Script icap-info

Script types: portrule
Categories: safe, discovery
Download: https://svn.nmap.org/nmap/scripts/icap-info.nse

Script Summary

Tests a list of known ICAP service names and prints information about any it detects. The Internet Content Adaptation Protocol (ICAP) is used to extend transparent proxy servers and is generally used for content filtering and antivirus scanning.

Example Usage

nmap -p 1344 <ip> --script icap-info

Script Output

PORT     STATE SERVICE
1344/tcp open  unknown
| icap-info:
|   /avscan
|     Service: C-ICAP/0.1.6 server - Clamav/Antivirus service
|     ISTag: CI0001-000-0973-6314940
|   /echo
|     Service: C-ICAP/0.1.6 server - Echo demo service
|     ISTag: CI0001-XXXXXXXXX
|   /srv_clamav
|     Service: C-ICAP/0.1.6 server - Clamav/Antivirus service
|     ISTag: CI0001-000-0973-6314940
|   /url_check
|     Service: C-ICAP/0.1.6 server - Url_Check demo service
|_    ISTag: CI0001-XXXXXXXXX

Requires

• nmap
• match
• shortport
• stdnse
• stringaux
• table

---

Author:

• Patrik Karlsson

License: Same as Nmap--See https://nmap.org/book/man-legal.html