SCAN: THC-AMAP FTP Scan
This signature detects the scanner tool amap, made by the Hacker's Choice. THC-AMAP is used in initial reconnaissance for an attacker to determine services running on target hosts before launching other attacks.
Extended Description
An attacker could use the AMap tool to enumerate for services that are running on a targeted network. After enumerating for vulnerable services, an attacker could attempt specific exploits against the services that were discovered.
Short Name
SCAN:AMAP:FTP-SCAN
Severity
Warning
Recommended
False
Recommended Action
None
Category
SCAN
Keywords
FTP Scan THC-AMAP
Release Date
07/21/2004
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown