recog-intrigue 2.3.7

Sign up to get free protection for your applications and to get access to all the features.
Files changed (130) hide show
  1. checksums.yaml +7 -0
  2. data/.github/ISSUE_TEMPLATE/bug_report.md +37 -0
  3. data/.github/ISSUE_TEMPLATE/feature_request.md +17 -0
  4. data/.github/ISSUE_TEMPLATE/fingerprint_request.md +27 -0
  5. data/.github/PULL_REQUEST_TEMPLATE +24 -0
  6. data/.gitignore +14 -0
  7. data/.rbenv-gemset +1 -0
  8. data/.rspec +3 -0
  9. data/.ruby-gemset +1 -0
  10. data/.ruby-version +1 -0
  11. data/.travis.yml +25 -0
  12. data/.yardopts +1 -0
  13. data/CONTRIBUTING.md +171 -0
  14. data/COPYING +23 -0
  15. data/Gemfile +10 -0
  16. data/LICENSE +7 -0
  17. data/README.md +85 -0
  18. data/Rakefile +22 -0
  19. data/bin/recog_export +81 -0
  20. data/bin/recog_match +55 -0
  21. data/bin/recog_standardize +118 -0
  22. data/bin/recog_verify +64 -0
  23. data/cpe-remap.yaml +134 -0
  24. data/features/data/failing_banners_fingerprints.xml +20 -0
  25. data/features/data/matching_banners_fingerprints.xml +23 -0
  26. data/features/data/multiple_banners_fingerprints.xml +32 -0
  27. data/features/data/no_tests.xml +3 -0
  28. data/features/data/sample_banner.txt +2 -0
  29. data/features/data/successful_tests.xml +18 -0
  30. data/features/data/tests_with_failures.xml +20 -0
  31. data/features/data/tests_with_warnings.xml +17 -0
  32. data/features/match.feature +36 -0
  33. data/features/support/aruba.rb +3 -0
  34. data/features/support/env.rb +6 -0
  35. data/features/verify.feature +48 -0
  36. data/identifiers/README.md +47 -0
  37. data/identifiers/os_architecture.txt +20 -0
  38. data/identifiers/os_device.txt +52 -0
  39. data/identifiers/os_family.txt +160 -0
  40. data/identifiers/os_product.txt +199 -0
  41. data/identifiers/service_family.txt +185 -0
  42. data/identifiers/service_product.txt +255 -0
  43. data/identifiers/software_class.txt +26 -0
  44. data/identifiers/software_family.txt +91 -0
  45. data/identifiers/software_product.txt +333 -0
  46. data/identifiers/vendor.txt +405 -0
  47. data/lib/recog.rb +4 -0
  48. data/lib/recog/db.rb +78 -0
  49. data/lib/recog/db_manager.rb +31 -0
  50. data/lib/recog/fingerprint.rb +280 -0
  51. data/lib/recog/fingerprint/regexp_factory.rb +56 -0
  52. data/lib/recog/fingerprint/test.rb +18 -0
  53. data/lib/recog/formatter.rb +51 -0
  54. data/lib/recog/match_reporter.rb +77 -0
  55. data/lib/recog/matcher.rb +94 -0
  56. data/lib/recog/matcher_factory.rb +14 -0
  57. data/lib/recog/nizer.rb +347 -0
  58. data/lib/recog/verifier.rb +39 -0
  59. data/lib/recog/verifier_factory.rb +13 -0
  60. data/lib/recog/verify_reporter.rb +86 -0
  61. data/lib/recog/version.rb +3 -0
  62. data/misc/convert_mysql_err +61 -0
  63. data/misc/order.xsl +17 -0
  64. data/recog-intrigue.gemspec +45 -0
  65. data/requirements.txt +2 -0
  66. data/spec/data/best_os_match_1.yml +17 -0
  67. data/spec/data/best_os_match_2.yml +17 -0
  68. data/spec/data/best_service_match_1.yml +17 -0
  69. data/spec/data/smb_native_os.txt +25 -0
  70. data/spec/data/test_fingerprints.xml +36 -0
  71. data/spec/data/verification_fingerprints.xml +86 -0
  72. data/spec/data/whitespaced_fingerprint.xml +5 -0
  73. data/spec/lib/fingerprint_self_test_spec.rb +174 -0
  74. data/spec/lib/recog/db_spec.rb +98 -0
  75. data/spec/lib/recog/fingerprint/regexp_factory_spec.rb +73 -0
  76. data/spec/lib/recog/fingerprint_spec.rb +112 -0
  77. data/spec/lib/recog/formatter_spec.rb +69 -0
  78. data/spec/lib/recog/match_reporter_spec.rb +91 -0
  79. data/spec/lib/recog/nizer_spec.rb +330 -0
  80. data/spec/lib/recog/verify_reporter_spec.rb +113 -0
  81. data/spec/spec_helper.rb +82 -0
  82. data/update_cpes.py +186 -0
  83. data/xml/apache_modules.xml +1911 -0
  84. data/xml/apache_os.xml +273 -0
  85. data/xml/architecture.xml +36 -0
  86. data/xml/dns_versionbind.xml +761 -0
  87. data/xml/fingerprints.xsd +128 -0
  88. data/xml/ftp_banners.xml +1553 -0
  89. data/xml/h323_callresp.xml +603 -0
  90. data/xml/hp_pjl_id.xml +358 -0
  91. data/xml/html_title.xml +1630 -0
  92. data/xml/http_cookies.xml +411 -0
  93. data/xml/http_servers.xml +3195 -0
  94. data/xml/http_wwwauth.xml +595 -0
  95. data/xml/imap_banners.xml +245 -0
  96. data/xml/ldap_searchresult.xml +711 -0
  97. data/xml/mdns_device-info_txt.xml +1796 -0
  98. data/xml/mdns_workstation_txt.xml +15 -0
  99. data/xml/mysql_banners.xml +1649 -0
  100. data/xml/mysql_error.xml +871 -0
  101. data/xml/nntp_banners.xml +82 -0
  102. data/xml/ntp_banners.xml +1223 -0
  103. data/xml/operating_system.xml +629 -0
  104. data/xml/pop_banners.xml +499 -0
  105. data/xml/rsh_resp.xml +76 -0
  106. data/xml/rtsp_servers.xml +76 -0
  107. data/xml/sip_banners.xml +359 -0
  108. data/xml/sip_user_agents.xml +221 -0
  109. data/xml/smb_native_lm.xml +62 -0
  110. data/xml/smb_native_os.xml +662 -0
  111. data/xml/smtp_banners.xml +1690 -0
  112. data/xml/smtp_debug.xml +39 -0
  113. data/xml/smtp_ehlo.xml +49 -0
  114. data/xml/smtp_expn.xml +82 -0
  115. data/xml/smtp_help.xml +157 -0
  116. data/xml/smtp_mailfrom.xml +20 -0
  117. data/xml/smtp_noop.xml +44 -0
  118. data/xml/smtp_quit.xml +29 -0
  119. data/xml/smtp_rcptto.xml +25 -0
  120. data/xml/smtp_rset.xml +26 -0
  121. data/xml/smtp_turn.xml +26 -0
  122. data/xml/smtp_vrfy.xml +89 -0
  123. data/xml/snmp_sysdescr.xml +6507 -0
  124. data/xml/snmp_sysobjid.xml +430 -0
  125. data/xml/ssh_banners.xml +1968 -0
  126. data/xml/telnet_banners.xml +1595 -0
  127. data/xml/x11_banners.xml +232 -0
  128. data/xml/x509_issuers.xml +134 -0
  129. data/xml/x509_subjects.xml +1268 -0
  130. metadata +304 -0
data/xml/snmp_sysobjid.xml ADDED
@@ -0,0 +1,430 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <fingerprints matches="snmp.sys_object_id" protocol="snmp" database_type="service">
3
+ <!--
4
+ SNMP fingerprint definitions for SysObjectIDs. These are matched against the value of the
5
+ 'sysObjectID' (OID 1.3.6.1.2.1.1.2) variable.
6
+ -->
7
+ <!--======================================================================
8
+ MICROSOFT
9
+ =======================================================================-->
10
+ <!--
11
+ These are baseline patterns that map to sysObjectID with their associated sysDescr.
12
+ -->
13
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.[23] Hardware: x86.*Software: Windows NT Version 4\.0.*$">
14
+ <description>Windows NT 4 on x86</description>
15
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: x86 Family 6 Model 8 Stepping 3 AT/AT COMPATIBLE - Software: Windows NT Version 4.0 (Build Number: 1381 Uniprocessor Free )</example>
16
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: x86 Family 6 Model 8 Stepping 3 AT/AT COMPATIBLE - Software: Windows NT Version 4.0 (Build Number: 1381 Uniprocessor Free )</example>
17
+ <param pos="0" name="os.vendor" value="Microsoft"/>
18
+ <param pos="0" name="os.family" value="Windows"/>
19
+ <param pos="0" name="os.product" value="Windows NT Server"/>
20
+ <param pos="0" name="os.version" value="4.0"/>
21
+ <param pos="0" name="os.arch" value="x86"/>
22
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_nt:4.0"/>
23
+ </fingerprint>
24
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows 2000 Version 5\.0.*$">
25
+ <description>Windows 2000 on x86</description>
26
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: x86 Family 15 Model 4 Stepping 8 AT/AT COMPATIBLE - Software: Windows 2000 Version 5.0 (Build 2195 Uniprocessor Free)</example>
27
+ <param pos="0" name="os.vendor" value="Microsoft"/>
28
+ <param pos="0" name="os.family" value="Windows"/>
29
+ <param pos="0" name="os.product" value="Windows 2000 Server"/>
30
+ <param pos="0" name="os.arch" value="x86"/>
31
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_2000:-"/>
32
+ </fingerprint>
33
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows 2000 Version 5\.0.*$">
34
+ <description>Windows 2000 Datacenter on x86</description>
35
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: x86 Family 15 Model 4 Stepping 8 AT/AT COMPATIBLE - Software: Windows 2000 Version 5.0 (Build 2195 Uniprocessor Free)</example>
36
+ <param pos="0" name="os.vendor" value="Microsoft"/>
37
+ <param pos="0" name="os.family" value="Windows"/>
38
+ <param pos="0" name="os.product" value="Windows 2000 Datacenter Server"/>
39
+ <param pos="0" name="os.arch" value="x86"/>
40
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_2000:-"/>
41
+ </fingerprint>
42
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 5\.2.*$">
43
+ <description>Windows Server 2003 on x86</description>
44
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: x86 Family 15 Model 4 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 5.2 (Build 3790 Multiprocessor Free)</example>
45
+ <param pos="0" name="os.vendor" value="Microsoft"/>
46
+ <param pos="0" name="os.family" value="Windows"/>
47
+ <param pos="0" name="os.product" value="Windows Server 2003"/>
48
+ <param pos="0" name="os.arch" value="x86"/>
49
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
50
+ </fingerprint>
51
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 5\.2.*$">
52
+ <description>Windows Server 2003 Datacenter on x86</description>
53
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: x86 Family 15 Model 4 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 5.2 (Build 3790 Multiprocessor Free)</example>
54
+ <param pos="0" name="os.vendor" value="Microsoft"/>
55
+ <param pos="0" name="os.family" value="Windows"/>
56
+ <param pos="0" name="os.product" value="Windows Server 2003, Datacenter Edition"/>
57
+ <param pos="0" name="os.arch" value="x86"/>
58
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
59
+ </fingerprint>
60
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 5\.2.*$">
61
+ <description>Windows Server 2003 on x86_64</description>
62
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: AMD64 Family 15 Model 4 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 5.2 (Build 3790 Multiprocessor Free)</example>
63
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: Intel64 Family 6 Model 15 Stepping 6 AT/AT COMPATIBLE - Software: Windows Version 5.2 (Build 3790 Multiprocessor Free)</example>
64
+ <param pos="0" name="os.vendor" value="Microsoft"/>
65
+ <param pos="0" name="os.family" value="Windows"/>
66
+ <param pos="0" name="os.product" value="Windows Server 2003"/>
67
+ <param pos="0" name="os.arch" value="x86_64"/>
68
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
69
+ </fingerprint>
70
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 5\.2.*$">
71
+ <description>Windows Server 2003 Datacenter on x86_64</description>
72
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: AMD64 Family 15 Model 4 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 5.2 (Build 3790 Multiprocessor Free)</example>
73
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: Intel64 Family 6 Model 15 Stepping 6 AT/AT COMPATIBLE - Software: Windows Version 5.2 (Build 3790 Multiprocessor Free)</example>
74
+ <param pos="0" name="os.vendor" value="Microsoft"/>
75
+ <param pos="0" name="os.family" value="Windows"/>
76
+ <param pos="0" name="os.product" value="Windows Server 2003, Datacenter Edition"/>
77
+ <param pos="0" name="os.arch" value="x86_64"/>
78
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
79
+ </fingerprint>
80
+ <fingerprint pattern="^Microsoft Windows CE Version ([\d.]+).*$">
81
+ <description>Windows CE</description>
82
+ <example>Microsoft Windows CE Version 4.20 (Build 0)</example>
83
+ <example>Microsoft Windows CE Version 4.20 (Build 1088)</example>
84
+ <param pos="0" name="os.vendor" value="Microsoft"/>
85
+ <param pos="0" name="os.family" value="Windows"/>
86
+ <param pos="0" name="os.product" value="Windows CE"/>
87
+ <param pos="1" name="os.version"/>
88
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_ce:{os.version}"/>
89
+ </fingerprint>
90
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 6\.0 \(Build 6001.*$">
91
+ <description>Windows Server 2008 on x86</description>
92
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: x86 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6001 Multiprocessor Free)</example>
93
+ <param pos="0" name="os.vendor" value="Microsoft"/>
94
+ <param pos="0" name="os.family" value="Windows"/>
95
+ <param pos="0" name="os.product" value="Windows Server 2008"/>
96
+ <param pos="0" name="os.arch" value="x86"/>
97
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
98
+ </fingerprint>
99
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 6\.0 \(Build 6001.*$">
100
+ <description>Windows Server 2008 Datacenter on x86</description>
101
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: x86 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6001 Multiprocessor Free)</example>
102
+ <param pos="0" name="os.vendor" value="Microsoft"/>
103
+ <param pos="0" name="os.family" value="Windows"/>
104
+ <param pos="0" name="os.product" value="Windows Server 2008 Datacenter Edition"/>
105
+ <param pos="0" name="os.arch" value="x86"/>
106
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
107
+ </fingerprint>
108
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.0 \(Build 6001.*$">
109
+ <description>Windows Server 2008 on x86_64</description>
110
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6001 Multiprocessor Free)</example>
111
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: Intel64 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6001 Multiprocessor Free)</example>
112
+ <param pos="0" name="os.vendor" value="Microsoft"/>
113
+ <param pos="0" name="os.family" value="Windows"/>
114
+ <param pos="0" name="os.product" value="Windows Server 2008"/>
115
+ <param pos="0" name="os.arch" value="x86_64"/>
116
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
117
+ </fingerprint>
118
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 6\.0 \(Build 6001.*$">
119
+ <description>Windows Server 2008 Datacenter on x86_64</description>
120
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6001 Multiprocessor Free)</example>
121
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: Intel64 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6001 Multiprocessor Free)</example>
122
+ <param pos="0" name="os.vendor" value="Microsoft"/>
123
+ <param pos="0" name="os.family" value="Windows"/>
124
+ <param pos="0" name="os.product" value="Windows Server 2008 Datacenter Edition"/>
125
+ <param pos="0" name="os.arch" value="x86_64"/>
126
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
127
+ </fingerprint>
128
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 6\.0 \(Build 6002.*$">
129
+ <description>Windows Server 2008 SP2 on x86</description>
130
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: x86 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6002 Multiprocessor Free)</example>
131
+ <param pos="0" name="os.vendor" value="Microsoft"/>
132
+ <param pos="0" name="os.family" value="Windows"/>
133
+ <param pos="0" name="os.product" value="Windows Server 2008"/>
134
+ <param pos="0" name="os.version" value="SP2"/>
135
+ <param pos="0" name="os.arch" value="x86"/>
136
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP2"/>
137
+ </fingerprint>
138
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 6\.0 \(Build 6002.*$">
139
+ <description>Windows Server 2008 Datacenter SP2 on x86</description>
140
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: x86 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6002 Multiprocessor Free)</example>
141
+ <param pos="0" name="os.vendor" value="Microsoft"/>
142
+ <param pos="0" name="os.family" value="Windows"/>
143
+ <param pos="0" name="os.product" value="Windows Server 2008 Datacenter Edition"/>
144
+ <param pos="0" name="os.version" value="SP2"/>
145
+ <param pos="0" name="os.arch" value="x86"/>
146
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP2"/>
147
+ </fingerprint>
148
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.0 \(Build 6002.*$">
149
+ <description>Windows Server 2008 SP2 on x86_64</description>
150
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6002 Multiprocessor Free)</example>
151
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: Intel64 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6002 Multiprocessor Free)</example>
152
+ <param pos="0" name="os.vendor" value="Microsoft"/>
153
+ <param pos="0" name="os.family" value="Windows"/>
154
+ <param pos="0" name="os.product" value="Windows Server 2008 R2"/>
155
+ <param pos="0" name="os.version" value="SP2"/>
156
+ <param pos="0" name="os.arch" value="x86_64"/>
157
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP2"/>
158
+ </fingerprint>
159
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 6\.0 \(Build 6002.*$">
160
+ <description>Windows Server 2008 Datacenter SP2 on x86_64</description>
161
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6002 Multiprocessor Free)</example>
162
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: Intel64 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6002 Multiprocessor Free)</example>
163
+ <param pos="0" name="os.vendor" value="Microsoft"/>
164
+ <param pos="0" name="os.family" value="Windows"/>
165
+ <param pos="0" name="os.product" value="Windows Server 2008 R2"/>
166
+ <param pos="0" name="os.version" value="SP2"/>
167
+ <param pos="0" name="os.arch" value="x86_64"/>
168
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP2"/>
169
+ </fingerprint>
170
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 6\.1 \(Build 7600.*$">
171
+ <description>Windows Server 2008 R2 on x86</description>
172
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: x86 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7600 Multiprocessor Free)</example>
173
+ <param pos="0" name="os.vendor" value="Microsoft"/>
174
+ <param pos="0" name="os.family" value="Windows"/>
175
+ <param pos="0" name="os.product" value="Windows Server 2008 R2"/>
176
+ <param pos="0" name="os.arch" value="x86"/>
177
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
178
+ </fingerprint>
179
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 6\.1 \(Build 7600.*$">
180
+ <description>Windows Server 2008 Datacenter R2 on x86</description>
181
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: x86 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7600 Multiprocessor Free)</example>
182
+ <param pos="0" name="os.vendor" value="Microsoft"/>
183
+ <param pos="0" name="os.family" value="Windows"/>
184
+ <param pos="0" name="os.product" value="Windows Server 2008 R2, Datacenter Edition"/>
185
+ <param pos="0" name="os.arch" value="x86"/>
186
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
187
+ </fingerprint>
188
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.1 \(Build 7600.*$">
189
+ <description>Windows Server 2008 R2 on x86_64</description>
190
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7600 Multiprocessor Free)</example>
191
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: Intel64 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7600 Multiprocessor Free)</example>
192
+ <param pos="0" name="os.vendor" value="Microsoft"/>
193
+ <param pos="0" name="os.family" value="Windows"/>
194
+ <param pos="0" name="os.product" value="Windows Server 2008 R2"/>
195
+ <param pos="0" name="os.arch" value="x86_64"/>
196
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
197
+ </fingerprint>
198
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 6\.1 \(Build 7600.*$">
199
+ <description>Windows Server 2008 Datacenter R2 on x86_64</description>
200
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7600 Multiprocessor Free)</example>
201
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: Intel64 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7600 Multiprocessor Free)</example>
202
+ <param pos="0" name="os.vendor" value="Microsoft"/>
203
+ <param pos="0" name="os.family" value="Windows"/>
204
+ <param pos="0" name="os.product" value="Windows Server 2008 R2, Datacenter Edition"/>
205
+ <param pos="0" name="os.arch" value="x86_64"/>
206
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
207
+ </fingerprint>
208
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 6\.1 \(Build 7601.*$">
209
+ <description>Windows Server 2008 R2 SP1 on x86</description>
210
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: x86 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7601 Multiprocessor Free)</example>
211
+ <param pos="0" name="os.vendor" value="Microsoft"/>
212
+ <param pos="0" name="os.family" value="Windows"/>
213
+ <param pos="0" name="os.product" value="Windows Server 2008 R2"/>
214
+ <param pos="0" name="os.version" value="SP1"/>
215
+ <param pos="0" name="os.arch" value="x86"/>
216
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP1"/>
217
+ </fingerprint>
218
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 6\.1 \(Build 7601.*$">
219
+ <description>Windows Server 2008 Datacenter R2 SP1 on x86</description>
220
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: x86 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7601 Multiprocessor Free)</example>
221
+ <param pos="0" name="os.vendor" value="Microsoft"/>
222
+ <param pos="0" name="os.family" value="Windows"/>
223
+ <param pos="0" name="os.product" value="Windows Server 2008 R2, Datacenter Edition"/>
224
+ <param pos="0" name="os.version" value="SP1"/>
225
+ <param pos="0" name="os.arch" value="x86"/>
226
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP1"/>
227
+ </fingerprint>
228
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.1 \(Build 7601.*$">
229
+ <description>Windows Server 2008 R2 SP1 on x86_64</description>
230
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7601 Multiprocessor Free)</example>
231
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: Intel64 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7601 Multiprocessor Free)</example>
232
+ <param pos="0" name="os.vendor" value="Microsoft"/>
233
+ <param pos="0" name="os.family" value="Windows"/>
234
+ <param pos="0" name="os.product" value="Windows Server 2008 R2"/>
235
+ <param pos="0" name="os.version" value="SP1"/>
236
+ <param pos="0" name="os.arch" value="x86_64"/>
237
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP1"/>
238
+ </fingerprint>
239
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 6\.1 \(Build 7601.*$">
240
+ <description>Windows Server 2008 Datacenter R2 SP1 on x86_64</description>
241
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7601 Multiprocessor Free)</example>
242
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: Intel64 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7601 Multiprocessor Free)</example>
243
+ <param pos="0" name="os.vendor" value="Microsoft"/>
244
+ <param pos="0" name="os.family" value="Windows"/>
245
+ <param pos="0" name="os.product" value="Windows Server 2008 R2, Datacenter Edition"/>
246
+ <param pos="0" name="os.version" value="SP1"/>
247
+ <param pos="0" name="os.arch" value="x86_64"/>
248
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP1"/>
249
+ </fingerprint>
250
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.2 \(Build 9200.*$">
251
+ <description>Windows Server 2012 on x86_64</description>
252
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: Intel64 Family 6 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.2 (Build 9200 Multiprocessor Free)</example>
253
+ <param pos="0" name="os.vendor" value="Microsoft"/>
254
+ <param pos="0" name="os.family" value="Windows"/>
255
+ <param pos="0" name="os.product" value="Windows Server 2012"/>
256
+ <param pos="0" name="os.arch" value="x86_64"/>
257
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
258
+ </fingerprint>
259
+ <!-- Various OIDs for Net-SNMP agents which are OS specific -->
260
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.1$">
261
+ <description>Net-SNMP on hpux9</description>
262
+ <example>1.3.6.1.4.1.8072.3.2.1</example>
263
+ <param pos="0" name="os.vendor" value="HP"/>
264
+ <param pos="0" name="os.family" value="HP-UX"/>
265
+ <param pos="0" name="os.product" value="HP-UX"/>
266
+ <param pos="0" name="os.version" value="9"/>
267
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:9"/>
268
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
269
+ <param pos="0" name="service.product" value="SNMP Agent"/>
270
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
271
+ </fingerprint>
272
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.2$">
273
+ <description>Net-SNMP on sunos4</description>
274
+ <example>1.3.6.1.4.1.8072.3.2.2</example>
275
+ <param pos="0" name="os.vendor" value="Sun"/>
276
+ <param pos="0" name="os.family" value="Solaris"/>
277
+ <param pos="0" name="os.product" value="Solaris"/>
278
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:-"/>
279
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
280
+ <param pos="0" name="service.product" value="SNMP Agent"/>
281
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
282
+ </fingerprint>
283
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.3$">
284
+ <description>Net-SNMP on solaris</description>
285
+ <example>1.3.6.1.4.1.8072.3.2.3</example>
286
+ <param pos="0" name="os.vendor" value="Sun"/>
287
+ <param pos="0" name="os.family" value="Solaris"/>
288
+ <param pos="0" name="os.product" value="Solaris"/>
289
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:-"/>
290
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
291
+ <param pos="0" name="service.product" value="SNMP Agent"/>
292
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
293
+ </fingerprint>
294
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.4$">
295
+ <description>Net-SNMP on osf</description>
296
+ <example>1.3.6.1.4.1.8072.3.2.4</example>
297
+ <param pos="0" name="os.vendor" value="DEC"/>
298
+ <param pos="0" name="os.product" value="OSF/1"/>
299
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
300
+ <param pos="0" name="service.product" value="SNMP Agent"/>
301
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
302
+ </fingerprint>
303
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.5$">
304
+ <description>Net-SNMP on ultrix</description>
305
+ <example>1.3.6.1.4.1.8072.3.2.5</example>
306
+ <param pos="0" name="os.vendor" value="DEC"/>
307
+ <param pos="0" name="os.product" value="Ultrix"/>
308
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
309
+ <param pos="0" name="service.product" value="SNMP Agent"/>
310
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
311
+ </fingerprint>
312
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.6$">
313
+ <description>Net-SNMP on hpux10</description>
314
+ <example>1.3.6.1.4.1.8072.3.2.6</example>
315
+ <param pos="0" name="os.vendor" value="HP"/>
316
+ <param pos="0" name="os.family" value="HP-UX"/>
317
+ <param pos="0" name="os.product" value="HP-UX"/>
318
+ <param pos="0" name="os.version" value="10"/>
319
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:10"/>
320
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
321
+ <param pos="0" name="service.product" value="SNMP Agent"/>
322
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
323
+ </fingerprint>
324
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.7$">
325
+ <description>Net-SNMP on netbsd</description>
326
+ <example>1.3.6.1.4.1.8072.3.2.7</example>
327
+ <param pos="0" name="os.vendor" value="NetBSD"/>
328
+ <param pos="0" name="os.family" value="NetBSD"/>
329
+ <param pos="0" name="os.product" value="NetBSD"/>
330
+ <param pos="0" name="os.cpe23" value="cpe:/o:netbsd:netbsd:-"/>
331
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
332
+ <param pos="0" name="service.product" value="SNMP Agent"/>
333
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
334
+ </fingerprint>
335
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.8$">
336
+ <description>Net-SNMP on freebsd</description>
337
+ <example>1.3.6.1.4.1.8072.3.2.8</example>
338
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
339
+ <param pos="0" name="os.family" value="FreeBSD"/>
340
+ <param pos="0" name="os.product" value="FreeBSD"/>
341
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:-"/>
342
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
343
+ <param pos="0" name="service.product" value="SNMP Agent"/>
344
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
345
+ </fingerprint>
346
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.9$">
347
+ <description>Net-SNMP on irix</description>
348
+ <example>1.3.6.1.4.1.8072.3.2.9</example>
349
+ <param pos="0" name="os.vendor" value="SGI"/>
350
+ <param pos="0" name="os.family" value="IRIX"/>
351
+ <param pos="0" name="os.product" value="IRIX"/>
352
+ <param pos="0" name="os.cpe23" value="cpe:/o:sgi:irix:-"/>
353
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
354
+ <param pos="0" name="service.product" value="SNMP Agent"/>
355
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
356
+ </fingerprint>
357
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.10$">
358
+ <description>Net-SNMP on linux</description>
359
+ <example>1.3.6.1.4.1.8072.3.2.10</example>
360
+ <param pos="0" name="os.family" value="Linux"/>
361
+ <param pos="0" name="os.product" value="Linux"/>
362
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
363
+ <param pos="0" name="service.product" value="SNMP Agent"/>
364
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
365
+ </fingerprint>
366
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.11$">
367
+ <description>Net-SNMP on bsdi</description>
368
+ <example>1.3.6.1.4.1.8072.3.2.11</example>
369
+ <param pos="0" name="os.vendor" value="Berkeley Software Design Inc."/>
370
+ <param pos="0" name="os.product" value="BSD/OS"/>
371
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
372
+ <param pos="0" name="service.product" value="SNMP Agent"/>
373
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
374
+ </fingerprint>
375
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.12$">
376
+ <description>Net-SNMP on openbsd</description>
377
+ <example>1.3.6.1.4.1.8072.3.2.12</example>
378
+ <param pos="0" name="os.vendor" value="OpenBSD"/>
379
+ <param pos="0" name="os.family" value="OpenBSD"/>
380
+ <param pos="0" name="os.product" value="OpenBSD"/>
381
+ <param pos="0" name="os.cpe23" value="cpe:/o:openbsd:openbsd:-"/>
382
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
383
+ <param pos="0" name="service.product" value="SNMP Agent"/>
384
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
385
+ </fingerprint>
386
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.13$">
387
+ <description>Net-SNMP on win32</description>
388
+ <example>1.3.6.1.4.1.8072.3.2.13</example>
389
+ <param pos="0" name="os.vendor" value="Microsoft"/>
390
+ <param pos="0" name="os.product" value="Windows"/>
391
+ <param pos="0" name="os.family" value="Windows"/>
392
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
393
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
394
+ <param pos="0" name="service.product" value="SNMP Agent"/>
395
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
396
+ </fingerprint>
397
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.14$">
398
+ <description>Net-SNMP on hpux11</description>
399
+ <example>1.3.6.1.4.1.8072.3.2.14</example>
400
+ <param pos="0" name="os.vendor" value="HP"/>
401
+ <param pos="0" name="os.family" value="HP-UX"/>
402
+ <param pos="0" name="os.product" value="HP-UX"/>
403
+ <param pos="0" name="os.version" value="11"/>
404
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:11"/>
405
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
406
+ <param pos="0" name="service.product" value="SNMP Agent"/>
407
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
408
+ </fingerprint>
409
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.15$">
410
+ <description>Net-SNMP on aix</description>
411
+ <example>1.3.6.1.4.1.8072.3.2.15</example>
412
+ <param pos="0" name="os.vendor" value="IBM"/>
413
+ <param pos="0" name="os.family" value="AIX"/>
414
+ <param pos="0" name="os.product" value="AIX"/>
415
+ <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:-"/>
416
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
417
+ <param pos="0" name="service.product" value="SNMP Agent"/>
418
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
419
+ </fingerprint>
420
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.16$">
421
+ <description>Net-SNMP on macosx</description>
422
+ <example>1.3.6.1.4.1.8072.3.2.16</example>
423
+ <param pos="0" name="os.vendor" value="Apple"/>
424
+ <param pos="0" name="os.product" value="Mac OS X"/>
425
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:-"/>
426
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
427
+ <param pos="0" name="service.product" value="SNMP Agent"/>
428
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
429
+ </fingerprint>
430
+ </fingerprints>
data/xml/ssh_banners.xml ADDED
@@ -0,0 +1,1968 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <fingerprints matches="ssh.banner" protocol="ssh" database_type="service" preference="0.90">
3
+ <!--
4
+ SSH "software revision and comment" strings (official RFC nomenclature for the part of
5
+ the identification string after "SSH-x.x-") are matched against these patterns to
6
+ fingerprint SSH servers.
7
+ -->
8
+ <fingerprint pattern="^ArrayOS$">
9
+ <description>Array Networks device</description>
10
+ <example>ArrayOS</example>
11
+ <param pos="0" name="service.vendor" value="Array Networks"/>
12
+ </fingerprint>
13
+ <fingerprint pattern="^RomSShell_([\d\.]+)$">
14
+ <description>Allegro RomSShell SSH</description>
15
+ <example service.version="4.62">RomSShell_4.62</example>
16
+ <param pos="0" name="service.vendor" value="Allegro Software"/>
17
+ <param pos="0" name="service.product" value="RomSShell"/>
18
+ <param pos="1" name="service.version"/>
19
+ </fingerprint>
20
+ <fingerprint pattern="(?i)^DraySSH_\S+$">
21
+ <description>DrayTek generic</description>
22
+ <example>DraySSH_2.0</example>
23
+ <param pos="0" name="hw.vendor" value="DrayTek"/>
24
+ </fingerprint>
25
+ <fingerprint pattern="^mpSSH_([\d\.]+)$">
26
+ <description>HP Integrated Lights Out (iLO) usually bundled with HP servers</description>
27
+ <example service.version="0.0.1">mpSSH_0.0.1</example>
28
+ <param pos="0" name="service.vendor" value="HP"/>
29
+ <param pos="0" name="service.product" value="iLO"/>
30
+ <param pos="0" name="service.family" value="iLO"/>
31
+ <param pos="1" name="service.version"/>
32
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:integrated_lights_out:{service.version}"/>
33
+ <param pos="0" name="hw.vendor" value="HP"/>
34
+ <param pos="0" name="os.vendor" value="HP"/>
35
+ <param pos="0" name="os.product" value="iLO"/>
36
+ <param pos="0" name="os.family" value="iLO"/>
37
+ <param pos="0" name="os.device" value="Lights Out Management"/>
38
+ </fingerprint>
39
+ <fingerprint pattern="^Serv-U_([\d\.]+)$">
40
+ <description>Serv-U SSH</description>
41
+ <example service.version="7.4.0.1">Serv-U_7.4.0.1</example>
42
+ <param pos="0" name="service.vendor" value="Rhino Software"/>
43
+ <param pos="0" name="service.product" value="Serv-U"/>
44
+ <param pos="1" name="service.version"/>
45
+ </fingerprint>
46
+ <fingerprint pattern="WS_FTP-SSH_([\d\.]+)$">
47
+ <description>WS_FTP Server with SSH</description>
48
+ <example service.version="6.1.1">WS_FTP-SSH_6.1.1</example>
49
+ <example service.version="7.0">WS_FTP-SSH_7.0</example>
50
+ <param pos="0" name="service.vendor" value="Ipswitch"/>
51
+ <param pos="0" name="service.product" value="WS_FTP"/>
52
+ <param pos="1" name="service.version"/>
53
+ <param pos="0" name="service.cpe23" value="cpe:/a:ipswitch:ws_ftp:{service.version}"/>
54
+ </fingerprint>
55
+ <fingerprint pattern="IPSSH[-_]([\d\.p]+).*$">
56
+ <description>VxWorks with version information</description>
57
+ <example os.version="6.9.0">IPSSH-6.9.0</example>
58
+ <param pos="0" name="os.vendor" value="Wind River"/>
59
+ <param pos="0" name="os.product" value="VxWorks"/>
60
+ <param pos="1" name="os.version"/>
61
+ <param pos="0" name="os.cpe23" value="cpe:/o:windriver:vxworks:{os.version}"/>
62
+ </fingerprint>
63
+ <!-- FreeBSD -->
64
+ <fingerprint pattern="^OpenSSH_(2\.3\.0) (green@FreeBSD.org 20010321)$">
65
+ <description>OpenSSH running on FreeBSD 4.3</description>
66
+ <example service.version="2.3.0" openssh.comment="green@FreeBSD.org 20010321">OpenSSH_2.3.0 green@FreeBSD.org 20010321</example>
67
+ <param pos="1" name="service.version"/>
68
+ <param pos="2" name="openssh.comment"/>
69
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
70
+ <param pos="0" name="service.family" value="OpenSSH"/>
71
+ <param pos="0" name="service.product" value="OpenSSH"/>
72
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
73
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
74
+ <param pos="0" name="os.family" value="FreeBSD"/>
75
+ <param pos="0" name="os.product" value="FreeBSD"/>
76
+ <param pos="0" name="os.version" value="4.3"/>
77
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
78
+ </fingerprint>
79
+ <fingerprint pattern="^OpenSSH_(2\.3\.0) (FreeBSD localisations 20010713)$">
80
+ <description>OpenSSH running on FreeBSD 4.4</description>
81
+ <example service.version="2.3.0" openssh.comment="FreeBSD localisations 20010713">OpenSSH_2.3.0 FreeBSD localisations 20010713</example>
82
+ <param pos="1" name="service.version"/>
83
+ <param pos="2" name="openssh.comment"/>
84
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
85
+ <param pos="0" name="service.family" value="OpenSSH"/>
86
+ <param pos="0" name="service.product" value="OpenSSH"/>
87
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
88
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
89
+ <param pos="0" name="os.family" value="FreeBSD"/>
90
+ <param pos="0" name="os.product" value="FreeBSD"/>
91
+ <param pos="0" name="os.version" value="4.4"/>
92
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
93
+ </fingerprint>
94
+ <fingerprint pattern="^OpenSSH_(2\.9) (FreeBSD localisations 20011202)$">
95
+ <description>OpenSSH running on FreeBSD 4.5</description>
96
+ <example service.version="2.9" openssh.comment="FreeBSD localisations 20011202">OpenSSH_2.9 FreeBSD localisations 20011202</example>
97
+ <param pos="1" name="service.version"/>
98
+ <param pos="2" name="openssh.comment"/>
99
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
100
+ <param pos="0" name="service.family" value="OpenSSH"/>
101
+ <param pos="0" name="service.product" value="OpenSSH"/>
102
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
103
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
104
+ <param pos="0" name="os.family" value="FreeBSD"/>
105
+ <param pos="0" name="os.product" value="FreeBSD"/>
106
+ <param pos="0" name="os.version" value="4.5"/>
107
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
108
+ </fingerprint>
109
+ <fingerprint pattern="^OpenSSH_(3\.4p1) (FreeBSD 20020702)$">
110
+ <description>OpenSSH running on FreeBSD 4.6.2</description>
111
+ <example service.version="3.4p1" openssh.comment="FreeBSD 20020702">OpenSSH_3.4p1 FreeBSD 20020702</example>
112
+ <param pos="1" name="service.version"/>
113
+ <param pos="2" name="openssh.comment"/>
114
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
115
+ <param pos="0" name="service.family" value="OpenSSH"/>
116
+ <param pos="0" name="service.product" value="OpenSSH"/>
117
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
118
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
119
+ <param pos="0" name="os.family" value="FreeBSD"/>
120
+ <param pos="0" name="os.product" value="FreeBSD"/>
121
+ <param pos="0" name="os.version" value="4.6.2"/>
122
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
123
+ </fingerprint>
124
+ <fingerprint pattern="^OpenSSH_(2\.9) (FreeBSD localisations 20020307)$">
125
+ <description>OpenSSH running on FreeBSD 4.6</description>
126
+ <example service.version="2.9" openssh.comment="FreeBSD localisations 20020307">OpenSSH_2.9 FreeBSD localisations 20020307</example>
127
+ <param pos="1" name="service.version"/>
128
+ <param pos="2" name="openssh.comment"/>
129
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
130
+ <param pos="0" name="service.family" value="OpenSSH"/>
131
+ <param pos="0" name="service.product" value="OpenSSH"/>
132
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
133
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
134
+ <param pos="0" name="os.family" value="FreeBSD"/>
135
+ <param pos="0" name="os.product" value="FreeBSD"/>
136
+ <param pos="0" name="os.version" value="4.6"/>
137
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
138
+ </fingerprint>
139
+ <fingerprint pattern="^OpenSSH_(3\.4p1) (FreeBSD-20020702)$">
140
+ <description>OpenSSH running on FreeBSD 4.7</description>
141
+ <example service.version="3.4p1" openssh.comment="FreeBSD-20020702">OpenSSH_3.4p1 FreeBSD-20020702</example>
142
+ <param pos="1" name="service.version"/>
143
+ <param pos="2" name="openssh.comment"/>
144
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
145
+ <param pos="0" name="service.family" value="OpenSSH"/>
146
+ <param pos="0" name="service.product" value="OpenSSH"/>
147
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
148
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
149
+ <param pos="0" name="os.family" value="FreeBSD"/>
150
+ <param pos="0" name="os.product" value="FreeBSD"/>
151
+ <param pos="0" name="os.version" value="4.7"/>
152
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
153
+ </fingerprint>
154
+ <fingerprint pattern="^OpenSSH_(3\.5p1) (FreeBSD-20030201)$">
155
+ <description>OpenSSH running on FreeBSD 4.8</description>
156
+ <example service.version="3.5p1" openssh.comment="FreeBSD-20030201">OpenSSH_3.5p1 FreeBSD-20030201</example>
157
+ <param pos="1" name="service.version"/>
158
+ <param pos="2" name="openssh.comment"/>
159
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
160
+ <param pos="0" name="service.family" value="OpenSSH"/>
161
+ <param pos="0" name="service.product" value="OpenSSH"/>
162
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
163
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
164
+ <param pos="0" name="os.family" value="FreeBSD"/>
165
+ <param pos="0" name="os.product" value="FreeBSD"/>
166
+ <param pos="0" name="os.version" value="4.8"/>
167
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
168
+ </fingerprint>
169
+ <!-- Multiple minor version match, assert the oldest version -->
170
+ <fingerprint pattern="^OpenSSH_(3\.5p1) (FreeBSD-20030924)$">
171
+ <description>OpenSSH running on FreeBSD 4.9/4.10 (sometimes 4.11)</description>
172
+ <example service.version="3.5p1" openssh.comment="FreeBSD-20030924">OpenSSH_3.5p1 FreeBSD-20030924</example>
173
+ <param pos="1" name="service.version"/>
174
+ <param pos="2" name="openssh.comment"/>
175
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
176
+ <param pos="0" name="service.family" value="OpenSSH"/>
177
+ <param pos="0" name="service.product" value="OpenSSH"/>
178
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
179
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
180
+ <param pos="0" name="os.family" value="FreeBSD"/>
181
+ <param pos="0" name="os.product" value="FreeBSD"/>
182
+ <param pos="0" name="os.version" value="4.9"/>
183
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
184
+ </fingerprint>
185
+ <fingerprint pattern="^OpenSSH_(3\.5p1) (FreeBSD-20060930)$">
186
+ <description>OpenSSH running on FreeBSD 4.11</description>
187
+ <example service.version="3.5p1" openssh.comment="FreeBSD-20060930">OpenSSH_3.5p1 FreeBSD-20060930</example>
188
+ <param pos="1" name="service.version"/>
189
+ <param pos="2" name="openssh.comment"/>
190
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
191
+ <param pos="0" name="service.family" value="OpenSSH"/>
192
+ <param pos="0" name="service.product" value="OpenSSH"/>
193
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
194
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
195
+ <param pos="0" name="os.family" value="FreeBSD"/>
196
+ <param pos="0" name="os.product" value="FreeBSD"/>
197
+ <param pos="0" name="os.version" value="4.11"/>
198
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
199
+ </fingerprint>
200
+ <fingerprint pattern="^OpenSSH_(3\.5p1) (FreeBSD-20021029)$">
201
+ <description>OpenSSH running on FreeBSD 5.0</description>
202
+ <example service.version="3.5p1" openssh.comment="FreeBSD-20021029">OpenSSH_3.5p1 FreeBSD-20021029</example>
203
+ <param pos="1" name="service.version"/>
204
+ <param pos="2" name="openssh.comment"/>
205
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
206
+ <param pos="0" name="service.family" value="OpenSSH"/>
207
+ <param pos="0" name="service.product" value="OpenSSH"/>
208
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
209
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
210
+ <param pos="0" name="os.family" value="FreeBSD"/>
211
+ <param pos="0" name="os.product" value="FreeBSD"/>
212
+ <param pos="0" name="os.version" value="5.0"/>
213
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
214
+ </fingerprint>
215
+ <fingerprint pattern="^OpenSSH_(3\.6\.1p1) (FreeBSD-20030423)$">
216
+ <description>OpenSSH running on FreeBSD 5.1</description>
217
+ <example service.version="3.6.1p1" openssh.comment="FreeBSD-20030423">OpenSSH_3.6.1p1 FreeBSD-20030423</example>
218
+ <param pos="1" name="service.version"/>
219
+ <param pos="2" name="openssh.comment"/>
220
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
221
+ <param pos="0" name="service.family" value="OpenSSH"/>
222
+ <param pos="0" name="service.product" value="OpenSSH"/>
223
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
224
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
225
+ <param pos="0" name="os.family" value="FreeBSD"/>
226
+ <param pos="0" name="os.product" value="FreeBSD"/>
227
+ <param pos="0" name="os.version" value="5.1"/>
228
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
229
+ </fingerprint>
230
+ <fingerprint pattern="^OpenSSH_(3\.6\.1p1) (FreeBSD-20030924)$">
231
+ <description>OpenSSH running on FreeBSD 5.2</description>
232
+ <example service.version="3.6.1p1" openssh.comment="FreeBSD-20030924">OpenSSH_3.6.1p1 FreeBSD-20030924</example>
233
+ <param pos="1" name="service.version"/>
234
+ <param pos="2" name="openssh.comment"/>
235
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
236
+ <param pos="0" name="service.family" value="OpenSSH"/>
237
+ <param pos="0" name="service.product" value="OpenSSH"/>
238
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
239
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
240
+ <param pos="0" name="os.family" value="FreeBSD"/>
241
+ <param pos="0" name="os.product" value="FreeBSD"/>
242
+ <param pos="0" name="os.version" value="5.2"/>
243
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
244
+ </fingerprint>
245
+ <!-- Multiple minor version match, assert the oldest version -->
246
+ <fingerprint pattern="^OpenSSH_(3\.8\.1p1) (FreeBSD-20040419)$">
247
+ <description>OpenSSH running on FreeBSD 5.3/5.4</description>
248
+ <example service.version="3.8.1p1" openssh.comment="FreeBSD-20040419">OpenSSH_3.8.1p1 FreeBSD-20040419</example>
249
+ <param pos="1" name="service.version"/>
250
+ <param pos="2" name="openssh.comment"/>
251
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
252
+ <param pos="0" name="service.family" value="OpenSSH"/>
253
+ <param pos="0" name="service.product" value="OpenSSH"/>
254
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
255
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
256
+ <param pos="0" name="os.family" value="FreeBSD"/>
257
+ <param pos="0" name="os.product" value="FreeBSD"/>
258
+ <param pos="0" name="os.version" value="5.3"/>
259
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
260
+ </fingerprint>
261
+ <fingerprint pattern="^OpenSSH_(3\.8\.1p1) (FreeBSD-20060123)$">
262
+ <description>OpenSSH running on FreeBSD 5.5</description>
263
+ <example service.version="3.8.1p1" openssh.comment="FreeBSD-20060123">OpenSSH_3.8.1p1 FreeBSD-20060123</example>
264
+ <param pos="1" name="service.version"/>
265
+ <param pos="2" name="openssh.comment"/>
266
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
267
+ <param pos="0" name="service.family" value="OpenSSH"/>
268
+ <param pos="0" name="service.product" value="OpenSSH"/>
269
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
270
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
271
+ <param pos="0" name="os.family" value="FreeBSD"/>
272
+ <param pos="0" name="os.product" value="FreeBSD"/>
273
+ <param pos="0" name="os.version" value="5.5"/>
274
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
275
+ </fingerprint>
276
+ <!-- Multiple minor version match, assert the oldest version -->
277
+ <fingerprint pattern="^OpenSSH_(4\.2p1) (FreeBSD-20050903)$">
278
+ <description>OpenSSH running on FreeBSD 6.0/6.1</description>
279
+ <example service.version="4.2p1" openssh.comment="FreeBSD-20050903">OpenSSH_4.2p1 FreeBSD-20050903</example>
280
+ <param pos="1" name="service.version"/>
281
+ <param pos="2" name="openssh.comment"/>
282
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
283
+ <param pos="0" name="service.family" value="OpenSSH"/>
284
+ <param pos="0" name="service.product" value="OpenSSH"/>
285
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
286
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
287
+ <param pos="0" name="os.family" value="FreeBSD"/>
288
+ <param pos="0" name="os.product" value="FreeBSD"/>
289
+ <param pos="0" name="os.version" value="6.0"/>
290
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
291
+ </fingerprint>
292
+ <!-- Spans major versions, do not assert a version number -->
293
+ <fingerprint pattern="^OpenSSH_(4\.5p1) (FreeBSD-20061110)$">
294
+ <description>OpenSSH running on FreeBSD 6.2/6.3/6.4/7.0</description>
295
+ <example service.version="4.5p1" openssh.comment="FreeBSD-20061110">OpenSSH_4.5p1 FreeBSD-20061110</example>
296
+ <param pos="1" name="service.version"/>
297
+ <param pos="2" name="openssh.comment"/>
298
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
299
+ <param pos="0" name="service.family" value="OpenSSH"/>
300
+ <param pos="0" name="service.product" value="OpenSSH"/>
301
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
302
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
303
+ <param pos="0" name="os.family" value="FreeBSD"/>
304
+ <param pos="0" name="os.product" value="FreeBSD"/>
305
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:-"/>
306
+ </fingerprint>
307
+ <!-- Multiple minor version match, assert the oldest version -->
308
+ <fingerprint pattern="^OpenSSH_(5\.1p1) (FreeBSD-20080901)$">
309
+ <description>OpenSSH running on FreeBSD 7.1/7.2/7.3/7.4</description>
310
+ <example service.version="5.1p1" openssh.comment="FreeBSD-20080901">OpenSSH_5.1p1 FreeBSD-20080901</example>
311
+ <param pos="1" name="service.version"/>
312
+ <param pos="2" name="openssh.comment"/>
313
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
314
+ <param pos="0" name="service.family" value="OpenSSH"/>
315
+ <param pos="0" name="service.product" value="OpenSSH"/>
316
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
317
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
318
+ <param pos="0" name="os.family" value="FreeBSD"/>
319
+ <param pos="0" name="os.product" value="FreeBSD"/>
320
+ <param pos="0" name="os.version" value="7.1"/>
321
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
322
+ </fingerprint>
323
+ <fingerprint pattern="^OpenSSH_(5\.2p1) (FreeBSD-20090522)$">
324
+ <description>OpenSSH running on FreeBSD 8.0</description>
325
+ <example service.version="5.2p1" openssh.comment="FreeBSD-20090522">OpenSSH_5.2p1 FreeBSD-20090522</example>
326
+ <param pos="1" name="service.version"/>
327
+ <param pos="2" name="openssh.comment"/>
328
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
329
+ <param pos="0" name="service.family" value="OpenSSH"/>
330
+ <param pos="0" name="service.product" value="OpenSSH"/>
331
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
332
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
333
+ <param pos="0" name="os.family" value="FreeBSD"/>
334
+ <param pos="0" name="os.product" value="FreeBSD"/>
335
+ <param pos="0" name="os.version" value="8.0"/>
336
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
337
+ </fingerprint>
338
+ <!-- Multiple minor version match, assert the oldest version -->
339
+ <fingerprint pattern="^OpenSSH_(5\.4p1) (FreeBSD-20100308)$">
340
+ <description>OpenSSH running on FreeBSD 8.1/8.2</description>
341
+ <example service.version="5.4p1" openssh.comment="FreeBSD-20100308">OpenSSH_5.4p1 FreeBSD-20100308</example>
342
+ <param pos="1" name="service.version"/>
343
+ <param pos="2" name="openssh.comment"/>
344
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
345
+ <param pos="0" name="service.family" value="OpenSSH"/>
346
+ <param pos="0" name="service.product" value="OpenSSH"/>
347
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
348
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
349
+ <param pos="0" name="os.family" value="FreeBSD"/>
350
+ <param pos="0" name="os.product" value="FreeBSD"/>
351
+ <param pos="0" name="os.version" value="8.1"/>
352
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
353
+ </fingerprint>
354
+ <fingerprint pattern="^OpenSSH_(5\.4p1_hpn13v11) (FreeBSD-20100308)$">
355
+ <description>OpenSSH running on FreeBSD 8.3</description>
356
+ <example service.version="5.4p1_hpn13v11" openssh.comment="FreeBSD-20100308">OpenSSH_5.4p1_hpn13v11 FreeBSD-20100308</example>
357
+ <param pos="1" name="service.version"/>
358
+ <param pos="2" name="openssh.comment"/>
359
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
360
+ <param pos="0" name="service.family" value="OpenSSH"/>
361
+ <param pos="0" name="service.product" value="OpenSSH"/>
362
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
363
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
364
+ <param pos="0" name="os.family" value="FreeBSD"/>
365
+ <param pos="0" name="os.product" value="FreeBSD"/>
366
+ <param pos="0" name="os.version" value="8.3"/>
367
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
368
+ </fingerprint>
369
+ <fingerprint pattern="^OpenSSH_(6\.1_hpn13v11) (FreeBSD-20120901)$">
370
+ <description>OpenSSH running on FreeBSD 8.4</description>
371
+ <example service.version="6.1_hpn13v11" openssh.comment="FreeBSD-20120901">OpenSSH_6.1_hpn13v11 FreeBSD-20120901</example>
372
+ <param pos="1" name="service.version"/>
373
+ <param pos="2" name="openssh.comment"/>
374
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
375
+ <param pos="0" name="service.family" value="OpenSSH"/>
376
+ <param pos="0" name="service.product" value="OpenSSH"/>
377
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
378
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
379
+ <param pos="0" name="os.family" value="FreeBSD"/>
380
+ <param pos="0" name="os.product" value="FreeBSD"/>
381
+ <param pos="0" name="os.version" value="8.4"/>
382
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
383
+ </fingerprint>
384
+ <!-- Multiple minor version match, assert the oldest version -->
385
+ <fingerprint pattern="^OpenSSH_(5\.8p2_hpn13v11) (FreeBSD-20110503)$">
386
+ <description>OpenSSH running on FreeBSD 9.0/9.1</description>
387
+ <example service.version="5.8p2_hpn13v11" openssh.comment="FreeBSD-20110503">OpenSSH_5.8p2_hpn13v11 FreeBSD-20110503</example>
388
+ <param pos="1" name="service.version"/>
389
+ <param pos="2" name="openssh.comment"/>
390
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
391
+ <param pos="0" name="service.family" value="OpenSSH"/>
392
+ <param pos="0" name="service.product" value="OpenSSH"/>
393
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
394
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
395
+ <param pos="0" name="os.family" value="FreeBSD"/>
396
+ <param pos="0" name="os.product" value="FreeBSD"/>
397
+ <param pos="0" name="os.version" value="9.0"/>
398
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
399
+ </fingerprint>
400
+ <fingerprint pattern="^OpenSSH_(6\.2_hpn13v11) (FreeBSD-20130515)$">
401
+ <description>OpenSSH running on FreeBSD 9.2</description>
402
+ <example service.version="6.2_hpn13v11" openssh.comment="FreeBSD-20130515">OpenSSH_6.2_hpn13v11 FreeBSD-20130515</example>
403
+ <param pos="1" name="service.version"/>
404
+ <param pos="2" name="openssh.comment"/>
405
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
406
+ <param pos="0" name="service.family" value="OpenSSH"/>
407
+ <param pos="0" name="service.product" value="OpenSSH"/>
408
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
409
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
410
+ <param pos="0" name="os.family" value="FreeBSD"/>
411
+ <param pos="0" name="os.product" value="FreeBSD"/>
412
+ <param pos="0" name="os.version" value="9.2"/>
413
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
414
+ </fingerprint>
415
+ <!-- Spans major versions, do not assert a version number -->
416
+ <fingerprint pattern="^OpenSSH_(6\.6\.1_hpn13v11) (FreeBSD-20140420)$">
417
+ <description>OpenSSH running on FreeBSD 9.3/10.1/10.2</description>
418
+ <example service.version="6.6.1_hpn13v11" openssh.comment="FreeBSD-20140420">OpenSSH_6.6.1_hpn13v11 FreeBSD-20140420</example>
419
+ <param pos="1" name="service.version"/>
420
+ <param pos="2" name="openssh.comment"/>
421
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
422
+ <param pos="0" name="service.family" value="OpenSSH"/>
423
+ <param pos="0" name="service.product" value="OpenSSH"/>
424
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
425
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
426
+ <param pos="0" name="os.family" value="FreeBSD"/>
427
+ <param pos="0" name="os.product" value="FreeBSD"/>
428
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:-"/>
429
+ </fingerprint>
430
+ <fingerprint pattern="^OpenSSH_(6\.4_hpn13v11) (FreeBSD-20131111)$">
431
+ <description>OpenSSH running on FreeBSD 10.0</description>
432
+ <example service.version="6.4_hpn13v11" openssh.comment="FreeBSD-20131111">OpenSSH_6.4_hpn13v11 FreeBSD-20131111</example>
433
+ <param pos="1" name="service.version"/>
434
+ <param pos="2" name="openssh.comment"/>
435
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
436
+ <param pos="0" name="service.family" value="OpenSSH"/>
437
+ <param pos="0" name="service.product" value="OpenSSH"/>
438
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
439
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
440
+ <param pos="0" name="os.family" value="FreeBSD"/>
441
+ <param pos="0" name="os.product" value="FreeBSD"/>
442
+ <param pos="0" name="os.version" value="10.0"/>
443
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
444
+ </fingerprint>
445
+ <!-- Spans major versions, do not assert a version number -->
446
+ <fingerprint pattern="^OpenSSH_(7\.2) (FreeBSD-20160310)$">
447
+ <description>OpenSSH running on FreeBSD 10.3/11.0</description>
448
+ <example service.version="7.2" openssh.comment="FreeBSD-20160310">OpenSSH_7.2 FreeBSD-20160310</example>
449
+ <param pos="1" name="service.version"/>
450
+ <param pos="2" name="openssh.comment"/>
451
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
452
+ <param pos="0" name="service.family" value="OpenSSH"/>
453
+ <param pos="0" name="service.product" value="OpenSSH"/>
454
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
455
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
456
+ <param pos="0" name="os.family" value="FreeBSD"/>
457
+ <param pos="0" name="os.product" value="FreeBSD"/>
458
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:-"/>
459
+ </fingerprint>
460
+ <fingerprint pattern="^OpenSSH_(7\.3) (FreeBSD-20170902)$">
461
+ <description>OpenSSH running on FreeBSD 10.4</description>
462
+ <example service.version="7.3" openssh.comment="FreeBSD-20170902">OpenSSH_7.3 FreeBSD-20170902</example>
463
+ <param pos="1" name="service.version"/>
464
+ <param pos="2" name="openssh.comment"/>
465
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
466
+ <param pos="0" name="service.family" value="OpenSSH"/>
467
+ <param pos="0" name="service.product" value="OpenSSH"/>
468
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
469
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
470
+ <param pos="0" name="os.family" value="FreeBSD"/>
471
+ <param pos="0" name="os.product" value="FreeBSD"/>
472
+ <param pos="0" name="os.version" value="10.4"/>
473
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
474
+ </fingerprint>
475
+ <fingerprint pattern="^OpenSSH_(7\.2) (FreeBSD-20161230)$">
476
+ <description>OpenSSH running on FreeBSD 11.1</description>
477
+ <example service.version="7.2" openssh.comment="FreeBSD-20161230">OpenSSH_7.2 FreeBSD-20161230</example>
478
+ <param pos="1" name="service.version"/>
479
+ <param pos="2" name="openssh.comment"/>
480
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
481
+ <param pos="0" name="service.family" value="OpenSSH"/>
482
+ <param pos="0" name="service.product" value="OpenSSH"/>
483
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
484
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
485
+ <param pos="0" name="os.family" value="FreeBSD"/>
486
+ <param pos="0" name="os.product" value="FreeBSD"/>
487
+ <param pos="0" name="os.version" value="11.1"/>
488
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
489
+ </fingerprint>
490
+ <!-- Multiple minor version match, assert the oldest version -->
491
+ <fingerprint pattern="^OpenSSH_(7\.5) (FreeBSD-20170903)$">
492
+ <description>OpenSSH running on FreeBSD 11.2/11.3</description>
493
+ <example service.version="7.5" openssh.comment="FreeBSD-20170903">OpenSSH_7.5 FreeBSD-20170903</example>
494
+ <param pos="1" name="service.version"/>
495
+ <param pos="2" name="openssh.comment"/>
496
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
497
+ <param pos="0" name="service.family" value="OpenSSH"/>
498
+ <param pos="0" name="service.product" value="OpenSSH"/>
499
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
500
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
501
+ <param pos="0" name="os.family" value="FreeBSD"/>
502
+ <param pos="0" name="os.product" value="FreeBSD"/>
503
+ <param pos="0" name="os.version" value="11.2"/>
504
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
505
+ </fingerprint>
506
+ <fingerprint pattern="^OpenSSH_(7\.8) (FreeBSD-20180909)$">
507
+ <description>OpenSSH running on FreeBSD 12.0</description>
508
+ <example service.version="7.8" openssh.comment="FreeBSD-20180909">OpenSSH_7.8 FreeBSD-20180909</example>
509
+ <param pos="1" name="service.version"/>
510
+ <param pos="2" name="openssh.comment"/>
511
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
512
+ <param pos="0" name="service.family" value="OpenSSH"/>
513
+ <param pos="0" name="service.product" value="OpenSSH"/>
514
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
515
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
516
+ <param pos="0" name="os.family" value="FreeBSD"/>
517
+ <param pos="0" name="os.product" value="FreeBSD"/>
518
+ <param pos="0" name="os.version" value="12.0"/>
519
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
520
+ </fingerprint>
521
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(FreeBSD[ -].*)$">
522
+ <description>OpenSSH running on FreeBSD</description>
523
+ <example service.version="7.2" openssh.comment="FreeBSD-20160311">OpenSSH_7.2 FreeBSD-20160311</example>
524
+ <param pos="1" name="service.version"/>
525
+ <param pos="2" name="openssh.comment"/>
526
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
527
+ <param pos="0" name="service.family" value="OpenSSH"/>
528
+ <param pos="0" name="service.product" value="OpenSSH"/>
529
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
530
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
531
+ <param pos="0" name="os.family" value="FreeBSD"/>
532
+ <param pos="0" name="os.product" value="FreeBSD"/>
533
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:-"/>
534
+ </fingerprint>
535
+ <!-- NetBSD -->
536
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(NetBSD(?:_Secure_Shell)?[ -].*)$">
537
+ <description>OpenSSH running on NetBSD</description>
538
+ <example service.version="7.2" openssh.comment="NetBSD-20100308">OpenSSH_7.2 NetBSD-20100308</example>
539
+ <example service.version="4.4" openssh.comment="NetBSD_Secure_Shell-20061114">OpenSSH_4.4 NetBSD_Secure_Shell-20061114</example>
540
+ <param pos="1" name="service.version"/>
541
+ <param pos="2" name="openssh.comment"/>
542
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
543
+ <param pos="0" name="service.family" value="OpenSSH"/>
544
+ <param pos="0" name="service.product" value="OpenSSH"/>
545
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
546
+ <param pos="0" name="os.vendor" value="NetBSD"/>
547
+ <param pos="0" name="os.family" value="NetBSD"/>
548
+ <param pos="0" name="os.product" value="NetBSD"/>
549
+ <param pos="0" name="os.cpe23" value="cpe:/o:netbsd:netbsd:-"/>
550
+ </fingerprint>
551
+ <!-- Ubuntu -->
552
+ <fingerprint pattern="^OpenSSH_(3\.8\.1p1) (Debian-11ubuntu\d+(?:\.\d+)?)$">
553
+ <description>OpenSSH running on Ubuntu 4.10</description>
554
+ <example service.version="3.8.1p1" openssh.comment="Debian-11ubuntu3">OpenSSH_3.8.1p1 Debian-11ubuntu3</example>
555
+ <param pos="1" name="service.version"/>
556
+ <param pos="2" name="openssh.comment"/>
557
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
558
+ <param pos="0" name="service.family" value="OpenSSH"/>
559
+ <param pos="0" name="service.product" value="OpenSSH"/>
560
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
561
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
562
+ <param pos="0" name="os.family" value="Linux"/>
563
+ <param pos="0" name="os.product" value="Linux"/>
564
+ <param pos="0" name="os.version" value="4.10"/>
565
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
566
+ </fingerprint>
567
+ <fingerprint pattern="^OpenSSH_(3\.9p1) (Debian-1ubuntu\d+(?:\.\d+)?)$">
568
+ <description>OpenSSH running on Ubuntu 5.04</description>
569
+ <example service.version="3.9p1" openssh.comment="Debian-1ubuntu2">OpenSSH_3.9p1 Debian-1ubuntu2</example>
570
+ <param pos="1" name="service.version"/>
571
+ <param pos="2" name="openssh.comment"/>
572
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
573
+ <param pos="0" name="service.family" value="OpenSSH"/>
574
+ <param pos="0" name="service.product" value="OpenSSH"/>
575
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
576
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
577
+ <param pos="0" name="os.family" value="Linux"/>
578
+ <param pos="0" name="os.product" value="Linux"/>
579
+ <param pos="0" name="os.version" value="5.04"/>
580
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
581
+ </fingerprint>
582
+ <fingerprint pattern="^OpenSSH_(4\.1p1) (Debian-7ubuntu\d+(?:\.\d+)?)$">
583
+ <description>OpenSSH running on Ubuntu 5.10</description>
584
+ <example service.version="4.1p1" openssh.comment="Debian-7ubuntu4">OpenSSH_4.1p1 Debian-7ubuntu4</example>
585
+ <param pos="1" name="service.version"/>
586
+ <param pos="2" name="openssh.comment"/>
587
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
588
+ <param pos="0" name="service.family" value="OpenSSH"/>
589
+ <param pos="0" name="service.product" value="OpenSSH"/>
590
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
591
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
592
+ <param pos="0" name="os.family" value="Linux"/>
593
+ <param pos="0" name="os.product" value="Linux"/>
594
+ <param pos="0" name="os.version" value="5.10"/>
595
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
596
+ </fingerprint>
597
+ <fingerprint pattern="^OpenSSH_(4\.2p1) (Debian-7ubuntu\d+(?:\.\d+)?)$">
598
+ <description>OpenSSH running on Ubuntu 6.04</description>
599
+ <example service.version="4.2p1" openssh.comment="Debian-7ubuntu3.1">OpenSSH_4.2p1 Debian-7ubuntu3.1</example>
600
+ <example>OpenSSH_4.2p1 Debian-7ubuntu3.2</example>
601
+ <param pos="1" name="service.version"/>
602
+ <param pos="2" name="openssh.comment"/>
603
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
604
+ <param pos="0" name="service.family" value="OpenSSH"/>
605
+ <param pos="0" name="service.product" value="OpenSSH"/>
606
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
607
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
608
+ <param pos="0" name="os.family" value="Linux"/>
609
+ <param pos="0" name="os.product" value="Linux"/>
610
+ <param pos="0" name="os.version" value="6.04"/>
611
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
612
+ </fingerprint>
613
+ <fingerprint pattern="^OpenSSH_(4\.3p2) (Debian-8ubuntu\d+(?:\.\d+)?)$">
614
+ <description>OpenSSH running on Ubuntu 7.04</description>
615
+ <example service.version="4.3p2" openssh.comment="Debian-8ubuntu1.4">OpenSSH_4.3p2 Debian-8ubuntu1.4</example>
616
+ <param pos="1" name="service.version"/>
617
+ <param pos="2" name="openssh.comment"/>
618
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
619
+ <param pos="0" name="service.family" value="OpenSSH"/>
620
+ <param pos="0" name="service.product" value="OpenSSH"/>
621
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
622
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
623
+ <param pos="0" name="os.family" value="Linux"/>
624
+ <param pos="0" name="os.product" value="Linux"/>
625
+ <param pos="0" name="os.version" value="7.04"/>
626
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
627
+ </fingerprint>
628
+ <fingerprint pattern="^OpenSSH_(4\.6p1) (Debian-5ubuntu\d+(?:\.\d+)?)$">
629
+ <description>OpenSSH running on Ubuntu 7.10</description>
630
+ <example service.version="4.6p1" openssh.comment="Debian-5ubuntu0.2">OpenSSH_4.6p1 Debian-5ubuntu0.2</example>
631
+ <example>OpenSSH_4.6p1 Debian-5ubuntu0.5</example>
632
+ <example>OpenSSH_4.6p1 Debian-5ubuntu0.6</example>
633
+ <example>OpenSSH_4.6p1 Debian-5ubuntu0</example>
634
+ <param pos="1" name="service.version"/>
635
+ <param pos="2" name="openssh.comment"/>
636
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
637
+ <param pos="0" name="service.family" value="OpenSSH"/>
638
+ <param pos="0" name="service.product" value="OpenSSH"/>
639
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
640
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
641
+ <param pos="0" name="os.family" value="Linux"/>
642
+ <param pos="0" name="os.product" value="Linux"/>
643
+ <param pos="0" name="os.version" value="7.10"/>
644
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
645
+ </fingerprint>
646
+ <fingerprint pattern="^OpenSSH_(4\.7p1) (Debian-8ubuntu\d+(?:\.\d+)?)$">
647
+ <description>OpenSSH running on Ubuntu 8.04</description>
648
+ <example service.version="4.7p1" openssh.comment="Debian-8ubuntu1.2">OpenSSH_4.7p1 Debian-8ubuntu1.2</example>
649
+ <example service.version="4.7p1" openssh.comment="Debian-8ubuntu3">OpenSSH_4.7p1 Debian-8ubuntu3</example>
650
+ <param pos="1" name="service.version"/>
651
+ <param pos="2" name="openssh.comment"/>
652
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
653
+ <param pos="0" name="service.family" value="OpenSSH"/>
654
+ <param pos="0" name="service.product" value="OpenSSH"/>
655
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
656
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
657
+ <param pos="0" name="os.family" value="Linux"/>
658
+ <param pos="0" name="os.product" value="Linux"/>
659
+ <param pos="0" name="os.version" value="8.04"/>
660
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
661
+ </fingerprint>
662
+ <fingerprint pattern="^OpenSSH_(5\.1p1) (Debian-3ubuntu\d+(?:\.\d+)?)$">
663
+ <description>OpenSSH running on Ubuntu 8.10</description>
664
+ <example service.version="5.1p1" openssh.comment="Debian-3ubuntu1">OpenSSH_5.1p1 Debian-3ubuntu1</example>
665
+ <param pos="1" name="service.version"/>
666
+ <param pos="2" name="openssh.comment"/>
667
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
668
+ <param pos="0" name="service.family" value="OpenSSH"/>
669
+ <param pos="0" name="service.product" value="OpenSSH"/>
670
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
671
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
672
+ <param pos="0" name="os.family" value="Linux"/>
673
+ <param pos="0" name="os.product" value="Linux"/>
674
+ <param pos="0" name="os.version" value="8.10"/>
675
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
676
+ </fingerprint>
677
+ <fingerprint pattern="^OpenSSH_(5\.1p1) (Debian-5ubuntu\d+(?:\.\d+)?)$">
678
+ <description>OpenSSH running on Ubuntu 9.04</description>
679
+ <example service.version="5.1p1" openssh.comment="Debian-5ubuntu1">OpenSSH_5.1p1 Debian-5ubuntu1</example>
680
+ <param pos="1" name="service.version"/>
681
+ <param pos="2" name="openssh.comment"/>
682
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
683
+ <param pos="0" name="service.family" value="OpenSSH"/>
684
+ <param pos="0" name="service.product" value="OpenSSH"/>
685
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
686
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
687
+ <param pos="0" name="os.family" value="Linux"/>
688
+ <param pos="0" name="os.product" value="Linux"/>
689
+ <param pos="0" name="os.version" value="9.04"/>
690
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
691
+ </fingerprint>
692
+ <fingerprint pattern="^OpenSSH_(5\.1p1) (Debian-6ubuntu\d+(?:\.\d+)?)$">
693
+ <description>OpenSSH running on Ubuntu 9.10</description>
694
+ <example service.version="5.1p1" openssh.comment="Debian-6ubuntu2">OpenSSH_5.1p1 Debian-6ubuntu2</example>
695
+ <param pos="1" name="service.version"/>
696
+ <param pos="2" name="openssh.comment"/>
697
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
698
+ <param pos="0" name="service.family" value="OpenSSH"/>
699
+ <param pos="0" name="service.product" value="OpenSSH"/>
700
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
701
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
702
+ <param pos="0" name="os.family" value="Linux"/>
703
+ <param pos="0" name="os.product" value="Linux"/>
704
+ <param pos="0" name="os.version" value="9.10"/>
705
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
706
+ </fingerprint>
707
+ <fingerprint pattern="^OpenSSH_(5\.3p1) (Debian-3ubuntu\d+(?:\.\d+)?)$">
708
+ <description>OpenSSH running on Ubuntu 10.04 (lucid)</description>
709
+ <example service.version="5.3p1" openssh.comment="Debian-3ubuntu3">OpenSSH_5.3p1 Debian-3ubuntu3</example>
710
+ <example service.version="5.3p1" openssh.comment="Debian-3ubuntu4">OpenSSH_5.3p1 Debian-3ubuntu4</example>
711
+ <example service.version="5.3p1" openssh.comment="Debian-3ubuntu5">OpenSSH_5.3p1 Debian-3ubuntu5</example>
712
+ <example service.version="5.3p1" openssh.comment="Debian-3ubuntu6">OpenSSH_5.3p1 Debian-3ubuntu6</example>
713
+ <example service.version="5.3p1" openssh.comment="Debian-3ubuntu7">OpenSSH_5.3p1 Debian-3ubuntu7</example>
714
+ <example service.version="5.3p1" openssh.comment="Debian-3ubuntu7.1">OpenSSH_5.3p1 Debian-3ubuntu7.1</example>
715
+ <param pos="1" name="service.version"/>
716
+ <param pos="2" name="openssh.comment"/>
717
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
718
+ <param pos="0" name="service.family" value="OpenSSH"/>
719
+ <param pos="0" name="service.product" value="OpenSSH"/>
720
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
721
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
722
+ <param pos="0" name="os.family" value="Linux"/>
723
+ <param pos="0" name="os.product" value="Linux"/>
724
+ <param pos="0" name="os.version" value="10.04"/>
725
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
726
+ </fingerprint>
727
+ <fingerprint pattern="^OpenSSH_(5\.5p1) (Debian-4ubuntu\d+(?:\.\d+)?)$">
728
+ <description>OpenSSH running on Ubuntu 10.10</description>
729
+ <example service.version="5.5p1" openssh.comment="Debian-4ubuntu4">OpenSSH_5.5p1 Debian-4ubuntu4</example>
730
+ <example service.version="5.5p1" openssh.comment="Debian-4ubuntu5">OpenSSH_5.5p1 Debian-4ubuntu5</example>
731
+ <example service.version="5.5p1" openssh.comment="Debian-4ubuntu6">OpenSSH_5.5p1 Debian-4ubuntu6</example>
732
+ <param pos="1" name="service.version"/>
733
+ <param pos="2" name="openssh.comment"/>
734
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
735
+ <param pos="0" name="service.family" value="OpenSSH"/>
736
+ <param pos="0" name="service.product" value="OpenSSH"/>
737
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
738
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
739
+ <param pos="0" name="os.family" value="Linux"/>
740
+ <param pos="0" name="os.product" value="Linux"/>
741
+ <param pos="0" name="os.version" value="10.10"/>
742
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
743
+ </fingerprint>
744
+ <fingerprint pattern="^OpenSSH_(5\.8p1) (Debian-1ubuntu\d(?:\.\d)?)$">
745
+ <description>OpenSSH running on Ubuntu 11.04</description>
746
+ <example service.version="5.8p1" openssh.comment="Debian-1ubuntu3">OpenSSH_5.8p1 Debian-1ubuntu3</example>
747
+ <param pos="1" name="service.version"/>
748
+ <param pos="2" name="openssh.comment"/>
749
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
750
+ <param pos="0" name="service.family" value="OpenSSH"/>
751
+ <param pos="0" name="service.product" value="OpenSSH"/>
752
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
753
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
754
+ <param pos="0" name="os.family" value="Linux"/>
755
+ <param pos="0" name="os.product" value="Linux"/>
756
+ <param pos="0" name="os.version" value="11.04"/>
757
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
758
+ </fingerprint>
759
+ <fingerprint pattern="^OpenSSH_(5\.8p1) (Debian-7ubuntu\d(?:\.\d)?)$">
760
+ <description>OpenSSH running on Ubuntu 11.10</description>
761
+ <example service.version="5.8p1" openssh.comment="Debian-7ubuntu1">OpenSSH_5.8p1 Debian-7ubuntu1</example>
762
+ <param pos="1" name="service.version"/>
763
+ <param pos="2" name="openssh.comment"/>
764
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
765
+ <param pos="0" name="service.family" value="OpenSSH"/>
766
+ <param pos="0" name="service.product" value="OpenSSH"/>
767
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
768
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
769
+ <param pos="0" name="os.family" value="Linux"/>
770
+ <param pos="0" name="os.product" value="Linux"/>
771
+ <param pos="0" name="os.version" value="11.10"/>
772
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
773
+ </fingerprint>
774
+ <fingerprint pattern="^OpenSSH_(5\.9p1) (Debian-5ubuntu\d(?:\.\d)?)$">
775
+ <description>OpenSSH running on Ubuntu 12.04</description>
776
+ <example service.version="5.9p1" openssh.comment="Debian-5ubuntu1">OpenSSH_5.9p1 Debian-5ubuntu1</example>
777
+ <example service.version="5.9p1" openssh.comment="Debian-5ubuntu1.4">OpenSSH_5.9p1 Debian-5ubuntu1.4</example>
778
+ <param pos="1" name="service.version"/>
779
+ <param pos="2" name="openssh.comment"/>
780
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
781
+ <param pos="0" name="service.family" value="OpenSSH"/>
782
+ <param pos="0" name="service.product" value="OpenSSH"/>
783
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
784
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
785
+ <param pos="0" name="os.family" value="Linux"/>
786
+ <param pos="0" name="os.product" value="Linux"/>
787
+ <param pos="0" name="os.version" value="12.04"/>
788
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
789
+ </fingerprint>
790
+ <fingerprint pattern="^OpenSSH_(6\.0p1) (Debian-3ubuntu\d(?:\.\d)?)$">
791
+ <description>OpenSSH running on Ubuntu 12.10</description>
792
+ <example service.version="6.0p1" openssh.comment="Debian-3ubuntu1">OpenSSH_6.0p1 Debian-3ubuntu1</example>
793
+ <example>OpenSSH_6.0p1 Debian-3ubuntu1.2</example>
794
+ <param pos="1" name="service.version"/>
795
+ <param pos="2" name="openssh.comment"/>
796
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
797
+ <param pos="0" name="service.family" value="OpenSSH"/>
798
+ <param pos="0" name="service.product" value="OpenSSH"/>
799
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
800
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
801
+ <param pos="0" name="os.family" value="Linux"/>
802
+ <param pos="0" name="os.product" value="Linux"/>
803
+ <param pos="0" name="os.version" value="12.10"/>
804
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
805
+ </fingerprint>
806
+ <fingerprint pattern="^OpenSSH_(6\.1p1) (Debian-4)$">
807
+ <description>OpenSSH running on Ubuntu 13.04</description>
808
+ <example service.version="6.1p1" openssh.comment="Debian-4">OpenSSH_6.1p1 Debian-4</example>
809
+ <param pos="1" name="service.version"/>
810
+ <param pos="2" name="openssh.comment"/>
811
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
812
+ <param pos="0" name="service.family" value="OpenSSH"/>
813
+ <param pos="0" name="service.product" value="OpenSSH"/>
814
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
815
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
816
+ <param pos="0" name="os.family" value="Linux"/>
817
+ <param pos="0" name="os.product" value="Linux"/>
818
+ <param pos="0" name="os.version" value="13.04"/>
819
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
820
+ </fingerprint>
821
+ <fingerprint pattern="^OpenSSH_(6\.2p2) (Ubuntu-6unbuntu\d(?:\.\d)?)$">
822
+ <description>OpenSSH running on Ubuntu 13.10</description>
823
+ <example service.version="6.2p2" openssh.comment="Ubuntu-6unbuntu0.4">OpenSSH_6.2p2 Ubuntu-6unbuntu0.4</example>
824
+ <param pos="1" name="service.version"/>
825
+ <param pos="2" name="openssh.comment"/>
826
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
827
+ <param pos="0" name="service.family" value="OpenSSH"/>
828
+ <param pos="0" name="service.product" value="OpenSSH"/>
829
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
830
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
831
+ <param pos="0" name="os.family" value="Linux"/>
832
+ <param pos="0" name="os.product" value="Linux"/>
833
+ <param pos="0" name="os.version" value="13.10"/>
834
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
835
+ </fingerprint>
836
+ <fingerprint pattern="^OpenSSH_(\d+\.\d+(?:\.\d+)?(?:p\d+)?)[_|-](hpn\d+v\d+)$">
837
+ <description>OpenSSH with HPN patches</description>
838
+ <example service.version="6.1" openssh.comment="hpn13v11">OpenSSH_6.1_hpn13v11</example>
839
+ <example service.version="5.8p1" openssh.comment="hpn13v11">OpenSSH_5.8p1-hpn13v11</example>
840
+ <example service.version="5.8p1" openssh.comment="hpn14v9">OpenSSH_5.8p1-hpn14v9</example>
841
+ <param pos="1" name="service.version"/>
842
+ <param pos="2" name="openssh.comment"/>
843
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
844
+ <param pos="0" name="service.family" value="OpenSSH"/>
845
+ <param pos="0" name="service.product" value="OpenSSH"/>
846
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
847
+ </fingerprint>
848
+ <fingerprint pattern="^OpenSSH_(6\.6(?:\.\d)?p1) (Ubuntu-2ubuntu\d+(?:\.\d+)?)$">
849
+ <description>OpenSSH running on Ubuntu 14.04</description>
850
+ <example service.version="6.6p1" openssh.comment="Ubuntu-2ubuntu1">OpenSSH_6.6p1 Ubuntu-2ubuntu1</example>
851
+ <example service.version="6.6.1p1" openssh.comment="Ubuntu-2ubuntu2">OpenSSH_6.6.1p1 Ubuntu-2ubuntu2</example>
852
+ <param pos="1" name="service.version"/>
853
+ <param pos="2" name="openssh.comment"/>
854
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
855
+ <param pos="0" name="service.family" value="OpenSSH"/>
856
+ <param pos="0" name="service.product" value="OpenSSH"/>
857
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
858
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
859
+ <param pos="0" name="os.family" value="Linux"/>
860
+ <param pos="0" name="os.product" value="Linux"/>
861
+ <param pos="0" name="os.version" value="14.04"/>
862
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
863
+ </fingerprint>
864
+ <fingerprint pattern="^OpenSSH_(6\.6\.1p1) (Ubuntu-8)$">
865
+ <description>OpenSSH running on Ubuntu 14.10</description>
866
+ <example service.version="6.6.1p1" openssh.comment="Ubuntu-8">OpenSSH_6.6.1p1 Ubuntu-8</example>
867
+ <param pos="1" name="service.version"/>
868
+ <param pos="2" name="openssh.comment"/>
869
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
870
+ <param pos="0" name="service.family" value="OpenSSH"/>
871
+ <param pos="0" name="service.product" value="OpenSSH"/>
872
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
873
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
874
+ <param pos="0" name="os.family" value="Linux"/>
875
+ <param pos="0" name="os.product" value="Linux"/>
876
+ <param pos="0" name="os.version" value="14.10"/>
877
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
878
+ </fingerprint>
879
+ <fingerprint pattern="^OpenSSH_(6\.7p1) (Ubuntu-5ubuntu\d(?:\.\d)?)$">
880
+ <description>OpenSSH running on Ubuntu 15.04 (vivid)</description>
881
+ <example service.version="6.7p1" openssh.comment="Ubuntu-5ubuntu1">OpenSSH_6.7p1 Ubuntu-5ubuntu1</example>
882
+ <param pos="1" name="service.version"/>
883
+ <param pos="2" name="openssh.comment"/>
884
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
885
+ <param pos="0" name="service.family" value="OpenSSH"/>
886
+ <param pos="0" name="service.product" value="OpenSSH"/>
887
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
888
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
889
+ <param pos="0" name="os.family" value="Linux"/>
890
+ <param pos="0" name="os.product" value="Linux"/>
891
+ <param pos="0" name="os.version" value="15.04"/>
892
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
893
+ </fingerprint>
894
+ <fingerprint pattern="^OpenSSH_(6\.9p1) (Ubuntu-2)$">
895
+ <description>OpenSSH running on Ubuntu 15.10</description>
896
+ <example service.version="6.9p1" openssh.comment="Ubuntu-2">OpenSSH_6.9p1 Ubuntu-2</example>
897
+ <param pos="1" name="service.version"/>
898
+ <param pos="2" name="openssh.comment"/>
899
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
900
+ <param pos="0" name="service.family" value="OpenSSH"/>
901
+ <param pos="0" name="service.product" value="OpenSSH"/>
902
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
903
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
904
+ <param pos="0" name="os.family" value="Linux"/>
905
+ <param pos="0" name="os.product" value="Linux"/>
906
+ <param pos="0" name="os.version" value="15.10"/>
907
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
908
+ </fingerprint>
909
+ <fingerprint pattern="^OpenSSH_(7\.2p2) (Ubuntu-4ubuntu\d(?:\.\d)?)$">
910
+ <description>OpenSSH running on Ubuntu 16.04 (vivid)</description>
911
+ <example service.version="7.2p2" openssh.comment="Ubuntu-4ubuntu2.7">OpenSSH_7.2p2 Ubuntu-4ubuntu2.7</example>
912
+ <param pos="1" name="service.version"/>
913
+ <param pos="2" name="openssh.comment"/>
914
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
915
+ <param pos="0" name="service.family" value="OpenSSH"/>
916
+ <param pos="0" name="service.product" value="OpenSSH"/>
917
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
918
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
919
+ <param pos="0" name="os.family" value="Linux"/>
920
+ <param pos="0" name="os.product" value="Linux"/>
921
+ <param pos="0" name="os.version" value="16.04"/>
922
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
923
+ </fingerprint>
924
+ <fingerprint pattern="^OpenSSH_(7\.3p1) (Ubuntu-1)$">
925
+ <description>OpenSSH running on Ubuntu 16.10</description>
926
+ <example service.version="7.3p1" openssh.comment="Ubuntu-1">OpenSSH_7.3p1 Ubuntu-1</example>
927
+ <param pos="1" name="service.version"/>
928
+ <param pos="2" name="openssh.comment"/>
929
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
930
+ <param pos="0" name="service.family" value="OpenSSH"/>
931
+ <param pos="0" name="service.product" value="OpenSSH"/>
932
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
933
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
934
+ <param pos="0" name="os.family" value="Linux"/>
935
+ <param pos="0" name="os.product" value="Linux"/>
936
+ <param pos="0" name="os.version" value="16.10"/>
937
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
938
+ </fingerprint>
939
+ <fingerprint pattern="^OpenSSH_(7\.4p1) (Ubuntu-10)$">
940
+ <description>OpenSSH running on Ubuntu 17.04</description>
941
+ <example service.version="7.4p1" openssh.comment="Ubuntu-10">OpenSSH_7.4p1 Ubuntu-10</example>
942
+ <param pos="1" name="service.version"/>
943
+ <param pos="2" name="openssh.comment"/>
944
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
945
+ <param pos="0" name="service.family" value="OpenSSH"/>
946
+ <param pos="0" name="service.product" value="OpenSSH"/>
947
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
948
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
949
+ <param pos="0" name="os.family" value="Linux"/>
950
+ <param pos="0" name="os.product" value="Linux"/>
951
+ <param pos="0" name="os.version" value="17.04"/>
952
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
953
+ </fingerprint>
954
+ <fingerprint pattern="^OpenSSH_(7\.5p1) (Ubuntu-10ubuntu\d(?:\.\d)?)$">
955
+ <description>OpenSSH running on Ubuntu 17.10</description>
956
+ <example service.version="7.5p1" openssh.comment="Ubuntu-10ubuntu0.1">OpenSSH_7.5p1 Ubuntu-10ubuntu0.1</example>
957
+ <param pos="1" name="service.version"/>
958
+ <param pos="2" name="openssh.comment"/>
959
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
960
+ <param pos="0" name="service.family" value="OpenSSH"/>
961
+ <param pos="0" name="service.product" value="OpenSSH"/>
962
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
963
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
964
+ <param pos="0" name="os.family" value="Linux"/>
965
+ <param pos="0" name="os.product" value="Linux"/>
966
+ <param pos="0" name="os.version" value="17.10"/>
967
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
968
+ </fingerprint>
969
+ <fingerprint pattern="^OpenSSH_(7\.6p1) (Ubuntu-4ubuntu\d(?:\.\d)?)$">
970
+ <description>OpenSSH running on Ubuntu 18.04</description>
971
+ <example service.version="7.6p1" openssh.comment="Ubuntu-4ubuntu0.3">OpenSSH_7.6p1 Ubuntu-4ubuntu0.3</example>
972
+ <param pos="1" name="service.version"/>
973
+ <param pos="2" name="openssh.comment"/>
974
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
975
+ <param pos="0" name="service.family" value="OpenSSH"/>
976
+ <param pos="0" name="service.product" value="OpenSSH"/>
977
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
978
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
979
+ <param pos="0" name="os.family" value="Linux"/>
980
+ <param pos="0" name="os.product" value="Linux"/>
981
+ <param pos="0" name="os.version" value="18.04"/>
982
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
983
+ </fingerprint>
984
+ <fingerprint pattern="^OpenSSH_(7\.7p1) (Ubuntu-4)$">
985
+ <description>OpenSSH running on Ubuntu 18.10</description>
986
+ <example service.version="7.7p1" openssh.comment="Ubuntu-4">OpenSSH_7.7p1 Ubuntu-4</example>
987
+ <param pos="1" name="service.version"/>
988
+ <param pos="2" name="openssh.comment"/>
989
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
990
+ <param pos="0" name="service.family" value="OpenSSH"/>
991
+ <param pos="0" name="service.product" value="OpenSSH"/>
992
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
993
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
994
+ <param pos="0" name="os.family" value="Linux"/>
995
+ <param pos="0" name="os.product" value="Linux"/>
996
+ <param pos="0" name="os.version" value="18.10"/>
997
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
998
+ </fingerprint>
999
+ <fingerprint pattern="^OpenSSH_(7\.9p1) (Ubuntu-10)$">
1000
+ <description>OpenSSH running on Ubuntu 19.04</description>
1001
+ <example service.version="7.9p1" openssh.comment="Ubuntu-10">OpenSSH_7.9p1 Ubuntu-10</example>
1002
+ <param pos="1" name="service.version"/>
1003
+ <param pos="2" name="openssh.comment"/>
1004
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1005
+ <param pos="0" name="service.family" value="OpenSSH"/>
1006
+ <param pos="0" name="service.product" value="OpenSSH"/>
1007
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1008
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
1009
+ <param pos="0" name="os.family" value="Linux"/>
1010
+ <param pos="0" name="os.product" value="Linux"/>
1011
+ <param pos="0" name="os.version" value="19.04"/>
1012
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
1013
+ </fingerprint>
1014
+ <fingerprint pattern="^OpenSSH_(8\.0p1) (Ubuntu-6build1)$">
1015
+ <description>OpenSSH running on Ubuntu 19.10</description>
1016
+ <example service.version="8.0p1" openssh.comment="Ubuntu-6build1">OpenSSH_8.0p1 Ubuntu-6build1</example>
1017
+ <param pos="1" name="service.version"/>
1018
+ <param pos="2" name="openssh.comment"/>
1019
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1020
+ <param pos="0" name="service.family" value="OpenSSH"/>
1021
+ <param pos="0" name="service.product" value="OpenSSH"/>
1022
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1023
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
1024
+ <param pos="0" name="os.family" value="Linux"/>
1025
+ <param pos="0" name="os.product" value="Linux"/>
1026
+ <param pos="0" name="os.version" value="19.10"/>
1027
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
1028
+ </fingerprint>
1029
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Ubuntu-\d\d?)$">
1030
+ <description>OpenSSH running on Ubuntu (unknown release)</description>
1031
+ <example service.version="7.6p1" openssh.comment="Ubuntu-2">OpenSSH_7.6p1 Ubuntu-2</example>
1032
+ <param pos="1" name="service.version"/>
1033
+ <param pos="2" name="openssh.comment"/>
1034
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1035
+ <param pos="0" name="service.family" value="OpenSSH"/>
1036
+ <param pos="0" name="service.product" value="OpenSSH"/>
1037
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1038
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
1039
+ <param pos="0" name="os.family" value="Linux"/>
1040
+ <param pos="0" name="os.product" value="Linux"/>
1041
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
1042
+ </fingerprint>
1043
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+((?:Debian|Ubuntu).+ubuntu.*)$">
1044
+ <description>OpenSSH running on Ubuntu</description>
1045
+ <example service.version="7.2p3" openssh.comment="Ubuntu-4ubuntu2.2">OpenSSH_7.2p3 Ubuntu-4ubuntu2.2</example>
1046
+ <param pos="1" name="service.version"/>
1047
+ <param pos="2" name="openssh.comment"/>
1048
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1049
+ <param pos="0" name="service.family" value="OpenSSH"/>
1050
+ <param pos="0" name="service.product" value="OpenSSH"/>
1051
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1052
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
1053
+ <param pos="0" name="os.family" value="Linux"/>
1054
+ <param pos="0" name="os.product" value="Linux"/>
1055
+ <param pos="0" name="os.certainty" value="0.75"/>
1056
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
1057
+ </fingerprint>
1058
+ <!-- Debian -->
1059
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian.+woody.*)$">
1060
+ <description>OpenSSH running on Debian 3.0 (woody)</description>
1061
+ <example service.version="3.4p1" openssh.comment="Debian 1:3.4p1-1.woody.3">OpenSSH_3.4p1 Debian 1:3.4p1-1.woody.3</example>
1062
+ <param pos="1" name="service.version"/>
1063
+ <param pos="2" name="openssh.comment"/>
1064
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1065
+ <param pos="0" name="service.family" value="OpenSSH"/>
1066
+ <param pos="0" name="service.product" value="OpenSSH"/>
1067
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1068
+ <param pos="0" name="os.vendor" value="Debian"/>
1069
+ <param pos="0" name="os.family" value="Linux"/>
1070
+ <param pos="0" name="os.product" value="Linux"/>
1071
+ <param pos="0" name="os.version" value="3.0"/>
1072
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1073
+ </fingerprint>
1074
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian.+sarge.*)$">
1075
+ <description>OpenSSH running on Debian 3.1 (sarge)</description>
1076
+ <example service.version="3.8.1p1" openssh.comment="Debian-8.sarge.4">OpenSSH_3.8.1p1 Debian-8.sarge.4</example>
1077
+ <param pos="1" name="service.version"/>
1078
+ <param pos="2" name="openssh.comment"/>
1079
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1080
+ <param pos="0" name="service.family" value="OpenSSH"/>
1081
+ <param pos="0" name="service.product" value="OpenSSH"/>
1082
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1083
+ <param pos="0" name="os.vendor" value="Debian"/>
1084
+ <param pos="0" name="os.family" value="Linux"/>
1085
+ <param pos="0" name="os.product" value="Linux"/>
1086
+ <param pos="0" name="os.version" value="3.1"/>
1087
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1088
+ </fingerprint>
1089
+ <fingerprint pattern="^OpenSSH_(4\.3p2) (Debian-9.*)$">
1090
+ <description>OpenSSH running on Debian 4.0 (etch)</description>
1091
+ <example service.version="4.3p2" openssh.comment="Debian-9">OpenSSH_4.3p2 Debian-9</example>
1092
+ <example service.version="4.3p2" openssh.comment="Debian-9etch3">OpenSSH_4.3p2 Debian-9etch3</example>
1093
+ <param pos="1" name="service.version"/>
1094
+ <param pos="2" name="openssh.comment"/>
1095
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1096
+ <param pos="0" name="service.family" value="OpenSSH"/>
1097
+ <param pos="0" name="service.product" value="OpenSSH"/>
1098
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1099
+ <param pos="0" name="os.vendor" value="Debian"/>
1100
+ <param pos="0" name="os.family" value="Linux"/>
1101
+ <param pos="0" name="os.product" value="Linux"/>
1102
+ <param pos="0" name="os.version" value="4.0"/>
1103
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1104
+ </fingerprint>
1105
+ <fingerprint pattern="^OpenSSH_(5\.1p1) (Debian-5)$">
1106
+ <description>OpenSSH running on Debian 5.0 (also 5.10)</description>
1107
+ <example service.version="5.1p1" openssh.comment="Debian-5">OpenSSH_5.1p1 Debian-5</example>
1108
+ <param pos="1" name="service.version"/>
1109
+ <param pos="2" name="openssh.comment"/>
1110
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1111
+ <param pos="0" name="service.family" value="OpenSSH"/>
1112
+ <param pos="0" name="service.product" value="OpenSSH"/>
1113
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1114
+ <param pos="0" name="os.vendor" value="Debian"/>
1115
+ <param pos="0" name="os.family" value="Linux"/>
1116
+ <param pos="0" name="os.product" value="Linux"/>
1117
+ <param pos="0" name="os.version" value="5.0"/>
1118
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1119
+ </fingerprint>
1120
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-\d+[+~]squeeze.*)$">
1121
+ <description>OpenSSH running on Debian 6.0 (squeeze)</description>
1122
+ <example service.version="5.5p1" openssh.comment="Debian-6+squeeze4">OpenSSH_5.5p1 Debian-6+squeeze4</example>
1123
+ <example service.version="5.5p1" openssh.comment="Debian-26+squeeze7">OpenSSH_5.5p1 Debian-26+squeeze7</example>
1124
+ <example service.version="5.8p1" openssh.comment="Debian-4~squeeze+1">OpenSSH_5.8p1 Debian-4~squeeze+1</example>
1125
+ <param pos="1" name="service.version"/>
1126
+ <param pos="2" name="openssh.comment"/>
1127
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1128
+ <param pos="0" name="service.family" value="OpenSSH"/>
1129
+ <param pos="0" name="service.product" value="OpenSSH"/>
1130
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1131
+ <param pos="0" name="os.vendor" value="Debian"/>
1132
+ <param pos="0" name="os.family" value="Linux"/>
1133
+ <param pos="0" name="os.product" value="Linux"/>
1134
+ <param pos="0" name="os.version" value="6.0"/>
1135
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1136
+ </fingerprint>
1137
+ <fingerprint pattern="^OpenSSH_(5\.5p1) (Debian-6)$">
1138
+ <description>OpenSSH running on Debian 6.0 (w/o squeeze in banner)</description>
1139
+ <example service.version="5.5p1" openssh.comment="Debian-6">OpenSSH_5.5p1 Debian-6</example>
1140
+ <param pos="1" name="service.version"/>
1141
+ <param pos="2" name="openssh.comment"/>
1142
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1143
+ <param pos="0" name="service.family" value="OpenSSH"/>
1144
+ <param pos="0" name="service.product" value="OpenSSH"/>
1145
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1146
+ <param pos="0" name="os.vendor" value="Debian"/>
1147
+ <param pos="0" name="os.family" value="Linux"/>
1148
+ <param pos="0" name="os.product" value="Linux"/>
1149
+ <param pos="0" name="os.version" value="6.0"/>
1150
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1151
+ </fingerprint>
1152
+ <!-- More specific than and should preceed the 7.0 match -->
1153
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-4\+deb7u2)$">
1154
+ <description>OpenSSH running on Debian 7.8 (wheezy)</description>
1155
+ <example service.version="6.0p1" openssh.comment="Debian-4+deb7u2">OpenSSH_6.0p1 Debian-4+deb7u2</example>
1156
+ <param pos="1" name="service.version"/>
1157
+ <param pos="2" name="openssh.comment"/>
1158
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1159
+ <param pos="0" name="service.family" value="OpenSSH"/>
1160
+ <param pos="0" name="service.product" value="OpenSSH"/>
1161
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1162
+ <param pos="0" name="os.vendor" value="Debian"/>
1163
+ <param pos="0" name="os.family" value="Linux"/>
1164
+ <param pos="0" name="os.product" value="Linux"/>
1165
+ <param pos="0" name="os.version" value="7.8"/>
1166
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1167
+ </fingerprint>
1168
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-4(?:\+deb7u\d+)?)$">
1169
+ <description>OpenSSH running on Debian 7.x (wheezy)</description>
1170
+ <example service.version="6.0p1" openssh.comment="Debian-4">OpenSSH_6.0p1 Debian-4</example>
1171
+ <example service.version="6.0p1" openssh.comment="Debian-4+deb7u1">OpenSSH_6.0p1 Debian-4+deb7u1</example>
1172
+ <param pos="1" name="service.version"/>
1173
+ <param pos="2" name="openssh.comment"/>
1174
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1175
+ <param pos="0" name="service.family" value="OpenSSH"/>
1176
+ <param pos="0" name="service.product" value="OpenSSH"/>
1177
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1178
+ <param pos="0" name="os.vendor" value="Debian"/>
1179
+ <param pos="0" name="os.family" value="Linux"/>
1180
+ <param pos="0" name="os.product" value="Linux"/>
1181
+ <param pos="0" name="os.version" value="7.0"/>
1182
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1183
+ </fingerprint>
1184
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-\d~bpo7\d?\+\d+)$">
1185
+ <description>OpenSSH backport running on Debian 7.x (wheezy)</description>
1186
+ <example service.version="6.6.1p1" openssh.comment="Debian-4~bpo70+1">OpenSSH_6.6.1p1 Debian-4~bpo70+1</example>
1187
+ <example service.version="6.4p1" openssh.comment="Debian-1~bpo70+2">OpenSSH_6.4p1 Debian-1~bpo70+2</example>
1188
+ <param pos="1" name="service.version"/>
1189
+ <param pos="2" name="openssh.comment"/>
1190
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1191
+ <param pos="0" name="service.family" value="OpenSSH"/>
1192
+ <param pos="0" name="service.product" value="OpenSSH"/>
1193
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1194
+ <param pos="0" name="os.vendor" value="Debian"/>
1195
+ <param pos="0" name="os.family" value="Linux"/>
1196
+ <param pos="0" name="os.product" value="Linux"/>
1197
+ <param pos="0" name="os.version" value="7.0"/>
1198
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1199
+ </fingerprint>
1200
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-5\+deb8u\d+.*)$">
1201
+ <description>OpenSSH running on Debian 8.x (jessie)</description>
1202
+ <example service.version="6.7p1" openssh.comment="Debian-5+deb8u2">OpenSSH_6.7p1 Debian-5+deb8u2</example>
1203
+ <example service.version="6.7p1" openssh.comment="Debian-5+deb8u1~ui80+7">OpenSSH_6.7p1 Debian-5+deb8u1~ui80+7</example>
1204
+ <example service.version="6.7p1" openssh.comment="Debian-5+deb8u8">OpenSSH_6.7p1 Debian-5+deb8u8</example>
1205
+ <param pos="1" name="service.version"/>
1206
+ <param pos="2" name="openssh.comment"/>
1207
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1208
+ <param pos="0" name="service.family" value="OpenSSH"/>
1209
+ <param pos="0" name="service.product" value="OpenSSH"/>
1210
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1211
+ <param pos="0" name="os.vendor" value="Debian"/>
1212
+ <param pos="0" name="os.family" value="Linux"/>
1213
+ <param pos="0" name="os.product" value="Linux"/>
1214
+ <param pos="0" name="os.version" value="8.0"/>
1215
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1216
+ </fingerprint>
1217
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-\d\d?\+deb9u\d+)$">
1218
+ <description>OpenSSH running on Debian 9.x (stretch)</description>
1219
+ <example service.version="7.4p1" openssh.comment="Debian-10+deb9u1">OpenSSH_7.4p1 Debian-10+deb9u1</example>
1220
+ <example service.version="6.0p1" openssh.comment="Debian-4+deb9u6">OpenSSH_6.0p1 Debian-4+deb9u6</example>
1221
+ <param pos="1" name="service.version"/>
1222
+ <param pos="2" name="openssh.comment"/>
1223
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1224
+ <param pos="0" name="service.family" value="OpenSSH"/>
1225
+ <param pos="0" name="service.product" value="OpenSSH"/>
1226
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1227
+ <param pos="0" name="os.vendor" value="Debian"/>
1228
+ <param pos="0" name="os.family" value="Linux"/>
1229
+ <param pos="0" name="os.product" value="Linux"/>
1230
+ <param pos="0" name="os.version" value="9.0"/>
1231
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1232
+ </fingerprint>
1233
+ <fingerprint pattern="^OpenSSH_(7\.9p1) (Debian-10|Debian-\d\d?\+deb10u\d+)$">
1234
+ <description>OpenSSH running on Debian 10.x (buster)</description>
1235
+ <example service.version="7.9p1" openssh.comment="Debian-10">OpenSSH_7.9p1 Debian-10</example>
1236
+ <example service.version="7.9p1" openssh.comment="Debian-10+deb10u6">OpenSSH_7.9p1 Debian-10+deb10u6</example>
1237
+ <param pos="1" name="service.version"/>
1238
+ <param pos="2" name="openssh.comment"/>
1239
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1240
+ <param pos="0" name="service.family" value="OpenSSH"/>
1241
+ <param pos="0" name="service.product" value="OpenSSH"/>
1242
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1243
+ <param pos="0" name="os.vendor" value="Debian"/>
1244
+ <param pos="0" name="os.family" value="Linux"/>
1245
+ <param pos="0" name="os.product" value="Linux"/>
1246
+ <param pos="0" name="os.version" value="10.0"/>
1247
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1248
+ </fingerprint>
1249
+ <fingerprint pattern="^OpenSSH_(8\.1p1) (Debian-1|Debian-\d\d?\+deb11u\d+)$">
1250
+ <description>OpenSSH running on Debian 11.x (bullseye)</description>
1251
+ <example service.version="8.1p1" openssh.comment="Debian-1">OpenSSH_8.1p1 Debian-1</example>
1252
+ <example service.version="8.1p1" openssh.comment="Debian-1+deb11u1">OpenSSH_8.1p1 Debian-1+deb11u1</example>
1253
+ <param pos="1" name="service.version"/>
1254
+ <param pos="2" name="openssh.comment"/>
1255
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1256
+ <param pos="0" name="service.family" value="OpenSSH"/>
1257
+ <param pos="0" name="service.product" value="OpenSSH"/>
1258
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1259
+ <param pos="0" name="os.vendor" value="Debian"/>
1260
+ <param pos="0" name="os.family" value="Linux"/>
1261
+ <param pos="0" name="os.product" value="Linux"/>
1262
+ <param pos="0" name="os.version" value="11.0"/>
1263
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1264
+ </fingerprint>
1265
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-\d+(?:[~]?bpo[.]?\d+)?)$">
1266
+ <description>OpenSSH running on Debian (unknown release)</description>
1267
+ <example service.version="4.3p2" openssh.comment="Debian-5~bpo.1">OpenSSH_4.3p2 Debian-5~bpo.1</example>
1268
+ <example service.version="4.2p1" openssh.comment="Debian-4bpo1">OpenSSH_4.2p1 Debian-4bpo1</example>
1269
+ <example service.version="7.4p1" openssh.comment="Debian-10">OpenSSH_7.4p1 Debian-10</example>
1270
+ <param pos="1" name="service.version"/>
1271
+ <param pos="2" name="openssh.comment"/>
1272
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1273
+ <param pos="0" name="service.family" value="OpenSSH"/>
1274
+ <param pos="0" name="service.product" value="OpenSSH"/>
1275
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1276
+ <param pos="0" name="os.vendor" value="Debian"/>
1277
+ <param pos="0" name="os.family" value="Linux"/>
1278
+ <param pos="0" name="os.product" value="Linux"/>
1279
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
1280
+ </fingerprint>
1281
+ <!-- Raspbian -->
1282
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Raspbian-5\+deb8u\d+)$">
1283
+ <description>OpenSSH running on Raspbian (Debian 8 "Jessie" based)</description>
1284
+ <example service.version="6.7p1" openssh.comment="Raspbian-5+deb8u1">OpenSSH_6.7p1 Raspbian-5+deb8u1</example>
1285
+ <example service.version="6.7p1" openssh.comment="Raspbian-5+deb8u2">OpenSSH_6.7p1 Raspbian-5+deb8u2</example>
1286
+ <param pos="1" name="service.version"/>
1287
+ <param pos="2" name="openssh.comment"/>
1288
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1289
+ <param pos="0" name="service.family" value="OpenSSH"/>
1290
+ <param pos="0" name="service.product" value="OpenSSH"/>
1291
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1292
+ <param pos="0" name="os.vendor" value="Raspbian"/>
1293
+ <param pos="0" name="os.family" value="Linux"/>
1294
+ <param pos="0" name="os.product" value="Linux"/>
1295
+ <param pos="0" name="os.version" value="8.0"/>
1296
+ <param pos="0" name="hw.product" value="Raspberry Pi"/>
1297
+ </fingerprint>
1298
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Raspbian-\d\d?\+deb9u\d+)$">
1299
+ <description>OpenSSH running on Raspbian (Debian 9 "Stretch" based)</description>
1300
+ <example service.version="7.4p1" openssh.comment="Raspbian-10+deb9u1">OpenSSH_7.4p1 Raspbian-10+deb9u1</example>
1301
+ <example service.version="7.4p1" openssh.comment="Raspbian-9+deb9u1">OpenSSH_7.4p1 Raspbian-9+deb9u1</example>
1302
+ <param pos="1" name="service.version"/>
1303
+ <param pos="2" name="openssh.comment"/>
1304
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1305
+ <param pos="0" name="service.family" value="OpenSSH"/>
1306
+ <param pos="0" name="service.product" value="OpenSSH"/>
1307
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1308
+ <param pos="0" name="os.vendor" value="Raspbian"/>
1309
+ <param pos="0" name="os.family" value="Linux"/>
1310
+ <param pos="0" name="os.product" value="Linux"/>
1311
+ <param pos="0" name="os.version" value="9.0"/>
1312
+ <param pos="0" name="hw.product" value="Raspberry Pi"/>
1313
+ </fingerprint>
1314
+ <fingerprint pattern="^OpenSSH_(7\.9p1)\s+(Raspbian-(?:10|\d\d?\+deb10u\d+))$">
1315
+ <description>OpenSSH running on Raspbian (Debian 10 "Buster" based)</description>
1316
+ <example service.version="7.9p1" openssh.comment="Raspbian-10">OpenSSH_7.9p1 Raspbian-10</example>
1317
+ <example service.version="7.9p1" openssh.comment="Raspbian-10+deb10u1">OpenSSH_7.9p1 Raspbian-10+deb10u1</example>
1318
+ <param pos="1" name="service.version"/>
1319
+ <param pos="2" name="openssh.comment"/>
1320
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1321
+ <param pos="0" name="service.family" value="OpenSSH"/>
1322
+ <param pos="0" name="service.product" value="OpenSSH"/>
1323
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1324
+ <param pos="0" name="os.vendor" value="Raspbian"/>
1325
+ <param pos="0" name="os.family" value="Linux"/>
1326
+ <param pos="0" name="os.product" value="Linux"/>
1327
+ <param pos="0" name="os.version" value="10.0"/>
1328
+ <param pos="0" name="hw.product" value="Raspberry Pi"/>
1329
+ </fingerprint>
1330
+ <fingerprint pattern="^OpenSSH_(8\.1p1)\s+(Raspbian-(?:1|\d\d?\+deb11u\d+))$">
1331
+ <description>OpenSSH running on Raspbian (Debian 11 "Bullseye" based)</description>
1332
+ <example service.version="8.1p1" openssh.comment="Raspbian-1">OpenSSH_8.1p1 Raspbian-1</example>
1333
+ <example service.version="8.1p1" openssh.comment="Raspbian-1+deb11u1">OpenSSH_8.1p1 Raspbian-1+deb11u1</example>
1334
+ <param pos="1" name="service.version"/>
1335
+ <param pos="2" name="openssh.comment"/>
1336
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1337
+ <param pos="0" name="service.family" value="OpenSSH"/>
1338
+ <param pos="0" name="service.product" value="OpenSSH"/>
1339
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1340
+ <param pos="0" name="os.vendor" value="Raspbian"/>
1341
+ <param pos="0" name="os.family" value="Linux"/>
1342
+ <param pos="0" name="os.product" value="Linux"/>
1343
+ <param pos="0" name="os.version" value="11.0"/>
1344
+ <param pos="0" name="hw.product" value="Raspberry Pi"/>
1345
+ </fingerprint>
1346
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Raspbian-\d\d?)$">
1347
+ <description>OpenSSH running on Raspbian (Debian, unknown release)</description>
1348
+ <example service.version="7.5p1" openssh.comment="Raspbian-10">OpenSSH_7.5p1 Raspbian-10</example>
1349
+ <example service.version="6.9p1" openssh.comment="Raspbian-3">OpenSSH_6.9p1 Raspbian-3</example>
1350
+ <param pos="1" name="service.version"/>
1351
+ <param pos="2" name="openssh.comment"/>
1352
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1353
+ <param pos="0" name="service.family" value="OpenSSH"/>
1354
+ <param pos="0" name="service.product" value="OpenSSH"/>
1355
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1356
+ <param pos="0" name="os.vendor" value="Raspbian"/>
1357
+ <param pos="0" name="os.family" value="Linux"/>
1358
+ <param pos="0" name="os.product" value="Linux"/>
1359
+ <param pos="0" name="hw.product" value="Raspberry Pi"/>
1360
+ </fingerprint>
1361
+ <!-- Miscellaneous -->
1362
+ <fingerprint pattern="^OpenSSH_(.*)\+(CAN-[0-9]{4}-[0-9]{4})$">
1363
+ <description>OpenSSH with CVE patch, as seen in Mac OS X</description>
1364
+ <example service.version="3.4p1" openssh.cvepatch="CAN-2004-0175">OpenSSH_3.4p1+CAN-2004-0175</example>
1365
+ <param pos="1" name="service.version"/>
1366
+ <param pos="2" name="openssh.cvepatch"/>
1367
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1368
+ <param pos="0" name="service.family" value="OpenSSH"/>
1369
+ <param pos="0" name="service.product" value="OpenSSH"/>
1370
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1371
+ <param pos="0" name="os.vendor" value="Apple"/>
1372
+ <param pos="0" name="os.family" value="Mac OS X"/>
1373
+ <param pos="0" name="os.product" value="Mac OS X"/>
1374
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:-"/>
1375
+ </fingerprint>
1376
+ <fingerprint pattern="^OpenSSH_(.*)_Mikrotik_v(.*)$">
1377
+ <description>OpenSSH on MikroTik</description>
1378
+ <example service.version="2.3.0" os.version="2.9">OpenSSH_2.3.0_Mikrotik_v2.9</example>
1379
+ <param pos="1" name="service.version"/>
1380
+ <param pos="2" name="os.version"/>
1381
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1382
+ <param pos="0" name="service.family" value="OpenSSH"/>
1383
+ <param pos="0" name="service.product" value="OpenSSH"/>
1384
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1385
+ <param pos="0" name="os.vendor" value="MikroTik"/>
1386
+ <param pos="0" name="os.device" value="Router"/>
1387
+ <param pos="0" name="os.family" value="RouterOS"/>
1388
+ <param pos="0" name="os.product" value="RouterOS"/>
1389
+ <param pos="0" name="os.cpe23" value="cpe:/o:mikrotik:routeros:{os.version}"/>
1390
+ </fingerprint>
1391
+ <fingerprint pattern="^OpenSSH_(.*)-HipServ$">
1392
+ <description>OpenSSH on HipServ</description>
1393
+ <example service.version="4.3">OpenSSH_4.3-HipServ</example>
1394
+ <param pos="1" name="service.version"/>
1395
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1396
+ <param pos="0" name="service.family" value="OpenSSH"/>
1397
+ <param pos="0" name="service.product" value="OpenSSH"/>
1398
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1399
+ <param pos="0" name="os.vendor" value="HipServ"/>
1400
+ <param pos="0" name="os.device" value="NAS"/>
1401
+ <param pos="0" name="os.family" value="Linux"/>
1402
+ <param pos="0" name="os.product" value="HipServ"/>
1403
+ </fingerprint>
1404
+ <fingerprint pattern="^OpenSSH_for_Windows_([\d.]+)$">
1405
+ <description>OpenSSH running on Windows</description>
1406
+ <example service.version="7.7">OpenSSH_for_Windows_7.7</example>
1407
+ <param pos="1" name="service.version"/>
1408
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1409
+ <param pos="0" name="service.family" value="OpenSSH"/>
1410
+ <param pos="0" name="service.product" value="OpenSSH"/>
1411
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1412
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1413
+ <param pos="0" name="os.family" value="Windows"/>
1414
+ <param pos="0" name="os.product" value="Windows"/>
1415
+ </fingerprint>
1416
+ <fingerprint pattern="^OpenSSH_(.*) in DesktopAuthority (?:.*)$">
1417
+ <description>DesktopAuthority SSH</description>
1418
+ <example service.version="3.8">OpenSSH_3.8 in DesktopAuthority 7.1.091</example>
1419
+ <param pos="1" name="service.version"/>
1420
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1421
+ <param pos="0" name="service.family" value="OpenSSH"/>
1422
+ <param pos="0" name="service.product" value="OpenSSH"/>
1423
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1424
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1425
+ <param pos="0" name="os.family" value="Windows"/>
1426
+ <param pos="0" name="os.product" value="Windows"/>
1427
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1428
+ </fingerprint>
1429
+ <fingerprint pattern="^OpenSSH_(\d+\.\d+(?:\.\d+)?(?:p\d+)?) ((?:PKIX\s+)?FIPS)$">
1430
+ <description>OpenSSH with a version and FIPS mode enabled</description>
1431
+ <example service.version="5.9" openssh.comment="FIPS">OpenSSH_5.9 FIPS</example>
1432
+ <example service.version="6.2" openssh.comment="PKIX FIPS">OpenSSH_6.2 PKIX FIPS</example>
1433
+ <example service.version="3.8.1p1" openssh.comment="FIPS">OpenSSH_3.8.1p1 FIPS</example>
1434
+ <param pos="1" name="service.version"/>
1435
+ <param pos="2" name="openssh.comment"/>
1436
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1437
+ <param pos="0" name="service.family" value="OpenSSH"/>
1438
+ <param pos="0" name="service.product" value="OpenSSH"/>
1439
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1440
+ </fingerprint>
1441
+ <fingerprint pattern="^OpenSSH_(\d+\.\d+(?:\.\d+)?(?:p\d+)?) *$">
1442
+ <description>OpenSSH with just a version, no comment by vendor</description>
1443
+ <example service.version="5.9p1">OpenSSH_5.9p1</example>
1444
+ <example service.version="5.9">OpenSSH_5.9</example>
1445
+ <example service.version="3.8.1p1">OpenSSH_3.8.1p1 </example>
1446
+ <example service.version="6.6.1">OpenSSH_6.6.1</example>
1447
+ <param pos="1" name="service.version"/>
1448
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1449
+ <param pos="0" name="service.family" value="OpenSSH"/>
1450
+ <param pos="0" name="service.product" value="OpenSSH"/>
1451
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1452
+ </fingerprint>
1453
+ <fingerprint pattern="^OpenSSH$">
1454
+ <description>OpenSSH w/o version or comment</description>
1455
+ <example>OpenSSH</example>
1456
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1457
+ <param pos="0" name="service.family" value="OpenSSH"/>
1458
+ <param pos="0" name="service.product" value="OpenSSH"/>
1459
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:-"/>
1460
+ </fingerprint>
1461
+ <!-- SSH-1.99-OpenSSH_4.3p2-4.cern-hpn-CERN-4.3p2-4.cern -->
1462
+ <!--<fingerprint pattern="^OpenSSH_?([^\s]*)\s*(.*)$">
1463
+ <description>Catch all for OpenSSH based SSH servers
1464
+ ******************** NOTE ********************
1465
+ Be sure to put any specific OpenSSH derivative
1466
+ checks above this block.
1467
+ ******************** NOTE ********************
1468
+ </description>
1469
+ <param pos="1" name="service.version"/>
1470
+ <param pos="2" name="openssh.comment"/>
1471
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1472
+ <param pos="0" name="service.family" value="OpenSSH"/>
1473
+ <param pos="0" name="service.product" value="OpenSSH"/>
1474
+ </fingerprint>-->
1475
+ <!-- TODO: Handle "vpn3" banners for Cisco 3000 VPN Concentrators (need example banners first) -->
1476
+ <fingerprint pattern="^Cisco-(.*)$">
1477
+ <description>Cisco SSH banner (could be IOS or PIX), The version always seems to be 1.25</description>
1478
+ <example service.version="1.25">Cisco-1.25</example>
1479
+ <param pos="1" name="service.version"/>
1480
+ <param pos="0" name="service.vendor" value="Cisco"/>
1481
+ <param pos="0" name="service.product" value="SSH"/>
1482
+ <param pos="0" name="os.vendor" value="Cisco"/>
1483
+ <param pos="0" name="os.product" value="IOS"/>
1484
+ <param pos="0" name="os.certainty" value="0.8"/>
1485
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:-"/>
1486
+ </fingerprint>
1487
+ <fingerprint pattern="^CISCO_WLC$">
1488
+ <description>SSH banner from a Cisco WLC (WLC)</description>
1489
+ <example>CISCO_WLC</example>
1490
+ <param pos="0" name="service.vendor" value="Cisco"/>
1491
+ <param pos="0" name="service.product" value="SSH"/>
1492
+ <param pos="0" name="os.vendor" value="Cisco"/>
1493
+ <param pos="0" name="os.product" value="Wireless Controller"/>
1494
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller:-"/>
1495
+ </fingerprint>
1496
+ <fingerprint pattern="(?i)^Cleo (\S+)/(\S+) SSH FTP server$">
1497
+ <description>Cleo networks Harmony, VLProxy, VLTrader, others</description>
1498
+ <example service.product="Harmony" service.version="5.5.0.3">Cleo Harmony/5.5.0.3 SSH FTP server</example>
1499
+ <example service.product="VLProxy" service.version="3.2">Cleo VLProxy/3.2 SSH FTP server</example>
1500
+ <param pos="0" name="service.vendor" value="Cleo"/>
1501
+ <param pos="1" name="service.product"/>
1502
+ <param pos="2" name="service.version"/>
1503
+ </fingerprint>
1504
+ <fingerprint pattern="^Sun_SSH_(.*)$">
1505
+ <description>Sun SSH banner</description>
1506
+ <example service.version="1.1">Sun_SSH_1.1</example>
1507
+ <param pos="1" name="service.version"/>
1508
+ <param pos="0" name="service.vendor" value="Sun"/>
1509
+ <param pos="0" name="service.product" value="SSH"/>
1510
+ <param pos="0" name="os.vendor" value="Sun"/>
1511
+ <param pos="0" name="os.family" value="Solaris"/>
1512
+ <param pos="0" name="os.product" value="Solaris"/>
1513
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:-"/>
1514
+ </fingerprint>
1515
+ <fingerprint pattern="^SSH Protocol Compatible Server SCS (.*)$">
1516
+ <description>Netscreen with version</description>
1517
+ <param pos="1" name="service.version"/>
1518
+ <param pos="0" name="service.vendor" value="Juniper"/>
1519
+ <param pos="0" name="service.family" value="NetScreen"/>
1520
+ <param pos="0" name="service.product" value="NetScreen"/>
1521
+ <param pos="0" name="os.vendor" value="Juniper"/>
1522
+ <param pos="0" name="os.device" value="Firewall"/>
1523
+ <param pos="0" name="os.family" value="ScreenOS"/>
1524
+ <param pos="0" name="os.product" value="ScreenOS"/>
1525
+ <param pos="0" name="os.cpe23" value="cpe:/o:juniper:screenos:-"/>
1526
+ </fingerprint>
1527
+ <fingerprint pattern="^NetScreen$">
1528
+ <description>Netscreen generic</description>
1529
+ <example>NetScreen</example>
1530
+ <param pos="0" name="service.vendor" value="Juniper"/>
1531
+ <param pos="0" name="service.family" value="NetScreen"/>
1532
+ <param pos="0" name="service.product" value="NetScreen"/>
1533
+ <param pos="0" name="os.vendor" value="Juniper"/>
1534
+ <param pos="0" name="os.device" value="Firewall"/>
1535
+ <param pos="0" name="os.family" value="ScreenOS"/>
1536
+ <param pos="0" name="os.product" value="ScreenOS"/>
1537
+ <param pos="0" name="os.cpe23" value="cpe:/o:juniper:screenos:-"/>
1538
+ </fingerprint>
1539
+ <fingerprint pattern="^HUAWEI-(?:[\d\.]+)$">
1540
+ <description>Huawei generic</description>
1541
+ <example>HUAWEI-1.5</example>
1542
+ <param pos="0" name="hw.vendor" value="Huawei"/>
1543
+ </fingerprint>
1544
+ <fingerprint pattern="^HUAWEI-UMG(\d+)">
1545
+ <description>Huawei Universal Media Gateway</description>
1546
+ <example hw.model="8900">HUAWEI-UMG8900</example>
1547
+ <param pos="0" name="hw.vendor" value="Huawei"/>
1548
+ <param pos="0" name="hw.product" value="Universal Media Gateway"/>
1549
+ <param pos="0" name="hw.device" value="Telecom"/>
1550
+ <param pos="1" name="hw.model"/>
1551
+ </fingerprint>
1552
+ <fingerprint pattern="^HUAWEI.VRP.([\d\.]+)$">
1553
+ <description>Huawei Versatile Routing Platform (VRP)</description>
1554
+ <example os.version="3.10" service.version="3.10">HUAWEI-VRP-3.10</example>
1555
+ <example os.version="8.0" service.version="8.0">HUAWEI_VRPV8.0</example>
1556
+ <param pos="0" name="service.vendor" value="Huawei"/>
1557
+ <param pos="0" name="service.family" value="VRP"/>
1558
+ <param pos="0" name="service.product" value="VRP"/>
1559
+ <param pos="1" name="service.version"/>
1560
+ <param pos="0" name="os.vendor" value="Huawei"/>
1561
+ <param pos="0" name="os.device" value="Router"/>
1562
+ <param pos="0" name="os.family" value="VRP"/>
1563
+ <param pos="0" name="os.product" value="VRP"/>
1564
+ <param pos="1" name="os.version"/>
1565
+ </fingerprint>
1566
+ <fingerprint pattern="^([\d.]+)[ _]sshlib:? (?i:GlobalScape)$">
1567
+ <description>GlobalScape SSH (which uses Bitvise sshlib)</description>
1568
+ <example service.component.version="1.36">1.36_sshlib GlobalSCAPE</example>
1569
+ <example service.component.version="1.82">1.82_sshlib Globalscape</example>
1570
+ <example service.component.version="1.36">1.36 sshlib: GlobalScape</example>
1571
+ <param pos="1" name="service.component.version"/>
1572
+ <param pos="0" name="service.component.vendor" value="Bitvise"/>
1573
+ <param pos="0" name="service.component.family" value="sshlib"/>
1574
+ <param pos="0" name="service.component.product" value="sshlib"/>
1575
+ <param pos="0" name="service.vendor" value="GlobalScape"/>
1576
+ <param pos="0" name="service.family" value="Secure FTP Server"/>
1577
+ <param pos="0" name="service.product" value="Secure FTP Server"/>
1578
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1579
+ <param pos="0" name="os.family" value="Windows"/>
1580
+ <param pos="0" name="os.product" value="Windows"/>
1581
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1582
+ </fingerprint>
1583
+ <fingerprint pattern="^([^\s]+) sshlib: WinSSHD (.*)$">
1584
+ <description>Bitvise WinSSHD (which uses Bitvise sshlib)</description>
1585
+ <example service.component.version="1.78" service.version="4.15a">1.78 sshlib: WinSSHD 4.15a</example>
1586
+ <param pos="1" name="service.component.version"/>
1587
+ <param pos="2" name="service.version"/>
1588
+ <param pos="0" name="service.component.vendor" value="Bitvise"/>
1589
+ <param pos="0" name="service.component.family" value="sshlib"/>
1590
+ <param pos="0" name="service.component.product" value="sshlib"/>
1591
+ <param pos="0" name="service.vendor" value="Bitvise"/>
1592
+ <param pos="0" name="service.family" value="WinSSHD"/>
1593
+ <param pos="0" name="service.product" value="WinSSHD"/>
1594
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1595
+ <param pos="0" name="os.family" value="Windows"/>
1596
+ <param pos="0" name="os.product" value="Windows"/>
1597
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1598
+ </fingerprint>
1599
+ <fingerprint pattern="^([^\s]+) FlowSsh: (?:Bitvise SSH Server \(WinSSHD\)|WinSSHD) ([\d\.]+):?.*$">
1600
+ <description>Bitvise WinSSHD (which uses Bitvise flowssh) with version</description>
1601
+ <example service.version="5.09" service.component.version="1.03">1.03 FlowSsh: WinSSHD 5.09</example>
1602
+ <example service.version="5.20" service.component.version="1.07">1.07 FlowSsh: WinSSHD 5.20: free only for personal non-commercial use</example>
1603
+ <example service.version="6.03" service.component.version="5.21">5.21 FlowSsh: Bitvise SSH Server (WinSSHD) 6.03: free only for personal non-commercial use</example>
1604
+ <param pos="1" name="service.component.version"/>
1605
+ <param pos="2" name="service.version"/>
1606
+ <param pos="0" name="service.component.vendor" value="Bitvise"/>
1607
+ <param pos="0" name="service.component.family" value="flowssh"/>
1608
+ <param pos="0" name="service.component.product" value="flowssh"/>
1609
+ <param pos="0" name="service.vendor" value="Bitvise"/>
1610
+ <param pos="0" name="service.family" value="WinSSHD"/>
1611
+ <param pos="0" name="service.product" value="WinSSHD"/>
1612
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1613
+ <param pos="0" name="os.family" value="Windows"/>
1614
+ <param pos="0" name="os.product" value="Windows"/>
1615
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1616
+ </fingerprint>
1617
+ <fingerprint pattern="^([^\s]+) FlowSsh: (?:Bitvise SSH Server \(WinSSHD\)|WinSSHD)(?: :.*)?$">
1618
+ <description>Bitvise WinSSHD (which uses Bitvise flowssh) without version</description>
1619
+ <example service.component.version="9.99">9.99 FlowSsh: Bitvise SSH Server (WinSSHD)</example>
1620
+ <example service.component.version="9.99">9.99 FlowSsh: Bitvise SSH Server (WinSSHD) : free only for personal non-commercial use</example>
1621
+ <param pos="1" name="service.component.version"/>
1622
+ <param pos="0" name="service.component.vendor" value="Bitvise"/>
1623
+ <param pos="0" name="service.component.family" value="flowssh"/>
1624
+ <param pos="0" name="service.component.product" value="flowssh"/>
1625
+ <param pos="0" name="service.vendor" value="Bitvise"/>
1626
+ <param pos="0" name="service.family" value="WinSSHD"/>
1627
+ <param pos="0" name="service.product" value="WinSSHD"/>
1628
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1629
+ <param pos="0" name="os.family" value="Windows"/>
1630
+ <param pos="0" name="os.product" value="Windows"/>
1631
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1632
+ </fingerprint>
1633
+ <fingerprint pattern="^([^\s]+) sshlib: MOVEit DMZ SSH (.*)$">
1634
+ <description>MOVEit DMZ (which uses Bitvise sshlib)</description>
1635
+ <param pos="1" name="service.component.version"/>
1636
+ <param pos="2" name="service.version"/>
1637
+ <param pos="0" name="service.component.vendor" value="Bitvise"/>
1638
+ <param pos="0" name="service.component.family" value="sshlib"/>
1639
+ <param pos="0" name="service.component.product" value="sshlib"/>
1640
+ <param pos="0" name="service.vendor" value="Standard Networks"/>
1641
+ <param pos="0" name="service.family" value="MOVEit DMZ"/>
1642
+ <param pos="0" name="service.product" value="MOVEit DMZ"/>
1643
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1644
+ <param pos="0" name="os.family" value="Windows"/>
1645
+ <param pos="0" name="os.product" value="Windows"/>
1646
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1647
+ </fingerprint>
1648
+ <fingerprint pattern="^paramiko_([\d\.]+).*$">
1649
+ <description>Paramiko</description>
1650
+ <example service.version="2.1.3">paramiko_2.1.3 501 command not implemented ERROR</example>
1651
+ <example service.version="2.1.4">paramiko_2.1.4</example>
1652
+ <param pos="0" name="service.vendor" value="Paramiko"/>
1653
+ <param pos="0" name="service.product" value="Paramiko"/>
1654
+ <param pos="1" name="service.version"/>
1655
+ </fingerprint>
1656
+ <fingerprint pattern="^Pragma SecureShell\s*(.*)$">
1657
+ <description>Pragma SecureShell</description>
1658
+ <param pos="1" name="service.version"/>
1659
+ <param pos="0" name="service.vendor" value="Pragma Systems"/>
1660
+ <param pos="0" name="service.family" value="FortressSSH Server"/>
1661
+ <param pos="0" name="service.product" value="FortressSSH Server"/>
1662
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1663
+ <param pos="0" name="os.family" value="Windows"/>
1664
+ <param pos="0" name="os.product" value="Windows"/>
1665
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1666
+ </fingerprint>
1667
+ <fingerprint pattern="^Pragma FortressSSH\s+([\d.]+)(?:\s+\[([\d.:]+)\])?$">
1668
+ <description>Pragma FortressSSH</description>
1669
+ <example service.version="5.0.9.2031">Pragma FortressSSH 5.0.9.2031</example>
1670
+ <example service.version="5.0.9.2680" host.ip="10.10.10.10">Pragma FortressSSH 5.0.9.2680 [10.10.10.10]</example>
1671
+ <param pos="1" name="service.version"/>
1672
+ <param pos="2" name="host.ip"/>
1673
+ <param pos="0" name="service.vendor" value="Pragma Systems"/>
1674
+ <param pos="0" name="service.family" value="FortressSSH Server"/>
1675
+ <param pos="0" name="service.product" value="FortressSSH Server"/>
1676
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1677
+ <param pos="0" name="os.family" value="Windows"/>
1678
+ <param pos="0" name="os.product" value="Windows"/>
1679
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1680
+ </fingerprint>
1681
+ <fingerprint pattern="^RebexSSH_([\d\.]+)$">
1682
+ <description>Rbex SSH</description>
1683
+ <example service.version="1.0.5.25508">RebexSSH_1.0.5.25508</example>
1684
+ <param pos="0" name="service.vendor" value="Ruijie"/>
1685
+ <param pos="0" name="service.product" value="SSH"/>
1686
+ <param pos="1" name="service.version"/>
1687
+ </fingerprint>
1688
+ <fingerprint pattern="^RGOS_\S+$">
1689
+ <description>Ruijie Networks SSH</description>
1690
+ <example>RGOS_SSH_1.0</example>
1691
+ <example>RGOS_PK3223</example>
1692
+ <param pos="0" name="hw.vendor" value="Ruijie"/>
1693
+ </fingerprint>
1694
+ <fingerprint pattern="^VShell_(?:Special_Edition_)?(\d+)_(\d+)_(\d+)_(\d+) VShell$">
1695
+ <description>VanDyke VShell - detailed variant</description>
1696
+ <example service.version="3" service.version.version="6" service.version.version.version="2" service.version.version.version.version="446">VShell_3_6_2_446 VShell</example>
1697
+ <example service.version="2" service.version.version="5" service.version.version.version="0" service.version.version.version.version="204">VShell_Special_Edition_2_5_0_204 VShell</example>
1698
+ <param pos="1" name="service.version"/>
1699
+ <param pos="2" name="service.version.version"/>
1700
+ <param pos="3" name="service.version.version.version"/>
1701
+ <param pos="4" name="service.version.version.version.version"/>
1702
+ <param pos="0" name="service.vendor" value="VanDyke Software"/>
1703
+ <param pos="0" name="service.family" value="VShell"/>
1704
+ <param pos="0" name="service.product" value="VShell"/>
1705
+ <param pos="0" name="service.cpe23" value="cpe:/a:vandyke:vshell:{service.version}"/>
1706
+ </fingerprint>
1707
+ <fingerprint pattern="^([\s]*)\s*VShell$">
1708
+ <description>VanDyke VShell</description>
1709
+ <param pos="1" name="service.version"/>
1710
+ <param pos="0" name="service.vendor" value="VanDyke Software"/>
1711
+ <param pos="0" name="service.family" value="VShell"/>
1712
+ <param pos="0" name="service.product" value="VShell"/>
1713
+ <param pos="0" name="service.cpe23" value="cpe:/a:vandyke:vshell:{service.version}"/>
1714
+ </fingerprint>
1715
+ <fingerprint pattern="^WRQReflection(?i:F)orSecureIT_(.*)$">
1716
+ <description>Attachmate Reflection (formerly WRQ Reflection for Secure IT)</description>
1717
+ <example service.version="6.1 Build 21">WRQReflectionForSecureIT_6.1 Build 21</example>
1718
+ <example service.version="8.2 Build 117">WRQReflectionforSecureIT_8.2 Build 117</example>
1719
+ <param pos="1" name="service.version"/>
1720
+ <param pos="0" name="service.vendor" value="Attachmate"/>
1721
+ <param pos="0" name="service.family" value="Reflection"/>
1722
+ <param pos="0" name="service.product" value="Reflection"/>
1723
+ </fingerprint>
1724
+ <fingerprint pattern="^([^\s]*)\s*F-Secure SSH\s*(?:.*)$">
1725
+ <description>Attachmate Reflection (formerly F-Secure SSH)</description>
1726
+ <example service.version="3.2.3">3.2.3 F-Secure SSH Windows NT Server</example>
1727
+ <param pos="1" name="service.version"/>
1728
+ <param pos="0" name="service.vendor" value="Attachmate"/>
1729
+ <param pos="0" name="service.family" value="Reflection"/>
1730
+ <param pos="0" name="service.product" value="Reflection"/>
1731
+ </fingerprint>
1732
+ <fingerprint pattern="^([^\s]*)\s*SSH Tectia Server$">
1733
+ <description>SSH Communications Security Tectia Server - branded</description>
1734
+ <example service.version="6.4.12.353">6.4.12.353 SSH Tectia Server</example>
1735
+ <param pos="1" name="service.version"/>
1736
+ <param pos="0" name="service.vendor" value="SSH Communications Security"/>
1737
+ <param pos="0" name="service.family" value="SSH Tectia Server"/>
1738
+ <param pos="0" name="service.product" value="SSH Tectia Server"/>
1739
+ </fingerprint>
1740
+ <fingerprint pattern="^([0-9\.]+) SSH Secure Shell(?: \(non-commercial\))?$">
1741
+ <description>SSH Communications Security Tectia Server</description>
1742
+ <example service.version="3.2.9.1">3.2.9.1 SSH Secure Shell (non-commercial)</example>
1743
+ <example service.version="4.0.3">4.0.3 SSH Secure Shell</example>
1744
+ <example service.version="4.4.2.3">4.4.2.3 SSH Secure Shell</example>
1745
+ <param pos="1" name="service.version"/>
1746
+ <param pos="0" name="service.vendor" value="SSH Communications Security"/>
1747
+ <param pos="0" name="service.family" value="SSH Tectia Server"/>
1748
+ <param pos="0" name="service.product" value="SSH Tectia Server"/>
1749
+ </fingerprint>
1750
+ <fingerprint pattern="^([0-9\.]+) SSH Secure Shell Windows NT Server$">
1751
+ <description>Unknown Windows SSH server</description>
1752
+ <example service.version="4.0.3">4.0.3 SSH Secure Shell Windows NT Server</example>
1753
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1754
+ <param pos="0" name="os.family" value="Windows"/>
1755
+ <param pos="0" name="os.product" value="Windows"/>
1756
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1757
+ <param pos="1" name="service.version"/>
1758
+ <param pos="0" name="service.vendor" value="SSH Communications Security"/>
1759
+ <param pos="0" name="service.family" value="SSH Tectia Server"/>
1760
+ <param pos="0" name="service.product" value="SSH Tectia Server"/>
1761
+ </fingerprint>
1762
+ <fingerprint pattern="^ARRIS_(.*)$">
1763
+ <description>ARRIS device (though not clear which) - www.arrisi.com</description>
1764
+ <example service.version="0.50">ARRIS_0.50</example>
1765
+ <param pos="1" name="service.version"/>
1766
+ <param pos="0" name="service.vendor" value="ARRIS"/>
1767
+ <param pos="0" name="service.product" value="ARRIS"/>
1768
+ <param pos="0" name="os.vendor" value="ARRIS"/>
1769
+ </fingerprint>
1770
+ <fingerprint pattern="^Mocana SSH\s?(?:([\d.]+))?$">
1771
+ <description>Mocana Embedded SSH</description>
1772
+ <example service.version="5.3.1">Mocana SSH 5.3.1</example>
1773
+ <example>Mocana SSH </example>
1774
+ <param pos="1" name="service.version"/>
1775
+ <param pos="0" name="service.vendor" value="Mocana"/>
1776
+ <param pos="0" name="service.family" value="Embedded SSH Server"/>
1777
+ <param pos="0" name="service.product" value="Embedded SSH Server"/>
1778
+ </fingerprint>
1779
+ <fingerprint pattern="^FreSSH\.(.*)$">
1780
+ <description>FreSSH</description>
1781
+ <example service.version="0.8">FreSSH.0.8</example>
1782
+ <param pos="1" name="service.version"/>
1783
+ <param pos="0" name="service.family" value="FreSSH"/>
1784
+ <param pos="0" name="service.product" value="FreSSH"/>
1785
+ </fingerprint>
1786
+ <fingerprint pattern="^RomCliSecure_(.*)$">
1787
+ <description>RomCliSecure appears to be the Adtran NetVanta products</description>
1788
+ <example service.version="4.12">RomCliSecure_4.12</example>
1789
+ <param pos="1" name="service.version"/>
1790
+ <param pos="0" name="service.vendor" value="Adtran"/>
1791
+ <param pos="0" name="service.family" value="NetVanta"/>
1792
+ <param pos="0" name="service.product" value="NetVanta"/>
1793
+ <param pos="0" name="os.vendor" value="Adtran"/>
1794
+ <param pos="0" name="os.family" value="NetVanta"/>
1795
+ <param pos="0" name="os.product" value="NetVanta"/>
1796
+ </fingerprint>
1797
+ <fingerprint pattern="^.*MultiNet.*$">
1798
+ <description>Process Software MultiNet is a suite of network apps for OpenVMS</description>
1799
+ <param pos="0" name="service.vendor" value="Process Software"/>
1800
+ <param pos="0" name="service.family" value="MultiNet"/>
1801
+ <param pos="0" name="service.product" value="MultiNet"/>
1802
+ <param pos="0" name="os.vendor" value="HP"/>
1803
+ <param pos="0" name="os.family" value="OpenVMS"/>
1804
+ <param pos="0" name="os.product" value="OpenVMS"/>
1805
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:openvms:-"/>
1806
+ </fingerprint>
1807
+ <fingerprint pattern="^dropbear$">
1808
+ <description>Dropbear w/o version - http://matt.ucc.asn.au/dropbear/dropbear.html</description>
1809
+ <example>dropbear</example>
1810
+ <param pos="0" name="service.family" value="Dropbear"/>
1811
+ <param pos="0" name="service.product" value="Dropbear"/>
1812
+ </fingerprint>
1813
+ <fingerprint pattern="^dropbear_(.*)$">
1814
+ <description>Dropbear - http://matt.ucc.asn.au/dropbear/dropbear.html</description>
1815
+ <example service.version="2015.67">dropbear_2015.67</example>
1816
+ <example service.version="0.49">dropbear_0.49</example>
1817
+ <param pos="1" name="service.version"/>
1818
+ <param pos="0" name="service.family" value="Dropbear"/>
1819
+ <param pos="0" name="service.product" value="Dropbear"/>
1820
+ </fingerprint>
1821
+ <fingerprint pattern="^lancom$">
1822
+ <description>LANCOM Systems - http://www.lancom-systems.de/</description>
1823
+ <example>lancom</example>
1824
+ <param pos="0" name="service.vendor" value="LANCOM Systems"/>
1825
+ <param pos="0" name="service.family" value="SSH"/>
1826
+ <param pos="0" name="service.product" value="SSH"/>
1827
+ <param pos="0" name="os.vendor" value="LANCOM Systems"/>
1828
+ </fingerprint>
1829
+ <fingerprint pattern="^0$">
1830
+ <description>MOVEit DMZ</description>
1831
+ <example>0</example>
1832
+ <param pos="0" name="service.vendor" value="Standard Networks"/>
1833
+ <param pos="0" name="service.family" value="MOVEit DMZ"/>
1834
+ <param pos="0" name="service.product" value="MOVEit DMZ"/>
1835
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1836
+ <param pos="0" name="os.family" value="Windows"/>
1837
+ <param pos="0" name="os.product" value="Windows"/>
1838
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1839
+ </fingerprint>
1840
+ <fingerprint pattern="^Comware-(\d+\.?\d*\.?\d*)$">
1841
+ <description>SSH on H3C Comware</description>
1842
+ <example os.version="5.20.105">Comware-5.20.105</example>
1843
+ <example os.version="5.20">Comware-5.20</example>
1844
+ <param pos="0" name="service.vendor" value="H3C"/>
1845
+ <param pos="0" name="service.product" value="SSH"/>
1846
+ <param pos="0" name="os.vendor" value="H3C"/>
1847
+ <param pos="0" name="os.device" value="Network"/>
1848
+ <param pos="0" name="os.product" value="Comware"/>
1849
+ <param pos="0" name="os.family" value="Comware"/>
1850
+ <param pos="1" name="os.version"/>
1851
+ </fingerprint>
1852
+ <fingerprint pattern="^Data ONTAP SSH [\d\.]+$">
1853
+ <description>SSH NetApp appliances</description>
1854
+ <example>Data ONTAP SSH 1.0</example>
1855
+ <param pos="0" name="os.vendor" value="NetApp"/>
1856
+ <param pos="0" name="os.family" value="Data ONTAP"/>
1857
+ <param pos="0" name="os.product" value="Data ONTAP"/>
1858
+ <param pos="0" name="os.cpe23" value="cpe:/o:netapp:data_ontap:-"/>
1859
+ </fingerprint>
1860
+ <fingerprint pattern="^(\d\.\d+\.\d+) SSH Secure Shell OpenVMS V\d+\.\d+$">
1861
+ <description>SSH for OpenVMS</description>
1862
+ <example service.component.version="3.2.0">3.2.0 SSH Secure Shell OpenVMS V5.5</example>
1863
+ <example service.component.version="2.4.1">2.4.1 SSH Secure Shell OpenVMS V1.0</example>
1864
+ <param pos="1" name="service.component.version"/>
1865
+ <param pos="0" name="service.component.vendor" value="SSH Communication Security"/>
1866
+ <param pos="0" name="service.component.family" value="SSH Secure Shell"/>
1867
+ <param pos="0" name="service.component.product" value="SSH Secure Shell"/>
1868
+ <param pos="0" name="service.vendor" value="HP"/>
1869
+ <param pos="0" name="service.family" value="OpenVMS"/>
1870
+ <param pos="0" name="service.product" value="SSH Server"/>
1871
+ <param pos="0" name="os.vendor" value="HP"/>
1872
+ <param pos="0" name="os.family" value="OpenVMS"/>
1873
+ <param pos="0" name="os.product" value="OpenVMS"/>
1874
+ <param pos="0" name="os.certainty" value="0.75"/>
1875
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:openvms:-"/>
1876
+ </fingerprint>
1877
+ <fingerprint pattern="^(\d\.\d+\.\d+) SSH (?:Secure Shell )?OpenVMS V\d\.\d VMS_sftp_version (\d)$">
1878
+ <description>SSH for OpenVMS sftp</description>
1879
+ <example service.component.version="3.2.0" service.version="3">3.2.0 SSH Secure Shell OpenVMS V5.5 VMS_sftp_version 3</example>
1880
+ <example service.component.version="3.2.0" service.version="3">3.2.0 SSH OpenVMS V5.5 VMS_sftp_version 3</example>
1881
+ <param pos="1" name="service.component.version"/>
1882
+ <param pos="0" name="service.component.vendor" value="SSH Communication Security"/>
1883
+ <param pos="0" name="service.component.family" value="SSH Secure Shell"/>
1884
+ <param pos="0" name="service.component.product" value="SSH Secure Shell"/>
1885
+ <param pos="0" name="service.vendor" value="HP"/>
1886
+ <param pos="0" name="service.family" value="OpenVMS"/>
1887
+ <param pos="0" name="service.product" value="VMS SFTP Server"/>
1888
+ <param pos="2" name="service.version"/>
1889
+ <param pos="0" name="os.vendor" value="HP"/>
1890
+ <param pos="0" name="os.family" value="OpenVMS"/>
1891
+ <param pos="0" name="os.certainty" value="0.75"/>
1892
+ </fingerprint>
1893
+ <fingerprint pattern="^\S+ SSH Secure Shell Tru64 UNIX$">
1894
+ <description>Digital/Compaq/HP Tru64 Unix</description>
1895
+ <example>3.2.0 SSH Secure Shell Tru64 UNIX</example>
1896
+ <param pos="0" name="os.vendor" value="HP"/>
1897
+ <param pos="0" name="os.family" value="Unix"/>
1898
+ <param pos="0" name="os.product" value="Tru64 Unix"/>
1899
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:tru64:-"/>
1900
+ </fingerprint>
1901
+ <fingerprint pattern="^ROSSSH$">
1902
+ <description>MikroTik RouterOS sshd</description>
1903
+ <example>ROSSSH</example>
1904
+ <param pos="0" name="os.vendor" value="MikroTik"/>
1905
+ <param pos="0" name="os.device" value="Router"/>
1906
+ <param pos="0" name="os.family" value="RouterOS"/>
1907
+ <param pos="0" name="os.product" value="RouterOS"/>
1908
+ <param pos="0" name="os.cpe23" value="cpe:/o:mikrotik:routeros:-"/>
1909
+ </fingerprint>
1910
+ <!-- xlightftpd is an ftp server that also supports SFTP. The SFTP
1911
+ server appears in ssh studies, thus this banner is here, and
1912
+ not in ftp_banners.xml-->
1913
+ <fingerprint pattern="^xlightftpd_release_([\d.]+)$">
1914
+ <description>Xlight FTP Server</description>
1915
+ <example service.version="3.8.3.6.1">xlightftpd_release_3.8.3.6.1</example>
1916
+ <param pos="1" name="service.version"/>
1917
+ <param pos="0" name="service.vendor" value="Xlight"/>
1918
+ <param pos="0" name="service.family" value="FTP Server"/>
1919
+ <param pos="0" name="service.product" value="FTP Server"/>
1920
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1921
+ <param pos="0" name="os.family" value="Windows"/>
1922
+ <param pos="0" name="os.product" value="Windows"/>
1923
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1924
+ </fingerprint>
1925
+ <fingerprint pattern="^libssh[-_]([\d.]+)$">
1926
+ <description>SSH server utilising libssh</description>
1927
+ <example service.version="0.6.0">libssh-0.6.0</example>
1928
+ <example service.version="0.8.0">libssh_0.8.0</example>
1929
+ <param pos="1" name="service.version"/>
1930
+ <param pos="0" name="service.family" value="libssh"/>
1931
+ <param pos="0" name="service.product" value="libssh"/>
1932
+ <param pos="0" name="service.vendor" value="libssh"/>
1933
+ <param pos="0" name="service.cpe23" value="cpe:/a:libssh:libssh:{service.version}"/>
1934
+ </fingerprint>
1935
+ <fingerprint pattern="^WeOnlyDo ([\d.]+)$">
1936
+ <description>WeOnlyDo with version</description>
1937
+ <example service.version="1.2.7">WeOnlyDo 1.2.7</example>
1938
+ <example service.version="2.0.1">WeOnlyDo 2.0.1</example>
1939
+ <example service.version="2.5.4">WeOnlyDo 2.5.4</example>
1940
+ <param pos="1" name="service.version"/>
1941
+ <param pos="0" name="service.family" value="WeOnlyDo"/>
1942
+ <param pos="0" name="service.vendor" value="WeOnlyDo"/>
1943
+ <param pos="0" name="service.product" value="WeOnlyDo SSH Server"/>
1944
+ <param pos="0" name="service.cpe23" value="cpe:/a:weonlydo:weonlydo:{service.version}"/>
1945
+ </fingerprint>
1946
+ <fingerprint pattern="^WeOnlyDo ([\d.]+) \(FIPS\)$">
1947
+ <description>WeOnlyDo with version with FIPS mode enabled</description>
1948
+ <example service.version="2.2.9">WeOnlyDo 2.2.9 (FIPS)</example>
1949
+ <example service.version="2.4.3">WeOnlyDo 2.4.3 (FIPS)</example>
1950
+ <param pos="1" name="service.version"/>
1951
+ <param pos="0" name="service.family" value="WeOnlyDo"/>
1952
+ <param pos="0" name="service.vendor" value="WeOnlyDo"/>
1953
+ <param pos="0" name="service.product" value="WeOnlyDo SSH Server"/>
1954
+ <param pos="0" name="service.cpe23" value="cpe:/a:weonlydo:weonlydo:{service.version}"/>
1955
+ </fingerprint>
1956
+ <!--
1957
+ 1.2.22j4rad
1958
+ 2.40
1959
+ 2.0.12
1960
+ Server-VII
1961
+ 9.9.1
1962
+ IPSSH-1.10.0
1963
+ -->
1964
+ <!--
1965
+ Possibly Nortel Passport
1966
+ SSH_2.1.1
1967
+ -->
1968
+ </fingerprints>