug logs show the server is dropping the connection (EOF) during<br> 404the Nmap TLS 1.2 handshake attempt:<br> 405NSE: [ssl-enum-ciphers...<br> 406</p> 407<p class="excerpt"> 408<strong><a href="https://seclists.org/nmap-dev/2026/q2/1">[PATCH] Support Linux capabilities for non-root raw packet scanning</a></strong> 409<em>Ali Norouzi via dev (Apr 14)</em><br> 410Hi everyone,<br> 411<br> 412I just opened a PR that adds support for Linux capabilities, allowing nmap to<br> 413perform raw packet scans without sudo when the binary has `CAP_NET_RAW` set via<br> 414setcap:<br> 415<br> 416 <a rel="nofollow" href="https://github.com/nmap/nmap/pull/3333">https://github.com/nmap/nmap/pull/3333</a><br> 417<br> 418Please review.<br> 419<br> 420Best,<br> 421Ali<br> 422</p> 423<p class="excerpt"> 424<strong><a href="https://seclists.org/nmap-dev/2026/q2/0">Fix for issue #3326</a></strong> 425<em>advait deshmukh (Apr 14)</em><br> 426Issue link <<a rel="nofollow" href="https://github.com/nmap/nmap/issues/3326">https://github.com/nmap/nmap/issues/3326</a>><br> 427Pull request link <<a rel="nofollow" href="https://github.com/nmap/nmap/pull/3337">https://github.com/nmap/nmap/pull/3337</a>><br> 428I read the source code and, from what I understood, the current output<br> 429appears to be intentional. The ipv4 value being shown seems to refer to the<br> 430next header, i.e., the protocol of the packet encapsulated within the outer<br>
431packet, which in this case is IPv6.<br> 432Since the user has explicitly specified -6 in the command, it...<br> 433</p> 434 435 436 437<!-- MHonArc v2.6.19 --> 438<h2>More Lists</h2> 439<p> 440Dozens of other network security lists are archived at 441<a href="https://seclists.org/">SecLists.Org</a>. 442</p> 443</main><!-- content --> 444 445<footer id="nst-foot"> 446 <form class="nst-search" id="nst-foot-search" action="/search/"> 447 <input class="nst-search-q" name="q" type="search" placeholder="Site Search"> 448 <button class="nst-search-button" title="Search"> 449 <img style="width:100%;aspect-ratio:1/1;" alt="" aria-hidden="true" 450 src="/shared/images/nst-icons.svg#search"> 451 </button> 452 </form> 453<div class="flexlists"> 454<div class="fl-unit"> 455<h2><a class="nlink" href="https://nmap.org/">Nmap Security Scanner</a></h2> 456<ul> 457<li><a class="nlink" href="https://nmap.org/book/man.html">Ref Guide</a> 458<li><a class="nlink" href="https://nmap.org/book/install.html">Install Guide</a> 459<li><a class="nlink" href="https://nmap.org/docs.html">Docs</a> 460<li><a class="nlink" href="https://nmap.org/download.html">Download</a> 461<li><a class="nlink" href="https://nmap.org/oem/">Nmap OEM</a> 462</ul> 463</div> 464<div class="fl-unit"> 465<h2><a class="nlink" href="https://npcap.com/">Npcap packet capture</a></h2> 466<ul> 467<li><a class="nlink" href="https://npcap.com/guide/">User's Guide</a> 468<li><a class="nlink" href="https://npcap.com/guide/npcap-devguide.html#npcap-api">API docs</a> 469<li><a class="nlink" href="https://npcap.com/#download">Download</a> 470<li><a class="nlink" href="https://npcap.com/oem/">Npcap OEM</a> 471</ul> 472</div> 473<div class="fl-unit"> 474<h2><a class="nlink" href="https://seclists.org/">Security Lists</a></h2> 475<ul> 476<li><a class="nlink" href="https://seclists.org/nmap-announce/">Nmap Announce</a> 477<li><a class="nlink" href="https://seclists.org/nmap-dev/">Nmap Dev</a> 478<li><a class="nlink" href="https://seclists.org/fulldisclosure/">Full Disclosure</a> 479<li><a class="nlink" href="https://seclists.org/oss-sec/">Open Source Security</a> 480<li><a class="nlink" href="https://seclists.org/dataloss/">BreachExchange</a> 481</ul> 482</div> 483<div class="fl-unit"> 484<h2><a class="nlink" href="https://sectools.org">Security Tools</a></h2> 485<ul> 486<li><a class="nlink" href="https://sectools.org/tag/vuln-scanners/">Vuln scanners</a> 487<li><a class="nlink" href="https://sectools.org/tag/pass-audit/">Password audit</a> 488<li><a class="nlink" href="https://sectools.org/tag/web-scanners/">Web scanners</a> 489<li><a class="nlink" href="https://sectools.org/tag/wireless/">Wireless</a> 490<li><a class="nlink" href="https://sectools.org/tag/sploits/">Exploitation</a> 491</ul> 492</div> 493<div class="fl-unit"> 494<h2><a class="nlink" href="https://insecure.org/">About</a></h2> 495<ul> 496<li><a class="nlink" href="https://insecure.org/fyodor/">About/Contact</a> 497<li><a class="nlink" href="https://insecure.org/privacy.html">Privacy</a> 498<li><a class="nlink" href="https://insecure.org/advertising.html">Advertising</a> 499<li><a class="nlink" href="https://nmap.org/npsl/">Nmap Public Source License</a> 500</ul> 501</div> 502<div class="fl-unit social-links"> 503<a class="nlink" href="https://twitter.com/nmap" title="Visit us on Twitter"> 504 <img width="32" height="32" src="/shared/images/nst-icons.svg#twitter" alt="" aria-hidden="true"> 505 </a> 506<a class="nlink" href="https://facebook.com/nmap" title="Visit us on Facebook"> 507 <img width="32" height="32" src="/shared/images/nst-icons.svg#facebook" alt="" aria-hidden="true"> 508 </a> 509<a class="nlink" href="https://github.com/nmap/" title="Visit us on Github"> 510 <img width="32" height="32" src="/shared/images/nst-icons.svg#github" alt="" aria-hidden="true"> 511 </a> 512<a class="nlink" href="https://reddit.com/r/nmap/" title="Discuss Nmap on Reddit"> 513 <img width="32" height="32" src="/shared/images/nst-icons.svg#reddit" alt="" aria-hidden="true"> 514 </a> 515</div> 516</div> 517</footer> 518 519</div><!-- wrapper --> 520</body> 521</html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.