How can one identify a service running on a non-standard port? I'm not talking about services like webserver or FTP since nmap can do that without any problems. I'm talking about services that are not that common, like Java RMI, X11, ...
What I found till now is amap and the NMAP+V patch and some standard strings like:
- version
- ?
- \r\n\r\n
- help
- ...
Is someone aware of any kind of list/paper for a good start?