Nmap: Network Exploration and Security Auditing Cookbook - Second Edition

There's more...

The fingerprints are stored in the http-fingerprints.lua file in /nselib/data/, and they are LUA tables. An entry looks as follows:

table.insert(fingerprints, {    category='cms',    probes={       {path='/changelog.txt'},       {path='/tinymce/changelog.txt'},    },    matches={       {match='Version (.-) ', output='Version \\1'},       {output='Interesting, a changelog.'}    } }) 

You may add your own entries to this file or use a different fingerprintfile using the argument http-enum.fingerprintfile:

$ nmap --script http-enum --script-args http-enum.fingerprintfile=./myfingerprints.txt -p80 <target>  

By default, http-enum uses the root directory as the base path. To set a different base path, use the script argument http-enum.basepath: 

$ nmap --script ...