Amap is a cousin of Nmap, and was designed specifically for the purpose of identifying network services. In this specific recipe, we will explain how to use Amap to perform service identification.
To use Amap to perform service identification, you will need to have a remote system running network services that can be probed and inspected. In the examples provided, an instance of Metasploitable2 is used to perform this task. For more information on setting up Metasploitable2, please refer to the Installing Metasploitable2 recipe in Chapter 1, Getting Started.
To perform service identification on a single port, run Amap with the IP address and port number specifications:
root@KaliLinux:~# amap 172.16.36.135 80 amap v5.4 (www.thc.org/thc-amap) started at 2013-12-19 05:26:13 - APPLICATION MAPPING mode Protocol on 172.16.36.135:80/tcp matches http Protocol on 172.16.36.135:80/tcp matches http-apache-2 Unidentified ports: none. amap v5...