recog-intrigue 2.3.7 → 2.3.14

Sign up to get free protection for your applications and to get access to all the features.
Files changed (70) hide show
  1. checksums.yaml +4 -4
  2. data/.github/SECURITY.md +35 -0
  3. data/.gitignore +9 -0
  4. data/CONTRIBUTING.md +136 -37
  5. data/README.md +18 -16
  6. data/bin/recog_cleanup +16 -0
  7. data/bin/recog_standardize +30 -6
  8. data/cpe-remap.yaml +38 -1
  9. data/identifiers/README.md +9 -0
  10. data/identifiers/hw_device.txt +77 -0
  11. data/identifiers/hw_family.txt +96 -0
  12. data/identifiers/hw_product.txt +328 -0
  13. data/identifiers/os_architecture.txt +6 -6
  14. data/identifiers/os_device.txt +45 -3
  15. data/identifiers/os_family.txt +206 -41
  16. data/identifiers/os_product.txt +238 -17
  17. data/identifiers/service_family.txt +144 -57
  18. data/identifiers/service_product.txt +385 -83
  19. data/identifiers/vendor.txt +554 -68
  20. data/lib/recog/version.rb +1 -1
  21. data/requirements.txt +1 -1
  22. data/update_cpes.py +4 -1
  23. data/xml/apache_modules.xml +292 -5
  24. data/xml/apache_os.xml +41 -2
  25. data/xml/architecture.xml +11 -3
  26. data/xml/dns_versionbind.xml +200 -26
  27. data/xml/favicons.xml +1701 -0
  28. data/xml/ftp_banners.xml +256 -23
  29. data/xml/h323_callresp.xml +112 -12
  30. data/xml/hp_pjl_id.xml +47 -5
  31. data/xml/html_title.xml +1156 -70
  32. data/xml/http_cookies.xml +69 -11
  33. data/xml/http_servers.xml +1094 -107
  34. data/xml/http_wwwauth.xml +143 -27
  35. data/xml/imap_banners.xml +62 -13
  36. data/xml/ldap_searchresult.xml +81 -9
  37. data/xml/mdns_device-info_txt.xml +194 -17
  38. data/xml/mdns_workstation_txt.xml +4 -2
  39. data/xml/mysql_banners.xml +233 -40
  40. data/xml/mysql_error.xml +113 -6
  41. data/xml/nntp_banners.xml +10 -2
  42. data/xml/ntp_banners.xml +93 -9
  43. data/xml/operating_system.xml +90 -3
  44. data/xml/pop_banners.xml +87 -33
  45. data/xml/rsh_resp.xml +11 -2
  46. data/xml/rtsp_servers.xml +43 -23
  47. data/xml/sip_banners.xml +6 -11
  48. data/xml/sip_user_agents.xml +29 -2
  49. data/xml/smb_native_lm.xml +10 -2
  50. data/xml/smb_native_os.xml +80 -2
  51. data/xml/smtp_banners.xml +233 -13
  52. data/xml/smtp_debug.xml +6 -4
  53. data/xml/smtp_ehlo.xml +7 -5
  54. data/xml/smtp_expn.xml +13 -4
  55. data/xml/smtp_help.xml +23 -4
  56. data/xml/smtp_mailfrom.xml +5 -2
  57. data/xml/smtp_noop.xml +6 -5
  58. data/xml/smtp_quit.xml +5 -4
  59. data/xml/smtp_rcptto.xml +5 -2
  60. data/xml/smtp_rset.xml +4 -4
  61. data/xml/smtp_turn.xml +4 -4
  62. data/xml/smtp_vrfy.xml +14 -4
  63. data/xml/snmp_sysdescr.xml +741 -32
  64. data/xml/snmp_sysobjid.xml +47 -2
  65. data/xml/ssh_banners.xml +255 -81
  66. data/xml/telnet_banners.xml +503 -30
  67. data/xml/x11_banners.xml +26 -3
  68. data/xml/x509_issuers.xml +37 -13
  69. data/xml/x509_subjects.xml +214 -52
  70. metadata +12 -5
@@ -1,17 +1,18 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
1
+ <?xml version='1.0' encoding='UTF-8'?>
2
2
  <fingerprints protocol="pjl" database_type="service" preference="0.10">
3
3
  <!--
4
4
  For printers running the PJL protocol (usually on 9100/tcp), their type can be requested
5
5
  by the INFO ID command. The printer types (strings surrounded by double quotes) are
6
6
  matched against these patterns to fingerprint the printer.
7
-
8
7
  'preference' notes: The value has been explicitly set to 0.10 due to the very loose
9
8
  regex that is used here.
10
9
  -->
10
+
11
11
  <!--
12
12
  LaserJet and Designjet are registered trademarks of HP. Therefore matching for the keywords
13
13
  is sufficient for asserting all relevant information
14
14
  -->
15
+
15
16
  <fingerprint pattern="(?i)laserjet (.*)(?: series)?">
16
17
  <description>HP JetDirect Printer</description>
17
18
  <example>HP LaserJet 4100 Series</example>
@@ -27,6 +28,7 @@
27
28
  <param pos="0" name="os.family" value="LaserJet"/>
28
29
  <param pos="1" name="os.product"/>
29
30
  </fingerprint>
31
+
30
32
  <fingerprint pattern="(?i)(designjet \S+)">
31
33
  <description>HP Designjet printer</description>
32
34
  <example>hp designjet 110plus</example>
@@ -41,6 +43,7 @@
41
43
  <param pos="0" name="os.device" value="Printer"/>
42
44
  <param pos="1" name="os.product"/>
43
45
  </fingerprint>
46
+
44
47
  <fingerprint pattern="^Xerox ColorQube (\S+)$">
45
48
  <description>Xerox ColorQube Multifunction Printer</description>
46
49
  <example>Xerox ColorQube 8570DN</example>
@@ -51,6 +54,7 @@
51
54
  <param pos="1" name="os.product"/>
52
55
  <param pos="0" name="os.device" value="Multifunction Device"/>
53
56
  </fingerprint>
57
+
54
58
  <fingerprint pattern="^Brother (.+)$">
55
59
  <description>Brother Printer</description>
56
60
  <example>Brother HL-1660e</example>
@@ -58,7 +62,9 @@
58
62
  <param pos="0" name="os.device" value="Printer"/>
59
63
  <param pos="1" name="os.product"/>
60
64
  </fingerprint>
65
+
61
66
  <!-- Assert the product range as a product fingerprint. -->
67
+
62
68
  <fingerprint pattern="^(iR ?\S+)">
63
69
  <description>Canon iR multifunction device</description>
64
70
  <example>iR 3180C EUR</example>
@@ -69,6 +75,7 @@
69
75
  <param pos="0" name="os.device" value="Multifunction Device"/>
70
76
  <param pos="1" name="os.product"/>
71
77
  </fingerprint>
78
+
72
79
  <fingerprint pattern="^(?:Dell (?:Color Laser |Laser Printer )?|(?:Color Laser |Laser Printer ))(\d+(?:n|cn|dn|cdn))(?: Color Laser| Laser Printer)?$">
73
80
  <description>Dell Laser Printer</description>
74
81
  <example>Dell Laser Printer 1710n</example>
@@ -86,6 +93,7 @@
86
93
  <param pos="0" name="os.device" value="Printer"/>
87
94
  <param pos="1" name="os.product"/>
88
95
  </fingerprint>
96
+
89
97
  <fingerprint pattern="^Dell (\d+(?:n|cn|dn|cdn)) MFP$">
90
98
  <description>Dell Laser multifunction device</description>
91
99
  <example>Dell 2135cn MFP</example>
@@ -95,6 +103,7 @@
95
103
  <param pos="0" name="os.device" value="Multifunction Device"/>
96
104
  <param pos="1" name="os.product"/>
97
105
  </fingerprint>
106
+
98
107
  <fingerprint pattern="^HP (\S+ Digital Sender)$">
99
108
  <description>HP Digital Sender scanner</description>
100
109
  <example>HP 9250C Digital Sender</example>
@@ -103,6 +112,7 @@
103
112
  <param pos="0" name="os.family" value="Digital Sender"/>
104
113
  <param pos="1" name="os.product"/>
105
114
  </fingerprint>
115
+
106
116
  <fingerprint pattern="^(?:IBM )?Infoprint(?: Color)? (\S+)$">
107
117
  <description>IBM Infoprint Printer</description>
108
118
  <param pos="0" name="os.vendor" value="IBM"/>
@@ -110,6 +120,7 @@
110
120
  <param pos="0" name="os.device" value="Printer"/>
111
121
  <param pos="1" name="os.product"/>
112
122
  </fingerprint>
123
+
113
124
  <fingerprint pattern="^KM-(.*)$">
114
125
  <description>Konica Minolta printer</description>
115
126
  <example>KM-5050</example>
@@ -117,6 +128,7 @@
117
128
  <param pos="0" name="os.device" value="Printer"/>
118
129
  <param pos="1" name="os.product"/>
119
130
  </fingerprint>
131
+
120
132
  <fingerprint pattern="^(FS-\S+MFP\S*)$">
121
133
  <description>Kyocera Mita Multifunction device</description>
122
134
  <example>FS-C2126MFP</example>
@@ -127,6 +139,7 @@
127
139
  <param pos="0" name="os.family" value="FS"/>
128
140
  <param pos="1" name="os.product"/>
129
141
  </fingerprint>
142
+
130
143
  <fingerprint pattern="^(FS-(?:C)?\d+(?:D|DN))$">
131
144
  <description>Kyocera Mita Printer</description>
132
145
  <example>FS-C8500DN</example>
@@ -137,6 +150,7 @@
137
150
  <param pos="0" name="os.family" value="FS"/>
138
151
  <param pos="1" name="os.product"/>
139
152
  </fingerprint>
153
+
140
154
  <fingerprint pattern="^(TASKalfa \S+)$">
141
155
  <description>Kyocera Mita TASKalfa multifunction device</description>
142
156
  <example>TASKalfa 300ci</example>
@@ -147,6 +161,7 @@
147
161
  <param pos="0" name="os.family" value="TASKalfa"/>
148
162
  <param pos="1" name="os.product"/>
149
163
  </fingerprint>
164
+
150
165
  <fingerprint pattern="^Lexmark (.*)$">
151
166
  <description>Lexmark JetDirect printer</description>
152
167
  <example>Lexmark C910</example>
@@ -156,6 +171,7 @@
156
171
  <param pos="0" name="os.device" value="Printer"/>
157
172
  <param pos="1" name="os.product"/>
158
173
  </fingerprint>
174
+
159
175
  <fingerprint pattern="(?i)^Oce (fx[^\s:]+):.*$">
160
176
  <description>Oce FX series multifunction device</description>
161
177
  <example os.product="fx3000">Oce fx3000:8C5-B29:Ver.D:U0707161719:B0601271355</example>
@@ -164,6 +180,7 @@
164
180
  <param pos="0" name="os.device" value="Multifunction Device"/>
165
181
  <param pos="1" name="os.product"/>
166
182
  </fingerprint>
183
+
167
184
  <fingerprint pattern="(?i)^Oce (VL\S+):.*$">
168
185
  <description>Oce VarioLink multifunction device</description>
169
186
  <example>Oce VL3200:8C5-D92:Ver.B</example>
@@ -172,16 +189,20 @@
172
189
  <param pos="0" name="os.device" value="Multifunction Device"/>
173
190
  <param pos="1" name="os.product"/>
174
191
  </fingerprint>
192
+
175
193
  <!-- IGI is Imagistics International, which was acquired by Oce.
176
194
  I can't find MX-MBX3 or any variant online. -->
195
+
177
196
  <fingerprint pattern="(?i)^OceIGI MX-\S+">
178
197
  <description>Oce-acquired IGI printer</description>
179
198
  <example>OceIGI MX-NBX3 02-Jul-07 14:47</example>
180
199
  <param pos="0" name="os.vendor" value="Oce"/>
181
200
  <param pos="0" name="os.device" value="Printer"/>
182
201
  </fingerprint>
202
+
183
203
  <!-- im3510/4510 is actually a range of model numbers, but asserting a range
184
204
  of models as a product is preferableto asserting nothing. -->
205
+
185
206
  <fingerprint pattern="(?i)^Imagistics (im\S+) (.+)">
186
207
  <description>Oce IM series multifunction device</description>
187
208
  <example>Imagistics im3510/4510 02-Aug-04 10:56</example>
@@ -192,7 +213,9 @@
192
213
  <param pos="1" name="os.product"/>
193
214
  <param pos="2" name="system.time"/>
194
215
  </fingerprint>
216
+
195
217
  <!-- C610 is a series; there are several models with suffixes n, dn, dtn, cdn -->
218
+
196
219
  <fingerprint pattern="^OKI (C\d+)\S*$">
197
220
  <description>Okidata color printer</description>
198
221
  <example>OKI C610</example>
@@ -202,6 +225,7 @@
202
225
  <param pos="0" name="os.device" value="Printer"/>
203
226
  <param pos="1" name="os.product"/>
204
227
  </fingerprint>
228
+
205
229
  <fingerprint pattern="^OKI (MC\d+)\S*$">
206
230
  <description>Okidata multifunction device</description>
207
231
  <example>OKI MC860</example>
@@ -209,6 +233,7 @@
209
233
  <param pos="0" name="os.device" value="Multifunction Device"/>
210
234
  <param pos="1" name="os.product"/>
211
235
  </fingerprint>
236
+
212
237
  <fingerprint pattern="(?i)^RICOH ((?:Aficio|MP|SP) .*)$">
213
238
  <description>Ricoh Aficio Printer</description>
214
239
  <example>RICOH Aficio 2075</example>
@@ -220,8 +245,10 @@
220
245
  <param pos="1" name="os.product"/>
221
246
  <param pos="0" name="os.device" value="Printer"/>
222
247
  </fingerprint>
248
+
223
249
  <!-- NRG was acquired by Ricoh; classify NRG printers as such.
224
250
  Be consistent with snmp_sysdescr.xml. -->
251
+
225
252
  <fingerprint pattern="(?i)^NRG ([MS]P \S+)$">
226
253
  <description>Ricoh NRG printer</description>
227
254
  <example>NRG MP 171</example>
@@ -236,8 +263,10 @@
236
263
  <param pos="0" name="os.device" value="Printer"/>
237
264
  <param pos="1" name="os.product"/>
238
265
  </fingerprint>
266
+
239
267
  <!-- Gestetner == NRG, and was acquired by Ricoh.
240
268
  Assert the range of products as os.product. -->
269
+
241
270
  <fingerprint pattern="(?i)^Gestetner (MP\S+/DSc\S+)$">
242
271
  <description>Ricoh Gestetner multifunction device</description>
243
272
  <example>Gestetner MPC2500/DSc525</example>
@@ -245,6 +274,7 @@
245
274
  <param pos="0" name="os.device" value="Multifunction Device"/>
246
275
  <param pos="1" name="os.product"/>
247
276
  </fingerprint>
277
+
248
278
  <fingerprint pattern="(?i)^HYDRA$">
249
279
  <description>RSI Hydra printer</description>
250
280
  <example>HYDRA</example>
@@ -252,6 +282,7 @@
252
282
  <param pos="0" name="os.device" value="Printer"/>
253
283
  <param pos="0" name="os.product" value="Hydra"/>
254
284
  </fingerprint>
285
+
255
286
  <fingerprint pattern="(?i)^Savin (\S+)$">
256
287
  <description>Savin Printer</description>
257
288
  <example>SAVIN 4075</example>
@@ -259,6 +290,7 @@
259
290
  <param pos="0" name="os.device" value="Printer"/>
260
291
  <param pos="1" name="os.product"/>
261
292
  </fingerprint>
293
+
262
294
  <fingerprint pattern="(?i)^Samsung ((?:SCX|CLX)-\S+) Series$">
263
295
  <description>Samsung multifunction device</description>
264
296
  <example>Samsung SCX-5835_5935 Series</example>
@@ -267,6 +299,7 @@
267
299
  <param pos="0" name="os.device" value="Multifunction Device"/>
268
300
  <param pos="1" name="os.product"/>
269
301
  </fingerprint>
302
+
270
303
  <fingerprint pattern="(?i)^Samsung ((?:ML|CLP)-\S+) Series$">
271
304
  <description>Samsung printer</description>
272
305
  <example>Samsung CLP-680 Series</example>
@@ -275,6 +308,7 @@
275
308
  <param pos="0" name="os.device" value="Printer"/>
276
309
  <param pos="1" name="os.product"/>
277
310
  </fingerprint>
311
+
278
312
  <fingerprint pattern="(?i)^SHARP (\S+-\S+) .*$">
279
313
  <description>Sharp Printer</description>
280
314
  <example>Sharp MX-NBX3 18-Mar-08 10:22</example>
@@ -283,6 +317,7 @@
283
317
  <param pos="0" name="os.device" value="Printer"/>
284
318
  <param pos="1" name="os.product"/>
285
319
  </fingerprint>
320
+
286
321
  <fingerprint pattern="(?i)^Source Technologies (\S+)$">
287
322
  <description>Source Technologies Printer</description>
288
323
  <example>Source Technologies ST-9620</example>
@@ -290,7 +325,9 @@
290
325
  <param pos="0" name="os.device" value="Printer"/>
291
326
  <param pos="1" name="os.product"/>
292
327
  </fingerprint>
328
+
293
329
  <!-- Consistent with snmp_sysdescr.xml -->
330
+
294
331
  <fingerprint pattern="^TOSHIBA (e-STUDIO\S+)(?:\s+.*)?" certainty="0.9">
295
332
  <description>Toshiba e-STUDIO multifunction device</description>
296
333
  <example>TOSHIBA e-STUDIO350 V468Z 20061013</example>
@@ -302,16 +339,16 @@
302
339
  <param pos="0" name="os.device" value="Multifunction Device"/>
303
340
  <param pos="1" name="os.product"/>
304
341
  </fingerprint>
342
+
305
343
  <!-- TODO:
306
344
  Xerox AccXES devices are documented to return:
307
-
308
345
  "<printer name> <release #>"
309
346
  <FF>
310
-
311
347
  In the above, <printer name> is the official product name of the
312
348
  AccXES printer, and <release #> corresponds to a software release
313
349
  number.
314
350
  -->
351
+
315
352
  <fingerprint pattern="^(?:ID=)?Xerox (Phaser \S+)$" certainty="0.9">
316
353
  <description>Xerox Phaser Printer</description>
317
354
  <example>Xerox Phaser 6180MFP-D</example>
@@ -321,6 +358,7 @@
321
358
  <param pos="0" name="os.device" value="Printer"/>
322
359
  <param pos="1" name="os.product"/>
323
360
  </fingerprint>
361
+
324
362
  <fingerprint pattern="^Xerox (WorkCentre .*)$" certainty="0.9">
325
363
  <description>Xerox Workcentre Printer</description>
326
364
  <example>Xerox WorkCentre 7425</example>
@@ -331,6 +369,7 @@
331
369
  <param pos="1" name="os.product"/>
332
370
  <param pos="0" name="os.device" value="Printer"/>
333
371
  </fingerprint>
372
+
334
373
  <fingerprint pattern="^(XC\S+)$" certainty="0.9">
335
374
  <description>Xerox XC Printer</description>
336
375
  <example>XC560</example>
@@ -339,6 +378,7 @@
339
378
  <param pos="0" name="os.device" value="Printer"/>
340
379
  <param pos="1" name="os.product"/>
341
380
  </fingerprint>
381
+
342
382
  <fingerprint pattern="^(DC\S+)$" certainty="0.9">
343
383
  <description>Xerox DocuColor Printer</description>
344
384
  <example>DC250</example>
@@ -347,6 +387,7 @@
347
387
  <param pos="0" name="os.device" value="Printer"/>
348
388
  <param pos="1" name="os.product"/>
349
389
  </fingerprint>
390
+
350
391
  <fingerprint pattern="^(EX\d+-\d+)$" certainty="0.9">
351
392
  <description>Xerox EX Print Server, powered by EFI Fiery</description>
352
393
  <example>EX4112-4127</example>
@@ -355,4 +396,5 @@
355
396
  <param pos="0" name="os.device" value="Print server"/>
356
397
  <param pos="1" name="os.product"/>
357
398
  </fingerprint>
358
- </fingerprints>
399
+
400
+ </fingerprints>
@@ -1,8 +1,27 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
1
+ <?xml version='1.0' encoding='UTF-8'?>
2
2
  <fingerprints matches="html_title" database_type="service" preference="0.90">
3
-
4
3
  <!-- HTML Title elements found in HTTP response bodies are matched against these patterns to fingerprint HTTP servers. -->
5
4
 
5
+ <fingerprint pattern="^301 Moved Permanently$">
6
+ <description>301 Moved Permanently - generic -- assert nothing.</description>
7
+ <example>301 Moved Permanently</example>
8
+ </fingerprint>
9
+
10
+ <fingerprint pattern="^400 Bad Request$">
11
+ <description>400 Bad Request - generic -- assert nothing.</description>
12
+ <example>400 Bad Request</example>
13
+ </fingerprint>
14
+
15
+ <fingerprint pattern="^401 Unauthorized$">
16
+ <description>401 Unauthorized - generic -- assert nothing.</description>
17
+ <example>401 Unauthorized</example>
18
+ </fingerprint>
19
+
20
+ <fingerprint pattern="^404 Not Found$">
21
+ <description>404 Not Found - generic -- assert nothing.</description>
22
+ <example>404 Not Found</example>
23
+ </fingerprint>
24
+
6
25
  <fingerprint pattern="^Index of /">
7
26
  <description>Apache HTTPD indexes</description>
8
27
  <example>Index of /</example>
@@ -102,6 +121,7 @@
102
121
  </fingerprint>
103
122
 
104
123
  <!-- HiSilicon is OEMd by a number of DVR manufacturers -->
124
+
105
125
  <fingerprint pattern="^DVR Components Download$">
106
126
  <description>Web server found on DVR and webcam servers sourced from HiSilicon</description>
107
127
  <example>DVR Components Download</example>
@@ -128,9 +148,10 @@
128
148
  <param pos="0" name="hw.family" value="FRITZ!Powerline"/>
129
149
  </fingerprint>
130
150
 
131
- <fingerprint pattern="^FRITZ!WLAN Repeater$">
151
+ <fingerprint pattern="^FRITZ!(?:WLAN )?Repeater$">
132
152
  <description>FRITZ!WLAN Repeater</description>
133
153
  <example>FRITZ!WLAN Repeater</example>
154
+ <example>FRITZ!Repeater</example>
134
155
  <param pos="0" name="hw.vendor" value="AVM"/>
135
156
  <param pos="0" name="hw.device" value="WLAN Repeater"/>
136
157
  <param pos="0" name="hw.family" value="FRITZ!WLAN Repeater"/>
@@ -158,7 +179,7 @@
158
179
  <param pos="0" name="os.vendor" value="Microsoft"/>
159
180
  <param pos="0" name="os.family" value="Windows"/>
160
181
  <param pos="0" name="os.product" value="Windows CE"/>
161
- <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows-ce:-"/>
182
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_ce:-"/>
162
183
  </fingerprint>
163
184
 
164
185
  <fingerprint pattern="^IIS7$">
@@ -168,7 +189,7 @@
168
189
  <param pos="0" name="service.product" value="IIS"/>
169
190
  <param pos="0" name="service.family" value="IIS"/>
170
191
  <param pos="0" name="service.version" value="7"/>
171
- <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
192
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:7"/>
172
193
  <param pos="0" name="os.vendor" value="Microsoft"/>
173
194
  <param pos="0" name="os.family" value="Windows"/>
174
195
  <param pos="0" name="os.product" value="Windows"/>
@@ -182,7 +203,7 @@
182
203
  <param pos="0" name="service.product" value="IIS"/>
183
204
  <param pos="0" name="service.family" value="IIS"/>
184
205
  <param pos="0" name="service.version" value="8"/>
185
- <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
206
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:8"/>
186
207
  <param pos="0" name="os.vendor" value="Microsoft"/>
187
208
  <param pos="0" name="os.family" value="Windows"/>
188
209
  <param pos="0" name="os.product" value="Windows"/>
@@ -212,6 +233,7 @@
212
233
  <param pos="0" name="service.vendor" value="Microsoft"/>
213
234
  <param pos="0" name="service.product" value="IIS"/>
214
235
  <param pos="0" name="service.family" value="IIS"/>
236
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:-"/>
215
237
  <param pos="0" name="os.vendor" value="Microsoft"/>
216
238
  <param pos="0" name="os.family" value="Windows"/>
217
239
  <param pos="0" name="os.product" value="Windows"/>
@@ -224,7 +246,7 @@
224
246
  <example>NETIASPOT Management Console</example>
225
247
  <param pos="0" name="hw.vendor" value="Netia"/>
226
248
  <param pos="0" name="hw.product" value="Spot"/>
227
- <param pos="0" name="hw.product" value="WAP"/>
249
+ <param pos="0" name="hw.device" value="WAP"/>
228
250
  </fingerprint>
229
251
 
230
252
  <fingerprint pattern="^hue personal wireless lighting$">
@@ -237,10 +259,10 @@
237
259
 
238
260
  <fingerprint pattern="LANDesk\(R\) Management Agent$">
239
261
  <description>LANDesk Management Agent</description>
262
+ <example>LANDesk(R) Management Agent</example>
240
263
  <param pos="0" name="service.vendor" value="LANDesk"/>
241
264
  <param pos="0" name="service.product" value="Management Agent"/>
242
265
  <param pos="0" name="service.family" value="Management Agent"/>
243
- <param pos="0" name="service.cpe23" value="cpe:/a:landesk:management_agent:-"/>
244
266
  </fingerprint>
245
267
 
246
268
  <fingerprint pattern="^(?:Parallels )?Plesk (?:(?:Onyx|Panel) )?([\d\.]+)$">
@@ -249,20 +271,20 @@
249
271
  <example service.version="17.5.3">Plesk Onyx 17.5.3</example>
250
272
  <example service.version="12.0.1">Parallels Plesk 12.0.1</example>
251
273
  <example service.version="11.5.30">Parallels Plesk Panel 11.5.30</example>
252
- <param pos="0" name="service.vendor" value="Plesk"/>
274
+ <param pos="0" name="service.vendor" value="Parallels"/>
253
275
  <param pos="0" name="service.product" value="Plesk"/>
254
276
  <param pos="1" name="service.version"/>
255
- <param pos="0" name="service.cpe23" value="cpe:/a:plesk:plesk:{service.version}"/>
277
+ <param pos="0" name="service.cpe23" value="cpe:/a:parallels:parallels_plesk_panel:{service.version}"/>
256
278
  </fingerprint>
257
279
 
258
280
  <fingerprint pattern="^(?:Parallels )?Plesk (?:(?:Onyx|Panel) )?([\d\.]+) for Microsoft Windows$">
259
281
  <description>Plesk web hosting platform with a version on Windows</description>
260
282
  <example service.version="12.5.30">Plesk 12.5.30 for Microsoft Windows</example>
261
283
  <example service.version="11.5.30">Parallels Plesk Panel 11.5.30 for Microsoft Windows</example>
262
- <param pos="0" name="service.vendor" value="Plesk"/>
284
+ <param pos="0" name="service.vendor" value="Parallels"/>
263
285
  <param pos="0" name="service.product" value="Plesk"/>
264
286
  <param pos="1" name="service.version"/>
265
- <param pos="0" name="service.cpe23" value="cpe:/a:plesk:plesk:{service.version}"/>
287
+ <param pos="0" name="service.cpe23" value="cpe:/a:parallels:parallels_plesk_panel:{service.version}"/>
266
288
  <param pos="0" name="os.vendor" value="Microsoft"/>
267
289
  <param pos="0" name="os.family" value="Windows"/>
268
290
  <param pos="0" name="os.product" value="Windows"/>
@@ -274,9 +296,9 @@
274
296
  <example>Default Parallels Plesk Panel Page</example>
275
297
  <example>Default Parallels Plesk Page</example>
276
298
  <example>Default PLESK Page</example>
277
- <param pos="0" name="service.vendor" value="Plesk"/>
299
+ <param pos="0" name="service.vendor" value="Parallels"/>
278
300
  <param pos="0" name="service.product" value="Plesk"/>
279
- <param pos="0" name="service.cpe23" value="cpe:/a:plesk:plesk:-"/>
301
+ <param pos="0" name="service.cpe23" value="cpe:/a:parallels:parallels_plesk_panel:-"/>
280
302
  </fingerprint>
281
303
 
282
304
  <fingerprint pattern="^Web Viewer for Samsung DVR$">
@@ -335,6 +357,7 @@
335
357
  </fingerprint>
336
358
 
337
359
  <!-- Various products by Ubiquiti networks -->
360
+
338
361
  <fingerprint pattern="^Ubiquiti Networks$">
339
362
  <description>Generic products by Ubiquiti Networks</description>
340
363
  <example>Ubiquiti Networks</example>
@@ -349,15 +372,29 @@
349
372
  <param pos="0" name="hw.product" value="UniFi Security Gateway"/>
350
373
  </fingerprint>
351
374
 
375
+ <fingerprint pattern="^Ubiquiti EdgeSwitch$">
376
+ <description>Ubiquiti EdgeSwitch</description>
377
+ <example>Ubiquiti EdgeSwitch</example>
378
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
379
+ <param pos="0" name="os.family" value="Linux"/>
380
+ <param pos="0" name="os.product" value="EdgeOS"/>
381
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
382
+ <param pos="0" name="hw.product" value="EdgeSwitch"/>
383
+ </fingerprint>
384
+
352
385
  <fingerprint pattern="^EdgeOS$">
353
386
  <description>Ubiquiti EdgeRouter/EdgeSwitch/etc</description>
354
387
  <example>EdgeOS</example>
388
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
389
+ <param pos="0" name="os.family" value="Linux"/>
390
+ <param pos="0" name="os.product" value="EdgeOS"/>
355
391
  <param pos="0" name="hw.vendor" value="Ubiquiti"/>
356
392
  </fingerprint>
357
393
 
358
- <fingerprint pattern="^CloudKey$">
394
+ <fingerprint pattern="^Cloud\s*Key$">
359
395
  <description>Ubiquiti UniFi Cloud Key</description>
360
396
  <example>CloudKey</example>
397
+ <example>Cloud Key</example>
361
398
  <param pos="0" name="hw.vendor" value="Ubiquiti"/>
362
399
  <param pos="0" name="hw.product" value="UniFi Cloud Key"/>
363
400
  </fingerprint>
@@ -375,15 +412,16 @@
375
412
  <example>UniFi Video</example>
376
413
  <param pos="0" name="service.vendor" value="Ubiquiti"/>
377
414
  <param pos="0" name="service.product" value="UniFi Video"/>
378
- <param pos="0" name="service.cpe23" value="cpe:/a:ubiquiti:unifi_video:-"/>
415
+ <param pos="0" name="service.cpe23" value="cpe:/a:ui:unifi_video:-"/>
379
416
  </fingerprint>
380
417
 
381
- <fingerprint pattern="^UniFi NVR: Software Portal$">
418
+ <fingerprint pattern="^(?:UniFi NVR: Software Portal|airVision: \[NVR\] - Software Portal)$">
382
419
  <description>UniFi NVR for recording from UniFi video cameras</description>
383
420
  <example>UniFi NVR: Software Portal</example>
421
+ <example>airVision: [NVR] - Software Portal</example>
384
422
  <param pos="0" name="hw.vendor" value="Ubiquiti"/>
385
423
  <param pos="0" name="hw.family" value="UniFi"/>
386
- <param pos="0" name="hw.family" value="UniFi NVR"/>
424
+ <param pos="0" name="hw.product" value="UniFi NVR"/>
387
425
  <param pos="0" name="hw.device" value="DVR"/>
388
426
  </fingerprint>
389
427
 
@@ -450,14 +488,27 @@
450
488
  <param pos="0" name="hw.product" value="Bridge"/>
451
489
  <param pos="0" name="hw.vendor" value="Eagle Eye Networks"/>
452
490
  </fingerprint>
491
+
453
492
  <fingerprint pattern="^Web Local Display Unauthorized$">
454
493
  <description>Eagle Eye Networks to manage IoT cameras unauthorized webpage</description>
455
494
  <example>Web Local Display Unauthorized</example>
456
- <param pos="0" name="hw.product" value=" Bridge"/>
495
+ <param pos="0" name="hw.product" value="Bridge"/>
457
496
  <param pos="0" name="hw.vendor" value="Eagle Eye Networks"/>
458
497
  </fingerprint>
459
498
 
460
499
  <!-- Netgear Products -->
500
+
501
+ <fingerprint pattern="^NETGEAR ReadyNAS$">
502
+ <description>NETGEAR ReadyNAS</description>
503
+ <example>NETGEAR ReadyNAS</example>
504
+ <param pos="0" name="os.vendor" value="Netgear"/>
505
+ <param pos="0" name="os.product" value="Linux"/>
506
+ <param pos="0" name="hw.vendor" value="Netgear"/>
507
+ <param pos="0" name="hw.device" value="NAS"/>
508
+ <param pos="0" name="hw.family" value="ReadyNAS"/>
509
+ <param pos="0" name="hw.product" value="ReadyNAS"/>
510
+ </fingerprint>
511
+
461
512
  <fingerprint pattern="^(?:NETGEAR|NetGear) ([a-zA-Z0-9\-\+]+)$">
462
513
  <description>Netgear Switches</description>
463
514
  <example hw.product="GS108T">NETGEAR GS108T</example>
@@ -566,9 +617,6 @@
566
617
  <param pos="0" name="hw.product" value="Sigma Control 2"/>
567
618
  </fingerprint>
568
619
 
569
-
570
-
571
-
572
620
  <fingerprint pattern="^WebPower$">
573
621
  <description>Eltek Power Controller</description>
574
622
  <example>WebPower</example>
@@ -651,9 +699,10 @@
651
699
  <param pos="1" name="os.product"/>
652
700
  </fingerprint>
653
701
 
654
- <fingerprint pattern="^Cisco UCS KVM Direct$">
655
- <description>Cisco UCS KVM Direct</description>
702
+ <fingerprint pattern="^Cisco (?:UCS KVM Direct|KVM)$">
703
+ <description>Cisco KVM</description>
656
704
  <example>Cisco UCS KVM Direct</example>
705
+ <example>Cisco KVM</example>
657
706
  <param pos="0" name="hw.vendor" value="Cisco"/>
658
707
  <param pos="0" name="hw.device" value="Lights Out Management"/>
659
708
  <param pos="0" name="hw.product" value="UCS Manager"/>
@@ -661,6 +710,7 @@
661
710
  <param pos="0" name="os.family" value="Linux"/>
662
711
  <param pos="0" name="os.product" value="NX-OS"/>
663
712
  <param pos="0" name="os.certainty" value="0.8"/>
713
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:nx-os:-"/>
664
714
  </fingerprint>
665
715
 
666
716
  <fingerprint pattern="^Cisco UCS Manager$">
@@ -673,6 +723,7 @@
673
723
  <param pos="0" name="os.family" value="Linux"/>
674
724
  <param pos="0" name="os.product" value="NX-OS"/>
675
725
  <param pos="0" name="os.certainty" value="0.8"/>
726
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:nx-os:-"/>
676
727
  </fingerprint>
677
728
 
678
729
  <fingerprint pattern="^Cisco (?:IMC Login|Integrated Management Controller)">
@@ -689,6 +740,25 @@
689
740
  <param pos="0" name="os.product" value="IMC"/>
690
741
  </fingerprint>
691
742
 
743
+ <fingerprint pattern="^Cisco Meeting Management$">
744
+ <description>Cisco Meeting Management Virtual Appliance</description>
745
+ <example>Cisco Meeting Management</example>
746
+ <param pos="0" name="hw.vendor" value="Cisco"/>
747
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
748
+ <param pos="0" name="hw.product" value="Meeting Management"/>
749
+ <param pos="0" name="os.vendor" value="Cisco"/>
750
+ <param pos="0" name="os.family" value="Linux"/>
751
+ <param pos="0" name="os.product" value="Meeting Management"/>
752
+ </fingerprint>
753
+
754
+ <fingerprint pattern="^Cisco SON$">
755
+ <description>Cisco Crosswork SON</description>
756
+ <example>Cisco SON</example>
757
+ <param pos="0" name="hw.vendor" value="Cisco"/>
758
+ <param pos="0" name="hw.device" value="Network Management Device"/>
759
+ <param pos="0" name="hw.product" value="Crosswork SON Appliance"/>
760
+ </fingerprint>
761
+
692
762
  <fingerprint pattern="^HPE Virtual Connect Manager$">
693
763
  <description>HPE Virtual Connect Manager</description>
694
764
  <example>HPE Virtual Connect Manager</example>
@@ -725,6 +795,7 @@
725
795
  <param pos="0" name="hw.device" value="Lights Out Management"/>
726
796
  <param pos="0" name="hw.vendor" value="HP"/>
727
797
  <param pos="0" name="hw.product" value="iLO"/>
798
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
728
799
  <param pos="0" name="os.vendor" value="HP"/>
729
800
  <param pos="0" name="os.device" value="Lights Out Management"/>
730
801
  <param pos="0" name="os.family" value="iLO"/>
@@ -737,6 +808,7 @@
737
808
  <param pos="0" name="hw.device" value="Lights Out Management"/>
738
809
  <param pos="0" name="hw.vendor" value="HP"/>
739
810
  <param pos="0" name="hw.product" value="iLO"/>
811
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
740
812
  <param pos="0" name="os.vendor" value="HP"/>
741
813
  <param pos="0" name="os.device" value="Lights Out Management"/>
742
814
  <param pos="0" name="os.family" value="iLO"/>
@@ -902,7 +974,6 @@
902
974
  <param pos="0" name="os.product" value="Polycom"/>
903
975
  </fingerprint>
904
976
 
905
-
906
977
  <fingerprint pattern="^Digium Phone Settings$">
907
978
  <description>Digium Phone Settings</description>
908
979
  <example>Digium Phone Settings</example>
@@ -958,6 +1029,7 @@
958
1029
  <param pos="0" name="hw.product" value="Catalyst"/>
959
1030
  <param pos="0" name="os.vendor" value="Cisco"/>
960
1031
  <param pos="0" name="os.product" value="CatOS"/>
1032
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:catos:-"/>
961
1033
  </fingerprint>
962
1034
 
963
1035
  <fingerprint pattern="^Cisco MDS 9000(?: and Nexus 5000)? Management Modules (\d+\.\d+\S+)$">
@@ -968,10 +1040,12 @@
968
1040
  <param pos="0" name="hw.vendor" value="Cisco"/>
969
1041
  <param pos="0" name="hw.device" value="Switch"/>
970
1042
  <param pos="0" name="hw.product" value="MDS 9000"/>
1043
+ <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:mds_9000:-"/>
971
1044
  <param pos="0" name="os.vendor" value="Cisco"/>
972
1045
  <param pos="0" name="os.device" value="Switch"/>
973
1046
  <param pos="0" name="os.product" value="MDS 9000"/>
974
1047
  <param pos="1" name="os.version"/>
1048
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:mds_9000:{os.version}"/>
975
1049
  </fingerprint>
976
1050
 
977
1051
  <fingerprint pattern="^Stealthwatch Management Console$">
@@ -1024,11 +1098,12 @@
1024
1098
  <example>Cisco Systems Login</example>
1025
1099
  <param pos="0" name="os.vendor" value="Cisco"/>
1026
1100
  <param pos="0" name="os.device" value="Wireless Controller"/>
1027
- <param pos="0" name="os.product" value="Wireless Controller"/>
1101
+ <param pos="0" name="os.product" value="Wireless LAN Controller"/>
1028
1102
  <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller:-"/>
1029
1103
  <param pos="0" name="hw.vendor" value="Cisco"/>
1030
1104
  <param pos="0" name="hw.device" value="Wireless Controller"/>
1031
- <param pos="0" name="hw.product" value="Wireless Controller"/>
1105
+ <param pos="0" name="hw.product" value="Wireless LAN Controller"/>
1106
+ <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:wireless_lan_controller:-"/>
1032
1107
  </fingerprint>
1033
1108
 
1034
1109
  <fingerprint pattern="^Duo Access Gateway$">
@@ -1111,12 +1186,24 @@
1111
1186
  <param pos="0" name="os.family" value="Linux"/>
1112
1187
  </fingerprint>
1113
1188
 
1114
- <fingerprint pattern="^KACE Systems Management Appliance">
1189
+ <fingerprint pattern="^KACE (?:Systems Management|Systems Deployment|Remote Site) Appliance">
1115
1190
  <description>KACE Systems Management Appliances</description>
1116
1191
  <example>KACE Systems Management Appliance Service Center</example>
1117
1192
  <example>KACE Systems Management Appliance Administrator Console</example>
1193
+ <example>KACE Systems Deployment Appliance</example>
1194
+ <example>KACE Remote Site Appliance</example>
1195
+ <param pos="0" name="hw.vendor" value="KACE"/>
1196
+ <param pos="0" name="hw.device" value="Support Appliance"/>
1197
+ <param pos="0" name="os.vendor" value="KACE"/>
1198
+ <param pos="0" name="os.family" value="FreeBSD"/>
1199
+ </fingerprint>
1200
+
1201
+ <fingerprint pattern="^K1000 Service Center$">
1202
+ <description>Dell K1000 Systems Management Appliances (KACE)</description>
1203
+ <example>K1000 Service Center</example>
1118
1204
  <param pos="0" name="hw.vendor" value="KACE"/>
1119
1205
  <param pos="0" name="hw.device" value="Support Appliance"/>
1206
+ <param pos="0" name="hw.product" value="K1000"/>
1120
1207
  <param pos="0" name="os.vendor" value="KACE"/>
1121
1208
  <param pos="0" name="os.family" value="FreeBSD"/>
1122
1209
  </fingerprint>
@@ -1141,6 +1228,7 @@
1141
1228
  </fingerprint>
1142
1229
 
1143
1230
  <!-- An OEM of the Quantum Corporation SuperLoader 3 -->
1231
+
1144
1232
  <fingerprint pattern="^On Board Remote Management$">
1145
1233
  <description>PowerVault 124T Tape Library</description>
1146
1234
  <example>On Board Remote Management</example>
@@ -1150,7 +1238,7 @@
1150
1238
  <param pos="0" name="os.vendor" value="Dell"/>
1151
1239
  </fingerprint>
1152
1240
 
1153
- <fingerprint pattern="^(HD-RX-\S+)$">
1241
+ <fingerprint pattern="^(HD-RX-\S+)$">
1154
1242
  <description>Crestron Multiformat Receivers</description>
1155
1243
  <example hw.product="HD-RX-201-C-E">HD-RX-201-C-E</example>
1156
1244
  <param pos="0" name="hw.vendor" value="Crestron"/>
@@ -1159,7 +1247,7 @@
1159
1247
  <param pos="0" name="os.vendor" value="Crestron"/>
1160
1248
  </fingerprint>
1161
1249
 
1162
- <fingerprint pattern="^Lencore Sound Manager 2$">
1250
+ <fingerprint pattern="^Lencore Sound Manager 2$">
1163
1251
  <description>Lencore Sound Manager 2</description>
1164
1252
  <example>Lencore Sound Manager 2</example>
1165
1253
  <param pos="0" name="hw.vendor" value="Lencore"/>
@@ -1169,9 +1257,9 @@
1169
1257
  <param pos="0" name="os.product" value="SmartServer"/>
1170
1258
  </fingerprint>
1171
1259
 
1172
- <!-- Various ICS/OT -->
1260
+ <!-- Various ICS/OT -->
1173
1261
 
1174
- <fingerprint pattern="^CTI (25\S+) Main Menu$">
1262
+ <fingerprint pattern="^CTI (25\S+) Main Menu$">
1175
1263
  <description>Siemens 257x Ethernet Adapter (CTI Branded)</description>
1176
1264
  <example hw.product="2572-A">CTI 2572-A Main Menu</example>
1177
1265
  <param pos="0" name="hw.vendor" value="Siemens"/>
@@ -1296,7 +1384,6 @@
1296
1384
  <param pos="0" name="os.vendor" value="IBHsofte"/>
1297
1385
  </fingerprint>
1298
1386
 
1299
-
1300
1387
  <!-- Software and Appliances -->
1301
1388
 
1302
1389
  <fingerprint pattern="^S7/S5 OPC Server$">
@@ -1304,7 +1391,6 @@
1304
1391
  <example>S7/S5 OPC Server</example>
1305
1392
  <param pos="0" name="service.vendor" value="Softing"/>
1306
1393
  <param pos="0" name="service.product" value="S7/S5 OPC Server"/>
1307
- <param pos="0" name="service.cpe23" value="cpe:/a:softing:s7-s5-opc-server:-"/>
1308
1394
  </fingerprint>
1309
1395
 
1310
1396
  <fingerprint pattern="^Nessus$">
@@ -1338,7 +1424,6 @@
1338
1424
  <example>RabbitMQ Management</example>
1339
1425
  <param pos="0" name="service.vendor" value="RabbitMQ"/>
1340
1426
  <param pos="0" name="service.product" value="Management Server"/>
1341
- <param pos="0" name="service.cpe23" value="cpe:/a:rabbitmq:rabbitmq-manager:-"/>
1342
1427
  </fingerprint>
1343
1428
 
1344
1429
  <fingerprint pattern="^Statistics Report for HAProxy$">
@@ -1346,14 +1431,13 @@
1346
1431
  <example>Statistics Report for HAProxy</example>
1347
1432
  <param pos="0" name="service.vendor" value="HAProxy"/>
1348
1433
  <param pos="0" name="service.product" value="HAProxy Stats Server"/>
1349
- <param pos="0" name="service.cpe23" value="cpe:/a:haproxy:stats-server:-"/>
1350
1434
  </fingerprint>
1351
1435
 
1352
1436
  <fingerprint pattern="^Open Manage&amp;trade;$">
1353
- <description>Dell Open Manage Admin</description>
1437
+ <description>Dell OpenManage Admin</description>
1354
1438
  <example>Open Manage&amp;trade;</example>
1355
1439
  <param pos="0" name="service.vendor" value="Dell"/>
1356
- <param pos="0" name="service.product" value="Open Manage"/>
1440
+ <param pos="0" name="service.product" value="OpenManage"/>
1357
1441
  <param pos="0" name="service.cpe23" value="cpe:/a:dell:openmanage:-"/>
1358
1442
  </fingerprint>
1359
1443
 
@@ -1362,7 +1446,7 @@
1362
1446
  <example host.name="teller01">TightVNC desktop [teller01]</example>
1363
1447
  <param pos="0" name="service.vendor" value="TightVNC"/>
1364
1448
  <param pos="0" name="service.product" value="Desktop"/>
1365
- <param pos="0" name="service.cpe23" value="cpe:/a:tightvnc:desktop:-"/>
1449
+ <param pos="0" name="service.cpe23" value="cpe:/a:tightvnc:tightvnc:-"/>
1366
1450
  <param pos="1" name="host.name"/>
1367
1451
  </fingerprint>
1368
1452
 
@@ -1374,6 +1458,14 @@
1374
1458
  <param pos="0" name="service.cpe23" value="cpe:/a:novnc:novnc:-"/>
1375
1459
  </fingerprint>
1376
1460
 
1461
+ <fingerprint pattern="^VNC Viewer for Java$">
1462
+ <description>RealVNC built-in webserver</description>
1463
+ <example>VNC Viewer for Java</example>
1464
+ <param pos="0" name="service.vendor" value="RealVNC Ltd."/>
1465
+ <param pos="0" name="service.product" value="RealVNC"/>
1466
+ <param pos="0" name="service.cpe23" value="cpe:/a:realvnc:realvnc:-"/>
1467
+ </fingerprint>
1468
+
1377
1469
  <fingerprint pattern="^.* \[Jenkins\]$">
1378
1470
  <description>Jenkins Customized Dashboard</description>
1379
1471
  <example>Continuous Integrations [Jenkins]</example>
@@ -1388,7 +1480,6 @@
1388
1480
  <example>Shell In A Box</example>
1389
1481
  <param pos="0" name="service.vendor" value="ShellInABox"/>
1390
1482
  <param pos="0" name="service.product" value="ShellInABox"/>
1391
- <param pos="0" name="service.cpe23" value="cpe:/a:shellinabox:shellinabox:-"/>
1392
1483
  </fingerprint>
1393
1484
 
1394
1485
  <fingerprint pattern="^AgilentLicenseManagerService Service$">
@@ -1396,29 +1487,38 @@
1396
1487
  <example>AgilentLicenseManagerService Service</example>
1397
1488
  <param pos="0" name="service.vendor" value="Agilent"/>
1398
1489
  <param pos="0" name="service.product" value="License Manager"/>
1399
- <param pos="0" name="service.cpe23" value="cpe:/a:agilent:license-manager-"/>
1400
1490
  </fingerprint>
1401
1491
 
1402
- <fingerprint pattern="^Red Hat OpenStack Platform Director$">
1492
+ <fingerprint pattern="^Red Hat(?:.reg;)? OpenStack (?:Platform )?Director$">
1403
1493
  <description>Red Hat OpenStack Platform Director</description>
1404
1494
  <example>Red Hat OpenStack Platform Director</example>
1495
+ <example>Red Hat&amp;reg; OpenStack Director</example>
1405
1496
  <param pos="0" name="service.vendor" value="Red Hat"/>
1406
1497
  <param pos="0" name="service.product" value="Open Stack Platform Director"/>
1407
- <param pos="0" name="service.cpe23" value="cpe:/a:openstack:platform-director:-"/>
1498
+ </fingerprint>
1499
+
1500
+ <fingerprint pattern="^Login - OpenStack Dashboard$">
1501
+ <description>OpenStack Dashboard</description>
1502
+ <example>Login - OpenStack Dashboard</example>
1503
+ <param pos="0" name="service.vendor" value="OpenStack"/>
1504
+ <param pos="0" name="service.product" value="Dashboard"/>
1408
1505
  </fingerprint>
1409
1506
 
1410
1507
  <fingerprint pattern="^splunkd$">
1411
1508
  <description>Splunk HTTP server used in the web interface, forwarders, indexers and more</description>
1412
1509
  <example>splunkd</example>
1413
1510
  <param pos="0" name="service.vendor" value="Splunk"/>
1414
- <param pos="0" name="service.product" value="Splunkd"/>
1415
- <param pos="0" name="service.cpe23" value="cpe:/a:splunk:splunkd:-"/>
1511
+ <param pos="0" name="service.product" value="Splunk"/>
1512
+ <param pos="0" name="service.cpe23" value="cpe:/a:splunk:splunk:-"/>
1416
1513
  </fingerprint>
1417
1514
 
1418
- <fingerprint pattern="^VMware Horizon$">
1515
+ <fingerprint pattern="^VMware(?: Horizon(?: View)?|.nbsp;Horizon| View Portal)?$">
1419
1516
  <description>VMware Horizon</description>
1420
1517
  <example>VMware Horizon</example>
1421
- <param pos="0" name="service.vendor" value="VMWare"/>
1518
+ <example>VMware Horizon View</example>
1519
+ <example>VMware&amp;nbsp;Horizon</example>
1520
+ <example>VMware View Portal</example>
1521
+ <param pos="0" name="service.vendor" value="VMware"/>
1422
1522
  <param pos="0" name="service.product" value="Horizon"/>
1423
1523
  <param pos="0" name="service.cpe23" value="cpe:/a:vmware:horizon:-"/>
1424
1524
  </fingerprint>
@@ -1426,14 +1526,13 @@
1426
1526
  <fingerprint pattern="^Welcome to VMware Site Recovery Manager$">
1427
1527
  <description>VMware SRM</description>
1428
1528
  <example>Welcome to VMware Site Recovery Manager</example>
1429
- <param pos="0" name="os.vendor" value="VMWare"/>
1529
+ <param pos="0" name="os.vendor" value="VMware"/>
1430
1530
  <param pos="0" name="os.product" value="Linux"/>
1431
- <param pos="0" name="hw.vendor" value="VMWare"/>
1531
+ <param pos="0" name="hw.vendor" value="VMware"/>
1432
1532
  <param pos="0" name="hw.device" value="Appliance"/>
1433
1533
  <param pos="0" name="hw.product" value="Site Recovery Manager"/>
1434
- <param pos="0" name="service.vendor" value="VMWare"/>
1534
+ <param pos="0" name="service.vendor" value="VMware"/>
1435
1535
  <param pos="0" name="service.product" value="Site Recovery Manager"/>
1436
- <param pos="0" name="service.cpe23" value="cpe:/a:vmware:site_recovery_manager:-"/>
1437
1536
  </fingerprint>
1438
1537
 
1439
1538
  <fingerprint pattern="^Graylog Web Interface$">
@@ -1444,15 +1543,17 @@
1444
1543
  <param pos="0" name="service.cpe23" value="cpe:/a:graylog:graylog:-"/>
1445
1544
  </fingerprint>
1446
1545
 
1447
- <fingerprint pattern="^Kibana$">
1546
+ <!-- The 'vendor' here has changed over time -->
1547
+
1548
+ <fingerprint pattern="^(?:Elastic\s+)?Kibana$">
1448
1549
  <description>Kibana Web Interface</description>
1449
1550
  <example>Kibana</example>
1450
- <param pos="0" name="service.vendor" value="Kibana"/>
1551
+ <example>Elastic Kibana</example>
1552
+ <param pos="0" name="service.vendor" value="Elastic"/>
1451
1553
  <param pos="0" name="service.product" value="Kibana"/>
1452
- <param pos="0" name="service.cpe23" value="cpe:/a:kibana:kibana:-"/>
1453
1554
  </fingerprint>
1454
1555
 
1455
- <fingerprint pattern="^Grafana$">
1556
+ <fingerprint pattern="^Grafana$">
1456
1557
  <description>Grafana Web Interface</description>
1457
1558
  <example>Grafana</example>
1458
1559
  <param pos="0" name="service.vendor" value="Grafana"/>
@@ -1460,20 +1561,20 @@
1460
1561
  <param pos="0" name="service.cpe23" value="cpe:/a:grafana:grafana:-"/>
1461
1562
  </fingerprint>
1462
1563
 
1564
+ <fingerprint pattern="^Prometheus Time Series Collection and Processing Server$">
1565
+ <description>Prometheus Web Interface</description>
1566
+ <example>Prometheus Time Series Collection and Processing Server</example>
1567
+ <param pos="0" name="service.vendor" value="Prometheus"/>
1568
+ <param pos="0" name="service.product" value="Prometheus"/>
1569
+ <param pos="0" name="service.cpe23" value="cpe:/a:prometheus:prometheus:-"/>
1570
+ </fingerprint>
1571
+
1463
1572
  <fingerprint pattern="^Symantec Endpoint Protection Manager$">
1464
1573
  <description>Symantec Endpoint Protection Manager</description>
1465
1574
  <example>Symantec Endpoint Protection Manager</example>
1466
1575
  <param pos="0" name="service.vendor" value="Symantec"/>
1467
1576
  <param pos="0" name="service.product" value="Endpoint Protection Manager"/>
1468
- <param pos="0" name="service.cpe23" value="cpe:/a:symantec:endpoint-protection-manager:-"/>
1469
- </fingerprint>
1470
-
1471
- <fingerprint pattern="^Login Gateway - Kiwi Syslog Web Access$">
1472
- <description>Kiwi Syslog Web Access</description>
1473
- <example>Login Gateway - Kiwi Syslog Web Access</example>
1474
- <param pos="0" name="service.vendor" value="Solarwinds"/>
1475
- <param pos="0" name="service.product" value="Kiwi Syslog Web Access"/>
1476
- <param pos="0" name="service.cpe23" value="cpe:/a:solarwinds:kiwi-syslog-web:-"/>
1577
+ <param pos="0" name="service.cpe23" value="cpe:/a:symantec:endpoint_protection_manager:-"/>
1477
1578
  </fingerprint>
1478
1579
 
1479
1580
  <fingerprint pattern="^Hadoop Administration$">
@@ -1481,7 +1582,6 @@
1481
1582
  <example>Hadoop Administration</example>
1482
1583
  <param pos="0" name="service.vendor" value="Hadoop"/>
1483
1584
  <param pos="0" name="service.product" value="Hadoop Web Admin"/>
1484
- <param pos="0" name="service.cpe23" value="cpe:/a:hadoop:web-admin:-"/>
1485
1585
  </fingerprint>
1486
1586
 
1487
1587
  <fingerprint pattern="^ManageEngine OpManager$">
@@ -1492,8 +1592,16 @@
1492
1592
  <param pos="0" name="service.cpe23" value="cpe:/a:manageengine:opmanager:-"/>
1493
1593
  </fingerprint>
1494
1594
 
1595
+ <fingerprint pattern="^ManageEngine ADAudit Plus$">
1596
+ <description>ManageEngineADAudit Plus</description>
1597
+ <example>ManageEngine ADAudit Plus</example>
1598
+ <param pos="0" name="service.vendor" value="ManageEngine"/>
1599
+ <param pos="0" name="service.product" value="ADAudit Plus"/>
1600
+ </fingerprint>
1601
+
1495
1602
  <fingerprint pattern="^(ScanFront \d.+)Web Menu$">
1496
1603
  <!-- no space between the product model and "Web Menu" in the title -->
1604
+
1497
1605
  <description>Canon ScanFront</description>
1498
1606
  <example os.product="ScanFront 220" hw.product="ScanFront 220">ScanFront 220Web Menu</example>
1499
1607
  <param pos="0" name="hw.device" value="Scanner"/>
@@ -1508,7 +1616,7 @@
1508
1616
  <description>CDVI Door Control System</description>
1509
1617
  <example>CDVI Update</example>
1510
1618
  <param pos="0" name="hw.vendor" value="CDVI"/>
1511
- <param pos="0" name="hw.device" value="Access Controller"/>
1619
+ <param pos="0" name="hw.device" value="Access Control"/>
1512
1620
  </fingerprint>
1513
1621
 
1514
1622
  <fingerprint pattern="^Liebert OpenComms Network Interface Card$">
@@ -1547,6 +1655,54 @@
1547
1655
  <param pos="0" name="os.family" value="NetScaler"/>
1548
1656
  <param pos="0" name="os.device" value="Network Management Device"/>
1549
1657
  <param pos="0" name="os.product" value="NetScaler"/>
1658
+ <param pos="0" name="service.vendor" value="Citrix"/>
1659
+ <param pos="0" name="service.family" value="NetScaler"/>
1660
+ <param pos="0" name="service.device" value="Network Management Device"/>
1661
+ <param pos="0" name="service.product" value="NetScaler"/>
1662
+ <param pos="0" name="service.cpe23" value="cpe:/a:citrix:netscaler:-"/>
1663
+ </fingerprint>
1664
+
1665
+ <fingerprint pattern="^Netscaler Gateway$">
1666
+ <description>Citrix Netscaler Gateway</description>
1667
+ <example>Netscaler Gateway</example>
1668
+ <param pos="0" name="os.vendor" value="Citrix"/>
1669
+ <param pos="0" name="os.family" value="NetScaler"/>
1670
+ <param pos="0" name="os.device" value="Network Management Device"/>
1671
+ <param pos="0" name="os.product" value="NetScaler Gateway"/>
1672
+ <param pos="0" name="service.vendor" value="Citrix"/>
1673
+ <param pos="0" name="service.family" value="NetScaler"/>
1674
+ <param pos="0" name="service.device" value="Network Management Device"/>
1675
+ <param pos="0" name="service.product" value="NetScaler Gateway"/>
1676
+ </fingerprint>
1677
+
1678
+ <fingerprint pattern="^Citrix (?:NetScaler SDX|ADC SDX)$">
1679
+ <description>Citrix NetScaler SDX Gateway</description>
1680
+ <example>Citrix NetScaler SDX</example>
1681
+ <example>Citrix ADC SDX</example>
1682
+ <param pos="0" name="os.vendor" value="Citrix"/>
1683
+ <param pos="0" name="os.family" value="NetScaler"/>
1684
+ <param pos="0" name="os.device" value="Network Management Device"/>
1685
+ <param pos="0" name="os.product" value="NetScaler SDX Gateway"/>
1686
+ <param pos="0" name="service.vendor" value="Citrix"/>
1687
+ <param pos="0" name="service.family" value="NetScaler"/>
1688
+ <param pos="0" name="service.device" value="Network Management Device"/>
1689
+ <param pos="0" name="service.product" value="NetScaler SDX Gateway"/>
1690
+ </fingerprint>
1691
+
1692
+ <fingerprint pattern="^Citrix NetScaler Insight Center$">
1693
+ <description>Citrix NetScaler Insight Center</description>
1694
+ <example>Citrix NetScaler Insight Center</example>
1695
+ <param pos="0" name="service.vendor" value="Citrix"/>
1696
+ <param pos="0" name="service.family" value="NetScaler"/>
1697
+ <param pos="0" name="service.product" value="NetScaler Insight Center"/>
1698
+ </fingerprint>
1699
+
1700
+ <fingerprint pattern="^Brother ([^\s]+) series$">
1701
+ <description>Brother Printers</description>
1702
+ <example hw.product="MFC-L5900DW">Brother MFC-L5900DW series</example>
1703
+ <param pos="0" name="hw.vendor" value="Brother"/>
1704
+ <param pos="0" name="hw.device" value="Printer"/>
1705
+ <param pos="1" name="hw.product"/>
1550
1706
  </fingerprint>
1551
1707
 
1552
1708
  <fingerprint pattern="^HP (?:Color )?LaserJet ([^&amp;]+)&amp;">
@@ -1561,10 +1717,10 @@
1561
1717
  <fingerprint pattern="^Jamf Pro Login - Jamf Pro v(\S+)$">
1562
1718
  <description>Jamf Pro</description>
1563
1719
  <example service.version="10.14.0-t1563397490">Jamf Pro Login - Jamf Pro v10.14.0-t1563397490</example>
1564
- <param pos="0" name="service.vendor" value="JAMF"/>
1565
- <param pos="0" name="service.product" value="Pro"/>
1566
- <param pos="0" name="service.cpe23" value="cpe:/a:jamf:pro:-"/>
1720
+ <param pos="0" name="service.vendor" value="Jamf"/>
1721
+ <param pos="0" name="service.product" value="Jamf Pro"/>
1567
1722
  <param pos="1" name="service.version"/>
1723
+ <param pos="0" name="service.cpe23" value="cpe:/a:jamf:jamf:{service.version}"/>
1568
1724
  </fingerprint>
1569
1725
 
1570
1726
  <fingerprint pattern="^Keyper Systems Administration - Login$">
@@ -1599,6 +1755,14 @@
1599
1755
  <param pos="0" name="hw.product" value="Appliance"/>
1600
1756
  </fingerprint>
1601
1757
 
1758
+ <fingerprint pattern="^Axonius Cybersecurity Asset Management Platform$">
1759
+ <description>Axonius Appliance</description>
1760
+ <example>Axonius Cybersecurity Asset Management Platform</example>
1761
+ <param pos="0" name="hw.vendor" value="Axonius"/>
1762
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1763
+ <param pos="0" name="hw.product" value="Asset Management"/>
1764
+ </fingerprint>
1765
+
1602
1766
  <fingerprint pattern="^CRESTRON$">
1603
1767
  <description>Crestron Video Conferencing</description>
1604
1768
  <example>CRESTRON</example>
@@ -1627,4 +1791,926 @@
1627
1791
  <param pos="0" name="hw.product" value="IP2IR"/>
1628
1792
  </fingerprint>
1629
1793
 
1630
- </fingerprints>
1794
+ <fingerprint pattern="^AVTECH Device ManageR$">
1795
+ <description>AVTECH Device ManageR Software</description>
1796
+ <example>AVTECH Device ManageR</example>
1797
+ <param pos="0" name="service.vendor" value="AVTECH"/>
1798
+ <param pos="0" name="service.product" value="Device Manager"/>
1799
+ </fingerprint>
1800
+
1801
+ <fingerprint pattern="^AVTECH Software, Inc\. - Room Alert(?:&amp;reg;)?\s+([a-zA-Z0-9/]+) - Advanced">
1802
+ <description>AVTECH RoomAlert</description>
1803
+ <example hw.product="Room Alert 11E" hw.product.model="11E">AVTECH Software, Inc. - Room Alert 11E - Advanced Computer Room Environment Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1804
+ <example hw.product="Room Alert 32E/W" hw.product.model="32E/W">AVTECH Software, Inc. - Room Alert 32E/W - Advanced Computer Room Environment Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1805
+ <example hw.product="Room Alert 32E/W" hw.product.model="32E/W">AVTECH Software, Inc. - Room Alert&amp;reg; 32E/W - Advanced Computer Room Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1806
+ <param pos="0" name="hw.vendor" value="AVTECH"/>
1807
+ <param pos="0" name="hw.device" value="Monitoring"/>
1808
+ <param pos="1" name="hw.product.model"/>
1809
+ <param pos="0" name="hw.product" value="Room Alert {hw.product.model}"/>
1810
+ </fingerprint>
1811
+
1812
+ <fingerprint pattern="^AVTECH Software, Inc\. - TemPageR\s+([a-zA-Z0-9/]+) - Real-Time">
1813
+ <description>AVTECH TepPageR</description>
1814
+ <example hw.product="TemPageR 3E" hw.product.model="3E">AVTECH Software, Inc. - TemPageR 3E - Real-Time Temperature Monitor For IT &amp;amp; Facilities Environment Monitoring</example>
1815
+ <param pos="0" name="hw.vendor" value="AVTECH"/>
1816
+ <param pos="0" name="hw.device" value="Monitoring"/>
1817
+ <param pos="1" name="hw.product.model"/>
1818
+ <param pos="0" name="hw.product" value="TemPageR {hw.product.model}"/>
1819
+ </fingerprint>
1820
+
1821
+ <fingerprint pattern="^AppDynamics$">
1822
+ <description>Cisco AppDynamics Appliance</description>
1823
+ <example>AppDynamics</example>
1824
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1825
+ <param pos="0" name="hw.device" value="Network Appliance"/>
1826
+ <param pos="0" name="hw.product" value="AppDynamics"/>
1827
+ </fingerprint>
1828
+
1829
+ <fingerprint pattern="^INDECT - CarDetector Configurator$">
1830
+ <description>INDECT Parking Management Console</description>
1831
+ <example>INDECT - CarDetector Configurator</example>
1832
+ <param pos="0" name="hw.vendor" value="INDECT"/>
1833
+ <param pos="0" name="hw.device" value="Network Appliance"/>
1834
+ <param pos="0" name="hw.product" value="CarDetector"/>
1835
+ </fingerprint>
1836
+
1837
+ <fingerprint pattern="^J-Link Pro Webserver$">
1838
+ <description>Segger J-Link Pro</description>
1839
+ <example>J-Link Pro Webserver</example>
1840
+ <param pos="0" name="hw.vendor" value="Segger"/>
1841
+ <param pos="0" name="hw.device" value="JTAG Adapter"/>
1842
+ <param pos="0" name="hw.product" value="J-Link Pro"/>
1843
+ </fingerprint>
1844
+
1845
+ <fingerprint pattern="^OneFS$">
1846
+ <description>EMC Isilon OneFS</description>
1847
+ <example>OneFS</example>
1848
+ <param pos="0" name="os.family" value="FreeBSD"/>
1849
+ <param pos="0" name="os.vendor" value="EMC"/>
1850
+ <param pos="0" name="os.product" value="Isilon OneFS OS"/>
1851
+ <param pos="0" name="hw.vendor" value="EMC"/>
1852
+ <param pos="0" name="hw.device" value="NAS"/>
1853
+ <param pos="0" name="hw.product" value="Isilon OneFS"/>
1854
+ </fingerprint>
1855
+
1856
+ <fingerprint pattern="^Isilon InsightIQ$">
1857
+ <description>EMC Isilon InsightIQ</description>
1858
+ <example>Isilon InsightIQ</example>
1859
+ <param pos="0" name="os.family" value="FreeBSD"/>
1860
+ <param pos="0" name="os.vendor" value="EMC"/>
1861
+ <param pos="0" name="os.product" value="Isilon OneFS OS"/>
1862
+ <param pos="0" name="hw.vendor" value="EMC"/>
1863
+ <param pos="0" name="hw.device" value="Network Appliance"/>
1864
+ <param pos="0" name="hw.product" value="Isilon InsightIQ"/>
1865
+ </fingerprint>
1866
+
1867
+ <fingerprint pattern="^Active Intelligence Engine$">
1868
+ <description>Attivio Active Intelligence Engine</description>
1869
+ <example>Active Intelligence Engine</example>
1870
+ <param pos="0" name="service.vendor" value="Attivio"/>
1871
+ <param pos="0" name="service.product" value="Active Intelligence Engine"/>
1872
+ </fingerprint>
1873
+
1874
+ <fingerprint pattern="^Welcome to WildFly(?: Application Server)?\s+(\d+)">
1875
+ <description>WildFly with version</description>
1876
+ <example service.version="11">Welcome to WildFly 11</example>
1877
+ <example service.version="8">Welcome to WildFly 8</example>
1878
+ <example service.version="8">Welcome to WildFly Application Server 8</example>
1879
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1880
+ <param pos="0" name="service.product" value="WildFly"/>
1881
+ <param pos="1" name="service.version"/>
1882
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:wildfly:{service.version}"/>
1883
+ </fingerprint>
1884
+
1885
+ <fingerprint pattern="^Welcome to WildFly$">
1886
+ <description>WildFly with no version</description>
1887
+ <example>Welcome to WildFly</example>
1888
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1889
+ <param pos="0" name="service.product" value="WildFly"/>
1890
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:wildfly:-"/>
1891
+ </fingerprint>
1892
+
1893
+ <fingerprint pattern="^Welcome to JBoss Application Server ([\d\.]+)$">
1894
+ <description>JBoss Application Server w/ Version</description>
1895
+ <example service.version="7">Welcome to JBoss Application Server 7</example>
1896
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1897
+ <param pos="0" name="service.product" value="JBoss AS"/>
1898
+ <param pos="1" name="service.version"/>
1899
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_wildfly_application_server:{service.version}"/>
1900
+ </fingerprint>
1901
+
1902
+ <fingerprint pattern="^Welcome to JBoss(?: AS|.trade;)$">
1903
+ <description>JBoss Application Server w/o Version</description>
1904
+ <example>Welcome to JBoss AS</example>
1905
+ <example>Welcome to JBoss&amp;trade;</example>
1906
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1907
+ <param pos="0" name="service.product" value="JBoss AS"/>
1908
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_wildfly_application_server:-"/>
1909
+ </fingerprint>
1910
+
1911
+ <fingerprint pattern="^(?:JBoss )?EAP ([\d\.]+)$">
1912
+ <description>JBoss EAP w/ Version</description>
1913
+ <example service.version="7">JBoss EAP 7</example>
1914
+ <example service.version="7">EAP 7</example>
1915
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1916
+ <param pos="0" name="service.product" value="JBoss EAP"/>
1917
+ <param pos="1" name="service.version"/>
1918
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:{service.version}"/>
1919
+ </fingerprint>
1920
+
1921
+ <fingerprint pattern="^Welcome to JBoss EAP$">
1922
+ <description>JBoss EAP w/o Version</description>
1923
+ <example>Welcome to JBoss EAP</example>
1924
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1925
+ <param pos="0" name="service.product" value="JBoss EAP"/>
1926
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:-"/>
1927
+ </fingerprint>
1928
+
1929
+ <fingerprint pattern="^S2 Network Node$">
1930
+ <description>S2 Network Node Appliance</description>
1931
+ <example>S2 Network Node</example>
1932
+ <param pos="0" name="hw.vendor" value="S2"/>
1933
+ <param pos="0" name="hw.device" value="Access Control"/>
1934
+ <param pos="0" name="hw.product" value="Network Node"/>
1935
+ </fingerprint>
1936
+
1937
+ <fingerprint pattern="^(?:S2 Netbox Login|Home - NetBox)$">
1938
+ <description>S2 Netbox Appliance</description>
1939
+ <example>S2 Netbox Login</example>
1940
+ <example>Home - NetBox</example>
1941
+ <param pos="0" name="hw.vendor" value="S2"/>
1942
+ <param pos="0" name="hw.device" value="Access Control"/>
1943
+ <param pos="0" name="hw.product" value="Netbox"/>
1944
+ </fingerprint>
1945
+
1946
+ <fingerprint pattern="^S2 NetVR Login$">
1947
+ <description>S2 NetVR Appliance</description>
1948
+ <example>S2 NetVR Login</example>
1949
+ <param pos="0" name="hw.vendor" value="S2"/>
1950
+ <param pos="0" name="hw.device" value="Access Control"/>
1951
+ <param pos="0" name="hw.product" value="NetVR"/>
1952
+ </fingerprint>
1953
+
1954
+ <fingerprint pattern="^IBM HTTP Server$">
1955
+ <description>IBM HTTP Server w/o Version</description>
1956
+ <example>IBM HTTP Server</example>
1957
+ <param pos="0" name="service.vendor" value="IBM"/>
1958
+ <param pos="0" name="service.product" value="HTTPD"/>
1959
+ <param pos="0" name="service.family" value="Apache"/>
1960
+ </fingerprint>
1961
+
1962
+ <fingerprint pattern="^IBM HTTP Server ([0-9\.]+)$">
1963
+ <description>IBM HTTP Server with Version</description>
1964
+ <example service.version="8.5.5">IBM HTTP Server 8.5.5</example>
1965
+ <param pos="0" name="service.vendor" value="IBM"/>
1966
+ <param pos="0" name="service.product" value="HTTPD"/>
1967
+ <param pos="0" name="service.family" value="Apache"/>
1968
+ <param pos="1" name="service.version"/>
1969
+ </fingerprint>
1970
+
1971
+ <fingerprint pattern="^IBM Tivoli Storage Manager$">
1972
+ <description>IBM Tivoli Storage Manager</description>
1973
+ <example>IBM Tivoli Storage Manager</example>
1974
+ <param pos="0" name="service.vendor" value="IBM"/>
1975
+ <param pos="0" name="service.family" value="Tivoli"/>
1976
+ <param pos="0" name="service.product" value="Tivoli Storage Manager"/>
1977
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:tivoli_storage_manager:-"/>
1978
+ </fingerprint>
1979
+
1980
+ <fingerprint pattern="^IBM FlashCopy Manager$">
1981
+ <description>IBM FlashCopy Manager</description>
1982
+ <example>IBM FlashCopy Manager</example>
1983
+ <param pos="0" name="service.vendor" value="IBM"/>
1984
+ <param pos="0" name="service.family" value="Tivoli"/>
1985
+ <param pos="0" name="service.product" value="Tivoli Storage FlashCopy Manager"/>
1986
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:tivoli_storage_flashcopy_manager:-"/>
1987
+ </fingerprint>
1988
+
1989
+ <fingerprint pattern="^(?:Jupyter Notebook|JupyterLab|Home Page - Select or create a notebook)$">
1990
+ <description>Jupyter Notebook Server</description>
1991
+ <example>Jupyter Notebook</example>
1992
+ <example>JupyterLab</example>
1993
+ <example>Home Page - Select or create a notebook</example>
1994
+ <param pos="0" name="service.vendor" value="Jupyter"/>
1995
+ <param pos="0" name="service.product" value="Notebook"/>
1996
+ <param pos="0" name="service.cpe23" value="cpe:/a:jupyter:notebook:-"/>
1997
+ </fingerprint>
1998
+
1999
+ <fingerprint pattern="^Redirect to userimage: /control/userimage\.html$">
2000
+ <description>Mobotix Network Camera</description>
2001
+ <example>Redirect to userimage: /control/userimage.html</example>
2002
+ <param pos="0" name="hw.vendor" value="Mobotix"/>
2003
+ <param pos="0" name="hw.device" value="Web cam"/>
2004
+ <param pos="0" name="hw.product" value="IP Camera"/>
2005
+ </fingerprint>
2006
+
2007
+ <fingerprint pattern="^Apache ActiveMQ$">
2008
+ <description>Apache ActiveMQ</description>
2009
+ <example>Apache ActiveMQ</example>
2010
+ <param pos="0" name="service.vendor" value="Apache"/>
2011
+ <param pos="0" name="service.family" value="ActiveMQ"/>
2012
+ <param pos="0" name="service.product" value="ActiveMQ"/>
2013
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:activemq:-"/>
2014
+ </fingerprint>
2015
+
2016
+ <fingerprint pattern="^Google Wifi$">
2017
+ <description>Google OnHub Router</description>
2018
+ <example>Google Wifi</example>
2019
+ <param pos="0" name="os.vendor" value="Google"/>
2020
+ <param pos="0" name="os.family" value="Linux"/>
2021
+ <param pos="0" name="hw.vendor" value="Google"/>
2022
+ <param pos="0" name="hw.device" value="Router"/>
2023
+ <param pos="0" name="hw.product" value="OnHub"/>
2024
+ </fingerprint>
2025
+
2026
+ <fingerprint pattern="PRTG Network Monitor">
2027
+ <description>PRTG Network Monitor (not anchored)</description>
2028
+ <example>PRTG Network Monitor (WIN-R4C1T8HRRAA)</example>
2029
+ <example>BigCorp PRTG Network Monitor (PRTG2)</example>
2030
+ <param pos="0" name="service.vendor" value="PRTG"/>
2031
+ <param pos="0" name="service.product" value="Network Monitor"/>
2032
+ </fingerprint>
2033
+
2034
+ <fingerprint pattern="^(?:BrightSign&amp;reg;|BrightSign Applications|Diagnostics Web Server)$">
2035
+ <description>BrightSign Controller</description>
2036
+ <example>BrightSign&amp;reg;</example>
2037
+ <example>BrightSign Applications</example>
2038
+ <example>Diagnostics Web Server</example>
2039
+ <param pos="0" name="os.vendor" value="BrightSign"/>
2040
+ <param pos="0" name="os.family" value="Linux"/>
2041
+ <param pos="0" name="hw.vendor" value="BrightSign"/>
2042
+ <param pos="0" name="hw.device" value="Media Server"/>
2043
+ <param pos="0" name="hw.product" value="Digital Signage Player"/>
2044
+ </fingerprint>
2045
+
2046
+ <fingerprint pattern="^Linksys Smart Wi-Fi$">
2047
+ <description>Linksys Smart Wi-Fi</description>
2048
+ <example>Linksys Smart Wi-Fi</example>
2049
+ <param pos="0" name="os.vendor" value="Linksys"/>
2050
+ <param pos="0" name="os.family" value="Linux"/>
2051
+ <param pos="0" name="hw.vendor" value="Linksys"/>
2052
+ <param pos="0" name="hw.device" value="WAP"/>
2053
+ </fingerprint>
2054
+
2055
+ <fingerprint pattern="^(?:DD System Manager|System Manager)$">
2056
+ <description>Data Domain System Manager</description>
2057
+ <example>DD System Manager</example>
2058
+ <example>System Manager</example>
2059
+ <param pos="0" name="os.vendor" value="Data Domain"/>
2060
+ <param pos="0" name="os.product" value="DD OS"/>
2061
+ <param pos="0" name="os.device" value="Storage"/>
2062
+ <param pos="0" name="hw.vendor" value="Data Domain"/>
2063
+ <param pos="0" name="hw.product" value="DD OS"/>
2064
+ <param pos="0" name="hw.device" value="Storage"/>
2065
+ </fingerprint>
2066
+
2067
+ <fingerprint pattern="^SonarQube$">
2068
+ <description>SonarQube</description>
2069
+ <example>SonarQube</example>
2070
+ <param pos="0" name="service.vendor" value="SonarQube"/>
2071
+ <param pos="0" name="service.product" value="SonarQube"/>
2072
+ </fingerprint>
2073
+
2074
+ <fingerprint pattern="^(\S+) - Opengear Management Console$">
2075
+ <description>Opengear Management Console</description>
2076
+ <example host.name="server01">server01 - Opengear Management Console</example>
2077
+ <param pos="0" name="service.vendor" value="Opengear"/>
2078
+ <param pos="0" name="service.product" value="Management Console"/>
2079
+ <param pos="1" name="host.name"/>
2080
+ </fingerprint>
2081
+
2082
+ <fingerprint pattern="^Login \(Virtual Traffic Manager Appliance :: (\S+)\)$">
2083
+ <description>Brocade Virtual Traffic Manager Appliance</description>
2084
+ <example host.name="10.0.0.1">Login (Virtual Traffic Manager Appliance :: 10.0.0.1)</example>
2085
+ <param pos="0" name="hw.vendor" value="Brocade"/>
2086
+ <param pos="0" name="hw.device" value="Network Management Device"/>
2087
+ <param pos="0" name="hw.product" value="Virtual Traffic Manager"/>
2088
+ <param pos="1" name="host.name"/>
2089
+ </fingerprint>
2090
+
2091
+ <fingerprint pattern="^Chronograf$">
2092
+ <description>Chronograf Dashboard</description>
2093
+ <example>Chronograf</example>
2094
+ <param pos="0" name="service.vendor" value="InfluxData"/>
2095
+ <param pos="0" name="service.product" value="Chronograf"/>
2096
+ </fingerprint>
2097
+
2098
+ <fingerprint pattern="^InfluxDB 2.0$">
2099
+ <description>InfluxDB 2.0 Dashboard</description>
2100
+ <example>InfluxDB 2.0</example>
2101
+ <param pos="0" name="service.vendor" value="InfluxData"/>
2102
+ <param pos="0" name="service.product" value="InfluxDB"/>
2103
+ <param pos="0" name="service.version" value="2.0"/>
2104
+ <param pos="0" name="service.cpe23" value="cpe:/a:influxdata:influxdb:2.0"/>
2105
+ </fingerprint>
2106
+
2107
+ <fingerprint pattern="^(?:Sign in . GitLab|GitLab|GitLab is not responding)$">
2108
+ <description>GitLab</description>
2109
+ <example>Sign in · GitLab</example>
2110
+ <example>GitLab is not responding</example>
2111
+ <example>GitLab</example>
2112
+ <example>Sign in | GitLab</example>
2113
+ <param pos="0" name="service.vendor" value="GitLab"/>
2114
+ <param pos="0" name="service.product" value="GitLab"/>
2115
+ <param pos="0" name="service.cpe23" value="cpe:/a:gitlab:gitlab:-"/>
2116
+ </fingerprint>
2117
+
2118
+ <fingerprint pattern="^(?:GitHub Enterprise|Setup GitHub Enterprise|GitHub Enterprise preflight check)$">
2119
+ <description>GitHub Enterprise</description>
2120
+ <example>GitHub Enterprise</example>
2121
+ <example>Setup GitHub Enterprise</example>
2122
+ <example>GitHub Enterprise preflight check</example>
2123
+ <param pos="0" name="service.vendor" value="GitHub"/>
2124
+ <param pos="0" name="service.product" value="Enterprise"/>
2125
+ </fingerprint>
2126
+
2127
+ <fingerprint pattern="^(?:SAP NetWeaver Application Server Java|SAP&amp;#x20;NetWeaver&amp;#x20;Portal|Loading Portal\.\.\.)$">
2128
+ <description>SAP NetWeaver Portal</description>
2129
+ <example>SAP NetWeaver Application Server Java</example>
2130
+ <example>SAP&amp;#x20;NetWeaver&amp;#x20;Portal</example>
2131
+ <example>Loading Portal...</example>
2132
+ <param pos="0" name="service.vendor" value="SAP"/>
2133
+ <param pos="0" name="service.product" value="NetWeaver Web AS"/>
2134
+ <param pos="0" name="service.family" value="NetWeaver"/>
2135
+ </fingerprint>
2136
+
2137
+ <fingerprint pattern="^Lansweeper (?:- Login|First Run Wizard)$">
2138
+ <description>Lansweeper</description>
2139
+ <example>Lansweeper - Login</example>
2140
+ <example>Lansweeper First Run Wizard</example>
2141
+ <param pos="0" name="service.vendor" value="Lansweeper"/>
2142
+ <param pos="0" name="service.product" value="Lansweeper"/>
2143
+ <param pos="0" name="service.cpe23" value="cpe:/a:lansweeper:lansweeper:-"/>
2144
+ </fingerprint>
2145
+
2146
+ <fingerprint pattern="^(?:Celery Flower|Flower)$">
2147
+ <description>Celery Flower Dashboard</description>
2148
+ <example>Celery Flower</example>
2149
+ <example>Flower</example>
2150
+ <param pos="0" name="service.vendor" value="Celery"/>
2151
+ <param pos="0" name="service.product" value="Flower"/>
2152
+ </fingerprint>
2153
+
2154
+ <fingerprint pattern="^(?:Insight)?VM Security Console :: Login$">
2155
+ <description>Rapid7 InsightVM Console</description>
2156
+ <example>InsightVM Security Console :: Login</example>
2157
+ <example>VM Security Console :: Login</example>
2158
+ <param pos="0" name="service.vendor" value="Rapid7"/>
2159
+ <param pos="0" name="service.product" value="InsightVM"/>
2160
+ <param pos="0" name="service.cpe23" value="cpe:/a:rapid7:insightvm:-"/>
2161
+ </fingerprint>
2162
+
2163
+ <fingerprint pattern="^Nexpose Security Console :: Login$">
2164
+ <description>Rapid7 Nexpose Console</description>
2165
+ <example>Nexpose Security Console :: Login</example>
2166
+ <param pos="0" name="service.vendor" value="Rapid7"/>
2167
+ <param pos="0" name="service.product" value="Nexpose"/>
2168
+ <param pos="0" name="service.cpe23" value="cpe:/a:rapid7:nexpose:-"/>
2169
+ </fingerprint>
2170
+
2171
+ <fingerprint pattern="^(?:Login Gateway|Session Error) - Kiwi Syslog Web Access$">
2172
+ <description>Kiwi Syslog Web Access</description>
2173
+ <example>Login Gateway - Kiwi Syslog Web Access</example>
2174
+ <example>Session Error - Kiwi Syslog Web Access</example>
2175
+ <param pos="0" name="service.vendor" value="SolarWinds"/>
2176
+ <param pos="0" name="service.product" value="Kiwi Syslog"/>
2177
+ </fingerprint>
2178
+
2179
+ <fingerprint pattern="^ClickShare Configurator$">
2180
+ <description>ClickShare Wireless Presenter</description>
2181
+ <example>ClickShare Configurator</example>
2182
+ <param pos="0" name="hw.vendor" value="Barco"/>
2183
+ <param pos="0" name="hw.device" value="Wireless Presenter"/>
2184
+ <param pos="0" name="hw.product" value="ClickShare"/>
2185
+ <param pos="0" name="os.vendor" value="Barco"/>
2186
+ <param pos="0" name="os.family" value="ClickShareOS"/>
2187
+ <param pos="0" name="os.device" value="Wireless Presenter"/>
2188
+ </fingerprint>
2189
+
2190
+ <fingerprint pattern="^(IQ\S+) IQEYE\S+: Live Images$">
2191
+ <description>IQinVision IQeye Network Camera</description>
2192
+ <example hw.product="IQA22N">IQA22N IQEYE1A1613: Live Images</example>
2193
+ <example hw.product="IQeye703">IQeye703 IQEYE011750: Live Images</example>
2194
+ <param pos="0" name="hw.vendor" value="IQinVision"/>
2195
+ <param pos="0" name="hw.device" value="Web cam"/>
2196
+ <param pos="1" name="hw.product"/>
2197
+ </fingerprint>
2198
+
2199
+ <fingerprint pattern="^(?:Oracle\(R\) )?Integrated Lights Out Manager$">
2200
+ <description>Oracle iLOM</description>
2201
+ <example>Oracle(R) Integrated Lights Out Manager</example>
2202
+ <example>Integrated Lights Out Manager</example>
2203
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
2204
+ <param pos="0" name="hw.vendor" value="Oracle"/>
2205
+ <param pos="0" name="hw.family" value="ILOM"/>
2206
+ <param pos="0" name="hw.product" value="ILOM"/>
2207
+ <param pos="0" name="os.device" value="Lights Out Management"/>
2208
+ <param pos="0" name="os.vendor" value="Oracle"/>
2209
+ <param pos="0" name="os.family" value="ILOM"/>
2210
+ <param pos="0" name="os.product" value="ILOM"/>
2211
+ </fingerprint>
2212
+
2213
+ <fingerprint pattern="^Genetec - SHARPV\S+$">
2214
+ <description>Genetec AutoVu SharpV ALPR Camera</description>
2215
+ <example>Genetec - SHARPV01111</example>
2216
+ <param pos="0" name="hw.vendor" value="Genetec"/>
2217
+ <param pos="0" name="hw.device" value="Web cam"/>
2218
+ <param pos="0" name="hw.product" value="AutoVu SharpV"/>
2219
+ </fingerprint>
2220
+
2221
+ <fingerprint pattern="^Nexus Repository Manager$">
2222
+ <description>Nexus Repository Manager</description>
2223
+ <example>Nexus Repository Manager</example>
2224
+ <param pos="0" name="service.vendor" value="Apache"/>
2225
+ <param pos="0" name="service.product" value="Nexus Repository Manager"/>
2226
+ </fingerprint>
2227
+
2228
+ <fingerprint pattern="^Apache Flink Web Dashboard$">
2229
+ <description>Apache Flink Web Dashboard</description>
2230
+ <example>Apache Flink Web Dashboard</example>
2231
+ <param pos="0" name="service.vendor" value="Apache"/>
2232
+ <param pos="0" name="service.product" value="Flink"/>
2233
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:flink:-"/>
2234
+ </fingerprint>
2235
+
2236
+ <fingerprint pattern="^(?:Twonky|Twonky Server|TwonkyMedia|TwonkyMedia server media browser)$">
2237
+ <description>Twonky Server</description>
2238
+ <example>Twonky</example>
2239
+ <example>Twonky Server</example>
2240
+ <example>TwonkyMedia</example>
2241
+ <example>TwonkyMedia server media browser</example>
2242
+ <param pos="0" name="service.vendor" value="Lynx Technology"/>
2243
+ <param pos="0" name="service.product" value="Twonky Media Server"/>
2244
+ </fingerprint>
2245
+
2246
+ <fingerprint pattern="^Spiceworks(?: Server Busy| Help Desk)?$">
2247
+ <description>Spiceworks</description>
2248
+ <example>Spiceworks</example>
2249
+ <example>Spiceworks Help Desk</example>
2250
+ <example>Spiceworks Server Busy</example>
2251
+ <param pos="0" name="service.vendor" value="Spiceworks"/>
2252
+ <param pos="0" name="service.product" value="Help Desk Server"/>
2253
+ </fingerprint>
2254
+
2255
+ <fingerprint pattern="^Network Monitor$">
2256
+ <description>Spiceworks Network Monitor</description>
2257
+ <example>Network Monitor</example>
2258
+ <param pos="0" name="service.vendor" value="Spiceworks"/>
2259
+ <param pos="0" name="service.product" value="Network Monitor"/>
2260
+ </fingerprint>
2261
+
2262
+ <fingerprint pattern="^Spirent TestCenter IQ(?: - (?:Free )?Preview)?$">
2263
+ <description>Spirent TestCenter IQ</description>
2264
+ <example>Spirent TestCenter IQ</example>
2265
+ <example>Spirent TestCenter IQ - Free Preview</example>
2266
+ <example>Spirent TestCenter IQ - Preview</example>
2267
+ <param pos="0" name="service.vendor" value="Spirent Communications"/>
2268
+ <param pos="0" name="service.product" value="TestCenter IQ"/>
2269
+ </fingerprint>
2270
+
2271
+ <fingerprint pattern="^SABnzbd(?: - Log in)?$">
2272
+ <description>SABnzbd Newsreader</description>
2273
+ <example>SABnzbd</example>
2274
+ <example>SABnzbd - Log in</example>
2275
+ <param pos="0" name="service.vendor" value="SABnzbd"/>
2276
+ <param pos="0" name="service.product" value="SABnzbd"/>
2277
+ </fingerprint>
2278
+
2279
+ <fingerprint pattern="^(?:Zabbix|.*: Zabbix)$">
2280
+ <description>Zabbix</description>
2281
+ <example>Zabbix</example>
2282
+ <example>appliance: Zabbix</example>
2283
+ <param pos="0" name="service.vendor" value="Zabbix"/>
2284
+ <param pos="0" name="service.product" value="Zabbix"/>
2285
+ <param pos="0" name="service.cpe23" value="cpe:/a:zabbix:zabbix:-"/>
2286
+ </fingerprint>
2287
+
2288
+ <fingerprint pattern="^(\S+) \(build (\S+)\) - Info$">
2289
+ <description>DD-WRT</description>
2290
+ <example host.name="SubTerraVia-NUC" os.version="36104" os.build="36104">SubTerraVia-NUC (build 36104) - Info</example>
2291
+ <example host.name="DD-WRT" os.version="35030M" os.build="35030M">DD-WRT (build 35030M) - Info</example>
2292
+ <param pos="0" name="os.vendor" value="DD-WRT"/>
2293
+ <param pos="0" name="os.product" value="DD-WRT"/>
2294
+ <param pos="0" name="os.device" value="Router"/>
2295
+ <param pos="1" name="host.name"/>
2296
+ <param pos="2" name="os.version"/>
2297
+ <param pos="2" name="os.build"/>
2298
+ <param pos="0" name="os.cpe23" value="cpe:/o:dd-wrt:dd-wrt:{os.version}"/>
2299
+ </fingerprint>
2300
+
2301
+ <fingerprint pattern="^(?:Apache Druid|Druid Console|Legacy Coordinator Console)$">
2302
+ <description>Apache Druid</description>
2303
+ <example>Apache Druid</example>
2304
+ <example>Legacy Coordinator Console</example>
2305
+ <example>Druid Console</example>
2306
+ <param pos="0" name="service.vendor" value="Apache"/>
2307
+ <param pos="0" name="service.product" value="Druid"/>
2308
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:druid:-"/>
2309
+ </fingerprint>
2310
+
2311
+ <fingerprint pattern="^Gerrit Code Review$">
2312
+ <description>Gerrit Code Review</description>
2313
+ <example>Gerrit Code Review</example>
2314
+ <param pos="0" name="service.vendor" value="Gerrit"/>
2315
+ <param pos="0" name="service.product" value="Code Review"/>
2316
+ </fingerprint>
2317
+
2318
+ <fingerprint pattern=" - Ignition Gateway$">
2319
+ <description>Inductive Automation Ignition Gateway</description>
2320
+ <example>QA-ROBOT3 - Ignition Gateway</example>
2321
+ <example>Ignition 8.0 Demo Server - Ignition Gateway</example>
2322
+ <param pos="0" name="service.vendor" value="Inductive Automation"/>
2323
+ <param pos="0" name="service.product" value="Ignition Gateway"/>
2324
+ </fingerprint>
2325
+
2326
+ <fingerprint pattern="^Airflow(?: - (?:Login|DAGs))?$">
2327
+ <description>Apache Airflow</description>
2328
+ <example>Airflow</example>
2329
+ <example>Airflow - DAGs</example>
2330
+ <example>Airflow - Login</example>
2331
+ <param pos="0" name="service.vendor" value="Apache"/>
2332
+ <param pos="0" name="service.product" value="Airflow"/>
2333
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:airflow:-"/>
2334
+ </fingerprint>
2335
+
2336
+ <fingerprint pattern="^Cockroach Console$">
2337
+ <description>CockroachDB Console</description>
2338
+ <example>Cockroach Console</example>
2339
+ <param pos="0" name="service.vendor" value="Cockroach Labs"/>
2340
+ <param pos="0" name="service.product" value="CockroachDB"/>
2341
+ </fingerprint>
2342
+
2343
+ <fingerprint pattern="^(?:openmediavault control panel|OpenMediaVault web administration interface) - (\S+)$">
2344
+ <description>OpenMediaVault</description>
2345
+ <example host.name="raspberrypi">openmediavault control panel - raspberrypi</example>
2346
+ <example host.name="raspberrypi">OpenMediaVault web administration interface - raspberrypi</example>
2347
+ <param pos="0" name="os.vendor" value="OpenMediaVault"/>
2348
+ <param pos="0" name="os.family" value="Linux"/>
2349
+ <param pos="0" name="os.product" value="OpenMediaVault"/>
2350
+ <param pos="0" name="os.device" value="NAS"/>
2351
+ <param pos="1" name="host.name"/>
2352
+ </fingerprint>
2353
+
2354
+ <fingerprint pattern="^Log in to TeamCity .mdash; TeamCity$">
2355
+ <description>TeamCity</description>
2356
+ <example>Log in to TeamCity &amp;mdash; TeamCity</example>
2357
+ <param pos="0" name="service.vendor" value="JetBrains"/>
2358
+ <param pos="0" name="service.product" value="TeamCity"/>
2359
+ <param pos="0" name="service.cpe23" value="cpe:/a:jetbrains:teamcity:-"/>
2360
+ </fingerprint>
2361
+
2362
+ <fingerprint pattern="^Home - CUPS ([\d\.]+)$">
2363
+ <description>Apple CUPS</description>
2364
+ <example service.version="2.3.1">Home - CUPS 2.3.1</example>
2365
+ <param pos="0" name="service.vendor" value="Apple"/>
2366
+ <param pos="0" name="service.product" value="CUPS"/>
2367
+ <param pos="0" name="service.family" value="CUPS"/>
2368
+ <param pos="1" name="service.version"/>
2369
+ <param pos="0" name="service.cpe23" value="cpe:/a:apple:cups:{service.version}"/>
2370
+ </fingerprint>
2371
+
2372
+ <fingerprint pattern="^RUNDECK ENTERPRISE - Login$">
2373
+ <description>Rundeck Enterprise</description>
2374
+ <example>RUNDECK ENTERPRISE - Login</example>
2375
+ <param pos="0" name="service.vendor" value="Rundeck"/>
2376
+ <param pos="0" name="service.product" value="Rundeck Enterprise"/>
2377
+ </fingerprint>
2378
+
2379
+ <fingerprint pattern="^Rundeck - Login$">
2380
+ <description>Rundeck</description>
2381
+ <example>Rundeck - Login</example>
2382
+ <param pos="0" name="service.vendor" value="Rundeck"/>
2383
+ <param pos="0" name="service.product" value="Rundeck"/>
2384
+ <param pos="0" name="service.cpe23" value="cpe:/a:rundeck:rundeck:-"/>
2385
+ </fingerprint>
2386
+
2387
+ <fingerprint pattern="^CrushFTP WebInterface$">
2388
+ <description>CrushFTP Web</description>
2389
+ <example>CrushFTP WebInterface</example>
2390
+ <param pos="0" name="service.vendor" value="CrushFTP"/>
2391
+ <param pos="0" name="service.product" value="CrushFTP Web Interface"/>
2392
+ <param pos="0" name="service.certainty" value="0.5"/>
2393
+ </fingerprint>
2394
+
2395
+ <fingerprint pattern="^OpenEdge Explorer$">
2396
+ <description>Progress OpenEdge Explorer</description>
2397
+ <example>OpenEdge Explorer</example>
2398
+ <param pos="0" name="service.vendor" value="Progress"/>
2399
+ <param pos="0" name="service.product" value="OpenEdge Explorer"/>
2400
+ </fingerprint>
2401
+
2402
+ <fingerprint pattern="^Consul by HashiCorp$">
2403
+ <description>HashiCorp Consul</description>
2404
+ <example>Consul by HashiCorp</example>
2405
+ <param pos="0" name="service.vendor" value="HashiCorp"/>
2406
+ <param pos="0" name="service.product" value="Consul"/>
2407
+ <param pos="0" name="service.cpe23" value="cpe:/a:hashicorp:consul:-"/>
2408
+ </fingerprint>
2409
+
2410
+ <fingerprint pattern="^Redmine(?: 500 error)?$">
2411
+ <description>Redmine</description>
2412
+ <example>Redmine</example>
2413
+ <param pos="0" name="service.vendor" value="Redmine"/>
2414
+ <param pos="0" name="service.product" value="Redmine"/>
2415
+ <param pos="0" name="service.cpe23" value="cpe:/a:redmine:redmine:-"/>
2416
+ </fingerprint>
2417
+
2418
+ <fingerprint pattern="; Nagios Log Server$">
2419
+ <description>Nagios Log Server</description>
2420
+ <example>Database Offline &amp;middot; Nagios Log Server</example>
2421
+ <param pos="0" name="service.vendor" value="Nagios"/>
2422
+ <param pos="0" name="service.product" value="Nagios Log Server"/>
2423
+ </fingerprint>
2424
+
2425
+ <fingerprint pattern="; Nagios Network Analyzer$">
2426
+ <description>Nagios Network Analyzer</description>
2427
+ <example>Login &amp;bull; Nagios Network Analyzer</example>
2428
+ <example>Licensing &amp;bull; Nagios Network Analyzer</example>
2429
+ <param pos="0" name="service.vendor" value="Nagios"/>
2430
+ <param pos="0" name="service.product" value="Nagios Network Analyzer"/>
2431
+ </fingerprint>
2432
+
2433
+ <fingerprint pattern="^Zing Vision$">
2434
+ <description>Zing Vision</description>
2435
+ <example>Zing Vision</example>
2436
+ <param pos="0" name="service.vendor" value="Azul Systems"/>
2437
+ <param pos="0" name="service.product" value="Zing Vision"/>
2438
+ </fingerprint>
2439
+
2440
+ <fingerprint pattern="^Swagger (?:UI|Editor)$">
2441
+ <description>Swagger UI</description>
2442
+ <example>Swagger UI</example>
2443
+ <example>Swagger Editor</example>
2444
+ <param pos="0" name="service.vendor" value="Swagger"/>
2445
+ <param pos="0" name="service.product" value="UI"/>
2446
+ </fingerprint>
2447
+
2448
+ <fingerprint pattern="^Emby$">
2449
+ <description>Emby Media Server</description>
2450
+ <example>Emby</example>
2451
+ <param pos="0" name="service.vendor" value="Emby"/>
2452
+ <param pos="0" name="service.product" value="Web Client"/>
2453
+ <param pos="0" name="service.device" value="Media Server"/>
2454
+ </fingerprint>
2455
+
2456
+ <fingerprint pattern="^WS - Folding@home Work Server$">
2457
+ <description>Folding@home Work Server</description>
2458
+ <example>WS - Folding@home Work Server</example>
2459
+ <param pos="0" name="service.vendor" value="Folding@home"/>
2460
+ <param pos="0" name="service.product" value="Work Server"/>
2461
+ </fingerprint>
2462
+
2463
+ <fingerprint pattern="^Welcome to IBM Lotus Sametime$">
2464
+ <description>IBM Lotus Sametime</description>
2465
+ <example>Welcome to IBM Lotus Sametime</example>
2466
+ <param pos="0" name="service.vendor" value="IBM"/>
2467
+ <param pos="0" name="service.product" value="Lotus Sametime"/>
2468
+ <param pos="0" name="service.certainty" value="0.5"/>
2469
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_sametime:-"/>
2470
+ </fingerprint>
2471
+
2472
+ <fingerprint pattern="^HPE OfficeConnect Switch (.*)\s+(J\S+)$">
2473
+ <description>HPE OfficeConnect Switch</description>
2474
+ <example hw.product="1820 24G" hw.model="J9980A">HPE OfficeConnect Switch 1820 24G J9980A</example>
2475
+ <example hw.product="1820 8G" hw.model="J9979A">HPE OfficeConnect Switch 1820 8G J9979A</example>
2476
+ <example hw.product="1920S 24G 2SFP PoE+ (370W)" hw.model="JL385A">HPE OfficeConnect Switch 1920S 24G 2SFP PoE+ (370W) JL385A</example>
2477
+ <param pos="0" name="hw.vendor" value="HPE"/>
2478
+ <param pos="0" name="hw.device" value="Switch"/>
2479
+ <param pos="1" name="hw.product"/>
2480
+ <param pos="2" name="hw.model"/>
2481
+ </fingerprint>
2482
+
2483
+ <fingerprint pattern="^Device42$">
2484
+ <description>Device42 Virtual Appliance</description>
2485
+ <example>Device42</example>
2486
+ <param pos="0" name="os.vendor" value="Device42"/>
2487
+ <param pos="0" name="os.family" value="Linux"/>
2488
+ <param pos="0" name="os.product" value="Linux"/>
2489
+ <param pos="0" name="os.certainty" value="0.5"/>
2490
+ <param pos="0" name="hw.vendor" value="Device42"/>
2491
+ <param pos="0" name="hw.device" value="Network Appliance"/>
2492
+ <param pos="0" name="hw.product" value="Discovery"/>
2493
+ <param pos="0" name="hw.certainty" value="0.5"/>
2494
+ </fingerprint>
2495
+
2496
+ <fingerprint pattern="^SolarWinds Virtualization Manager$">
2497
+ <description>SolarWinds Virtualization Manager</description>
2498
+ <example>SolarWinds Virtualization Manager</example>
2499
+ <param pos="0" name="service.vendor" value="SolarWinds"/>
2500
+ <param pos="0" name="service.product" value="Virtualization Manager"/>
2501
+ </fingerprint>
2502
+
2503
+ <fingerprint pattern="^(?:Gitea: .*|LocalRepo|TurnKey Gitea)$">
2504
+ <description>Gitea</description>
2505
+ <example>Gitea: Git with a cup of tea</example>
2506
+ <example>TurnKey Gitea</example>
2507
+ <example>LocalRepo</example>
2508
+ <param pos="0" name="service.vendor" value="Gitea"/>
2509
+ <param pos="0" name="service.product" value="Gitea"/>
2510
+ <param pos="0" name="service.certainty" value="0.5"/>
2511
+ <param pos="0" name="service.cpe23" value="cpe:/a:gitea:gitea:-"/>
2512
+ </fingerprint>
2513
+
2514
+ <fingerprint pattern="^Metasploit$">
2515
+ <description>Metasploit Pro (and Community Edition Web UI)</description>
2516
+ <example>Metasploit</example>
2517
+ <param pos="0" name="service.vendor" value="Rapid7"/>
2518
+ <param pos="0" name="service.product" value="Metasploit Pro"/>
2519
+ </fingerprint>
2520
+
2521
+ <fingerprint pattern="^Makito X Decoder$">
2522
+ <description>Haivision Makito X Video Decoder</description>
2523
+ <example>Makito X Decoder</example>
2524
+ <param pos="0" name="hw.vendor" value="Haivision"/>
2525
+ <param pos="0" name="hw.device" value="Video Decoder"/>
2526
+ <param pos="0" name="hw.product" value="Makito X Decoder"/>
2527
+ </fingerprint>
2528
+
2529
+ <fingerprint pattern="^Ceph(?: Dashboard)?$">
2530
+ <description>Ceph Dashboard</description>
2531
+ <example>Ceph Dashboard</example>
2532
+ <example>Ceph</example>
2533
+ <param pos="0" name="service.vendor" value="Ceph"/>
2534
+ <param pos="0" name="service.product" value="Dashboard"/>
2535
+ </fingerprint>
2536
+
2537
+ <fingerprint pattern="^Scrutinizer$">
2538
+ <description>Plixer Scrutinizer</description>
2539
+ <example>Scrutinizer</example>
2540
+ <param pos="0" name="os.vendor" value="Plixer"/>
2541
+ <param pos="0" name="os.product" value="Linux"/>
2542
+ <param pos="0" name="os.certainty" value="0.5"/>
2543
+ <param pos="0" name="hw.vendor" value="Plixer"/>
2544
+ <param pos="0" name="hw.product" value="Scrutinizer"/>
2545
+ <param pos="0" name="hw.certainty" value="0.5"/>
2546
+ </fingerprint>
2547
+
2548
+ <fingerprint pattern="^Hortonworks SmartSense Tool is loading\.\.\.$">
2549
+ <description>Cloudera Hortonworks SmartSense Tool</description>
2550
+ <example>Hortonworks SmartSense Tool is loading...</example>
2551
+ <param pos="0" name="service.vendor" value="Cloudera"/>
2552
+ <param pos="0" name="service.product" value="SmartSense Tool"/>
2553
+ <param pos="0" name="service.certainty" value="0.5"/>
2554
+ </fingerprint>
2555
+
2556
+ <fingerprint pattern="^ownCloud$">
2557
+ <description>ownCloud</description>
2558
+ <example>ownCloud</example>
2559
+ <param pos="0" name="service.vendor" value="ownCloud"/>
2560
+ <param pos="0" name="service.product" value="ownCloud Server"/>
2561
+ <param pos="0" name="service.certainty" value="0.5"/>
2562
+ </fingerprint>
2563
+
2564
+ <fingerprint pattern="^Octopus Deploy$">
2565
+ <description>Octopus Deploy</description>
2566
+ <example>Octopus Deploy</example>
2567
+ <param pos="0" name="service.vendor" value="Octopus"/>
2568
+ <param pos="0" name="service.product" value="Deploy"/>
2569
+ <param pos="0" name="service.certainty" value="0.5"/>
2570
+ </fingerprint>
2571
+
2572
+ <fingerprint pattern="^Android Debug Database$">
2573
+ <description>Android Debug Database</description>
2574
+ <example>Android Debug Database</example>
2575
+ <param pos="0" name="service.vendor" value="Android Debug Database"/>
2576
+ <param pos="0" name="service.product" value="Android Debug Database"/>
2577
+ </fingerprint>
2578
+
2579
+ <fingerprint pattern="^RStudio Sign In$">
2580
+ <description>RStudio</description>
2581
+ <example>RStudio Sign In</example>
2582
+ <param pos="0" name="service.vendor" value="RStudio"/>
2583
+ <param pos="0" name="service.product" value="Connect"/>
2584
+ </fingerprint>
2585
+
2586
+ <fingerprint pattern="^(?:TurnKey Moodle|New Site)$">
2587
+ <description>Moodle</description>
2588
+ <example>TurnKey Moodle</example>
2589
+ <example>New Site</example>
2590
+ <param pos="0" name="service.vendor" value="Moodle"/>
2591
+ <param pos="0" name="service.product" value="Moodle CMS"/>
2592
+ <param pos="0" name="service.certainty" value="0.5"/>
2593
+ </fingerprint>
2594
+
2595
+ <fingerprint pattern="^ArchiveTeam Warrior$">
2596
+ <description>Internet Archive Warrior Appliance</description>
2597
+ <example>ArchiveTeam Warrior</example>
2598
+ <param pos="0" name="os.vendor" value="Internet Archive"/>
2599
+ <param pos="0" name="os.family" value="Linux"/>
2600
+ <param pos="0" name="os.product" value="Linux"/>
2601
+ <param pos="0" name="hw.vendor" value="Internet Archive"/>
2602
+ <param pos="0" name="hw.device" value="Storage Appliance"/>
2603
+ <param pos="0" name="hw.product" value="ArchiveTeam Warrior"/>
2604
+ </fingerprint>
2605
+
2606
+ <fingerprint pattern="^(?:Dashboard|Log In) - Confluence$">
2607
+ <description>Atlassian Confluence</description>
2608
+ <example>Dashboard - Confluence</example>
2609
+ <example>Log In - Confluence</example>
2610
+ <param pos="0" name="service.vendor" value="Atlassian"/>
2611
+ <param pos="0" name="service.product" value="Confluence"/>
2612
+ <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:confluence:-"/>
2613
+ </fingerprint>
2614
+
2615
+ <fingerprint pattern="^System Dashboard - ">
2616
+ <description>Atlassian Jira</description>
2617
+ <example>System Dashboard - Jira</example>
2618
+ <example>System Dashboard - [Dev Test JIRA]</example>
2619
+ <param pos="0" name="service.vendor" value="Atlassian"/>
2620
+ <param pos="0" name="service.product" value="Jira"/>
2621
+ <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:jira:-"/>
2622
+ </fingerprint>
2623
+
2624
+ <fingerprint pattern="^(?:Welcome to XAMPP|XAMPP for Linux)">
2625
+ <description>XAMPP Server</description>
2626
+ <example>Welcome to XAMPP</example>
2627
+ <example>XAMPP for Linux</example>
2628
+ <param pos="0" name="service.vendor" value="XAMPP"/>
2629
+ <param pos="0" name="service.product" value="XAMPP Server"/>
2630
+ </fingerprint>
2631
+
2632
+ <fingerprint pattern="^Greenbone Security (?:Assistant|Manager)">
2633
+ <description>Greenbone Security Scanner</description>
2634
+ <example>Greenbone Security Assistant</example>
2635
+ <example>Greenbone Security Manager</example>
2636
+ <param pos="0" name="service.vendor" value="Greenbone"/>
2637
+ <param pos="0" name="service.product" value="Security Scanner"/>
2638
+ </fingerprint>
2639
+
2640
+ <fingerprint pattern="^Kodi$">
2641
+ <description>Kodi Media Server</description>
2642
+ <example>Kodi</example>
2643
+ <param pos="0" name="service.vendor" value="Kodi"/>
2644
+ <param pos="0" name="service.product" value="Media Server"/>
2645
+ </fingerprint>
2646
+
2647
+ <fingerprint pattern="^(?:Drupal|TurnKey Drupal\d+|Select an installation profile)$">
2648
+ <description>Drupal CMS</description>
2649
+ <example>Drupal</example>
2650
+ <example>TurnKey Drupal8</example>
2651
+ <example>TurnKey Drupal7</example>
2652
+ <example>Select an installation profile</example>
2653
+ <param pos="0" name="service.vendor" value="Drupal"/>
2654
+ <param pos="0" name="service.product" value="CMS"/>
2655
+ </fingerprint>
2656
+
2657
+ <fingerprint pattern="^LibreNMS$">
2658
+ <description>LibreNMS</description>
2659
+ <example>LibreNMS</example>
2660
+ <param pos="0" name="service.vendor" value="LibreNMS"/>
2661
+ <param pos="0" name="service.product" value="LibreNMS"/>
2662
+ <param pos="0" name="service.cpe23" value="cpe:/a:librenms:librenms:-"/>
2663
+ </fingerprint>
2664
+
2665
+ <fingerprint pattern="^HDHomeRun Main Menu$">
2666
+ <description>HDHomeRun</description>
2667
+ <example>HDHomeRun Main Menu</example>
2668
+ <param pos="0" name="os.vendor" value="SiliconDust"/>
2669
+ <param pos="0" name="os.family" value="Linux"/>
2670
+ <param pos="0" name="os.product" value="Linux"/>
2671
+ <param pos="0" name="hw.vendor" value="SiliconDust"/>
2672
+ <param pos="0" name="hw.device" value="Media Server"/>
2673
+ <param pos="0" name="hw.product" value="HDHomeRun"/>
2674
+ </fingerprint>
2675
+
2676
+ <fingerprint pattern="^Kubernetes Dashboard$">
2677
+ <description>Kubernetes Dashboard</description>
2678
+ <example>Kubernetes Dashboard</example>
2679
+ <param pos="0" name="service.vendor" value="Kubernetes"/>
2680
+ <param pos="0" name="service.product" value="Dashboard"/>
2681
+ </fingerprint>
2682
+
2683
+ <fingerprint pattern="^SoundTouch Access Point Setup$">
2684
+ <description>Bose SoundTouch</description>
2685
+ <example>SoundTouch Access Point Setup</example>
2686
+ <param pos="0" name="hw.device" value="Network Audio"/>
2687
+ <param pos="0" name="hw.vendor" value="Bose"/>
2688
+ <param pos="0" name="hw.family" value="SoundTouch"/>
2689
+ <param pos="0" name="os.device" value="Network Audio"/>
2690
+ <param pos="0" name="os.vendor" value="Bose"/>
2691
+ <param pos="0" name="os.product" value="SoundTouch"/>
2692
+ </fingerprint>
2693
+
2694
+ <fingerprint pattern="^(?:embedded )?WS server test page$">
2695
+ <description>Dell iDRAC Websocket Endpoint</description>
2696
+ <example>WS server test page</example>
2697
+ <example>embedded WS server test page</example>
2698
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
2699
+ <param pos="0" name="hw.vendor" value="Dell"/>
2700
+ <param pos="0" name="hw.product" value="iDRAC"/>
2701
+ <param pos="0" name="hw.certainty" value="0.75"/>
2702
+ <param pos="0" name="os.vendor" value="Dell"/>
2703
+ <param pos="0" name="os.product" value="iDRAC Linux"/>
2704
+ <param pos="0" name="os .certainty" value="0.75"/>
2705
+ </fingerprint>
2706
+
2707
+ <fingerprint pattern="^Pulse Connect Secure - SSL">
2708
+ <description>Pulse Secure VPN</description>
2709
+ <example>Pulse Connect Secure - SSL</example>
2710
+ <param pos="0" name="os.vendor" value="Pulse Secure"/>
2711
+ <param pos="0" name="os.family" value="SSL-VPN"/>
2712
+ <param pos="0" name="os.device" value="SSL-VPN"/>
2713
+ <param pos="0" name="os.product" value="SSL-VPN"/>
2714
+ </fingerprint>
2715
+
2716
+ </fingerprints>