recog-intrigue 2.3.7

Sign up to get free protection for your applications and to get access to all the features.
Files changed (130) hide show
  1. checksums.yaml +7 -0
  2. data/.github/ISSUE_TEMPLATE/bug_report.md +37 -0
  3. data/.github/ISSUE_TEMPLATE/feature_request.md +17 -0
  4. data/.github/ISSUE_TEMPLATE/fingerprint_request.md +27 -0
  5. data/.github/PULL_REQUEST_TEMPLATE +24 -0
  6. data/.gitignore +14 -0
  7. data/.rbenv-gemset +1 -0
  8. data/.rspec +3 -0
  9. data/.ruby-gemset +1 -0
  10. data/.ruby-version +1 -0
  11. data/.travis.yml +25 -0
  12. data/.yardopts +1 -0
  13. data/CONTRIBUTING.md +171 -0
  14. data/COPYING +23 -0
  15. data/Gemfile +10 -0
  16. data/LICENSE +7 -0
  17. data/README.md +85 -0
  18. data/Rakefile +22 -0
  19. data/bin/recog_export +81 -0
  20. data/bin/recog_match +55 -0
  21. data/bin/recog_standardize +118 -0
  22. data/bin/recog_verify +64 -0
  23. data/cpe-remap.yaml +134 -0
  24. data/features/data/failing_banners_fingerprints.xml +20 -0
  25. data/features/data/matching_banners_fingerprints.xml +23 -0
  26. data/features/data/multiple_banners_fingerprints.xml +32 -0
  27. data/features/data/no_tests.xml +3 -0
  28. data/features/data/sample_banner.txt +2 -0
  29. data/features/data/successful_tests.xml +18 -0
  30. data/features/data/tests_with_failures.xml +20 -0
  31. data/features/data/tests_with_warnings.xml +17 -0
  32. data/features/match.feature +36 -0
  33. data/features/support/aruba.rb +3 -0
  34. data/features/support/env.rb +6 -0
  35. data/features/verify.feature +48 -0
  36. data/identifiers/README.md +47 -0
  37. data/identifiers/os_architecture.txt +20 -0
  38. data/identifiers/os_device.txt +52 -0
  39. data/identifiers/os_family.txt +160 -0
  40. data/identifiers/os_product.txt +199 -0
  41. data/identifiers/service_family.txt +185 -0
  42. data/identifiers/service_product.txt +255 -0
  43. data/identifiers/software_class.txt +26 -0
  44. data/identifiers/software_family.txt +91 -0
  45. data/identifiers/software_product.txt +333 -0
  46. data/identifiers/vendor.txt +405 -0
  47. data/lib/recog.rb +4 -0
  48. data/lib/recog/db.rb +78 -0
  49. data/lib/recog/db_manager.rb +31 -0
  50. data/lib/recog/fingerprint.rb +280 -0
  51. data/lib/recog/fingerprint/regexp_factory.rb +56 -0
  52. data/lib/recog/fingerprint/test.rb +18 -0
  53. data/lib/recog/formatter.rb +51 -0
  54. data/lib/recog/match_reporter.rb +77 -0
  55. data/lib/recog/matcher.rb +94 -0
  56. data/lib/recog/matcher_factory.rb +14 -0
  57. data/lib/recog/nizer.rb +347 -0
  58. data/lib/recog/verifier.rb +39 -0
  59. data/lib/recog/verifier_factory.rb +13 -0
  60. data/lib/recog/verify_reporter.rb +86 -0
  61. data/lib/recog/version.rb +3 -0
  62. data/misc/convert_mysql_err +61 -0
  63. data/misc/order.xsl +17 -0
  64. data/recog-intrigue.gemspec +45 -0
  65. data/requirements.txt +2 -0
  66. data/spec/data/best_os_match_1.yml +17 -0
  67. data/spec/data/best_os_match_2.yml +17 -0
  68. data/spec/data/best_service_match_1.yml +17 -0
  69. data/spec/data/smb_native_os.txt +25 -0
  70. data/spec/data/test_fingerprints.xml +36 -0
  71. data/spec/data/verification_fingerprints.xml +86 -0
  72. data/spec/data/whitespaced_fingerprint.xml +5 -0
  73. data/spec/lib/fingerprint_self_test_spec.rb +174 -0
  74. data/spec/lib/recog/db_spec.rb +98 -0
  75. data/spec/lib/recog/fingerprint/regexp_factory_spec.rb +73 -0
  76. data/spec/lib/recog/fingerprint_spec.rb +112 -0
  77. data/spec/lib/recog/formatter_spec.rb +69 -0
  78. data/spec/lib/recog/match_reporter_spec.rb +91 -0
  79. data/spec/lib/recog/nizer_spec.rb +330 -0
  80. data/spec/lib/recog/verify_reporter_spec.rb +113 -0
  81. data/spec/spec_helper.rb +82 -0
  82. data/update_cpes.py +186 -0
  83. data/xml/apache_modules.xml +1911 -0
  84. data/xml/apache_os.xml +273 -0
  85. data/xml/architecture.xml +36 -0
  86. data/xml/dns_versionbind.xml +761 -0
  87. data/xml/fingerprints.xsd +128 -0
  88. data/xml/ftp_banners.xml +1553 -0
  89. data/xml/h323_callresp.xml +603 -0
  90. data/xml/hp_pjl_id.xml +358 -0
  91. data/xml/html_title.xml +1630 -0
  92. data/xml/http_cookies.xml +411 -0
  93. data/xml/http_servers.xml +3195 -0
  94. data/xml/http_wwwauth.xml +595 -0
  95. data/xml/imap_banners.xml +245 -0
  96. data/xml/ldap_searchresult.xml +711 -0
  97. data/xml/mdns_device-info_txt.xml +1796 -0
  98. data/xml/mdns_workstation_txt.xml +15 -0
  99. data/xml/mysql_banners.xml +1649 -0
  100. data/xml/mysql_error.xml +871 -0
  101. data/xml/nntp_banners.xml +82 -0
  102. data/xml/ntp_banners.xml +1223 -0
  103. data/xml/operating_system.xml +629 -0
  104. data/xml/pop_banners.xml +499 -0
  105. data/xml/rsh_resp.xml +76 -0
  106. data/xml/rtsp_servers.xml +76 -0
  107. data/xml/sip_banners.xml +359 -0
  108. data/xml/sip_user_agents.xml +221 -0
  109. data/xml/smb_native_lm.xml +62 -0
  110. data/xml/smb_native_os.xml +662 -0
  111. data/xml/smtp_banners.xml +1690 -0
  112. data/xml/smtp_debug.xml +39 -0
  113. data/xml/smtp_ehlo.xml +49 -0
  114. data/xml/smtp_expn.xml +82 -0
  115. data/xml/smtp_help.xml +157 -0
  116. data/xml/smtp_mailfrom.xml +20 -0
  117. data/xml/smtp_noop.xml +44 -0
  118. data/xml/smtp_quit.xml +29 -0
  119. data/xml/smtp_rcptto.xml +25 -0
  120. data/xml/smtp_rset.xml +26 -0
  121. data/xml/smtp_turn.xml +26 -0
  122. data/xml/smtp_vrfy.xml +89 -0
  123. data/xml/snmp_sysdescr.xml +6507 -0
  124. data/xml/snmp_sysobjid.xml +430 -0
  125. data/xml/ssh_banners.xml +1968 -0
  126. data/xml/telnet_banners.xml +1595 -0
  127. data/xml/x11_banners.xml +232 -0
  128. data/xml/x509_issuers.xml +134 -0
  129. data/xml/x509_subjects.xml +1268 -0
  130. metadata +304 -0
data/xml/http_cookies.xml ADDED
@@ -0,0 +1,411 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <fingerprints matches="http_header.cookie" protocol="http" database_type="service">
3
+ <!--
4
+ Set-Cookie HTTP header values are matched against these patterns to fingerprint HTTP
5
+ servers.
6
+ -->
7
+ <fingerprint pattern="^(CFCLIENT_[^=]+|CFGLOBALS|CFID|CFTOKEN)=.*">
8
+ <description>Adobe (Macromedia) ColdFusion uses various cookies</description>
9
+ <param pos="1" name="cookie"/>
10
+ <param pos="0" name="service.vendor" value="Adobe"/>
11
+ <param pos="0" name="service.family" value="ColdFusion"/>
12
+ <param pos="0" name="service.product" value="ColdFusion"/>
13
+ <param pos="0" name="service.cpe23" value="cpe:/a:adobe:coldfusion:-"/>
14
+ </fingerprint>
15
+ <fingerprint pattern="^ANsession\d+=(\S+);.*">
16
+ <description>Array Networks Secure Access Gateway / SSL VPN</description>
17
+ <example>ANsession0002262072457555=IPMI; path=/;secure</example>
18
+ <param pos="1" name="cookie"/>
19
+ <param pos="0" name="service.vendor" value="Array Networks"/>
20
+ <param pos="0" name="service.family" value="Secure Access Gateway"/>
21
+ <param pos="0" name="hw.device" value="VPN"/>
22
+ </fingerprint>
23
+ <fingerprint pattern="^(Apache)=[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.([0-9]+);.*">
24
+ <description>Apache</description>
25
+ <param pos="1" name="cookie"/>
26
+ <param pos="2" name="system.time.micros"/>
27
+ <param pos="0" name="service.vendor" value="Apache"/>
28
+ <param pos="0" name="service.family" value="Apache"/>
29
+ <param pos="0" name="service.product" value="HTTPD"/>
30
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
31
+ </fingerprint>
32
+ <fingerprint pattern="^(JServSessionIdroot)=.*">
33
+ <description>Apache JServ</description>
34
+ <param pos="1" name="cookie"/>
35
+ <param pos="0" name="service.vendor" value="Apache"/>
36
+ <param pos="0" name="service.family" value="JServ"/>
37
+ <param pos="0" name="service.product" value="JServ"/>
38
+ </fingerprint>
39
+ <fingerprint pattern="^(ATG_SESSION_ID|DYN_USER_CONFIRM|DYN_USER_ID)=.*">
40
+ <description>ATG Dynamo</description>
41
+ <param pos="1" name="cookie"/>
42
+ <param pos="0" name="service.vendor" value="ATG"/>
43
+ <param pos="0" name="service.family" value="Dynamo"/>
44
+ <param pos="0" name="service.product" value="Dynamo"/>
45
+ </fingerprint>
46
+ <fingerprint pattern="^(WebLogicSession)=[^!]+![^!]+!([0-9]+);.*">
47
+ <description>BEA WebLogic (with timestamp)</description>
48
+ <param pos="1" name="cookie"/>
49
+ <param pos="2" name="system.time.millis"/>
50
+ <param pos="0" name="service.vendor" value="BEA"/>
51
+ <param pos="0" name="service.family" value="WebLogic"/>
52
+ <param pos="0" name="service.product" value="WebLogic"/>
53
+ <param pos="0" name="service.cpe23" value="cpe:/a:bea:weblogic_server:-"/>
54
+ </fingerprint>
55
+ <fingerprint pattern="^(WebLogicSession)=.*">
56
+ <description>BEA WebLogic (no timestamp)</description>
57
+ <param pos="1" name="cookie"/>
58
+ <param pos="0" name="service.vendor" value="BEA"/>
59
+ <param pos="0" name="service.family" value="WebLogic"/>
60
+ <param pos="0" name="service.product" value="WebLogic"/>
61
+ <param pos="0" name="service.cpe23" value="cpe:/a:bea:weblogic_server:-"/>
62
+ </fingerprint>
63
+ <fingerprint pattern="^(BCSI-CSC[0-9A-Za-z]+)=.*">
64
+ <description>BlueCoat Proxy</description>
65
+ <param pos="1" name="cookie"/>
66
+ <param pos="0" name="service.vendor" value="Blue Coat"/>
67
+ <param pos="0" name="service.family" value="Proxy"/>
68
+ <param pos="0" name="service.product" value="Proxy"/>
69
+ </fingerprint>
70
+ <fingerprint pattern="^(CAKEPHP)=.*">
71
+ <description>CakePHP - http://www.cakephp.org/</description>
72
+ <param pos="1" name="cookie"/>
73
+ <param pos="0" name="service.family" value="PHP"/>
74
+ <param pos="0" name="service.product" value="CakePHP"/>
75
+ </fingerprint>
76
+ <!--
77
+ For the following two Cisco Content Service Switch fingerprints:
78
+ The cookie value breaks down to [box-id][service-id][timeout-value]
79
+ unfortunately, there's no separator so it's hard to tell what the
80
+ actual break is between the pieces of data.
81
+
82
+ http://www.cisco.com/warp/public/117/AP_cookies.html
83
+ -->
84
+ <fingerprint pattern="^(ARPT)=([A-Z]+)([0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3})[A-Z]+.*">
85
+ <description>Cisco 11000 Series Content Service Switch (CSS)</description>
86
+ <param pos="1" name="cookie"/>
87
+ <param pos="2" name="host.id"/>
88
+ <param pos="3" name="host.ip"/>
89
+ <param pos="0" name="service.vendor" value="Cisco"/>
90
+ <param pos="0" name="service.family" value="Content Service Switch"/>
91
+ <param pos="0" name="service.product" value="11000 Series Content Service Switch"/>
92
+ </fingerprint>
93
+ <fingerprint pattern="^(ARPT)=.*">
94
+ <description>Cisco 11000 Series Content Service Switch (CSS) - catch all variant</description>
95
+ <param pos="1" name="cookie"/>
96
+ <param pos="0" name="service.vendor" value="Cisco"/>
97
+ <param pos="0" name="service.family" value="Content Service Switch"/>
98
+ <param pos="0" name="service.product" value="11000 Series Content Service Switch"/>
99
+ </fingerprint>
100
+ <fingerprint pattern="^webvpn(?:c|context|_portal|Lang|login|SharePoint)?=">
101
+ <description>Cisco ASA VPN</description>
102
+ <example>webvpn=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; secure</example>
103
+ <example>webvpnc=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; secure</example>
104
+ <example>webvpn_portal=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; secure</example>
105
+ <example>webvpnSharePoint=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; secure</example>
106
+ <example>webvpnlogin=1; path=/; secure</example>
107
+ <example>webvpncontext=00@sslvpn</example>
108
+ <param pos="0" name="service.vendor" value="Cisco"/>
109
+ <param pos="0" name="service.product" value="HTTP"/>
110
+ <param pos="0" name="os.vendor" value="Cisco"/>
111
+ <param pos="0" name="os.family" value="Adaptive Security Appliance"/>
112
+ <param pos="0" name="os.product" value="Adaptive Security Appliance"/>
113
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:adaptive_security_appliance"/>
114
+ <param pos="0" name="hw.vendor" value="Cisco"/>
115
+ <param pos="0" name="hw.family" value="Adaptive Security Appliance"/>
116
+ <param pos="0" name="hw.product" value="Adaptive Security Appliance"/>
117
+ <param pos="0" name="hw.device" value="Firewall"/>
118
+ <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:adaptive_security_appliance:-"/>
119
+ </fingerprint>
120
+ <fingerprint pattern="^(st8id)=.*">
121
+ <description>Citrix Application Protection System, Enterprise - http://support.citrix.com/article/CTX109330</description>
122
+ <param pos="1" name="cookie"/>
123
+ <param pos="0" name="service.vendor" value="Citrix"/>
124
+ <param pos="0" name="service.family" value="Application Protection System"/>
125
+ <param pos="0" name="service.product" value="Application Protection System, Enterprise"/>
126
+ </fingerprint>
127
+ <fingerprint pattern="^NSC_(?:AAAC|CERT|DLGE|EPAC|TASS|TEMP|TMA[APS]|PERS)=.*">
128
+ <description>Citrix NetScaler</description>
129
+ <example>NSC_AAAC=xyz;</example>
130
+ <param pos="0" name="os.vendor" value="Citrix"/>
131
+ <param pos="0" name="os.family" value="NetScaler"/>
132
+ <param pos="0" name="os.device" value="Network Management Device"/>
133
+ <param pos="0" name="os.product" value="NetScaler"/>
134
+ </fingerprint>
135
+ <fingerprint pattern="^DSSignInURL=/">
136
+ <description>Pulse Secure VPN</description>
137
+ <example>DSSignInURL=/; path=/; secure</example>
138
+ <param pos="0" name="os.vendor" value="Pulse Secure"/>
139
+ <param pos="0" name="os.family" value="SSL VPN"/>
140
+ <param pos="0" name="os.device" value="SSL VPN"/>
141
+ <param pos="0" name="os.product" value="SSL VPN"/>
142
+ </fingerprint>
143
+ <fingerprint pattern="^(EktGUID|ecm)=.*">
144
+ <description>Ektron CMS400.net</description>
145
+ <param pos="1" name="cookie"/>
146
+ <param pos="0" name="service.vendor" value="Ektron"/>
147
+ <param pos="0" name="service.family" value="CMS400.NET"/>
148
+ <param pos="0" name="service.product" value="CMS400.NET"/>
149
+ </fingerprint>
150
+ <fingerprint pattern="^(BIGipServer([^=]+))=.*">
151
+ <description>F5 BIG-IP LTM - Server variant</description>
152
+ <param pos="1" name="cookie"/>
153
+ <param pos="2" name="loadbalancer.poolname"/>
154
+ <param pos="0" name="service.vendor" value="F5"/>
155
+ <param pos="0" name="service.family" value="BIG-IP"/>
156
+ <param pos="0" name="service.product" value="BIG-IP LTM"/>
157
+ <param pos="0" name="service.cpe23" value="cpe:/a:f5:big-ip_local_traffic_manager:-"/>
158
+ </fingerprint>
159
+ <fingerprint pattern="^(BigIPCookie)=.*">
160
+ <description>F5 BIG-IP LTM</description>
161
+ <param pos="1" name="cookie"/>
162
+ <param pos="0" name="service.vendor" value="F5"/>
163
+ <param pos="0" name="service.family" value="BIG-IP"/>
164
+ <param pos="0" name="service.product" value="BIG-IP LTM"/>
165
+ <param pos="0" name="service.cpe23" value="cpe:/a:f5:big-ip_local_traffic_manager:-"/>
166
+ </fingerprint>
167
+ <fingerprint pattern="^(SERVERID)=([A-Za-z0-9\-_]+)">
168
+ <description>HAProxy - http://haproxy.1wt.eu/download/1.2/doc/architecture.txt</description>
169
+ <param pos="1" name="cookie"/>
170
+ <param pos="2" name="host.name"/>
171
+ <param pos="0" name="service.family" value="HAProxy"/>
172
+ <param pos="0" name="service.product" value="HAProxy"/>
173
+ </fingerprint>
174
+ <fingerprint pattern="^(AMWEBJCT!([^!]+)!([^=]+))=.*">
175
+ <description>IBM Tivoli Access Manager for e-business WebSEAL
176
+ http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/index.jsp?topic=/com.ibm.itame.doc/am60_webseal_admin180.htm
177
+ </description>
178
+ <param pos="1" name="cookie"/>
179
+ <param pos="2" name="junction.name"/>
180
+ <param pos="3" name="junction.cookie"/>
181
+ <param pos="0" name="service.vendor" value="IBM"/>
182
+ <param pos="0" name="service.family" value="Tivoli"/>
183
+ <param pos="0" name="service.product" value="Tivoli Access Manager for e-business WebSEAL"/>
184
+ </fingerprint>
185
+ <fingerprint pattern="^(PD-S-SESSION-ID|PD-H-SESSION-ID|PD_STATEFUL_[^=]+)=.*">
186
+ <description>IBM Tivoli Access Manager for e-business WebSeal
187
+ http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/index.jsp?topic=/com.ibm.itame.doc/am60_webseal_admin117.htm
188
+ </description>
189
+ <param pos="1" name="cookie"/>
190
+ <param pos="0" name="service.vendor" value="IBM"/>
191
+ <param pos="0" name="service.family" value="Tivoli"/>
192
+ <param pos="0" name="service.product" value="Tivoli Access Manager for e-business WebSEAL"/>
193
+ </fingerprint>
194
+ <fingerprint pattern="^(IBMCBR)=.*">
195
+ <description>IBM WebSphere Load Balancer</description>
196
+ <param pos="1" name="cookie"/>
197
+ <param pos="0" name="service.vendor" value="IBM"/>
198
+ <param pos="0" name="service.family" value="WebSphere"/>
199
+ <param pos="0" name="service.product" value="WebSphere Load Balancer"/>
200
+ </fingerprint>
201
+ <fingerprint pattern="^(mbfcookie(?:\[lang\])?)=.*">
202
+ <description>Joom!Fish http://www.joomfish.net/</description>
203
+ <param pos="1" name="cookie"/>
204
+ <param pos="0" name="service.family" value="Joom!Fish"/>
205
+ <param pos="0" name="service.product" value="Joom!Fish"/>
206
+ </fingerprint>
207
+ <fingerprint pattern="^(MSCSAuth|MSCSProfile)=.*">
208
+ <description>Microsoft Commerce Server - http://msdn2.microsoft.com/en-us/library/ms953828.aspx</description>
209
+ <param pos="1" name="cookie"/>
210
+ <param pos="0" name="service.vendor" value="Microsoft"/>
211
+ <param pos="0" name="service.family" value="Commerce Server"/>
212
+ <param pos="0" name="service.product" value="Commerce Server"/>
213
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:commerce_server:-"/>
214
+ </fingerprint>
215
+ <fingerprint pattern="^(ASPSESSIONID[A-Z]+|ASP\.NET_SessionId|\.ASPXANONYMOUS)=.*">
216
+ <description>Microsoft IIS (ASP.NET)
217
+ http://msdn2.microsoft.com/en-us/library/ms953828.aspx
218
+ http://msdn2.microsoft.com/en-us/library/91ka2e6a.aspx
219
+ </description>
220
+ <param pos="1" name="cookie"/>
221
+ <param pos="0" name="service.vendor" value="Microsoft"/>
222
+ <param pos="0" name="service.family" value="IIS"/>
223
+ <param pos="0" name="service.product" value="IIS"/>
224
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:-"/>
225
+ <param pos="0" name="service.component.vendor" value="Microsoft"/>
226
+ <param pos="0" name="service.component.family" value="ASP.NET"/>
227
+ <param pos="0" name="service.component.product" value="ASP.NET"/>
228
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:microsoft:asp.net:-"/>
229
+ </fingerprint>
230
+ <fingerprint pattern="^(AlteonP)=.*">
231
+ <description>Nortel Alteon Web Switch</description>
232
+ <param pos="1" name="cookie"/>
233
+ <param pos="0" name="service.vendor" value="Nortel"/>
234
+ <param pos="0" name="service.family" value="Alteon"/>
235
+ <param pos="0" name="service.product" value="Alteon Web Switch"/>
236
+ </fingerprint>
237
+ <fingerprint pattern="^((?:SS_X_)?CSINTERSESSIONID)=.*">
238
+ <description>OpenMarket/FatWire Content Server (www.fatwire.com)</description>
239
+ <param pos="1" name="cookie"/>
240
+ <param pos="0" name="service.vendor" value="FatWire"/>
241
+ <param pos="0" name="service.family" value="Content Server"/>
242
+ <param pos="0" name="service.product" value="Content Server"/>
243
+ </fingerprint>
244
+ <fingerprint pattern="^(parkinglot)=.*">
245
+ <description>Oversee Webserver</description>
246
+ <param pos="1" name="cookie"/>
247
+ <param pos="0" name="service.vendor" value="Oversee"/>
248
+ <param pos="0" name="service.family" value="Webserver"/>
249
+ <param pos="0" name="service.product" value="Webserver"/>
250
+ </fingerprint>
251
+ <fingerprint pattern="^(PHPSESSID|PHPSESSION)=.*">
252
+ <description>PHP - http://www.php.net/ref.session</description>
253
+ <param pos="1" name="cookie"/>
254
+ <param pos="0" name="service.vendor" value="PHP"/>
255
+ <param pos="0" name="service.family" value="PHP"/>
256
+ <param pos="0" name="service.product" value="PHP"/>
257
+ <param pos="0" name="service.cpe23" value="cpe:/a:php:php:-"/>
258
+ </fingerprint>
259
+ <fingerprint pattern="^(RMID)=.*">
260
+ <description>RealMedia OpenAdStream</description>
261
+ <param pos="1" name="cookie"/>
262
+ <param pos="0" name="service.vendor" value="RealMedia"/>
263
+ <param pos="0" name="service.family" value="OpenAdStream"/>
264
+ <param pos="0" name="service.product" value="OpenAdStream"/>
265
+ </fingerprint>
266
+ <fingerprint pattern="^(RoxenUserID)=.*">
267
+ <description>Roxen WebServer</description>
268
+ <param pos="1" name="cookie"/>
269
+ <param pos="0" name="service.vendor" value="Roxen"/>
270
+ <param pos="0" name="service.family" value="WebServer"/>
271
+ <param pos="0" name="service.product" value="WebServer"/>
272
+ </fingerprint>
273
+ <fingerprint pattern="^(_sn)=.*">
274
+ <description>Siebel CRM</description>
275
+ <param pos="1" name="cookie"/>
276
+ <param pos="0" name="service.vendor" value="Siebel"/>
277
+ <param pos="0" name="service.family" value="CRM"/>
278
+ <param pos="0" name="service.product" value="CRM"/>
279
+ </fingerprint>
280
+ <!-- This fingerprint is not specific enough. Multiple products are sold under
281
+ the brand iPlanet/Sun ONE/Sun Java.
282
+ <fingerprint pattern="^(iPlanetUserId)=.*">
283
+ <description>Sun iPlanet</description>
284
+ <param pos="1" name="cookie"/>
285
+ <param pos="0" name="service.vendor" value="Sun"/>
286
+ <param pos="0" name="service.family" value="???"/>
287
+ <param pos="0" name="service.product" value="???"/>
288
+ </fingerprint>
289
+ -->
290
+ <fingerprint pattern="^(NSES40Session)=.*">
291
+ <description>Netscape Enterprise Server (subsequently iPlanet Web Server, Sun ONE Web Server, presently Sun Java System Web Server)</description>
292
+ <param pos="1" name="cookie"/>
293
+ <param pos="0" name="service.vendor" value="Sun"/>
294
+ <param pos="0" name="service.family" value="Java System Web Server"/>
295
+ <param pos="0" name="service.product" value="Java System Web Server"/>
296
+ <param pos="0" name="service.version" value="4.0"/>
297
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_web_server:4.0"/>
298
+ </fingerprint>
299
+ <fingerprint pattern="^(gx_session_id|JROUTE)=.*">
300
+ <description>Sun Java System Application Server (formerly iPlanet Application Server, Sun ONE Application Server)</description>
301
+ <param pos="1" name="cookie"/>
302
+ <param pos="0" name="service.vendor" value="Sun"/>
303
+ <param pos="0" name="service.family" value="Java System Application Server"/>
304
+ <param pos="0" name="service.product" value="Java System Application Server"/>
305
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_application_server:-"/>
306
+ </fingerprint>
307
+ <fingerprint pattern="^(fe_typo_user)=.*">
308
+ <description>TYPO3 CMS - http://typo3.com/</description>
309
+ <param pos="1" name="cookie"/>
310
+ <param pos="0" name="service.vendor" value="TYPO3"/>
311
+ <param pos="0" name="service.family" value="CMS"/>
312
+ <param pos="0" name="service.product" value="CMS"/>
313
+ </fingerprint>
314
+ <fingerprint pattern="^(SaneID)=.*">
315
+ <description>Unica NetTracker - http://netinsight.unica.com/Products/NetTracker.cfm</description>
316
+ <param pos="1" name="cookie"/>
317
+ <param pos="0" name="service.vendor" value="Unica"/>
318
+ <param pos="0" name="service.family" value="NetTracker"/>
319
+ <param pos="0" name="service.product" value="NetTracker"/>
320
+ </fingerprint>
321
+ <fingerprint pattern="^(__utm[a-z])=.*">
322
+ <description>Urchin Tracking Module - http://www.google.com/support/urchin45/bin/answer.py?answer=28307&amp;topic=7425</description>
323
+ <param pos="1" name="cookie"/>
324
+ <param pos="0" name="service.vendor" value="Google"/>
325
+ <param pos="0" name="service.family" value="Urchin"/>
326
+ <param pos="0" name="service.product" value="Urchin Tracking Module"/>
327
+ </fingerprint>
328
+ <fingerprint pattern="^(vgncontext|vgnvisitor|ssuid)=.*">
329
+ <description>Vignette</description>
330
+ <param pos="1" name="cookie"/>
331
+ <param pos="0" name="service.vendor" value="Vignette"/>
332
+ <param pos="0" name="service.family" value="Vignette"/>
333
+ <param pos="0" name="service.product" value="Vignette"/>
334
+ </fingerprint>
335
+ <fingerprint pattern="^(wgSession)=.*">
336
+ <description>Plain Black WebGUI - http://www.plainblack.com/webgui</description>
337
+ <param pos="1" name="cookie"/>
338
+ <param pos="0" name="service.vendor" value="Plain Black"/>
339
+ <param pos="0" name="service.family" value="WebGUI"/>
340
+ <param pos="0" name="service.product" value="WebGUI"/>
341
+ </fingerprint>
342
+ <fingerprint pattern="^(WEBTRENDSID|WEBTRENDS_ID)=.*">
343
+ <description>WebTrends</description>
344
+ <param pos="1" name="cookie"/>
345
+ <param pos="0" name="service.vendor" value="WebTrends"/>
346
+ <param pos="0" name="service.family" value="WebTrends"/>
347
+ <param pos="0" name="service.product" value="WebTrends"/>
348
+ </fingerprint>
349
+ <fingerprint pattern="^(_ZopeId)=.*">
350
+ <description>Zope</description>
351
+ <param pos="1" name="cookie"/>
352
+ <param pos="0" name="service.family" value="Zope"/>
353
+ <param pos="0" name="service.product" value="Zope"/>
354
+ </fingerprint>
355
+ <fingerprint pattern="^(portal)=([0-9]+\.[0-9]+\.[0-9]+).*">
356
+ <description>OracleAS Portal default cookie name - http://download.oracle.com/docs/cd/B14099_19/portal.1014/b19305/cg_app_f.htm</description>
357
+ <param pos="1" name="cookie"/>
358
+ <param pos="2" name="service.version"/>
359
+ <param pos="0" name="service.vendor" value="Oracle"/>
360
+ <param pos="0" name="service.family" value="OracleAS"/>
361
+ <param pos="0" name="service.product" value="OracleAS Portal"/>
362
+ </fingerprint>
363
+ <fingerprint pattern="^Compaq-HMMD=[^;]+;.*$">
364
+ <description>HP System Management Homepage (SMH)</description>
365
+ <example>Compaq-HMMD=0001-c01fffff-487a-394a-aab0-ffffffffffff-ffffffffffffffff; path=/</example>
366
+ <example>Compaq-HMMD=0001-c01fffff-487a-394a-aab0-ffffffffffff-ffffffffffffffff; path=/; Secure</example>
367
+ <param pos="0" name="service.vendor" value="HP"/>
368
+ <param pos="0" name="service.family" value="SMH"/>
369
+ <param pos="0" name="service.product" value="SMH"/>
370
+ </fingerprint>
371
+ <fingerprint pattern="^MoodleSession=">
372
+ <description>Moodle</description>
373
+ <example>MoodleSession=uohhsgcain708q5l4gqcmmb5s2; path=/</example>
374
+ <param pos="0" name="service.component.vendor" value="Moodle"/>
375
+ <param pos="0" name="service.component.family" value="Moodle"/>
376
+ <param pos="0" name="service.component.product" value="Moodle"/>
377
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:moodle:moodle:-"/>
378
+ </fingerprint>
379
+ <fingerprint pattern="_arachni_webui_session=">
380
+ <description>Arachni Security Scanner</description>
381
+ <example>_arachni_webui_session=el2MMEVVcld3Q2dBc3UvSmtQYmlPckpxSE2CMmlwd1Nja2lvUk5tRG5XYTlnRHJuVVVTblVNMTBOdGhrUU02dzC0K1I0Mnk3d1I3SUlCcngwQkliV3Y5VDBnVVZkOWJsS0VGSlYwM1RGMlVzVDNKcXlrdFNQZ0lIM1VBN3RDZFIrZTBrdjZmdSt0YnV2djh1RFE0S1czUmZQcGxNNW9UWVQydXFCZmNHZDRmTlg4cWludE5SUDRYU2JwdWw4Qmk3dEpDV3ZBejRkbU9ueFJKNG1HenplUEJjem9LU09IM0Z6ZHM4YU00aVpKUHJRVzR3SG8rRzBjWG9jclpqZGd2dmp2TnVGbjkvb0lmanZvM3lPZGhXb3c9PS0tR0dXVWppWnorMG1NNjlXTkYvaEswUT09--44b846e66f558667d7503010a726e2388803136f; path=/; HttpOnly</example>
382
+ <param pos="0" name="service.vendor" value="Arachni"/>
383
+ <param pos="0" name="service.product" value="Arachni"/>
384
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:arachni:arachni:-"/>
385
+ </fingerprint>
386
+
387
+ <!--
388
+ Ignore various cookies that are very generic cookies for session IDs
389
+ that are not necessarily indicative of any particular
390
+ product/device/etc. If a future fingerprint comes along that utilizes
391
+ a similar cookie name, you must ensure that it is located prior to
392
+ these and this is enforced by rspec.
393
+ -->
394
+ <fingerprint pattern="(?i)^JSESSIONID(?:\.[^=]+)?=[^;]+;.*$">
395
+ <description>Ignore simple JSESSIONID and related cookies</description>
396
+ <example>JSESSIONID=6ooov35i4l3n36qtaf8csvg0;Path=/</example>
397
+ <example>jsessionid=6nkp66iogcdc92720%2Dc6e4%2D4989%2Db7b2%2D5021624cfdff;Path=/;secure</example>
398
+ <example>JSESSIONID.c00a9623=v216643eijh19p9duve5srgf;Path=/;HttpOnly</example>
399
+ </fingerprint>
400
+ <fingerprint pattern="(?i)^_?SESSION_?ID\s*=\s*[^;]+;.*$">
401
+ <description>Ignore simple SESSIONID and related cookies</description>
402
+ <example>sessionId=7dba3249cfcd4b59854055311099a294; path=/;</example>
403
+ <example>_session_id=7fe933db0fea13e9c872103ba2d142db; path=/; HttpOnly</example>
404
+ <example>sessionId =0VrS6Ro6uC5QPXKgNdqGvyUgUFtUOVwv6OWAEWcWQ3jLRtAk2TVAgAApN9yTWVz;postId=; path=/;</example>
405
+ <example>_session_id=18b3e173aa11db0533fd01752e81f583; path=/; HttpOnly</example>
406
+ </fingerprint>
407
+ <fingerprint pattern="(?i)^sid=[^;]+;.*$">
408
+ <description>Ignore simple SID and related cookies</description>
409
+ <example>sid=sfd10bf73-654458f687aa3c68b3874915f651e0ca;path=/;"</example>
410
+ </fingerprint>
411
+ </fingerprints>
data/xml/http_servers.xml ADDED
@@ -0,0 +1,3195 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <fingerprints matches="http_header.server" protocol="http" database_type="service" preference="0.90">
3
+ <!-- HTTP Server headers are matched against these patterns to fingerprint HTTP servers. -->
4
+ <fingerprint pattern="(?i)^AirTunes/([\d\.]+)$">
5
+ <description>Apple AirTunes/AirPlay, more generally RTSP used by a variety of wireless a/v products</description>
6
+ <example service.version="220.68">AirTunes/220.68</example>
7
+ <param pos="0" name="service.vendor" value="Apple"/>
8
+ <param pos="0" name="service.product" value="AirTunes"/>
9
+ <param pos="1" name="service.version"/>
10
+ <param pos="0" name="hw.device" value="Media Server"/>
11
+ </fingerprint>
12
+ <fingerprint pattern="(?i)^cpsrvd(?:/([\d\.]+))?$">
13
+ <description>cPanel Service Daemon</description>
14
+ <example service.version="11.44.3.0">cpsrvd/11.44.3.0</example>
15
+ <example>cpsrvd</example>
16
+ <param pos="0" name="service.vendor" value="cPanel"/>
17
+ <param pos="0" name="service.product" value="cPanel Service Daemon"/>
18
+ <param pos="1" name="service.version"/>
19
+ </fingerprint>
20
+ <fingerprint pattern="(?i)^cwpsrv$">
21
+ <description>CentOS Web Panel</description>
22
+ <example>cwpsrv</example>
23
+ <param pos="0" name="service.vendor" value="CentOS"/>
24
+ <param pos="0" name="service.product" value="CentOS Web Panel"/>
25
+ <param pos="0" name="os.vendor" value="CentOS"/>
26
+ <param pos="0" name="os.family" value="Linux"/>
27
+ <param pos="0" name="os.product" value="Linux"/>
28
+ <param pos="0" name="os.cpe23" value="cpe:/o:centos:centos:-"/>
29
+ </fingerprint>
30
+ <fingerprint pattern="^Stronghold/(\d\.\d) Apache/([012][\d.]*)\s*(.*)$">
31
+ <description>Red Hat Stronghold Enterprise Apache</description>
32
+ <example service.version="1.3.19" service.cpe23="cpe:/a:apache:http_server:1.3.19" service.component.cpe23="cpe:/a:redhat:stronghold:3.0">Stronghold/3.0 Apache/1.3.19 RedHat/3014c</example>
33
+ <example service.version="1.3.22" service.cpe23="cpe:/a:apache:http_server:1.3.22" service.component.cpe23="cpe:/a:redhat:stronghold:4.0" apache.info="(Unix) mod_ssl/2.8.7 OpenSSL/0.9.6c mod_perl/1.26">Stronghold/4.0 Apache/1.3.22 (Unix) mod_ssl/2.8.7 OpenSSL/0.9.6c mod_perl/1.26</example>
34
+ <param pos="0" name="service.vendor" value="Apache"/>
35
+ <param pos="0" name="service.product" value="HTTPD"/>
36
+ <param pos="0" name="service.family" value="Apache"/>
37
+ <param pos="2" name="service.version"/>
38
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:{service.version}"/>
39
+ <param pos="0" name="service.component.vendor" value="Red Hat"/>
40
+ <param pos="0" name="service.component.product" value="Stronghold"/>
41
+ <param pos="0" name="service.component.family" value="Stronghold"/>
42
+ <param pos="1" name="service.component.version"/>
43
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:redhat:stronghold:{service.component.version}"/>
44
+ <param pos="3" name="apache.info"/>
45
+ <param pos="0" name="os.vendor" value="Red Hat"/>
46
+ <param pos="0" name="os.product" value="Linux"/>
47
+ <param pos="0" name="os.family" value="Linux"/>
48
+ <param pos="0" name="os.cpe23" value="cpe:/o:redhat:linux:-"/>
49
+ </fingerprint>
50
+ <fingerprint pattern="(?i)^Apache/\d$">
51
+ <description>Apache returning only its major version number</description>
52
+ <example>Apache/1</example>
53
+ <example>Apache/2</example>
54
+ <param pos="0" name="service.vendor" value="Apache"/>
55
+ <param pos="0" name="service.product" value="HTTPD"/>
56
+ <param pos="0" name="service.family" value="Apache"/>
57
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
58
+ </fingerprint>
59
+ <fingerprint pattern="(?i)^Apache$">
60
+ <description>Apache returning no version information</description>
61
+ <example>Apache</example>
62
+ <example>apache</example>
63
+ <param pos="0" name="service.vendor" value="Apache"/>
64
+ <param pos="0" name="service.product" value="HTTPD"/>
65
+ <param pos="0" name="service.family" value="Apache"/>
66
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
67
+ </fingerprint>
68
+ <fingerprint pattern="(?i)^Apache(?:-AdvancedExtranetServer)?(?:/([012][\d.]*)\s*(.*))?$">
69
+ <description>Apache</description>
70
+ <example>Apache-AdvancedExtranetServer/2.0.44 (Mandrake Linux/11mdk) mod_perl/1.99_08 Perl/v5.8.0 mod_ssl/2.0.44 OpenSSL/0.9.7a PHP/4.3.1 mod_jk2/2.0.0</example>
71
+ <example>Apache-AdvancedExtranetServer/2.0.47 (Mandrake Linux/6.12.92mdk) mod_perl/1.99_09 Perl/v5.8.1 mod_ssl/2.0.47 OpenSSL/0.9.7b PHP/4.3.2</example>
72
+ <example>Apache-AdvancedExtranetServer/2.0.47 (Mandrake Linux/6.3.92mdk) mod_ssl/2.0.47 OpenSSL/0.9.7b PHP/4.3.2</example>
73
+ <example>Apache-AdvancedExtranetServer/2.0.48 (Mandrake Linux/6.8.100mdk) mod_perl/1.99_11 Perl/v5.8.3 mod_ssl/2.0.48 OpenSSL/0.9.7c PHP/4.3.4</example>
74
+ <example>Apache-AdvancedExtranetServer/2.0.48 (Mandrake Linux/6mdk) PHP/4.3.4</example>
75
+ <example>Apache-AdvancedExtranetServer/2.0.53 (Mandrakelinux/PREFORK-9mdk) mod_ssl/2.0.53 OpenSSL/0.9.7e PHP/4.3.10 mod_perl/1.999.21 Perl/v5.8.6</example>
76
+ <example>Apache/0.6.5</example>
77
+ <example>Apache/1.1.3</example>
78
+ <example>Apache/1.2.42 (PalmOS)</example>
79
+ <example>Apache/1.3.28 (SolutionIP) mod_perl/1.28 mod_ssl/2.8.15 OpenSSL/0.9.7b</example>
80
+ <example>Apache/1.3.28 (Unix)</example>
81
+ <example>Apache/1.3.28 (Unix) mod_auth_pam/1.1.1</example>
82
+ <example>Apache/2.2.3 (Red Hat)</example>
83
+ <example>Apache/2.2.4 (Win32) PHP/5.2.2</example>
84
+ <example>Apache/2.2.4 (Win32) PHP/5.2.3</example>
85
+ <example>APACHE/1.3.9</example>
86
+ <param pos="0" name="service.vendor" value="Apache"/>
87
+ <param pos="0" name="service.product" value="HTTPD"/>
88
+ <param pos="0" name="service.family" value="Apache"/>
89
+ <param pos="1" name="service.version"/>
90
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:{service.version}"/>
91
+ <param pos="2" name="apache.info"/>
92
+ </fingerprint>
93
+ <fingerprint pattern="(?i)^CouchDB/([\.\d]+) .*$">
94
+ <description>Apache CouchDB</description>
95
+ <example service.version="2.1.1">CouchDB/2.1.1 (Erlang OTP/20)</example>
96
+ <param pos="0" name="service.vendor" value="Apache"/>
97
+ <param pos="0" name="service.product" value="CouchDB"/>
98
+ <param pos="1" name="service.version"/>
99
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:couchdb:{service.version}"/>
100
+ </fingerprint>
101
+ <fingerprint pattern="^support@arraynetworks.net$">
102
+ <description>Array Networks device</description>
103
+ <example>support@arraynetworks.net</example>
104
+ <param pos="0" name="service.vendor" value="Array Networks"/>
105
+ </fingerprint>
106
+ <fingerprint pattern="^Check Point SVN foundation$">
107
+ <description>Check Point Firewall NG</description>
108
+ <example>Check Point SVN foundation</example>
109
+ <param pos="0" name="service.vendor" value="Check Point"/>
110
+ <param pos="0" name="service.product" value="Firewall-1"/>
111
+ <param pos="0" name="service.family" value="Firewall-1"/>
112
+ <param pos="0" name="service.cpe23" value="cpe:/a:checkpoint:firewall-1:-"/>
113
+ <param pos="0" name="os.vendor" value="Check Point"/>
114
+ <param pos="0" name="os.device" value="Firewall"/>
115
+ <param pos="0" name="os.family" value="Firewall-1"/>
116
+ <param pos="0" name="os.product" value="GAiA OS"/>
117
+ <param pos="0" name="os.cpe23" value="cpe:/o:checkpoint:gaia_os:-"/>
118
+ <param pos="0" name="hw.vendor" value="Check Point"/>
119
+ <param pos="0" name="hw.device" value="Firewall"/>
120
+ <param pos="0" name="hw.family" value="Firewall-1"/>
121
+ <param pos="0" name="hw.product" value="Firewall-1"/>
122
+ </fingerprint>
123
+ <fingerprint pattern="^Microsoft-IIS/([1234]\.0)$">
124
+ <description>Microsoft IIS 1.0 - 4.0 runs on Windows NT 4.0</description>
125
+ <example>Microsoft-IIS/4.0</example>
126
+ <param pos="0" name="service.vendor" value="Microsoft"/>
127
+ <param pos="0" name="service.product" value="IIS"/>
128
+ <param pos="0" name="service.family" value="IIS"/>
129
+ <param pos="1" name="service.version"/>
130
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
131
+ <param pos="0" name="os.vendor" value="Microsoft"/>
132
+ <param pos="0" name="os.family" value="Windows"/>
133
+ <param pos="0" name="os.product" value="Windows NT"/>
134
+ <param pos="0" name="os.version" value="4.0"/>
135
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_nt:4.0"/>
136
+ </fingerprint>
137
+ <fingerprint pattern="^Microsoft-IIS/5.0$">
138
+ <description>Microsoft IIS 5.0 runs on Windows 2000</description>
139
+ <example>Microsoft-IIS/5.0</example>
140
+ <param pos="0" name="service.vendor" value="Microsoft"/>
141
+ <param pos="0" name="service.product" value="IIS"/>
142
+ <param pos="0" name="service.family" value="IIS"/>
143
+ <param pos="0" name="service.version" value="5.0"/>
144
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:5.0"/>
145
+ <param pos="0" name="os.vendor" value="Microsoft"/>
146
+ <param pos="0" name="os.family" value="Windows"/>
147
+ <param pos="0" name="os.product" value="Windows 2000"/>
148
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_2000:-"/>
149
+ </fingerprint>
150
+ <fingerprint pattern="^Microsoft-IIS/5.1$">
151
+ <description>Microsoft IIS 5.1 runs on Windows XP</description>
152
+ <example>Microsoft-IIS/5.1</example>
153
+ <param pos="0" name="service.vendor" value="Microsoft"/>
154
+ <param pos="0" name="service.product" value="IIS"/>
155
+ <param pos="0" name="service.family" value="IIS"/>
156
+ <param pos="0" name="service.version" value="5.1"/>
157
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:5.1"/>
158
+ <param pos="0" name="os.vendor" value="Microsoft"/>
159
+ <param pos="0" name="os.family" value="Windows"/>
160
+ <param pos="0" name="os.product" value="Windows XP"/>
161
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_xp:-"/>
162
+ </fingerprint>
163
+ <fingerprint pattern="^Microsoft-IIS/6.0$">
164
+ <description>Microsoft IIS 6.0 runs on Windows Server 2003 (and Windows XP x64)</description>
165
+ <example>Microsoft-IIS/6.0</example>
166
+ <param pos="0" name="service.vendor" value="Microsoft"/>
167
+ <param pos="0" name="service.product" value="IIS"/>
168
+ <param pos="0" name="service.family" value="IIS"/>
169
+ <param pos="0" name="service.version" value="6.0"/>
170
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:6.0"/>
171
+ <param pos="0" name="os.vendor" value="Microsoft"/>
172
+ <param pos="0" name="os.family" value="Windows"/>
173
+ <param pos="0" name="os.product" value="Windows Server 2003"/>
174
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
175
+ </fingerprint>
176
+ <fingerprint pattern="^Microsoft-IIS/7.0$">
177
+ <description>Microsoft IIS 7.0 runs on Windows Server 2008 (and Windows Vista)</description>
178
+ <example>Microsoft-IIS/7.0</example>
179
+ <param pos="0" name="service.vendor" value="Microsoft"/>
180
+ <param pos="0" name="service.product" value="IIS"/>
181
+ <param pos="0" name="service.family" value="IIS"/>
182
+ <param pos="0" name="service.version" value="7.0"/>
183
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:7.0"/>
184
+ <param pos="0" name="os.vendor" value="Microsoft"/>
185
+ <param pos="0" name="os.family" value="Windows"/>
186
+ <param pos="0" name="os.product" value="Windows Server 2008"/>
187
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
188
+ </fingerprint>
189
+ <fingerprint pattern="^Microsoft-IIS/7.5$">
190
+ <description>Microsoft IIS 7.5 runs on Windows Server 2008 R2 (and Windows 7)</description>
191
+ <example>Microsoft-IIS/7.5</example>
192
+ <param pos="0" name="service.vendor" value="Microsoft"/>
193
+ <param pos="0" name="service.product" value="IIS"/>
194
+ <param pos="0" name="service.family" value="IIS"/>
195
+ <param pos="0" name="service.version" value="7.5"/>
196
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:7.5"/>
197
+ <param pos="0" name="os.vendor" value="Microsoft"/>
198
+ <param pos="0" name="os.family" value="Windows"/>
199
+ <param pos="0" name="os.product" value="Windows Server 2008 R2"/>
200
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
201
+ </fingerprint>
202
+ <fingerprint pattern="^Microsoft-IIS/8.0$">
203
+ <description>Microsoft IIS 8.0 runs on Windows Server 2012 (and Windows 8)</description>
204
+ <example>Microsoft-IIS/8.0</example>
205
+ <param pos="0" name="service.vendor" value="Microsoft"/>
206
+ <param pos="0" name="service.product" value="IIS"/>
207
+ <param pos="0" name="service.family" value="IIS"/>
208
+ <param pos="0" name="service.version" value="8.0"/>
209
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:8.0"/>
210
+ <param pos="0" name="os.vendor" value="Microsoft"/>
211
+ <param pos="0" name="os.family" value="Windows"/>
212
+ <param pos="0" name="os.product" value="Windows Server 2012"/>
213
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
214
+ </fingerprint>
215
+ <fingerprint pattern="^Microsoft-IIS/8.5$">
216
+ <description>Microsoft IIS 8.5 runs on Windows Server 2012 R2 (and Windows 8.1)</description>
217
+ <example>Microsoft-IIS/8.5</example>
218
+ <param pos="0" name="service.vendor" value="Microsoft"/>
219
+ <param pos="0" name="service.product" value="IIS"/>
220
+ <param pos="0" name="service.family" value="IIS"/>
221
+ <param pos="0" name="service.version" value="8.5"/>
222
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:8.5"/>
223
+ <param pos="0" name="os.vendor" value="Microsoft"/>
224
+ <param pos="0" name="os.family" value="Windows"/>
225
+ <param pos="0" name="os.product" value="Windows Server 2012 R2"/>
226
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
227
+ </fingerprint>
228
+ <fingerprint pattern="^Microsoft-IIS/10.0$">
229
+ <description>Microsoft IIS 10.0 runs on Windows Server 2016 and 2019</description>
230
+ <example>Microsoft-IIS/10.0</example>
231
+ <param pos="0" name="service.vendor" value="Microsoft"/>
232
+ <param pos="0" name="service.product" value="IIS"/>
233
+ <param pos="0" name="service.family" value="IIS"/>
234
+ <param pos="0" name="service.version" value="10.0"/>
235
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:10.0"/>
236
+ <param pos="0" name="os.vendor" value="Microsoft"/>
237
+ <param pos="0" name="os.family" value="Windows"/>
238
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
239
+ </fingerprint>
240
+ <fingerprint pattern="^Microsoft-IIS/([\d\.]+)$">
241
+ <description>Microsoft IIS new, unknown Windows version</description>
242
+ <example>Microsoft-IIS/9.0</example>
243
+ <param pos="0" name="service.vendor" value="Microsoft"/>
244
+ <param pos="0" name="service.product" value="IIS"/>
245
+ <param pos="0" name="service.family" value="IIS"/>
246
+ <param pos="1" name="service.version"/>
247
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
248
+ </fingerprint>
249
+ <fingerprint pattern="^Microsoft-IIS$">
250
+ <description>Microsoft IIS, no version information</description>
251
+ <example>Microsoft-IIS</example>
252
+ <param pos="0" name="service.vendor" value="Microsoft"/>
253
+ <param pos="0" name="service.product" value="IIS"/>
254
+ <param pos="0" name="service.family" value="IIS"/>
255
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:-"/>
256
+ <param pos="0" name="os.vendor" value="Microsoft"/>
257
+ <param pos="0" name="os.family" value="Windows"/>
258
+ </fingerprint>
259
+ <fingerprint pattern="^MS .NET Remoting, MS .NET CLR (\d+\.\d+\.\d+\.\d+)$">
260
+ <description>Microsoft .NET Remoting and Common Language Runtime (CLR)</description>
261
+ <example>MS .NET Remoting, MS .NET CLR 2.0.50727.42</example>
262
+ <param pos="0" name="service.vendor" value="Microsoft"/>
263
+ <param pos="0" name="service.product" value=".NET Remoting"/>
264
+ <param pos="0" name="service.family" value=".NET"/>
265
+ <param pos="0" name="service.component.vendor" value="Microsoft"/>
266
+ <param pos="0" name="service.component.product" value=".NET CLR"/>
267
+ <param pos="0" name="service.component.family" value=".NET"/>
268
+ <param pos="1" name="service.component.version"/>
269
+ <param pos="0" name="os.vendor" value="Microsoft"/>
270
+ <param pos="0" name="os.family" value="Windows"/>
271
+ <param pos="0" name="os.product" value="Windows"/>
272
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
273
+ </fingerprint>
274
+ <fingerprint pattern="^Microsoft-WinCE/(\d\.\d+)$">
275
+ <description>Windows CE embedded devices, including HP iPAQ, Palm Treo, Motorola phones, and many more</description>
276
+ <example os.version="4.10">Microsoft-WinCE/4.10</example>
277
+ <example>Microsoft-WinCE/4.20</example>
278
+ <example>Microsoft-WinCE/5.0</example>
279
+ <param pos="0" name="service.vendor" value="Microsoft"/>
280
+ <param pos="0" name="service.product" value="Windows CE Web Server"/>
281
+ <param pos="0" name="service.family" value="Windows CE Web Server"/>
282
+ <param pos="1" name="service.version"/>
283
+ <param pos="0" name="os.certainty" value="0.9"/>
284
+ <param pos="0" name="os.vendor" value="Microsoft"/>
285
+ <param pos="0" name="os.family" value="Windows"/>
286
+ <param pos="0" name="os.product" value="Windows CE"/>
287
+ <param pos="1" name="os.version"/>
288
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_ce:{os.version}"/>
289
+ </fingerprint>
290
+ <fingerprint pattern="^Microsoft-PWS/(\d\.\d+)$">
291
+ <description>Microsoft Personal Web Server runs on Windows 9x, ME, etc.</description>
292
+ <example>Microsoft-PWS/4.0</example>
293
+ <param pos="0" name="service.vendor" value="Microsoft"/>
294
+ <param pos="0" name="service.family" value="PWS"/>
295
+ <param pos="0" name="service.product" value="PWS"/>
296
+ <param pos="1" name="service.version"/>
297
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:personal_web_server:{service.version}"/>
298
+ <param pos="0" name="os.vendor" value="Microsoft"/>
299
+ <param pos="0" name="os.family" value="Windows"/>
300
+ <param pos="0" name="os.product" value="Windows"/>
301
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
302
+ </fingerprint>
303
+ <fingerprint pattern="^Microsoft-PWS-95/(\d\.\d+)$">
304
+ <description>Microsoft Personal Web Server for Windows 95</description>
305
+ <example>Microsoft-PWS-95/4.0</example>
306
+ <param pos="0" name="service.vendor" value="Microsoft"/>
307
+ <param pos="0" name="service.family" value="PWS"/>
308
+ <param pos="0" name="service.product" value="PWS"/>
309
+ <param pos="1" name="service.version"/>
310
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:personal_web_server:{service.version}"/>
311
+ <param pos="0" name="os.vendor" value="Microsoft"/>
312
+ <param pos="0" name="os.family" value="Windows"/>
313
+ <param pos="0" name="os.product" value="Windows 95"/>
314
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_95:-"/>
315
+ </fingerprint>
316
+ <fingerprint pattern="(?i)^mt-daapd(?:/(.+))?$">
317
+ <description>Firefly Media Server</description>
318
+ <example service.version="0.2.4.1">mt-daapd/0.2.4.1</example>
319
+ <example service.version="svn-999">mt-daapd/svn-999</example>
320
+ <param pos="0" name="service.vendor" value="Firefly"/>
321
+ <param pos="0" name="service.product" value="Media Server"/>
322
+ <param pos="1" name="service.version"/>
323
+ </fingerprint>
324
+ <fingerprint pattern="^Apache[ -]Coyote/(\d\.\d)$">
325
+ <description>HTTP connector for Apache Tomcat to run as a standalone HTTP server - Coyote variant</description>
326
+ <example>Apache-Coyote/1.1</example>
327
+ <example>Apache Coyote/1.0</example>
328
+ <param pos="0" name="service.vendor" value="Apache"/>
329
+ <param pos="0" name="service.product" value="Tomcat"/>
330
+ <param pos="0" name="service.family" value="Tomcat"/>
331
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:-"/>
332
+ <param pos="0" name="service.component.vendor" value="Apache"/>
333
+ <param pos="0" name="service.component.product" value="Coyote"/>
334
+ <param pos="0" name="service.component.family" value="Coyote"/>
335
+ <param pos="1" name="service.component.version"/>
336
+ </fingerprint>
337
+ <fingerprint pattern="^Apache Tomcat$">
338
+ <description>HTTP connector for Apache Tomcat with no version</description>
339
+ <example>Apache Tomcat</example>
340
+ <param pos="0" name="service.vendor" value="Apache"/>
341
+ <param pos="0" name="service.product" value="Tomcat"/>
342
+ <param pos="0" name="service.family" value="Tomcat"/>
343
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:-"/>
344
+ </fingerprint>
345
+ <fingerprint pattern="^Servlet [\d\.]+; JBoss-(\S+) \(build: .*\)/Tomcat-(\S+)$">
346
+ <description>JBoss with embedded Tomcat</description>
347
+ <example service.version="4.0.4.GA" service.component.version="5.5">Servlet 2.4; JBoss-4.0.4.GA (build: CVSTag=JBoss_4_0_4_GA date=200605151000)/Tomcat-5.5</example>
348
+ <param pos="0" name="service.vendor" value="Red Hat"/>
349
+ <param pos="0" name="service.product" value="JBoss EAP"/>
350
+ <param pos="1" name="service.version"/>
351
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:{service.version}"/>
352
+ <param pos="0" name="service.component.vendor" value="Apache"/>
353
+ <param pos="0" name="service.component.product" value="Tomcat"/>
354
+ <param pos="0" name="service.component.family" value="Tomcat"/>
355
+ <param pos="2" name="service.component.version"/>
356
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:apache:tomcat:{service.component.version}"/>
357
+ </fingerprint>
358
+ <fingerprint pattern="^Servlet [\d\.]+; Tomcat-(\S+)/JBoss-(\S+) \(build: .*\)$">
359
+ <description>JBoss with embedded Tomcat - Tomcat build variant</description>
360
+ <example service.version="4.0.1sp1" service.component.version="5.0.28">Servlet 2.4; Tomcat-5.0.28/JBoss-4.0.1sp1 (build: CVSTag=JBoss_4_0_1_SP1 date=200502160314)</example>
361
+ <param pos="0" name="service.vendor" value="Red Hat"/>
362
+ <param pos="0" name="service.product" value="JBoss EAP"/>
363
+ <param pos="2" name="service.version"/>
364
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:{service.version}"/>
365
+ <param pos="0" name="service.component.vendor" value="Apache"/>
366
+ <param pos="0" name="service.component.product" value="Tomcat"/>
367
+ <param pos="0" name="service.component.family" value="Tomcat"/>
368
+ <param pos="1" name="service.component.version"/>
369
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:apache:tomcat:{service.component.version}"/>
370
+ </fingerprint>
371
+ <fingerprint pattern="^Servlet [\d\.]+; JBoss-([\S]+)(?: \(build.*)?/JBossWeb-(\S+)$">
372
+ <description>JBoss with JBossweb</description>
373
+ <example service.version="4.2.3.GA" service.component.version="2.0">Servlet 2.4; JBoss-4.2.3.GA (build: SVNTag=JBoss_4_2_3_GA date=200807181439)/JBossWeb-2.0</example>
374
+ <example service.version="5.0" service.component.version="2.1">Servlet 2.5; JBoss-5.0/JBossWeb-2.1</example>
375
+ <param pos="0" name="service.vendor" value="Red Hat"/>
376
+ <param pos="0" name="service.product" value="JBoss EAP"/>
377
+ <param pos="1" name="service.version"/>
378
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:{service.version}"/>
379
+ <param pos="0" name="service.component.vendor" value="RedHat"/>
380
+ <param pos="0" name="service.component.product" value="JBossWeb"/>
381
+ <param pos="2" name="service.component.version"/>
382
+ </fingerprint>
383
+ <fingerprint pattern="^Servlet\/[\d\.]+; JBossAS-(.*)$">
384
+ <description>JBoss AS</description>
385
+ <example service.version="6">Servlet/3.0; JBossAS-6</example>
386
+ <param pos="0" name="service.vendor" value="Red Hat"/>
387
+ <param pos="0" name="service.product" value="JBoss AS"/>
388
+ <param pos="1" name="service.version"/>
389
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_wildfly_application_server:{service.version}"/>
390
+ </fingerprint>
391
+ <fingerprint pattern="^JBoss-EAP\/(\d+)$">
392
+ <description>JBoss EAP</description>
393
+ <example service.version="7">JBoss-EAP/7</example>
394
+ <param pos="0" name="service.vendor" value="Red Hat"/>
395
+ <param pos="0" name="service.family" value="JBoss"/>
396
+ <param pos="0" name="service.product" value="JBoss EAP"/>
397
+ <param pos="1" name="service.version"/>
398
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:{service.version}"/>
399
+ </fingerprint>
400
+ <fingerprint pattern="^Apache Tomcat/(\d\.[\d.]+)(?:-LE-jdk14)? \(HTTP/1.1 Connector\)$">
401
+ <description>HTTP connector for Apache Tomcat to run as a standalone HTTP server - Apache variant</description>
402
+ <example service.version="4.0.6">Apache Tomcat/4.0.6 (HTTP/1.1 Connector)</example>
403
+ <example service.version="4.1.12">Apache Tomcat/4.1.12 (HTTP/1.1 Connector)</example>
404
+ <example service.version="4.1.27">Apache Tomcat/4.1.27-LE-jdk14 (HTTP/1.1 Connector)</example>
405
+ <param pos="0" name="service.vendor" value="Apache"/>
406
+ <param pos="0" name="service.family" value="Tomcat"/>
407
+ <param pos="0" name="service.product" value="Tomcat"/>
408
+ <param pos="1" name="service.version"/>
409
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
410
+ <param pos="0" name="service.component.vendor" value="Apache"/>
411
+ <param pos="0" name="service.component.family" value="Apache Tomcat HTTP Connector"/>
412
+ <param pos="0" name="service.component.product" value="Apache Tomcat HTTP Connector"/>
413
+ </fingerprint>
414
+ <fingerprint pattern="^Tomcat Web Server/(\d\.[\dA-Z.]+)(?: Final)?(?:\s\(([^\)]+)\))?$">
415
+ <description>HTTP connector for Apache Tomcat to run as a standalone HTTP server</description>
416
+ <example>Tomcat Web Server/3.2.2 (JSP 1.1; Servlet 2.2; Java 1.3.1; Windows 2000 5.0 x86; java.vendor=Sun Microsystems Inc.)</example>
417
+ <example>Tomcat Web Server/3.2.2 (JSP 1.1; Servlet 2.2; Java 1.4.2_13; Windows 2003 5.2 x86; java.vendor=Sun Microsystems Inc.)</example>
418
+ <example>Tomcat Web Server/3.1M1 (JSP 1.1; Servlet 2.2; Java 1.3.1; AIX 5.3 ppc; java.vendor=IBM Corporation)</example>
419
+ <example>Tomcat Web Server/3.3.1 Final ( JSP 1.1; Servlet 2.2 )</example>
420
+ <param pos="0" name="service.vendor" value="Apache"/>
421
+ <param pos="0" name="service.product" value="Tomcat"/>
422
+ <param pos="0" name="service.family" value="Tomcat"/>
423
+ <param pos="1" name="service.version"/>
424
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
425
+ <param pos="2" name="tomcat.info"/>
426
+ </fingerprint>
427
+ <fingerprint pattern="^Tomcat/(\S+)$">
428
+ <description>Apache tomcat with minimal version information</description>
429
+ <example>Tomcat/2.1</example>
430
+ <param pos="0" name="service.vendor" value="Apache"/>
431
+ <param pos="0" name="service.product" value="Tomcat"/>
432
+ <param pos="0" name="service.family" value="Tomcat"/>
433
+ <param pos="1" name="service.version"/>
434
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
435
+ </fingerprint>
436
+ <fingerprint pattern="^PDR-M800/1.0$">
437
+ <description>Merit LILIN PDR M800</description>
438
+ <example>PDR-M800/1.0</example>
439
+ <param pos="0" name="hw.vendor" value="Merit LILIN"/>
440
+ <param pos="0" name="hw.product" value="PDR M800"/>
441
+ <param pos="0" name="hw.device" value="DVR"/>
442
+ </fingerprint>
443
+ <fingerprint pattern="^PHP/(\S+)$">
444
+ <description>PHP</description>
445
+ <example service.component.version="4.4.2-1build1">PHP/4.4.2-1build1</example>
446
+ <example service.component.version="5.1.2">PHP/5.1.2</example>
447
+ <param pos="0" name="service.component.product" value="PHP"/>
448
+ <param pos="1" name="service.component.version"/>
449
+ </fingerprint>
450
+ <!-- TODO: Capture ZendServer version in fingerprint -->
451
+ <fingerprint pattern="^PHP/(\S+)\s+ZendServer/\S+$">
452
+ <description>PHP with ZendServer</description>
453
+ <example service.component.version="5.3.14">PHP/5.3.14 ZendServer/5.0</example>
454
+ <param pos="0" name="service.component.product" value="PHP"/>
455
+ <param pos="1" name="service.component.version"/>
456
+ </fingerprint>
457
+ <fingerprint pattern="^Oracle Application Server Containers for J2EE 10g \(([\d.]+)\)$">
458
+ <description>Oracle Application Server Containers for J2EE 10g</description>
459
+ <example>Oracle Application Server Containers for J2EE 10g (9.0.4.0.0)</example>
460
+ <param pos="0" name="service.vendor" value="Oracle"/>
461
+ <param pos="0" name="service.product" value="Oracle Application Server Containers"/>
462
+ <param pos="0" name="service.family" value="Oracle"/>
463
+ <param pos="1" name="service.version"/>
464
+ </fingerprint>
465
+ <fingerprint pattern="^Oracle Containers for J2EE$">
466
+ <description>Oracle Application Server Containers for J2EE</description>
467
+ <example>Oracle Containers for J2EE</example>
468
+ <param pos="0" name="service.vendor" value="Oracle"/>
469
+ <param pos="0" name="service.product" value="Oracle Application Server Containers"/>
470
+ <param pos="0" name="service.family" value="Oracle"/>
471
+ </fingerprint>
472
+ <fingerprint pattern="^Oracle Application Server/10g \(([\d.]+)\) Apache/([12][\d.]+)\s*(.*)$">
473
+ <description>Oracle Application Server 10g with Apache info (powered by Apache)</description>
474
+ <example>Oracle Application Server/10g (10.1.2) Apache/1.3.34 (Unix) mod_perl/1.29 mod_jk/1.2.14 OracleAS-Web-Cache-10g/10.1.2.0.2 (N;ecid=119642322340,0)</example>
475
+ <param pos="0" name="service.vendor" value="Apache"/>
476
+ <param pos="0" name="service.product" value="HTTPD"/>
477
+ <param pos="0" name="service.family" value="Apache"/>
478
+ <param pos="2" name="service.version"/>
479
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:{service.version}"/>
480
+ <param pos="3" name="apache.info"/>
481
+ <param pos="0" name="apache.variant" value="Oracle"/>
482
+ <param pos="1" name="apache.variant.version"/>
483
+ </fingerprint>
484
+ <!-- TODO: this needs to be improved -->
485
+ <fingerprint pattern="^Oracle-Application-Server-\d+[ig](?:[ /]([\d.]+) (?:\(.*\)|Oracle-HTTP-Server\s*(.*)))?$">
486
+ <description>Oracle Application Server 10g (powered by Apache)</description>
487
+ <example>Oracle-Application-Server-11g</example>
488
+ <example>Oracle-Application-Server-10g</example>
489
+ <example>Oracle-Application-Server-10g/10.1.2.0.2 Oracle-HTTP-Server</example>
490
+ <example>Oracle-Application-Server-10g/10.1.2.2.0 Oracle-HTTP-Server (Unix) mod_plsql/10.1.2.2.0 mod_ossl/10.1.2.0.0 mod_perl/1.29 OracleAS-Web-Cache-10g/10.1.2.0.2 (N;ecid=89116016562,0)</example>
491
+ <example>Oracle-Application-Server-10g/10.1.2.2.0 Oracle-HTTP-Server OracleAS-Web-Cache-10g/10.1.2.2.0 (N;ecid=153541209221,0)</example>
492
+ <example>Oracle-Application-Server-10g/9.0.4.1.0 Oracle-HTTP-Server</example>
493
+ <param pos="0" name="service.vendor" value="Apache"/>
494
+ <param pos="0" name="service.product" value="HTTPD"/>
495
+ <param pos="0" name="service.family" value="Apache"/>
496
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
497
+ <param pos="2" name="apache.info"/>
498
+ <param pos="0" name="apache.variant" value="Oracle"/>
499
+ <param pos="1" name="apache.variant.version"/>
500
+ </fingerprint>
501
+ <fingerprint pattern="^Oracle9iAS/([\d.]+) Oracle HTTP Server\s*(.*)$">
502
+ <description>Oracle 9i Application Server</description>
503
+ <example>Oracle9iAS/9.0.2.3.0 Oracle HTTP Server Oracle9iAS-Web-Cache/9.0.2.3.0 (N)</example>
504
+ <example>Oracle9iAS/9.0.3.1 Oracle HTTP Server Oracle9iAS-Web-Cache/9.0.3.1.0 (N)</example>
505
+ <param pos="0" name="service.vendor" value="Apache"/>
506
+ <param pos="0" name="service.product" value="HTTPD"/>
507
+ <param pos="0" name="service.family" value="Apache"/>
508
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
509
+ <param pos="2" name="apache.info"/>
510
+ <param pos="0" name="apache.variant" value="Oracle"/>
511
+ <param pos="1" name="apache.variant.version"/>
512
+ </fingerprint>
513
+ <fingerprint pattern="^Oracle HTTP Server Powered by Apache/([12][\d.]*)\s*(.*)$">
514
+ <description>Oracle HTTP Server (powered by Apache) - version string variant</description>
515
+ <example>Oracle HTTP Server Powered by Apache/1.3.12 (Unix) ApacheJServ/1.1 mod_ssl/2.6.4 OpenSSL/0.9.5a</example>
516
+ <example>Oracle HTTP Server Powered by Apache/1.3.19 (Unix) mod_plsql/3.0.9.8.3b PHP/4.3.10 mod_fastcgi/2.2.10 mod_perl/1.25 mod_oprocmgr/1.0</example>
517
+ <example>Oracle HTTP Server Powered by Apache/1.3.19 (Win32) mod_ssl/2.8.1 OpenSSL/0.9.5a mod_fastcgi/2.2.10 mod_oprocmgr/1.0 mod_perl/1.25</example>
518
+ <param pos="0" name="service.vendor" value="Apache"/>
519
+ <param pos="0" name="service.product" value="HTTPD"/>
520
+ <param pos="0" name="service.family" value="Apache"/>
521
+ <param pos="1" name="service.version"/>
522
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:{service.version}"/>
523
+ <param pos="2" name="apache.info"/>
524
+ <param pos="0" name="apache.variant" value="Oracle"/>
525
+ </fingerprint>
526
+ <fingerprint pattern="^Oracle HTTP Server Powered by Apache$">
527
+ <description>Oracle HTTP Server (powered by Apache)</description>
528
+ <example>Oracle HTTP Server Powered by Apache</example>
529
+ <param pos="0" name="service.vendor" value="Apache"/>
530
+ <param pos="0" name="service.product" value="HTTPD"/>
531
+ <param pos="0" name="service.family" value="Apache"/>
532
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
533
+ <param pos="0" name="apache.variant" value="Oracle"/>
534
+ </fingerprint>
535
+ <fingerprint pattern="^HP Apache-based Web Server/([012][\d.]*)\s*\(Unix\)\s*(.*)$">
536
+ <description>Apache running on HP-UX</description>
537
+ <example>HP Apache-based Web Server/1.3.26 (Unix) mod_ssl/2.8.9 OpenSSL/0.9.6c</example>
538
+ <example>HP Apache-based Web Server/1.3.26 (Unix)</example>
539
+ <param pos="0" name="service.vendor" value="Apache"/>
540
+ <param pos="0" name="service.product" value="HTTPD"/>
541
+ <param pos="0" name="service.family" value="Apache"/>
542
+ <param pos="1" name="service.version"/>
543
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:{service.version}"/>
544
+ <param pos="2" name="apache.info"/>
545
+ <param pos="0" name="apache.variant" value="HP-UX"/>
546
+ <param pos="0" name="os.vendor" value="HP"/>
547
+ <param pos="0" name="os.family" value="HP-UX"/>
548
+ <param pos="0" name="os.product" value="HP-UX"/>
549
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:-"/>
550
+ </fingerprint>
551
+ <fingerprint pattern="^CompaqHTTPServer/([0-9.]*)(?: HP System Management Homepage(?:/.*)?)?$">
552
+ <description>HP/Compaq HTTP Server</description>
553
+ <example>CompaqHTTPServer/9.9 HP System Management Homepage/2.1.5.146</example>
554
+ <example>CompaqHTTPServer/9.9 HP System Management Homepage/3.0.1.73 httpd/2.2.6+</example>
555
+ <example>CompaqHTTPServer/9.9 HP System Management Homepage/6.0.0.96 httpd/2.2.6+</example>
556
+ <example>CompaqHTTPServer/9.9 HP System Management Homepage</example>
557
+ <example>CompaqHTTPServer/4.1</example>
558
+ <param pos="0" name="service.vendor" value="HP"/>
559
+ <param pos="0" name="service.product" value="HTTP"/>
560
+ <param pos="0" name="service.family" value="Compaq HTTP Server"/>
561
+ <param pos="1" name="service.version"/>
562
+ </fingerprint>
563
+ <fingerprint pattern="^HPSMH$">
564
+ <description>HP System Management Homepage (SMH)</description>
565
+ <example>HPSMH</example>
566
+ <param pos="0" name="service.vendor" value="HP"/>
567
+ <param pos="0" name="service.family" value="SMH"/>
568
+ <param pos="0" name="service.product" value="SMH"/>
569
+ </fingerprint>
570
+ <fingerprint pattern="(?i)^eHTTP[/ ]v?(\d+\.\d+)">
571
+ <description>HTTP Server present on seemingly only HP ProCurve network devices</description>
572
+ <example service.version="1.1">EHTTP/1.1</example>
573
+ <example service.version="2.0">eHTTP v2.0</example>
574
+ <param pos="0" name="service.vendor" value="HP"/>
575
+ <param pos="0" name="service.product" value="HTTP"/>
576
+ <param pos="0" name="service.family" value="ProCurve"/>
577
+ <param pos="1" name="service.version"/>
578
+ <param pos="0" name="os.vendor" value="HP"/>
579
+ <param pos="0" name="os.family" value="ProCurve"/>
580
+ <param pos="0" name="os.certainty" value="0.75"/>
581
+ </fingerprint>
582
+ <fingerprint pattern="^(?:BBC \d+\.\d+\.\d+\.?\d*; )?(?:com.hp.openview.)?[c|C]oda (\d+\.\d+\.\d+\.?\d*)$">
583
+ <description>HP Openview Coda (Communications Daemon)</description>
584
+ <example service.component.version="0.0.1">com.hp.openview.Coda 0.0.1</example>
585
+ <example service.component.version="10.00.123">BBC 05.20.050; coda 10.00.123</example>
586
+ <example service.component.version="0.0.1">BBC 2.6.0.7; com.hp.openview.Coda 0.0.1</example>
587
+ <param pos="0" name="service.vendor" value="HP"/>
588
+ <param pos="0" name="service.family" value="OpenView"/>
589
+ <param pos="0" name="service.product" value="OpenView"/>
590
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:openview:-"/>
591
+ <param pos="0" name="service.component.vendor" value="HP"/>
592
+ <param pos="0" name="service.component.family" value="OpenView"/>
593
+ <param pos="0" name="service.component.product" value="CODA"/>
594
+ <param pos="1" name="service.component.version"/>
595
+ </fingerprint>
596
+ <fingerprint pattern="^BBC \d+\.\d+\.\d+\.?\d*; ovbbcrcp (\d+\.\d+\.\d+\.?\d*)$">
597
+ <description>OpenView Reverse Channel Proxy (RCP)</description>
598
+ <example service.component.version="11.00.044">BBC 11.00.044; ovbbcrcp 11.00.044</example>
599
+ <param pos="0" name="service.vendor" value="HP"/>
600
+ <param pos="0" name="service.family" value="OpenView"/>
601
+ <param pos="0" name="service.product" value="OpenView"/>
602
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:openview:-"/>
603
+ <param pos="0" name="service.component.vendor" value="HP"/>
604
+ <param pos="0" name="service.component.family" value="OpenView"/>
605
+ <param pos="0" name="service.component.product" value="Reverse Channel Proxy"/>
606
+ <param pos="1" name="service.component.version"/>
607
+ </fingerprint>
608
+ <fingerprint pattern="^(?:BBC \d+\.\d+\.\d+\.?\d*; )?com.hp.openview.bbc.LLBServer (\d+\.\d+\.\d+\.?\d*)$">
609
+ <description>HP Openview LLBServer (Local Location Broker)</description>
610
+ <example service.component.version="2.6.8.1">com.hp.openview.bbc.LLBServer 2.6.8.1</example>
611
+ <example service.component.version="2.6.0.7">BBC 2.6.0.7; com.hp.openview.bbc.LLBServer 2.6.0.7</example>
612
+ <param pos="0" name="service.vendor" value="HP"/>
613
+ <param pos="0" name="service.family" value="OpenView"/>
614
+ <param pos="0" name="service.product" value="OpenView"/>
615
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:openview:-"/>
616
+ <param pos="0" name="service.component.vendor" value="HP"/>
617
+ <param pos="0" name="service.component.family" value="OpenView"/>
618
+ <param pos="0" name="service.component.product" value="LLBServer"/>
619
+ <param pos="1" name="service.component.version"/>
620
+ </fingerprint>
621
+ <fingerprint pattern="^BBC \d+\.\d+\.\d+; ovbbccb (\d+\.\d+\.\d+)$">
622
+ <description>OpenView Communication Broker (ovbbccb)</description>
623
+ <example service.component.version="06.00.083">BBC 06.00.083; ovbbccb 06.00.083</example>
624
+ <example service.component.version="11.10.035">BBC 11.10.035; ovbbccb 11.10.035</example>
625
+ <param pos="0" name="service.vendor" value="HP"/>
626
+ <param pos="0" name="service.family" value="OpenView"/>
627
+ <param pos="0" name="service.product" value="OpenView"/>
628
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:openview:-"/>
629
+ <param pos="0" name="service.component.vendor" value="HP"/>
630
+ <param pos="0" name="service.component.family" value="OpenView"/>
631
+ <param pos="0" name="service.component.product" value="Communication Broker"/>
632
+ <param pos="1" name="service.component.version"/>
633
+ </fingerprint>
634
+ <fingerprint pattern="^BBC \d+\.\d+\.\d+; ovbbccb unknown version$">
635
+ <description>OpenView Communication Broker (ovbbccb) with no version</description>
636
+ <example>BBC 11.13.007; ovbbccb unknown version</example>
637
+ <param pos="0" name="service.vendor" value="HP"/>
638
+ <param pos="0" name="service.family" value="OpenView"/>
639
+ <param pos="0" name="service.product" value="OpenView"/>
640
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:openview:-"/>
641
+ <param pos="0" name="service.component.vendor" value="HP"/>
642
+ <param pos="0" name="service.component.family" value="OpenView"/>
643
+ <param pos="0" name="service.component.product" value="Communication Broker"/>
644
+ </fingerprint>
645
+ <fingerprint pattern="^UOS$">
646
+ <description>HTTP Server that appears unique to Managment Console on HP TippingPoint IPS Devices</description>
647
+ <example>UOS</example>
648
+ <param pos="0" name="service.vendor" value="HP"/>
649
+ <param pos="0" name="service.product" value="HTTP"/>
650
+ <param pos="0" name="service.family" value="TippingPoint"/>
651
+ <param pos="0" name="os.vendor" value="HP"/>
652
+ <param pos="0" name="os.family" value="TippingPoint"/>
653
+ <param pos="0" name="os.device" value="IPS"/>
654
+ <param pos="0" name="hw.vendor" value="HP"/>
655
+ <param pos="0" name="hw.family" value="TippingPoint"/>
656
+ <param pos="0" name="hw.device" value="IPS"/>
657
+ </fingerprint>
658
+ <fingerprint pattern="^uc-httpd[ \/]([\d.]+)$">
659
+ <description>Xiongmai Tech uc-httpd</description>
660
+ <example service.version="1.0.0">uc-httpd 1.0.0</example>
661
+ <example service.version="1.0.0">uc-httpd/1.0.0</example>
662
+ <param pos="0" name="service.vendor" value="Xiongmai Tech"/>
663
+ <param pos="0" name="service.product" value="uc-httpd"/>
664
+ <param pos="1" name="service.version"/>
665
+ </fingerprint>
666
+ <fingerprint pattern="^micro_httpd$">
667
+ <description>ACME micro_httpd</description>
668
+ <example>micro_httpd</example>
669
+ <param pos="0" name="service.vendor" value="ACME"/>
670
+ <param pos="0" name="service.product" value="micro_httpd"/>
671
+ <param pos="0" name="service.cpe23" value="cpe:/a:acme:micro_httpd:-"/>
672
+ </fingerprint>
673
+ <fingerprint pattern="^mini_httpd$">
674
+ <description>ACME mini_httpd</description>
675
+ <example>mini_httpd</example>
676
+ <param pos="0" name="service.vendor" value="ACME"/>
677
+ <param pos="0" name="service.product" value="mini_httpd"/>
678
+ <param pos="0" name="service.cpe23" value="cpe:/a:acme:mini_httpd:-"/>
679
+ </fingerprint>
680
+ <fingerprint pattern="^LiteSpeed\/?(:?[\d.]+)?(?: \S+)?">
681
+ <description>LiteSpeed</description>
682
+ <example>LiteSpeed</example>
683
+ <example>LiteSpeed/5.2.8 Enterprise</example>
684
+ <param pos="0" name="service.vendor" value="LiteSpeed Technologies"/>
685
+ <param pos="0" name="service.product" value="LiteSpeed Web Server"/>
686
+ <param pos="1" name="service.version"/>
687
+ </fingerprint>
688
+ <fingerprint pattern="^IdeaWebServer\/v?([\d.]+)$">
689
+ <description>Idea Web Server</description>
690
+ <example service.version="0.83.74">IdeaWebServer/0.83.74</example>
691
+ <example service.version="0.70">IdeaWebServer/v0.70</example>
692
+ <param pos="0" name="service.vendor" value="home.pl"/>
693
+ <param pos="0" name="service.product" value="Idea Web Server"/>
694
+ <param pos="1" name="service.version"/>
695
+ </fingerprint>
696
+ <fingerprint pattern="^openresty\/?(:?[\d.]+)?$">
697
+ <description>OpenResty OpenResty</description>
698
+ <example>openresty</example>
699
+ <example service.version="1.13.6.2">openresty/1.13.6.2</example>
700
+ <param pos="0" name="service.vendor" value="OpenResty"/>
701
+ <param pos="0" name="service.product" value="OpenResty"/>
702
+ <param pos="1" name="service.version"/>
703
+ </fingerprint>
704
+ <fingerprint pattern="^gunicorn\/([\d.]+)+$">
705
+ <description>Gunicorn Gunicorn</description>
706
+ <example service.version="19.7.1">gunicorn/19.7.1</example>
707
+ <param pos="0" name="service.vendor" value="Gunicorn"/>
708
+ <param pos="0" name="service.product" value="Gunicorn"/>
709
+ <param pos="1" name="service.version"/>
710
+ </fingerprint>
711
+ <fingerprint pattern="^Serv-U\/([\d.]+)$">
712
+ <description>Serv-U HTTP interface</description>
713
+ <example service.version="15.1.6.31">Serv-U/15.1.6.31</example>
714
+ <param pos="0" name="service.vendor" value="SolarWinds"/>
715
+ <param pos="0" name="service.family" value="Serv-U"/>
716
+ <param pos="0" name="service.product" value="FTP Server"/>
717
+ <param pos="1" name="service.version"/>
718
+ </fingerprint>
719
+ <fingerprint pattern="^(?i)Linux UPnP/1.0 Sonos/([\d\.\-a-z]+) \((BR\d+)\)$">
720
+ <description>Sonos Bridge/ZoneBridge</description>
721
+ <example hw.model="BR100" hw.version="47.2-59120">Linux UPnP/1.0 Sonos/47.2-59120 (BR100)</example>
722
+ <param pos="0" name="hw.vendor" value="Sonos"/>
723
+ <param pos="0" name="hw.product" value="Bridge"/>
724
+ <param pos="0" name="hw.device" value="Network Audio"/>
725
+ <param pos="1" name="hw.version"/>
726
+ <param pos="2" name="hw.model"/>
727
+ <param pos="0" name="os.product" value="Linux"/>
728
+ </fingerprint>
729
+ <fingerprint pattern="^(?i)Linux UPnP/1.0 Sonos/([\d\.\-a-z]+) \(ANVIL\)$">
730
+ <description>Sonos Subwoofer Speaker</description>
731
+ <example>Linux UPnP/1.0 Sonos/31.3-22220 (ANVIL)</example>
732
+ <param pos="0" name="hw.vendor" value="Sonos"/>
733
+ <param pos="0" name="hw.product" value="Sub"/>
734
+ <param pos="0" name="hw.device" value="Network Audio"/>
735
+ <param pos="1" name="hw.version"/>
736
+ <param pos="0" name="os.product" value="Linux"/>
737
+ </fingerprint>
738
+ <fingerprint pattern="(?i)^Linux UPnP/1.0 Sonos/([\d\.\-a-z]+) \(ZP(S?\d+)\)$">
739
+ <description>Sonos PLAY/ZonePlayer wireless speaker</description>
740
+ <example hw.model="S1" hw.version="39.2-47040c">Linux UPnP/1.0 Sonos/39.2-47040c (ZPS1)</example>
741
+ <example hw.model="S3" hw.version="47.2-59120">Linux UPnP/1.0 Sonos/47.2-59120 (ZPS3)</example>
742
+ <example hw.model="120" hw.version="34.16-37101">Linux UPnP/1.0 Sonos/34.16-37101 (ZP120)</example>
743
+ <param pos="0" name="hw.vendor" value="Sonos"/>
744
+ <param pos="0" name="hw.product" value="PLAY"/>
745
+ <param pos="0" name="hw.device" value="Network Audio"/>
746
+ <param pos="1" name="hw.version"/>
747
+ <param pos="2" name="hw.model"/>
748
+ <param pos="0" name="os.product" value="Linux"/>
749
+ </fingerprint>
750
+ <fingerprint pattern="(?i)^Linux UPnP/1.0 Sonos/([\d\.\-a-z]+) \(WD(\d+)\)$">
751
+ <description>Sonos Wireless Dock</description>
752
+ <example hw.model="100" hw.version="36.4-41270">Linux UPnP/1.0 Sonos/36.4-41270 (WD100)</example>
753
+ <param pos="0" name="hw.vendor" value="Sonos"/>
754
+ <param pos="0" name="hw.product" value="Wireless Dock"/>
755
+ <param pos="0" name="hw.device" value="Network Audio"/>
756
+ <param pos="1" name="hw.version"/>
757
+ <param pos="2" name="hw.model"/>
758
+ <param pos="0" name="os.product" value="Linux"/>
759
+ </fingerprint>
760
+ <fingerprint pattern="^Varnish(?:[- ]Cache)?$">
761
+ <description>Varnish Cache</description>
762
+ <example>Varnish</example>
763
+ <example>Varnish-Cache</example>
764
+ <param pos="0" name="service.vendor" value="Varnish-cache"/>
765
+ <param pos="0" name="service.family" value="Varnish"/>
766
+ <param pos="0" name="service.product" value="Varnish"/>
767
+ <param pos="0" name="service.cpe23" value="cpe:/a:varnish-cache:varnish:-"/>
768
+ </fingerprint>
769
+ <fingerprint pattern="^Tengine\/?(:?[\d.]+)?$">
770
+ <description>Tengine</description>
771
+ <example>Tengine</example>
772
+ <example service.version="2.0.0">Tengine/2.0.0</example>
773
+ <param pos="0" name="service.vendor" value="Taobao"/>
774
+ <param pos="0" name="service.family" value="Tengine"/>
775
+ <param pos="0" name="service.product" value="Tengine"/>
776
+ <param pos="1" name="service.version"/>
777
+ </fingerprint>
778
+ <fingerprint pattern="^Mikrotik HttpProxy$">
779
+ <description>MikroTik RouterOS - Proxy service</description>
780
+ <example>Mikrotik HttpProxy</example>
781
+ <param pos="0" name="service.vendor" value="MikroTik"/>
782
+ <param pos="0" name="service.product" value="HttpProxy"/>
783
+ <param pos="0" name="os.vendor" value="MikroTik"/>
784
+ <param pos="0" name="os.device" value="Router"/>
785
+ <param pos="0" name="os.product" value="RouterOS"/>
786
+ <param pos="0" name="os.cpe23" value="cpe:/o:mikrotik:routeros:-"/>
787
+ <param pos="0" name="hw.vendor" value="MikroTik"/>
788
+ <param pos="0" name="hw.device" value="Router"/>
789
+ </fingerprint>
790
+ <fingerprint pattern="^Helix Server Version ([0-9.]*) \(win32\) \(RealServer compatible\)$">
791
+ <description>RealMedia Helix Server - Windows</description>
792
+ <example>Helix Server Version 9.0.4.960 (win32) (RealServer compatible)</example>
793
+ <param pos="0" name="os.vendor" value="Microsoft"/>
794
+ <param pos="0" name="os.family" value="Windows"/>
795
+ <param pos="0" name="os.product" value="Windows"/>
796
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
797
+ <param pos="0" name="service.vendor" value="RealMedia"/>
798
+ <param pos="0" name="service.product" value="HTTP"/>
799
+ <param pos="0" name="service.family" value="Helix Server"/>
800
+ <param pos="1" name="service.version"/>
801
+ </fingerprint>
802
+ <fingerprint pattern="^Helix Server Version ([0-9.]*) \(linux-\S+\) \(RealServer compatible\)$">
803
+ <description>RealMedia Helix Server - Linux</description>
804
+ <example>Helix Server Version 9.0.4.960 (linux-2.2-libc6-i586-server) (RealServer compatible)</example>
805
+ <param pos="0" name="os.family" value="Linux"/>
806
+ <param pos="0" name="os.product" value="Linux"/>
807
+ <param pos="0" name="service.vendor" value="RealMedia"/>
808
+ <param pos="0" name="service.product" value="HTTP"/>
809
+ <param pos="0" name="service.family" value="Helix Server"/>
810
+ <param pos="1" name="service.version"/>
811
+ </fingerprint>
812
+ <fingerprint pattern="^ReeCam IP Camera$">
813
+ <description>Shenzhen ReeCam cameras</description>
814
+ <example>ReeCam IP Camera</example>
815
+ <param pos="0" name="hw.vendor" value="Shenzhen Reecam Tech. Ltd."/>
816
+ <param pos="0" name="hw.product" value="ReeCam"/>
817
+ <param pos="0" name="hw.device" value="Web cam"/>
818
+ </fingerprint>
819
+ <fingerprint pattern="^Netwave IP Camera$">
820
+ <description>Netwave cameras</description>
821
+ <example>Netwave IP Camera</example>
822
+ <param pos="0" name="hw.vendor" value="Netwave"/>
823
+ <param pos="0" name="hw.device" value="Web cam"/>
824
+ </fingerprint>
825
+ <fingerprint pattern="^Cougar/([0-9.]*)$">
826
+ <description>Windows Media Services (older versions)</description>
827
+ <example>Cougar/9.01.01.3841</example>
828
+ <param pos="0" name="os.vendor" value="Microsoft"/>
829
+ <param pos="0" name="os.family" value="Windows"/>
830
+ <param pos="0" name="os.product" value="Windows"/>
831
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
832
+ <param pos="0" name="service.vendor" value="Microsoft"/>
833
+ <param pos="0" name="service.product" value="HTTP"/>
834
+ <param pos="0" name="service.family" value="Windows Media Services"/>
835
+ <param pos="1" name="service.version"/>
836
+ </fingerprint>
837
+ <fingerprint pattern="^WMServer/([0-9.]*)$">
838
+ <description>Windows Media Services (newer versions)</description>
839
+ <example>WMServer/9.1.1.3841</example>
840
+ <param pos="0" name="os.vendor" value="Microsoft"/>
841
+ <param pos="0" name="os.family" value="Windows"/>
842
+ <param pos="0" name="os.product" value="Windows"/>
843
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
844
+ <param pos="0" name="service.vendor" value="Microsoft"/>
845
+ <param pos="0" name="service.product" value="HTTP"/>
846
+ <param pos="0" name="service.family" value="Windows Media Services"/>
847
+ <param pos="1" name="service.version"/>
848
+ </fingerprint>
849
+ <fingerprint pattern="^Microsoft-HTTPAPI/(?:[0-9\.]*)$">
850
+ <description>Generic Microsoft HTTP service</description>
851
+ <example>Microsoft-HTTPAPI/2.0</example>
852
+ <param pos="0" name="os.vendor" value="Microsoft"/>
853
+ <param pos="0" name="os.family" value="Windows"/>
854
+ <param pos="0" name="os.product" value="Windows"/>
855
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
856
+ </fingerprint>
857
+ <fingerprint pattern="(?i)^(?:(?:Cube|(?:Mini )?Dome|Day/Night|PAN/?Tilt|POE|IR|HD|H.264|Surveillance|With|Wired|Wireless(?: N)?|Network|Internet|(?:IP(?:[\s_-])?)?Cameras?[\s_]*\d*) ?){1,5}?(?: Login)?$">
858
+ <description>Generic IP Cameras</description>
859
+ <example>camera</example>
860
+ <example>IPCamera Login</example>
861
+ <example>Mini Dome IP Camera</example>
862
+ <param pos="0" name="hw.device" value="Web cam"/>
863
+ </fingerprint>
864
+ <fingerprint pattern="^ASP.NET$">
865
+ <description>Something written in ASP.NET</description>
866
+ <example>ASP.NET</example>
867
+ <param pos="0" name="os.vendor" value="Microsoft"/>
868
+ <param pos="0" name="os.family" value="Windows"/>
869
+ <param pos="0" name="os.product" value="Windows"/>
870
+ <param pos="0" name="os.certainty" value="0.6"/>
871
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
872
+ </fingerprint>
873
+ <fingerprint pattern="^[Xx]itami$">
874
+ <description>Xitami web server</description>
875
+ <example>Xitami</example>
876
+ <param pos="0" name="service.vendor" value="Xitami"/>
877
+ <param pos="0" name="service.product" value="HTTP"/>
878
+ <param pos="0" name="service.family" value="Webserver"/>
879
+ </fingerprint>
880
+ <fingerprint pattern="^VCS-VIDOS-NVR$">
881
+ <description>Bosch VCS VIDOS-NVR network video recorder</description>
882
+ <example>VCS-VIDOS-NVR</example>
883
+ <param pos="0" name="os.vendor" value="Bosch"/>
884
+ <param pos="0" name="os.device" value="DVR"/>
885
+ <param pos="0" name="os.product" value="VIDOS-NVR"/>
886
+ <param pos="0" name="hw.vendor" value="Bosch"/>
887
+ <param pos="0" name="hw.device" value="DVR"/>
888
+ </fingerprint>
889
+ <fingerprint pattern="^FUHO-DVR$">
890
+ <description>FUHO Surveillance/DVR</description>
891
+ <example>FUHO-DVR</example>
892
+ <param pos="0" name="hw.vendor" value="FUHO"/>
893
+ <param pos="0" name="hw.device" value="DVR"/>
894
+ </fingerprint>
895
+ <fingerprint pattern="^HeiTel GmbH Web Server \[\S+\]$">
896
+ <description>HeiTel Digital Video Recorder</description>
897
+ <example>HeiTel GmbH Web Server [V1.15/V1.14/V1.3]</example>
898
+ <example>HeiTel GmbH Web Server [V1.26/V1.15/V1.7]</example>
899
+ <param pos="0" name="os.vendor" value="HeiTel"/>
900
+ <param pos="0" name="os.device" value="DVR"/>
901
+ <param pos="0" name="hw.vendor" value="HeiTel"/>
902
+ <param pos="0" name="hw.device" value="DVR"/>
903
+ </fingerprint>
904
+ <fingerprint pattern="^MiniServ/([0-9.]*)$">
905
+ <description>mini_httpd</description>
906
+ <example>MiniServ/0.01</example>
907
+ <param pos="0" name="service.product" value="HTTP"/>
908
+ <param pos="0" name="service.family" value="WebServer"/>
909
+ <param pos="1" name="service.version"/>
910
+ </fingerprint>
911
+ <fingerprint pattern="^IBM HTTP Server/(V\d+R\d+M\d+)$">
912
+ <description>IBM HTTP server running on AS/400</description>
913
+ <example>IBM HTTP Server/V5R3M0</example>
914
+ <param pos="0" name="service.vendor" value="IBM"/>
915
+ <param pos="0" name="service.product" value="HTTP Server"/>
916
+ <param pos="0" name="service.family" value="HTTP Server"/>
917
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:http_server:-"/>
918
+ <param pos="0" name="os.certainty" value="0.9"/>
919
+ <param pos="0" name="os.vendor" value="IBM"/>
920
+ <param pos="0" name="os.family" value="OS/400"/>
921
+ <param pos="0" name="os.product" value="OS/400"/>
922
+ <param pos="1" name="os.version"/>
923
+ </fingerprint>
924
+ <fingerprint pattern="^(?:IBM_HTTP_Server|IBM_HTTP_SERVER)/([\w.-]+)\s+Apache/([12][\d.]+)\s*(.*)$">
925
+ <description>IBM HTTP Server</description>
926
+ <example>IBM_HTTP_SERVER/1.3.19.2 Apache/1.3.20 (Win32)</example>
927
+ <example>IBM_HTTP_SERVER/1.3.28.1-PK16139 Apache/1.3.28 (Unix)</example>
928
+ <example>IBM_HTTP_Server/1.3.12 Apache/1.3.12 (Unix)</example>
929
+ <example>IBM_HTTP_Server/2.0.42.2-PK25355 Apache/2.0.47 (Unix) DAV/2</example>
930
+ <example>IBM_HTTP_Server/2.0.47.1-PK01070 Apache/2.0.47 (Win32) PHP/5.0.4</example>
931
+ <example>IBM_HTTP_Server/2.0.47.1 Apache/2.0.47 (Unix) DAV/2 PHP/4.3.8</example>
932
+ <example>IBM_HTTP_Server/6.0 Apache/2.0.47 (Unix) DAV/2</example>
933
+ <example>IBM_HTTP_Server/6.0.2 Apache/2.0.47 (Unix)</example>
934
+ <example>IBM_HTTP_Server/6.0.2.19 Apache/2.0.47 (Unix)</example>
935
+ <example>IBM_HTTP_Server/6.1 Apache/2.0.47 (Win32) PHP/5.1.1</example>
936
+ <param pos="0" name="service.vendor" value="Apache"/>
937
+ <param pos="0" name="service.product" value="HTTPD"/>
938
+ <param pos="0" name="service.family" value="Apache"/>
939
+ <param pos="2" name="service.version"/>
940
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:{service.version}"/>
941
+ <param pos="3" name="apache.info"/>
942
+ <param pos="0" name="apache.variant" value="IBM"/>
943
+ <param pos="1" name="apache.variant.version"/>
944
+ </fingerprint>
945
+ <fingerprint pattern="(?i)^(?:IBM_HTTP_SERVER|IBM-HTTP-SERVER)/(\S+)(?: \(\S+\))?$">
946
+ <description>IBM HTTP Server with hardly useful version info</description>
947
+ <example>IBM-HTTP-Server/1.0</example>
948
+ <example>IBM_HTTP_Server/7.0.0.9 (Unix)</example>
949
+ <param pos="0" name="service.vendor" value="Apache"/>
950
+ <param pos="0" name="service.product" value="HTTPD"/>
951
+ <param pos="0" name="service.family" value="Apache"/>
952
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
953
+ <param pos="0" name="apache.variant" value="IBM"/>
954
+ <param pos="1" name="apache.variant.version"/>
955
+ </fingerprint>
956
+ <fingerprint pattern="(?i)^(?:IBM_HTTP_SERVER|IBM-HTTP-SERVER)$">
957
+ <description>IBM HTTP Server with no version info</description>
958
+ <example>IBM_HTTP_SERVER</example>
959
+ <example>IBM_HTTP_Server</example>
960
+ <param pos="0" name="service.vendor" value="Apache"/>
961
+ <param pos="0" name="service.product" value="HTTPD"/>
962
+ <param pos="0" name="service.family" value="Apache"/>
963
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
964
+ <param pos="0" name="apache.variant" value="IBM"/>
965
+ </fingerprint>
966
+ <!--
967
+ Netscape/Sun's Application Server
968
+ -->
969
+ <fingerprint pattern="^Sun[ -]Java[ -]System[ /]Application[ -]Server( \d\.[\d_]+)?$">
970
+ <description>Sun Java System Application Server (formerly iPlanet Application Server, Sun ONE Application Server)</description>
971
+ <example>Sun-Java-System/Application-Server</example>
972
+ <param pos="0" name="service.vendor" value="Sun"/>
973
+ <param pos="0" name="service.family" value="Java System Application Server"/>
974
+ <param pos="0" name="service.product" value="Java System Application Server"/>
975
+ <param pos="1" name="service.version"/>
976
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_application_server:{service.version}"/>
977
+ </fingerprint>
978
+ <fingerprint pattern="^Sun[ -]Java[ -]System[ /]Application[ -]Server Platform Edition (\d\.[\d_]+)?$">
979
+ <description>Sun Java System Application Server Platform Edition(formerly iPlanet Application Server, Sun ONE Application Server)</description>
980
+ <example>Sun Java System Application Server Platform Edition 9.0</example>
981
+ <example service.version="9.0_01">Sun Java System Application Server Platform Edition 9.0_01</example>
982
+ <param pos="0" name="service.vendor" value="Sun"/>
983
+ <param pos="0" name="service.family" value="Java System Application Server"/>
984
+ <param pos="0" name="service.product" value="Java System Application Server Platform Edition"/>
985
+ <param pos="1" name="service.version"/>
986
+ </fingerprint>
987
+ <fingerprint pattern="^Sun GlassFish Enterprise Server v(\S+)$">
988
+ <description>Glassfish with version information</description>
989
+ <example>Sun GlassFish Enterprise Server v2.1</example>
990
+ <param pos="0" name="service.vendor" value="Sun"/>
991
+ <param pos="0" name="service.product" value="GlassFish"/>
992
+ <param pos="1" name="service.version"/>
993
+ </fingerprint>
994
+ <fingerprint pattern="^GlassFish$">
995
+ <description>Glassfish without version information</description>
996
+ <example>GlassFish</example>
997
+ <param pos="0" name="service.vendor" value="Sun"/>
998
+ <param pos="0" name="service.product" value="GlassFish"/>
999
+ </fingerprint>
1000
+ <!--
1001
+ Netscape/Sun's Web Server
1002
+ -->
1003
+ <fingerprint pattern="^Netscape-Enterprise/(\d+\.[\w\s.]+)$">
1004
+ <description>Netscape Enterprise Server (subsequently iPlanet Web Server, Sun ONE Web Server, presently Sun Java System Web Server)</description>
1005
+ <example>Netscape-Enterprise/3.5.1</example>
1006
+ <example>Netscape-Enterprise/3.6 SP3</example>
1007
+ <example>Netscape-Enterprise/6.0</example>
1008
+ <param pos="0" name="service.vendor" value="Sun"/>
1009
+ <param pos="0" name="service.family" value="Java System Web Server"/>
1010
+ <param pos="0" name="service.product" value="Java System Web Server"/>
1011
+ <param pos="1" name="service.version"/>
1012
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_web_server:{service.version}"/>
1013
+ </fingerprint>
1014
+ <fingerprint pattern="^(?:Sun-Java-System-Web-Server|Sun-ONE-Web-Server)/(?:\d\.[\d_]+)$">
1015
+ <description>Sun Java System Web Server (formerly Netscape Enterprise Server, iPlanet Web Server and Sun ONE Web Server)</description>
1016
+ <example>Sun-Java-System-Web-Server/7.0</example>
1017
+ <example>Sun-ONE-Web-Server/6.1</example>
1018
+ <param pos="0" name="service.vendor" value="Sun"/>
1019
+ <param pos="0" name="service.family" value="Java System Web Server"/>
1020
+ <param pos="0" name="service.product" value="Java System Web Server"/>
1021
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_web_server:-"/>
1022
+ </fingerprint>
1023
+ <!--
1024
+ Netscape/Sun's Web Proxy Server
1025
+ -->
1026
+ <!--
1027
+ Header seen on admin port 8081 (not regular proxy port 8080) of Sun Java
1028
+ System Web Proxy Server 3.6 Service Pack 4 running on Windows:
1029
+
1030
+ Server: Netscape-Administrator/3.54
1031
+
1032
+ However this header might be used by Web Server too, so it might be
1033
+ impossible to differentiate Web Server from Web Proxy Server. Also note how
1034
+ there seems to be no relation between 3.54 and "3.6 Service Pack 4".
1035
+ -->
1036
+ <fingerprint pattern="^iPlanet-Web-Proxy-Server/(.*)$">
1037
+ <description>iPlanet WebProxy Server (subsequently Sun ONE WebProxy Server, presently Sun Java System Web Proxy Server)</description>
1038
+ <example>iPlanet-Web-Proxy-Server/3.6</example>
1039
+ <example service.version="3.6-SP5">iPlanet-Web-Proxy-Server/3.6-SP5</example>
1040
+ <param pos="0" name="service.vendor" value="Sun"/>
1041
+ <param pos="0" name="service.family" value="Java System Web Proxy Server"/>
1042
+ <param pos="0" name="service.product" value="Java System Web Proxy Server"/>
1043
+ <param pos="1" name="service.version"/>
1044
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_web_proxy_server:{service.version}"/>
1045
+ </fingerprint>
1046
+ <fingerprint pattern="^Sun-ONE-Web-Proxy-Server/(.*)$">
1047
+ <description>Sun ONE WebProxy Server (formerly iPlanet WebProxy Server, presently Sun Java System Web Proxy Server)</description>
1048
+ <example service.version="3.6-SP4">Sun-ONE-Web-Proxy-Server/3.6-SP4</example>
1049
+ <param pos="0" name="service.vendor" value="Sun"/>
1050
+ <param pos="0" name="service.family" value="Java System Web Proxy Server"/>
1051
+ <param pos="0" name="service.product" value="Java System Web Proxy Server"/>
1052
+ <param pos="1" name="service.version"/>
1053
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_web_proxy_server:{service.version}"/>
1054
+ </fingerprint>
1055
+ <fingerprint pattern="^Sun-Java-System-Web-Proxy-Server/(\d\.[\d.]+)$">
1056
+ <description>Sun Java System Web Proxy Server (formerly iPlanet WebProxy Server, Sun ONE WebProxy Server)</description>
1057
+ <example>Sun-Java-System-Web-Proxy-Server/4.0.2</example>
1058
+ <example>Sun-Java-System-Web-Proxy-Server/4.0</example>
1059
+ <param pos="0" name="service.vendor" value="Sun"/>
1060
+ <param pos="0" name="service.family" value="Java System Web Proxy Server"/>
1061
+ <param pos="0" name="service.product" value="Java System Web Proxy Server"/>
1062
+ <param pos="1" name="service.version"/>
1063
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_web_proxy_server:{service.version}"/>
1064
+ </fingerprint>
1065
+ <fingerprint pattern="^Sun-ILOM-Web-Server/(?:\d\.[\d._]+)$">
1066
+ <description>Sun Integrated Lights Out Manager (ILOM) usually bundled with Sun Fire servers</description>
1067
+ <example>Sun-ILOM-Web-Server/1.0</example>
1068
+ <param pos="0" name="service.vendor" value="Sun"/>
1069
+ <param pos="0" name="service.product" value="Integrated Lights Out Manager"/>
1070
+ <param pos="0" name="service.family" value="Integrated Lights Out Manager"/>
1071
+ <param pos="0" name="hw.vendor" value="Sun"/>
1072
+ <param pos="0" name="hw.family" value="Sun Fire"/>
1073
+ </fingerprint>
1074
+ <fingerprint pattern="^HP-iLO-Server/(?:[\S]+)">
1075
+ <description>HP Integrated Lights Out Manager (iLO). Version in the Server header (found on in iLO4) is the firmware version and is not currently used.</description>
1076
+ <example>HP-iLO-Server/1.30</example>
1077
+ <param pos="0" name="service.vendor" value="HP"/>
1078
+ <param pos="0" name="service.product" value="iLO"/>
1079
+ <param pos="0" name="service.family" value="iLO"/>
1080
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:integrated_lights_out:-"/>
1081
+ <param pos="0" name="hw.vendor" value="HP"/>
1082
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
1083
+ <param pos="0" name="os.vendor" value="HP"/>
1084
+ <param pos="0" name="os.product" value="iLO"/>
1085
+ <param pos="0" name="os.family" value="iLO"/>
1086
+ <param pos="0" name="os.device" value="Lights Out Management"/>
1087
+ </fingerprint>
1088
+ <!--
1089
+ TODO:
1090
+
1091
+ Sun_WebServer/2.1
1092
+ -->
1093
+ <!-- Mort Bay Jetty 1.0 to 6.x -->
1094
+ <fingerprint pattern="^Jetty\/([1-6]\.[\w.]+)(?: \(([^)]*))?">
1095
+ <description>Mort Bay Jetty with info</description>
1096
+ <example service.version="4.0.1" jetty.info="SunOS 5.8 sparc">Jetty/4.0.1 (SunOS 5.8 sparc)</example>
1097
+ <example service.version="4.2.23" jetty.info="SunOS/5.9 sparc java/1.4.2_04">Jetty/4.2.23 (SunOS/5.9 sparc java/1.4.2_04)</example>
1098
+ <example service.version="4.2.x" jetty.info="VxWorks/WIND version 2.9 ppc java/1.1-rr-std-b12">Jetty/4.2.x (VxWorks/WIND version 2.9 ppc java/1.1-rr-std-b12)</example>
1099
+ <example service.version="5.1.4" jetty.info="Windows Server 2008 R2/6.1 x86 java/1.5.0_22">Jetty/5.1.4 (Windows Server 2008 R2/6.1 x86 java/1.5.0_22</example>
1100
+ <example service.version="5.1.10" jetty.info="Linux/2.6.12 i386 java/1.5.0_05">Jetty/5.1.10 (Linux/2.6.12 i386 java/1.5.0_05)</example>
1101
+ <param pos="0" name="service.vendor" value="Mort Bay"/>
1102
+ <param pos="0" name="service.product" value="Jetty"/>
1103
+ <param pos="0" name="service.family" value="Jetty"/>
1104
+ <param pos="1" name="service.version"/>
1105
+ <param pos="0" name="service.cpe23" value="cpe:/a:mortbay:jetty:{service.version}"/>
1106
+ <param pos="2" name="jetty.info"/>
1107
+ </fingerprint>
1108
+ <fingerprint pattern="^Jetty\(([1-6]\S+)\)$">
1109
+ <description>Mort Bay Jetty</description>
1110
+ <example service.version="1.4.5">Jetty(1.4.5)</example>
1111
+ <example service.version="6.1.12.rc2">Jetty(6.1.12.rc2)</example>
1112
+ <param pos="0" name="service.vendor" value="Mort Bay"/>
1113
+ <param pos="0" name="service.product" value="Jetty"/>
1114
+ <param pos="0" name="service.family" value="Jetty"/>
1115
+ <param pos="1" name="service.version"/>
1116
+ <param pos="0" name="service.cpe23" value="cpe:/a:mortbay:jetty:{service.version}"/>
1117
+ </fingerprint>
1118
+ <!--
1119
+ Jetty moved to Eclipse.org at version 7, CVEs after this version are
1120
+ associated with Eclipse CPEs.
1121
+ -->
1122
+ <fingerprint pattern="^Jetty\((\S+)\)$">
1123
+ <description>Eclipse Jetty</description>
1124
+ <example service.version="7.6.9.v20130131">Jetty(7.6.9.v20130131)</example>
1125
+ <example service.version="8.1.10.v20130312">Jetty(8.1.10.v20130312)</example>
1126
+ <example service.version="9.4.z-SNAPSHOT">Jetty(9.4.z-SNAPSHOT)</example>
1127
+ <param pos="0" name="service.vendor" value="Eclipse"/>
1128
+ <param pos="0" name="service.product" value="Jetty"/>
1129
+ <param pos="0" name="service.family" value="Jetty"/>
1130
+ <param pos="1" name="service.version"/>
1131
+ <param pos="0" name="service.cpe23" value="cpe:/a:eclipse:jetty:{service.version}"/>
1132
+ </fingerprint>
1133
+ <fingerprint pattern="^(?i)squid/(\d+\.[\w.\-\+]+)$">
1134
+ <description>Squid Web Proxy with a version</description>
1135
+ <example service.version="2.3.STABLE1">Squid/2.3.STABLE1</example>
1136
+ <example service.version="4.4">squid/4.4</example>
1137
+ <example service.version="3.2.9-BZR">squid/3.2.9-BZR</example>
1138
+ <param pos="0" name="service.vendor" value="Squid Cache"/>
1139
+ <param pos="0" name="service.product" value="Squid"/>
1140
+ <param pos="0" name="service.family" value="Squid"/>
1141
+ <param pos="1" name="service.version"/>
1142
+ <param pos="0" name="service.cpe23" value="cpe:/a:squid-cache:squid:{service.version}"/>
1143
+ </fingerprint>
1144
+ <fingerprint pattern="^(?i)squid$">
1145
+ <description>Squid Web Proxy without a version</description>
1146
+ <example>Squid</example>
1147
+ <example>squid</example>
1148
+ <param pos="0" name="service.vendor" value="Squid Cache"/>
1149
+ <param pos="0" name="service.product" value="Squid"/>
1150
+ <param pos="0" name="service.family" value="Squid"/>
1151
+ <param pos="0" name="service.cpe23" value="cpe:/a:squid-cache:squid:-"/>
1152
+ </fingerprint>
1153
+ <fingerprint pattern="^thttpd/(\d\.[\w.]+)-MX\s*.*$">
1154
+ <description>thttpd with SSL support</description>
1155
+ <example>thttpd/2.19-MX Jan 24 2006</example>
1156
+ <param pos="0" name="service.product" value="thttpd"/>
1157
+ <param pos="0" name="service.family" value="thttpd"/>
1158
+ <param pos="1" name="service.version"/>
1159
+ <param pos="0" name="thttpd.mx-patch" value="enabled"/>
1160
+ </fingerprint>
1161
+ <fingerprint pattern="^thttpd(?:/(\d\.[\w.]+)\s*.*)?$">
1162
+ <description>thttpd</description>
1163
+ <example>thttpd</example>
1164
+ <example>thttpd/2.04 10aug98</example>
1165
+ <example>thttpd/2.20b</example>
1166
+ <example>thttpd/2.21b PHP/20030920</example>
1167
+ <example>thttpd/2.23beta1 26may2002</example>
1168
+ <param pos="0" name="service.product" value="thttpd"/>
1169
+ <param pos="0" name="service.family" value="thttpd"/>
1170
+ <param pos="1" name="service.version"/>
1171
+ </fingerprint>
1172
+ <fingerprint pattern="^lighttpd(?:/(\d[\d.]+))?.*$">
1173
+ <description>Lighttpd</description>
1174
+ <example>lighttpd</example>
1175
+ <example service.version="1.4.16">lighttpd/1.4.16</example>
1176
+ <example>lighttpd/1.3.7 (Mar 23 2007/16:00:15)</example>
1177
+ <param pos="0" name="service.product" value="lighttpd"/>
1178
+ <param pos="0" name="service.family" value="lighttpd"/>
1179
+ <param pos="1" name="service.version"/>
1180
+ </fingerprint>
1181
+ <fingerprint pattern="^nginx$">
1182
+ <description>nginx without version info</description>
1183
+ <example>nginx</example>
1184
+ <param pos="0" name="service.product" value="nginx"/>
1185
+ <param pos="0" name="service.family" value="nginx"/>
1186
+ <param pos="0" name="service.vendor" value="nginx"/>
1187
+ <param pos="0" name="service.cpe23" value="cpe:/a:nginx:nginx:-"/>
1188
+ </fingerprint>
1189
+ <fingerprint pattern="^nginx\/?(:?[\d.]+)?">
1190
+ <description>nginx with version info and/or mods</description>
1191
+ <example service.version="0.8.53">nginx/0.8.53 + Phusion Passenger 3.0.0 (mod_rails/mod_rack)</example>
1192
+ <example>nginx/0.8.53</example>
1193
+ <example>nginx + Phusion Passenger 5.1.11</example>
1194
+ <example>nginx + Phusion Passenger</example>
1195
+ <param pos="0" name="service.product" value="nginx"/>
1196
+ <param pos="0" name="service.family" value="nginx"/>
1197
+ <param pos="0" name="service.vendor" value="nginx"/>
1198
+ <param pos="1" name="service.version"/>
1199
+ <param pos="0" name="service.cpe23" value="cpe:/a:nginx:nginx:{service.version}"/>
1200
+ </fingerprint>
1201
+ <fingerprint pattern="^Lotus(?:-Domino)?(?:/|/0|/Release)?$">
1202
+ <description>IBM Lotus Notes/Domino with no useful version info</description>
1203
+ <example>Lotus</example>
1204
+ <example>Lotus-Domino</example>
1205
+ <example>Lotus-Domino/0</example>
1206
+ <example>Lotus-Domino/Release</example>
1207
+ <param pos="0" name="service.vendor" value="IBM"/>
1208
+ <param pos="0" name="service.product" value="Lotus Domino"/>
1209
+ <param pos="0" name="service.family" value="Lotus Domino"/>
1210
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_domino:-"/>
1211
+ </fingerprint>
1212
+ <fingerprint pattern="^Lotus(?:-Domino)?/(?:Release-?)?([4-7][\d.]+)\s*(?:.*)$">
1213
+ <description>IBM Lotus Notes/Domino with version info</description>
1214
+ <example>Lotus-Domino/5.0.8</example>
1215
+ <example>Lotus-Domino/Release-4.6.7(Intl)</example>
1216
+ <param pos="0" name="service.vendor" value="IBM"/>
1217
+ <param pos="0" name="service.product" value="Lotus Domino"/>
1218
+ <param pos="0" name="service.family" value="Lotus Domino"/>
1219
+ <param pos="1" name="service.version"/>
1220
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_domino:{service.version}"/>
1221
+ </fingerprint>
1222
+ <fingerprint pattern="^WebLogic (?:WebLogic )?Server (\d+\.\d+(?:\s+SP\d+)?)\s+.*$">
1223
+ <description>BEA WebLogic</description>
1224
+ <example service.version="8.1 SP3">WebLogic Server 8.1 SP3 Tue Jun 29 23:11:19 PDT 2004 404973</example>
1225
+ <example service.version="7.0 SP4">WebLogic Server 7.0 SP4 Tue Aug 12 11:22:26 PDT 2003</example>
1226
+ <example service.version="6.1 SP4">WebLogic WebLogic Server 6.1 SP4 11/08/2002 21:50:43 #221641</example>
1227
+ <param pos="0" name="service.vendor" value="BEA"/>
1228
+ <param pos="0" name="service.product" value="WebLogic"/>
1229
+ <param pos="0" name="service.family" value="WebLogic"/>
1230
+ <param pos="1" name="service.version"/>
1231
+ <param pos="0" name="service.cpe23" value="cpe:/a:bea:weblogic_server:{service.version}"/>
1232
+ </fingerprint>
1233
+ <fingerprint pattern="^WebSphere Application Server/(\d+\.\d+)$">
1234
+ <description>IBM WebSphere</description>
1235
+ <example service.version="5.0">WebSphere Application Server/5.0</example>
1236
+ <example service.version="6.1">WebSphere Application Server/6.1</example>
1237
+ <param pos="0" name="service.vendor" value="IBM"/>
1238
+ <param pos="0" name="service.product" value="WebSphere"/>
1239
+ <param pos="0" name="service.family" value="WebSphere"/>
1240
+ <param pos="1" name="service.version"/>
1241
+ </fingerprint>
1242
+ <fingerprint pattern="^Resin/(\S+)$">
1243
+ <description>Caucho Resin</description>
1244
+ <example>Resin/2.1.13</example>
1245
+ <example>Resin/3.0.23</example>
1246
+ <example>Resin/2.1.s030827</example>
1247
+ <param pos="0" name="service.vendor" value="Caucho"/>
1248
+ <param pos="0" name="service.product" value="Resin"/>
1249
+ <param pos="0" name="service.family" value="Resin"/>
1250
+ <param pos="1" name="service.version"/>
1251
+ <param pos="0" name="service.cpe23" value="cpe:/a:caucho:resin:{service.version}"/>
1252
+ </fingerprint>
1253
+ <fingerprint pattern="^Ipswitch-IMail/(\d\.\d+)$">
1254
+ <description>Ipswitch IMail Server</description>
1255
+ <example>Ipswitch-IMail/5.08</example>
1256
+ <example>Ipswitch-IMail/7.07</example>
1257
+ <example>Ipswitch-IMail/8.05</example>
1258
+ <param pos="0" name="service.vendor" value="Ipswitch"/>
1259
+ <param pos="0" name="service.product" value="IMail Server"/>
1260
+ <param pos="0" name="service.family" value="IMail Server"/>
1261
+ <param pos="1" name="service.version"/>
1262
+ <param pos="0" name="service.cpe23" value="cpe:/a:ipswitch:imail_server:{service.version}"/>
1263
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1264
+ <param pos="0" name="os.family" value="Windows"/>
1265
+ <param pos="0" name="os.product" value="Windows"/>
1266
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1267
+ </fingerprint>
1268
+ <fingerprint pattern="^Abyss/(\d\.[\d.]+)-X1-Win32 AbyssLib/(?:\d\.[\d.]+)$">
1269
+ <description>Aprelium Technologies Abyss Web Server X1 (free personal edition) on Windows</description>
1270
+ <example>Abyss/2.0.0.20-X1-Win32 AbyssLib/2.0.0.20</example>
1271
+ <example>Abyss/2.3.2-X1-Win32 AbyssLib/2.3.2</example>
1272
+ <param pos="0" name="service.vendor" value="Aprelium Technologies"/>
1273
+ <param pos="0" name="service.product" value="Abyss Web Server X1"/>
1274
+ <param pos="0" name="service.family" value="Abyss Web Server"/>
1275
+ <param pos="1" name="service.version"/>
1276
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1277
+ <param pos="0" name="os.family" value="Windows"/>
1278
+ <param pos="0" name="os.product" value="Windows"/>
1279
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1280
+ </fingerprint>
1281
+ <fingerprint pattern="^Abyss/(\d\.[\d.]+)-X2-Win32 AbyssLib/(?:\d\.[\d.]+)$">
1282
+ <description>Aprelium Technologies Abyss Web Server X2 (licensed professional edition) on Windows</description>
1283
+ <param pos="0" name="service.vendor" value="Aprelium Technologies"/>
1284
+ <param pos="0" name="service.product" value="Abyss Web Server X1"/>
1285
+ <param pos="0" name="service.family" value="Abyss Web Server"/>
1286
+ <param pos="1" name="service.version"/>
1287
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1288
+ <param pos="0" name="os.family" value="Windows"/>
1289
+ <param pos="0" name="os.product" value="Windows"/>
1290
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1291
+ </fingerprint>
1292
+ <fingerprint pattern="^Microsoft (Commerce Server\s*(?:2002|2007)?, (?:Enterprise|Standard|Evaluation|Developer) Edition)$">
1293
+ <description>Microsoft Commerce Server</description>
1294
+ <param pos="0" name="service.vendor" value="Microsoft"/>
1295
+ <param pos="1" name="service.product"/>
1296
+ <param pos="0" name="service.family" value="Commerce Server"/>
1297
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1298
+ <param pos="0" name="os.family" value="Windows"/>
1299
+ <param pos="0" name="os.product" value="Windows"/>
1300
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1301
+ </fingerprint>
1302
+ <fingerprint pattern="^NetWare-Enterprise-Web-Server/(\d+\.\d+)$">
1303
+ <description>NetWare Enterprise Web Server (runs on NetWare 5.1)</description>
1304
+ <param pos="0" name="service.vendor" value="Novell"/>
1305
+ <param pos="0" name="service.product" value="NetWare Enterprise Web Server"/>
1306
+ <param pos="0" name="service.family" value="NetWare Enterprise Web Server"/>
1307
+ <param pos="1" name="service.version"/>
1308
+ <param pos="0" name="service.cpe23" value="cpe:/a:novell:netware_enterprise_web_server:{service.version}"/>
1309
+ <param pos="0" name="os.certainty" value="0.9"/>
1310
+ <param pos="0" name="os.vendor" value="Novell"/>
1311
+ <param pos="0" name="os.family" value="NetWare"/>
1312
+ <param pos="0" name="os.product" value="NetWare"/>
1313
+ <param pos="1" name="os.version"/>
1314
+ <param pos="0" name="os.cpe23" value="cpe:/o:novell:netware:{os.version}"/>
1315
+ </fingerprint>
1316
+ <fingerprint pattern="^NetWare HTTP Stack$">
1317
+ <description>NetWare HTTP stack (runs on 6.0 and 6.5)</description>
1318
+ <param pos="0" name="service.vendor" value="Novell"/>
1319
+ <param pos="0" name="service.product" value="NetWare HTTP Stack"/>
1320
+ <param pos="0" name="service.family" value="NetWare HTTP Stack"/>
1321
+ <param pos="0" name="os.vendor" value="Novell"/>
1322
+ <param pos="0" name="os.family" value="NetWare"/>
1323
+ <param pos="0" name="os.product" value="NetWare"/>
1324
+ <param pos="0" name="os.cpe23" value="cpe:/o:novell:netware:-"/>
1325
+ </fingerprint>
1326
+ <fingerprint pattern="^Novell-HTTP-Server/3.1R1$">
1327
+ <description>NetWare HTTP Server (runs on NetWare 4.11)</description>
1328
+ <param pos="0" name="service.vendor" value="Novell"/>
1329
+ <param pos="0" name="service.product" value="NetWare HTTP Server"/>
1330
+ <param pos="0" name="service.family" value="NetWare HTTP Server"/>
1331
+ <param pos="0" name="service.version" value="3.1R1"/>
1332
+ <param pos="0" name="os.certainty" value="0.9"/>
1333
+ <param pos="0" name="os.vendor" value="Novell"/>
1334
+ <param pos="0" name="os.family" value="NetWare"/>
1335
+ <param pos="0" name="os.product" value="NetWare"/>
1336
+ <param pos="0" name="os.version" value="4.11"/>
1337
+ <param pos="0" name="os.cpe23" value="cpe:/o:novell:netware:4.11"/>
1338
+ </fingerprint>
1339
+ <fingerprint pattern="^Novell-HTTP-Server/2.51R1$">
1340
+ <description>NetWare HTTP Server (runs on NetWare 4.1)</description>
1341
+ <param pos="0" name="service.vendor" value="Novell"/>
1342
+ <param pos="0" name="service.product" value="NetWare HTTP Server"/>
1343
+ <param pos="0" name="service.family" value="NetWare HTTP Server"/>
1344
+ <param pos="0" name="service.version" value="2.51R1"/>
1345
+ <param pos="0" name="os.certainty" value="0.9"/>
1346
+ <param pos="0" name="os.vendor" value="Novell"/>
1347
+ <param pos="0" name="os.family" value="NetWare"/>
1348
+ <param pos="0" name="os.product" value="NetWare"/>
1349
+ <param pos="0" name="os.version" value="4.1"/>
1350
+ <param pos="0" name="os.cpe23" value="cpe:/o:novell:netware:4.1"/>
1351
+ </fingerprint>
1352
+ <fingerprint pattern="^Netscape-FastTrack/(\d+\.[\w\s.]+)$">
1353
+ <description>Netscape FastTrack Server</description>
1354
+ <param pos="0" name="service.vendor" value="Netscape"/>
1355
+ <param pos="0" name="service.product" value="FastTrack Server"/>
1356
+ <param pos="0" name="service.family" value="FastTrack Server"/>
1357
+ <param pos="1" name="service.version"/>
1358
+ <param pos="0" name="service.cpe23" value="cpe:/a:netscape:fasttrack_server:{service.version}"/>
1359
+ </fingerprint>
1360
+ <fingerprint pattern="^Netscape-Commerce/(\d+\.[\w\s.]+)$">
1361
+ <description>Netscape Commerce Server</description>
1362
+ <param pos="0" name="service.vendor" value="Netscape"/>
1363
+ <param pos="0" name="service.product" value="Commerce Server"/>
1364
+ <param pos="0" name="service.family" value="Commerce Server"/>
1365
+ <param pos="1" name="service.version"/>
1366
+ <param pos="0" name="service.cpe23" value="cpe:/a:netscape:commerce_server:{service.version}"/>
1367
+ </fingerprint>
1368
+ <!--
1369
+ TODO
1370
+
1371
+ "Powered by PowerBSD - Apache"
1372
+ "SSE(Apache)"
1373
+ -->
1374
+ <fingerprint pattern="^SAP J2EE Engine/(\d+\.\d+)$">
1375
+ <description>SAP NetWeaver Web AS (Application Server)</description>
1376
+ <param pos="0" name="service.vendor" value="SAP"/>
1377
+ <param pos="0" name="service.product" value="NetWeaver Web AS"/>
1378
+ <param pos="0" name="service.family" value="NetWeaver"/>
1379
+ <param pos="1" name="service.version"/>
1380
+ </fingerprint>
1381
+ <fingerprint pattern="^OpenVPN-AS$">
1382
+ <description>OpenVPN Access Server</description>
1383
+ <example>OpenVPN-AS</example>
1384
+ <param pos="0" name="service.vendor" value="OpenVPN"/>
1385
+ <param pos="0" name="service.product" value="Access Server"/>
1386
+ <param pos="0" name="hw.device" value="VPN"/>
1387
+ </fingerprint>
1388
+ <fingerprint pattern="^SonicWALL (SSL-?VPN(?: (?:\d+))?) Web Server\.?$">
1389
+ <description>SonicWALL SSL-VPN device</description>
1390
+ <example>SonicWALL SSLVPN Web Server</example>
1391
+ <example>SonicWALL SSL-VPN Web Server</example>
1392
+ <param pos="0" name="service.vendor" value="SonicWALL"/>
1393
+ <param pos="0" name="service.product" value="SSL-VPN"/>
1394
+ <param pos="0" name="service.family" value="SSL-VPN"/>
1395
+ <param pos="0" name="os.vendor" value="SonicWALL"/>
1396
+ <param pos="0" name="os.device" value="VPN"/>
1397
+ <param pos="0" name="os.family" value="SSL-VPN"/>
1398
+ <param pos="1" name="os.product"/>
1399
+ <param pos="0" name="hw.vendor" value="SonicWALL"/>
1400
+ <param pos="0" name="hw.device" value="VPN"/>
1401
+ </fingerprint>
1402
+ <fingerprint pattern="^SonicWALL$">
1403
+ <description>SonicWALL device</description>
1404
+ <example>SonicWALL</example>
1405
+ <param pos="0" name="service.vendor" value="SonicWALL"/>
1406
+ <param pos="0" name="service.product" value="HTTP"/>
1407
+ <param pos="0" name="os.vendor" value="SonicWALL"/>
1408
+ </fingerprint>
1409
+ <fingerprint pattern="^NetCache appliance \(NetApp/+(\d+\.\d+[\w.]+)\)$">
1410
+ <description>NetCache appliance (product line formerly owned by Network Appliances, now owned by Blue Coat Systems).</description>
1411
+ <example service.version="5.3.1R3">NetCache appliance (NetApp/5.3.1R3)</example>
1412
+ <example>NetCache appliance (NetApp/5.4R2D2)</example>
1413
+ <example>NetCache appliance (NetApp/5.6.1D22)</example>
1414
+ <example>NetCache appliance (NetApp/6.0.2P1)</example>
1415
+ <example>NetCache appliance (NetApp/6.0.4)</example>
1416
+ <example>NetCache appliance (NetApp/6.1RC2)</example>
1417
+ <param pos="0" name="service.vendor" value="Blue Coat"/>
1418
+ <param pos="0" name="service.family" value="NetCache"/>
1419
+ <param pos="0" name="service.product" value="NetCache"/>
1420
+ <param pos="1" name="service.version"/>
1421
+ <param pos="0" name="os.vendor" value="Blue Coat"/>
1422
+ <param pos="0" name="os.device" value="Web proxy"/>
1423
+ <param pos="0" name="os.family" value="NetCache"/>
1424
+ <param pos="0" name="os.product" value="NetCache"/>
1425
+ </fingerprint>
1426
+ <fingerprint pattern="^NetApp/+(.*)$">
1427
+ <description>NetApp file servers</description>
1428
+ <example>NetApp/7.3.4P1</example>
1429
+ <example>NetApp/7.2.1.1</example>
1430
+ <example>NetApp//8.1RC2</example>
1431
+ <param pos="0" name="os.certainty" value="0.9"/>
1432
+ <param pos="0" name="os.vendor" value="NetApp"/>
1433
+ <param pos="0" name="os.family" value="Data ONTAP"/>
1434
+ <param pos="0" name="os.product" value="Data ONTAP"/>
1435
+ <param pos="0" name="os.device" value="File server"/>
1436
+ <param pos="1" name="os.version"/>
1437
+ <param pos="0" name="os.cpe23" value="cpe:/o:netapp:data_ontap:{os.version}"/>
1438
+ </fingerprint>
1439
+ <fingerprint pattern="^BlueCoat-Security-Appliance$">
1440
+ <description>Blue Coat security appliance</description>
1441
+ <example>BlueCoat-Security-Appliance</example>
1442
+ <param pos="0" name="os.vendor" value="Blue Coat"/>
1443
+ <param pos="0" name="os.device" value="Web proxy"/>
1444
+ <param pos="0" name="os.family" value="Blue Coat"/>
1445
+ <param pos="0" name="os.product" value="Appliance"/>
1446
+ </fingerprint>
1447
+ <fingerprint pattern="^(?:BigIP|BIG-IP)$">
1448
+ <description>F5 BIG-IP</description>
1449
+ <param pos="0" name="service.vendor" value="F5"/>
1450
+ <param pos="0" name="service.product" value="BIG-IP LTM"/>
1451
+ <param pos="0" name="service.family" value="BIG-IP"/>
1452
+ <param pos="0" name="service.cpe23" value="cpe:/a:f5:big-ip_local_traffic_manager:-"/>
1453
+ <param pos="0" name="os.family" value="Linux"/>
1454
+ <param pos="0" name="os.product" value="Linux"/>
1455
+ </fingerprint>
1456
+ <fingerprint pattern="^TargetWeb/[\d\.]+ \(TargetOS\)$">
1457
+ <description>Mercurity Security TargetOS</description>
1458
+ <example>TargetWeb/2011.0 (TargetOS)</example>
1459
+ <param pos="0" name="hw.vendor" value="Mercury Security"/>
1460
+ <param pos="0" name="hw.device" value="Access Controller"/>
1461
+ <param pos="0" name="hw.product" value="EP-series"/>
1462
+ </fingerprint>
1463
+ <fingerprint pattern="^Foundry Networks(?:/(\d+\.\d+))?$">
1464
+ <description>Foundry Networks device (though not sure which)</description>
1465
+ <param pos="0" name="service.vendor" value="Foundry"/>
1466
+ <param pos="0" name="service.product" value="HTTP"/>
1467
+ <param pos="1" name="service.version"/>
1468
+ <param pos="0" name="os.vendor" value="Foundry"/>
1469
+ </fingerprint>
1470
+ <fingerprint pattern="^HP-Chai(?:Server|SOE)/(\d+\.\d+)$">
1471
+ <description>HP Printer running the Chai embedded web server</description>
1472
+ <example>HP-ChaiServer/2.2</example>
1473
+ <example>HP-ChaiSOE/1.0</example>
1474
+ <param pos="0" name="service.vendor" value="HP"/>
1475
+ <param pos="0" name="service.product" value="JetDirect"/>
1476
+ <param pos="0" name="service.family" value="JetDirect"/>
1477
+ <param pos="1" name="service.version"/>
1478
+ <param pos="0" name="os.vendor" value="HP"/>
1479
+ <param pos="0" name="os.device" value="Printer"/>
1480
+ <param pos="0" name="os.family" value="JetDirect"/>
1481
+ <param pos="0" name="os.product" value="JetDirect"/>
1482
+ <param pos="0" name="hw.vendor" value="HP"/>
1483
+ <param pos="0" name="hw.family" value="JetDirect"/>
1484
+ <param pos="0" name="hw.product" value="JetDirect"/>
1485
+ <param pos="0" name="hw.device" value="Printer"/>
1486
+ </fingerprint>
1487
+ <fingerprint pattern="^HP HTTP Server; (?:Hewlett-Packard )?HP ((\S+) \S+)">
1488
+ <description>HP Printer</description>
1489
+ <example os.product="Photosmart C309a" os.family="Photosmart">HP HTTP Server; HP Photosmart C309a series - CC335A; Serial Number: abc123; Vader Built:Wed Apr 15, 2009 11:40:58AM {abc123, ASIC id 0x00280004}</example>
1490
+ <example os.product="Officejet 6500" os.family="Officejet">HP HTTP Server; HP Officejet 6500 E709n - CB057A; Serial Number: abc123; Rainbow Built:Sat Dec 13, 2008 10:58:21AM {abc123, ASIC id 0x00ffc2105}</example>
1491
+ <example os.product="Designjet T520" os.family="Designjet">HP HTTP Server; Hewlett-Packard HP Designjet T520 36in - ABC123; Serial Number: 0123456789; Built:Tue Sep 09, 2014 08:32:54AM {012345678901}</example>
1492
+ <param pos="0" name="service.vendor" value="HP"/>
1493
+ <param pos="0" name="service.product" value="JetDirect"/>
1494
+ <param pos="0" name="service.family" value="JetDirect"/>
1495
+ <param pos="0" name="os.vendor" value="HP"/>
1496
+ <param pos="0" name="os.device" value="Printer"/>
1497
+ <param pos="2" name="os.family"/>
1498
+ <param pos="1" name="os.product"/>
1499
+ <param pos="0" name="hw.vendor" value="HP"/>
1500
+ <param pos="0" name="hw.family" value="JetDirect"/>
1501
+ <param pos="0" name="hw.product" value="JetDirect"/>
1502
+ <param pos="0" name="hw.device" value="Printer"/>
1503
+ </fingerprint>
1504
+ <fingerprint pattern="^HTTP/1\.0$">
1505
+ <description>Old HP printers identify themselves as "HTTP/1.0"</description>
1506
+ <param pos="0" name="service.vendor" value="HP"/>
1507
+ <param pos="0" name="service.product" value="JetDirect"/>
1508
+ <param pos="0" name="service.family" value="JetDirect"/>
1509
+ <param pos="0" name="os.vendor" value="HP"/>
1510
+ <param pos="0" name="os.device" value="Printer"/>
1511
+ <param pos="0" name="os.family" value="JetDirect"/>
1512
+ <param pos="0" name="os.product" value="JetDirect"/>
1513
+ <param pos="0" name="hw.vendor" value="HP"/>
1514
+ <param pos="0" name="hw.family" value="JetDirect"/>
1515
+ <param pos="0" name="hw.product" value="JetDirect"/>
1516
+ <param pos="0" name="hw.device" value="Printer"/>
1517
+ </fingerprint>
1518
+ <fingerprint pattern="^(?:Allegro-Software-)?RomPager/\s*(\S+)">
1519
+ <description>Embedded HTTP server used by many vendors and device
1520
+ types, including APC, 3Com, Andover Controls, Cisco VoIP, D-Link,
1521
+ Extreme Networks, Foundry Networks, Konica Minolta, Kronos
1522
+ Timekeeper, McDATA, Netopia, Nortel Networks, Power Measurement Ltd,
1523
+ and Xerox.</description>
1524
+ <example service.version="4.01">Allegro-Software-RomPager/4.01</example>
1525
+ <example service.version="4.07">RomPager/4.07 UPnP/1.0</example>
1526
+ <example service.version="4.30b3">Allegro-Software-RomPager/4.30b3</example>
1527
+ <example service.version="2.10">Allegro-Software-RomPager/ 2.10</example>
1528
+ <param pos="0" name="service.vendor" value="Allegro Software"/>
1529
+ <param pos="0" name="service.product" value="RomPager"/>
1530
+ <param pos="1" name="service.version"/>
1531
+ </fingerprint>
1532
+ <fingerprint pattern="^YAMAHA-RT$">
1533
+ <description>Yamaha RT series routers</description>
1534
+ <param pos="0" name="service.vendor" value="Yamaha"/>
1535
+ <param pos="0" name="service.product" value="RT"/>
1536
+ <param pos="0" name="service.family" value="RT"/>
1537
+ <param pos="0" name="os.vendor" value="Yamaha"/>
1538
+ <param pos="0" name="os.device" value="Router"/>
1539
+ <param pos="0" name="os.family" value="RT"/>
1540
+ <param pos="0" name="os.product" value="RT"/>
1541
+ <param pos="0" name="hw.vendor" value="Yamaha"/>
1542
+ <param pos="0" name="hw.device" value="Router"/>
1543
+ </fingerprint>
1544
+ <fingerprint pattern="^(?:Canon Http|CANON HTTP) Server (?:Ver)?(?:\d+\.\d+)$">
1545
+ <description>Canon Multifunction Printer/Copiers</description>
1546
+ <param pos="0" name="service.vendor" value="Canon"/>
1547
+ <param pos="0" name="service.product" value="HTTP"/>
1548
+ <param pos="0" name="os.vendor" value="Canon"/>
1549
+ <param pos="0" name="hw.vendor" value="Canon"/>
1550
+ <param pos="0" name="hw.device" value="Multifunction Device"/>
1551
+ </fingerprint>
1552
+ <fingerprint pattern=".*Linksys.*">
1553
+ <description>Linksys Wireless Access Point</description>
1554
+ <param pos="0" name="os.vendor" value="Linksys"/>
1555
+ <param pos="0" name="os.device" value="WAP"/>
1556
+ <param pos="0" name="hw.vendor" value="Linksys"/>
1557
+ <param pos="0" name="hw.device" value="WAP"/>
1558
+ </fingerprint>
1559
+ <fingerprint pattern="^cisco-IOS$">
1560
+ <description>Cisco IOS</description>
1561
+ <example>cisco-IOS</example>
1562
+ <param pos="0" name="service.vendor" value="Cisco"/>
1563
+ <param pos="0" name="service.family" value="IOS"/>
1564
+ <param pos="0" name="service.product" value="IOS"/>
1565
+ <param pos="0" name="service.cpe23" value="cpe:/a:cisco:ios:-"/>
1566
+ <param pos="0" name="os.vendor" value="Cisco"/>
1567
+ <param pos="0" name="os.family" value="IOS"/>
1568
+ <param pos="0" name="os.product" value="IOS"/>
1569
+ <param pos="0" name="os.certainty" value="0.8"/>
1570
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:-"/>
1571
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1572
+ </fingerprint>
1573
+ <fingerprint pattern="^cisco-IOS/([^\s]+) HTTP-server/.*$">
1574
+ <description>Cisco IOS with version information</description>
1575
+ <example>cisco-IOS/12.1 HTTP-server/1.0(1)</example>
1576
+ <param pos="0" name="service.vendor" value="Cisco"/>
1577
+ <param pos="0" name="service.family" value="IOS"/>
1578
+ <param pos="0" name="service.product" value="IOS"/>
1579
+ <param pos="0" name="service.cpe23" value="cpe:/a:cisco:ios:-"/>
1580
+ <param pos="0" name="os.vendor" value="Cisco"/>
1581
+ <param pos="0" name="os.family" value="IOS"/>
1582
+ <param pos="0" name="os.product" value="IOS"/>
1583
+ <param pos="1" name="os.version"/>
1584
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:{os.version}"/>
1585
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1586
+ </fingerprint>
1587
+ <fingerprint pattern="^Cisco AWARE (.*)$">
1588
+ <description>Cisco ASA</description>
1589
+ <example>Cisco AWARE 2.0</example>
1590
+ <param pos="1" name="service.version"/>
1591
+ <param pos="0" name="service.vendor" value="Cisco"/>
1592
+ <param pos="0" name="service.product" value="HTTP"/>
1593
+ <param pos="0" name="os.vendor" value="Cisco"/>
1594
+ <param pos="0" name="os.family" value="Adaptive Security Appliance"/>
1595
+ <param pos="0" name="os.product" value="Adaptive Security Appliance"/>
1596
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:adaptive_security_appliance"/>
1597
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1598
+ <param pos="0" name="hw.family" value="Adaptive Security Appliance"/>
1599
+ <param pos="0" name="hw.product" value="Adaptive Security Appliance"/>
1600
+ <param pos="0" name="hw.device" value="Firewall"/>
1601
+ <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:adaptive_security_appliance:-"/>
1602
+ </fingerprint>
1603
+ <fingerprint pattern="^CradlepointHTTPService/([\d\.]+)$">
1604
+ <description>Cradlepoint HTTP service</description>
1605
+ <example service.version="1.0.0">CradlepointHTTPService/1.0.0</example>
1606
+ <param pos="1" name="service.version"/>
1607
+ <param pos="0" name="service.vendor" value="Cradlepoint"/>
1608
+ <param pos="0" name="service.product" value="HTTP"/>
1609
+ </fingerprint>
1610
+ <fingerprint pattern="^DesktopAuthority/(.*)$">
1611
+ <description>ScriptLogic DesktopAuthority</description>
1612
+ <param pos="1" name="service.version"/>
1613
+ <param pos="0" name="service.vendor" value="ScriptLogic"/>
1614
+ <param pos="0" name="service.product" value="Desktop Authority"/>
1615
+ <param pos="0" name="service.family" value="Desktop Authority"/>
1616
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1617
+ <param pos="0" name="os.family" value="Windows"/>
1618
+ <param pos="0" name="os.product" value="Windows"/>
1619
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1620
+ </fingerprint>
1621
+ <fingerprint pattern="^Agent-ListenServer-HttpSvr/.*$">
1622
+ <description>McAfee ePolicy Orchestrator</description>
1623
+ <param pos="0" name="service.vendor" value="McAfee"/>
1624
+ <param pos="0" name="service.product" value="ePolicy Orchestrator"/>
1625
+ <param pos="0" name="service.family" value="ePolicy Orchestrator"/>
1626
+ <param pos="0" name="service.cpe23" value="cpe:/a:mcafee:epolicy_orchestrator:-"/>
1627
+ </fingerprint>
1628
+ <fingerprint pattern="^LANDesk Management Agent/.*$">
1629
+ <description>LANDesk Management Agent</description>
1630
+ <param pos="0" name="service.vendor" value="LANDesk"/>
1631
+ <param pos="0" name="service.product" value="Management Agent"/>
1632
+ <param pos="0" name="service.family" value="Management Agent"/>
1633
+ <param pos="0" name="service.cpe23" value="cpe:/a:landesk:management_agent:-"/>
1634
+ </fingerprint>
1635
+ <fingerprint pattern="^EWS-NIC\d/(\S+)$">
1636
+ <description>Xerox Embedded Web Server (EWS)</description>
1637
+ <example service.version="6.31">EWS-NIC3/6.31</example>
1638
+ <example service.version="13.40">EWS-NIC4/13.40</example>
1639
+ <example service.version="13.39">EWS-NIC4/13.39</example>
1640
+ <param pos="0" name="service.vendor" value="Xerox"/>
1641
+ <param pos="0" name="service.family" value="EWS"/>
1642
+ <param pos="0" name="service.product" value="EWS"/>
1643
+ <param pos="1" name="service.version"/>
1644
+ <param pos="0" name="os.vendor" value="Xerox"/>
1645
+ <param pos="0" name="os.device" value="Printer"/>
1646
+ <param pos="0" name="hw.vendor" value="Xerox"/>
1647
+ <param pos="0" name="hw.device" value="Printer"/>
1648
+ </fingerprint>
1649
+ <fingerprint pattern="^Adaptec ASM (\S+)$">
1650
+ <description>Adaptec - Adaptec Storage Manager (runs on Windows Only)</description>
1651
+ <param pos="0" name="service.vendor" value="Adaptec"/>
1652
+ <param pos="0" name="service.family" value="ASM"/>
1653
+ <param pos="0" name="service.product" value="ASM"/>
1654
+ <param pos="1" name="service.version"/>
1655
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1656
+ <param pos="0" name="os.family" value="Windows"/>
1657
+ <param pos="0" name="os.product" value="Windows"/>
1658
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1659
+ </fingerprint>
1660
+ <fingerprint pattern="^JRun Web Server$">
1661
+ <description>Macromedia (formerly Allaire) JRun</description>
1662
+ <param pos="0" name="service.vendor" value="Macromedia"/>
1663
+ <param pos="0" name="service.family" value="JRun"/>
1664
+ <param pos="0" name="service.product" value="JRun"/>
1665
+ <param pos="0" name="service.cpe23" value="cpe:/a:macromedia:jrun:-"/>
1666
+ </fingerprint>
1667
+ <fingerprint pattern="^(?:Raptor )?Simple, Secure Web Server ([\d.]+)$">
1668
+ <description>Symantec Raptor Firewall</description>
1669
+ <example>Simple, Secure Web Server 1.1</example>
1670
+ <example>Raptor Simple, Secure Web Server 1.0</example>
1671
+ <param pos="0" name="os.vendor" value="Symantec"/>
1672
+ <param pos="0" name="os.family" value="Raptor"/>
1673
+ <param pos="0" name="os.device" value="Firewall"/>
1674
+ <param pos="0" name="os.product" value="Raptor"/>
1675
+ <param pos="1" name="os.version"/>
1676
+ </fingerprint>
1677
+ <fingerprint pattern="^IPG(\d+)$">
1678
+ <description>Systech Internet Payment Gateway</description>
1679
+ <example hw.model="8000">IPG8000</example>
1680
+ <param pos="0" name="hw.vendor" value="Systech"/>
1681
+ <param pos="0" name="hw.device" value="Telecom"/>
1682
+ <param pos="0" name="hw.product" value="Internet Payment Gateway"/>
1683
+ <param pos="1" name="hw.model"/>
1684
+ </fingerprint>
1685
+ <fingerprint pattern="^NS_(\d\.\d)$">
1686
+ <description>Citrix NetScaler</description>
1687
+ <example>NS_6.1</example>
1688
+ <param pos="0" name="os.vendor" value="Citrix"/>
1689
+ <param pos="0" name="os.family" value="NetScaler"/>
1690
+ <param pos="0" name="os.device" value="Network Management Device"/>
1691
+ <param pos="0" name="os.product" value="NetScaler"/>
1692
+ <param pos="1" name="os.version"/>
1693
+ </fingerprint>
1694
+ <fingerprint pattern="^Rumpus$">
1695
+ <description>Rumpus FTP Server, Web File Manager interface</description>
1696
+ <example>Rumpus</example>
1697
+ <param pos="0" name="os.vendor" value="Apple"/>
1698
+ <param pos="0" name="os.family" value="Mac OS X"/>
1699
+ <param pos="0" name="os.product" value="Mac OS X"/>
1700
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:-"/>
1701
+ </fingerprint>
1702
+ <fingerprint pattern="^servermgrd$">
1703
+ <description>Mac OS X Server administrative daemon</description>
1704
+ <example>servermgrd</example>
1705
+ <param pos="0" name="os.vendor" value="Apple"/>
1706
+ <param pos="0" name="os.family" value="Mac OS X"/>
1707
+ <param pos="0" name="os.product" value="Mac OS X"/>
1708
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:-"/>
1709
+ </fingerprint>
1710
+ <fingerprint pattern="^(RMC Webserver|RAC_ONE_HTTP) (\d\.\d)$">
1711
+ <description>Dell Remote Access Controller</description>
1712
+ <param pos="0" name="os.vendor" value="Dell"/>
1713
+ <param pos="0" name="os.family" value="Dell Remote Access Controller"/>
1714
+ <param pos="0" name="os.product" value="Dell Remote Access Controller"/>
1715
+ <param pos="0" name="service.vendor" value="Dell"/>
1716
+ <param pos="0" name="service.family" value="Remote Access Controller"/>
1717
+ <param pos="1" name="service.product"/>
1718
+ <param pos="2" name="service.version"/>
1719
+ </fingerprint>
1720
+ <fingerprint pattern="^Xerox_MicroServer/Xerox11$">
1721
+ <description>Xerox Document Centre</description>
1722
+ <param pos="0" name="os.vendor" value="Xerox"/>
1723
+ <param pos="0" name="os.family" value="Document Centre"/>
1724
+ <param pos="0" name="os.product" value="Document Centre"/>
1725
+ <param pos="0" name="os.device" value="Printer"/>
1726
+ <param pos="0" name="hw.vendor" value="Xerox"/>
1727
+ <param pos="0" name="hw.family" value="Document Centre"/>
1728
+ <param pos="0" name="hw.product" value="Document Centre"/>
1729
+ <param pos="0" name="hw.device" value="Printer"/>
1730
+ </fingerprint>
1731
+ <fingerprint pattern="^TSM_HTTP/\d\.\d$">
1732
+ <description>IBM Tivoli Storage Manager</description>
1733
+ <param pos="0" name="service.vendor" value="IBM"/>
1734
+ <param pos="0" name="service.family" value="Tivoli"/>
1735
+ <param pos="0" name="service.product" value="Tivoli Storage Manager"/>
1736
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:tivoli_storage_manager:-"/>
1737
+ </fingerprint>
1738
+ <fingerprint pattern="^D-Link MiniAVServer$">
1739
+ <description>D-Link embedded web server for web cams</description>
1740
+ <param pos="0" name="os.vendor" value="D-Link"/>
1741
+ <param pos="0" name="os.device" value="Web cam"/>
1742
+ </fingerprint>
1743
+ <fingerprint pattern="^ListManagerWeb/(\S+) .*$">
1744
+ <description>Lyris ListManager</description>
1745
+ <example>ListManagerWeb/8.8a (based on Tcl-Webserver/3.4.2)</example>
1746
+ <param pos="0" name="service.vendor" value="Lyris"/>
1747
+ <param pos="0" name="service.product" value="ListManager"/>
1748
+ <param pos="1" name="service.version"/>
1749
+ </fingerprint>
1750
+ <fingerprint pattern="^kHTTPd (\S+)" certainty="0.50">
1751
+ <description>TUX web server, an in-kernel Linux HTTP Accelerator</description>
1752
+ <example>kHTTPd 0.1.6</example>
1753
+ <param pos="0" name="service.product" value="TUX Web Server"/>
1754
+ <param pos="1" name="service.version"/>
1755
+ <param pos="0" name="os.vendor" value="Linux"/>
1756
+ <param pos="0" name="os.family" value="Linux"/>
1757
+ <param pos="0" name="os.product" value="Linux"/>
1758
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:-"/>
1759
+ </fingerprint>
1760
+ <fingerprint pattern="^RealVNC/(?:\S+)$">
1761
+ <description>RealVNC built-in webserver</description>
1762
+ <example>RealVNC/4.0</example>
1763
+ <param pos="0" name="service.vendor" value="RealVNC Ltd."/>
1764
+ <param pos="0" name="service.product" value="RealVNC"/>
1765
+ <param pos="0" name="service.cpe23" value="cpe:/a:realvnc:realvnc:-"/>
1766
+ </fingerprint>
1767
+ <fingerprint pattern="^SecureTransport (\d+[\d\.]+) \(build: (\d+)\)$">
1768
+ <description>AxWay SecureTransport</description>
1769
+ <example>SecureTransport 5.3.6 (build: 412)</example>
1770
+ <param pos="0" name="service.vendor" value="Axway"/>
1771
+ <param pos="0" name="service.product" value="SecureTransport"/>
1772
+ <param pos="0" name="service.cpe23" value="cpe:/a:realvnc:realvnc:{service.version}"/>
1773
+ <param pos="1" name="service.version"/>
1774
+ <param pos="2" name="securetransport.build"/>
1775
+ </fingerprint>
1776
+ <fingerprint pattern="(Agranat|Conexant|(?:Globespan)?Virata)-EmWeb/(.*)$">
1777
+ <description>EmWeb variants</description>
1778
+ <example>Agranat-EmWeb/R4_01</example>
1779
+ <example>Agranat-EmWeb/R5_1_2</example>
1780
+ <example>Agranat-EmWeb/R5_2_4</example>
1781
+ <example>Agranat-EmWeb/R5_2_6</example>
1782
+ <example>Conexant-EmWeb/R6_1_0</example>
1783
+ <example>ISOS/9.0 UPnP/1.0 Conexant-EmWeb/R6_1_0</example>
1784
+ <example>Nucleus/4.3 UPnP/1.0 Virata-EmWeb/R6_2_0</example>
1785
+ <example>Unknown/0.0 UPnP/1.0 Conexant-EmWeb/R6_1_0</example>
1786
+ <example>Unknown/0.0 UPnP/1.0 GlobespanVirata-EmWeb/R6_1_0</example>
1787
+ <example>Unknown/0.0 UPnP/1.0 Virata-EmWeb/R6_1_0</example>
1788
+ <example>Virata-EmWeb/R5_3_0</example>
1789
+ <example>Virata-EmWeb/R5_3_2</example>
1790
+ <example>Virata-EmWeb/R6_0_1</example>
1791
+ <example>Virata-EmWeb/R6_1_0</example>
1792
+ <example>Virata-EmWeb/R6_2_0</example>
1793
+ <example>Virata-EmWeb/R6_2_1</example>
1794
+ <param pos="1" name="service.vendor"/>
1795
+ <param pos="0" name="service.family" value="EmWeb"/>
1796
+ <param pos="0" name="service.product" value="EmWeb"/>
1797
+ <param pos="2" name="service.version"/>
1798
+ </fingerprint>
1799
+ <fingerprint pattern="^NSC/\S+ \(JVM\)$">
1800
+ <description>Rapid7 NSC</description>
1801
+ <example>NSC/0.6.4 (JVM)</example>
1802
+ <param pos="0" name="service.vendor" value="Rapid7"/>
1803
+ <param pos="0" name="service.product" value="Nexpose"/>
1804
+ <param pos="0" name="service.cpe23" value="cpe:/a:rapid7:nexpose:-"/>
1805
+ </fingerprint>
1806
+ <fingerprint pattern="^Security Console$">
1807
+ <description>Rapid7 Nexpose Security Console</description>
1808
+ <example>Security Console</example>
1809
+ <param pos="0" name="service.vendor" value="Rapid7"/>
1810
+ <param pos="0" name="service.product" value="Nexpose"/>
1811
+ <param pos="0" name="service.cpe23" value="cpe:/a:rapid7:nexpose:-"/>
1812
+ </fingerprint>
1813
+ <fingerprint pattern="^Polycom SoundPoint IP Telephone HTTPd$">
1814
+ <description>Polycom Soundpoint IP Telephone</description>
1815
+ <example>Polycom SoundPoint IP Telephone HTTPd</example>
1816
+ <param pos="0" name="service.vendor" value="Polycom"/>
1817
+ <param pos="0" name="service.family" value="SoundPoint"/>
1818
+ <param pos="0" name="hw.vendor" value="Polycom"/>
1819
+ <param pos="0" name="hw.family" value="SoundPoint"/>
1820
+ <param pos="0" name="hw.device" value="VoIP"/>
1821
+ </fingerprint>
1822
+ <!-- 4D WebSTAR was aquired by Kerio but it seems that both
1823
+ Kerio and 4D have branched the product. The 4D banners
1824
+ use the new version scheme (just 2004 it would appear):
1825
+
1826
+ 4D_WebStar_D/2004
1827
+
1828
+ whereas Kerio banners are:
1829
+
1830
+ 4D_WebSTAR_S/5.3.2 (MacOS X)
1831
+ 4D_WebStar_D/7.8
1832
+ 4D_WebSTAR_S/5.4.1 (MacOS X)
1833
+
1834
+ WebSTAR/4.4 ID/72547
1835
+ WebSTAR/4.5(SSL) ID/82535
1836
+ WebSTAR NetCloak
1837
+ WebSTAR/4.5(SSL) ID/85282
1838
+ -->
1839
+ <!--
1840
+ <fingerprint pattern="^4D_WebSTAR_S/2004$">
1841
+ <description>4D 4th Dimension 2004</description>
1842
+ <param pos="0" name="service.vendor" value="4D"/>
1843
+ <param pos="0" name="service.product" value="4th Dimension 2004"/>
1844
+ <param pos="0" name="service.family" value="4th Dimension 2004"/>
1845
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1846
+ <param pos="0" name="os.family" value="Windows"/>
1847
+ <param pos="0" name="os.product" value="Windows"/>
1848
+ </fingerprint>
1849
+ <fingerprint pattern="^4D_WebSTAR_S/5.3.2 \(MacOS X\)$">
1850
+ <description>Kerio WebSTAR</description>
1851
+ <param pos="0" name="service.vendor" value="Kerio"/>
1852
+ <param pos="0" name="service.product" value="WebSTAR"/>
1853
+ <param pos="0" name="service.family" value="WebSTAR"/>
1854
+ <param pos="1" name="service.version"/>
1855
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1856
+ <param pos="0" name="os.family" value="Windows"/>
1857
+ <param pos="0" name="os.product" value="Windows"/>
1858
+ </fingerprint>
1859
+ -->
1860
+ <fingerprint pattern="^SentinelProtectionServer/((?:\d+\.)*\d+)$">
1861
+ <description>Sentinel Protection Server - Embedded httpd in SafeNet's memory key dongles</description>
1862
+ <example service.version="7.1">SentinelProtectionServer/7.1</example>
1863
+ <example>SentinelProtectionServer/7.3</example>
1864
+ <example>SentinelProtectionServer/7.0</example>
1865
+ <example>SentinelProtectionServer/7</example>
1866
+ <param pos="0" name="service.vendor" value="SafeNet"/>
1867
+ <param pos="0" name="service.product" value="Sentinel Protection Server"/>
1868
+ <param pos="0" name="service.family" value="Sentinel"/>
1869
+ <param pos="1" name="service.version"/>
1870
+ </fingerprint>
1871
+ <fingerprint pattern="^SentinelKeysServer/((?:\d+\.)*\d+)$">
1872
+ <description>Sentinel Key Server - Embedded httpd in SafeNet's memory key dongles</description>
1873
+ <example service.version="1.3.1">SentinelKeysServer/1.3.1</example>
1874
+ <example>SentinelKeysServer/1.0</example>
1875
+ <example>SentinelKeysServer/1</example>
1876
+ <param pos="0" name="service.vendor" value="SafeNet"/>
1877
+ <param pos="0" name="service.product" value="Sentinel Keys Server"/>
1878
+ <param pos="0" name="service.family" value="Sentinel"/>
1879
+ <param pos="1" name="service.version"/>
1880
+ </fingerprint>
1881
+ <fingerprint pattern="^CherryPy/((?:\d+\.)*\d+)$">
1882
+ <description>Web server component of CherryPy web application framework.</description>
1883
+ <example>CherryPy/3.1.2</example>
1884
+ <example>CherryPy/3</example>
1885
+ <param pos="0" name="service.vendor" value="CherryPy"/>
1886
+ <param pos="0" name="service.product" value="CherryPy"/>
1887
+ <param pos="0" name="service.family" value="CherryPy"/>
1888
+ <param pos="1" name="service.version"/>
1889
+ <param pos="0" name="service.cpe23" value="cpe:/a:cherrypy:cherrypy:{service.version}"/>
1890
+ </fingerprint>
1891
+ <fingerprint pattern="(?i)^TornadoServer/((?:\d+\.)*\d+)$">
1892
+ <description>Tornado Python web framework and asynchronous networking library.</description>
1893
+ <example>TornadoServer/4.0.2</example>
1894
+ <param pos="0" name="service.vendor" value="TornadoWeb"/>
1895
+ <param pos="0" name="service.product" value="Tornado"/>
1896
+ <param pos="0" name="service.family" value="Tornado"/>
1897
+ <param pos="1" name="service.version"/>
1898
+ <param pos="0" name="service.cpe23" value="cpe:/a:tornadoweb:tornado:{service.version}"/>
1899
+ </fingerprint>
1900
+ <fingerprint pattern="(?i)^SimpleHTTP/((?:\d+\.)*\d+)\s*Python/((?:\d+\.)*\d+)$">
1901
+ <description>SimpleHTTPRequestHandler Python class is a simple HTTP request handler.</description>
1902
+ <example>SimpleHTTP/0.6 Python/2.7.6</example>
1903
+ <example>SimpleHTTP/0.6 Python/3.4.0</example>
1904
+ <param pos="0" name="service.vendor" value="Python Software Foundation"/>
1905
+ <param pos="0" name="service.product" value="SimpleHTTP"/>
1906
+ <param pos="0" name="service.family" value="Python"/>
1907
+ <param pos="1" name="service.version"/>
1908
+ <param pos="2" name="python.version"/>
1909
+ </fingerprint>
1910
+ <fingerprint pattern="^HP Web Jetadmin/((?:\d+\.)*\d+)\s*(.*)$">
1911
+ <description>Apache variant for web access to HP printers.</description>
1912
+ <example>HP Web Jetadmin/2.0.50 (Win32) mod_auth_sspi/1.0.1 mod_ssl/2.0.50 OpenSSL/0.9.6m</example>
1913
+ <example>HP Web Jetadmin/2 (Win32) mod_auth_sspi/1.0.1 mod_ssl/2.0.50 OpenSSL/0.9.6m</example>
1914
+ <param pos="0" name="service.vendor" value="Apache"/>
1915
+ <param pos="0" name="service.product" value="HTTPD"/>
1916
+ <param pos="0" name="service.family" value="Apache"/>
1917
+ <param pos="0" name="apache.variant" value="HP Web Jetadmin"/>
1918
+ <param pos="1" name="service.version"/>
1919
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:{service.version}"/>
1920
+ <param pos="2" name="apache.info"/>
1921
+ </fingerprint>
1922
+ <fingerprint pattern="^HP Web Jetadmin ([\d\.]+)(?: \([^\)]+\))?$">
1923
+ <description>HP printers, perhaps Apache, but we can't say for sure</description>
1924
+ <example service.version="10.3.85669">HP Web Jetadmin 10.3.85669</example>
1925
+ <example service.version="10.3.91358">HP Web Jetadmin 10.3.91358 (10.3 SR5)</example>
1926
+ <param pos="0" name="service.vendor" value="HP"/>
1927
+ <param pos="0" name="service.product" value="Web Jetadmin"/>
1928
+ <param pos="1" name="service.version"/>
1929
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:web_jetadmin:{service.version}"/>
1930
+ </fingerprint>
1931
+ <fingerprint pattern="^KM-MFP-http/V([\d\.]+)$">
1932
+ <description>Kyocera Printers</description>
1933
+ <example service.version="0.0.1">KM-MFP-http/V0.0.1</example>
1934
+ <param pos="0" name="os.vendor" value="Kycoera"/>
1935
+ <param pos="0" name="os.device" value="Multifunction Device"/>
1936
+ <param pos="0" name="hw.vendor" value="Kycoera"/>
1937
+ <param pos="0" name="hw.device" value="Multifunction Device"/>
1938
+ <param pos="0" name="service.vendor" value="Kyocera"/>
1939
+ <param pos="0" name="service.product" value="KM-MFP-HTTP"/>
1940
+ <param pos="1" name="service.version"/>
1941
+ </fingerprint>
1942
+ <fingerprint pattern="^Citrix Web PN Server$">
1943
+ <description>Citrix Web PN (Program Neighborhood) Server is an HTTP server used by Citrix products</description>
1944
+ <example>Citrix Web PN Server</example>
1945
+ <param pos="0" name="service.vendor" value="Citrix"/>
1946
+ <param pos="0" name="service.product" value="Web PN Server"/>
1947
+ <param pos="0" name="service.family" value="Web PN Server"/>
1948
+ </fingerprint>
1949
+ <fingerprint pattern="^Lotus Expeditor Web Container/((?:\d+\.)*\d+)$">
1950
+ <description>Expeditor is a framework used by IBM in many products in the Lotus brand, such as Sametime and Notes.</description>
1951
+ <example>Lotus Expeditor Web Container/6.1</example>
1952
+ <example>Lotus Expeditor Web Container/6</example>
1953
+ <param pos="0" name="service.vendor" value="IBM"/>
1954
+ <param pos="0" name="service.product" value="Lotus Expeditor Server"/>
1955
+ <param pos="0" name="service.family" value="Lotus Expeditor"/>
1956
+ <param pos="1" name="service.version"/>
1957
+ </fingerprint>
1958
+ <!-- GoAhead software was acquired by Oracle in 2011. They later handed this
1959
+ off to (E)Mbedthis. Version 3.0 released in October 2012 appears to be
1960
+ the first version to fully be Mbedthis software.
1961
+ -->
1962
+ <fingerprint pattern="^GoAhead-(?:Webs|http)$">
1963
+ <description>GoAhead-Webs - no version</description>
1964
+ <example>GoAhead-Webs</example>
1965
+ <param pos="0" name="service.vendor" value="Oracle"/>
1966
+ <param pos="0" name="service.product" value="GoAhead Webserver"/>
1967
+ <param pos="0" name="service.family" value="GoAhead Webserver"/>
1968
+ </fingerprint>
1969
+ <fingerprint pattern="^GoAhead-(?:Webs|http)\/([\d.]+)(?: PeerSec-MatrixSSL\/[\d.]+-OPEN)?$">
1970
+ <description>GoAhead-Webs - version</description>
1971
+ <example service.version="2.5.0">GoAhead-Webs/2.5.0 PeerSec-MatrixSSL/3.4.2-OPEN</example>
1972
+ <example>GoAhead-Webs/2.5.0</example>
1973
+ <param pos="0" name="service.vendor" value="Oracle"/>
1974
+ <param pos="0" name="service.product" value="GoAhead Webserver"/>
1975
+ <param pos="0" name="service.family" value="GoAhead Webserver"/>
1976
+ <param pos="1" name="service.version"/>
1977
+ </fingerprint>
1978
+ <!-- MBedthis changed its name/branding to Embedthis-->
1979
+ <fingerprint pattern="^Mbedthis-App[Ww]eb/([\d.]+)$">
1980
+ <description>Mbedthis Appweb</description>
1981
+ <example service.version="2.4.0">Mbedthis-Appweb/2.4.0</example>
1982
+ <example service.version="2.4.0">Mbedthis-AppWeb/2.4.0</example>
1983
+ <example>Mbedthis-Appweb/2.4.2</example>
1984
+ <example>Mbedthis-Appweb/2</example>
1985
+ <param pos="0" name="service.vendor" value="Mbedthis Software"/>
1986
+ <param pos="0" name="service.product" value="Appweb"/>
1987
+ <param pos="0" name="service.family" value="Appweb"/>
1988
+ <param pos="1" name="service.version"/>
1989
+ </fingerprint>
1990
+ <fingerprint pattern="^Embedthis-(?:Appweb|http)\/?(:?[\d.]+)?$">
1991
+ <description>Embedthis AppWeb</description>
1992
+ <example service.version="3.2.3">Embedthis-Appweb/3.2.3</example>
1993
+ <example>Embedthis-http</example>
1994
+ <example service.version="4.0.0">Embedthis-http/4.0.0</example>
1995
+ <param pos="0" name="service.vendor" value="Embedthis"/>
1996
+ <param pos="0" name="service.product" value="Appweb"/>
1997
+ <param pos="0" name="service.family" value="Appweb"/>
1998
+ <param pos="1" name="service.version"/>
1999
+ <param pos="0" name="service.cpe23" value="cpe:/a:embedthis:appweb:{service.version}"/>
2000
+ </fingerprint>
2001
+ <fingerprint pattern="^Avaya CMBE/((?:\d+\.)*\d+)$">
2002
+ <description>Web server for Avaya Aura Communication Manager Branch, a SIP-based communications platform.</description>
2003
+ <example>Avaya CMBE/2.0.0</example>
2004
+ <example>Avaya CMBE/2</example>
2005
+ <param pos="0" name="service.vendor" value="Avaya"/>
2006
+ <param pos="0" name="service.product" value="Aura Communication Manager"/>
2007
+ <param pos="0" name="service.family" value="Aura"/>
2008
+ <param pos="1" name="service.version"/>
2009
+ </fingerprint>
2010
+ <fingerprint pattern="^Rapid Logic/((?:\d+\.)*\d+)$">
2011
+ <description>Embedded web server by Rapid Logic, which was acquired by Wind River.</description>
2012
+ <example service.version="1.1">Rapid Logic/1.1</example>
2013
+ <example service.version="1">Rapid Logic/1</example>
2014
+ <param pos="0" name="service.vendor" value="Wind River"/>
2015
+ <param pos="0" name="service.product" value="Rapid Logic"/>
2016
+ <param pos="1" name="service.version"/>
2017
+ </fingerprint>
2018
+ <fingerprint pattern="^WindRiver-WebServer/((?:\d+\.)*\d+)$">
2019
+ <description>Wind River HTTP server</description>
2020
+ <example service.version="4.4">WindRiver-WebServer/4.4</example>
2021
+ <param pos="0" name="service.vendor" value="Wind River"/>
2022
+ <param pos="0" name="service.product" value="WebServer"/>
2023
+ <param pos="1" name="service.version"/>
2024
+ </fingerprint>
2025
+ <fingerprint pattern="^Sophos Email Appliance$">
2026
+ <description>Embedded web server for a rack-mounted email appliance that blocks spam and malware.</description>
2027
+ <example>Sophos Email Appliance</example>
2028
+ <param pos="0" name="service.vendor" value="Sophos"/>
2029
+ <param pos="0" name="service.product" value="Email Appliance"/>
2030
+ <param pos="0" name="os.vendor" value="Sophos"/>
2031
+ <param pos="0" name="os.product" value="Email Appliance"/>
2032
+ </fingerprint>
2033
+ <fingerprint pattern="^CUPS\/((?:\d\.)+\d+)(?:\s*IPP\/\d+\.\d+)?$">
2034
+ <description>Server for the CUPS web interface.</description>
2035
+ <example service.version="1.1">CUPS/1.1</example>
2036
+ <example service.version="1.7">CUPS/1.7 IPP/2.1</example>
2037
+ <param pos="0" name="service.vendor" value="Apple"/>
2038
+ <param pos="0" name="service.product" value="CUPS"/>
2039
+ <param pos="0" name="service.family" value="CUPS"/>
2040
+ <param pos="1" name="service.version"/>
2041
+ <param pos="0" name="service.cpe23" value="cpe:/a:apple:cups:{service.version}"/>
2042
+ </fingerprint>
2043
+ <fingerprint pattern="^TwistedWeb/([\d.rc]+)$">
2044
+ <description>Twisted Matrix Labs - TwistedWeb</description>
2045
+ <example>TwistedWeb/2.5.0</example>
2046
+ <example service.version="16.4.0">TwistedWeb/16.4.0</example>
2047
+ <example service.version="16.5.0rc2">TwistedWeb/16.5.0rc2</example>
2048
+ <param pos="0" name="service.vendor" value="TwistedMatrix"/>
2049
+ <param pos="0" name="service.product" value="Twisted Web"/>
2050
+ <param pos="0" name="service.family" value="Twisted Web"/>
2051
+ <param pos="1" name="service.version"/>
2052
+ </fingerprint>
2053
+ <fingerprint pattern="^mini_httpd/((?:\d+\.)*\d+) \S*$">
2054
+ <description>A small HTTP server</description>
2055
+ <example>mini_httpd/1.14 23jun2000</example>
2056
+ <example>mini_httpd/1 23jun2000</example>
2057
+ <param pos="0" name="service.vendor" value="ACME Laboratories"/>
2058
+ <param pos="0" name="service.product" value="mini_httpd"/>
2059
+ <param pos="0" name="service.family" value="mini_httpd"/>
2060
+ <param pos="1" name="service.version"/>
2061
+ </fingerprint>
2062
+ <fingerprint pattern="^thin ((?:\d+\.)*\d+) codename .+$">
2063
+ <description>A Ruby-based web server.</description>
2064
+ <example>thin 1.2.4 codename Flaming Astroboy</example>
2065
+ <example>thin 1 codename Flaming Astroboy</example>
2066
+ <param pos="0" name="service.product" value="Thin"/>
2067
+ <param pos="0" name="service.family" value="Thin"/>
2068
+ <param pos="1" name="service.version"/>
2069
+ </fingerprint>
2070
+ <fingerprint pattern="^Avocent DSView \d+/((?:\d+\.)*\d+)$">
2071
+ <description>Web server interface for controlling data centers.</description>
2072
+ <example>Avocent DSView 3/3.7.0.71</example>
2073
+ <example>Avocent DSView 3/3</example>
2074
+ <param pos="0" name="service.vendor" value="Avocent"/>
2075
+ <param pos="0" name="service.product" value="DSView"/>
2076
+ <param pos="0" name="service.family" value="DSView"/>
2077
+ <param pos="1" name="service.version"/>
2078
+ <param pos="0" name="service.cpe23" value="cpe:/a:avocent:dsview:{service.version}"/>
2079
+ </fingerprint>
2080
+ <fingerprint pattern="^Mongrel ((?:\d+\.)*\d+)$">
2081
+ <description>Ruby-based web server and HTTP library.</description>
2082
+ <example>Mongrel 1.1.5</example>
2083
+ <example>Mongrel 1</example>
2084
+ <param pos="0" name="service.product" value="Mongrel"/>
2085
+ <param pos="0" name="service.family" value="Mongrel"/>
2086
+ <param pos="1" name="service.version"/>
2087
+ </fingerprint>
2088
+ <fingerprint pattern="^Microplex emHTTPD/((?:\d+\.)*\d+)$">
2089
+ <description>Embedded web server used by Microplex.</description>
2090
+ <example>Microplex emHTTPD/1.0</example>
2091
+ <example>Microplex emHTTPD/1.1</example>
2092
+ <example>Microplex emHTTPD/1</example>
2093
+ <param pos="0" name="service.vendor" value="Microplex"/>
2094
+ <param pos="0" name="service.product" value="emHTTPD"/>
2095
+ <param pos="0" name="service.family" value="emHTTPD"/>
2096
+ <param pos="1" name="service.version"/>
2097
+ <param pos="0" name="os.vendor" value="Microplex"/>
2098
+ <param pos="0" name="os.device" value="Print server"/>
2099
+ </fingerprint>
2100
+ <fingerprint pattern="^UPS_Server/((?:\d+\.)*\d+)$">
2101
+ <description>An embedded web server used for UPS management; primarily by Eaton, but also by APC.</description>
2102
+ <example>UPS_Server/1.0</example>
2103
+ <example>UPS_Server/1</example>
2104
+ <param pos="0" name="service.vendor" value="Eaton"/>
2105
+ <param pos="0" name="service.product" value="ConnectUPS"/>
2106
+ <param pos="0" name="service.family" value="ConnectUPS"/>
2107
+ <param pos="1" name="service.version"/>
2108
+ <param pos="0" name="os.vendor" value="Eaton"/>
2109
+ <param pos="0" name="os.device" value="UPS"/>
2110
+ </fingerprint>
2111
+ <fingerprint pattern="^JC-HTTPD/((?:\d+\.)*\d+)$">
2112
+ <description>An embedded web server, used notably by Oki and Kyocera in printers.</description>
2113
+ <example>JC-HTTPD/1.11.14</example>
2114
+ <example>JC-HTTPD/1</example>
2115
+ <param pos="0" name="service.product" value="JC-HTTPD"/>
2116
+ <param pos="0" name="service.family" value="JC-HTTPD"/>
2117
+ <param pos="1" name="service.version"/>
2118
+ </fingerprint>
2119
+ <fingerprint pattern="^JC-SHTTPD/((?:\d+\.)*\d+)$">
2120
+ <description>An embedded web server.</description>
2121
+ <example>JC-SHTTPD/1.17.20</example>
2122
+ <example>JC-SHTTPD/1</example>
2123
+ <param pos="0" name="service.product" value="JC-SHTTPD"/>
2124
+ <param pos="0" name="service.family" value="JC-SHTTPD"/>
2125
+ <param pos="1" name="service.version"/>
2126
+ </fingerprint>
2127
+ <fingerprint pattern="^Oracle XML DB/Oracle\S+ Enterprise Edition Release ((?:\d+\.)*\d+) - Production$">
2128
+ <description>Web server providing web services for Oracle's XML DB - with version string</description>
2129
+ <example>Oracle XML DB/Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production</example>
2130
+ <example>Oracle XML DB/Oracle9i Enterprise Edition Release 9 - Production</example>
2131
+ <param pos="0" name="service.vendor" value="Oracle"/>
2132
+ <param pos="0" name="service.product" value="XML DB"/>
2133
+ <param pos="0" name="service.family" value="Oracle"/>
2134
+ <param pos="1" name="service.version"/>
2135
+ </fingerprint>
2136
+ <fingerprint pattern="^Oracle XML DB/Oracle Database$">
2137
+ <description>Web server providing web services for Oracle's XML DB</description>
2138
+ <example>Oracle XML DB/Oracle Database</example>
2139
+ <param pos="0" name="service.vendor" value="Oracle"/>
2140
+ <param pos="0" name="service.product" value="XML DB"/>
2141
+ <param pos="0" name="service.family" value="Oracle"/>
2142
+ </fingerprint>
2143
+ <fingerprint pattern="^sfcHttpd$">
2144
+ <description>Server for HTTP interface to sfcb, a lightweight CIM server</description>
2145
+ <example>sfcHttpd</example>
2146
+ <param pos="0" name="service.vendor" value="SBLIM"/>
2147
+ <param pos="0" name="service.product" value="sfcb"/>
2148
+ <param pos="0" name="service.family" value="sfcb"/>
2149
+ </fingerprint>
2150
+ <fingerprint pattern="^PanWeb Server/ -">
2151
+ <description>HTTP and HTTPS server found on Palo Alto Networks devices</description>
2152
+ <example>PanWeb Server/ -</example>
2153
+ <param pos="0" name="service.vendor" value="Palo Alto Networks"/>
2154
+ <param pos="0" name="service.product" value="PA Firewall"/>
2155
+ <param pos="0" name="os.vendor" value="Palo Alto Networks"/>
2156
+ <param pos="0" name="os.product" value="PA Firewall"/>
2157
+ <param pos="0" name="os.device" value="Firewall"/>
2158
+ <param pos="0" name="os.cpe23" value="cpe:/o:paloaltonetworks:pan-os:-"/>
2159
+ </fingerprint>
2160
+ <fingerprint pattern="^Ews/((?:\d+\.)*\d+)$">
2161
+ <description>IBM Network Printer Manager.</description>
2162
+ <example>Ews/0.1</example>
2163
+ <example>Ews/0</example>
2164
+ <param pos="0" name="service.vendor" value="IBM"/>
2165
+ <param pos="0" name="service.product" value="Network Printer Manager"/>
2166
+ <param pos="0" name="service.family" value="Network Printer Manager"/>
2167
+ <param pos="1" name="service.version"/>
2168
+ </fingerprint>
2169
+ <!-- NOTE: '$ProjectRevision: {some version string} $' has been seen in a
2170
+ variety of products including printers, PDUs, etc.
2171
+ -->
2172
+ <fingerprint pattern="^\$ProjectRevision: 4.0.2.38 \$$">
2173
+ <description>This banner is seen on some HP LaserJet printers.</description>
2174
+ <example>$ProjectRevision: 4.0.2.38 $</example>
2175
+ <param pos="0" name="os.vendor" value="HP"/>
2176
+ <param pos="0" name="os.device" value="Printer"/>
2177
+ <param pos="0" name="os.family" value="LaserJet"/>
2178
+ </fingerprint>
2179
+ <fingerprint pattern="^WEBrick/([\d\.]+) .*$">
2180
+ <description>WEBrick default setup</description>
2181
+ <example>WEBrick/1.3.1 (Ruby/1.9.3/2013-02-22)</example>
2182
+ <param pos="0" name="service.vendor" value="Ruby"/>
2183
+ <param pos="0" name="service.product" value="WEBrick"/>
2184
+ <param pos="1" name="service.version"/>
2185
+ </fingerprint>
2186
+ <fingerprint pattern="^Aspen/(\S+)">
2187
+ <description>Aspen web server</description>
2188
+ <example service.version="0.8">Aspen/0.8</example>
2189
+ <param pos="0" name="service.product" value="Aspen"/>
2190
+ <param pos="1" name="service.version"/>
2191
+ </fingerprint>
2192
+ <fingerprint pattern="^Boa/([\d\.]+\S*)">
2193
+ <description>Boa web server</description>
2194
+ <example service.version="0.94.14rc21">Boa/0.94.14rc21</example>
2195
+ <example service.version="0.94.14rc18-ipcam">Boa/0.94.14rc18-ipcam</example>
2196
+ <example service.version="0.93.15">Boa/0.93.15 (with Intersil Extensions)</example>
2197
+ <example service.version="0.92p">Boa/0.92p OS-9 Version</example>
2198
+ <example service.version="0.93.15">Boa/0.93.15</example>
2199
+ <param pos="0" name="service.product" value="Boa"/>
2200
+ <param pos="1" name="service.version"/>
2201
+ </fingerprint>
2202
+ <!-- HiSilicon is OEMd by a number of DVR manufacturers -->
2203
+ <fingerprint pattern="^Cross Web Server$">
2204
+ <description>Web server found on DVR and webcam servers sourced from HiSilicon</description>
2205
+ <example>Cross Web Server</example>
2206
+ <param pos="0" name="service.vendor" value="HiSilicon"/>
2207
+ <param pos="0" name="service.product" value="Cross Web Server"/>
2208
+ <param pos="0" name="os.vendor" value="HiSilicon"/>
2209
+ <param pos="0" name="os.device" value="DVR"/>
2210
+ <param pos="0" name="hw.device" value="DVR"/>
2211
+ </fingerprint>
2212
+ <!-- Hikvision is OEMd by a number of DVR manufacturers -->
2213
+ <fingerprint pattern="^(?:Hikvision|DNVRS|DVRDVS)-Webs$">
2214
+ <description>Web server found on DVR and webcam servers sourced from Hikvision</description>
2215
+ <example>Hikvision-Webs</example>
2216
+ <example>DVRDVS-Webs</example>
2217
+ <example>DNVRS-Webs</example>
2218
+ <param pos="0" name="service.vendor" value="Hikvision"/>
2219
+ <param pos="0" name="service.product" value="Hikvision Web Server"/>
2220
+ <param pos="0" name="os.vendor" value="Hikvision"/>
2221
+ <param pos="0" name="os.device" value="DVR"/>
2222
+ <param pos="0" name="hw.device" value="DVR"/>
2223
+ </fingerprint>
2224
+ <fingerprint pattern="^NET-DK[/ ](\d+\.\d+)$">
2225
+ <description>Web server found on ARRIS cable modems</description>
2226
+ <example>NET-DK/1.0</example>
2227
+ <example>NET-DK 1.1</example>
2228
+ <param pos="0" name="service.vendor" value="ARRIS"/>
2229
+ <param pos="0" name="service.product" value="Net-DK Web Server"/>
2230
+ <param pos="1" name="service.version"/>
2231
+ <param pos="0" name="os.vendor" value="ARRIS"/>
2232
+ <param pos="0" name="os.device" value="Cable Modem"/>
2233
+ <param pos="0" name="hw.vendor" value="ARRIS"/>
2234
+ <param pos="0" name="hw.device" value="Cable Modem"/>
2235
+ </fingerprint>
2236
+ <fingerprint pattern="^2wire Gateway$">
2237
+ <description>Web server found on some Arris/2wire devices</description>
2238
+ <example>2wire Gateway</example>
2239
+ <param pos="0" name="service.vendor" value="ARRIS"/>
2240
+ <param pos="0" name="service.product" value="2wire"/>
2241
+ </fingerprint>
2242
+ <!-- junit says,
2243
+ "Example pattern '' from http_servers.xml didn't match pattern '^$'"
2244
+ Figure out if we have a way to support matching empty strings later.
2245
+ <fingerprint pattern="^?">
2246
+ <example></example>
2247
+ <description>A blank banner; assert nothing.</description>
2248
+ </fingerprint>
2249
+ -->
2250
+ <fingerprint pattern="^(?:(?:\d+.){3}\d+):\d{1,4}$">
2251
+ <description>A banner consisting of an IP address and port -- assert nothing.</description>
2252
+ <example>192.168.0.4:9999</example>
2253
+ </fingerprint>
2254
+ <fingerprint pattern="^Web-Server/(?:\d+\.+\d+)$">
2255
+ <description>Obfuscated web server -- assert nothing.</description>
2256
+ <example>Web-Server/3.0</example>
2257
+ </fingerprint>
2258
+ <fingerprint pattern="^httpd$">
2259
+ <description>httpd - generic -- assert nothing.</description>
2260
+ <example>httpd</example>
2261
+ </fingerprint>
2262
+ <!-- Service provider equipment (CDNs, etc) -->
2263
+ <fingerprint pattern="^AkamaiGHost$">
2264
+ <description>Akamai Global Host</description>
2265
+ <example>AkamaiGHost</example>
2266
+ <param pos="0" name="service.vendor" value="Akamai"/>
2267
+ <param pos="0" name="service.product" value="GHost"/>
2268
+ <param pos="0" name="os.vendor" value="Akamai"/>
2269
+ <param pos="0" name="os.device" value="Web proxy"/>
2270
+ </fingerprint>
2271
+ <fingerprint pattern="^gws$">
2272
+ <description>Google Web Services</description>
2273
+ <example>gws</example>
2274
+ <param pos="0" name="service.vendor" value="Google"/>
2275
+ <param pos="0" name="service.product" value="Google Web Services"/>
2276
+ <param pos="0" name="service.family" value="Google Web Server"/>
2277
+ </fingerprint>
2278
+ <fingerprint pattern="^GFE/((?:\d+\.)*\d+)$">
2279
+ <description>Google Front End for apps running on Google services.</description>
2280
+ <example>GFE/1.3</example>
2281
+ <example>GFE/1</example>
2282
+ <param pos="0" name="service.vendor" value="Google"/>
2283
+ <param pos="0" name="service.product" value="Google Front End"/>
2284
+ <param pos="0" name="service.family" value="Google Web Server"/>
2285
+ <param pos="1" name="service.version"/>
2286
+ </fingerprint>
2287
+ <fingerprint pattern="^CloudFront$">
2288
+ <description>Amazon CloudFront web load balancer endpoint</description>
2289
+ <example>CloudFront</example>
2290
+ <param pos="0" name="service.vendor" value="Amazon"/>
2291
+ <param pos="0" name="service.product" value="CloudFront Load Balancer"/>
2292
+ <param pos="0" name="service.family" value="CloudFront"/>
2293
+ </fingerprint>
2294
+ <fingerprint pattern="^Amazon-Cloud-Drive$">
2295
+ <description>Amazon Cloud Drive / Drive</description>
2296
+ <example>Amazon-Cloud-Drive</example>
2297
+ <param pos="0" name="service.vendor" value="Amazon"/>
2298
+ <param pos="0" name="service.product" value="Drive"/>
2299
+ </fingerprint>
2300
+ <fingerprint pattern="^AmazonS3$">
2301
+ <description>Amazon S3 (Simple Cloud Storage Service)</description>
2302
+ <example>AmazonS3</example>
2303
+ <param pos="0" name="service.vendor" value="Amazon"/>
2304
+ <param pos="0" name="service.product" value="S3"/>
2305
+ </fingerprint>
2306
+ <fingerprint pattern="^Amazon SimpleDB$">
2307
+ <description>Amazon SimpleDB / Simple Database Service</description>
2308
+ <example>Amazon SimpleDB</example>
2309
+ <param pos="0" name="service.vendor" value="Amazon"/>
2310
+ <param pos="0" name="service.product" value="SimpleDB"/>
2311
+ </fingerprint>
2312
+ <fingerprint pattern="^AmazonSnowball$">
2313
+ <description>Amazon Snowball</description>
2314
+ <example>AmazonSnowball</example>
2315
+ <param pos="0" name="service.vendor" value="Amazon"/>
2316
+ <param pos="0" name="service.product" value="Snowball"/>
2317
+ </fingerprint>
2318
+ <fingerprint pattern="^awselb/([\d.rc]+)$">
2319
+ <description>Amazon Elastic Load Balancing</description>
2320
+ <example service.version="2.0">awselb/2.0</example>
2321
+ <param pos="0" name="service.vendor" value="Amazon"/>
2322
+ <param pos="0" name="service.family" value="Elastic Load Balancing"/>
2323
+ <param pos="1" name="service.version"/>
2324
+ </fingerprint>
2325
+ <fingerprint pattern="^cloudflare(?:-nginx)?$">
2326
+ <description>CloudFlare web load balancer endpoint</description>
2327
+ <example>cloudflare-nginx</example>
2328
+ <example>cloudflare</example>
2329
+ <param pos="0" name="service.vendor" value="CloudFlare"/>
2330
+ <param pos="0" name="service.product" value="CloudFlare Load Balancer"/>
2331
+ <param pos="0" name="service.family" value="CloudFlare"/>
2332
+ </fingerprint>
2333
+ <fingerprint pattern="^gSOAP/([\d\.]+)$">
2334
+ <description>gSOAP</description>
2335
+ <example service.version="2.7">gSOAP/2.7</example>
2336
+ <param pos="0" name="service.product" value="gSOAP"/>
2337
+ <param pos="1" name="service.version"/>
2338
+ </fingerprint>
2339
+ <!-- Apple QuickTime streaming server -->
2340
+ <fingerprint pattern="^QTSS\/([\d\.]+) \(Build\/[\d\.]+; Platform\/MacOSX; Release\/Panther">
2341
+ <description>QTSS on OS X 10.3</description>
2342
+ <example service.version="5.0">QTSS/5.0 (Build/452; Platform/MacOSX; Release/Panther; )</example>
2343
+ <example service.version="5.0.3.3">QTSS/5.0.3.3 (Build/452.22.4; Platform/MacOSX; Release/Panther; Update/Security; )</example>
2344
+ <param pos="0" name="os.vendor" value="Apple"/>
2345
+ <param pos="0" name="os.family" value="Mac OS X"/>
2346
+ <param pos="0" name="os.product" value="Mac OS X"/>
2347
+ <param pos="0" name="os.version" value="10.3"/>
2348
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.3"/>
2349
+ <param pos="0" name="service.product" value="QTSS"/>
2350
+ <param pos="1" name="service.version"/>
2351
+ </fingerprint>
2352
+ <fingerprint pattern="^QTSS\/([\d\.]+) \(Build\/[\d\.]+; Platform\/MacOSX; Release\/Mac OS X">
2353
+ <description>QTSS OS X</description>
2354
+ <example service.version="6.1.0">QTSS/6.1.0 (Build/532; Platform/MacOSX; Release/Mac OS X Server; )</example>
2355
+ <param pos="0" name="os.vendor" value="Apple"/>
2356
+ <param pos="0" name="os.family" value="Mac OS X"/>
2357
+ <param pos="0" name="os.product" value="Mac OS X"/>
2358
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:-"/>
2359
+ <param pos="0" name="service.product" value="QTSS"/>
2360
+ <param pos="1" name="service.version"/>
2361
+ </fingerprint>
2362
+ <fingerprint pattern="^SEPM$">
2363
+ <description>Symantec Endpoint Protection Manager</description>
2364
+ <example>SEPM</example>
2365
+ <param pos="0" name="service.vendor" value="Symantec"/>
2366
+ <param pos="0" name="service.product" value="Symantec Endpoint Protection Manager"/>
2367
+ <param pos="0" name="service.family" value="Symantec Endpoint Protection Manager"/>
2368
+ </fingerprint>
2369
+ <fingerprint pattern="^Intel\(R\) Active Management Technology\s(\d+\.\d+\.\d+\.\d+|\d+\.\d+\.\d+|\d+\.\d+)">
2370
+ <description>Intel(R) Active Management Technology (AMT) with a version</description>
2371
+ <example service.version="7.1.86">Intel(R) Active Management Technology 7.1.86</example>
2372
+ <param pos="0" name="service.vendor" value="Intel"/>
2373
+ <param pos="0" name="service.product" value="Intel(R) Active Management Technology"/>
2374
+ <param pos="0" name="service.family" value="Intel(R) Active Management Technology"/>
2375
+ <param pos="1" name="service.version"/>
2376
+ </fingerprint>
2377
+ <fingerprint pattern="^(?:AMT|Intel\(R\) Active Management Technology)$">
2378
+ <description>Intel(R) Active Management Technology (AMT) without a version</description>
2379
+ <example>AMT</example>
2380
+ <example>Intel(R) Active Management Technology</example>
2381
+ <param pos="0" name="service.vendor" value="Intel"/>
2382
+ <param pos="0" name="service.product" value="Intel(R) Active Management Technology"/>
2383
+ <param pos="0" name="service.family" value="Intel(R) Active Management Technology"/>
2384
+ </fingerprint>
2385
+ <fingerprint pattern="^Intel\(R\) Standard Manageability\s(\d+\.\d+\.\d+\.\d+|\d+\.\d+\.\d+|\d+\.\d+)">
2386
+ <description>Intel(R) Standard Manageability</description>
2387
+ <example service.version="5.0.50">Intel(R) Standard Manageability 5.0.50</example>
2388
+ <example service.version="9.0.3">Intel(R) Standard Manageability 9.0.3</example>
2389
+ <param pos="0" name="service.vendor" value="Intel"/>
2390
+ <param pos="0" name="service.product" value="Intel(R) Standard Manageability"/>
2391
+ <param pos="0" name="service.family" value="Intel(R) Active Management Technology"/>
2392
+ <param pos="1" name="service.version"/>
2393
+ </fingerprint>
2394
+ <fingerprint pattern="^Sunny WebBox$">
2395
+ <description>Sunny WebBox</description>
2396
+ <example>Sunny WebBox</example>
2397
+ <param pos="0" name="service.vendor" value="SMA Solar Technology Ag"/>
2398
+ <param pos="0" name="service.family" value="Sunny"/>
2399
+ <param pos="0" name="service.product" value="WebBox"/>
2400
+ <param pos="0" name="hw.family" value="Sunny"/>
2401
+ <param pos="0" name="hw.product" value="WebBox"/>
2402
+ <param pos="0" name="hw.device" value="Power device"/>
2403
+ <param pos="0" name="os.vendor" value="Microsoft"/>
2404
+ <param pos="0" name="os.family" value="Windows"/>
2405
+ <param pos="0" name="os.product" value="Windows CE"/>
2406
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_ce:-"/>
2407
+ </fingerprint>
2408
+ <fingerprint pattern="^EnergyICT RTU \d+-\w+-\d+$">
2409
+ <description>EnergyICT RTU</description>
2410
+ <example>EnergyICT RTU 101-F25CE1-1524</example>
2411
+ <param pos="0" name="hw.family" value="Honeywell"/>
2412
+ <param pos="0" name="hw.product" value="RTU"/>
2413
+ <param pos="0" name="hw.device" value="Power device"/>
2414
+ </fingerprint>
2415
+ <fingerprint pattern="^AV-TECH AV787 Video Web Server$">
2416
+ <description>AV-TECH AVC787 Video Web Server</description>
2417
+ <example>AV-TECH AV787 Video Web Server</example>
2418
+ <param pos="0" name="service.vendor" value="AVTECH"/>
2419
+ <param pos="0" name="service.family" value="MPEG4 DVR"/>
2420
+ <param pos="0" name="service.product" value="HTTPD"/>
2421
+ <param pos="0" name="hw.family" value="MPEG4 DVR"/>
2422
+ <param pos="0" name="hw.product" value="AVC787"/>
2423
+ <param pos="0" name="hw.device" value="DVR"/>
2424
+ </fingerprint>
2425
+ <fingerprint pattern="^Splunkd$">
2426
+ <description>Splunk HTTP server used in the web interface, forwarders, indexers and more</description>
2427
+ <example>Splunkd</example>
2428
+ <param pos="0" name="service.vendor" value="Splunk"/>
2429
+ </fingerprint>
2430
+ <fingerprint pattern="^tivo-httpd-\S+$">
2431
+ <description>Tivo DVR</description>
2432
+ <example>tivo-httpd-1:20.7.4.RC35-D18-6:D18</example>
2433
+ <param pos="0" name="hw.vendor" value="Tivo"/>
2434
+ <param pos="0" name="hw.family" value="DVR"/>
2435
+ <param pos="0" name="hw.device" value="DVR"/>
2436
+ </fingerprint>
2437
+ <fingerprint pattern="^OpenTV/([\d\.]+)$">
2438
+ <description>OpenTV</description>
2439
+ <example os.version="5.40">OpenTV/5.40</example>
2440
+ <param pos="0" name="os.vendor" value="NAGRA"/>
2441
+ <param pos="0" name="os.product" value="OpenTV"/>
2442
+ <param pos="0" name="os.device" value="DVR"/>
2443
+ <param pos="1" name="os.version"/>
2444
+ <param pos="0" name="hw.device" value="DVR"/>
2445
+ </fingerprint>
2446
+ <!-- Tridium previously had a product with the 'Niagra' spelling -->
2447
+ <fingerprint pattern="^Niagara Web Server\/([\d.]+)$">
2448
+ <description>Tridium Niagara AX Framework</description>
2449
+ <example service.version="3.8.111">Niagara Web Server/3.8.111</example>
2450
+ <param pos="0" name="service.vendor" value="Tridium"/>
2451
+ <param pos="0" name="service.family" value="Niagara"/>
2452
+ <param pos="0" name="service.product" value="Niagara AX"/>
2453
+ <param pos="1" name="service.version"/>
2454
+ </fingerprint>
2455
+ <fingerprint pattern="^Microsoft WinCE Fidelix v([\d.]+)$">
2456
+ <description>Fidelix Industrial Control Web Server</description>
2457
+ <example service.version="11.50.29">Microsoft WinCE Fidelix v11.50.29</example>
2458
+ <param pos="0" name="os.certainty" value="0.9"/>
2459
+ <param pos="0" name="os.vendor" value="Microsoft"/>
2460
+ <param pos="0" name="os.family" value="Windows"/>
2461
+ <param pos="0" name="os.product" value="Windows CE"/>
2462
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_ce:-"/>
2463
+ <param pos="0" name="service.vendor" value="Fidelix"/>
2464
+ <param pos="0" name="service.product" value="Web Server"/>
2465
+ <param pos="1" name="service.version"/>
2466
+ <param pos="0" name="hw.vendor" value="Fidelix"/>
2467
+ <param pos="0" name="hw.device" value="Industrial Control"/>
2468
+ </fingerprint>
2469
+ <fingerprint pattern="^chainpoint-node$">
2470
+ <description>Chainpoint Node</description>
2471
+ <example>chainpoint-node</example>
2472
+ <param pos="0" name="service.vendor" value="Chainpoint"/>
2473
+ <param pos="0" name="service.product" value="Node"/>
2474
+ </fingerprint>
2475
+ <fingerprint pattern="(?i)^(.*) UPnP/[\d\.]+\s+AVM FRITZ!(.*) ([\d\.]+)$">
2476
+ <description>AVM FRITZ! devices of various types</description>
2477
+ <example host.name="some thing" os.product="WLAN Repeater 1750E" os.version="134.07.01">some thing UPnP/1.0 AVM FRITZ!WLAN Repeater 1750E 134.07.01</example>
2478
+ <param pos="0" name="os.vendor" value="AVM"/>
2479
+ <param pos="0" name="os.family" value="FRITZ!Box"/>
2480
+ <param pos="2" name="os.product"/>
2481
+ <param pos="3" name="os.version"/>
2482
+ <param pos="1" name="host.name"/>
2483
+ </fingerprint>
2484
+ <fingerprint pattern="(?i)^Linux/(\S+) UPnP/[\d\.]+ miniupnpd/([\d\.]+)$">
2485
+ <description>Linux MiniUPnPd UPnP Server</description>
2486
+ <example>Linux/Cross_compiled UPnP/1.0 miniupnpd/1.0</example>
2487
+ <example>Linux/2.6.29.6-217.2.3.fc11.i686.PAE UPnP/1.0 miniupnpd/1.0</example>
2488
+ <example>Linux/2.4.21 UPnP/1.0 miniupnpd/1.0</example>
2489
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2490
+ <param pos="2" name="service.version"/>
2491
+ <param pos="0" name="os.vendor" value="Linux"/>
2492
+ <param pos="0" name="os.product" value="Linux"/>
2493
+ <param pos="1" name="os.version"/>
2494
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
2495
+ </fingerprint>
2496
+ <fingerprint pattern="^Tomato UPnP/\S+ MiniUPnPd/(\S+)$">
2497
+ <description>Tomato UPnP Server</description>
2498
+ <example>Tomato UPnP/1.0 MiniUPnPd/1.2</example>
2499
+ <example>Tomato UPnP/1.0 MiniUPnPd/1.4</example>
2500
+ <param pos="0" name="service.vendor" value="Tomato"/>
2501
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2502
+ <param pos="1" name="service.version"/>
2503
+ </fingerprint>
2504
+ <fingerprint pattern="(?i)^(RT-\w+) UPnP/\S+ MiniUPnPd/(\S+)$">
2505
+ <description>Asus WAP UPnP Server</description>
2506
+ <example>RT-G32 UPnP/1.0 MiniUPnPd/1.2</example>
2507
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2508
+ <param pos="2" name="service.version"/>
2509
+ <param pos="0" name="os.vendor" value="Asus"/>
2510
+ <param pos="1" name="os.product"/>
2511
+ <param pos="0" name="os.device" value="WAP"/>
2512
+ </fingerprint>
2513
+ <fingerprint pattern="(?i)^DrayTek/Vigor(\S+) UPnP/\S+ miniupnpd/(\S+)$">
2514
+ <description>DrayTek Vigor router UPnP Server</description>
2515
+ <example hw.model="2130">DrayTek/Vigor2130 UPnP/1.0 miniupnpd/1.0</example>
2516
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2517
+ <param pos="2" name="service.version"/>
2518
+ <param pos="0" name="hw.vendor" value="DrayTek"/>
2519
+ <param pos="0" name="hw.product" value="Vigor"/>
2520
+ <param pos="1" name="hw.model"/>
2521
+ <param pos="0" name="hw.device" value="Router"/>
2522
+ </fingerprint>
2523
+ <fingerprint pattern="(?i)Linux UPnP/\d\.\d Huawei-ATP-IGD$">
2524
+ <description>Huawei Echolife / Home Gateway (and possibly other) devices with UPnP</description>
2525
+ <example>Linux UPnP/1.0 Huawei-ATP-IGD</example>
2526
+ <param pos="0" name="hw.vendor" value="Huawei"/>
2527
+ <param pos="0" name="hw.device" value="Broadband router"/>
2528
+ </fingerprint>
2529
+ <fingerprint pattern="(?i)^OpenWRT/kamikaze UPnP/\S+ MiniUPnPd/(\S+)$">
2530
+ <description>OpenWRT Kamikaze WAP UPnP Server</description>
2531
+ <example>OpenWRT/kamikaze UPnP/1.0 MiniUPnPd/1.5</example>
2532
+ <example>OpenWRT/kamikaze UPnP/1.0 MiniUPnPd/1.2</example>
2533
+ <example>OpenWRT/kamikaze UPnP/1.0 MiniUPnPd/1.4</example>
2534
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2535
+ <param pos="1" name="service.version"/>
2536
+ <param pos="0" name="os.vendor" value="Linux"/>
2537
+ <param pos="0" name="os.family" value="OpenWRT"/>
2538
+ <param pos="0" name="os.product" value="Kamikaze"/>
2539
+ <param pos="0" name="os.device" value="WAP"/>
2540
+ </fingerprint>
2541
+ <fingerprint pattern="(?i)^Netgear/\S+ UPnP/\S+ miniupnpd/(\S+)$">
2542
+ <description>Netgear DG834G or WNDR3300 WAP UPnP Server</description>
2543
+ <example>Netgear/1.0 UPnP/1.0 miniupnpd/1.0</example>
2544
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2545
+ <param pos="1" name="service.version"/>
2546
+ <param pos="0" name="os.vendor" value="Netgear"/>
2547
+ <param pos="0" name="os.device" value="WAP"/>
2548
+ </fingerprint>
2549
+ <fingerprint pattern="^[^/]+/(\S+) DLNADOC/\S+ UPnP/\S+ MiniDLNA/(\S+)$">
2550
+ <description>DLNADOC UPnP Server</description>
2551
+ <example>Debian/4.0r8 DLNADOC/1.50 UPnP/1.0 MiniDLNA/1.0</example>
2552
+ <example>FreeBSD/8.2-RELEASE-p4 DLNADOC/1.50 UPnP/1.0 MiniDLNA/1.0.24</example>
2553
+ <example>Linux/2.6.36+ DLNADOC/1.50 UPnP/1.0 MiniDLNA/1.0</example>
2554
+ <param pos="0" name="service.product" value="MiniDLNA"/>
2555
+ <param pos="2" name="service.version"/>
2556
+ <param pos="0" name="os.vendor" value="Linux"/>
2557
+ <param pos="0" name="os.product" value="Linux"/>
2558
+ <param pos="1" name="os.version"/>
2559
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
2560
+ </fingerprint>
2561
+ <fingerprint pattern="(?i)^Debian\/(\S+) UPnP/\S+ MiniUPnPd/(\S+)$">
2562
+ <description>miniupnpd on a Debian variant</description>
2563
+ <example os.version="wheezy/sid" service.version="1.8">Debian/wheezy/sid UPnP/1.1 MiniUPnPd/1.8</example>
2564
+ <example os.version="4.0" service.version="1.0">Debian/4.0 UPnP/1.0 miniupnpd/1.0</example>
2565
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2566
+ <param pos="2" name="service.version"/>
2567
+ <param pos="0" name="os.vendor" value="Debian"/>
2568
+ <param pos="0" name="os.product" value="Linux"/>
2569
+ <param pos="0" name="os.certainty" value="0.5"/>
2570
+ <param pos="1" name="os.version"/>
2571
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
2572
+ </fingerprint>
2573
+ <fingerprint pattern="(?i)^Fedora(?:Core)?\/(\S+) UPnP/\S+ MiniUPnPd/(\S+)$">
2574
+ <description>miniupnpd on a Fedora variant</description>
2575
+ <example os.version="10" service.version="1.4">Fedora/10 UPnP/1.0 MiniUPnPd/1.4</example>
2576
+ <example os.version="8" service.version="1.0">Fedora/8 UPnP/1.0 miniupnpd/1.0</example>
2577
+ <example os.version="6" service.version="1.0">FedoraCore/6 UPnP/1.0 miniupnpd/1.0</example>
2578
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2579
+ <param pos="2" name="service.version"/>
2580
+ <param pos="0" name="os.family" value="Linux"/>
2581
+ <param pos="0" name="os.vendor" value="Red Hat"/>
2582
+ <param pos="0" name="os.product" value="Fedora Core Linux"/>
2583
+ <param pos="1" name="os.version"/>
2584
+ <param pos="0" name="os.cpe23" value="cpe:/o:redhat:fedora_core:{os.version}"/>
2585
+ </fingerprint>
2586
+ <fingerprint pattern="(?i)^Ubuntu\/([\d\.]+) UPnP/\S+ MiniUPnPd/(\S+)$">
2587
+ <description>miniupnpd on an Ubuntu variant</description>
2588
+ <example os.version="10.04" service.version="1.0">Ubuntu/10.04 UPnP/1.0 miniupnpd/1.0</example>
2589
+ <example os.version="10.10" service.version="1.0">Ubuntu/10.10 UPnP/1.0 miniupnpd/1.0</example>
2590
+ <example os.version="7.10" service.version="1.0">Ubuntu/7.10 UPnP/1.0 miniupnpd/1.0</example>
2591
+ <example os.version="9.04" service.version="1.0">Ubuntu/9.04 UPnP/1.0 miniupnpd/1.0</example>
2592
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2593
+ <param pos="2" name="service.version"/>
2594
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2595
+ <param pos="0" name="os.product" value="Linux"/>
2596
+ <param pos="1" name="os.version"/>
2597
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
2598
+ </fingerprint>
2599
+ <fingerprint pattern="(?i)^Ubuntu\/bionic UPnP/\S+ MiniUPnPd/(\S+)$">
2600
+ <description>miniupnpd on an Ubuntu bionic/18.04</description>
2601
+ <example os.version="18.04" service.version="1.4">Ubuntu/bionic UPnP/1.0 MiniUPnPd/1.4</example>
2602
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2603
+ <param pos="1" name="service.version"/>
2604
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2605
+ <param pos="0" name="os.product" value="Linux"/>
2606
+ <param pos="0" name="os.version" value="18.04"/>
2607
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:18.04"/>
2608
+ </fingerprint>
2609
+ <fingerprint pattern="(?i)^Ubuntu\/yakkety UPnP/\S+ MiniUPnPd/(\S+)$">
2610
+ <description>miniupnpd on an Ubuntu yakkety/16.10</description>
2611
+ <example os.version="16.10" service.version="1.4">Ubuntu/yakkety UPnP/1.0 MiniUPnPd/1.4</example>
2612
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2613
+ <param pos="1" name="service.version"/>
2614
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2615
+ <param pos="0" name="os.product" value="Linux"/>
2616
+ <param pos="0" name="os.version" value="16.10"/>
2617
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:16.10"/>
2618
+ </fingerprint>
2619
+ <fingerprint pattern="(?i)^Ubuntu\/xenial UPnP/\S+ MiniUPnPd/(\S+)$">
2620
+ <description>miniupnpd on an Ubuntu xenial/16.04</description>
2621
+ <example os.version="16.04" service.version="1.4">Ubuntu/xenial UPnP/1.0 MiniUPnPd/1.4</example>
2622
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2623
+ <param pos="1" name="service.version"/>
2624
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2625
+ <param pos="0" name="os.product" value="Linux"/>
2626
+ <param pos="0" name="os.version" value="16.04"/>
2627
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:16.04"/>
2628
+ </fingerprint>
2629
+ <fingerprint pattern="(?i)^Ubuntu\/utopic UPnP/\S+ MiniUPnPd/(\S+)$">
2630
+ <description>miniupnpd on an Ubuntu utopic/14.10</description>
2631
+ <example os.version="14.10" service.version="1.4">Ubuntu/utopic UPnP/1.0 MiniUPnPd/1.4</example>
2632
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2633
+ <param pos="1" name="service.version"/>
2634
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2635
+ <param pos="0" name="os.product" value="Linux"/>
2636
+ <param pos="0" name="os.version" value="14.10"/>
2637
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:14.10"/>
2638
+ </fingerprint>
2639
+ <fingerprint pattern="(?i)^Ubuntu\/trusty UPnP/\S+ MiniUPnPd/(\S+)$">
2640
+ <description>miniupnpd on an Ubuntu trusty/14.04</description>
2641
+ <example os.version="14.04" service.version="1.4">Ubuntu/trusty UPnP/1.0 MiniUPnPd/1.4</example>
2642
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2643
+ <param pos="1" name="service.version"/>
2644
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2645
+ <param pos="0" name="os.product" value="Linux"/>
2646
+ <param pos="0" name="os.version" value="14.04"/>
2647
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:14.04"/>
2648
+ </fingerprint>
2649
+ <fingerprint pattern="(?i)^Ubuntu\/saucy UPnP/\S+ MiniUPnPd/(\S+)$">
2650
+ <description>miniupnpd on an Ubuntu saucy/13.10</description>
2651
+ <example os.version="13.10" service.version="1.4">Ubuntu/saucy UPnP/1.0 MiniUPnPd/1.4</example>
2652
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2653
+ <param pos="1" name="service.version"/>
2654
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2655
+ <param pos="0" name="os.product" value="Linux"/>
2656
+ <param pos="0" name="os.version" value="13.10"/>
2657
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:13.10"/>
2658
+ </fingerprint>
2659
+ <fingerprint pattern="(?i)^Ubuntu\/raring UPnP/\S+ MiniUPnPd/(\S+)$">
2660
+ <description>miniupnpd on an Ubuntu raring/13.04</description>
2661
+ <example os.version="13.04" service.version="1.4">Ubuntu/raring UPnP/1.0 MiniUPnPd/1.4</example>
2662
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2663
+ <param pos="1" name="service.version"/>
2664
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2665
+ <param pos="0" name="os.product" value="Linux"/>
2666
+ <param pos="0" name="os.version" value="13.04"/>
2667
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:13.04"/>
2668
+ </fingerprint>
2669
+ <fingerprint pattern="(?i)^Ubuntu\/quantal UPnP/\S+ MiniUPnPd/(\S+)$">
2670
+ <description>miniupnpd on an Ubuntu quantal/12.10</description>
2671
+ <example os.version="12.10" service.version="1.4">Ubuntu/quantal UPnP/1.0 MiniUPnPd/1.4</example>
2672
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2673
+ <param pos="1" name="service.version"/>
2674
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2675
+ <param pos="0" name="os.product" value="Linux"/>
2676
+ <param pos="0" name="os.version" value="12.10"/>
2677
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:12.10"/>
2678
+ </fingerprint>
2679
+ <fingerprint pattern="(?i)^Ubuntu\/precise UPnP/\S+ MiniUPnPd/(\S+)$">
2680
+ <description>miniupnpd on an Ubuntu precise/12.04</description>
2681
+ <example os.version="12.04" service.version="1.4">Ubuntu/precise UPnP/1.0 MiniUPnPd/1.4</example>
2682
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2683
+ <param pos="1" name="service.version"/>
2684
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2685
+ <param pos="0" name="os.product" value="Linux"/>
2686
+ <param pos="0" name="os.version" value="12.04"/>
2687
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:12.04"/>
2688
+ </fingerprint>
2689
+ <fingerprint pattern="(?i)^Ubuntu\/oneiric UPnP/\S+ MiniUPnPd/(\S+)$">
2690
+ <description>miniupnpd on an Ubuntu oneiric/11.10</description>
2691
+ <example os.version="11.10" service.version="1.4">Ubuntu/oneiric UPnP/1.0 MiniUPnPd/1.4</example>
2692
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2693
+ <param pos="1" name="service.version"/>
2694
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2695
+ <param pos="0" name="os.product" value="Linux"/>
2696
+ <param pos="0" name="os.version" value="11.10"/>
2697
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:11.10"/>
2698
+ </fingerprint>
2699
+ <fingerprint pattern="(?i)^Ubuntu\/natty UPnP/\S+ MiniUPnPd/(\S+)$">
2700
+ <description>miniupnpd on an Ubuntu natty/11.04</description>
2701
+ <example os.version="11.04" service.version="1.4">Ubuntu/natty UPnP/1.0 MiniUPnPd/1.4</example>
2702
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2703
+ <param pos="1" name="service.version"/>
2704
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2705
+ <param pos="0" name="os.product" value="Linux"/>
2706
+ <param pos="0" name="os.version" value="11.04"/>
2707
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:11.04"/>
2708
+ </fingerprint>
2709
+ <fingerprint pattern="(?i)^Ubuntu\/maverick UPnP/\S+ MiniUPnPd/(\S+)$">
2710
+ <description>miniupnpd on an Ubuntu maverick/10.10</description>
2711
+ <example os.version="10.10" service.version="1.4">Ubuntu/maverick UPnP/1.0 MiniUPnPd/1.4</example>
2712
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2713
+ <param pos="1" name="service.version"/>
2714
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2715
+ <param pos="0" name="os.product" value="Linux"/>
2716
+ <param pos="0" name="os.version" value="10.10"/>
2717
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:10.10"/>
2718
+ </fingerprint>
2719
+ <fingerprint pattern="(?i)^Ubuntu\/lucid UPnP/\S+ MiniUPnPd/(\S+)$">
2720
+ <description>miniupnpd on an Ubuntu lucid/10.04</description>
2721
+ <example os.version="10.04" service.version="1.4">Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4</example>
2722
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2723
+ <param pos="1" name="service.version"/>
2724
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2725
+ <param pos="0" name="os.product" value="Linux"/>
2726
+ <param pos="0" name="os.version" value="10.04"/>
2727
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:10.04"/>
2728
+ </fingerprint>
2729
+ <fingerprint pattern="(?i)^Ubuntu\/karmic UPnP/\S+ MiniUPnPd/(\S+)$">
2730
+ <description>miniupnpd on an Ubuntu karmic/9.10</description>
2731
+ <example os.version="9.10" service.version="1.4">Ubuntu/karmic UPnP/1.0 MiniUPnPd/1.4</example>
2732
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2733
+ <param pos="1" name="service.version"/>
2734
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2735
+ <param pos="0" name="os.product" value="Linux"/>
2736
+ <param pos="0" name="os.version" value="9.10"/>
2737
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:9.10"/>
2738
+ </fingerprint>
2739
+ <fingerprint pattern="(?i)^Ubuntu\/jaunty UPnP/\S+ MiniUPnPd/(\S+)$">
2740
+ <description>miniupnpd on an Ubuntu jaunty/9.04</description>
2741
+ <example os.version="9.04" service.version="1.4">Ubuntu/jaunty UPnP/1.0 MiniUPnPd/1.4</example>
2742
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2743
+ <param pos="1" name="service.version"/>
2744
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2745
+ <param pos="0" name="os.product" value="Linux"/>
2746
+ <param pos="0" name="os.version" value="9.04"/>
2747
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:9.04"/>
2748
+ </fingerprint>
2749
+ <fingerprint pattern="(?i)^Ubuntu\/hardy UPnP/\S+ MiniUPnPd/(\S+)$">
2750
+ <description>miniupnpd on an Ubuntu hardy/8.04</description>
2751
+ <example os.version="8.04" service.version="1.4">Ubuntu/hardy UPnP/1.0 MiniUPnPd/1.4</example>
2752
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2753
+ <param pos="1" name="service.version"/>
2754
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2755
+ <param pos="0" name="os.product" value="Linux"/>
2756
+ <param pos="0" name="os.version" value="8.04"/>
2757
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:8.04"/>
2758
+ </fingerprint>
2759
+ <fingerprint pattern="(?i)^Linux Mips (\S+) UPnP/\S+ MiniUPnPd/(\S+)$">
2760
+ <description>Linux MIPS UPnP Server</description>
2761
+ <example>Linux Mips 2.4.20 UPnP/1.0 MiniUPnPd/1.2</example>
2762
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2763
+ <param pos="2" name="service.version"/>
2764
+ <param pos="0" name="os.vendor" value="Linux"/>
2765
+ <param pos="0" name="os.product" value="Linux"/>
2766
+ <param pos="1" name="os.version"/>
2767
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
2768
+ </fingerprint>
2769
+ <fingerprint pattern="(?i)^SmoothWall Express/(\S+) UPnP/\S+ miniupnpd/(\S+)$">
2770
+ <description>Smoothwall Express UPnP Server</description>
2771
+ <example os.version="3.0" service.version="1.0">SmoothWall Express/3.0 UPnP/1.0 miniupnpd/1.0</example>
2772
+ <param pos="0" name="os.vendor" value="Smoothwall"/>
2773
+ <param pos="0" name="os.product" value="Smoothwall"/>
2774
+ <param pos="1" name="os.version"/>
2775
+ <param pos="0" name="os.cpe23" value="cpe:/o:smoothwall:smoothwall:{os.version}"/>
2776
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2777
+ <param pos="2" name="service.version"/>
2778
+ </fingerprint>
2779
+ <fingerprint pattern="^(\S+) \d+/Service Pack \d+, UPnP/[\d\.]+, TVersity Media Server$">
2780
+ <description>TVersity Media Server UPnP Server with Service Pack</description>
2781
+ <example>5.2.3790 2/Service Pack 1, UPnP/1.0, TVersity Media Server</example>
2782
+ <example>5.1.2600 2/Service Pack 3, UPnP/1.0, TVersity Media Server</example>
2783
+ <param pos="0" name="service.vendor" value="TVersity"/>
2784
+ <param pos="0" name="service.product" value="Media Server"/>
2785
+ <param pos="1" name="service.version"/>
2786
+ </fingerprint>
2787
+ <fingerprint pattern="^(\S+) 2/, UPnP/\S+, TVersity Media Server$">
2788
+ <description>TVersity Media Server UPnP Server</description>
2789
+ <example>6.2.8400 2/, UPnP/1.0, TVersity Media Server</example>
2790
+ <example>6.2.9200 2/, UPnP/1.0, TVersity Media Server</example>
2791
+ <example>6.0.6000 2/, UPnP/1.0, TVersity Media Server</example>
2792
+ <example>6.1.7600 2/, UPnP/1.0, TVersity Media Server</example>
2793
+ <param pos="0" name="service.vendor" value="TVersity"/>
2794
+ <param pos="0" name="service.product" value="Media Server"/>
2795
+ <param pos="1" name="service.version"/>
2796
+ </fingerprint>
2797
+ <fingerprint pattern="^LINUX/([\d\.]+) UPnP/[\d\.]+ BRCM400/([\d\.]+)$">
2798
+ <description>Belkin/Linksys BRCM400 Wireless Router UPnP Server</description>
2799
+ <example>LINUX/2.4 UPnP/1.0 BRCM400/1.0</example>
2800
+ <param pos="0" name="service.vendor" value="Linksys"/>
2801
+ <param pos="0" name="service.product" value="BRCM400"/>
2802
+ <param pos="2" name="service.version"/>
2803
+ <param pos="0" name="os.vendor" value="Linksys"/>
2804
+ <param pos="0" name="os.product" value="Linux"/>
2805
+ <param pos="1" name="os.version"/>
2806
+ <param pos="0" name="os.device" value="Router"/>
2807
+ </fingerprint>
2808
+ <fingerprint pattern="^Linux-(\S+), UPnP/[\d\.]+, PMS/([\d\.]+)$">
2809
+ <description>PlayStation3 Media Server UPnP Server - linux</description>
2810
+ <example>Linux-amd64-2.6.18-238.9.1.el5, UPnP/1.0, PMS/1.52.1</example>
2811
+ <example>Linux-i386-2.6.33.2, UPnP/1.0, PMS/1.21.1</example>
2812
+ <param pos="0" name="service.vendor" value="Sony"/>
2813
+ <param pos="0" name="service.product" value="PMS"/>
2814
+ <param pos="2" name="service.version"/>
2815
+ <param pos="0" name="os.vendor" value="Linux"/>
2816
+ <param pos="0" name="os.product" value="Linux"/>
2817
+ <param pos="1" name="os.version"/>
2818
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
2819
+ </fingerprint>
2820
+ <fingerprint pattern="^Windows_XP-(\S+), UPnP/[\d\.]+, PMS/([\d\.]+)$">
2821
+ <description>PlayStation3 Media Server UPnP Server - Windows XP</description>
2822
+ <example>Windows_XP-amd64-5.2, UPnP/1.0, PMS/1.54.0</example>
2823
+ <example>Windows_XP-x86-5.1, UPnP/1.0, PMS/1.20.400</example>
2824
+ <param pos="0" name="service.vendor" value="Sony"/>
2825
+ <param pos="0" name="service.product" value="PMS"/>
2826
+ <param pos="2" name="service.version"/>
2827
+ <param pos="0" name="os.vendor" value="Microsoft"/>
2828
+ <param pos="0" name="os.product" value="Windows XP"/>
2829
+ <param pos="1" name="os.version"/>
2830
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_xp:{os.version}"/>
2831
+ </fingerprint>
2832
+ <fingerprint pattern="^Windows_7-x86-(\S+), UPnP/[\d\.]+, PMS/([\d\.]+)$">
2833
+ <description>PlayStation3 Media Server UPnP Server - Windows 7 x86</description>
2834
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.20</example>
2835
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.22.0</example>
2836
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.25.1</example>
2837
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.51.0</example>
2838
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.20.412</example>
2839
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.71.0</example>
2840
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.20.409</example>
2841
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.72.0</example>
2842
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.10.51</example>
2843
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.40.0</example>
2844
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.53.0</example>
2845
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.52.0</example>
2846
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.50.1</example>
2847
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.30.1</example>
2848
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.50.0</example>
2849
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.54.0</example>
2850
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.52.1</example>
2851
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.60.0</example>
2852
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.70.1</example>
2853
+ <param pos="0" name="service.vendor" value="Sony"/>
2854
+ <param pos="0" name="service.product" value="PMS"/>
2855
+ <param pos="2" name="service.version"/>
2856
+ <param pos="0" name="os.vendor" value="Microsoft"/>
2857
+ <param pos="0" name="os.product" value="Windows 7"/>
2858
+ <param pos="1" name="os.version"/>
2859
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_7:{os.version}"/>
2860
+ </fingerprint>
2861
+ <fingerprint pattern="^Windows_7-x86_64-(\S+), UPnP/[\d\.]+, PMS/([\d\.]+)$">
2862
+ <description>PlayStation3 Media Server UPnP Server - Windows 7 x86_64</description>
2863
+ <param pos="0" name="service.vendor" value="Sony"/>
2864
+ <param pos="0" name="service.product" value="PMS"/>
2865
+ <param pos="2" name="service.version"/>
2866
+ <param pos="0" name="os.vendor" value="Microsoft"/>
2867
+ <param pos="0" name="os.product" value="Windows 7"/>
2868
+ <param pos="1" name="os.version"/>
2869
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_7:{os.version}"/>
2870
+ </fingerprint>
2871
+ <fingerprint pattern="^Microsoft-Windows/6.2 UPnP/(?:\S+) UPnP-Device-Host/(?:\S+)$">
2872
+ <description>Windows 8 or Windows Server 2012 with unknown UPnP components</description>
2873
+ <param pos="0" name="os.vendor" value="Microsoft"/>
2874
+ <param pos="0" name="os.product" value="Windows 8"/>
2875
+ <param pos="0" name="os.certainty" value="0.65"/>
2876
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_8:-"/>
2877
+ </fingerprint>
2878
+ <fingerprint pattern="^Mac_OS_X-x86_64-(\S+), UPnP/[\d\.]+, PMS/([\d\.]+)$">
2879
+ <description>PlayStation3 Media Server UPnP Server - macOS x86_64</description>
2880
+ <example>Mac_OS_X-x86_64-10.5.8, UPnP/1.0, PMS/1.20</example>
2881
+ <param pos="0" name="service.vendor" value="Sony"/>
2882
+ <param pos="0" name="service.product" value="PMS"/>
2883
+ <param pos="2" name="service.version"/>
2884
+ <param pos="0" name="os.vendor" value="Apple"/>
2885
+ <param pos="0" name="os.product" value="Mac OS X"/>
2886
+ <param pos="1" name="os.version"/>
2887
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:{os.version}"/>
2888
+ </fingerprint>
2889
+ <fingerprint pattern="^Linux/(\S+), UPnP/\S+, Free UPnP Entertainment Service/ReadyNAS$">
2890
+ <description>Free UPnP Entertainment Service UPnP Server - Linux on ReadyNAS</description>
2891
+ <param pos="0" name="service.product" value="FUPPES"/>
2892
+ <param pos="0" name="os.vendor" value="Linux"/>
2893
+ <param pos="0" name="os.product" value="Linux"/>
2894
+ <param pos="1" name="os.version"/>
2895
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
2896
+ <param pos="0" name="hw.vendor" value="Netgear"/>
2897
+ <param pos="0" name="hw.device" value="NAS"/>
2898
+ <param pos="0" name="hw.family" value="ReadyNAS"/>
2899
+ <param pos="0" name="hw.product" value="ReadyNAS"/>
2900
+ </fingerprint>
2901
+ <fingerprint pattern="^Linux/(\S+), UPnP/\S+, Free UPnP Entertainment Service/$">
2902
+ <description>Free UPnP Entertainment Service UPnP Server - Linux</description>
2903
+ <param pos="0" name="service.product" value="FUPPES"/>
2904
+ <param pos="0" name="os.vendor" value="Linux"/>
2905
+ <param pos="0" name="os.product" value="Linux"/>
2906
+ <param pos="1" name="os.version"/>
2907
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
2908
+ </fingerprint>
2909
+ <fingerprint pattern="^FreeBSD/(\S+), UPnP/\S+, Free UPnP Entertainment Service/$">
2910
+ <description>Free UPnP Entertainment Service UPnP Server - FreeBSD</description>
2911
+ <param pos="0" name="service.product" value="FUPPES"/>
2912
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
2913
+ <param pos="0" name="os.product" value="FreeBSD"/>
2914
+ <param pos="1" name="os.version"/>
2915
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
2916
+ </fingerprint>
2917
+ <fingerprint pattern="^ipOS/([\d\.]+) UPnP/[\d\.]+ ipUPnP/([\d\.]+)$">
2918
+ <description>D-Link WAP Dynamic DNS UPnP Server</description>
2919
+ <param pos="0" name="service.vendor" value="D-Link"/>
2920
+ <param pos="0" name="service.product" value="ipUPnP"/>
2921
+ <param pos="2" name="service.version"/>
2922
+ <param pos="0" name="os.vendor" value="D-Link"/>
2923
+ <param pos="0" name="os.product" value="ipOS"/>
2924
+ <param pos="1" name="os.version"/>
2925
+ <param pos="0" name="os.device" value="WAP"/>
2926
+ </fingerprint>
2927
+ <fingerprint pattern="^ipOS/([\d\.]+) UPnP/[\d\.]+ ipGENADevice/([\d\.]+)$">
2928
+ <description>D-Link DGL-4300 Gaming Router UPnP Server</description>
2929
+ <param pos="0" name="service.vendor" value="D-Link"/>
2930
+ <param pos="0" name="service.product" value="ipGENADevice"/>
2931
+ <param pos="2" name="service.version"/>
2932
+ <param pos="0" name="os.vendor" value="D-Link"/>
2933
+ <param pos="0" name="os.product" value="ipOS"/>
2934
+ <param pos="1" name="os.version"/>
2935
+ <param pos="0" name="os.device" value="Router"/>
2936
+ </fingerprint>
2937
+ <fingerprint pattern="^TBS/R2 UPnP/[\d\.]+ MiniUPnPd/[\d\.]+$">
2938
+ <description>D-Link generic</description>
2939
+ <example>TBS/R2 UPnP/1.0 MiniUPnPd/1.2</example>
2940
+ <param pos="0" name="hw.vendor" value="D-Link"/>
2941
+ </fingerprint>
2942
+ <fingerprint pattern="^ipos/([\d\.]+) UPnP/[\d\.]+ (TL-\w+)/(\S+)$">
2943
+ <description>TP-Link WAP UPnP Server</description>
2944
+ <example>ipos/7.0 UPnP/1.0 TL-WR841N/6.0/7.0</example>
2945
+ <example>ipos/7.0 UPnP/1.0 TL-WR841N/8.0</example>
2946
+ <example>ipos/7.0 UPnP/1.0 TL-WR740N/4.0</example>
2947
+ <example>ipos/7.0 UPnP/1.0 TL-WR940N/1.0</example>
2948
+ <example>ipos/7.0 UPnP/1.0 TL-WR741N/4.0</example>
2949
+ <example>ipos/7.0 UPnP/1.0 TL-WR740N/1.0</example>
2950
+ <example>ipos/7.0 UPnP/1.0 TL-WR741N/1.0/2.0</example>
2951
+ <example>ipos/7.0 UPnP/1.0 TL-WR740N/1.0/2.0</example>
2952
+ <example>ipos/7.0 UPnP/1.0 TL-WR941N/2.0</example>
2953
+ <param pos="0" name="service.vendor" value="TP-Link"/>
2954
+ <param pos="2" name="service.product"/>
2955
+ <param pos="3" name="service.version"/>
2956
+ <param pos="0" name="os.vendor" value="TP-Link"/>
2957
+ <param pos="0" name="os.product" value="ipOS"/>
2958
+ <param pos="1" name="os.version"/>
2959
+ <param pos="0" name="os.device" value="WAP"/>
2960
+ </fingerprint>
2961
+ <fingerprint pattern="^Linux/(\S+\-ami), UPnP/[\d\.]+, Portable SDK for UPnP devices/(\S+)$">
2962
+ <description>AMI MegaRAC LOM UPnP</description>
2963
+ <example>Linux/3.14.17-ami, UPnP/1.0, Portable SDK for UPnP devices/1.6.20</example>
2964
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
2965
+ <param pos="0" name="hw.vendor" value="AMI"/>
2966
+ <param pos="0" name="hw.family" value="MegaRAC"/>
2967
+ <param pos="0" name="hw.product" value="MegaRAC"/>
2968
+ <param pos="0" name="os.device" value="Lights Out Management"/>
2969
+ <param pos="0" name="os.vendor" value="AMI"/>
2970
+ <param pos="1" name="os.version"/>
2971
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
2972
+ <param pos="0" name="service.product" value="libupnp"/>
2973
+ <param pos="2" name="service.version"/>
2974
+ </fingerprint>
2975
+ <fingerprint pattern="^Linux/(\S+\-axis[^,]+), UPnP/[\d\.]+, Portable SDK for UPnP devices/(\S+)$">
2976
+ <description>Axis Network Camera</description>
2977
+ <example>Linux/4.9.94-axis5, UPnP/1.0, Portable SDK for UPnP devices/1.6.22</example>
2978
+ <param pos="0" name="hw.vendor" value="AXIS"/>
2979
+ <param pos="0" name="hw.device" value="Web cam"/>
2980
+ <param pos="0" name="os.vendor" value="AXIS"/>
2981
+ <param pos="0" name="os.device" value="Web cam"/>
2982
+ <param pos="0" name="os.family" value="Linux"/>
2983
+ <param pos="1" name="os.version"/>
2984
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
2985
+ <param pos="0" name="service.product" value="libupnp"/>
2986
+ <param pos="2" name="service.version"/>
2987
+ </fingerprint>
2988
+ <fingerprint pattern="^Linux/(\S+), UPnP/[\d\.]+, Portable SDK for UPnP devices/(\S+)$">
2989
+ <description>Portable SDK for UPnP Server - Linux</description>
2990
+ <example>Linux/2.4.20-46.7asp, UPnP/1.0, Portable SDK for UPnP devices/1.6.17</example>
2991
+ <example>Linux/2.6.10-iop1-1, UPnP/1.0, Portable SDK for UPnP devices/1.4.1</example>
2992
+ <example>Linux/2.6.12-5.1-brcmstb-dm800, UPnP/1.0, Portable SDK for UPnP devices/1.6.0</example>
2993
+ <example>Linux/2.6.12.6-VENUS, UPnP/1.0, Portable SDK for UPnP devices/1.6.10</example>
2994
+ <example>Linux/2.6.12.6-arm1-040, UPnP/1.0, Portable SDK for UPnP devices/1.6.5.2</example>
2995
+ <example>Linux/2.6.13, UPnP/1.0, Portable SDK for UPnP devices/1.6.0</example>
2996
+ <example>Linux/2.6.18_pro500-davinci_N03A_IPCAM_1.0-g5c649288-dirty, UPnP/1.0, Portable SDK for UPnP devices/1.6.6</example>
2997
+ <example>Linux/2.6.28, UPnP/1.0, Portable SDK for UPnP devices/1.6.10</example>
2998
+ <example>Linux/2.6.28-11-server, UPnP/1.0, Portable SDK for UPnP devices/1.6.6</example>
2999
+ <example>Linux/2.6.28-17-generic, UPnP/1.0, Portable SDK for UPnP devices/1.6.6</example>
3000
+ <example>Linux/2.6.28.1-xxxx-std-ipv4-32, UPnP/1.0, Portable SDK for UPnP devices/1.4.3</example>
3001
+ <example>Linux/2.6.32-220.7.1.el6.x86_64, UPnP/1.0, Portable SDK for UPnP devices/1.6.14</example>
3002
+ <example>Linux/2.6.32-24-generic, UPnP/1.0, Portable SDK for UPnP devices/1.6.6</example>
3003
+ <example>Linux/2.6.32-279.1.1.el6.x86_64, UPnP/1.0, Portable SDK for UPnP devices/1.6.13</example>
3004
+ <example>Linux/2.6.32-279.11.1.el6.x86_64, UPnP/1.0, Portable SDK for UPnP devices/1.6.14</example>
3005
+ <example>Linux/2.6.32-279.14.1.el6.x86_64, UPnP/1.0, Portable SDK for UPnP devices/1.6.14</example>
3006
+ <example>Linux/2.6.32-279.14.1.el6.x86_64, UPnP/1.0, Portable SDK for UPnP devices/1.6.15</example>
3007
+ <param pos="0" name="service.product" value="libupnp"/>
3008
+ <param pos="2" name="service.version"/>
3009
+ <param pos="0" name="os.vendor" value="Linux"/>
3010
+ <param pos="0" name="os.product" value="Linux"/>
3011
+ <param pos="1" name="os.version"/>
3012
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
3013
+ </fingerprint>
3014
+ <fingerprint pattern="^Linux/(\S+) UPnP/[\d\.]+ DLNADOC/[\d\.]+ Portable SDK for UPnP devices/(\S+)$">
3015
+ <description>DLNADOC Portable SDK for UPnP Server - Linux DNLADOC variant</description>
3016
+ <example>Linux/3.0.8 UPnP/1.0 DLNADOC/1.50 Portable SDK for UPnP devices/1.6.6</example>
3017
+ <example>Linux/2.6.23.17_stm23_0125dorade00 UPnP/1.0 DLNADOC/1.50 Portable SDK for UPnP devices/1.4.6-5</example>
3018
+ <param pos="0" name="service.product" value="libupnp"/>
3019
+ <param pos="2" name="service.version"/>
3020
+ <param pos="0" name="os.vendor" value="Linux"/>
3021
+ <param pos="0" name="os.product" value="Linux"/>
3022
+ <param pos="1" name="os.version"/>
3023
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
3024
+ </fingerprint>
3025
+ <fingerprint pattern="^Linux/(\S+), UPnP/[\d\.]+, Intel SDK for UPnP devices ?/(\S+)$">
3026
+ <description>Intel SDK for UPnP Server with verbose banner</description>
3027
+ <example>Linux/2.6.10_dev-malta-mips2_fp_le, UPnP/1.0, Intel SDK for UPnP devices /1.2</example>
3028
+ <example>Linux/2.4.18_mvl30-ixdp425, UPnP/1.0, Intel SDK for UPnP devices/1.3.1</example>
3029
+ <param pos="0" name="service.product" value="libupnp"/>
3030
+ <param pos="2" name="service.version"/>
3031
+ <param pos="0" name="os.vendor" value="Linux"/>
3032
+ <param pos="0" name="os.product" value="Linux"/>
3033
+ <param pos="1" name="os.version"/>
3034
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
3035
+ </fingerprint>
3036
+ <fingerprint pattern="^Linux, UPnP/[\d\.]+, Intel SDK for UPnP devices ?/(\S+)$">
3037
+ <description>Intel SDK for UPnP Server</description>
3038
+ <example>Linux, UPnP/1.0, Intel SDK for UPnP devices /1.2</example>
3039
+ <param pos="0" name="service.product" value="libupnp"/>
3040
+ <param pos="1" name="service.version"/>
3041
+ </fingerprint>
3042
+ <fingerprint pattern="^Darwin/(\S+), UPnP/\S+, Portable SDK for UPnP devices/(\S+)$">
3043
+ <description>Portable SDK for UPnP Server - macOS</description>
3044
+ <example service.version="1.6.6" os.version="10.2.0">Darwin/10.2.0, UPnP/1.0, Portable SDK for UPnP devices/1.6.6</example>
3045
+ <param pos="0" name="service.product" value="libupnp"/>
3046
+ <param pos="2" name="service.version"/>
3047
+ <param pos="0" name="os.vendor" value="Apple"/>
3048
+ <param pos="0" name="os.product" value="Mac OS X"/>
3049
+ <param pos="1" name="os.version"/>
3050
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:{os.version}"/>
3051
+ </fingerprint>
3052
+ <fingerprint pattern="^Loxone Miniserver (.*) UPnP/1.0$">
3053
+ <description>Loxone Miniserver Smart Home</description>
3054
+ <example host.name="some name">Loxone Miniserver some name UPnP/1.0</example>
3055
+ <param pos="0" name="hw.vendor" value="Loxone"/>
3056
+ <param pos="0" name="hw.product" value="Miniserver"/>
3057
+ <param pos="0" name="hw.device" value="Building Automation"/>
3058
+ <param pos="1" name="host.name"/>
3059
+ </fingerprint>
3060
+ <fingerprint pattern="^RouterOS/(\S+)UPnP/1.0 MikroTik UPnP/1.0$">
3061
+ <description>MikroTik RouterOS</description>
3062
+ <example os.version="6.43">RouterOS/6.43UPnP/1.0 MikroTik UPnP/1.0</example>
3063
+ <param pos="0" name="os.vendor" value="MikroTik"/>
3064
+ <param pos="0" name="os.device" value="Router"/>
3065
+ <param pos="0" name="os.family" value="RouterOS"/>
3066
+ <param pos="0" name="os.product" value="RouterOS"/>
3067
+ <param pos="1" name="os.version"/>
3068
+ <param pos="0" name="os.cpe23" value="cpe:/o:mikrotik:routeros:{os.version}"/>
3069
+ </fingerprint>
3070
+ <fingerprint pattern="^Roku UPnP/\S+ Roku/(\S+)$">
3071
+ <description>Roku with a version</description>
3072
+ <example hw.version="8.1.6">Roku UPnP/1.0 Roku/8.1.6</example>
3073
+ <param pos="0" name="hw.vendor" value="Roku"/>
3074
+ <param pos="0" name="hw.product" value="Roku"/>
3075
+ <param pos="0" name="hw.device" value="Media Server"/>
3076
+ <param pos="1" name="hw.version"/>
3077
+ </fingerprint>
3078
+ <fingerprint pattern="^Roku/(\S+) UPnP/\S+ Roku/\S+$">
3079
+ <description>Roku with double versions</description>
3080
+ <example hw.version="9.2.0">Roku/9.2.0 UPnP/1.0 Roku/9.2.0</example>
3081
+ <param pos="0" name="hw.vendor" value="Roku"/>
3082
+ <param pos="0" name="hw.product" value="Roku"/>
3083
+ <param pos="0" name="hw.device" value="Media Server"/>
3084
+ <param pos="1" name="hw.version"/>
3085
+ </fingerprint>
3086
+ <fingerprint pattern="^Roku UPnP/\S+ MiniUPnPd/\S+$">
3087
+ <description>Roku without a version</description>
3088
+ <example>Roku UPnP/1.0 MiniUPnPd/1.4</example>
3089
+ <param pos="0" name="hw.vendor" value="Roku"/>
3090
+ <param pos="0" name="hw.product" value="Roku"/>
3091
+ <param pos="0" name="hw.device" value="Media Server"/>
3092
+ </fingerprint>
3093
+ <fingerprint pattern="^UPnP/\S+, DLNADOC/\S+, Platinum/(\S+)$">
3094
+ <description>Xbox Media Center UPnP Server</description>
3095
+ <example>UPnP/1.0, DLNADOC/1.50, Platinum/0.5.1</example>
3096
+ <example>UPnP/1.0, DLNADOC/1.50, Platinum/0.6.6.0</example>
3097
+ <example>UPnP/1.0, DLNADOC/1.50, Platinum/0.5.4.0</example>
3098
+ <example>UPnP/1.0, DLNADOC/1.50, Platinum/0.5.3.0</example>
3099
+ <param pos="0" name="service.vendor" value="Microsoft"/>
3100
+ <param pos="0" name="service.product" value="XBMC"/>
3101
+ <param pos="1" name="service.version"/>
3102
+ </fingerprint>
3103
+ <fingerprint pattern="Synology/DSM/(\d+\.\d+\.\d+\.\d+)$">
3104
+ <description>Synology DiskStation NAS with IP</description>
3105
+ <example host.ip="192.168.1.100">Synology/DSM/192.168.1.100</example>
3106
+ <param pos="0" name="hw.vendor" value="Synology"/>
3107
+ <param pos="0" name="hw.family" value="DiskStation"/>
3108
+ <param pos="0" name="hw.device" value="NAS"/>
3109
+ <param pos="0" name="os.device" value="NAS"/>
3110
+ <param pos="0" name="os.family" value="Linux"/>
3111
+ <param pos="0" name="os.product" value="DSM"/>
3112
+ <param pos="0" name="os.vendor" value="Synology"/>
3113
+ <param pos="1" name="host.ip"/>
3114
+ </fingerprint>
3115
+ <fingerprint pattern="Synology/DSM/(\S+)$">
3116
+ <description>Synology DiskStation NAS with hostname</description>
3117
+ <example host.name="stuff">Synology/DSM/stuff</example>
3118
+ <param pos="0" name="hw.vendor" value="Synology"/>
3119
+ <param pos="0" name="hw.family" value="DiskStation"/>
3120
+ <param pos="0" name="hw.device" value="NAS"/>
3121
+ <param pos="1" name="host.name"/>
3122
+ </fingerprint>
3123
+ <fingerprint pattern="^NetData Embedded HTTP Server v([a-zA-Z0-9\-\.]+)$">
3124
+ <description>NetData Embedded HTTP Server</description>
3125
+ <example service.version="1.16.1-146-g2f5e36ef">NetData Embedded HTTP Server v1.16.1-146-g2f5e36ef</example>
3126
+ <param pos="0" name="service.vendor" value="NetData"/>
3127
+ <param pos="0" name="service.product" value="NetData"/>
3128
+ <param pos="1" name="service.version"/>
3129
+ </fingerprint>
3130
+ <fingerprint pattern="^Solstice 2\.0+$">
3131
+ <description>SolsticePod</description>
3132
+ <example>Solstice 2.0</example>
3133
+ <param pos="0" name="hw.vendor" value="Mersive"/>
3134
+ <param pos="0" name="hw.device" value="Wireless Presenter"/>
3135
+ <param pos="0" name="hw.product" value="SolsticePod"/>
3136
+ </fingerprint>
3137
+ <fingerprint pattern="^MLC ([^\/]+)/([\d\.]+)$">
3138
+ <description>Extron MediaLink Controller HTTP Server</description>
3139
+ <example extron.model="104 IP PLUS" hw.version="1.03">MLC 104 IP PLUS/1.03</example>
3140
+ <param pos="0" name="hw.vendor" value="Extron"/>
3141
+ <param pos="0" name="hw.device" value="Display Controller"/>
3142
+ <param pos="0" name="hw.product" value="{extron.model} MediaLink Controller"/>
3143
+ <param pos="0" name="os.vendor" value="Extron"/>
3144
+ <param pos="0" name="os.family" value="Linux"/>
3145
+ <param pos="1" name="extron.model"/>
3146
+ <param pos="2" name="hw.version"/>
3147
+ </fingerprint>
3148
+ <fingerprint pattern="^Jetty \(Bluecat Networks\)$">
3149
+ <description>BlueCat Appliance</description>
3150
+ <example>Jetty (Bluecat Networks)</example>
3151
+ <param pos="0" name="hw.vendor" value="BlueCat"/>
3152
+ <param pos="0" name="hw.device" value="Network Appliance"/>
3153
+ </fingerprint>
3154
+ <fingerprint pattern="^Crestron Webserver$">
3155
+ <description>Crestron Video Conferencing</description>
3156
+ <example>Crestron Webserver</example>
3157
+ <param pos="0" name="hw.vendor" value="Crestron"/>
3158
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
3159
+ <param pos="0" name="os.vendor" value="Crestron"/>
3160
+ <param pos="0" name="os.family" value="Linux"/>
3161
+ <param pos="0" name="os.device" value="Video Conferencing"/>
3162
+ </fingerprint>
3163
+ <fingerprint pattern="^OPNsense$">
3164
+ <description>OPNsense Firewall</description>
3165
+ <example>OPNsense</example>
3166
+ <param pos="0" name="hw.vendor" value="OPNsense"/>
3167
+ <param pos="0" name="hw.device" value="Firewall"/>
3168
+ <param pos="0" name="hw.product" value="Firewall"/>
3169
+ <param pos="0" name="os.vendor" value="OPNsense"/>
3170
+ <param pos="0" name="os.product" value="FreeBSD"/>
3171
+ </fingerprint>
3172
+ <fingerprint pattern="^ELAN Controller$">
3173
+ <description>ELAN Smart Home Controller</description>
3174
+ <example>ELAN Controller</example>
3175
+ <param pos="0" name="hw.vendor" value="ELAN"/>
3176
+ <param pos="0" name="hw.device" value="Building Automation"/>
3177
+ <param pos="0" name="hw.product" value="Home Controller"/>
3178
+ <param pos="0" name="os.vendor" value="ELAN"/>
3179
+ <param pos="0" name="os.family" value="Linux"/>
3180
+ </fingerprint>
3181
+ <fingerprint pattern="^STR_SettingServer$">
3182
+ <description>Sony STR AV Receiver</description>
3183
+ <example>STR_SettingServer</example>
3184
+ <param pos="0" name="hw.vendor" value="Sony"/>
3185
+ <param pos="0" name="hw.device" value="Media Server"/>
3186
+ <param pos="0" name="hw.product" value="AV Receiver"/>
3187
+ </fingerprint>
3188
+ <fingerprint pattern="^MWS 0.01$">
3189
+ <description>ANNKE IP Camera</description>
3190
+ <example>MWS 0.01</example>
3191
+ <param pos="0" name="hw.vendor" value="ANNKE"/>
3192
+ <param pos="0" name="hw.device" value="Web cam"/>
3193
+ <param pos="0" name="hw.product" value="IP Camera"/>
3194
+ </fingerprint>
3195
+ </fingerprints>