recog-intrigue 2.3.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (130) hide show
  1. checksums.yaml +7 -0
  2. data/.github/ISSUE_TEMPLATE/bug_report.md +37 -0
  3. data/.github/ISSUE_TEMPLATE/feature_request.md +17 -0
  4. data/.github/ISSUE_TEMPLATE/fingerprint_request.md +27 -0
  5. data/.github/PULL_REQUEST_TEMPLATE +24 -0
  6. data/.gitignore +14 -0
  7. data/.rbenv-gemset +1 -0
  8. data/.rspec +3 -0
  9. data/.ruby-gemset +1 -0
  10. data/.ruby-version +1 -0
  11. data/.travis.yml +25 -0
  12. data/.yardopts +1 -0
  13. data/CONTRIBUTING.md +171 -0
  14. data/COPYING +23 -0
  15. data/Gemfile +10 -0
  16. data/LICENSE +7 -0
  17. data/README.md +85 -0
  18. data/Rakefile +22 -0
  19. data/bin/recog_export +81 -0
  20. data/bin/recog_match +55 -0
  21. data/bin/recog_standardize +118 -0
  22. data/bin/recog_verify +64 -0
  23. data/cpe-remap.yaml +134 -0
  24. data/features/data/failing_banners_fingerprints.xml +20 -0
  25. data/features/data/matching_banners_fingerprints.xml +23 -0
  26. data/features/data/multiple_banners_fingerprints.xml +32 -0
  27. data/features/data/no_tests.xml +3 -0
  28. data/features/data/sample_banner.txt +2 -0
  29. data/features/data/successful_tests.xml +18 -0
  30. data/features/data/tests_with_failures.xml +20 -0
  31. data/features/data/tests_with_warnings.xml +17 -0
  32. data/features/match.feature +36 -0
  33. data/features/support/aruba.rb +3 -0
  34. data/features/support/env.rb +6 -0
  35. data/features/verify.feature +48 -0
  36. data/identifiers/README.md +47 -0
  37. data/identifiers/os_architecture.txt +20 -0
  38. data/identifiers/os_device.txt +52 -0
  39. data/identifiers/os_family.txt +160 -0
  40. data/identifiers/os_product.txt +199 -0
  41. data/identifiers/service_family.txt +185 -0
  42. data/identifiers/service_product.txt +255 -0
  43. data/identifiers/software_class.txt +26 -0
  44. data/identifiers/software_family.txt +91 -0
  45. data/identifiers/software_product.txt +333 -0
  46. data/identifiers/vendor.txt +405 -0
  47. data/lib/recog.rb +4 -0
  48. data/lib/recog/db.rb +78 -0
  49. data/lib/recog/db_manager.rb +31 -0
  50. data/lib/recog/fingerprint.rb +280 -0
  51. data/lib/recog/fingerprint/regexp_factory.rb +56 -0
  52. data/lib/recog/fingerprint/test.rb +18 -0
  53. data/lib/recog/formatter.rb +51 -0
  54. data/lib/recog/match_reporter.rb +77 -0
  55. data/lib/recog/matcher.rb +94 -0
  56. data/lib/recog/matcher_factory.rb +14 -0
  57. data/lib/recog/nizer.rb +347 -0
  58. data/lib/recog/verifier.rb +39 -0
  59. data/lib/recog/verifier_factory.rb +13 -0
  60. data/lib/recog/verify_reporter.rb +86 -0
  61. data/lib/recog/version.rb +3 -0
  62. data/misc/convert_mysql_err +61 -0
  63. data/misc/order.xsl +17 -0
  64. data/recog-intrigue.gemspec +45 -0
  65. data/requirements.txt +2 -0
  66. data/spec/data/best_os_match_1.yml +17 -0
  67. data/spec/data/best_os_match_2.yml +17 -0
  68. data/spec/data/best_service_match_1.yml +17 -0
  69. data/spec/data/smb_native_os.txt +25 -0
  70. data/spec/data/test_fingerprints.xml +36 -0
  71. data/spec/data/verification_fingerprints.xml +86 -0
  72. data/spec/data/whitespaced_fingerprint.xml +5 -0
  73. data/spec/lib/fingerprint_self_test_spec.rb +174 -0
  74. data/spec/lib/recog/db_spec.rb +98 -0
  75. data/spec/lib/recog/fingerprint/regexp_factory_spec.rb +73 -0
  76. data/spec/lib/recog/fingerprint_spec.rb +112 -0
  77. data/spec/lib/recog/formatter_spec.rb +69 -0
  78. data/spec/lib/recog/match_reporter_spec.rb +91 -0
  79. data/spec/lib/recog/nizer_spec.rb +330 -0
  80. data/spec/lib/recog/verify_reporter_spec.rb +113 -0
  81. data/spec/spec_helper.rb +82 -0
  82. data/update_cpes.py +186 -0
  83. data/xml/apache_modules.xml +1911 -0
  84. data/xml/apache_os.xml +273 -0
  85. data/xml/architecture.xml +36 -0
  86. data/xml/dns_versionbind.xml +761 -0
  87. data/xml/fingerprints.xsd +128 -0
  88. data/xml/ftp_banners.xml +1553 -0
  89. data/xml/h323_callresp.xml +603 -0
  90. data/xml/hp_pjl_id.xml +358 -0
  91. data/xml/html_title.xml +1630 -0
  92. data/xml/http_cookies.xml +411 -0
  93. data/xml/http_servers.xml +3195 -0
  94. data/xml/http_wwwauth.xml +595 -0
  95. data/xml/imap_banners.xml +245 -0
  96. data/xml/ldap_searchresult.xml +711 -0
  97. data/xml/mdns_device-info_txt.xml +1796 -0
  98. data/xml/mdns_workstation_txt.xml +15 -0
  99. data/xml/mysql_banners.xml +1649 -0
  100. data/xml/mysql_error.xml +871 -0
  101. data/xml/nntp_banners.xml +82 -0
  102. data/xml/ntp_banners.xml +1223 -0
  103. data/xml/operating_system.xml +629 -0
  104. data/xml/pop_banners.xml +499 -0
  105. data/xml/rsh_resp.xml +76 -0
  106. data/xml/rtsp_servers.xml +76 -0
  107. data/xml/sip_banners.xml +359 -0
  108. data/xml/sip_user_agents.xml +221 -0
  109. data/xml/smb_native_lm.xml +62 -0
  110. data/xml/smb_native_os.xml +662 -0
  111. data/xml/smtp_banners.xml +1690 -0
  112. data/xml/smtp_debug.xml +39 -0
  113. data/xml/smtp_ehlo.xml +49 -0
  114. data/xml/smtp_expn.xml +82 -0
  115. data/xml/smtp_help.xml +157 -0
  116. data/xml/smtp_mailfrom.xml +20 -0
  117. data/xml/smtp_noop.xml +44 -0
  118. data/xml/smtp_quit.xml +29 -0
  119. data/xml/smtp_rcptto.xml +25 -0
  120. data/xml/smtp_rset.xml +26 -0
  121. data/xml/smtp_turn.xml +26 -0
  122. data/xml/smtp_vrfy.xml +89 -0
  123. data/xml/snmp_sysdescr.xml +6507 -0
  124. data/xml/snmp_sysobjid.xml +430 -0
  125. data/xml/ssh_banners.xml +1968 -0
  126. data/xml/telnet_banners.xml +1595 -0
  127. data/xml/x11_banners.xml +232 -0
  128. data/xml/x509_issuers.xml +134 -0
  129. data/xml/x509_subjects.xml +1268 -0
  130. metadata +304 -0
data/xml/snmp_sysobjid.xml ADDED
@@ -0,0 +1,430 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <fingerprints matches="snmp.sys_object_id" protocol="snmp" database_type="service">
3
+ <!--
4
+ SNMP fingerprint definitions for SysObjectIDs. These are matched against the value of the
5
+ 'sysObjectID' (OID 1.3.6.1.2.1.1.2) variable.
6
+ -->
7
+ <!--======================================================================
8
+ MICROSOFT
9
+ =======================================================================-->
10
+ <!--
11
+ These are baseline patterns that map to sysObjectID with their associated sysDescr.
12
+ -->
13
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.[23] Hardware: x86.*Software: Windows NT Version 4\.0.*$">
14
+ <description>Windows NT 4 on x86</description>
15
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: x86 Family 6 Model 8 Stepping 3 AT/AT COMPATIBLE - Software: Windows NT Version 4.0 (Build Number: 1381 Uniprocessor Free )</example>
16
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: x86 Family 6 Model 8 Stepping 3 AT/AT COMPATIBLE - Software: Windows NT Version 4.0 (Build Number: 1381 Uniprocessor Free )</example>
17
+ <param pos="0" name="os.vendor" value="Microsoft"/>
18
+ <param pos="0" name="os.family" value="Windows"/>
19
+ <param pos="0" name="os.product" value="Windows NT Server"/>
20
+ <param pos="0" name="os.version" value="4.0"/>
21
+ <param pos="0" name="os.arch" value="x86"/>
22
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_nt:4.0"/>
23
+ </fingerprint>
24
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows 2000 Version 5\.0.*$">
25
+ <description>Windows 2000 on x86</description>
26
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: x86 Family 15 Model 4 Stepping 8 AT/AT COMPATIBLE - Software: Windows 2000 Version 5.0 (Build 2195 Uniprocessor Free)</example>
27
+ <param pos="0" name="os.vendor" value="Microsoft"/>
28
+ <param pos="0" name="os.family" value="Windows"/>
29
+ <param pos="0" name="os.product" value="Windows 2000 Server"/>
30
+ <param pos="0" name="os.arch" value="x86"/>
31
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_2000:-"/>
32
+ </fingerprint>
33
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows 2000 Version 5\.0.*$">
34
+ <description>Windows 2000 Datacenter on x86</description>
35
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: x86 Family 15 Model 4 Stepping 8 AT/AT COMPATIBLE - Software: Windows 2000 Version 5.0 (Build 2195 Uniprocessor Free)</example>
36
+ <param pos="0" name="os.vendor" value="Microsoft"/>
37
+ <param pos="0" name="os.family" value="Windows"/>
38
+ <param pos="0" name="os.product" value="Windows 2000 Datacenter Server"/>
39
+ <param pos="0" name="os.arch" value="x86"/>
40
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_2000:-"/>
41
+ </fingerprint>
42
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 5\.2.*$">
43
+ <description>Windows Server 2003 on x86</description>
44
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: x86 Family 15 Model 4 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 5.2 (Build 3790 Multiprocessor Free)</example>
45
+ <param pos="0" name="os.vendor" value="Microsoft"/>
46
+ <param pos="0" name="os.family" value="Windows"/>
47
+ <param pos="0" name="os.product" value="Windows Server 2003"/>
48
+ <param pos="0" name="os.arch" value="x86"/>
49
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
50
+ </fingerprint>
51
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 5\.2.*$">
52
+ <description>Windows Server 2003 Datacenter on x86</description>
53
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: x86 Family 15 Model 4 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 5.2 (Build 3790 Multiprocessor Free)</example>
54
+ <param pos="0" name="os.vendor" value="Microsoft"/>
55
+ <param pos="0" name="os.family" value="Windows"/>
56
+ <param pos="0" name="os.product" value="Windows Server 2003, Datacenter Edition"/>
57
+ <param pos="0" name="os.arch" value="x86"/>
58
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
59
+ </fingerprint>
60
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 5\.2.*$">
61
+ <description>Windows Server 2003 on x86_64</description>
62
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: AMD64 Family 15 Model 4 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 5.2 (Build 3790 Multiprocessor Free)</example>
63
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: Intel64 Family 6 Model 15 Stepping 6 AT/AT COMPATIBLE - Software: Windows Version 5.2 (Build 3790 Multiprocessor Free)</example>
64
+ <param pos="0" name="os.vendor" value="Microsoft"/>
65
+ <param pos="0" name="os.family" value="Windows"/>
66
+ <param pos="0" name="os.product" value="Windows Server 2003"/>
67
+ <param pos="0" name="os.arch" value="x86_64"/>
68
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
69
+ </fingerprint>
70
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 5\.2.*$">
71
+ <description>Windows Server 2003 Datacenter on x86_64</description>
72
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: AMD64 Family 15 Model 4 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 5.2 (Build 3790 Multiprocessor Free)</example>
73
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: Intel64 Family 6 Model 15 Stepping 6 AT/AT COMPATIBLE - Software: Windows Version 5.2 (Build 3790 Multiprocessor Free)</example>
74
+ <param pos="0" name="os.vendor" value="Microsoft"/>
75
+ <param pos="0" name="os.family" value="Windows"/>
76
+ <param pos="0" name="os.product" value="Windows Server 2003, Datacenter Edition"/>
77
+ <param pos="0" name="os.arch" value="x86_64"/>
78
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
79
+ </fingerprint>
80
+ <fingerprint pattern="^Microsoft Windows CE Version ([\d.]+).*$">
81
+ <description>Windows CE</description>
82
+ <example>Microsoft Windows CE Version 4.20 (Build 0)</example>
83
+ <example>Microsoft Windows CE Version 4.20 (Build 1088)</example>
84
+ <param pos="0" name="os.vendor" value="Microsoft"/>
85
+ <param pos="0" name="os.family" value="Windows"/>
86
+ <param pos="0" name="os.product" value="Windows CE"/>
87
+ <param pos="1" name="os.version"/>
88
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_ce:{os.version}"/>
89
+ </fingerprint>
90
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 6\.0 \(Build 6001.*$">
91
+ <description>Windows Server 2008 on x86</description>
92
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: x86 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6001 Multiprocessor Free)</example>
93
+ <param pos="0" name="os.vendor" value="Microsoft"/>
94
+ <param pos="0" name="os.family" value="Windows"/>
95
+ <param pos="0" name="os.product" value="Windows Server 2008"/>
96
+ <param pos="0" name="os.arch" value="x86"/>
97
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
98
+ </fingerprint>
99
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 6\.0 \(Build 6001.*$">
100
+ <description>Windows Server 2008 Datacenter on x86</description>
101
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: x86 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6001 Multiprocessor Free)</example>
102
+ <param pos="0" name="os.vendor" value="Microsoft"/>
103
+ <param pos="0" name="os.family" value="Windows"/>
104
+ <param pos="0" name="os.product" value="Windows Server 2008 Datacenter Edition"/>
105
+ <param pos="0" name="os.arch" value="x86"/>
106
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
107
+ </fingerprint>
108
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.0 \(Build 6001.*$">
109
+ <description>Windows Server 2008 on x86_64</description>
110
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6001 Multiprocessor Free)</example>
111
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: Intel64 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6001 Multiprocessor Free)</example>
112
+ <param pos="0" name="os.vendor" value="Microsoft"/>
113
+ <param pos="0" name="os.family" value="Windows"/>
114
+ <param pos="0" name="os.product" value="Windows Server 2008"/>
115
+ <param pos="0" name="os.arch" value="x86_64"/>
116
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
117
+ </fingerprint>
118
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 6\.0 \(Build 6001.*$">
119
+ <description>Windows Server 2008 Datacenter on x86_64</description>
120
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6001 Multiprocessor Free)</example>
121
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: Intel64 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6001 Multiprocessor Free)</example>
122
+ <param pos="0" name="os.vendor" value="Microsoft"/>
123
+ <param pos="0" name="os.family" value="Windows"/>
124
+ <param pos="0" name="os.product" value="Windows Server 2008 Datacenter Edition"/>
125
+ <param pos="0" name="os.arch" value="x86_64"/>
126
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
127
+ </fingerprint>
128
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 6\.0 \(Build 6002.*$">
129
+ <description>Windows Server 2008 SP2 on x86</description>
130
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: x86 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6002 Multiprocessor Free)</example>
131
+ <param pos="0" name="os.vendor" value="Microsoft"/>
132
+ <param pos="0" name="os.family" value="Windows"/>
133
+ <param pos="0" name="os.product" value="Windows Server 2008"/>
134
+ <param pos="0" name="os.version" value="SP2"/>
135
+ <param pos="0" name="os.arch" value="x86"/>
136
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP2"/>
137
+ </fingerprint>
138
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 6\.0 \(Build 6002.*$">
139
+ <description>Windows Server 2008 Datacenter SP2 on x86</description>
140
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: x86 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6002 Multiprocessor Free)</example>
141
+ <param pos="0" name="os.vendor" value="Microsoft"/>
142
+ <param pos="0" name="os.family" value="Windows"/>
143
+ <param pos="0" name="os.product" value="Windows Server 2008 Datacenter Edition"/>
144
+ <param pos="0" name="os.version" value="SP2"/>
145
+ <param pos="0" name="os.arch" value="x86"/>
146
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP2"/>
147
+ </fingerprint>
148
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.0 \(Build 6002.*$">
149
+ <description>Windows Server 2008 SP2 on x86_64</description>
150
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6002 Multiprocessor Free)</example>
151
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: Intel64 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6002 Multiprocessor Free)</example>
152
+ <param pos="0" name="os.vendor" value="Microsoft"/>
153
+ <param pos="0" name="os.family" value="Windows"/>
154
+ <param pos="0" name="os.product" value="Windows Server 2008 R2"/>
155
+ <param pos="0" name="os.version" value="SP2"/>
156
+ <param pos="0" name="os.arch" value="x86_64"/>
157
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP2"/>
158
+ </fingerprint>
159
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 6\.0 \(Build 6002.*$">
160
+ <description>Windows Server 2008 Datacenter SP2 on x86_64</description>
161
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6002 Multiprocessor Free)</example>
162
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: Intel64 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6002 Multiprocessor Free)</example>
163
+ <param pos="0" name="os.vendor" value="Microsoft"/>
164
+ <param pos="0" name="os.family" value="Windows"/>
165
+ <param pos="0" name="os.product" value="Windows Server 2008 R2"/>
166
+ <param pos="0" name="os.version" value="SP2"/>
167
+ <param pos="0" name="os.arch" value="x86_64"/>
168
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP2"/>
169
+ </fingerprint>
170
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 6\.1 \(Build 7600.*$">
171
+ <description>Windows Server 2008 R2 on x86</description>
172
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: x86 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7600 Multiprocessor Free)</example>
173
+ <param pos="0" name="os.vendor" value="Microsoft"/>
174
+ <param pos="0" name="os.family" value="Windows"/>
175
+ <param pos="0" name="os.product" value="Windows Server 2008 R2"/>
176
+ <param pos="0" name="os.arch" value="x86"/>
177
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
178
+ </fingerprint>
179
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 6\.1 \(Build 7600.*$">
180
+ <description>Windows Server 2008 Datacenter R2 on x86</description>
181
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: x86 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7600 Multiprocessor Free)</example>
182
+ <param pos="0" name="os.vendor" value="Microsoft"/>
183
+ <param pos="0" name="os.family" value="Windows"/>
184
+ <param pos="0" name="os.product" value="Windows Server 2008 R2, Datacenter Edition"/>
185
+ <param pos="0" name="os.arch" value="x86"/>
186
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
187
+ </fingerprint>
188
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.1 \(Build 7600.*$">
189
+ <description>Windows Server 2008 R2 on x86_64</description>
190
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7600 Multiprocessor Free)</example>
191
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: Intel64 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7600 Multiprocessor Free)</example>
192
+ <param pos="0" name="os.vendor" value="Microsoft"/>
193
+ <param pos="0" name="os.family" value="Windows"/>
194
+ <param pos="0" name="os.product" value="Windows Server 2008 R2"/>
195
+ <param pos="0" name="os.arch" value="x86_64"/>
196
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
197
+ </fingerprint>
198
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 6\.1 \(Build 7600.*$">
199
+ <description>Windows Server 2008 Datacenter R2 on x86_64</description>
200
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7600 Multiprocessor Free)</example>
201
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: Intel64 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7600 Multiprocessor Free)</example>
202
+ <param pos="0" name="os.vendor" value="Microsoft"/>
203
+ <param pos="0" name="os.family" value="Windows"/>
204
+ <param pos="0" name="os.product" value="Windows Server 2008 R2, Datacenter Edition"/>
205
+ <param pos="0" name="os.arch" value="x86_64"/>
206
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
207
+ </fingerprint>
208
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 6\.1 \(Build 7601.*$">
209
+ <description>Windows Server 2008 R2 SP1 on x86</description>
210
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: x86 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7601 Multiprocessor Free)</example>
211
+ <param pos="0" name="os.vendor" value="Microsoft"/>
212
+ <param pos="0" name="os.family" value="Windows"/>
213
+ <param pos="0" name="os.product" value="Windows Server 2008 R2"/>
214
+ <param pos="0" name="os.version" value="SP1"/>
215
+ <param pos="0" name="os.arch" value="x86"/>
216
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP1"/>
217
+ </fingerprint>
218
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 6\.1 \(Build 7601.*$">
219
+ <description>Windows Server 2008 Datacenter R2 SP1 on x86</description>
220
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: x86 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7601 Multiprocessor Free)</example>
221
+ <param pos="0" name="os.vendor" value="Microsoft"/>
222
+ <param pos="0" name="os.family" value="Windows"/>
223
+ <param pos="0" name="os.product" value="Windows Server 2008 R2, Datacenter Edition"/>
224
+ <param pos="0" name="os.version" value="SP1"/>
225
+ <param pos="0" name="os.arch" value="x86"/>
226
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP1"/>
227
+ </fingerprint>
228
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.1 \(Build 7601.*$">
229
+ <description>Windows Server 2008 R2 SP1 on x86_64</description>
230
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7601 Multiprocessor Free)</example>
231
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: Intel64 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7601 Multiprocessor Free)</example>
232
+ <param pos="0" name="os.vendor" value="Microsoft"/>
233
+ <param pos="0" name="os.family" value="Windows"/>
234
+ <param pos="0" name="os.product" value="Windows Server 2008 R2"/>
235
+ <param pos="0" name="os.version" value="SP1"/>
236
+ <param pos="0" name="os.arch" value="x86_64"/>
237
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP1"/>
238
+ </fingerprint>
239
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 6\.1 \(Build 7601.*$">
240
+ <description>Windows Server 2008 Datacenter R2 SP1 on x86_64</description>
241
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7601 Multiprocessor Free)</example>
242
+ <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: Intel64 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7601 Multiprocessor Free)</example>
243
+ <param pos="0" name="os.vendor" value="Microsoft"/>
244
+ <param pos="0" name="os.family" value="Windows"/>
245
+ <param pos="0" name="os.product" value="Windows Server 2008 R2, Datacenter Edition"/>
246
+ <param pos="0" name="os.version" value="SP1"/>
247
+ <param pos="0" name="os.arch" value="x86_64"/>
248
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP1"/>
249
+ </fingerprint>
250
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.2 \(Build 9200.*$">
251
+ <description>Windows Server 2012 on x86_64</description>
252
+ <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: Intel64 Family 6 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.2 (Build 9200 Multiprocessor Free)</example>
253
+ <param pos="0" name="os.vendor" value="Microsoft"/>
254
+ <param pos="0" name="os.family" value="Windows"/>
255
+ <param pos="0" name="os.product" value="Windows Server 2012"/>
256
+ <param pos="0" name="os.arch" value="x86_64"/>
257
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
258
+ </fingerprint>
259
+ <!-- Various OIDs for Net-SNMP agents which are OS specific -->
260
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.1$">
261
+ <description>Net-SNMP on hpux9</description>
262
+ <example>1.3.6.1.4.1.8072.3.2.1</example>
263
+ <param pos="0" name="os.vendor" value="HP"/>
264
+ <param pos="0" name="os.family" value="HP-UX"/>
265
+ <param pos="0" name="os.product" value="HP-UX"/>
266
+ <param pos="0" name="os.version" value="9"/>
267
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:9"/>
268
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
269
+ <param pos="0" name="service.product" value="SNMP Agent"/>
270
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
271
+ </fingerprint>
272
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.2$">
273
+ <description>Net-SNMP on sunos4</description>
274
+ <example>1.3.6.1.4.1.8072.3.2.2</example>
275
+ <param pos="0" name="os.vendor" value="Sun"/>
276
+ <param pos="0" name="os.family" value="Solaris"/>
277
+ <param pos="0" name="os.product" value="Solaris"/>
278
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:-"/>
279
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
280
+ <param pos="0" name="service.product" value="SNMP Agent"/>
281
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
282
+ </fingerprint>
283
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.3$">
284
+ <description>Net-SNMP on solaris</description>
285
+ <example>1.3.6.1.4.1.8072.3.2.3</example>
286
+ <param pos="0" name="os.vendor" value="Sun"/>
287
+ <param pos="0" name="os.family" value="Solaris"/>
288
+ <param pos="0" name="os.product" value="Solaris"/>
289
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:-"/>
290
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
291
+ <param pos="0" name="service.product" value="SNMP Agent"/>
292
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
293
+ </fingerprint>
294
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.4$">
295
+ <description>Net-SNMP on osf</description>
296
+ <example>1.3.6.1.4.1.8072.3.2.4</example>
297
+ <param pos="0" name="os.vendor" value="DEC"/>
298
+ <param pos="0" name="os.product" value="OSF/1"/>
299
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
300
+ <param pos="0" name="service.product" value="SNMP Agent"/>
301
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
302
+ </fingerprint>
303
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.5$">
304
+ <description>Net-SNMP on ultrix</description>
305
+ <example>1.3.6.1.4.1.8072.3.2.5</example>
306
+ <param pos="0" name="os.vendor" value="DEC"/>
307
+ <param pos="0" name="os.product" value="Ultrix"/>
308
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
309
+ <param pos="0" name="service.product" value="SNMP Agent"/>
310
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
311
+ </fingerprint>
312
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.6$">
313
+ <description>Net-SNMP on hpux10</description>
314
+ <example>1.3.6.1.4.1.8072.3.2.6</example>
315
+ <param pos="0" name="os.vendor" value="HP"/>
316
+ <param pos="0" name="os.family" value="HP-UX"/>
317
+ <param pos="0" name="os.product" value="HP-UX"/>
318
+ <param pos="0" name="os.version" value="10"/>
319
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:10"/>
320
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
321
+ <param pos="0" name="service.product" value="SNMP Agent"/>
322
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
323
+ </fingerprint>
324
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.7$">
325
+ <description>Net-SNMP on netbsd</description>
326
+ <example>1.3.6.1.4.1.8072.3.2.7</example>
327
+ <param pos="0" name="os.vendor" value="NetBSD"/>
328
+ <param pos="0" name="os.family" value="NetBSD"/>
329
+ <param pos="0" name="os.product" value="NetBSD"/>
330
+ <param pos="0" name="os.cpe23" value="cpe:/o:netbsd:netbsd:-"/>
331
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
332
+ <param pos="0" name="service.product" value="SNMP Agent"/>
333
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
334
+ </fingerprint>
335
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.8$">
336
+ <description>Net-SNMP on freebsd</description>
337
+ <example>1.3.6.1.4.1.8072.3.2.8</example>
338
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
339
+ <param pos="0" name="os.family" value="FreeBSD"/>
340
+ <param pos="0" name="os.product" value="FreeBSD"/>
341
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:-"/>
342
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
343
+ <param pos="0" name="service.product" value="SNMP Agent"/>
344
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
345
+ </fingerprint>
346
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.9$">
347
+ <description>Net-SNMP on irix</description>
348
+ <example>1.3.6.1.4.1.8072.3.2.9</example>
349
+ <param pos="0" name="os.vendor" value="SGI"/>
350
+ <param pos="0" name="os.family" value="IRIX"/>
351
+ <param pos="0" name="os.product" value="IRIX"/>
352
+ <param pos="0" name="os.cpe23" value="cpe:/o:sgi:irix:-"/>
353
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
354
+ <param pos="0" name="service.product" value="SNMP Agent"/>
355
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
356
+ </fingerprint>
357
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.10$">
358
+ <description>Net-SNMP on linux</description>
359
+ <example>1.3.6.1.4.1.8072.3.2.10</example>
360
+ <param pos="0" name="os.family" value="Linux"/>
361
+ <param pos="0" name="os.product" value="Linux"/>
362
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
363
+ <param pos="0" name="service.product" value="SNMP Agent"/>
364
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
365
+ </fingerprint>
366
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.11$">
367
+ <description>Net-SNMP on bsdi</description>
368
+ <example>1.3.6.1.4.1.8072.3.2.11</example>
369
+ <param pos="0" name="os.vendor" value="Berkeley Software Design Inc."/>
370
+ <param pos="0" name="os.product" value="BSD/OS"/>
371
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
372
+ <param pos="0" name="service.product" value="SNMP Agent"/>
373
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
374
+ </fingerprint>
375
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.12$">
376
+ <description>Net-SNMP on openbsd</description>
377
+ <example>1.3.6.1.4.1.8072.3.2.12</example>
378
+ <param pos="0" name="os.vendor" value="OpenBSD"/>
379
+ <param pos="0" name="os.family" value="OpenBSD"/>
380
+ <param pos="0" name="os.product" value="OpenBSD"/>
381
+ <param pos="0" name="os.cpe23" value="cpe:/o:openbsd:openbsd:-"/>
382
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
383
+ <param pos="0" name="service.product" value="SNMP Agent"/>
384
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
385
+ </fingerprint>
386
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.13$">
387
+ <description>Net-SNMP on win32</description>
388
+ <example>1.3.6.1.4.1.8072.3.2.13</example>
389
+ <param pos="0" name="os.vendor" value="Microsoft"/>
390
+ <param pos="0" name="os.product" value="Windows"/>
391
+ <param pos="0" name="os.family" value="Windows"/>
392
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
393
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
394
+ <param pos="0" name="service.product" value="SNMP Agent"/>
395
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
396
+ </fingerprint>
397
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.14$">
398
+ <description>Net-SNMP on hpux11</description>
399
+ <example>1.3.6.1.4.1.8072.3.2.14</example>
400
+ <param pos="0" name="os.vendor" value="HP"/>
401
+ <param pos="0" name="os.family" value="HP-UX"/>
402
+ <param pos="0" name="os.product" value="HP-UX"/>
403
+ <param pos="0" name="os.version" value="11"/>
404
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:11"/>
405
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
406
+ <param pos="0" name="service.product" value="SNMP Agent"/>
407
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
408
+ </fingerprint>
409
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.15$">
410
+ <description>Net-SNMP on aix</description>
411
+ <example>1.3.6.1.4.1.8072.3.2.15</example>
412
+ <param pos="0" name="os.vendor" value="IBM"/>
413
+ <param pos="0" name="os.family" value="AIX"/>
414
+ <param pos="0" name="os.product" value="AIX"/>
415
+ <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:-"/>
416
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
417
+ <param pos="0" name="service.product" value="SNMP Agent"/>
418
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
419
+ </fingerprint>
420
+ <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.16$">
421
+ <description>Net-SNMP on macosx</description>
422
+ <example>1.3.6.1.4.1.8072.3.2.16</example>
423
+ <param pos="0" name="os.vendor" value="Apple"/>
424
+ <param pos="0" name="os.product" value="Mac OS X"/>
425
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:-"/>
426
+ <param pos="0" name="service.vendor" value="Net-SNMP"/>
427
+ <param pos="0" name="service.product" value="SNMP Agent"/>
428
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
429
+ </fingerprint>
430
+ </fingerprints>
data/xml/ssh_banners.xml ADDED
@@ -0,0 +1,1968 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <fingerprints matches="ssh.banner" protocol="ssh" database_type="service" preference="0.90">
3
+ <!--
4
+ SSH "software revision and comment" strings (official RFC nomenclature for the part of
5
+ the identification string after "SSH-x.x-") are matched against these patterns to
6
+ fingerprint SSH servers.
7
+ -->
8
+ <fingerprint pattern="^ArrayOS$">
9
+ <description>Array Networks device</description>
10
+ <example>ArrayOS</example>
11
+ <param pos="0" name="service.vendor" value="Array Networks"/>
12
+ </fingerprint>
13
+ <fingerprint pattern="^RomSShell_([\d\.]+)$">
14
+ <description>Allegro RomSShell SSH</description>
15
+ <example service.version="4.62">RomSShell_4.62</example>
16
+ <param pos="0" name="service.vendor" value="Allegro Software"/>
17
+ <param pos="0" name="service.product" value="RomSShell"/>
18
+ <param pos="1" name="service.version"/>
19
+ </fingerprint>
20
+ <fingerprint pattern="(?i)^DraySSH_\S+$">
21
+ <description>DrayTek generic</description>
22
+ <example>DraySSH_2.0</example>
23
+ <param pos="0" name="hw.vendor" value="DrayTek"/>
24
+ </fingerprint>
25
+ <fingerprint pattern="^mpSSH_([\d\.]+)$">
26
+ <description>HP Integrated Lights Out (iLO) usually bundled with HP servers</description>
27
+ <example service.version="0.0.1">mpSSH_0.0.1</example>
28
+ <param pos="0" name="service.vendor" value="HP"/>
29
+ <param pos="0" name="service.product" value="iLO"/>
30
+ <param pos="0" name="service.family" value="iLO"/>
31
+ <param pos="1" name="service.version"/>
32
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:integrated_lights_out:{service.version}"/>
33
+ <param pos="0" name="hw.vendor" value="HP"/>
34
+ <param pos="0" name="os.vendor" value="HP"/>
35
+ <param pos="0" name="os.product" value="iLO"/>
36
+ <param pos="0" name="os.family" value="iLO"/>
37
+ <param pos="0" name="os.device" value="Lights Out Management"/>
38
+ </fingerprint>
39
+ <fingerprint pattern="^Serv-U_([\d\.]+)$">
40
+ <description>Serv-U SSH</description>
41
+ <example service.version="7.4.0.1">Serv-U_7.4.0.1</example>
42
+ <param pos="0" name="service.vendor" value="Rhino Software"/>
43
+ <param pos="0" name="service.product" value="Serv-U"/>
44
+ <param pos="1" name="service.version"/>
45
+ </fingerprint>
46
+ <fingerprint pattern="WS_FTP-SSH_([\d\.]+)$">
47
+ <description>WS_FTP Server with SSH</description>
48
+ <example service.version="6.1.1">WS_FTP-SSH_6.1.1</example>
49
+ <example service.version="7.0">WS_FTP-SSH_7.0</example>
50
+ <param pos="0" name="service.vendor" value="Ipswitch"/>
51
+ <param pos="0" name="service.product" value="WS_FTP"/>
52
+ <param pos="1" name="service.version"/>
53
+ <param pos="0" name="service.cpe23" value="cpe:/a:ipswitch:ws_ftp:{service.version}"/>
54
+ </fingerprint>
55
+ <fingerprint pattern="IPSSH[-_]([\d\.p]+).*$">
56
+ <description>VxWorks with version information</description>
57
+ <example os.version="6.9.0">IPSSH-6.9.0</example>
58
+ <param pos="0" name="os.vendor" value="Wind River"/>
59
+ <param pos="0" name="os.product" value="VxWorks"/>
60
+ <param pos="1" name="os.version"/>
61
+ <param pos="0" name="os.cpe23" value="cpe:/o:windriver:vxworks:{os.version}"/>
62
+ </fingerprint>
63
+ <!-- FreeBSD -->
64
+ <fingerprint pattern="^OpenSSH_(2\.3\.0) (green@FreeBSD.org 20010321)$">
65
+ <description>OpenSSH running on FreeBSD 4.3</description>
66
+ <example service.version="2.3.0" openssh.comment="green@FreeBSD.org 20010321">OpenSSH_2.3.0 green@FreeBSD.org 20010321</example>
67
+ <param pos="1" name="service.version"/>
68
+ <param pos="2" name="openssh.comment"/>
69
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
70
+ <param pos="0" name="service.family" value="OpenSSH"/>
71
+ <param pos="0" name="service.product" value="OpenSSH"/>
72
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
73
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
74
+ <param pos="0" name="os.family" value="FreeBSD"/>
75
+ <param pos="0" name="os.product" value="FreeBSD"/>
76
+ <param pos="0" name="os.version" value="4.3"/>
77
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
78
+ </fingerprint>
79
+ <fingerprint pattern="^OpenSSH_(2\.3\.0) (FreeBSD localisations 20010713)$">
80
+ <description>OpenSSH running on FreeBSD 4.4</description>
81
+ <example service.version="2.3.0" openssh.comment="FreeBSD localisations 20010713">OpenSSH_2.3.0 FreeBSD localisations 20010713</example>
82
+ <param pos="1" name="service.version"/>
83
+ <param pos="2" name="openssh.comment"/>
84
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
85
+ <param pos="0" name="service.family" value="OpenSSH"/>
86
+ <param pos="0" name="service.product" value="OpenSSH"/>
87
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
88
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
89
+ <param pos="0" name="os.family" value="FreeBSD"/>
90
+ <param pos="0" name="os.product" value="FreeBSD"/>
91
+ <param pos="0" name="os.version" value="4.4"/>
92
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
93
+ </fingerprint>
94
+ <fingerprint pattern="^OpenSSH_(2\.9) (FreeBSD localisations 20011202)$">
95
+ <description>OpenSSH running on FreeBSD 4.5</description>
96
+ <example service.version="2.9" openssh.comment="FreeBSD localisations 20011202">OpenSSH_2.9 FreeBSD localisations 20011202</example>
97
+ <param pos="1" name="service.version"/>
98
+ <param pos="2" name="openssh.comment"/>
99
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
100
+ <param pos="0" name="service.family" value="OpenSSH"/>
101
+ <param pos="0" name="service.product" value="OpenSSH"/>
102
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
103
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
104
+ <param pos="0" name="os.family" value="FreeBSD"/>
105
+ <param pos="0" name="os.product" value="FreeBSD"/>
106
+ <param pos="0" name="os.version" value="4.5"/>
107
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
108
+ </fingerprint>
109
+ <fingerprint pattern="^OpenSSH_(3\.4p1) (FreeBSD 20020702)$">
110
+ <description>OpenSSH running on FreeBSD 4.6.2</description>
111
+ <example service.version="3.4p1" openssh.comment="FreeBSD 20020702">OpenSSH_3.4p1 FreeBSD 20020702</example>
112
+ <param pos="1" name="service.version"/>
113
+ <param pos="2" name="openssh.comment"/>
114
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
115
+ <param pos="0" name="service.family" value="OpenSSH"/>
116
+ <param pos="0" name="service.product" value="OpenSSH"/>
117
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
118
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
119
+ <param pos="0" name="os.family" value="FreeBSD"/>
120
+ <param pos="0" name="os.product" value="FreeBSD"/>
121
+ <param pos="0" name="os.version" value="4.6.2"/>
122
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
123
+ </fingerprint>
124
+ <fingerprint pattern="^OpenSSH_(2\.9) (FreeBSD localisations 20020307)$">
125
+ <description>OpenSSH running on FreeBSD 4.6</description>
126
+ <example service.version="2.9" openssh.comment="FreeBSD localisations 20020307">OpenSSH_2.9 FreeBSD localisations 20020307</example>
127
+ <param pos="1" name="service.version"/>
128
+ <param pos="2" name="openssh.comment"/>
129
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
130
+ <param pos="0" name="service.family" value="OpenSSH"/>
131
+ <param pos="0" name="service.product" value="OpenSSH"/>
132
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
133
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
134
+ <param pos="0" name="os.family" value="FreeBSD"/>
135
+ <param pos="0" name="os.product" value="FreeBSD"/>
136
+ <param pos="0" name="os.version" value="4.6"/>
137
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
138
+ </fingerprint>
139
+ <fingerprint pattern="^OpenSSH_(3\.4p1) (FreeBSD-20020702)$">
140
+ <description>OpenSSH running on FreeBSD 4.7</description>
141
+ <example service.version="3.4p1" openssh.comment="FreeBSD-20020702">OpenSSH_3.4p1 FreeBSD-20020702</example>
142
+ <param pos="1" name="service.version"/>
143
+ <param pos="2" name="openssh.comment"/>
144
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
145
+ <param pos="0" name="service.family" value="OpenSSH"/>
146
+ <param pos="0" name="service.product" value="OpenSSH"/>
147
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
148
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
149
+ <param pos="0" name="os.family" value="FreeBSD"/>
150
+ <param pos="0" name="os.product" value="FreeBSD"/>
151
+ <param pos="0" name="os.version" value="4.7"/>
152
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
153
+ </fingerprint>
154
+ <fingerprint pattern="^OpenSSH_(3\.5p1) (FreeBSD-20030201)$">
155
+ <description>OpenSSH running on FreeBSD 4.8</description>
156
+ <example service.version="3.5p1" openssh.comment="FreeBSD-20030201">OpenSSH_3.5p1 FreeBSD-20030201</example>
157
+ <param pos="1" name="service.version"/>
158
+ <param pos="2" name="openssh.comment"/>
159
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
160
+ <param pos="0" name="service.family" value="OpenSSH"/>
161
+ <param pos="0" name="service.product" value="OpenSSH"/>
162
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
163
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
164
+ <param pos="0" name="os.family" value="FreeBSD"/>
165
+ <param pos="0" name="os.product" value="FreeBSD"/>
166
+ <param pos="0" name="os.version" value="4.8"/>
167
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
168
+ </fingerprint>
169
+ <!-- Multiple minor version match, assert the oldest version -->
170
+ <fingerprint pattern="^OpenSSH_(3\.5p1) (FreeBSD-20030924)$">
171
+ <description>OpenSSH running on FreeBSD 4.9/4.10 (sometimes 4.11)</description>
172
+ <example service.version="3.5p1" openssh.comment="FreeBSD-20030924">OpenSSH_3.5p1 FreeBSD-20030924</example>
173
+ <param pos="1" name="service.version"/>
174
+ <param pos="2" name="openssh.comment"/>
175
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
176
+ <param pos="0" name="service.family" value="OpenSSH"/>
177
+ <param pos="0" name="service.product" value="OpenSSH"/>
178
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
179
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
180
+ <param pos="0" name="os.family" value="FreeBSD"/>
181
+ <param pos="0" name="os.product" value="FreeBSD"/>
182
+ <param pos="0" name="os.version" value="4.9"/>
183
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
184
+ </fingerprint>
185
+ <fingerprint pattern="^OpenSSH_(3\.5p1) (FreeBSD-20060930)$">
186
+ <description>OpenSSH running on FreeBSD 4.11</description>
187
+ <example service.version="3.5p1" openssh.comment="FreeBSD-20060930">OpenSSH_3.5p1 FreeBSD-20060930</example>
188
+ <param pos="1" name="service.version"/>
189
+ <param pos="2" name="openssh.comment"/>
190
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
191
+ <param pos="0" name="service.family" value="OpenSSH"/>
192
+ <param pos="0" name="service.product" value="OpenSSH"/>
193
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
194
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
195
+ <param pos="0" name="os.family" value="FreeBSD"/>
196
+ <param pos="0" name="os.product" value="FreeBSD"/>
197
+ <param pos="0" name="os.version" value="4.11"/>
198
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
199
+ </fingerprint>
200
+ <fingerprint pattern="^OpenSSH_(3\.5p1) (FreeBSD-20021029)$">
201
+ <description>OpenSSH running on FreeBSD 5.0</description>
202
+ <example service.version="3.5p1" openssh.comment="FreeBSD-20021029">OpenSSH_3.5p1 FreeBSD-20021029</example>
203
+ <param pos="1" name="service.version"/>
204
+ <param pos="2" name="openssh.comment"/>
205
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
206
+ <param pos="0" name="service.family" value="OpenSSH"/>
207
+ <param pos="0" name="service.product" value="OpenSSH"/>
208
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
209
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
210
+ <param pos="0" name="os.family" value="FreeBSD"/>
211
+ <param pos="0" name="os.product" value="FreeBSD"/>
212
+ <param pos="0" name="os.version" value="5.0"/>
213
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
214
+ </fingerprint>
215
+ <fingerprint pattern="^OpenSSH_(3\.6\.1p1) (FreeBSD-20030423)$">
216
+ <description>OpenSSH running on FreeBSD 5.1</description>
217
+ <example service.version="3.6.1p1" openssh.comment="FreeBSD-20030423">OpenSSH_3.6.1p1 FreeBSD-20030423</example>
218
+ <param pos="1" name="service.version"/>
219
+ <param pos="2" name="openssh.comment"/>
220
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
221
+ <param pos="0" name="service.family" value="OpenSSH"/>
222
+ <param pos="0" name="service.product" value="OpenSSH"/>
223
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
224
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
225
+ <param pos="0" name="os.family" value="FreeBSD"/>
226
+ <param pos="0" name="os.product" value="FreeBSD"/>
227
+ <param pos="0" name="os.version" value="5.1"/>
228
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
229
+ </fingerprint>
230
+ <fingerprint pattern="^OpenSSH_(3\.6\.1p1) (FreeBSD-20030924)$">
231
+ <description>OpenSSH running on FreeBSD 5.2</description>
232
+ <example service.version="3.6.1p1" openssh.comment="FreeBSD-20030924">OpenSSH_3.6.1p1 FreeBSD-20030924</example>
233
+ <param pos="1" name="service.version"/>
234
+ <param pos="2" name="openssh.comment"/>
235
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
236
+ <param pos="0" name="service.family" value="OpenSSH"/>
237
+ <param pos="0" name="service.product" value="OpenSSH"/>
238
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
239
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
240
+ <param pos="0" name="os.family" value="FreeBSD"/>
241
+ <param pos="0" name="os.product" value="FreeBSD"/>
242
+ <param pos="0" name="os.version" value="5.2"/>
243
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
244
+ </fingerprint>
245
+ <!-- Multiple minor version match, assert the oldest version -->
246
+ <fingerprint pattern="^OpenSSH_(3\.8\.1p1) (FreeBSD-20040419)$">
247
+ <description>OpenSSH running on FreeBSD 5.3/5.4</description>
248
+ <example service.version="3.8.1p1" openssh.comment="FreeBSD-20040419">OpenSSH_3.8.1p1 FreeBSD-20040419</example>
249
+ <param pos="1" name="service.version"/>
250
+ <param pos="2" name="openssh.comment"/>
251
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
252
+ <param pos="0" name="service.family" value="OpenSSH"/>
253
+ <param pos="0" name="service.product" value="OpenSSH"/>
254
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
255
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
256
+ <param pos="0" name="os.family" value="FreeBSD"/>
257
+ <param pos="0" name="os.product" value="FreeBSD"/>
258
+ <param pos="0" name="os.version" value="5.3"/>
259
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
260
+ </fingerprint>
261
+ <fingerprint pattern="^OpenSSH_(3\.8\.1p1) (FreeBSD-20060123)$">
262
+ <description>OpenSSH running on FreeBSD 5.5</description>
263
+ <example service.version="3.8.1p1" openssh.comment="FreeBSD-20060123">OpenSSH_3.8.1p1 FreeBSD-20060123</example>
264
+ <param pos="1" name="service.version"/>
265
+ <param pos="2" name="openssh.comment"/>
266
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
267
+ <param pos="0" name="service.family" value="OpenSSH"/>
268
+ <param pos="0" name="service.product" value="OpenSSH"/>
269
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
270
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
271
+ <param pos="0" name="os.family" value="FreeBSD"/>
272
+ <param pos="0" name="os.product" value="FreeBSD"/>
273
+ <param pos="0" name="os.version" value="5.5"/>
274
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
275
+ </fingerprint>
276
+ <!-- Multiple minor version match, assert the oldest version -->
277
+ <fingerprint pattern="^OpenSSH_(4\.2p1) (FreeBSD-20050903)$">
278
+ <description>OpenSSH running on FreeBSD 6.0/6.1</description>
279
+ <example service.version="4.2p1" openssh.comment="FreeBSD-20050903">OpenSSH_4.2p1 FreeBSD-20050903</example>
280
+ <param pos="1" name="service.version"/>
281
+ <param pos="2" name="openssh.comment"/>
282
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
283
+ <param pos="0" name="service.family" value="OpenSSH"/>
284
+ <param pos="0" name="service.product" value="OpenSSH"/>
285
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
286
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
287
+ <param pos="0" name="os.family" value="FreeBSD"/>
288
+ <param pos="0" name="os.product" value="FreeBSD"/>
289
+ <param pos="0" name="os.version" value="6.0"/>
290
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
291
+ </fingerprint>
292
+ <!-- Spans major versions, do not assert a version number -->
293
+ <fingerprint pattern="^OpenSSH_(4\.5p1) (FreeBSD-20061110)$">
294
+ <description>OpenSSH running on FreeBSD 6.2/6.3/6.4/7.0</description>
295
+ <example service.version="4.5p1" openssh.comment="FreeBSD-20061110">OpenSSH_4.5p1 FreeBSD-20061110</example>
296
+ <param pos="1" name="service.version"/>
297
+ <param pos="2" name="openssh.comment"/>
298
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
299
+ <param pos="0" name="service.family" value="OpenSSH"/>
300
+ <param pos="0" name="service.product" value="OpenSSH"/>
301
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
302
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
303
+ <param pos="0" name="os.family" value="FreeBSD"/>
304
+ <param pos="0" name="os.product" value="FreeBSD"/>
305
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:-"/>
306
+ </fingerprint>
307
+ <!-- Multiple minor version match, assert the oldest version -->
308
+ <fingerprint pattern="^OpenSSH_(5\.1p1) (FreeBSD-20080901)$">
309
+ <description>OpenSSH running on FreeBSD 7.1/7.2/7.3/7.4</description>
310
+ <example service.version="5.1p1" openssh.comment="FreeBSD-20080901">OpenSSH_5.1p1 FreeBSD-20080901</example>
311
+ <param pos="1" name="service.version"/>
312
+ <param pos="2" name="openssh.comment"/>
313
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
314
+ <param pos="0" name="service.family" value="OpenSSH"/>
315
+ <param pos="0" name="service.product" value="OpenSSH"/>
316
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
317
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
318
+ <param pos="0" name="os.family" value="FreeBSD"/>
319
+ <param pos="0" name="os.product" value="FreeBSD"/>
320
+ <param pos="0" name="os.version" value="7.1"/>
321
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
322
+ </fingerprint>
323
+ <fingerprint pattern="^OpenSSH_(5\.2p1) (FreeBSD-20090522)$">
324
+ <description>OpenSSH running on FreeBSD 8.0</description>
325
+ <example service.version="5.2p1" openssh.comment="FreeBSD-20090522">OpenSSH_5.2p1 FreeBSD-20090522</example>
326
+ <param pos="1" name="service.version"/>
327
+ <param pos="2" name="openssh.comment"/>
328
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
329
+ <param pos="0" name="service.family" value="OpenSSH"/>
330
+ <param pos="0" name="service.product" value="OpenSSH"/>
331
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
332
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
333
+ <param pos="0" name="os.family" value="FreeBSD"/>
334
+ <param pos="0" name="os.product" value="FreeBSD"/>
335
+ <param pos="0" name="os.version" value="8.0"/>
336
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
337
+ </fingerprint>
338
+ <!-- Multiple minor version match, assert the oldest version -->
339
+ <fingerprint pattern="^OpenSSH_(5\.4p1) (FreeBSD-20100308)$">
340
+ <description>OpenSSH running on FreeBSD 8.1/8.2</description>
341
+ <example service.version="5.4p1" openssh.comment="FreeBSD-20100308">OpenSSH_5.4p1 FreeBSD-20100308</example>
342
+ <param pos="1" name="service.version"/>
343
+ <param pos="2" name="openssh.comment"/>
344
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
345
+ <param pos="0" name="service.family" value="OpenSSH"/>
346
+ <param pos="0" name="service.product" value="OpenSSH"/>
347
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
348
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
349
+ <param pos="0" name="os.family" value="FreeBSD"/>
350
+ <param pos="0" name="os.product" value="FreeBSD"/>
351
+ <param pos="0" name="os.version" value="8.1"/>
352
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
353
+ </fingerprint>
354
+ <fingerprint pattern="^OpenSSH_(5\.4p1_hpn13v11) (FreeBSD-20100308)$">
355
+ <description>OpenSSH running on FreeBSD 8.3</description>
356
+ <example service.version="5.4p1_hpn13v11" openssh.comment="FreeBSD-20100308">OpenSSH_5.4p1_hpn13v11 FreeBSD-20100308</example>
357
+ <param pos="1" name="service.version"/>
358
+ <param pos="2" name="openssh.comment"/>
359
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
360
+ <param pos="0" name="service.family" value="OpenSSH"/>
361
+ <param pos="0" name="service.product" value="OpenSSH"/>
362
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
363
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
364
+ <param pos="0" name="os.family" value="FreeBSD"/>
365
+ <param pos="0" name="os.product" value="FreeBSD"/>
366
+ <param pos="0" name="os.version" value="8.3"/>
367
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
368
+ </fingerprint>
369
+ <fingerprint pattern="^OpenSSH_(6\.1_hpn13v11) (FreeBSD-20120901)$">
370
+ <description>OpenSSH running on FreeBSD 8.4</description>
371
+ <example service.version="6.1_hpn13v11" openssh.comment="FreeBSD-20120901">OpenSSH_6.1_hpn13v11 FreeBSD-20120901</example>
372
+ <param pos="1" name="service.version"/>
373
+ <param pos="2" name="openssh.comment"/>
374
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
375
+ <param pos="0" name="service.family" value="OpenSSH"/>
376
+ <param pos="0" name="service.product" value="OpenSSH"/>
377
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
378
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
379
+ <param pos="0" name="os.family" value="FreeBSD"/>
380
+ <param pos="0" name="os.product" value="FreeBSD"/>
381
+ <param pos="0" name="os.version" value="8.4"/>
382
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
383
+ </fingerprint>
384
+ <!-- Multiple minor version match, assert the oldest version -->
385
+ <fingerprint pattern="^OpenSSH_(5\.8p2_hpn13v11) (FreeBSD-20110503)$">
386
+ <description>OpenSSH running on FreeBSD 9.0/9.1</description>
387
+ <example service.version="5.8p2_hpn13v11" openssh.comment="FreeBSD-20110503">OpenSSH_5.8p2_hpn13v11 FreeBSD-20110503</example>
388
+ <param pos="1" name="service.version"/>
389
+ <param pos="2" name="openssh.comment"/>
390
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
391
+ <param pos="0" name="service.family" value="OpenSSH"/>
392
+ <param pos="0" name="service.product" value="OpenSSH"/>
393
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
394
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
395
+ <param pos="0" name="os.family" value="FreeBSD"/>
396
+ <param pos="0" name="os.product" value="FreeBSD"/>
397
+ <param pos="0" name="os.version" value="9.0"/>
398
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
399
+ </fingerprint>
400
+ <fingerprint pattern="^OpenSSH_(6\.2_hpn13v11) (FreeBSD-20130515)$">
401
+ <description>OpenSSH running on FreeBSD 9.2</description>
402
+ <example service.version="6.2_hpn13v11" openssh.comment="FreeBSD-20130515">OpenSSH_6.2_hpn13v11 FreeBSD-20130515</example>
403
+ <param pos="1" name="service.version"/>
404
+ <param pos="2" name="openssh.comment"/>
405
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
406
+ <param pos="0" name="service.family" value="OpenSSH"/>
407
+ <param pos="0" name="service.product" value="OpenSSH"/>
408
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
409
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
410
+ <param pos="0" name="os.family" value="FreeBSD"/>
411
+ <param pos="0" name="os.product" value="FreeBSD"/>
412
+ <param pos="0" name="os.version" value="9.2"/>
413
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
414
+ </fingerprint>
415
+ <!-- Spans major versions, do not assert a version number -->
416
+ <fingerprint pattern="^OpenSSH_(6\.6\.1_hpn13v11) (FreeBSD-20140420)$">
417
+ <description>OpenSSH running on FreeBSD 9.3/10.1/10.2</description>
418
+ <example service.version="6.6.1_hpn13v11" openssh.comment="FreeBSD-20140420">OpenSSH_6.6.1_hpn13v11 FreeBSD-20140420</example>
419
+ <param pos="1" name="service.version"/>
420
+ <param pos="2" name="openssh.comment"/>
421
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
422
+ <param pos="0" name="service.family" value="OpenSSH"/>
423
+ <param pos="0" name="service.product" value="OpenSSH"/>
424
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
425
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
426
+ <param pos="0" name="os.family" value="FreeBSD"/>
427
+ <param pos="0" name="os.product" value="FreeBSD"/>
428
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:-"/>
429
+ </fingerprint>
430
+ <fingerprint pattern="^OpenSSH_(6\.4_hpn13v11) (FreeBSD-20131111)$">
431
+ <description>OpenSSH running on FreeBSD 10.0</description>
432
+ <example service.version="6.4_hpn13v11" openssh.comment="FreeBSD-20131111">OpenSSH_6.4_hpn13v11 FreeBSD-20131111</example>
433
+ <param pos="1" name="service.version"/>
434
+ <param pos="2" name="openssh.comment"/>
435
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
436
+ <param pos="0" name="service.family" value="OpenSSH"/>
437
+ <param pos="0" name="service.product" value="OpenSSH"/>
438
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
439
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
440
+ <param pos="0" name="os.family" value="FreeBSD"/>
441
+ <param pos="0" name="os.product" value="FreeBSD"/>
442
+ <param pos="0" name="os.version" value="10.0"/>
443
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
444
+ </fingerprint>
445
+ <!-- Spans major versions, do not assert a version number -->
446
+ <fingerprint pattern="^OpenSSH_(7\.2) (FreeBSD-20160310)$">
447
+ <description>OpenSSH running on FreeBSD 10.3/11.0</description>
448
+ <example service.version="7.2" openssh.comment="FreeBSD-20160310">OpenSSH_7.2 FreeBSD-20160310</example>
449
+ <param pos="1" name="service.version"/>
450
+ <param pos="2" name="openssh.comment"/>
451
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
452
+ <param pos="0" name="service.family" value="OpenSSH"/>
453
+ <param pos="0" name="service.product" value="OpenSSH"/>
454
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
455
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
456
+ <param pos="0" name="os.family" value="FreeBSD"/>
457
+ <param pos="0" name="os.product" value="FreeBSD"/>
458
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:-"/>
459
+ </fingerprint>
460
+ <fingerprint pattern="^OpenSSH_(7\.3) (FreeBSD-20170902)$">
461
+ <description>OpenSSH running on FreeBSD 10.4</description>
462
+ <example service.version="7.3" openssh.comment="FreeBSD-20170902">OpenSSH_7.3 FreeBSD-20170902</example>
463
+ <param pos="1" name="service.version"/>
464
+ <param pos="2" name="openssh.comment"/>
465
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
466
+ <param pos="0" name="service.family" value="OpenSSH"/>
467
+ <param pos="0" name="service.product" value="OpenSSH"/>
468
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
469
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
470
+ <param pos="0" name="os.family" value="FreeBSD"/>
471
+ <param pos="0" name="os.product" value="FreeBSD"/>
472
+ <param pos="0" name="os.version" value="10.4"/>
473
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
474
+ </fingerprint>
475
+ <fingerprint pattern="^OpenSSH_(7\.2) (FreeBSD-20161230)$">
476
+ <description>OpenSSH running on FreeBSD 11.1</description>
477
+ <example service.version="7.2" openssh.comment="FreeBSD-20161230">OpenSSH_7.2 FreeBSD-20161230</example>
478
+ <param pos="1" name="service.version"/>
479
+ <param pos="2" name="openssh.comment"/>
480
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
481
+ <param pos="0" name="service.family" value="OpenSSH"/>
482
+ <param pos="0" name="service.product" value="OpenSSH"/>
483
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
484
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
485
+ <param pos="0" name="os.family" value="FreeBSD"/>
486
+ <param pos="0" name="os.product" value="FreeBSD"/>
487
+ <param pos="0" name="os.version" value="11.1"/>
488
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
489
+ </fingerprint>
490
+ <!-- Multiple minor version match, assert the oldest version -->
491
+ <fingerprint pattern="^OpenSSH_(7\.5) (FreeBSD-20170903)$">
492
+ <description>OpenSSH running on FreeBSD 11.2/11.3</description>
493
+ <example service.version="7.5" openssh.comment="FreeBSD-20170903">OpenSSH_7.5 FreeBSD-20170903</example>
494
+ <param pos="1" name="service.version"/>
495
+ <param pos="2" name="openssh.comment"/>
496
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
497
+ <param pos="0" name="service.family" value="OpenSSH"/>
498
+ <param pos="0" name="service.product" value="OpenSSH"/>
499
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
500
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
501
+ <param pos="0" name="os.family" value="FreeBSD"/>
502
+ <param pos="0" name="os.product" value="FreeBSD"/>
503
+ <param pos="0" name="os.version" value="11.2"/>
504
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
505
+ </fingerprint>
506
+ <fingerprint pattern="^OpenSSH_(7\.8) (FreeBSD-20180909)$">
507
+ <description>OpenSSH running on FreeBSD 12.0</description>
508
+ <example service.version="7.8" openssh.comment="FreeBSD-20180909">OpenSSH_7.8 FreeBSD-20180909</example>
509
+ <param pos="1" name="service.version"/>
510
+ <param pos="2" name="openssh.comment"/>
511
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
512
+ <param pos="0" name="service.family" value="OpenSSH"/>
513
+ <param pos="0" name="service.product" value="OpenSSH"/>
514
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
515
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
516
+ <param pos="0" name="os.family" value="FreeBSD"/>
517
+ <param pos="0" name="os.product" value="FreeBSD"/>
518
+ <param pos="0" name="os.version" value="12.0"/>
519
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
520
+ </fingerprint>
521
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(FreeBSD[ -].*)$">
522
+ <description>OpenSSH running on FreeBSD</description>
523
+ <example service.version="7.2" openssh.comment="FreeBSD-20160311">OpenSSH_7.2 FreeBSD-20160311</example>
524
+ <param pos="1" name="service.version"/>
525
+ <param pos="2" name="openssh.comment"/>
526
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
527
+ <param pos="0" name="service.family" value="OpenSSH"/>
528
+ <param pos="0" name="service.product" value="OpenSSH"/>
529
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
530
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
531
+ <param pos="0" name="os.family" value="FreeBSD"/>
532
+ <param pos="0" name="os.product" value="FreeBSD"/>
533
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:-"/>
534
+ </fingerprint>
535
+ <!-- NetBSD -->
536
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(NetBSD(?:_Secure_Shell)?[ -].*)$">
537
+ <description>OpenSSH running on NetBSD</description>
538
+ <example service.version="7.2" openssh.comment="NetBSD-20100308">OpenSSH_7.2 NetBSD-20100308</example>
539
+ <example service.version="4.4" openssh.comment="NetBSD_Secure_Shell-20061114">OpenSSH_4.4 NetBSD_Secure_Shell-20061114</example>
540
+ <param pos="1" name="service.version"/>
541
+ <param pos="2" name="openssh.comment"/>
542
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
543
+ <param pos="0" name="service.family" value="OpenSSH"/>
544
+ <param pos="0" name="service.product" value="OpenSSH"/>
545
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
546
+ <param pos="0" name="os.vendor" value="NetBSD"/>
547
+ <param pos="0" name="os.family" value="NetBSD"/>
548
+ <param pos="0" name="os.product" value="NetBSD"/>
549
+ <param pos="0" name="os.cpe23" value="cpe:/o:netbsd:netbsd:-"/>
550
+ </fingerprint>
551
+ <!-- Ubuntu -->
552
+ <fingerprint pattern="^OpenSSH_(3\.8\.1p1) (Debian-11ubuntu\d+(?:\.\d+)?)$">
553
+ <description>OpenSSH running on Ubuntu 4.10</description>
554
+ <example service.version="3.8.1p1" openssh.comment="Debian-11ubuntu3">OpenSSH_3.8.1p1 Debian-11ubuntu3</example>
555
+ <param pos="1" name="service.version"/>
556
+ <param pos="2" name="openssh.comment"/>
557
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
558
+ <param pos="0" name="service.family" value="OpenSSH"/>
559
+ <param pos="0" name="service.product" value="OpenSSH"/>
560
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
561
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
562
+ <param pos="0" name="os.family" value="Linux"/>
563
+ <param pos="0" name="os.product" value="Linux"/>
564
+ <param pos="0" name="os.version" value="4.10"/>
565
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
566
+ </fingerprint>
567
+ <fingerprint pattern="^OpenSSH_(3\.9p1) (Debian-1ubuntu\d+(?:\.\d+)?)$">
568
+ <description>OpenSSH running on Ubuntu 5.04</description>
569
+ <example service.version="3.9p1" openssh.comment="Debian-1ubuntu2">OpenSSH_3.9p1 Debian-1ubuntu2</example>
570
+ <param pos="1" name="service.version"/>
571
+ <param pos="2" name="openssh.comment"/>
572
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
573
+ <param pos="0" name="service.family" value="OpenSSH"/>
574
+ <param pos="0" name="service.product" value="OpenSSH"/>
575
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
576
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
577
+ <param pos="0" name="os.family" value="Linux"/>
578
+ <param pos="0" name="os.product" value="Linux"/>
579
+ <param pos="0" name="os.version" value="5.04"/>
580
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
581
+ </fingerprint>
582
+ <fingerprint pattern="^OpenSSH_(4\.1p1) (Debian-7ubuntu\d+(?:\.\d+)?)$">
583
+ <description>OpenSSH running on Ubuntu 5.10</description>
584
+ <example service.version="4.1p1" openssh.comment="Debian-7ubuntu4">OpenSSH_4.1p1 Debian-7ubuntu4</example>
585
+ <param pos="1" name="service.version"/>
586
+ <param pos="2" name="openssh.comment"/>
587
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
588
+ <param pos="0" name="service.family" value="OpenSSH"/>
589
+ <param pos="0" name="service.product" value="OpenSSH"/>
590
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
591
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
592
+ <param pos="0" name="os.family" value="Linux"/>
593
+ <param pos="0" name="os.product" value="Linux"/>
594
+ <param pos="0" name="os.version" value="5.10"/>
595
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
596
+ </fingerprint>
597
+ <fingerprint pattern="^OpenSSH_(4\.2p1) (Debian-7ubuntu\d+(?:\.\d+)?)$">
598
+ <description>OpenSSH running on Ubuntu 6.04</description>
599
+ <example service.version="4.2p1" openssh.comment="Debian-7ubuntu3.1">OpenSSH_4.2p1 Debian-7ubuntu3.1</example>
600
+ <example>OpenSSH_4.2p1 Debian-7ubuntu3.2</example>
601
+ <param pos="1" name="service.version"/>
602
+ <param pos="2" name="openssh.comment"/>
603
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
604
+ <param pos="0" name="service.family" value="OpenSSH"/>
605
+ <param pos="0" name="service.product" value="OpenSSH"/>
606
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
607
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
608
+ <param pos="0" name="os.family" value="Linux"/>
609
+ <param pos="0" name="os.product" value="Linux"/>
610
+ <param pos="0" name="os.version" value="6.04"/>
611
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
612
+ </fingerprint>
613
+ <fingerprint pattern="^OpenSSH_(4\.3p2) (Debian-8ubuntu\d+(?:\.\d+)?)$">
614
+ <description>OpenSSH running on Ubuntu 7.04</description>
615
+ <example service.version="4.3p2" openssh.comment="Debian-8ubuntu1.4">OpenSSH_4.3p2 Debian-8ubuntu1.4</example>
616
+ <param pos="1" name="service.version"/>
617
+ <param pos="2" name="openssh.comment"/>
618
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
619
+ <param pos="0" name="service.family" value="OpenSSH"/>
620
+ <param pos="0" name="service.product" value="OpenSSH"/>
621
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
622
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
623
+ <param pos="0" name="os.family" value="Linux"/>
624
+ <param pos="0" name="os.product" value="Linux"/>
625
+ <param pos="0" name="os.version" value="7.04"/>
626
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
627
+ </fingerprint>
628
+ <fingerprint pattern="^OpenSSH_(4\.6p1) (Debian-5ubuntu\d+(?:\.\d+)?)$">
629
+ <description>OpenSSH running on Ubuntu 7.10</description>
630
+ <example service.version="4.6p1" openssh.comment="Debian-5ubuntu0.2">OpenSSH_4.6p1 Debian-5ubuntu0.2</example>
631
+ <example>OpenSSH_4.6p1 Debian-5ubuntu0.5</example>
632
+ <example>OpenSSH_4.6p1 Debian-5ubuntu0.6</example>
633
+ <example>OpenSSH_4.6p1 Debian-5ubuntu0</example>
634
+ <param pos="1" name="service.version"/>
635
+ <param pos="2" name="openssh.comment"/>
636
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
637
+ <param pos="0" name="service.family" value="OpenSSH"/>
638
+ <param pos="0" name="service.product" value="OpenSSH"/>
639
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
640
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
641
+ <param pos="0" name="os.family" value="Linux"/>
642
+ <param pos="0" name="os.product" value="Linux"/>
643
+ <param pos="0" name="os.version" value="7.10"/>
644
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
645
+ </fingerprint>
646
+ <fingerprint pattern="^OpenSSH_(4\.7p1) (Debian-8ubuntu\d+(?:\.\d+)?)$">
647
+ <description>OpenSSH running on Ubuntu 8.04</description>
648
+ <example service.version="4.7p1" openssh.comment="Debian-8ubuntu1.2">OpenSSH_4.7p1 Debian-8ubuntu1.2</example>
649
+ <example service.version="4.7p1" openssh.comment="Debian-8ubuntu3">OpenSSH_4.7p1 Debian-8ubuntu3</example>
650
+ <param pos="1" name="service.version"/>
651
+ <param pos="2" name="openssh.comment"/>
652
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
653
+ <param pos="0" name="service.family" value="OpenSSH"/>
654
+ <param pos="0" name="service.product" value="OpenSSH"/>
655
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
656
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
657
+ <param pos="0" name="os.family" value="Linux"/>
658
+ <param pos="0" name="os.product" value="Linux"/>
659
+ <param pos="0" name="os.version" value="8.04"/>
660
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
661
+ </fingerprint>
662
+ <fingerprint pattern="^OpenSSH_(5\.1p1) (Debian-3ubuntu\d+(?:\.\d+)?)$">
663
+ <description>OpenSSH running on Ubuntu 8.10</description>
664
+ <example service.version="5.1p1" openssh.comment="Debian-3ubuntu1">OpenSSH_5.1p1 Debian-3ubuntu1</example>
665
+ <param pos="1" name="service.version"/>
666
+ <param pos="2" name="openssh.comment"/>
667
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
668
+ <param pos="0" name="service.family" value="OpenSSH"/>
669
+ <param pos="0" name="service.product" value="OpenSSH"/>
670
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
671
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
672
+ <param pos="0" name="os.family" value="Linux"/>
673
+ <param pos="0" name="os.product" value="Linux"/>
674
+ <param pos="0" name="os.version" value="8.10"/>
675
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
676
+ </fingerprint>
677
+ <fingerprint pattern="^OpenSSH_(5\.1p1) (Debian-5ubuntu\d+(?:\.\d+)?)$">
678
+ <description>OpenSSH running on Ubuntu 9.04</description>
679
+ <example service.version="5.1p1" openssh.comment="Debian-5ubuntu1">OpenSSH_5.1p1 Debian-5ubuntu1</example>
680
+ <param pos="1" name="service.version"/>
681
+ <param pos="2" name="openssh.comment"/>
682
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
683
+ <param pos="0" name="service.family" value="OpenSSH"/>
684
+ <param pos="0" name="service.product" value="OpenSSH"/>
685
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
686
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
687
+ <param pos="0" name="os.family" value="Linux"/>
688
+ <param pos="0" name="os.product" value="Linux"/>
689
+ <param pos="0" name="os.version" value="9.04"/>
690
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
691
+ </fingerprint>
692
+ <fingerprint pattern="^OpenSSH_(5\.1p1) (Debian-6ubuntu\d+(?:\.\d+)?)$">
693
+ <description>OpenSSH running on Ubuntu 9.10</description>
694
+ <example service.version="5.1p1" openssh.comment="Debian-6ubuntu2">OpenSSH_5.1p1 Debian-6ubuntu2</example>
695
+ <param pos="1" name="service.version"/>
696
+ <param pos="2" name="openssh.comment"/>
697
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
698
+ <param pos="0" name="service.family" value="OpenSSH"/>
699
+ <param pos="0" name="service.product" value="OpenSSH"/>
700
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
701
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
702
+ <param pos="0" name="os.family" value="Linux"/>
703
+ <param pos="0" name="os.product" value="Linux"/>
704
+ <param pos="0" name="os.version" value="9.10"/>
705
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
706
+ </fingerprint>
707
+ <fingerprint pattern="^OpenSSH_(5\.3p1) (Debian-3ubuntu\d+(?:\.\d+)?)$">
708
+ <description>OpenSSH running on Ubuntu 10.04 (lucid)</description>
709
+ <example service.version="5.3p1" openssh.comment="Debian-3ubuntu3">OpenSSH_5.3p1 Debian-3ubuntu3</example>
710
+ <example service.version="5.3p1" openssh.comment="Debian-3ubuntu4">OpenSSH_5.3p1 Debian-3ubuntu4</example>
711
+ <example service.version="5.3p1" openssh.comment="Debian-3ubuntu5">OpenSSH_5.3p1 Debian-3ubuntu5</example>
712
+ <example service.version="5.3p1" openssh.comment="Debian-3ubuntu6">OpenSSH_5.3p1 Debian-3ubuntu6</example>
713
+ <example service.version="5.3p1" openssh.comment="Debian-3ubuntu7">OpenSSH_5.3p1 Debian-3ubuntu7</example>
714
+ <example service.version="5.3p1" openssh.comment="Debian-3ubuntu7.1">OpenSSH_5.3p1 Debian-3ubuntu7.1</example>
715
+ <param pos="1" name="service.version"/>
716
+ <param pos="2" name="openssh.comment"/>
717
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
718
+ <param pos="0" name="service.family" value="OpenSSH"/>
719
+ <param pos="0" name="service.product" value="OpenSSH"/>
720
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
721
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
722
+ <param pos="0" name="os.family" value="Linux"/>
723
+ <param pos="0" name="os.product" value="Linux"/>
724
+ <param pos="0" name="os.version" value="10.04"/>
725
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
726
+ </fingerprint>
727
+ <fingerprint pattern="^OpenSSH_(5\.5p1) (Debian-4ubuntu\d+(?:\.\d+)?)$">
728
+ <description>OpenSSH running on Ubuntu 10.10</description>
729
+ <example service.version="5.5p1" openssh.comment="Debian-4ubuntu4">OpenSSH_5.5p1 Debian-4ubuntu4</example>
730
+ <example service.version="5.5p1" openssh.comment="Debian-4ubuntu5">OpenSSH_5.5p1 Debian-4ubuntu5</example>
731
+ <example service.version="5.5p1" openssh.comment="Debian-4ubuntu6">OpenSSH_5.5p1 Debian-4ubuntu6</example>
732
+ <param pos="1" name="service.version"/>
733
+ <param pos="2" name="openssh.comment"/>
734
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
735
+ <param pos="0" name="service.family" value="OpenSSH"/>
736
+ <param pos="0" name="service.product" value="OpenSSH"/>
737
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
738
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
739
+ <param pos="0" name="os.family" value="Linux"/>
740
+ <param pos="0" name="os.product" value="Linux"/>
741
+ <param pos="0" name="os.version" value="10.10"/>
742
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
743
+ </fingerprint>
744
+ <fingerprint pattern="^OpenSSH_(5\.8p1) (Debian-1ubuntu\d(?:\.\d)?)$">
745
+ <description>OpenSSH running on Ubuntu 11.04</description>
746
+ <example service.version="5.8p1" openssh.comment="Debian-1ubuntu3">OpenSSH_5.8p1 Debian-1ubuntu3</example>
747
+ <param pos="1" name="service.version"/>
748
+ <param pos="2" name="openssh.comment"/>
749
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
750
+ <param pos="0" name="service.family" value="OpenSSH"/>
751
+ <param pos="0" name="service.product" value="OpenSSH"/>
752
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
753
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
754
+ <param pos="0" name="os.family" value="Linux"/>
755
+ <param pos="0" name="os.product" value="Linux"/>
756
+ <param pos="0" name="os.version" value="11.04"/>
757
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
758
+ </fingerprint>
759
+ <fingerprint pattern="^OpenSSH_(5\.8p1) (Debian-7ubuntu\d(?:\.\d)?)$">
760
+ <description>OpenSSH running on Ubuntu 11.10</description>
761
+ <example service.version="5.8p1" openssh.comment="Debian-7ubuntu1">OpenSSH_5.8p1 Debian-7ubuntu1</example>
762
+ <param pos="1" name="service.version"/>
763
+ <param pos="2" name="openssh.comment"/>
764
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
765
+ <param pos="0" name="service.family" value="OpenSSH"/>
766
+ <param pos="0" name="service.product" value="OpenSSH"/>
767
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
768
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
769
+ <param pos="0" name="os.family" value="Linux"/>
770
+ <param pos="0" name="os.product" value="Linux"/>
771
+ <param pos="0" name="os.version" value="11.10"/>
772
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
773
+ </fingerprint>
774
+ <fingerprint pattern="^OpenSSH_(5\.9p1) (Debian-5ubuntu\d(?:\.\d)?)$">
775
+ <description>OpenSSH running on Ubuntu 12.04</description>
776
+ <example service.version="5.9p1" openssh.comment="Debian-5ubuntu1">OpenSSH_5.9p1 Debian-5ubuntu1</example>
777
+ <example service.version="5.9p1" openssh.comment="Debian-5ubuntu1.4">OpenSSH_5.9p1 Debian-5ubuntu1.4</example>
778
+ <param pos="1" name="service.version"/>
779
+ <param pos="2" name="openssh.comment"/>
780
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
781
+ <param pos="0" name="service.family" value="OpenSSH"/>
782
+ <param pos="0" name="service.product" value="OpenSSH"/>
783
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
784
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
785
+ <param pos="0" name="os.family" value="Linux"/>
786
+ <param pos="0" name="os.product" value="Linux"/>
787
+ <param pos="0" name="os.version" value="12.04"/>
788
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
789
+ </fingerprint>
790
+ <fingerprint pattern="^OpenSSH_(6\.0p1) (Debian-3ubuntu\d(?:\.\d)?)$">
791
+ <description>OpenSSH running on Ubuntu 12.10</description>
792
+ <example service.version="6.0p1" openssh.comment="Debian-3ubuntu1">OpenSSH_6.0p1 Debian-3ubuntu1</example>
793
+ <example>OpenSSH_6.0p1 Debian-3ubuntu1.2</example>
794
+ <param pos="1" name="service.version"/>
795
+ <param pos="2" name="openssh.comment"/>
796
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
797
+ <param pos="0" name="service.family" value="OpenSSH"/>
798
+ <param pos="0" name="service.product" value="OpenSSH"/>
799
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
800
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
801
+ <param pos="0" name="os.family" value="Linux"/>
802
+ <param pos="0" name="os.product" value="Linux"/>
803
+ <param pos="0" name="os.version" value="12.10"/>
804
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
805
+ </fingerprint>
806
+ <fingerprint pattern="^OpenSSH_(6\.1p1) (Debian-4)$">
807
+ <description>OpenSSH running on Ubuntu 13.04</description>
808
+ <example service.version="6.1p1" openssh.comment="Debian-4">OpenSSH_6.1p1 Debian-4</example>
809
+ <param pos="1" name="service.version"/>
810
+ <param pos="2" name="openssh.comment"/>
811
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
812
+ <param pos="0" name="service.family" value="OpenSSH"/>
813
+ <param pos="0" name="service.product" value="OpenSSH"/>
814
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
815
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
816
+ <param pos="0" name="os.family" value="Linux"/>
817
+ <param pos="0" name="os.product" value="Linux"/>
818
+ <param pos="0" name="os.version" value="13.04"/>
819
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
820
+ </fingerprint>
821
+ <fingerprint pattern="^OpenSSH_(6\.2p2) (Ubuntu-6unbuntu\d(?:\.\d)?)$">
822
+ <description>OpenSSH running on Ubuntu 13.10</description>
823
+ <example service.version="6.2p2" openssh.comment="Ubuntu-6unbuntu0.4">OpenSSH_6.2p2 Ubuntu-6unbuntu0.4</example>
824
+ <param pos="1" name="service.version"/>
825
+ <param pos="2" name="openssh.comment"/>
826
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
827
+ <param pos="0" name="service.family" value="OpenSSH"/>
828
+ <param pos="0" name="service.product" value="OpenSSH"/>
829
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
830
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
831
+ <param pos="0" name="os.family" value="Linux"/>
832
+ <param pos="0" name="os.product" value="Linux"/>
833
+ <param pos="0" name="os.version" value="13.10"/>
834
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
835
+ </fingerprint>
836
+ <fingerprint pattern="^OpenSSH_(\d+\.\d+(?:\.\d+)?(?:p\d+)?)[_|-](hpn\d+v\d+)$">
837
+ <description>OpenSSH with HPN patches</description>
838
+ <example service.version="6.1" openssh.comment="hpn13v11">OpenSSH_6.1_hpn13v11</example>
839
+ <example service.version="5.8p1" openssh.comment="hpn13v11">OpenSSH_5.8p1-hpn13v11</example>
840
+ <example service.version="5.8p1" openssh.comment="hpn14v9">OpenSSH_5.8p1-hpn14v9</example>
841
+ <param pos="1" name="service.version"/>
842
+ <param pos="2" name="openssh.comment"/>
843
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
844
+ <param pos="0" name="service.family" value="OpenSSH"/>
845
+ <param pos="0" name="service.product" value="OpenSSH"/>
846
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
847
+ </fingerprint>
848
+ <fingerprint pattern="^OpenSSH_(6\.6(?:\.\d)?p1) (Ubuntu-2ubuntu\d+(?:\.\d+)?)$">
849
+ <description>OpenSSH running on Ubuntu 14.04</description>
850
+ <example service.version="6.6p1" openssh.comment="Ubuntu-2ubuntu1">OpenSSH_6.6p1 Ubuntu-2ubuntu1</example>
851
+ <example service.version="6.6.1p1" openssh.comment="Ubuntu-2ubuntu2">OpenSSH_6.6.1p1 Ubuntu-2ubuntu2</example>
852
+ <param pos="1" name="service.version"/>
853
+ <param pos="2" name="openssh.comment"/>
854
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
855
+ <param pos="0" name="service.family" value="OpenSSH"/>
856
+ <param pos="0" name="service.product" value="OpenSSH"/>
857
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
858
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
859
+ <param pos="0" name="os.family" value="Linux"/>
860
+ <param pos="0" name="os.product" value="Linux"/>
861
+ <param pos="0" name="os.version" value="14.04"/>
862
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
863
+ </fingerprint>
864
+ <fingerprint pattern="^OpenSSH_(6\.6\.1p1) (Ubuntu-8)$">
865
+ <description>OpenSSH running on Ubuntu 14.10</description>
866
+ <example service.version="6.6.1p1" openssh.comment="Ubuntu-8">OpenSSH_6.6.1p1 Ubuntu-8</example>
867
+ <param pos="1" name="service.version"/>
868
+ <param pos="2" name="openssh.comment"/>
869
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
870
+ <param pos="0" name="service.family" value="OpenSSH"/>
871
+ <param pos="0" name="service.product" value="OpenSSH"/>
872
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
873
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
874
+ <param pos="0" name="os.family" value="Linux"/>
875
+ <param pos="0" name="os.product" value="Linux"/>
876
+ <param pos="0" name="os.version" value="14.10"/>
877
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
878
+ </fingerprint>
879
+ <fingerprint pattern="^OpenSSH_(6\.7p1) (Ubuntu-5ubuntu\d(?:\.\d)?)$">
880
+ <description>OpenSSH running on Ubuntu 15.04 (vivid)</description>
881
+ <example service.version="6.7p1" openssh.comment="Ubuntu-5ubuntu1">OpenSSH_6.7p1 Ubuntu-5ubuntu1</example>
882
+ <param pos="1" name="service.version"/>
883
+ <param pos="2" name="openssh.comment"/>
884
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
885
+ <param pos="0" name="service.family" value="OpenSSH"/>
886
+ <param pos="0" name="service.product" value="OpenSSH"/>
887
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
888
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
889
+ <param pos="0" name="os.family" value="Linux"/>
890
+ <param pos="0" name="os.product" value="Linux"/>
891
+ <param pos="0" name="os.version" value="15.04"/>
892
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
893
+ </fingerprint>
894
+ <fingerprint pattern="^OpenSSH_(6\.9p1) (Ubuntu-2)$">
895
+ <description>OpenSSH running on Ubuntu 15.10</description>
896
+ <example service.version="6.9p1" openssh.comment="Ubuntu-2">OpenSSH_6.9p1 Ubuntu-2</example>
897
+ <param pos="1" name="service.version"/>
898
+ <param pos="2" name="openssh.comment"/>
899
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
900
+ <param pos="0" name="service.family" value="OpenSSH"/>
901
+ <param pos="0" name="service.product" value="OpenSSH"/>
902
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
903
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
904
+ <param pos="0" name="os.family" value="Linux"/>
905
+ <param pos="0" name="os.product" value="Linux"/>
906
+ <param pos="0" name="os.version" value="15.10"/>
907
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
908
+ </fingerprint>
909
+ <fingerprint pattern="^OpenSSH_(7\.2p2) (Ubuntu-4ubuntu\d(?:\.\d)?)$">
910
+ <description>OpenSSH running on Ubuntu 16.04 (vivid)</description>
911
+ <example service.version="7.2p2" openssh.comment="Ubuntu-4ubuntu2.7">OpenSSH_7.2p2 Ubuntu-4ubuntu2.7</example>
912
+ <param pos="1" name="service.version"/>
913
+ <param pos="2" name="openssh.comment"/>
914
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
915
+ <param pos="0" name="service.family" value="OpenSSH"/>
916
+ <param pos="0" name="service.product" value="OpenSSH"/>
917
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
918
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
919
+ <param pos="0" name="os.family" value="Linux"/>
920
+ <param pos="0" name="os.product" value="Linux"/>
921
+ <param pos="0" name="os.version" value="16.04"/>
922
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
923
+ </fingerprint>
924
+ <fingerprint pattern="^OpenSSH_(7\.3p1) (Ubuntu-1)$">
925
+ <description>OpenSSH running on Ubuntu 16.10</description>
926
+ <example service.version="7.3p1" openssh.comment="Ubuntu-1">OpenSSH_7.3p1 Ubuntu-1</example>
927
+ <param pos="1" name="service.version"/>
928
+ <param pos="2" name="openssh.comment"/>
929
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
930
+ <param pos="0" name="service.family" value="OpenSSH"/>
931
+ <param pos="0" name="service.product" value="OpenSSH"/>
932
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
933
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
934
+ <param pos="0" name="os.family" value="Linux"/>
935
+ <param pos="0" name="os.product" value="Linux"/>
936
+ <param pos="0" name="os.version" value="16.10"/>
937
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
938
+ </fingerprint>
939
+ <fingerprint pattern="^OpenSSH_(7\.4p1) (Ubuntu-10)$">
940
+ <description>OpenSSH running on Ubuntu 17.04</description>
941
+ <example service.version="7.4p1" openssh.comment="Ubuntu-10">OpenSSH_7.4p1 Ubuntu-10</example>
942
+ <param pos="1" name="service.version"/>
943
+ <param pos="2" name="openssh.comment"/>
944
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
945
+ <param pos="0" name="service.family" value="OpenSSH"/>
946
+ <param pos="0" name="service.product" value="OpenSSH"/>
947
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
948
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
949
+ <param pos="0" name="os.family" value="Linux"/>
950
+ <param pos="0" name="os.product" value="Linux"/>
951
+ <param pos="0" name="os.version" value="17.04"/>
952
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
953
+ </fingerprint>
954
+ <fingerprint pattern="^OpenSSH_(7\.5p1) (Ubuntu-10ubuntu\d(?:\.\d)?)$">
955
+ <description>OpenSSH running on Ubuntu 17.10</description>
956
+ <example service.version="7.5p1" openssh.comment="Ubuntu-10ubuntu0.1">OpenSSH_7.5p1 Ubuntu-10ubuntu0.1</example>
957
+ <param pos="1" name="service.version"/>
958
+ <param pos="2" name="openssh.comment"/>
959
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
960
+ <param pos="0" name="service.family" value="OpenSSH"/>
961
+ <param pos="0" name="service.product" value="OpenSSH"/>
962
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
963
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
964
+ <param pos="0" name="os.family" value="Linux"/>
965
+ <param pos="0" name="os.product" value="Linux"/>
966
+ <param pos="0" name="os.version" value="17.10"/>
967
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
968
+ </fingerprint>
969
+ <fingerprint pattern="^OpenSSH_(7\.6p1) (Ubuntu-4ubuntu\d(?:\.\d)?)$">
970
+ <description>OpenSSH running on Ubuntu 18.04</description>
971
+ <example service.version="7.6p1" openssh.comment="Ubuntu-4ubuntu0.3">OpenSSH_7.6p1 Ubuntu-4ubuntu0.3</example>
972
+ <param pos="1" name="service.version"/>
973
+ <param pos="2" name="openssh.comment"/>
974
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
975
+ <param pos="0" name="service.family" value="OpenSSH"/>
976
+ <param pos="0" name="service.product" value="OpenSSH"/>
977
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
978
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
979
+ <param pos="0" name="os.family" value="Linux"/>
980
+ <param pos="0" name="os.product" value="Linux"/>
981
+ <param pos="0" name="os.version" value="18.04"/>
982
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
983
+ </fingerprint>
984
+ <fingerprint pattern="^OpenSSH_(7\.7p1) (Ubuntu-4)$">
985
+ <description>OpenSSH running on Ubuntu 18.10</description>
986
+ <example service.version="7.7p1" openssh.comment="Ubuntu-4">OpenSSH_7.7p1 Ubuntu-4</example>
987
+ <param pos="1" name="service.version"/>
988
+ <param pos="2" name="openssh.comment"/>
989
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
990
+ <param pos="0" name="service.family" value="OpenSSH"/>
991
+ <param pos="0" name="service.product" value="OpenSSH"/>
992
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
993
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
994
+ <param pos="0" name="os.family" value="Linux"/>
995
+ <param pos="0" name="os.product" value="Linux"/>
996
+ <param pos="0" name="os.version" value="18.10"/>
997
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
998
+ </fingerprint>
999
+ <fingerprint pattern="^OpenSSH_(7\.9p1) (Ubuntu-10)$">
1000
+ <description>OpenSSH running on Ubuntu 19.04</description>
1001
+ <example service.version="7.9p1" openssh.comment="Ubuntu-10">OpenSSH_7.9p1 Ubuntu-10</example>
1002
+ <param pos="1" name="service.version"/>
1003
+ <param pos="2" name="openssh.comment"/>
1004
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1005
+ <param pos="0" name="service.family" value="OpenSSH"/>
1006
+ <param pos="0" name="service.product" value="OpenSSH"/>
1007
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1008
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
1009
+ <param pos="0" name="os.family" value="Linux"/>
1010
+ <param pos="0" name="os.product" value="Linux"/>
1011
+ <param pos="0" name="os.version" value="19.04"/>
1012
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
1013
+ </fingerprint>
1014
+ <fingerprint pattern="^OpenSSH_(8\.0p1) (Ubuntu-6build1)$">
1015
+ <description>OpenSSH running on Ubuntu 19.10</description>
1016
+ <example service.version="8.0p1" openssh.comment="Ubuntu-6build1">OpenSSH_8.0p1 Ubuntu-6build1</example>
1017
+ <param pos="1" name="service.version"/>
1018
+ <param pos="2" name="openssh.comment"/>
1019
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1020
+ <param pos="0" name="service.family" value="OpenSSH"/>
1021
+ <param pos="0" name="service.product" value="OpenSSH"/>
1022
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1023
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
1024
+ <param pos="0" name="os.family" value="Linux"/>
1025
+ <param pos="0" name="os.product" value="Linux"/>
1026
+ <param pos="0" name="os.version" value="19.10"/>
1027
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
1028
+ </fingerprint>
1029
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Ubuntu-\d\d?)$">
1030
+ <description>OpenSSH running on Ubuntu (unknown release)</description>
1031
+ <example service.version="7.6p1" openssh.comment="Ubuntu-2">OpenSSH_7.6p1 Ubuntu-2</example>
1032
+ <param pos="1" name="service.version"/>
1033
+ <param pos="2" name="openssh.comment"/>
1034
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1035
+ <param pos="0" name="service.family" value="OpenSSH"/>
1036
+ <param pos="0" name="service.product" value="OpenSSH"/>
1037
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1038
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
1039
+ <param pos="0" name="os.family" value="Linux"/>
1040
+ <param pos="0" name="os.product" value="Linux"/>
1041
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
1042
+ </fingerprint>
1043
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+((?:Debian|Ubuntu).+ubuntu.*)$">
1044
+ <description>OpenSSH running on Ubuntu</description>
1045
+ <example service.version="7.2p3" openssh.comment="Ubuntu-4ubuntu2.2">OpenSSH_7.2p3 Ubuntu-4ubuntu2.2</example>
1046
+ <param pos="1" name="service.version"/>
1047
+ <param pos="2" name="openssh.comment"/>
1048
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1049
+ <param pos="0" name="service.family" value="OpenSSH"/>
1050
+ <param pos="0" name="service.product" value="OpenSSH"/>
1051
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1052
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
1053
+ <param pos="0" name="os.family" value="Linux"/>
1054
+ <param pos="0" name="os.product" value="Linux"/>
1055
+ <param pos="0" name="os.certainty" value="0.75"/>
1056
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
1057
+ </fingerprint>
1058
+ <!-- Debian -->
1059
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian.+woody.*)$">
1060
+ <description>OpenSSH running on Debian 3.0 (woody)</description>
1061
+ <example service.version="3.4p1" openssh.comment="Debian 1:3.4p1-1.woody.3">OpenSSH_3.4p1 Debian 1:3.4p1-1.woody.3</example>
1062
+ <param pos="1" name="service.version"/>
1063
+ <param pos="2" name="openssh.comment"/>
1064
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1065
+ <param pos="0" name="service.family" value="OpenSSH"/>
1066
+ <param pos="0" name="service.product" value="OpenSSH"/>
1067
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1068
+ <param pos="0" name="os.vendor" value="Debian"/>
1069
+ <param pos="0" name="os.family" value="Linux"/>
1070
+ <param pos="0" name="os.product" value="Linux"/>
1071
+ <param pos="0" name="os.version" value="3.0"/>
1072
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1073
+ </fingerprint>
1074
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian.+sarge.*)$">
1075
+ <description>OpenSSH running on Debian 3.1 (sarge)</description>
1076
+ <example service.version="3.8.1p1" openssh.comment="Debian-8.sarge.4">OpenSSH_3.8.1p1 Debian-8.sarge.4</example>
1077
+ <param pos="1" name="service.version"/>
1078
+ <param pos="2" name="openssh.comment"/>
1079
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1080
+ <param pos="0" name="service.family" value="OpenSSH"/>
1081
+ <param pos="0" name="service.product" value="OpenSSH"/>
1082
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1083
+ <param pos="0" name="os.vendor" value="Debian"/>
1084
+ <param pos="0" name="os.family" value="Linux"/>
1085
+ <param pos="0" name="os.product" value="Linux"/>
1086
+ <param pos="0" name="os.version" value="3.1"/>
1087
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1088
+ </fingerprint>
1089
+ <fingerprint pattern="^OpenSSH_(4\.3p2) (Debian-9.*)$">
1090
+ <description>OpenSSH running on Debian 4.0 (etch)</description>
1091
+ <example service.version="4.3p2" openssh.comment="Debian-9">OpenSSH_4.3p2 Debian-9</example>
1092
+ <example service.version="4.3p2" openssh.comment="Debian-9etch3">OpenSSH_4.3p2 Debian-9etch3</example>
1093
+ <param pos="1" name="service.version"/>
1094
+ <param pos="2" name="openssh.comment"/>
1095
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1096
+ <param pos="0" name="service.family" value="OpenSSH"/>
1097
+ <param pos="0" name="service.product" value="OpenSSH"/>
1098
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1099
+ <param pos="0" name="os.vendor" value="Debian"/>
1100
+ <param pos="0" name="os.family" value="Linux"/>
1101
+ <param pos="0" name="os.product" value="Linux"/>
1102
+ <param pos="0" name="os.version" value="4.0"/>
1103
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1104
+ </fingerprint>
1105
+ <fingerprint pattern="^OpenSSH_(5\.1p1) (Debian-5)$">
1106
+ <description>OpenSSH running on Debian 5.0 (also 5.10)</description>
1107
+ <example service.version="5.1p1" openssh.comment="Debian-5">OpenSSH_5.1p1 Debian-5</example>
1108
+ <param pos="1" name="service.version"/>
1109
+ <param pos="2" name="openssh.comment"/>
1110
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1111
+ <param pos="0" name="service.family" value="OpenSSH"/>
1112
+ <param pos="0" name="service.product" value="OpenSSH"/>
1113
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1114
+ <param pos="0" name="os.vendor" value="Debian"/>
1115
+ <param pos="0" name="os.family" value="Linux"/>
1116
+ <param pos="0" name="os.product" value="Linux"/>
1117
+ <param pos="0" name="os.version" value="5.0"/>
1118
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1119
+ </fingerprint>
1120
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-\d+[+~]squeeze.*)$">
1121
+ <description>OpenSSH running on Debian 6.0 (squeeze)</description>
1122
+ <example service.version="5.5p1" openssh.comment="Debian-6+squeeze4">OpenSSH_5.5p1 Debian-6+squeeze4</example>
1123
+ <example service.version="5.5p1" openssh.comment="Debian-26+squeeze7">OpenSSH_5.5p1 Debian-26+squeeze7</example>
1124
+ <example service.version="5.8p1" openssh.comment="Debian-4~squeeze+1">OpenSSH_5.8p1 Debian-4~squeeze+1</example>
1125
+ <param pos="1" name="service.version"/>
1126
+ <param pos="2" name="openssh.comment"/>
1127
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1128
+ <param pos="0" name="service.family" value="OpenSSH"/>
1129
+ <param pos="0" name="service.product" value="OpenSSH"/>
1130
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1131
+ <param pos="0" name="os.vendor" value="Debian"/>
1132
+ <param pos="0" name="os.family" value="Linux"/>
1133
+ <param pos="0" name="os.product" value="Linux"/>
1134
+ <param pos="0" name="os.version" value="6.0"/>
1135
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1136
+ </fingerprint>
1137
+ <fingerprint pattern="^OpenSSH_(5\.5p1) (Debian-6)$">
1138
+ <description>OpenSSH running on Debian 6.0 (w/o squeeze in banner)</description>
1139
+ <example service.version="5.5p1" openssh.comment="Debian-6">OpenSSH_5.5p1 Debian-6</example>
1140
+ <param pos="1" name="service.version"/>
1141
+ <param pos="2" name="openssh.comment"/>
1142
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1143
+ <param pos="0" name="service.family" value="OpenSSH"/>
1144
+ <param pos="0" name="service.product" value="OpenSSH"/>
1145
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1146
+ <param pos="0" name="os.vendor" value="Debian"/>
1147
+ <param pos="0" name="os.family" value="Linux"/>
1148
+ <param pos="0" name="os.product" value="Linux"/>
1149
+ <param pos="0" name="os.version" value="6.0"/>
1150
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1151
+ </fingerprint>
1152
+ <!-- More specific than and should preceed the 7.0 match -->
1153
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-4\+deb7u2)$">
1154
+ <description>OpenSSH running on Debian 7.8 (wheezy)</description>
1155
+ <example service.version="6.0p1" openssh.comment="Debian-4+deb7u2">OpenSSH_6.0p1 Debian-4+deb7u2</example>
1156
+ <param pos="1" name="service.version"/>
1157
+ <param pos="2" name="openssh.comment"/>
1158
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1159
+ <param pos="0" name="service.family" value="OpenSSH"/>
1160
+ <param pos="0" name="service.product" value="OpenSSH"/>
1161
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1162
+ <param pos="0" name="os.vendor" value="Debian"/>
1163
+ <param pos="0" name="os.family" value="Linux"/>
1164
+ <param pos="0" name="os.product" value="Linux"/>
1165
+ <param pos="0" name="os.version" value="7.8"/>
1166
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1167
+ </fingerprint>
1168
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-4(?:\+deb7u\d+)?)$">
1169
+ <description>OpenSSH running on Debian 7.x (wheezy)</description>
1170
+ <example service.version="6.0p1" openssh.comment="Debian-4">OpenSSH_6.0p1 Debian-4</example>
1171
+ <example service.version="6.0p1" openssh.comment="Debian-4+deb7u1">OpenSSH_6.0p1 Debian-4+deb7u1</example>
1172
+ <param pos="1" name="service.version"/>
1173
+ <param pos="2" name="openssh.comment"/>
1174
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1175
+ <param pos="0" name="service.family" value="OpenSSH"/>
1176
+ <param pos="0" name="service.product" value="OpenSSH"/>
1177
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1178
+ <param pos="0" name="os.vendor" value="Debian"/>
1179
+ <param pos="0" name="os.family" value="Linux"/>
1180
+ <param pos="0" name="os.product" value="Linux"/>
1181
+ <param pos="0" name="os.version" value="7.0"/>
1182
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1183
+ </fingerprint>
1184
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-\d~bpo7\d?\+\d+)$">
1185
+ <description>OpenSSH backport running on Debian 7.x (wheezy)</description>
1186
+ <example service.version="6.6.1p1" openssh.comment="Debian-4~bpo70+1">OpenSSH_6.6.1p1 Debian-4~bpo70+1</example>
1187
+ <example service.version="6.4p1" openssh.comment="Debian-1~bpo70+2">OpenSSH_6.4p1 Debian-1~bpo70+2</example>
1188
+ <param pos="1" name="service.version"/>
1189
+ <param pos="2" name="openssh.comment"/>
1190
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1191
+ <param pos="0" name="service.family" value="OpenSSH"/>
1192
+ <param pos="0" name="service.product" value="OpenSSH"/>
1193
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1194
+ <param pos="0" name="os.vendor" value="Debian"/>
1195
+ <param pos="0" name="os.family" value="Linux"/>
1196
+ <param pos="0" name="os.product" value="Linux"/>
1197
+ <param pos="0" name="os.version" value="7.0"/>
1198
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1199
+ </fingerprint>
1200
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-5\+deb8u\d+.*)$">
1201
+ <description>OpenSSH running on Debian 8.x (jessie)</description>
1202
+ <example service.version="6.7p1" openssh.comment="Debian-5+deb8u2">OpenSSH_6.7p1 Debian-5+deb8u2</example>
1203
+ <example service.version="6.7p1" openssh.comment="Debian-5+deb8u1~ui80+7">OpenSSH_6.7p1 Debian-5+deb8u1~ui80+7</example>
1204
+ <example service.version="6.7p1" openssh.comment="Debian-5+deb8u8">OpenSSH_6.7p1 Debian-5+deb8u8</example>
1205
+ <param pos="1" name="service.version"/>
1206
+ <param pos="2" name="openssh.comment"/>
1207
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1208
+ <param pos="0" name="service.family" value="OpenSSH"/>
1209
+ <param pos="0" name="service.product" value="OpenSSH"/>
1210
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1211
+ <param pos="0" name="os.vendor" value="Debian"/>
1212
+ <param pos="0" name="os.family" value="Linux"/>
1213
+ <param pos="0" name="os.product" value="Linux"/>
1214
+ <param pos="0" name="os.version" value="8.0"/>
1215
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1216
+ </fingerprint>
1217
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-\d\d?\+deb9u\d+)$">
1218
+ <description>OpenSSH running on Debian 9.x (stretch)</description>
1219
+ <example service.version="7.4p1" openssh.comment="Debian-10+deb9u1">OpenSSH_7.4p1 Debian-10+deb9u1</example>
1220
+ <example service.version="6.0p1" openssh.comment="Debian-4+deb9u6">OpenSSH_6.0p1 Debian-4+deb9u6</example>
1221
+ <param pos="1" name="service.version"/>
1222
+ <param pos="2" name="openssh.comment"/>
1223
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1224
+ <param pos="0" name="service.family" value="OpenSSH"/>
1225
+ <param pos="0" name="service.product" value="OpenSSH"/>
1226
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1227
+ <param pos="0" name="os.vendor" value="Debian"/>
1228
+ <param pos="0" name="os.family" value="Linux"/>
1229
+ <param pos="0" name="os.product" value="Linux"/>
1230
+ <param pos="0" name="os.version" value="9.0"/>
1231
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1232
+ </fingerprint>
1233
+ <fingerprint pattern="^OpenSSH_(7\.9p1) (Debian-10|Debian-\d\d?\+deb10u\d+)$">
1234
+ <description>OpenSSH running on Debian 10.x (buster)</description>
1235
+ <example service.version="7.9p1" openssh.comment="Debian-10">OpenSSH_7.9p1 Debian-10</example>
1236
+ <example service.version="7.9p1" openssh.comment="Debian-10+deb10u6">OpenSSH_7.9p1 Debian-10+deb10u6</example>
1237
+ <param pos="1" name="service.version"/>
1238
+ <param pos="2" name="openssh.comment"/>
1239
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1240
+ <param pos="0" name="service.family" value="OpenSSH"/>
1241
+ <param pos="0" name="service.product" value="OpenSSH"/>
1242
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1243
+ <param pos="0" name="os.vendor" value="Debian"/>
1244
+ <param pos="0" name="os.family" value="Linux"/>
1245
+ <param pos="0" name="os.product" value="Linux"/>
1246
+ <param pos="0" name="os.version" value="10.0"/>
1247
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1248
+ </fingerprint>
1249
+ <fingerprint pattern="^OpenSSH_(8\.1p1) (Debian-1|Debian-\d\d?\+deb11u\d+)$">
1250
+ <description>OpenSSH running on Debian 11.x (bullseye)</description>
1251
+ <example service.version="8.1p1" openssh.comment="Debian-1">OpenSSH_8.1p1 Debian-1</example>
1252
+ <example service.version="8.1p1" openssh.comment="Debian-1+deb11u1">OpenSSH_8.1p1 Debian-1+deb11u1</example>
1253
+ <param pos="1" name="service.version"/>
1254
+ <param pos="2" name="openssh.comment"/>
1255
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1256
+ <param pos="0" name="service.family" value="OpenSSH"/>
1257
+ <param pos="0" name="service.product" value="OpenSSH"/>
1258
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1259
+ <param pos="0" name="os.vendor" value="Debian"/>
1260
+ <param pos="0" name="os.family" value="Linux"/>
1261
+ <param pos="0" name="os.product" value="Linux"/>
1262
+ <param pos="0" name="os.version" value="11.0"/>
1263
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1264
+ </fingerprint>
1265
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-\d+(?:[~]?bpo[.]?\d+)?)$">
1266
+ <description>OpenSSH running on Debian (unknown release)</description>
1267
+ <example service.version="4.3p2" openssh.comment="Debian-5~bpo.1">OpenSSH_4.3p2 Debian-5~bpo.1</example>
1268
+ <example service.version="4.2p1" openssh.comment="Debian-4bpo1">OpenSSH_4.2p1 Debian-4bpo1</example>
1269
+ <example service.version="7.4p1" openssh.comment="Debian-10">OpenSSH_7.4p1 Debian-10</example>
1270
+ <param pos="1" name="service.version"/>
1271
+ <param pos="2" name="openssh.comment"/>
1272
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1273
+ <param pos="0" name="service.family" value="OpenSSH"/>
1274
+ <param pos="0" name="service.product" value="OpenSSH"/>
1275
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1276
+ <param pos="0" name="os.vendor" value="Debian"/>
1277
+ <param pos="0" name="os.family" value="Linux"/>
1278
+ <param pos="0" name="os.product" value="Linux"/>
1279
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
1280
+ </fingerprint>
1281
+ <!-- Raspbian -->
1282
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Raspbian-5\+deb8u\d+)$">
1283
+ <description>OpenSSH running on Raspbian (Debian 8 "Jessie" based)</description>
1284
+ <example service.version="6.7p1" openssh.comment="Raspbian-5+deb8u1">OpenSSH_6.7p1 Raspbian-5+deb8u1</example>
1285
+ <example service.version="6.7p1" openssh.comment="Raspbian-5+deb8u2">OpenSSH_6.7p1 Raspbian-5+deb8u2</example>
1286
+ <param pos="1" name="service.version"/>
1287
+ <param pos="2" name="openssh.comment"/>
1288
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1289
+ <param pos="0" name="service.family" value="OpenSSH"/>
1290
+ <param pos="0" name="service.product" value="OpenSSH"/>
1291
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1292
+ <param pos="0" name="os.vendor" value="Raspbian"/>
1293
+ <param pos="0" name="os.family" value="Linux"/>
1294
+ <param pos="0" name="os.product" value="Linux"/>
1295
+ <param pos="0" name="os.version" value="8.0"/>
1296
+ <param pos="0" name="hw.product" value="Raspberry Pi"/>
1297
+ </fingerprint>
1298
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Raspbian-\d\d?\+deb9u\d+)$">
1299
+ <description>OpenSSH running on Raspbian (Debian 9 "Stretch" based)</description>
1300
+ <example service.version="7.4p1" openssh.comment="Raspbian-10+deb9u1">OpenSSH_7.4p1 Raspbian-10+deb9u1</example>
1301
+ <example service.version="7.4p1" openssh.comment="Raspbian-9+deb9u1">OpenSSH_7.4p1 Raspbian-9+deb9u1</example>
1302
+ <param pos="1" name="service.version"/>
1303
+ <param pos="2" name="openssh.comment"/>
1304
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1305
+ <param pos="0" name="service.family" value="OpenSSH"/>
1306
+ <param pos="0" name="service.product" value="OpenSSH"/>
1307
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1308
+ <param pos="0" name="os.vendor" value="Raspbian"/>
1309
+ <param pos="0" name="os.family" value="Linux"/>
1310
+ <param pos="0" name="os.product" value="Linux"/>
1311
+ <param pos="0" name="os.version" value="9.0"/>
1312
+ <param pos="0" name="hw.product" value="Raspberry Pi"/>
1313
+ </fingerprint>
1314
+ <fingerprint pattern="^OpenSSH_(7\.9p1)\s+(Raspbian-(?:10|\d\d?\+deb10u\d+))$">
1315
+ <description>OpenSSH running on Raspbian (Debian 10 "Buster" based)</description>
1316
+ <example service.version="7.9p1" openssh.comment="Raspbian-10">OpenSSH_7.9p1 Raspbian-10</example>
1317
+ <example service.version="7.9p1" openssh.comment="Raspbian-10+deb10u1">OpenSSH_7.9p1 Raspbian-10+deb10u1</example>
1318
+ <param pos="1" name="service.version"/>
1319
+ <param pos="2" name="openssh.comment"/>
1320
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1321
+ <param pos="0" name="service.family" value="OpenSSH"/>
1322
+ <param pos="0" name="service.product" value="OpenSSH"/>
1323
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1324
+ <param pos="0" name="os.vendor" value="Raspbian"/>
1325
+ <param pos="0" name="os.family" value="Linux"/>
1326
+ <param pos="0" name="os.product" value="Linux"/>
1327
+ <param pos="0" name="os.version" value="10.0"/>
1328
+ <param pos="0" name="hw.product" value="Raspberry Pi"/>
1329
+ </fingerprint>
1330
+ <fingerprint pattern="^OpenSSH_(8\.1p1)\s+(Raspbian-(?:1|\d\d?\+deb11u\d+))$">
1331
+ <description>OpenSSH running on Raspbian (Debian 11 "Bullseye" based)</description>
1332
+ <example service.version="8.1p1" openssh.comment="Raspbian-1">OpenSSH_8.1p1 Raspbian-1</example>
1333
+ <example service.version="8.1p1" openssh.comment="Raspbian-1+deb11u1">OpenSSH_8.1p1 Raspbian-1+deb11u1</example>
1334
+ <param pos="1" name="service.version"/>
1335
+ <param pos="2" name="openssh.comment"/>
1336
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1337
+ <param pos="0" name="service.family" value="OpenSSH"/>
1338
+ <param pos="0" name="service.product" value="OpenSSH"/>
1339
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1340
+ <param pos="0" name="os.vendor" value="Raspbian"/>
1341
+ <param pos="0" name="os.family" value="Linux"/>
1342
+ <param pos="0" name="os.product" value="Linux"/>
1343
+ <param pos="0" name="os.version" value="11.0"/>
1344
+ <param pos="0" name="hw.product" value="Raspberry Pi"/>
1345
+ </fingerprint>
1346
+ <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Raspbian-\d\d?)$">
1347
+ <description>OpenSSH running on Raspbian (Debian, unknown release)</description>
1348
+ <example service.version="7.5p1" openssh.comment="Raspbian-10">OpenSSH_7.5p1 Raspbian-10</example>
1349
+ <example service.version="6.9p1" openssh.comment="Raspbian-3">OpenSSH_6.9p1 Raspbian-3</example>
1350
+ <param pos="1" name="service.version"/>
1351
+ <param pos="2" name="openssh.comment"/>
1352
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1353
+ <param pos="0" name="service.family" value="OpenSSH"/>
1354
+ <param pos="0" name="service.product" value="OpenSSH"/>
1355
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1356
+ <param pos="0" name="os.vendor" value="Raspbian"/>
1357
+ <param pos="0" name="os.family" value="Linux"/>
1358
+ <param pos="0" name="os.product" value="Linux"/>
1359
+ <param pos="0" name="hw.product" value="Raspberry Pi"/>
1360
+ </fingerprint>
1361
+ <!-- Miscellaneous -->
1362
+ <fingerprint pattern="^OpenSSH_(.*)\+(CAN-[0-9]{4}-[0-9]{4})$">
1363
+ <description>OpenSSH with CVE patch, as seen in Mac OS X</description>
1364
+ <example service.version="3.4p1" openssh.cvepatch="CAN-2004-0175">OpenSSH_3.4p1+CAN-2004-0175</example>
1365
+ <param pos="1" name="service.version"/>
1366
+ <param pos="2" name="openssh.cvepatch"/>
1367
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1368
+ <param pos="0" name="service.family" value="OpenSSH"/>
1369
+ <param pos="0" name="service.product" value="OpenSSH"/>
1370
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1371
+ <param pos="0" name="os.vendor" value="Apple"/>
1372
+ <param pos="0" name="os.family" value="Mac OS X"/>
1373
+ <param pos="0" name="os.product" value="Mac OS X"/>
1374
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:-"/>
1375
+ </fingerprint>
1376
+ <fingerprint pattern="^OpenSSH_(.*)_Mikrotik_v(.*)$">
1377
+ <description>OpenSSH on MikroTik</description>
1378
+ <example service.version="2.3.0" os.version="2.9">OpenSSH_2.3.0_Mikrotik_v2.9</example>
1379
+ <param pos="1" name="service.version"/>
1380
+ <param pos="2" name="os.version"/>
1381
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1382
+ <param pos="0" name="service.family" value="OpenSSH"/>
1383
+ <param pos="0" name="service.product" value="OpenSSH"/>
1384
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1385
+ <param pos="0" name="os.vendor" value="MikroTik"/>
1386
+ <param pos="0" name="os.device" value="Router"/>
1387
+ <param pos="0" name="os.family" value="RouterOS"/>
1388
+ <param pos="0" name="os.product" value="RouterOS"/>
1389
+ <param pos="0" name="os.cpe23" value="cpe:/o:mikrotik:routeros:{os.version}"/>
1390
+ </fingerprint>
1391
+ <fingerprint pattern="^OpenSSH_(.*)-HipServ$">
1392
+ <description>OpenSSH on HipServ</description>
1393
+ <example service.version="4.3">OpenSSH_4.3-HipServ</example>
1394
+ <param pos="1" name="service.version"/>
1395
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1396
+ <param pos="0" name="service.family" value="OpenSSH"/>
1397
+ <param pos="0" name="service.product" value="OpenSSH"/>
1398
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1399
+ <param pos="0" name="os.vendor" value="HipServ"/>
1400
+ <param pos="0" name="os.device" value="NAS"/>
1401
+ <param pos="0" name="os.family" value="Linux"/>
1402
+ <param pos="0" name="os.product" value="HipServ"/>
1403
+ </fingerprint>
1404
+ <fingerprint pattern="^OpenSSH_for_Windows_([\d.]+)$">
1405
+ <description>OpenSSH running on Windows</description>
1406
+ <example service.version="7.7">OpenSSH_for_Windows_7.7</example>
1407
+ <param pos="1" name="service.version"/>
1408
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1409
+ <param pos="0" name="service.family" value="OpenSSH"/>
1410
+ <param pos="0" name="service.product" value="OpenSSH"/>
1411
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1412
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1413
+ <param pos="0" name="os.family" value="Windows"/>
1414
+ <param pos="0" name="os.product" value="Windows"/>
1415
+ </fingerprint>
1416
+ <fingerprint pattern="^OpenSSH_(.*) in DesktopAuthority (?:.*)$">
1417
+ <description>DesktopAuthority SSH</description>
1418
+ <example service.version="3.8">OpenSSH_3.8 in DesktopAuthority 7.1.091</example>
1419
+ <param pos="1" name="service.version"/>
1420
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1421
+ <param pos="0" name="service.family" value="OpenSSH"/>
1422
+ <param pos="0" name="service.product" value="OpenSSH"/>
1423
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1424
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1425
+ <param pos="0" name="os.family" value="Windows"/>
1426
+ <param pos="0" name="os.product" value="Windows"/>
1427
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1428
+ </fingerprint>
1429
+ <fingerprint pattern="^OpenSSH_(\d+\.\d+(?:\.\d+)?(?:p\d+)?) ((?:PKIX\s+)?FIPS)$">
1430
+ <description>OpenSSH with a version and FIPS mode enabled</description>
1431
+ <example service.version="5.9" openssh.comment="FIPS">OpenSSH_5.9 FIPS</example>
1432
+ <example service.version="6.2" openssh.comment="PKIX FIPS">OpenSSH_6.2 PKIX FIPS</example>
1433
+ <example service.version="3.8.1p1" openssh.comment="FIPS">OpenSSH_3.8.1p1 FIPS</example>
1434
+ <param pos="1" name="service.version"/>
1435
+ <param pos="2" name="openssh.comment"/>
1436
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1437
+ <param pos="0" name="service.family" value="OpenSSH"/>
1438
+ <param pos="0" name="service.product" value="OpenSSH"/>
1439
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1440
+ </fingerprint>
1441
+ <fingerprint pattern="^OpenSSH_(\d+\.\d+(?:\.\d+)?(?:p\d+)?) *$">
1442
+ <description>OpenSSH with just a version, no comment by vendor</description>
1443
+ <example service.version="5.9p1">OpenSSH_5.9p1</example>
1444
+ <example service.version="5.9">OpenSSH_5.9</example>
1445
+ <example service.version="3.8.1p1">OpenSSH_3.8.1p1 </example>
1446
+ <example service.version="6.6.1">OpenSSH_6.6.1</example>
1447
+ <param pos="1" name="service.version"/>
1448
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1449
+ <param pos="0" name="service.family" value="OpenSSH"/>
1450
+ <param pos="0" name="service.product" value="OpenSSH"/>
1451
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1452
+ </fingerprint>
1453
+ <fingerprint pattern="^OpenSSH$">
1454
+ <description>OpenSSH w/o version or comment</description>
1455
+ <example>OpenSSH</example>
1456
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1457
+ <param pos="0" name="service.family" value="OpenSSH"/>
1458
+ <param pos="0" name="service.product" value="OpenSSH"/>
1459
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:-"/>
1460
+ </fingerprint>
1461
+ <!-- SSH-1.99-OpenSSH_4.3p2-4.cern-hpn-CERN-4.3p2-4.cern -->
1462
+ <!--<fingerprint pattern="^OpenSSH_?([^\s]*)\s*(.*)$">
1463
+ <description>Catch all for OpenSSH based SSH servers
1464
+ ******************** NOTE ********************
1465
+ Be sure to put any specific OpenSSH derivative
1466
+ checks above this block.
1467
+ ******************** NOTE ********************
1468
+ </description>
1469
+ <param pos="1" name="service.version"/>
1470
+ <param pos="2" name="openssh.comment"/>
1471
+ <param pos="0" name="service.vendor" value="OpenBSD"/>
1472
+ <param pos="0" name="service.family" value="OpenSSH"/>
1473
+ <param pos="0" name="service.product" value="OpenSSH"/>
1474
+ </fingerprint>-->
1475
+ <!-- TODO: Handle "vpn3" banners for Cisco 3000 VPN Concentrators (need example banners first) -->
1476
+ <fingerprint pattern="^Cisco-(.*)$">
1477
+ <description>Cisco SSH banner (could be IOS or PIX), The version always seems to be 1.25</description>
1478
+ <example service.version="1.25">Cisco-1.25</example>
1479
+ <param pos="1" name="service.version"/>
1480
+ <param pos="0" name="service.vendor" value="Cisco"/>
1481
+ <param pos="0" name="service.product" value="SSH"/>
1482
+ <param pos="0" name="os.vendor" value="Cisco"/>
1483
+ <param pos="0" name="os.product" value="IOS"/>
1484
+ <param pos="0" name="os.certainty" value="0.8"/>
1485
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:-"/>
1486
+ </fingerprint>
1487
+ <fingerprint pattern="^CISCO_WLC$">
1488
+ <description>SSH banner from a Cisco WLC (WLC)</description>
1489
+ <example>CISCO_WLC</example>
1490
+ <param pos="0" name="service.vendor" value="Cisco"/>
1491
+ <param pos="0" name="service.product" value="SSH"/>
1492
+ <param pos="0" name="os.vendor" value="Cisco"/>
1493
+ <param pos="0" name="os.product" value="Wireless Controller"/>
1494
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller:-"/>
1495
+ </fingerprint>
1496
+ <fingerprint pattern="(?i)^Cleo (\S+)/(\S+) SSH FTP server$">
1497
+ <description>Cleo networks Harmony, VLProxy, VLTrader, others</description>
1498
+ <example service.product="Harmony" service.version="5.5.0.3">Cleo Harmony/5.5.0.3 SSH FTP server</example>
1499
+ <example service.product="VLProxy" service.version="3.2">Cleo VLProxy/3.2 SSH FTP server</example>
1500
+ <param pos="0" name="service.vendor" value="Cleo"/>
1501
+ <param pos="1" name="service.product"/>
1502
+ <param pos="2" name="service.version"/>
1503
+ </fingerprint>
1504
+ <fingerprint pattern="^Sun_SSH_(.*)$">
1505
+ <description>Sun SSH banner</description>
1506
+ <example service.version="1.1">Sun_SSH_1.1</example>
1507
+ <param pos="1" name="service.version"/>
1508
+ <param pos="0" name="service.vendor" value="Sun"/>
1509
+ <param pos="0" name="service.product" value="SSH"/>
1510
+ <param pos="0" name="os.vendor" value="Sun"/>
1511
+ <param pos="0" name="os.family" value="Solaris"/>
1512
+ <param pos="0" name="os.product" value="Solaris"/>
1513
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:-"/>
1514
+ </fingerprint>
1515
+ <fingerprint pattern="^SSH Protocol Compatible Server SCS (.*)$">
1516
+ <description>Netscreen with version</description>
1517
+ <param pos="1" name="service.version"/>
1518
+ <param pos="0" name="service.vendor" value="Juniper"/>
1519
+ <param pos="0" name="service.family" value="NetScreen"/>
1520
+ <param pos="0" name="service.product" value="NetScreen"/>
1521
+ <param pos="0" name="os.vendor" value="Juniper"/>
1522
+ <param pos="0" name="os.device" value="Firewall"/>
1523
+ <param pos="0" name="os.family" value="ScreenOS"/>
1524
+ <param pos="0" name="os.product" value="ScreenOS"/>
1525
+ <param pos="0" name="os.cpe23" value="cpe:/o:juniper:screenos:-"/>
1526
+ </fingerprint>
1527
+ <fingerprint pattern="^NetScreen$">
1528
+ <description>Netscreen generic</description>
1529
+ <example>NetScreen</example>
1530
+ <param pos="0" name="service.vendor" value="Juniper"/>
1531
+ <param pos="0" name="service.family" value="NetScreen"/>
1532
+ <param pos="0" name="service.product" value="NetScreen"/>
1533
+ <param pos="0" name="os.vendor" value="Juniper"/>
1534
+ <param pos="0" name="os.device" value="Firewall"/>
1535
+ <param pos="0" name="os.family" value="ScreenOS"/>
1536
+ <param pos="0" name="os.product" value="ScreenOS"/>
1537
+ <param pos="0" name="os.cpe23" value="cpe:/o:juniper:screenos:-"/>
1538
+ </fingerprint>
1539
+ <fingerprint pattern="^HUAWEI-(?:[\d\.]+)$">
1540
+ <description>Huawei generic</description>
1541
+ <example>HUAWEI-1.5</example>
1542
+ <param pos="0" name="hw.vendor" value="Huawei"/>
1543
+ </fingerprint>
1544
+ <fingerprint pattern="^HUAWEI-UMG(\d+)">
1545
+ <description>Huawei Universal Media Gateway</description>
1546
+ <example hw.model="8900">HUAWEI-UMG8900</example>
1547
+ <param pos="0" name="hw.vendor" value="Huawei"/>
1548
+ <param pos="0" name="hw.product" value="Universal Media Gateway"/>
1549
+ <param pos="0" name="hw.device" value="Telecom"/>
1550
+ <param pos="1" name="hw.model"/>
1551
+ </fingerprint>
1552
+ <fingerprint pattern="^HUAWEI.VRP.([\d\.]+)$">
1553
+ <description>Huawei Versatile Routing Platform (VRP)</description>
1554
+ <example os.version="3.10" service.version="3.10">HUAWEI-VRP-3.10</example>
1555
+ <example os.version="8.0" service.version="8.0">HUAWEI_VRPV8.0</example>
1556
+ <param pos="0" name="service.vendor" value="Huawei"/>
1557
+ <param pos="0" name="service.family" value="VRP"/>
1558
+ <param pos="0" name="service.product" value="VRP"/>
1559
+ <param pos="1" name="service.version"/>
1560
+ <param pos="0" name="os.vendor" value="Huawei"/>
1561
+ <param pos="0" name="os.device" value="Router"/>
1562
+ <param pos="0" name="os.family" value="VRP"/>
1563
+ <param pos="0" name="os.product" value="VRP"/>
1564
+ <param pos="1" name="os.version"/>
1565
+ </fingerprint>
1566
+ <fingerprint pattern="^([\d.]+)[ _]sshlib:? (?i:GlobalScape)$">
1567
+ <description>GlobalScape SSH (which uses Bitvise sshlib)</description>
1568
+ <example service.component.version="1.36">1.36_sshlib GlobalSCAPE</example>
1569
+ <example service.component.version="1.82">1.82_sshlib Globalscape</example>
1570
+ <example service.component.version="1.36">1.36 sshlib: GlobalScape</example>
1571
+ <param pos="1" name="service.component.version"/>
1572
+ <param pos="0" name="service.component.vendor" value="Bitvise"/>
1573
+ <param pos="0" name="service.component.family" value="sshlib"/>
1574
+ <param pos="0" name="service.component.product" value="sshlib"/>
1575
+ <param pos="0" name="service.vendor" value="GlobalScape"/>
1576
+ <param pos="0" name="service.family" value="Secure FTP Server"/>
1577
+ <param pos="0" name="service.product" value="Secure FTP Server"/>
1578
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1579
+ <param pos="0" name="os.family" value="Windows"/>
1580
+ <param pos="0" name="os.product" value="Windows"/>
1581
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1582
+ </fingerprint>
1583
+ <fingerprint pattern="^([^\s]+) sshlib: WinSSHD (.*)$">
1584
+ <description>Bitvise WinSSHD (which uses Bitvise sshlib)</description>
1585
+ <example service.component.version="1.78" service.version="4.15a">1.78 sshlib: WinSSHD 4.15a</example>
1586
+ <param pos="1" name="service.component.version"/>
1587
+ <param pos="2" name="service.version"/>
1588
+ <param pos="0" name="service.component.vendor" value="Bitvise"/>
1589
+ <param pos="0" name="service.component.family" value="sshlib"/>
1590
+ <param pos="0" name="service.component.product" value="sshlib"/>
1591
+ <param pos="0" name="service.vendor" value="Bitvise"/>
1592
+ <param pos="0" name="service.family" value="WinSSHD"/>
1593
+ <param pos="0" name="service.product" value="WinSSHD"/>
1594
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1595
+ <param pos="0" name="os.family" value="Windows"/>
1596
+ <param pos="0" name="os.product" value="Windows"/>
1597
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1598
+ </fingerprint>
1599
+ <fingerprint pattern="^([^\s]+) FlowSsh: (?:Bitvise SSH Server \(WinSSHD\)|WinSSHD) ([\d\.]+):?.*$">
1600
+ <description>Bitvise WinSSHD (which uses Bitvise flowssh) with version</description>
1601
+ <example service.version="5.09" service.component.version="1.03">1.03 FlowSsh: WinSSHD 5.09</example>
1602
+ <example service.version="5.20" service.component.version="1.07">1.07 FlowSsh: WinSSHD 5.20: free only for personal non-commercial use</example>
1603
+ <example service.version="6.03" service.component.version="5.21">5.21 FlowSsh: Bitvise SSH Server (WinSSHD) 6.03: free only for personal non-commercial use</example>
1604
+ <param pos="1" name="service.component.version"/>
1605
+ <param pos="2" name="service.version"/>
1606
+ <param pos="0" name="service.component.vendor" value="Bitvise"/>
1607
+ <param pos="0" name="service.component.family" value="flowssh"/>
1608
+ <param pos="0" name="service.component.product" value="flowssh"/>
1609
+ <param pos="0" name="service.vendor" value="Bitvise"/>
1610
+ <param pos="0" name="service.family" value="WinSSHD"/>
1611
+ <param pos="0" name="service.product" value="WinSSHD"/>
1612
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1613
+ <param pos="0" name="os.family" value="Windows"/>
1614
+ <param pos="0" name="os.product" value="Windows"/>
1615
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1616
+ </fingerprint>
1617
+ <fingerprint pattern="^([^\s]+) FlowSsh: (?:Bitvise SSH Server \(WinSSHD\)|WinSSHD)(?: :.*)?$">
1618
+ <description>Bitvise WinSSHD (which uses Bitvise flowssh) without version</description>
1619
+ <example service.component.version="9.99">9.99 FlowSsh: Bitvise SSH Server (WinSSHD)</example>
1620
+ <example service.component.version="9.99">9.99 FlowSsh: Bitvise SSH Server (WinSSHD) : free only for personal non-commercial use</example>
1621
+ <param pos="1" name="service.component.version"/>
1622
+ <param pos="0" name="service.component.vendor" value="Bitvise"/>
1623
+ <param pos="0" name="service.component.family" value="flowssh"/>
1624
+ <param pos="0" name="service.component.product" value="flowssh"/>
1625
+ <param pos="0" name="service.vendor" value="Bitvise"/>
1626
+ <param pos="0" name="service.family" value="WinSSHD"/>
1627
+ <param pos="0" name="service.product" value="WinSSHD"/>
1628
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1629
+ <param pos="0" name="os.family" value="Windows"/>
1630
+ <param pos="0" name="os.product" value="Windows"/>
1631
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1632
+ </fingerprint>
1633
+ <fingerprint pattern="^([^\s]+) sshlib: MOVEit DMZ SSH (.*)$">
1634
+ <description>MOVEit DMZ (which uses Bitvise sshlib)</description>
1635
+ <param pos="1" name="service.component.version"/>
1636
+ <param pos="2" name="service.version"/>
1637
+ <param pos="0" name="service.component.vendor" value="Bitvise"/>
1638
+ <param pos="0" name="service.component.family" value="sshlib"/>
1639
+ <param pos="0" name="service.component.product" value="sshlib"/>
1640
+ <param pos="0" name="service.vendor" value="Standard Networks"/>
1641
+ <param pos="0" name="service.family" value="MOVEit DMZ"/>
1642
+ <param pos="0" name="service.product" value="MOVEit DMZ"/>
1643
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1644
+ <param pos="0" name="os.family" value="Windows"/>
1645
+ <param pos="0" name="os.product" value="Windows"/>
1646
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1647
+ </fingerprint>
1648
+ <fingerprint pattern="^paramiko_([\d\.]+).*$">
1649
+ <description>Paramiko</description>
1650
+ <example service.version="2.1.3">paramiko_2.1.3 501 command not implemented ERROR</example>
1651
+ <example service.version="2.1.4">paramiko_2.1.4</example>
1652
+ <param pos="0" name="service.vendor" value="Paramiko"/>
1653
+ <param pos="0" name="service.product" value="Paramiko"/>
1654
+ <param pos="1" name="service.version"/>
1655
+ </fingerprint>
1656
+ <fingerprint pattern="^Pragma SecureShell\s*(.*)$">
1657
+ <description>Pragma SecureShell</description>
1658
+ <param pos="1" name="service.version"/>
1659
+ <param pos="0" name="service.vendor" value="Pragma Systems"/>
1660
+ <param pos="0" name="service.family" value="FortressSSH Server"/>
1661
+ <param pos="0" name="service.product" value="FortressSSH Server"/>
1662
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1663
+ <param pos="0" name="os.family" value="Windows"/>
1664
+ <param pos="0" name="os.product" value="Windows"/>
1665
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1666
+ </fingerprint>
1667
+ <fingerprint pattern="^Pragma FortressSSH\s+([\d.]+)(?:\s+\[([\d.:]+)\])?$">
1668
+ <description>Pragma FortressSSH</description>
1669
+ <example service.version="5.0.9.2031">Pragma FortressSSH 5.0.9.2031</example>
1670
+ <example service.version="5.0.9.2680" host.ip="10.10.10.10">Pragma FortressSSH 5.0.9.2680 [10.10.10.10]</example>
1671
+ <param pos="1" name="service.version"/>
1672
+ <param pos="2" name="host.ip"/>
1673
+ <param pos="0" name="service.vendor" value="Pragma Systems"/>
1674
+ <param pos="0" name="service.family" value="FortressSSH Server"/>
1675
+ <param pos="0" name="service.product" value="FortressSSH Server"/>
1676
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1677
+ <param pos="0" name="os.family" value="Windows"/>
1678
+ <param pos="0" name="os.product" value="Windows"/>
1679
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1680
+ </fingerprint>
1681
+ <fingerprint pattern="^RebexSSH_([\d\.]+)$">
1682
+ <description>Rbex SSH</description>
1683
+ <example service.version="1.0.5.25508">RebexSSH_1.0.5.25508</example>
1684
+ <param pos="0" name="service.vendor" value="Ruijie"/>
1685
+ <param pos="0" name="service.product" value="SSH"/>
1686
+ <param pos="1" name="service.version"/>
1687
+ </fingerprint>
1688
+ <fingerprint pattern="^RGOS_\S+$">
1689
+ <description>Ruijie Networks SSH</description>
1690
+ <example>RGOS_SSH_1.0</example>
1691
+ <example>RGOS_PK3223</example>
1692
+ <param pos="0" name="hw.vendor" value="Ruijie"/>
1693
+ </fingerprint>
1694
+ <fingerprint pattern="^VShell_(?:Special_Edition_)?(\d+)_(\d+)_(\d+)_(\d+) VShell$">
1695
+ <description>VanDyke VShell - detailed variant</description>
1696
+ <example service.version="3" service.version.version="6" service.version.version.version="2" service.version.version.version.version="446">VShell_3_6_2_446 VShell</example>
1697
+ <example service.version="2" service.version.version="5" service.version.version.version="0" service.version.version.version.version="204">VShell_Special_Edition_2_5_0_204 VShell</example>
1698
+ <param pos="1" name="service.version"/>
1699
+ <param pos="2" name="service.version.version"/>
1700
+ <param pos="3" name="service.version.version.version"/>
1701
+ <param pos="4" name="service.version.version.version.version"/>
1702
+ <param pos="0" name="service.vendor" value="VanDyke Software"/>
1703
+ <param pos="0" name="service.family" value="VShell"/>
1704
+ <param pos="0" name="service.product" value="VShell"/>
1705
+ <param pos="0" name="service.cpe23" value="cpe:/a:vandyke:vshell:{service.version}"/>
1706
+ </fingerprint>
1707
+ <fingerprint pattern="^([\s]*)\s*VShell$">
1708
+ <description>VanDyke VShell</description>
1709
+ <param pos="1" name="service.version"/>
1710
+ <param pos="0" name="service.vendor" value="VanDyke Software"/>
1711
+ <param pos="0" name="service.family" value="VShell"/>
1712
+ <param pos="0" name="service.product" value="VShell"/>
1713
+ <param pos="0" name="service.cpe23" value="cpe:/a:vandyke:vshell:{service.version}"/>
1714
+ </fingerprint>
1715
+ <fingerprint pattern="^WRQReflection(?i:F)orSecureIT_(.*)$">
1716
+ <description>Attachmate Reflection (formerly WRQ Reflection for Secure IT)</description>
1717
+ <example service.version="6.1 Build 21">WRQReflectionForSecureIT_6.1 Build 21</example>
1718
+ <example service.version="8.2 Build 117">WRQReflectionforSecureIT_8.2 Build 117</example>
1719
+ <param pos="1" name="service.version"/>
1720
+ <param pos="0" name="service.vendor" value="Attachmate"/>
1721
+ <param pos="0" name="service.family" value="Reflection"/>
1722
+ <param pos="0" name="service.product" value="Reflection"/>
1723
+ </fingerprint>
1724
+ <fingerprint pattern="^([^\s]*)\s*F-Secure SSH\s*(?:.*)$">
1725
+ <description>Attachmate Reflection (formerly F-Secure SSH)</description>
1726
+ <example service.version="3.2.3">3.2.3 F-Secure SSH Windows NT Server</example>
1727
+ <param pos="1" name="service.version"/>
1728
+ <param pos="0" name="service.vendor" value="Attachmate"/>
1729
+ <param pos="0" name="service.family" value="Reflection"/>
1730
+ <param pos="0" name="service.product" value="Reflection"/>
1731
+ </fingerprint>
1732
+ <fingerprint pattern="^([^\s]*)\s*SSH Tectia Server$">
1733
+ <description>SSH Communications Security Tectia Server - branded</description>
1734
+ <example service.version="6.4.12.353">6.4.12.353 SSH Tectia Server</example>
1735
+ <param pos="1" name="service.version"/>
1736
+ <param pos="0" name="service.vendor" value="SSH Communications Security"/>
1737
+ <param pos="0" name="service.family" value="SSH Tectia Server"/>
1738
+ <param pos="0" name="service.product" value="SSH Tectia Server"/>
1739
+ </fingerprint>
1740
+ <fingerprint pattern="^([0-9\.]+) SSH Secure Shell(?: \(non-commercial\))?$">
1741
+ <description>SSH Communications Security Tectia Server</description>
1742
+ <example service.version="3.2.9.1">3.2.9.1 SSH Secure Shell (non-commercial)</example>
1743
+ <example service.version="4.0.3">4.0.3 SSH Secure Shell</example>
1744
+ <example service.version="4.4.2.3">4.4.2.3 SSH Secure Shell</example>
1745
+ <param pos="1" name="service.version"/>
1746
+ <param pos="0" name="service.vendor" value="SSH Communications Security"/>
1747
+ <param pos="0" name="service.family" value="SSH Tectia Server"/>
1748
+ <param pos="0" name="service.product" value="SSH Tectia Server"/>
1749
+ </fingerprint>
1750
+ <fingerprint pattern="^([0-9\.]+) SSH Secure Shell Windows NT Server$">
1751
+ <description>Unknown Windows SSH server</description>
1752
+ <example service.version="4.0.3">4.0.3 SSH Secure Shell Windows NT Server</example>
1753
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1754
+ <param pos="0" name="os.family" value="Windows"/>
1755
+ <param pos="0" name="os.product" value="Windows"/>
1756
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1757
+ <param pos="1" name="service.version"/>
1758
+ <param pos="0" name="service.vendor" value="SSH Communications Security"/>
1759
+ <param pos="0" name="service.family" value="SSH Tectia Server"/>
1760
+ <param pos="0" name="service.product" value="SSH Tectia Server"/>
1761
+ </fingerprint>
1762
+ <fingerprint pattern="^ARRIS_(.*)$">
1763
+ <description>ARRIS device (though not clear which) - www.arrisi.com</description>
1764
+ <example service.version="0.50">ARRIS_0.50</example>
1765
+ <param pos="1" name="service.version"/>
1766
+ <param pos="0" name="service.vendor" value="ARRIS"/>
1767
+ <param pos="0" name="service.product" value="ARRIS"/>
1768
+ <param pos="0" name="os.vendor" value="ARRIS"/>
1769
+ </fingerprint>
1770
+ <fingerprint pattern="^Mocana SSH\s?(?:([\d.]+))?$">
1771
+ <description>Mocana Embedded SSH</description>
1772
+ <example service.version="5.3.1">Mocana SSH 5.3.1</example>
1773
+ <example>Mocana SSH </example>
1774
+ <param pos="1" name="service.version"/>
1775
+ <param pos="0" name="service.vendor" value="Mocana"/>
1776
+ <param pos="0" name="service.family" value="Embedded SSH Server"/>
1777
+ <param pos="0" name="service.product" value="Embedded SSH Server"/>
1778
+ </fingerprint>
1779
+ <fingerprint pattern="^FreSSH\.(.*)$">
1780
+ <description>FreSSH</description>
1781
+ <example service.version="0.8">FreSSH.0.8</example>
1782
+ <param pos="1" name="service.version"/>
1783
+ <param pos="0" name="service.family" value="FreSSH"/>
1784
+ <param pos="0" name="service.product" value="FreSSH"/>
1785
+ </fingerprint>
1786
+ <fingerprint pattern="^RomCliSecure_(.*)$">
1787
+ <description>RomCliSecure appears to be the Adtran NetVanta products</description>
1788
+ <example service.version="4.12">RomCliSecure_4.12</example>
1789
+ <param pos="1" name="service.version"/>
1790
+ <param pos="0" name="service.vendor" value="Adtran"/>
1791
+ <param pos="0" name="service.family" value="NetVanta"/>
1792
+ <param pos="0" name="service.product" value="NetVanta"/>
1793
+ <param pos="0" name="os.vendor" value="Adtran"/>
1794
+ <param pos="0" name="os.family" value="NetVanta"/>
1795
+ <param pos="0" name="os.product" value="NetVanta"/>
1796
+ </fingerprint>
1797
+ <fingerprint pattern="^.*MultiNet.*$">
1798
+ <description>Process Software MultiNet is a suite of network apps for OpenVMS</description>
1799
+ <param pos="0" name="service.vendor" value="Process Software"/>
1800
+ <param pos="0" name="service.family" value="MultiNet"/>
1801
+ <param pos="0" name="service.product" value="MultiNet"/>
1802
+ <param pos="0" name="os.vendor" value="HP"/>
1803
+ <param pos="0" name="os.family" value="OpenVMS"/>
1804
+ <param pos="0" name="os.product" value="OpenVMS"/>
1805
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:openvms:-"/>
1806
+ </fingerprint>
1807
+ <fingerprint pattern="^dropbear$">
1808
+ <description>Dropbear w/o version - http://matt.ucc.asn.au/dropbear/dropbear.html</description>
1809
+ <example>dropbear</example>
1810
+ <param pos="0" name="service.family" value="Dropbear"/>
1811
+ <param pos="0" name="service.product" value="Dropbear"/>
1812
+ </fingerprint>
1813
+ <fingerprint pattern="^dropbear_(.*)$">
1814
+ <description>Dropbear - http://matt.ucc.asn.au/dropbear/dropbear.html</description>
1815
+ <example service.version="2015.67">dropbear_2015.67</example>
1816
+ <example service.version="0.49">dropbear_0.49</example>
1817
+ <param pos="1" name="service.version"/>
1818
+ <param pos="0" name="service.family" value="Dropbear"/>
1819
+ <param pos="0" name="service.product" value="Dropbear"/>
1820
+ </fingerprint>
1821
+ <fingerprint pattern="^lancom$">
1822
+ <description>LANCOM Systems - http://www.lancom-systems.de/</description>
1823
+ <example>lancom</example>
1824
+ <param pos="0" name="service.vendor" value="LANCOM Systems"/>
1825
+ <param pos="0" name="service.family" value="SSH"/>
1826
+ <param pos="0" name="service.product" value="SSH"/>
1827
+ <param pos="0" name="os.vendor" value="LANCOM Systems"/>
1828
+ </fingerprint>
1829
+ <fingerprint pattern="^0$">
1830
+ <description>MOVEit DMZ</description>
1831
+ <example>0</example>
1832
+ <param pos="0" name="service.vendor" value="Standard Networks"/>
1833
+ <param pos="0" name="service.family" value="MOVEit DMZ"/>
1834
+ <param pos="0" name="service.product" value="MOVEit DMZ"/>
1835
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1836
+ <param pos="0" name="os.family" value="Windows"/>
1837
+ <param pos="0" name="os.product" value="Windows"/>
1838
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1839
+ </fingerprint>
1840
+ <fingerprint pattern="^Comware-(\d+\.?\d*\.?\d*)$">
1841
+ <description>SSH on H3C Comware</description>
1842
+ <example os.version="5.20.105">Comware-5.20.105</example>
1843
+ <example os.version="5.20">Comware-5.20</example>
1844
+ <param pos="0" name="service.vendor" value="H3C"/>
1845
+ <param pos="0" name="service.product" value="SSH"/>
1846
+ <param pos="0" name="os.vendor" value="H3C"/>
1847
+ <param pos="0" name="os.device" value="Network"/>
1848
+ <param pos="0" name="os.product" value="Comware"/>
1849
+ <param pos="0" name="os.family" value="Comware"/>
1850
+ <param pos="1" name="os.version"/>
1851
+ </fingerprint>
1852
+ <fingerprint pattern="^Data ONTAP SSH [\d\.]+$">
1853
+ <description>SSH NetApp appliances</description>
1854
+ <example>Data ONTAP SSH 1.0</example>
1855
+ <param pos="0" name="os.vendor" value="NetApp"/>
1856
+ <param pos="0" name="os.family" value="Data ONTAP"/>
1857
+ <param pos="0" name="os.product" value="Data ONTAP"/>
1858
+ <param pos="0" name="os.cpe23" value="cpe:/o:netapp:data_ontap:-"/>
1859
+ </fingerprint>
1860
+ <fingerprint pattern="^(\d\.\d+\.\d+) SSH Secure Shell OpenVMS V\d+\.\d+$">
1861
+ <description>SSH for OpenVMS</description>
1862
+ <example service.component.version="3.2.0">3.2.0 SSH Secure Shell OpenVMS V5.5</example>
1863
+ <example service.component.version="2.4.1">2.4.1 SSH Secure Shell OpenVMS V1.0</example>
1864
+ <param pos="1" name="service.component.version"/>
1865
+ <param pos="0" name="service.component.vendor" value="SSH Communication Security"/>
1866
+ <param pos="0" name="service.component.family" value="SSH Secure Shell"/>
1867
+ <param pos="0" name="service.component.product" value="SSH Secure Shell"/>
1868
+ <param pos="0" name="service.vendor" value="HP"/>
1869
+ <param pos="0" name="service.family" value="OpenVMS"/>
1870
+ <param pos="0" name="service.product" value="SSH Server"/>
1871
+ <param pos="0" name="os.vendor" value="HP"/>
1872
+ <param pos="0" name="os.family" value="OpenVMS"/>
1873
+ <param pos="0" name="os.product" value="OpenVMS"/>
1874
+ <param pos="0" name="os.certainty" value="0.75"/>
1875
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:openvms:-"/>
1876
+ </fingerprint>
1877
+ <fingerprint pattern="^(\d\.\d+\.\d+) SSH (?:Secure Shell )?OpenVMS V\d\.\d VMS_sftp_version (\d)$">
1878
+ <description>SSH for OpenVMS sftp</description>
1879
+ <example service.component.version="3.2.0" service.version="3">3.2.0 SSH Secure Shell OpenVMS V5.5 VMS_sftp_version 3</example>
1880
+ <example service.component.version="3.2.0" service.version="3">3.2.0 SSH OpenVMS V5.5 VMS_sftp_version 3</example>
1881
+ <param pos="1" name="service.component.version"/>
1882
+ <param pos="0" name="service.component.vendor" value="SSH Communication Security"/>
1883
+ <param pos="0" name="service.component.family" value="SSH Secure Shell"/>
1884
+ <param pos="0" name="service.component.product" value="SSH Secure Shell"/>
1885
+ <param pos="0" name="service.vendor" value="HP"/>
1886
+ <param pos="0" name="service.family" value="OpenVMS"/>
1887
+ <param pos="0" name="service.product" value="VMS SFTP Server"/>
1888
+ <param pos="2" name="service.version"/>
1889
+ <param pos="0" name="os.vendor" value="HP"/>
1890
+ <param pos="0" name="os.family" value="OpenVMS"/>
1891
+ <param pos="0" name="os.certainty" value="0.75"/>
1892
+ </fingerprint>
1893
+ <fingerprint pattern="^\S+ SSH Secure Shell Tru64 UNIX$">
1894
+ <description>Digital/Compaq/HP Tru64 Unix</description>
1895
+ <example>3.2.0 SSH Secure Shell Tru64 UNIX</example>
1896
+ <param pos="0" name="os.vendor" value="HP"/>
1897
+ <param pos="0" name="os.family" value="Unix"/>
1898
+ <param pos="0" name="os.product" value="Tru64 Unix"/>
1899
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:tru64:-"/>
1900
+ </fingerprint>
1901
+ <fingerprint pattern="^ROSSSH$">
1902
+ <description>MikroTik RouterOS sshd</description>
1903
+ <example>ROSSSH</example>
1904
+ <param pos="0" name="os.vendor" value="MikroTik"/>
1905
+ <param pos="0" name="os.device" value="Router"/>
1906
+ <param pos="0" name="os.family" value="RouterOS"/>
1907
+ <param pos="0" name="os.product" value="RouterOS"/>
1908
+ <param pos="0" name="os.cpe23" value="cpe:/o:mikrotik:routeros:-"/>
1909
+ </fingerprint>
1910
+ <!-- xlightftpd is an ftp server that also supports SFTP. The SFTP
1911
+ server appears in ssh studies, thus this banner is here, and
1912
+ not in ftp_banners.xml-->
1913
+ <fingerprint pattern="^xlightftpd_release_([\d.]+)$">
1914
+ <description>Xlight FTP Server</description>
1915
+ <example service.version="3.8.3.6.1">xlightftpd_release_3.8.3.6.1</example>
1916
+ <param pos="1" name="service.version"/>
1917
+ <param pos="0" name="service.vendor" value="Xlight"/>
1918
+ <param pos="0" name="service.family" value="FTP Server"/>
1919
+ <param pos="0" name="service.product" value="FTP Server"/>
1920
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1921
+ <param pos="0" name="os.family" value="Windows"/>
1922
+ <param pos="0" name="os.product" value="Windows"/>
1923
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1924
+ </fingerprint>
1925
+ <fingerprint pattern="^libssh[-_]([\d.]+)$">
1926
+ <description>SSH server utilising libssh</description>
1927
+ <example service.version="0.6.0">libssh-0.6.0</example>
1928
+ <example service.version="0.8.0">libssh_0.8.0</example>
1929
+ <param pos="1" name="service.version"/>
1930
+ <param pos="0" name="service.family" value="libssh"/>
1931
+ <param pos="0" name="service.product" value="libssh"/>
1932
+ <param pos="0" name="service.vendor" value="libssh"/>
1933
+ <param pos="0" name="service.cpe23" value="cpe:/a:libssh:libssh:{service.version}"/>
1934
+ </fingerprint>
1935
+ <fingerprint pattern="^WeOnlyDo ([\d.]+)$">
1936
+ <description>WeOnlyDo with version</description>
1937
+ <example service.version="1.2.7">WeOnlyDo 1.2.7</example>
1938
+ <example service.version="2.0.1">WeOnlyDo 2.0.1</example>
1939
+ <example service.version="2.5.4">WeOnlyDo 2.5.4</example>
1940
+ <param pos="1" name="service.version"/>
1941
+ <param pos="0" name="service.family" value="WeOnlyDo"/>
1942
+ <param pos="0" name="service.vendor" value="WeOnlyDo"/>
1943
+ <param pos="0" name="service.product" value="WeOnlyDo SSH Server"/>
1944
+ <param pos="0" name="service.cpe23" value="cpe:/a:weonlydo:weonlydo:{service.version}"/>
1945
+ </fingerprint>
1946
+ <fingerprint pattern="^WeOnlyDo ([\d.]+) \(FIPS\)$">
1947
+ <description>WeOnlyDo with version with FIPS mode enabled</description>
1948
+ <example service.version="2.2.9">WeOnlyDo 2.2.9 (FIPS)</example>
1949
+ <example service.version="2.4.3">WeOnlyDo 2.4.3 (FIPS)</example>
1950
+ <param pos="1" name="service.version"/>
1951
+ <param pos="0" name="service.family" value="WeOnlyDo"/>
1952
+ <param pos="0" name="service.vendor" value="WeOnlyDo"/>
1953
+ <param pos="0" name="service.product" value="WeOnlyDo SSH Server"/>
1954
+ <param pos="0" name="service.cpe23" value="cpe:/a:weonlydo:weonlydo:{service.version}"/>
1955
+ </fingerprint>
1956
+ <!--
1957
+ 1.2.22j4rad
1958
+ 2.40
1959
+ 2.0.12
1960
+ Server-VII
1961
+ 9.9.1
1962
+ IPSSH-1.10.0
1963
+ -->
1964
+ <!--
1965
+ Possibly Nortel Passport
1966
+ SSH_2.1.1
1967
+ -->
1968
+ </fingerprints>