Web server fingerprinting with MASSCAN
- xmir uses a XML result file generated by MASSCAN as its input file.
- Analyzes banners in the XML to filter out needed servers.
- If that's not enough to recognize the server, it tries to grab a web page from that server for further fingerprinting.
- Joomla
- WordPress
- WebLogic
- Struts2
- MS IIS
Usage of ./xmir:
-result string
Where to save our scan result
-server string
Specify a server software
-tolist string
IP list file for XML parser output
-xml string
Masscan result file in XML format
eg. ./xmir -xml masscan.xml -tolist list.txt -server Joomla -result result.txt