recog-intrigue 2.3.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +7 -0
- data/.github/ISSUE_TEMPLATE/bug_report.md +37 -0
- data/.github/ISSUE_TEMPLATE/feature_request.md +17 -0
- data/.github/ISSUE_TEMPLATE/fingerprint_request.md +27 -0
- data/.github/PULL_REQUEST_TEMPLATE +24 -0
- data/.gitignore +14 -0
- data/.rbenv-gemset +1 -0
- data/.rspec +3 -0
- data/.ruby-gemset +1 -0
- data/.ruby-version +1 -0
- data/.travis.yml +25 -0
- data/.yardopts +1 -0
- data/CONTRIBUTING.md +171 -0
- data/COPYING +23 -0
- data/Gemfile +10 -0
- data/LICENSE +7 -0
- data/README.md +85 -0
- data/Rakefile +22 -0
- data/bin/recog_export +81 -0
- data/bin/recog_match +55 -0
- data/bin/recog_standardize +118 -0
- data/bin/recog_verify +64 -0
- data/cpe-remap.yaml +134 -0
- data/features/data/failing_banners_fingerprints.xml +20 -0
- data/features/data/matching_banners_fingerprints.xml +23 -0
- data/features/data/multiple_banners_fingerprints.xml +32 -0
- data/features/data/no_tests.xml +3 -0
- data/features/data/sample_banner.txt +2 -0
- data/features/data/successful_tests.xml +18 -0
- data/features/data/tests_with_failures.xml +20 -0
- data/features/data/tests_with_warnings.xml +17 -0
- data/features/match.feature +36 -0
- data/features/support/aruba.rb +3 -0
- data/features/support/env.rb +6 -0
- data/features/verify.feature +48 -0
- data/identifiers/README.md +47 -0
- data/identifiers/os_architecture.txt +20 -0
- data/identifiers/os_device.txt +52 -0
- data/identifiers/os_family.txt +160 -0
- data/identifiers/os_product.txt +199 -0
- data/identifiers/service_family.txt +185 -0
- data/identifiers/service_product.txt +255 -0
- data/identifiers/software_class.txt +26 -0
- data/identifiers/software_family.txt +91 -0
- data/identifiers/software_product.txt +333 -0
- data/identifiers/vendor.txt +405 -0
- data/lib/recog.rb +4 -0
- data/lib/recog/db.rb +78 -0
- data/lib/recog/db_manager.rb +31 -0
- data/lib/recog/fingerprint.rb +280 -0
- data/lib/recog/fingerprint/regexp_factory.rb +56 -0
- data/lib/recog/fingerprint/test.rb +18 -0
- data/lib/recog/formatter.rb +51 -0
- data/lib/recog/match_reporter.rb +77 -0
- data/lib/recog/matcher.rb +94 -0
- data/lib/recog/matcher_factory.rb +14 -0
- data/lib/recog/nizer.rb +347 -0
- data/lib/recog/verifier.rb +39 -0
- data/lib/recog/verifier_factory.rb +13 -0
- data/lib/recog/verify_reporter.rb +86 -0
- data/lib/recog/version.rb +3 -0
- data/misc/convert_mysql_err +61 -0
- data/misc/order.xsl +17 -0
- data/recog-intrigue.gemspec +45 -0
- data/requirements.txt +2 -0
- data/spec/data/best_os_match_1.yml +17 -0
- data/spec/data/best_os_match_2.yml +17 -0
- data/spec/data/best_service_match_1.yml +17 -0
- data/spec/data/smb_native_os.txt +25 -0
- data/spec/data/test_fingerprints.xml +36 -0
- data/spec/data/verification_fingerprints.xml +86 -0
- data/spec/data/whitespaced_fingerprint.xml +5 -0
- data/spec/lib/fingerprint_self_test_spec.rb +174 -0
- data/spec/lib/recog/db_spec.rb +98 -0
- data/spec/lib/recog/fingerprint/regexp_factory_spec.rb +73 -0
- data/spec/lib/recog/fingerprint_spec.rb +112 -0
- data/spec/lib/recog/formatter_spec.rb +69 -0
- data/spec/lib/recog/match_reporter_spec.rb +91 -0
- data/spec/lib/recog/nizer_spec.rb +330 -0
- data/spec/lib/recog/verify_reporter_spec.rb +113 -0
- data/spec/spec_helper.rb +82 -0
- data/update_cpes.py +186 -0
- data/xml/apache_modules.xml +1911 -0
- data/xml/apache_os.xml +273 -0
- data/xml/architecture.xml +36 -0
- data/xml/dns_versionbind.xml +761 -0
- data/xml/fingerprints.xsd +128 -0
- data/xml/ftp_banners.xml +1553 -0
- data/xml/h323_callresp.xml +603 -0
- data/xml/hp_pjl_id.xml +358 -0
- data/xml/html_title.xml +1630 -0
- data/xml/http_cookies.xml +411 -0
- data/xml/http_servers.xml +3195 -0
- data/xml/http_wwwauth.xml +595 -0
- data/xml/imap_banners.xml +245 -0
- data/xml/ldap_searchresult.xml +711 -0
- data/xml/mdns_device-info_txt.xml +1796 -0
- data/xml/mdns_workstation_txt.xml +15 -0
- data/xml/mysql_banners.xml +1649 -0
- data/xml/mysql_error.xml +871 -0
- data/xml/nntp_banners.xml +82 -0
- data/xml/ntp_banners.xml +1223 -0
- data/xml/operating_system.xml +629 -0
- data/xml/pop_banners.xml +499 -0
- data/xml/rsh_resp.xml +76 -0
- data/xml/rtsp_servers.xml +76 -0
- data/xml/sip_banners.xml +359 -0
- data/xml/sip_user_agents.xml +221 -0
- data/xml/smb_native_lm.xml +62 -0
- data/xml/smb_native_os.xml +662 -0
- data/xml/smtp_banners.xml +1690 -0
- data/xml/smtp_debug.xml +39 -0
- data/xml/smtp_ehlo.xml +49 -0
- data/xml/smtp_expn.xml +82 -0
- data/xml/smtp_help.xml +157 -0
- data/xml/smtp_mailfrom.xml +20 -0
- data/xml/smtp_noop.xml +44 -0
- data/xml/smtp_quit.xml +29 -0
- data/xml/smtp_rcptto.xml +25 -0
- data/xml/smtp_rset.xml +26 -0
- data/xml/smtp_turn.xml +26 -0
- data/xml/smtp_vrfy.xml +89 -0
- data/xml/snmp_sysdescr.xml +6507 -0
- data/xml/snmp_sysobjid.xml +430 -0
- data/xml/ssh_banners.xml +1968 -0
- data/xml/telnet_banners.xml +1595 -0
- data/xml/x11_banners.xml +232 -0
- data/xml/x509_issuers.xml +134 -0
- data/xml/x509_subjects.xml +1268 -0
- metadata +304 -0
data/xml/apache_os.xml
ADDED
|
@@ -0,0 +1,273 @@
|
|
|
1
|
+
<?xml version="1.0" encoding="UTF-8"?>
|
|
2
|
+
<fingerprints matches="apache_os" database_type="util.os" preference="0.10">
|
|
3
|
+
<!--
|
|
4
|
+
When an HTTP server is fingerprinted as Apache, a 2nd analysis pass is done
|
|
5
|
+
on the server headers HTTPProtocolHelper.SERVER_HEADERS: they are matched
|
|
6
|
+
against the following patterns to extract OS information.
|
|
7
|
+
-->
|
|
8
|
+
<fingerprint pattern=".*\(iSeries\).*">
|
|
9
|
+
<description>IBM i5/OS iSeries (OS/400)</description>
|
|
10
|
+
<param pos="0" name="os.vendor" value="IBM"/>
|
|
11
|
+
<param pos="0" name="os.family" value="OS/400"/>
|
|
12
|
+
<param pos="0" name="os.product" value="OS/400"/>
|
|
13
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:ibm:os_400:-"/>
|
|
14
|
+
</fingerprint>
|
|
15
|
+
<fingerprint pattern=".*\(Mandrake Linux/\d+\.\d+\.92mdk\).*">
|
|
16
|
+
<description>Mandriva (formerly Mandrake) Linux 9.2</description>
|
|
17
|
+
<param pos="0" name="os.certainty" value="0.9"/>
|
|
18
|
+
<param pos="0" name="os.vendor" value="Mandriva"/>
|
|
19
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
20
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
21
|
+
<param pos="0" name="os.version" value="9.2"/>
|
|
22
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:mandriva:linux:9.2"/>
|
|
23
|
+
</fingerprint>
|
|
24
|
+
<fingerprint pattern=".*\(Mandrake Linux/\d+\.\d+\.100mdk\).*">
|
|
25
|
+
<description>Mandriva (formerly Mandrake) Linux 10.0</description>
|
|
26
|
+
<param pos="0" name="os.certainty" value="0.9"/>
|
|
27
|
+
<param pos="0" name="os.vendor" value="Mandriva"/>
|
|
28
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
29
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
30
|
+
<param pos="0" name="os.version" value="10.0"/>
|
|
31
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:mandriva:linux:10.0"/>
|
|
32
|
+
</fingerprint>
|
|
33
|
+
<fingerprint pattern=".*\((?:Mandrake|Mandriva) Linux/.*">
|
|
34
|
+
<description>Mandriva (formerly Mandrake) Linux unknown version</description>
|
|
35
|
+
<param pos="0" name="os.vendor" value="Mandriva"/>
|
|
36
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
37
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
38
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:mandriva:linux:-"/>
|
|
39
|
+
</fingerprint>
|
|
40
|
+
<fingerprint pattern=".*\(Mandrakelinux/.*">
|
|
41
|
+
<description>Mandriva (formerly Mandrake) Linux unknown version - variant 2</description>
|
|
42
|
+
<param pos="0" name="os.vendor" value="Mandriva"/>
|
|
43
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
44
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
45
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:mandriva:linux:-"/>
|
|
46
|
+
</fingerprint>
|
|
47
|
+
<fingerprint pattern=".*\(PalmOS\).*">
|
|
48
|
+
<description>PalmOS</description>
|
|
49
|
+
<param pos="0" name="os.vendor" value="Palm"/>
|
|
50
|
+
<param pos="0" name="os.family" value="PalmOS"/>
|
|
51
|
+
<param pos="0" name="os.product" value="PalmOS"/>
|
|
52
|
+
</fingerprint>
|
|
53
|
+
<fingerprint pattern=".*\(Win32\).*">
|
|
54
|
+
<description>Microsoft Windows</description>
|
|
55
|
+
<param pos="0" name="os.certainty" value="0.75"/>
|
|
56
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
57
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
58
|
+
<param pos="0" name="os.product" value="Windows"/>
|
|
59
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
|
60
|
+
</fingerprint>
|
|
61
|
+
<fingerprint pattern=".*\(Darwin\).*">
|
|
62
|
+
<description>Apple Mac OS X</description>
|
|
63
|
+
<param pos="0" name="os.vendor" value="Apple"/>
|
|
64
|
+
<param pos="0" name="os.family" value="Mac OS X"/>
|
|
65
|
+
<param pos="0" name="os.product" value="Mac OS X"/>
|
|
66
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:-"/>
|
|
67
|
+
</fingerprint>
|
|
68
|
+
<fingerprint pattern=".*\(Ubuntu\).*">
|
|
69
|
+
<description>Ubuntu</description>
|
|
70
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
71
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
72
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
73
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
|
|
74
|
+
</fingerprint>
|
|
75
|
+
<fingerprint pattern=".*(?:Sun )?Cobalt \(Unix\)?.*">
|
|
76
|
+
<description>Sun Cobalt RaQ (Red Hat based Linux)</description>
|
|
77
|
+
<param pos="0" name="os.vendor" value="Sun"/>
|
|
78
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
79
|
+
<param pos="0" name="os.product" value="Cobalt RaQ"/>
|
|
80
|
+
</fingerprint>
|
|
81
|
+
<fingerprint pattern=".*\(BlueQuartz\).*">
|
|
82
|
+
<description>Blue Quartz is created by a Cobalt RaQ UG</description>
|
|
83
|
+
<param pos="0" name="os.vendor" value="Sun"/>
|
|
84
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
85
|
+
<param pos="0" name="os.product" value="Cobalt RaQ"/>
|
|
86
|
+
</fingerprint>
|
|
87
|
+
<fingerprint pattern="^Apache\/2\.2\.11.*\(Fedora\).*">
|
|
88
|
+
<description>Red Hat Fedora 11</description>
|
|
89
|
+
<param pos="0" name="os.vendor" value="Red Hat"/>
|
|
90
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
91
|
+
<param pos="0" name="os.product" value="Fedora Core Linux"/>
|
|
92
|
+
<param pos="0" name="os.version" value="11"/>
|
|
93
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:redhat:fedora_core:11"/>
|
|
94
|
+
</fingerprint>
|
|
95
|
+
<fingerprint pattern="^Apache\/2\.2\.15.*\(Fedora\).*">
|
|
96
|
+
<description>Red Hat Fedora 13</description>
|
|
97
|
+
<param pos="0" name="os.vendor" value="Red Hat"/>
|
|
98
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
99
|
+
<param pos="0" name="os.product" value="Fedora Core Linux"/>
|
|
100
|
+
<param pos="0" name="os.version" value="13"/>
|
|
101
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:redhat:fedora_core:13"/>
|
|
102
|
+
</fingerprint>
|
|
103
|
+
<fingerprint pattern="^Apache\/2\.2\.16.*\(Fedora\).*">
|
|
104
|
+
<description>Red Hat Fedora 14</description>
|
|
105
|
+
<param pos="0" name="os.vendor" value="Red Hat"/>
|
|
106
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
107
|
+
<param pos="0" name="os.product" value="Fedora Core Linux"/>
|
|
108
|
+
<param pos="0" name="os.version" value="14"/>
|
|
109
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:redhat:fedora_core:14"/>
|
|
110
|
+
</fingerprint>
|
|
111
|
+
<fingerprint pattern="^Apache\/2\.2\.23.*\(Fedora\).*">
|
|
112
|
+
<description>Red Hat Fedora 17</description>
|
|
113
|
+
<param pos="0" name="os.vendor" value="Red Hat"/>
|
|
114
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
115
|
+
<param pos="0" name="os.product" value="Fedora Core Linux"/>
|
|
116
|
+
<param pos="0" name="os.version" value="17"/>
|
|
117
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:redhat:fedora_core:17"/>
|
|
118
|
+
</fingerprint>
|
|
119
|
+
<fingerprint pattern="^Apache\/2\.4\.3.*\(Fedora\).*">
|
|
120
|
+
<description>Red Hat Fedora 18</description>
|
|
121
|
+
<param pos="0" name="os.vendor" value="Red Hat"/>
|
|
122
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
123
|
+
<param pos="0" name="os.product" value="Fedora Core Linux"/>
|
|
124
|
+
<param pos="0" name="os.version" value="18"/>
|
|
125
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:redhat:fedora_core:18"/>
|
|
126
|
+
</fingerprint>
|
|
127
|
+
<fingerprint pattern=".*\(Fedora\).*">
|
|
128
|
+
<description>Red Hat Fedora</description>
|
|
129
|
+
<param pos="0" name="os.vendor" value="Red Hat"/>
|
|
130
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
131
|
+
<param pos="0" name="os.product" value="Fedora Core Linux"/>
|
|
132
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:redhat:fedora_core:-"/>
|
|
133
|
+
</fingerprint>
|
|
134
|
+
<fingerprint pattern=".*\(RHEL\).*">
|
|
135
|
+
<description>Red Hat Enterprise Linux</description>
|
|
136
|
+
<param pos="0" name="os.vendor" value="Red Hat"/>
|
|
137
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
138
|
+
<param pos="0" name="os.product" value="Enterprise Linux"/>
|
|
139
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:redhat:enterprise_linux:-"/>
|
|
140
|
+
</fingerprint>
|
|
141
|
+
<fingerprint pattern=".*\(Red[ -]Hat(?:[/ ]Linux)?\).*">
|
|
142
|
+
<description>Red Hat Linux</description>
|
|
143
|
+
<param pos="0" name="os.vendor" value="Red Hat"/>
|
|
144
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
145
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
146
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:redhat:linux:-"/>
|
|
147
|
+
</fingerprint>
|
|
148
|
+
<fingerprint pattern=".*\(Red Hat Enterprise (?:Linux)?\).*">
|
|
149
|
+
<description>Apache OS: Red Hat Enterprise Linux</description>
|
|
150
|
+
<example os.vendor="Red Hat">Apache/2.4.6 (Red Hat Enterprise Linux) OpenSSL/1.0.2k-fips</example>
|
|
151
|
+
<param pos="0" name="os.vendor" value="Red Hat"/>
|
|
152
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
153
|
+
<param pos="0" name="os.product" value="Enterprise Linux"/>
|
|
154
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:redhat:enterprise_linux:-"/>
|
|
155
|
+
</fingerprint>
|
|
156
|
+
<fingerprint pattern=".*Debian(?:[/ ]GNU)?(?:/Linux)?.*">
|
|
157
|
+
<description>Debian Linux</description>
|
|
158
|
+
<param pos="0" name="os.vendor" value="Debian"/>
|
|
159
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
160
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
161
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
|
|
162
|
+
</fingerprint>
|
|
163
|
+
<fingerprint pattern=".*\((?:Linux/)?S[uU]SE(?:/Linux)?\).*">
|
|
164
|
+
<description>Novell SuSE Linux</description>
|
|
165
|
+
<param pos="0" name="os.vendor" value="SuSE"/>
|
|
166
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
167
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
168
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:suse:linux:-"/>
|
|
169
|
+
</fingerprint>
|
|
170
|
+
<fingerprint pattern=".*\(NETWARE\).*">
|
|
171
|
+
<description>Novell NetWare</description>
|
|
172
|
+
<param pos="0" name="os.vendor" value="Novell"/>
|
|
173
|
+
<param pos="0" name="os.family" value="NetWare"/>
|
|
174
|
+
<param pos="0" name="os.product" value="NetWare"/>
|
|
175
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:novell:netware:-"/>
|
|
176
|
+
</fingerprint>
|
|
177
|
+
<fingerprint pattern=".*HP-UX_Apache-based_Web_Server.*">
|
|
178
|
+
<description>HP HP-UX</description>
|
|
179
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
|
180
|
+
<param pos="0" name="os.family" value="HP-UX"/>
|
|
181
|
+
<param pos="0" name="os.product" value="HP-UX"/>
|
|
182
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:-"/>
|
|
183
|
+
</fingerprint>
|
|
184
|
+
<fingerprint pattern=".*\(CentOS\).*">
|
|
185
|
+
<description>CentOS Linux</description>
|
|
186
|
+
<param pos="0" name="os.vendor" value="CentOS"/>
|
|
187
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
188
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
189
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:centos:centos:-"/>
|
|
190
|
+
</fingerprint>
|
|
191
|
+
<fingerprint pattern=".*\(Turbolinux\).*">
|
|
192
|
+
<description>Turbolinux</description>
|
|
193
|
+
<param pos="0" name="os.vendor" value="Turbolinux"/>
|
|
194
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
195
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
196
|
+
</fingerprint>
|
|
197
|
+
<fingerprint pattern=".*\(FreeBSD\).*">
|
|
198
|
+
<description>FreeBSD</description>
|
|
199
|
+
<param pos="0" name="os.vendor" value="FreeBSD"/>
|
|
200
|
+
<param pos="0" name="os.family" value="FreeBSD"/>
|
|
201
|
+
<param pos="0" name="os.product" value="FreeBSD"/>
|
|
202
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:-"/>
|
|
203
|
+
</fingerprint>
|
|
204
|
+
<fingerprint pattern=".*\(Asianux\).*">
|
|
205
|
+
<description>Asianux Linux</description>
|
|
206
|
+
<param pos="0" name="os.vendor" value="Asianux"/>
|
|
207
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
208
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
209
|
+
</fingerprint>
|
|
210
|
+
<fingerprint pattern=".*\(Gentoo(?:/Linux)?\).*">
|
|
211
|
+
<description>Gentoo Linux</description>
|
|
212
|
+
<param pos="0" name="os.vendor" value="Gentoo"/>
|
|
213
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
214
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
215
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:gentoo:linux:-"/>
|
|
216
|
+
</fingerprint>
|
|
217
|
+
<fingerprint pattern=".*\(Conectiva(?:/Linux)?\).*">
|
|
218
|
+
<description>Conectiva Linux</description>
|
|
219
|
+
<param pos="0" name="os.vendor" value="Conectiva"/>
|
|
220
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
221
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
222
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:conectiva:linux:-"/>
|
|
223
|
+
</fingerprint>
|
|
224
|
+
<fingerprint pattern=".*\(Trustix Secure Linux(?:/Linux)?\).*">
|
|
225
|
+
<description>Trustix Linux</description>
|
|
226
|
+
<param pos="0" name="os.vendor" value="Trustix"/>
|
|
227
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
228
|
+
<param pos="0" name="os.product" value="Secure Linux"/>
|
|
229
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:trustix:secure_linux:-"/>
|
|
230
|
+
</fingerprint>
|
|
231
|
+
<fingerprint pattern=".*\(White Box\).*">
|
|
232
|
+
<description>White Box Enterprise Linux</description>
|
|
233
|
+
<param pos="0" name="os.vendor" value="White Box"/>
|
|
234
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
235
|
+
<param pos="0" name="os.product" value="Enterprise Linux"/>
|
|
236
|
+
</fingerprint>
|
|
237
|
+
<fingerprint pattern=".*\(UnitedLinux\).*">
|
|
238
|
+
<description>UnitedLinux</description>
|
|
239
|
+
<param pos="0" name="os.vendor" value="UnitedLinux"/>
|
|
240
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
241
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
242
|
+
</fingerprint>
|
|
243
|
+
<fingerprint pattern=".*\(PLD/Linux\).*">
|
|
244
|
+
<description>PLD Linux</description>
|
|
245
|
+
<param pos="0" name="os.vendor" value="PLD"/>
|
|
246
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
247
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
248
|
+
</fingerprint>
|
|
249
|
+
<fingerprint pattern=".*\(Vine/Linux\).*">
|
|
250
|
+
<description>Vine Linux</description>
|
|
251
|
+
<param pos="0" name="os.vendor" value="Vine"/>
|
|
252
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
253
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
254
|
+
</fingerprint>
|
|
255
|
+
<fingerprint pattern=".*\(rPath\).*">
|
|
256
|
+
<description>rPath Linux</description>
|
|
257
|
+
<param pos="0" name="os.vendor" value="rPath"/>
|
|
258
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
259
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
260
|
+
</fingerprint>
|
|
261
|
+
<fingerprint pattern=".*\(StartCom Linux\).*">
|
|
262
|
+
<description>StartCom Linux</description>
|
|
263
|
+
<param pos="0" name="os.vendor" value="StartCom"/>
|
|
264
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
265
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
266
|
+
</fingerprint>
|
|
267
|
+
<fingerprint pattern=".*Linux.*">
|
|
268
|
+
<description>Generic Linux fallback</description>
|
|
269
|
+
<param pos="0" name="os.certainty" value="0.75"/>
|
|
270
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
271
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
272
|
+
</fingerprint>
|
|
273
|
+
</fingerprints>
|
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
<?xml version="1.0" encoding="UTF-8"?>
|
|
2
|
+
<fingerprints matches="architecture" database_type="util.os">
|
|
3
|
+
<!--
|
|
4
|
+
Generic rules for matching a machine architecture, platform, or chipset
|
|
5
|
+
-->
|
|
6
|
+
<fingerprint pattern="x64|amd64|x86_64" flags="REG_ICASE">
|
|
7
|
+
<description>x64 (x86_x64)</description>
|
|
8
|
+
<example>Linux claw 3.11.0-15-generic #23-Ubuntu SMP Mon Dec 9 18:17:04 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux</example>
|
|
9
|
+
<param pos="0" name="os.arch" value="x86_64"/>
|
|
10
|
+
</fingerprint>
|
|
11
|
+
<fingerprint pattern="x86|i[3456]86" flags="REG_ICASE">
|
|
12
|
+
<description>x86</description>
|
|
13
|
+
<example>Linux bob 3.2.0-1-generic #3-Ubuntu SMP Wed Dec 11 19:12:55 UTC 2013 i686 i686 i686 GNU/Linux</example>
|
|
14
|
+
<param pos="0" name="os.arch" value="x86"/>
|
|
15
|
+
</fingerprint>
|
|
16
|
+
<fingerprint pattern="PowerPC|PPC|POWER|ppc">
|
|
17
|
+
<description>PowerPC</description>
|
|
18
|
+
<param pos="0" name="os.arch" value="PowerPC"/>
|
|
19
|
+
</fingerprint>
|
|
20
|
+
<fingerprint pattern="SPARC" flags="REG_ICASE">
|
|
21
|
+
<description>SPARC</description>
|
|
22
|
+
<param pos="0" name="os.arch" value="Sparc"/>
|
|
23
|
+
</fingerprint>
|
|
24
|
+
<fingerprint pattern="mips" flags="REG_ICASE">
|
|
25
|
+
<description>MIPS</description>
|
|
26
|
+
<param pos="0" name="os.arch" value="MIPS"/>
|
|
27
|
+
</fingerprint>
|
|
28
|
+
<fingerprint pattern="arm64|aarch64" flags="REG_ICASE">
|
|
29
|
+
<description>ARM64 (aarch64)</description>
|
|
30
|
+
<param pos="0" name="os.arch" value="ARM64"/>
|
|
31
|
+
</fingerprint>
|
|
32
|
+
<fingerprint pattern="arm" flags="REG_ICASE">
|
|
33
|
+
<description>ARM</description>
|
|
34
|
+
<param pos="0" name="os.arch" value="ARM"/>
|
|
35
|
+
</fingerprint>
|
|
36
|
+
</fingerprints>
|
|
@@ -0,0 +1,761 @@
|
|
|
1
|
+
<?xml version="1.0" encoding="UTF-8"?>
|
|
2
|
+
<fingerprints matches="dns.versionbind" protocol="dns" database_type="service" preference="0.750">
|
|
3
|
+
<!--
|
|
4
|
+
This fingerprint file matches the text string response from a DNS
|
|
5
|
+
version.bind request.
|
|
6
|
+
|
|
7
|
+
For example, the string 'dnsmasq-2.76-1-ubnt2' emitted by the command below:
|
|
8
|
+
|
|
9
|
+
$ nslookup -type=txt -class=chaos VERSION.BIND <dns_server> | grep VERSION.BIND | cut -d\" -f2
|
|
10
|
+
dnsmasq-2.76-1-ubnt2
|
|
11
|
+
|
|
12
|
+
-->
|
|
13
|
+
<!-- Red Hat package naming:
|
|
14
|
+
https://fedoraproject.org/wiki/Packaging:DistTag
|
|
15
|
+
https://fedoraproject.org/wiki/Packaging:Versioning
|
|
16
|
+
|
|
17
|
+
Enterprise linux release dates:
|
|
18
|
+
https://access.redhat.com/articles/3078
|
|
19
|
+
-->
|
|
20
|
+
<fingerprint pattern="^(9.[^-]+(?:-rpz\d?[+.]rl[\d.]+)?(?:-[SP]\d)?)-RedHat-[\d.]+[-.][\w.]+el([\d]+)_?(\d*)(?:.[\w.]+)?$">
|
|
21
|
+
<description>ISC BIND: Red Hat Enterprise Linux</description>
|
|
22
|
+
<example service.version="9.8.2rc1" os.version="6" os.version.version="9">9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.2</example>
|
|
23
|
+
<example service.version="9.9.4" os.version="7" os.version.version="3">9.9.4-RedHat-9.9.4-38.el7_3.3</example>
|
|
24
|
+
<example service.version="9.3.6-P1" os.version="5" os.version.version="11">9.3.6-P1-RedHat-9.3.6-25.P1.el5_11.12</example>
|
|
25
|
+
<example service.version="9.9.1-P3" os.version="6">9.9.1-P3-RedHat-9.9.1.P3.el6</example>
|
|
26
|
+
<example service.version="9.9.3-rpz2+rl.13208.13-P2" os.version="6">9.9.3-rpz2+rl.13208.13-P2-RedHat-9.9.3-4.P2.el6</example>
|
|
27
|
+
<example os.version="6" os.version.version="1">9.7.3-P3-RedHat-9.7.3-2.el6_1.P3.3</example>
|
|
28
|
+
<example os.version="6" os.version.version="">9.8.2rc1-RedHat-9.8.2-0.47.rc1.el6</example>
|
|
29
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
30
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
31
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
32
|
+
<param pos="1" name="service.version"/>
|
|
33
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:isc:bind:{service.version}"/>
|
|
34
|
+
<param pos="0" name="os.vendor" value="Red Hat"/>
|
|
35
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
36
|
+
<param pos="0" name="os.product" value="Enterprise Linux"/>
|
|
37
|
+
<param pos="2" name="os.version"/>
|
|
38
|
+
<param pos="3" name="os.version.version"/>
|
|
39
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:redhat:enterprise_linux:{os.version}"/>
|
|
40
|
+
</fingerprint>
|
|
41
|
+
<fingerprint pattern="^(9.[^-]+(?:-rl[.\d]+)?(?:-[SP]\d)?)-RedHat-[\d.]+-[\w.]+fc([\d]+)$">
|
|
42
|
+
<description>ISC BIND: Fedora</description>
|
|
43
|
+
<example service.version="9.10.4-P8">9.10.4-P8-RedHat-9.10.4-4.P8.fc25</example>
|
|
44
|
+
<!-- The '-rl' in the example below indicates a rate limiting patch -->
|
|
45
|
+
<example service.version="9.9.3-rl.13207.22-P2">9.9.3-rl.13207.22-P2-RedHat-9.9.3-5.P2.fc19</example>
|
|
46
|
+
<example os.version="10">9.5.2-RedHat-9.5.2-1.fc10</example>
|
|
47
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
48
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
49
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
50
|
+
<param pos="1" name="service.version"/>
|
|
51
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:isc:bind:{service.version}"/>
|
|
52
|
+
<param pos="0" name="os.vendor" value="Red Hat"/>
|
|
53
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
54
|
+
<param pos="0" name="os.product" value="Fedora Core Linux"/>
|
|
55
|
+
<param pos="2" name="os.version"/>
|
|
56
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:redhat:fedora_core:{os.version}"/>
|
|
57
|
+
</fingerprint>
|
|
58
|
+
<fingerprint pattern="^(9.[^-]+(?:-[SP]\d)?)-RedHat-[\w.-]+amzn1$">
|
|
59
|
+
<description>ISC BIND: Red Hat - Amazon hosted</description>
|
|
60
|
+
<example service.version="9.8.2rc1">9.8.2rc1-RedHat-9.8.2-0.37.rc1.45.amzn1</example>
|
|
61
|
+
<example service.version="9.7.3-P3">9.7.3-P3-RedHat-9.7.3-2.11.amzn1</example>
|
|
62
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
63
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
64
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
65
|
+
<param pos="1" name="service.version"/>
|
|
66
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:isc:bind:{service.version}"/>
|
|
67
|
+
<param pos="0" name="os.vendor" value="Red Hat"/>
|
|
68
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
69
|
+
</fingerprint>
|
|
70
|
+
<fingerprint pattern="(9.[^-]+(?:-[SP]\d)?)-RedHat-[\w.-]+alios([\d\.]+)$">
|
|
71
|
+
<description>ISC BIND: Red Hat - Alibaba Customized EL</description>
|
|
72
|
+
<example service.version="9.9.9-P3" os.version="6">9.9.9-P3-RedHat-9.9.9-2.1.alios6</example>
|
|
73
|
+
<example service.version="9.8.2rc1" os.version="6.1">9.8.2rc1-RedHat-9.8.2-0.23.rc1.2.alios6.1</example>
|
|
74
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
75
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
76
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
77
|
+
<param pos="1" name="service.version"/>
|
|
78
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:isc:bind:{service.version}"/>
|
|
79
|
+
<param pos="0" name="os.vendor" value="Red Hat"/>
|
|
80
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
81
|
+
<param pos="0" name="os.product" value="Enterprise Linux"/>
|
|
82
|
+
<param pos="2" name="os.version"/>
|
|
83
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:redhat:enterprise_linux:{os.version}"/>
|
|
84
|
+
</fingerprint>
|
|
85
|
+
<fingerprint pattern="^(9.[^-]+(?:rc\d)?(?:-[SP]\d)?)-RedHat-[\d.-]+(?:[-\.][SP]\d)?(?:rc[\d\.]+)?$">
|
|
86
|
+
<description>ISC BIND: Red Hat nonspecific platform</description>
|
|
87
|
+
<example service.version="9.9.10-P2">9.9.10-P2-RedHat-9.9.10-P2</example>
|
|
88
|
+
<example service.version="9.9.5">9.9.5-RedHat-9.9.5-1</example>
|
|
89
|
+
<example service.version="9.8.2rc1">9.8.2rc1-RedHat-9.8.2-0.10.rc1.1</example>
|
|
90
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
91
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
92
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
93
|
+
<param pos="1" name="service.version"/>
|
|
94
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:isc:bind:{service.version}"/>
|
|
95
|
+
<param pos="0" name="os.vendor" value="Red Hat"/>
|
|
96
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
97
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
98
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:redhat:linux:-"/>
|
|
99
|
+
</fingerprint>
|
|
100
|
+
<fingerprint pattern="^(9.[^-]+(?:-[SP]\d)?)-[\d.]+ubuntu[\d.]+-Ubuntu$">
|
|
101
|
+
<description>ISC BIND: Ubuntu</description>
|
|
102
|
+
<example service.version="9.9.5">9.9.5-11ubuntu1.1-Ubuntu</example>
|
|
103
|
+
<example service.version="9.10.3-P4">9.10.3-P4-10.1ubuntu5-Ubuntu</example>
|
|
104
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
105
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
106
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
107
|
+
<param pos="1" name="service.version"/>
|
|
108
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:isc:bind:{service.version}"/>
|
|
109
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
110
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
111
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
112
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
|
|
113
|
+
</fingerprint>
|
|
114
|
+
<fingerprint pattern="^(9.[^-]+-rpz\d?[+.]rl[\d.]+(?:-[SP]\d)?)-Ubuntu-[\d\.:]+[\w\.]+(?:-[SP]\d)?-\d?ubuntu[\d\.]+$">
|
|
115
|
+
<description>ISC BIND: Ubuntu with Response Policy Zone and Request Limiting patches</description>
|
|
116
|
+
<example service.version="9.9.3-rpz2+rl.13214.22-P2">9.9.3-rpz2+rl.13214.22-P2-Ubuntu-1:9.9.3.dfsg.P2-4ubuntu1.1</example>
|
|
117
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
118
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
119
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
120
|
+
<param pos="1" name="service.version"/>
|
|
121
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:isc:bind:{service.version}"/>
|
|
122
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
123
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
124
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
125
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
|
|
126
|
+
</fingerprint>
|
|
127
|
+
<fingerprint pattern="^(9.[^-]+(?:-[SP]\d)?)(?:-[\d\.]+)?-Ubuntu$">
|
|
128
|
+
<description>ISC BIND: Ubuntu short</description>
|
|
129
|
+
<example service.version="9.10.3-P4">9.10.3-P4-Ubuntu</example>
|
|
130
|
+
<example service.version="9.9.5">9.9.5-3-Ubuntu</example>
|
|
131
|
+
<example service.version="9.9.5">9.9.5-4.3-Ubuntu</example>
|
|
132
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
133
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
134
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
135
|
+
<param pos="1" name="service.version"/>
|
|
136
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:isc:bind:{service.version}"/>
|
|
137
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
138
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
139
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
140
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
|
|
141
|
+
</fingerprint>
|
|
142
|
+
<fingerprint pattern="^(9.[\d\.]+(?:[+-]rpz\d?[+.]rl[\d.]+)?(?:-[SP]\d)?).*[+-]zentyal\d*">
|
|
143
|
+
<description>ISC BIND: Ubuntu Zentyal custom distribution</description>
|
|
144
|
+
<example service.version="9.9.5">9.9.5-3+zentyal-Ubuntu</example>
|
|
145
|
+
<example service.version="9.9.5">9.9.5-3-zentyal1-Ubuntu</example>
|
|
146
|
+
<example service.version="9.9.3-rpz2+rl.13214.22-P2">9.9.3-rpz2+rl.13214.22-P2-Ubuntu-2:9.9.3.dfsg.P2-4ubuntu1.1+zentyal12</example>
|
|
147
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
148
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
149
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
150
|
+
<param pos="1" name="service.version"/>
|
|
151
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:isc:bind:{service.version}"/>
|
|
152
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
153
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
154
|
+
<param pos="0" name="os.product" value="Zentyal"/>
|
|
155
|
+
</fingerprint>
|
|
156
|
+
<fingerprint pattern="^(9.[^-]+(?:-[SP]\d)?)-9\+deb8u[\w~\.]+-Debian$">
|
|
157
|
+
<description>ISC BIND: Debian Jessie</description>
|
|
158
|
+
<example service.version="9.9.5">9.9.5-9+deb8u11-Debian</example>
|
|
159
|
+
<example service.version="9.9.5">9.9.5-9+deb8u6A~4.2.0.201702281603-Debian</example>
|
|
160
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
161
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
162
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
163
|
+
<param pos="1" name="service.version"/>
|
|
164
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:isc:bind:{service.version}"/>
|
|
165
|
+
<param pos="0" name="os.vendor" value="Debian"/>
|
|
166
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
167
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
168
|
+
<param pos="0" name="os.version" value="8.0"/>
|
|
169
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:8.0"/>
|
|
170
|
+
</fingerprint>
|
|
171
|
+
<fingerprint pattern="^(9.[^-]+(?:-[SP]\d)?)-9wheezy\w+-Debian$">
|
|
172
|
+
<description>ISC BIND: Debian Wheezy</description>
|
|
173
|
+
<example service.version="9.9.5">9.9.5-9wheezy1-Debian</example>
|
|
174
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
175
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
176
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
177
|
+
<param pos="1" name="service.version"/>
|
|
178
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:isc:bind:{service.version}"/>
|
|
179
|
+
<param pos="0" name="os.vendor" value="Debian"/>
|
|
180
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
181
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
182
|
+
<param pos="0" name="os.version" value="7.0"/>
|
|
183
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:7.0"/>
|
|
184
|
+
</fingerprint>
|
|
185
|
+
<fingerprint pattern="^(9.[^-]+(?:-[SP]\d)?)-(?:[\d\.]+-)?Debian$">
|
|
186
|
+
<description>ISC BIND: Debian no version simple</description>
|
|
187
|
+
<example service.version="9.10.3-P4">9.10.3-P4-Debian</example>
|
|
188
|
+
<example service.version="9.9.5">9.9.5-12.1-Debian</example>
|
|
189
|
+
<example service.version="9.9.5">9.9.5-4-Debian</example>
|
|
190
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
191
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
192
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
193
|
+
<param pos="1" name="service.version"/>
|
|
194
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:isc:bind:{service.version}"/>
|
|
195
|
+
<param pos="0" name="os.vendor" value="Debian"/>
|
|
196
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
197
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
198
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
|
|
199
|
+
</fingerprint>
|
|
200
|
+
<fingerprint pattern="^(9\.\d{1,2}\.\d{1,2}-rpz\d?[+.]rl[\d.]+(?:-[SPW]\d+)?)$">
|
|
201
|
+
<description>ISC BIND: Response Policy Zone and Request Limiting patches</description>
|
|
202
|
+
<example service.version="9.8.4-rpz2+rl005.12-P1">9.8.4-rpz2+rl005.12-P1</example>
|
|
203
|
+
<example service.version="9.9.3-rpz2+rl.156.01-P2">9.9.3-rpz2+rl.156.01-P2</example>
|
|
204
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
205
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
206
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
207
|
+
<param pos="1" name="service.version"/>
|
|
208
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:isc:bind:{service.version}"/>
|
|
209
|
+
</fingerprint>
|
|
210
|
+
<fingerprint pattern="^DNS Server BIND (9\.\d{1,2}-ESV(?:-R\d+)?(?:-[SPW]\d+)?)$">
|
|
211
|
+
<description>ISC BIND: ESV</description>
|
|
212
|
+
<example service.version="9.6-ESV-R7-P2">DNS Server BIND 9.6-ESV-R7-P2</example>
|
|
213
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
214
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
215
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
216
|
+
<param pos="1" name="service.version"/>
|
|
217
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:isc:bind:{service.version}"/>
|
|
218
|
+
</fingerprint>
|
|
219
|
+
<!--
|
|
220
|
+
FP below might be overly specific, trying to avoid false positive when
|
|
221
|
+
matching cross-service/protocol.
|
|
222
|
+
-->
|
|
223
|
+
<fingerprint pattern="^(?:BIND )?([89]\.[\d\.]+(?:[ab]\d+)?(?:-ESV(?:-R\d+)?)?(?:-[SPW][\d\.]+)?(?:-REL)?(?:-[W]\d+)?(?:rc\d)?)(?:-NOESW)?$">
|
|
224
|
+
<description>ISC BIND: bare release number - ESV REL NOESW</description>
|
|
225
|
+
<example service.version="9.7.0-P1">9.7.0-P1</example>
|
|
226
|
+
<example service.version="9.4.2-P2.1">9.4.2-P2.1</example>
|
|
227
|
+
<example service.version="9.9.5-W1">9.9.5-W1</example>
|
|
228
|
+
<example service.version="9.2.2rc1">9.2.2rc1</example>
|
|
229
|
+
<example service.version="9.4.2-P2-W2">9.4.2-P2-W2</example>
|
|
230
|
+
<example service.version="9.5.0b1">9.5.0b1</example>
|
|
231
|
+
<example service.version="8.2.2-P5">8.2.2-P5</example>
|
|
232
|
+
<example service.version="8.2.2-P5">BIND 8.2.2-P5</example>
|
|
233
|
+
<example service.version="9.6-ESV-R11-P2">9.6-ESV-R11-P2</example>
|
|
234
|
+
<example service.version="9.6.-ESV-R6">9.6.-ESV-R6</example>
|
|
235
|
+
<example service.version="9.6-ESV">9.6-ESV</example>
|
|
236
|
+
<example service.version="8.4.7-REL">8.4.7-REL-NOESW</example>
|
|
237
|
+
<example service.version="8.3.7-REL">8.3.7-REL</example>
|
|
238
|
+
<example service.version="8.2.2-P5">8.2.2-P5-NOESW</example>
|
|
239
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
240
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
241
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
242
|
+
<param pos="1" name="service.version"/>
|
|
243
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:isc:bind:{service.version}"/>
|
|
244
|
+
</fingerprint>
|
|
245
|
+
<fingerprint pattern="^dnsmasq-(\d.[\w\.]+)$">
|
|
246
|
+
<description>dnsmasq: simple</description>
|
|
247
|
+
<example service.version="2.40">dnsmasq-2.40</example>
|
|
248
|
+
<example service.version="2.51.2">dnsmasq-2.51.2</example>
|
|
249
|
+
<example service.version="2.63rc6">dnsmasq-2.63rc6</example>
|
|
250
|
+
<example service.version="2.76test8">dnsmasq-2.76test8</example>
|
|
251
|
+
<param pos="0" name="service.vendor" value="Thekelleys"/>
|
|
252
|
+
<param pos="0" name="service.family" value="Dnsmasq"/>
|
|
253
|
+
<param pos="0" name="service.product" value="Dnsmasq"/>
|
|
254
|
+
<param pos="1" name="service.version"/>
|
|
255
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:thekelleys:dnsmasq:{service.version}"/>
|
|
256
|
+
</fingerprint>
|
|
257
|
+
<fingerprint pattern="^dnsmasq-(\d.[\w]+-\d)-ubnt\d$">
|
|
258
|
+
<description>dnsmasq: Ubiquiti</description>
|
|
259
|
+
<example service.version="2.76-1">dnsmasq-2.76-1-ubnt2</example>
|
|
260
|
+
<param pos="0" name="service.vendor" value="Thekelleys"/>
|
|
261
|
+
<param pos="0" name="service.family" value="Dnsmasq"/>
|
|
262
|
+
<param pos="0" name="service.product" value="Dnsmasq"/>
|
|
263
|
+
<param pos="1" name="service.version"/>
|
|
264
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:thekelleys:dnsmasq:{service.version}"/>
|
|
265
|
+
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
|
266
|
+
<!-- Not including more info at this time as I'm not sure this doesn't
|
|
267
|
+
run on products other than EdgeRouter.
|
|
268
|
+
-->
|
|
269
|
+
</fingerprint>
|
|
270
|
+
<fingerprint pattern="^dnsmasq-(\d.[\w]+)-OpenDNS-\d$">
|
|
271
|
+
<description>dnsmasq: OpenDNS variant</description>
|
|
272
|
+
<example service.version="2.15">dnsmasq-2.15-OpenDNS-1</example>
|
|
273
|
+
<param pos="0" name="service.vendor" value="Thekelleys"/>
|
|
274
|
+
<param pos="0" name="service.family" value="Dnsmasq"/>
|
|
275
|
+
<param pos="0" name="service.product" value="Dnsmasq"/>
|
|
276
|
+
<param pos="1" name="service.version"/>
|
|
277
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:thekelleys:dnsmasq:{service.version}"/>
|
|
278
|
+
<!-- Seems to correlate with OpenWRT and Netgear but I haven't been able
|
|
279
|
+
to verify that it isn't used elsewhere.
|
|
280
|
+
-->
|
|
281
|
+
</fingerprint>
|
|
282
|
+
<fingerprint pattern="^dnsmasq-?(?:UNKNOWN)?$">
|
|
283
|
+
<description>dnsmasq: no version</description>
|
|
284
|
+
<example>dnsmasq-UNKNOWN</example>
|
|
285
|
+
<example>dnsmasq-</example>
|
|
286
|
+
<example>dnsmasq</example>
|
|
287
|
+
<param pos="0" name="service.vendor" value="Thekelleys"/>
|
|
288
|
+
<param pos="0" name="service.family" value="Dnsmasq"/>
|
|
289
|
+
<param pos="0" name="service.product" value="Dnsmasq"/>
|
|
290
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:thekelleys:dnsmasq:-"/>
|
|
291
|
+
</fingerprint>
|
|
292
|
+
<fingerprint pattern="^PowerDNS Recursor (\d\.[\d.]+(?:-\w+)?) \(\w+@[\w.]+ built \d+ \w+@[\w.-]*\)$">
|
|
293
|
+
<description>PowerDNS Recursor</description>
|
|
294
|
+
<example service.version="3.6.2">PowerDNS Recursor 3.6.2 (jenkins@autotest.powerdns.com built 20141031140810 mockbuild@)</example>
|
|
295
|
+
<example service.version="3.7.4-rc1">PowerDNS Recursor 3.7.4-rc1 (jenkins@autotest.powerdns.com built 20170120211656 root@foo-bar.foo.baz)</example>
|
|
296
|
+
<param pos="0" name="service.vendor" value="PowerDNS"/>
|
|
297
|
+
<param pos="0" name="service.family" value="PowerDNS"/>
|
|
298
|
+
<param pos="0" name="service.product" value="Recursor"/>
|
|
299
|
+
<param pos="1" name="service.version"/>
|
|
300
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:powerdns:recursor:{service.version}"/>
|
|
301
|
+
</fingerprint>
|
|
302
|
+
<fingerprint pattern="^PowerDNS Recursor (\d\.[\d.]+) \(built [\w\s:]+ by [\w]+\@[\w.-]*\)$">
|
|
303
|
+
<description>PowerDNS Recursor: format 2</description>
|
|
304
|
+
<example service.version="4.0.4">PowerDNS Recursor 4.0.4 (built Apr 13 2017 09:59:06 by root@oof-e.baz.foo.bar)</example>
|
|
305
|
+
<param pos="0" name="service.vendor" value="PowerDNS"/>
|
|
306
|
+
<param pos="0" name="service.family" value="PowerDNS"/>
|
|
307
|
+
<param pos="0" name="service.product" value="Recursor"/>
|
|
308
|
+
<param pos="1" name="service.version"/>
|
|
309
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:powerdns:recursor:{service.version}"/>
|
|
310
|
+
</fingerprint>
|
|
311
|
+
<fingerprint pattern="^PowerDNS Recursor (\d\.[\d.]+(?:-\w+)?)$">
|
|
312
|
+
<description>PowerDNS Recursor: version only</description>
|
|
313
|
+
<example service.version="4.0.4">PowerDNS Recursor 4.0.4</example>
|
|
314
|
+
<example service.version="4.0.0-alpha2">PowerDNS Recursor 4.0.0-alpha2</example>
|
|
315
|
+
<param pos="0" name="service.vendor" value="PowerDNS"/>
|
|
316
|
+
<param pos="0" name="service.family" value="PowerDNS"/>
|
|
317
|
+
<param pos="0" name="service.product" value="Recursor"/>
|
|
318
|
+
<param pos="1" name="service.version"/>
|
|
319
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:powerdns:recursor:{service.version}"/>
|
|
320
|
+
</fingerprint>
|
|
321
|
+
<fingerprint pattern="^PowerDNS Recursor (\d\.[\d.]+) \$Id[^$]*\$$">
|
|
322
|
+
<description>PowerDNS Recursor: ID format</description>
|
|
323
|
+
<example service.version="3.5.3">PowerDNS Recursor 3.5.3 $Id$</example>
|
|
324
|
+
<example service.version="3.2">PowerDNS Recursor 3.2 $Id: pdns_recursor.cc 1538 2010-03-06 11:39:03Z ahu $</example>
|
|
325
|
+
<param pos="0" name="service.vendor" value="PowerDNS"/>
|
|
326
|
+
<param pos="0" name="service.family" value="PowerDNS"/>
|
|
327
|
+
<param pos="0" name="service.product" value="Recursor"/>
|
|
328
|
+
<param pos="1" name="service.version"/>
|
|
329
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:powerdns:recursor:{service.version}"/>
|
|
330
|
+
</fingerprint>
|
|
331
|
+
<fingerprint pattern="^PowerDNS Recursor$">
|
|
332
|
+
<description>PowerDNS Recursor: no version</description>
|
|
333
|
+
<example>PowerDNS Recursor</example>
|
|
334
|
+
<param pos="0" name="service.vendor" value="PowerDNS"/>
|
|
335
|
+
<param pos="0" name="service.family" value="PowerDNS"/>
|
|
336
|
+
<param pos="0" name="service.product" value="Recursor"/>
|
|
337
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:powerdns:recursor:-"/>
|
|
338
|
+
</fingerprint>
|
|
339
|
+
<fingerprint pattern="^PowerDNS Authoritative Server (\d\.[\d.]+(?:-rc\d)?) \(\w+@[\w.]+ built [\d\s]+\w*@[\w.-]*\)$">
|
|
340
|
+
<description>PowerDNS Authoritative Server</description>
|
|
341
|
+
<example service.version="3.4.19">PowerDNS Authoritative Server 3.4.19 (jenkins@autotest.powerdns.com built 20160102220341 root@)</example>
|
|
342
|
+
<example service.version="3.4.10">PowerDNS Authoritative Server 3.4.10 (jenkins@autotest.powerdns.com built 20170306160718 root@foo-bar.foo.baz)</example>
|
|
343
|
+
<example service.version="3.3">PowerDNS Authoritative Server 3.3 (jenkins@autotest.powerdns.com built 20150306160718 root@foo-bar.foo.baz)</example>
|
|
344
|
+
<example service.version="3.3-rc2">PowerDNS Authoritative Server 3.3-rc2 (jenkins@autotest.powerdns.com built 20130627120406 root@foo-bar.foo.baz)</example>
|
|
345
|
+
<example service.version="3.4.10">PowerDNS Authoritative Server 3.4.10 (jenkins@autotest.powerdns.com built @)</example>
|
|
346
|
+
<param pos="0" name="service.vendor" value="PowerDNS"/>
|
|
347
|
+
<param pos="0" name="service.family" value="PowerDNS"/>
|
|
348
|
+
<param pos="0" name="service.product" value="Authoritative Server"/>
|
|
349
|
+
<param pos="1" name="service.version"/>
|
|
350
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:powerdns:authoritative_server:{service.version}"/>
|
|
351
|
+
</fingerprint>
|
|
352
|
+
<fingerprint pattern="^PowerDNS Authoritative Server (\d\.[\w.]+(?:-rc\d)?(?:-alpha\d)?(?:-beta\d)?) \(built [\w\s:]+ by [\w]+\@[\w.-:-]*\)$">
|
|
353
|
+
<description>PowerDNS Authoritative Server: format 2</description>
|
|
354
|
+
<example service.version="4.0.4">PowerDNS Authoritative Server 4.0.4 (built Jul 26 2017 15:04:27 by root@FreeBSD:11:amd64-default-job-03)</example>
|
|
355
|
+
<example service.version="4.0.0-rc2">PowerDNS Authoritative Server 4.0.0-rc2 (built Jul 4 2016 15:44:39 by root@foo-bar.baz)</example>
|
|
356
|
+
<example service.version="4.0.0-alpha2">PowerDNS Authoritative Server 4.0.0-alpha2 (built Feb 01 2016 00:12:05 by buildbot@baz)</example>
|
|
357
|
+
<example service.version="4.0.0-beta1">PowerDNS Authoritative Server 4.0.0-beta1 (built Feb 01 2016 00:00:00 by buildbot@baz)</example>
|
|
358
|
+
<example service.version="0.0.g56d692a">PowerDNS Authoritative Server 0.0.g56d692a (built Feb 25 2017 13:10:19 by root@foo-bar.baz)</example>
|
|
359
|
+
<param pos="0" name="service.vendor" value="PowerDNS"/>
|
|
360
|
+
<param pos="0" name="service.family" value="PowerDNS"/>
|
|
361
|
+
<param pos="0" name="service.product" value="Authoritative Server"/>
|
|
362
|
+
<param pos="1" name="service.version"/>
|
|
363
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:powerdns:authoritative_server:{service.version}"/>
|
|
364
|
+
</fingerprint>
|
|
365
|
+
<fingerprint pattern="^PowerDNS Authoritative Server (\d\.[\d.]+(?:-\w+)?)$">
|
|
366
|
+
<description>PowerDNS Authoritative Server: version only</description>
|
|
367
|
+
<example service.version="4.0.0">PowerDNS Authoritative Server 4.0.0</example>
|
|
368
|
+
<example service.version="4.0.0-alpha2">PowerDNS Authoritative Server 4.0.0-alpha2</example>
|
|
369
|
+
<param pos="0" name="service.vendor" value="PowerDNS"/>
|
|
370
|
+
<param pos="0" name="service.family" value="PowerDNS"/>
|
|
371
|
+
<param pos="0" name="service.product" value="Authoritative Server"/>
|
|
372
|
+
<param pos="1" name="service.version"/>
|
|
373
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:powerdns:authoritative_server:{service.version}"/>
|
|
374
|
+
</fingerprint>
|
|
375
|
+
<!-- PowerDNS returns 'Served by ...' when the 'version-string' configuration
|
|
376
|
+
value / arguement is set to 'powerdns'. If this value is set to
|
|
377
|
+
'anonymous' then PowerDNS will return a ServFail DNS response
|
|
378
|
+
The matches below are *probably* Authoritative Server but we can't be
|
|
379
|
+
sure.
|
|
380
|
+
-->
|
|
381
|
+
<fingerprint pattern="^Served by POWERDNS (\d\.[\d.]+) \$Id[^$]*\$$">
|
|
382
|
+
<description>PowerDNS: Served by format with version</description>
|
|
383
|
+
<example service.version="2.9.22">Served by POWERDNS 2.9.22 $Id: packethandler.cc 1321 2008-12-06 19:44:36Z ahu $</example>
|
|
384
|
+
<param pos="0" name="service.vendor" value="PowerDNS"/>
|
|
385
|
+
<param pos="0" name="service.family" value="PowerDNS"/>
|
|
386
|
+
<param pos="1" name="service.version"/>
|
|
387
|
+
</fingerprint>
|
|
388
|
+
<fingerprint pattern="^Served by PowerDNS - https?:\/\/www.powerdns.com\/?$">
|
|
389
|
+
<description>PowerDNS: Served by format without version</description>
|
|
390
|
+
<example>Served by PowerDNS - https://www.powerdns.com/</example>
|
|
391
|
+
<example>Served by PowerDNS - http://www.powerdns.com</example>
|
|
392
|
+
<param pos="0" name="service.vendor" value="PowerDNS"/>
|
|
393
|
+
<param pos="0" name="service.family" value="PowerDNS"/>
|
|
394
|
+
</fingerprint>
|
|
395
|
+
<fingerprint pattern="^Nominum Vantio(?: CacheServe)? ([\d.]+)$">
|
|
396
|
+
<description>Nominum Vantio CacheServe</description>
|
|
397
|
+
<example service.version="4.3.0.2">Nominum Vantio 4.3.0.2</example>
|
|
398
|
+
<example service.version="7.2.1.3">Nominum Vantio CacheServe 7.2.1.3</example>
|
|
399
|
+
<param pos="0" name="service.vendor" value="Nominum"/>
|
|
400
|
+
<param pos="0" name="service.family" value="Vantio"/>
|
|
401
|
+
<param pos="0" name="service.product" value="CacheServe"/>
|
|
402
|
+
<param pos="1" name="service.version"/>
|
|
403
|
+
</fingerprint>
|
|
404
|
+
<fingerprint pattern="^Nominum Vantio ([\d.]+) \(build (\d+)\)$">
|
|
405
|
+
<description>Nominum Vantio CacheServe, with build</description>
|
|
406
|
+
<example service.version.version="114872">Nominum Vantio 5.4.5.1 (build 114872)</example>
|
|
407
|
+
<param pos="0" name="service.vendor" value="Nominum"/>
|
|
408
|
+
<param pos="0" name="service.family" value="Vantio"/>
|
|
409
|
+
<param pos="0" name="service.product" value="CacheServe"/>
|
|
410
|
+
<param pos="1" name="service.version"/>
|
|
411
|
+
<param pos="2" name="service.version.version"/>
|
|
412
|
+
</fingerprint>
|
|
413
|
+
<fingerprint pattern="^Nominum ANS(?:Premier)? ([\d\.]+)$">
|
|
414
|
+
<description>Nominum Vantio AuthServ</description>
|
|
415
|
+
<example service.version="5.4.0.0">Nominum ANS 5.4.0.0</example>
|
|
416
|
+
<example service.version="5.4.0.0">Nominum ANSPremier 5.4.0.0</example>
|
|
417
|
+
<param pos="0" name="service.vendor" value="Nominum"/>
|
|
418
|
+
<param pos="0" name="service.family" value="Vantio"/>
|
|
419
|
+
<param pos="0" name="service.product" value="AuthServ"/>
|
|
420
|
+
<param pos="1" name="service.version"/>
|
|
421
|
+
</fingerprint>
|
|
422
|
+
<fingerprint pattern="^NSD ([\d.]*(?:b\d+)?)$">
|
|
423
|
+
<description>NLnet Labs Name Server Daemon</description>
|
|
424
|
+
<example service.version="3.2.18">NSD 3.2.18</example>
|
|
425
|
+
<example service.version="4.0.0b5">NSD 4.0.0b5</example>
|
|
426
|
+
<example service.version="4">NSD 4</example>
|
|
427
|
+
<example>NSD </example>
|
|
428
|
+
<param pos="0" name="service.vendor" value="NLnet Labs"/>
|
|
429
|
+
<param pos="0" name="service.family" value="NSD"/>
|
|
430
|
+
<param pos="0" name="service.product" value="dnsd"/>
|
|
431
|
+
<param pos="1" name="service.version"/>
|
|
432
|
+
</fingerprint>
|
|
433
|
+
<fingerprint pattern="^unbound ([\d.]+)$">
|
|
434
|
+
<description>NLnet Labs Unbound</description>
|
|
435
|
+
<example service.version="1.4.22">unbound 1.4.22</example>
|
|
436
|
+
<param pos="0" name="service.vendor" value="NLnet Labs"/>
|
|
437
|
+
<param pos="0" name="service.family" value="Unbound"/>
|
|
438
|
+
<param pos="0" name="service.product" value="unbound"/>
|
|
439
|
+
<param pos="1" name="service.version"/>
|
|
440
|
+
</fingerprint>
|
|
441
|
+
<fingerprint pattern="^(?i:unbound)$">
|
|
442
|
+
<description>NLnet Labs Unbound no version string</description>
|
|
443
|
+
<example>unbound</example>
|
|
444
|
+
<param pos="0" name="service.vendor" value="NLnet Labs"/>
|
|
445
|
+
<param pos="0" name="service.family" value="Unbound"/>
|
|
446
|
+
<param pos="0" name="service.product" value="unbound"/>
|
|
447
|
+
</fingerprint>
|
|
448
|
+
<fingerprint pattern="^(?:BIND )?(9.[^-]+(?:-[SP]\d)?)-9\+deb8u\d+-Raspbian$">
|
|
449
|
+
<description>ISC BIND: Raspbian based on Debian Jessie</description>
|
|
450
|
+
<example service.version="9.9.5">9.9.5-9+deb8u7-Raspbian</example>
|
|
451
|
+
<example service.version="9.9.5">BIND 9.9.5-9+deb8u11-Raspbian</example>
|
|
452
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
453
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
454
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
455
|
+
<param pos="1" name="service.version"/>
|
|
456
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:isc:bind:{service.version}"/>
|
|
457
|
+
<param pos="0" name="os.vendor" value="Raspbian"/>
|
|
458
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
459
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
460
|
+
<param pos="0" name="os.version" value="8.0"/>
|
|
461
|
+
</fingerprint>
|
|
462
|
+
<fingerprint pattern="^(9.[^-]+(?:-[SP]\d)?)-(?:\d-)?Raspbian$">
|
|
463
|
+
<description>ISC BIND: Raspbian based on Debian Jessie no version simple</description>
|
|
464
|
+
<example service.version="9.10.3-P4">9.10.3-P4-Raspbian</example>
|
|
465
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
466
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
467
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
468
|
+
<param pos="1" name="service.version"/>
|
|
469
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:isc:bind:{service.version}"/>
|
|
470
|
+
<param pos="0" name="os.vendor" value="Raspbian"/>
|
|
471
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
472
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
473
|
+
</fingerprint>
|
|
474
|
+
<fingerprint pattern="^Knot DNS ([\d.]+(?:-dev)?)$">
|
|
475
|
+
<description>Knot DNS</description>
|
|
476
|
+
<example service.version="1.6.0">Knot DNS 1.6.0</example>
|
|
477
|
+
<example service.version="2.5.0-dev">Knot DNS 2.5.0-dev</example>
|
|
478
|
+
<param pos="0" name="service.vendor" value="cz.nic"/>
|
|
479
|
+
<param pos="0" name="service.family" value="Knot"/>
|
|
480
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
481
|
+
<param pos="1" name="service.version"/>
|
|
482
|
+
</fingerprint>
|
|
483
|
+
<fingerprint pattern="^UltraDNS Resolver$">
|
|
484
|
+
<description>Neustar UltraDNS Resolver</description>
|
|
485
|
+
<example>UltraDNS Resolver</example>
|
|
486
|
+
<param pos="0" name="service.vendor" value="Neustar"/>
|
|
487
|
+
<param pos="0" name="service.family" value="UltraDNS"/>
|
|
488
|
+
<param pos="0" name="service.product" value="Resolver"/>
|
|
489
|
+
</fingerprint>
|
|
490
|
+
<fingerprint pattern="^UltraDNS TLD Platform - www\.ultradns\.com$">
|
|
491
|
+
<description>Neustar UltraDNS TLD Platform</description>
|
|
492
|
+
<example>UltraDNS TLD Platform - www.ultradns.com</example>
|
|
493
|
+
<param pos="0" name="service.vendor" value="Neustar"/>
|
|
494
|
+
<param pos="0" name="service.family" value="UltraDNS"/>
|
|
495
|
+
<param pos="0" name="service.product" value="Resolver"/>
|
|
496
|
+
</fingerprint>
|
|
497
|
+
<!-- For Microsoft OSes the build number applies to the family. For example,
|
|
498
|
+
6.3.9600 is used by Windows 8.1 Update 1 as well as Windows 2012 R2. We
|
|
499
|
+
are assuming that the server version of the OS is what we are
|
|
500
|
+
fingerprinting since installation of the DNS service on the workstation
|
|
501
|
+
class OS would be unlikely and difficult if possible at all.
|
|
502
|
+
|
|
503
|
+
DNS version response is disabled by default on modern Windows versions
|
|
504
|
+
and the detail in the response is controlled via the EnableVersionQuery
|
|
505
|
+
setting.
|
|
506
|
+
|
|
507
|
+
The to enable version response on modern versions is:
|
|
508
|
+
dnscmd /config /EnableVersionQuery 1
|
|
509
|
+
-->
|
|
510
|
+
<fingerprint pattern="^Microsoft DNS (10.0.\d+)(?: \(\w+\))?$">
|
|
511
|
+
<description>Microsoft DNS on Windows 2016: GA</description>
|
|
512
|
+
<!-- Windows 10 / 2016 moved towards a rolling release so capturing build
|
|
513
|
+
is required unlike other Windows versions where we use a fixed string.
|
|
514
|
+
-->
|
|
515
|
+
<example service.version="10.0.14393" os.build="10.0.14393">Microsoft DNS 10.0.14393 (383900CE)</example>
|
|
516
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
|
517
|
+
<param pos="0" name="service.family" value="DNS"/>
|
|
518
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
519
|
+
<param pos="1" name="service.version"/>
|
|
520
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
521
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
522
|
+
<param pos="0" name="os.product" value="Windows Server 2016"/>
|
|
523
|
+
<param pos="1" name="os.build"/>
|
|
524
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2016:-"/>
|
|
525
|
+
</fingerprint>
|
|
526
|
+
<fingerprint pattern="^Microsoft DNS 6.3.9600(?: \(\w+\))?$">
|
|
527
|
+
<description>Microsoft DNS on Windows 2012 R2</description>
|
|
528
|
+
<example>Microsoft DNS 6.3.9600 (25804825)</example>
|
|
529
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
|
530
|
+
<param pos="0" name="service.family" value="DNS"/>
|
|
531
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
532
|
+
<param pos="0" name="service.version" value="6.3.9600"/>
|
|
533
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
534
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
535
|
+
<param pos="0" name="os.product" value="Windows Server 2012 R2"/>
|
|
536
|
+
<param pos="0" name="os.build" value="6.3.9600"/>
|
|
537
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
|
|
538
|
+
</fingerprint>
|
|
539
|
+
<fingerprint pattern="^Microsoft DNS 6.2.9200(?: \(\w+\))?$">
|
|
540
|
+
<description>Microsoft DNS on Windows 2012</description>
|
|
541
|
+
<example>Microsoft DNS 6.2.9200 (23F04000)</example>
|
|
542
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
|
543
|
+
<param pos="0" name="service.family" value="DNS"/>
|
|
544
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
545
|
+
<param pos="0" name="service.version" value="6.2.9200"/>
|
|
546
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
547
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
548
|
+
<param pos="0" name="os.product" value="Windows Server 2012"/>
|
|
549
|
+
<param pos="0" name="os.build" value="6.2.9200"/>
|
|
550
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
|
|
551
|
+
</fingerprint>
|
|
552
|
+
<fingerprint pattern="^Microsoft DNS 6.1.7601(?: \(\w+\))?$">
|
|
553
|
+
<description>Microsoft DNS on Windows 2008 R2 Service Pack 1</description>
|
|
554
|
+
<example>Microsoft DNS 6.1.7601 (1DB15CD4)</example>
|
|
555
|
+
<example>Microsoft DNS 6.1.7601</example>
|
|
556
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
|
557
|
+
<param pos="0" name="service.family" value="DNS"/>
|
|
558
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
559
|
+
<param pos="0" name="service.version" value="6.1.7601"/>
|
|
560
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
561
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
562
|
+
<param pos="0" name="os.product" value="Windows Server 2008 R2"/>
|
|
563
|
+
<param pos="0" name="os.version" value="Service Pack 1"/>
|
|
564
|
+
<param pos="0" name="os.build" value="6.1.7601"/>
|
|
565
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:Service Pack 1"/>
|
|
566
|
+
</fingerprint>
|
|
567
|
+
<fingerprint pattern="^Microsoft DNS 6.1.7600(?: \(\w+\))?$">
|
|
568
|
+
<description>Microsoft DNS on Windows 2008 R2</description>
|
|
569
|
+
<example>Microsoft DNS 6.1.7600 (1DB04228)</example>
|
|
570
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
|
571
|
+
<param pos="0" name="service.family" value="DNS"/>
|
|
572
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
573
|
+
<param pos="0" name="service.version" value="6.1.7600"/>
|
|
574
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
575
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
576
|
+
<param pos="0" name="os.product" value="Windows Server 2008 R2"/>
|
|
577
|
+
<param pos="0" name="os.build" value="6.1.7600"/>
|
|
578
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
|
|
579
|
+
</fingerprint>
|
|
580
|
+
<fingerprint pattern="^Microsoft DNS 6.0.6002(?: \(\w+\))?$">
|
|
581
|
+
<description>Microsoft DNS on Windows 2008 Service Pack 2</description>
|
|
582
|
+
<example>Microsoft DNS 6.0.6002 (17724D35)</example>
|
|
583
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
|
584
|
+
<param pos="0" name="service.family" value="DNS"/>
|
|
585
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
586
|
+
<param pos="0" name="service.version" value="6.0.6002"/>
|
|
587
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
588
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
589
|
+
<param pos="0" name="os.product" value="Windows Server 2008"/>
|
|
590
|
+
<param pos="0" name="os.version" value="Service Pack 2"/>
|
|
591
|
+
<param pos="0" name="os.build" value="6.0.6002"/>
|
|
592
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:Service Pack 2"/>
|
|
593
|
+
</fingerprint>
|
|
594
|
+
<fingerprint pattern="^Microsoft DNS 6.0.6001(?: \(\w+\))?$">
|
|
595
|
+
<description>Microsoft DNS on Windows 2008 Service Pack 1</description>
|
|
596
|
+
<example>Microsoft DNS 6.0.6001 (17714726)</example>
|
|
597
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
|
598
|
+
<param pos="0" name="service.family" value="DNS"/>
|
|
599
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
600
|
+
<param pos="0" name="service.version" value="6.0.6001"/>
|
|
601
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
602
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
603
|
+
<param pos="0" name="os.product" value="Windows Server 2008"/>
|
|
604
|
+
<param pos="0" name="os.version" value="Service Pack 1"/>
|
|
605
|
+
<param pos="0" name="os.build" value="6.0.6001"/>
|
|
606
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:Service Pack 1"/>
|
|
607
|
+
</fingerprint>
|
|
608
|
+
<fingerprint pattern="^DNSServer$">
|
|
609
|
+
<description>Synology DNS service</description>
|
|
610
|
+
<example>DNSServer</example>
|
|
611
|
+
<param pos="0" name="service.vendor" value="Synology"/>
|
|
612
|
+
<param pos="0" name="service.family" value="DSM"/>
|
|
613
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
614
|
+
<param pos="0" name="os.device" value="NAS"/>
|
|
615
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
616
|
+
<param pos="0" name="os.product" value="DSM"/>
|
|
617
|
+
<param pos="0" name="os.vendor" value="Synology"/>
|
|
618
|
+
<param pos="0" name="hw.vendor" value="Synology"/>
|
|
619
|
+
<param pos="0" name="hw.device" value="NAS"/>
|
|
620
|
+
</fingerprint>
|
|
621
|
+
<fingerprint pattern="^Incognito DNS Service ([\d\.]+) \(built">
|
|
622
|
+
<description>Incognito DNS Service</description>
|
|
623
|
+
<example service.version="6.4.4.2">Incognito DNS Service 6.4.4.2 (built Aug 10 2015) [up=15d30902s, ser=9876]</example>
|
|
624
|
+
<param pos="0" name="service.vendor" value="Incognito"/>
|
|
625
|
+
<param pos="0" name="service.family" value="DNS"/>
|
|
626
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
627
|
+
<param pos="1" name="service.version"/>
|
|
628
|
+
</fingerprint>
|
|
629
|
+
<fingerprint pattern="^(?i:djbdns)[\s-](\d.\d+)$">
|
|
630
|
+
<description>djbdns</description>
|
|
631
|
+
<example service.version="1.05">djbdns 1.05</example>
|
|
632
|
+
<example service.version="1.05">djbdns-1.05</example>
|
|
633
|
+
<example service.version="1.05">DjbDNS 1.05</example>
|
|
634
|
+
<param pos="0" name="service.vendor" value="D J Bernstein"/>
|
|
635
|
+
<param pos="0" name="service.family" value="djbdns"/>
|
|
636
|
+
<param pos="0" name="service.product" value="djbdns"/>
|
|
637
|
+
<param pos="1" name="service.version"/>
|
|
638
|
+
</fingerprint>
|
|
639
|
+
<fingerprint pattern="^(?i:djbdns)$">
|
|
640
|
+
<description>djbdns: no version</description>
|
|
641
|
+
<example>DJBDNS</example>
|
|
642
|
+
<example>djbdns</example>
|
|
643
|
+
<param pos="0" name="service.vendor" value="D J Bernstein"/>
|
|
644
|
+
<param pos="0" name="service.family" value="djbdns"/>
|
|
645
|
+
<param pos="0" name="service.product" value="djbdns"/>
|
|
646
|
+
</fingerprint>
|
|
647
|
+
<fingerprint pattern="^rbldnsd (\d[\.\w\/-]+) \(\d\d \w\w\w \d\d\d\d\)$">
|
|
648
|
+
<description>rbldnsd</description>
|
|
649
|
+
<example service.version="0.997a">rbldnsd 0.997a (23 Jul 2013)</example>
|
|
650
|
+
<example service.version="0.996a-0.1">rbldnsd 0.996a-0.1 (01 Apr 2008)</example>
|
|
651
|
+
<example service.version="0.998/WGC">rbldnsd 0.998/WGC (31 Dec 2015)</example>
|
|
652
|
+
<param pos="0" name="service.vendor" value="Michael Tokarev"/>
|
|
653
|
+
<param pos="0" name="service.family" value="rbldnsd"/>
|
|
654
|
+
<param pos="0" name="service.product" value="rbldnsd"/>
|
|
655
|
+
<param pos="1" name="service.version"/>
|
|
656
|
+
</fingerprint>
|
|
657
|
+
<fingerprint pattern="^ALU DNS ([\d\.]+) Build (\d+)$">
|
|
658
|
+
<description>ALU (Alcatel Lucent?) DNS</description>
|
|
659
|
+
<example service.version="6.2">ALU DNS 6.2 Build 22</example>
|
|
660
|
+
<example service.version.version="9">ALU DNS 6.2 Build 9</example>
|
|
661
|
+
<param pos="0" name="service.vendor" value="ALU"/>
|
|
662
|
+
<param pos="0" name="service.family" value="DNS"/>
|
|
663
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
664
|
+
<param pos="1" name="service.version"/>
|
|
665
|
+
<param pos="2" name="service.version.version"/>
|
|
666
|
+
</fingerprint>
|
|
667
|
+
<fingerprint pattern="^DraytekDNS-v([\d\.]+)$">
|
|
668
|
+
<description>DrayTek DNS</description>
|
|
669
|
+
<example service.version="1.2.3006">DraytekDNS-v1.2.3006</example>
|
|
670
|
+
<param pos="0" name="service.vendor" value="DrayTek"/>
|
|
671
|
+
<param pos="0" name="service.family" value="DNS"/>
|
|
672
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
673
|
+
<param pos="1" name="service.version"/>
|
|
674
|
+
<param pos="0" name="hw.vendor" value="DrayTek"/>
|
|
675
|
+
</fingerprint>
|
|
676
|
+
<fingerprint pattern="^Atlas Anchor ([\d\.]+)$">
|
|
677
|
+
<description>Ripe ATLAS Anchor</description>
|
|
678
|
+
<!-- https://atlas.ripe.net/docs/anchors/ -->
|
|
679
|
+
<example service.version="0.1">Atlas Anchor 0.1</example>
|
|
680
|
+
<param pos="0" name="service.vendor" value="RIPE"/>
|
|
681
|
+
<param pos="0" name="service.family" value="Atlas Anchor"/>
|
|
682
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
683
|
+
<param pos="1" name="service.version"/>
|
|
684
|
+
</fingerprint>
|
|
685
|
+
<fingerprint pattern="^ZyWALL DNS$">
|
|
686
|
+
<description>ZyWALL DNS</description>
|
|
687
|
+
<example>ZyWALL DNS</example>
|
|
688
|
+
<param pos="0" name="service.vendor" value="Zyxel"/>
|
|
689
|
+
<param pos="0" name="service.family" value="ZyWALL"/>
|
|
690
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
691
|
+
<param pos="0" name="hw.vendor" value="Zyxel"/>
|
|
692
|
+
</fingerprint>
|
|
693
|
+
<fingerprint pattern="^Array SmartDNS$">
|
|
694
|
+
<description>Array Networks SmartDNS</description>
|
|
695
|
+
<example>Array SmartDNS</example>
|
|
696
|
+
<param pos="0" name="service.vendor" value="Array Networks"/>
|
|
697
|
+
<param pos="0" name="service.family" value="APV"/>
|
|
698
|
+
<param pos="0" name="service.product" value="SmartDNS"/>
|
|
699
|
+
</fingerprint>
|
|
700
|
+
<fingerprint pattern="^gdnsd$">
|
|
701
|
+
<description>gdnsd</description>
|
|
702
|
+
<example>gdnsd</example>
|
|
703
|
+
<param pos="0" name="service.vendor" value="Brandon Black"/>
|
|
704
|
+
<param pos="0" name="service.family" value="gdnsd"/>
|
|
705
|
+
<param pos="0" name="service.product" value="gdnsd"/>
|
|
706
|
+
</fingerprint>
|
|
707
|
+
<fingerprint pattern="^Hi: [\w\.: =]+\d{4}$">
|
|
708
|
+
<description>OzymanDNS DNS tunnel</description>
|
|
709
|
+
<example>Hi: Thu Aug 17 23:29:10 2017</example>
|
|
710
|
+
<example>Hi: Lookup=VERSION.BIND Date=Thu Aug 17 23:53:10 UTC 2017</example>
|
|
711
|
+
<param pos="0" name="service.vendor" value="Dan Kaminsky"/>
|
|
712
|
+
<param pos="0" name="service.family" value="OzymanDNS"/>
|
|
713
|
+
<param pos="0" name="service.product" value="OzymanDNS"/>
|
|
714
|
+
</fingerprint>
|
|
715
|
+
<fingerprint pattern="^Meta IP[\s\/]DNS (?:V[\d\.]+ )?- BIND V([\d\.]+(?:-REL)?) \(Build (\d+)\s?\)$">
|
|
716
|
+
<description>Check Point Meta IP</description>
|
|
717
|
+
<example service.version="8.2.7-REL">Meta IP DNS - BIND V8.2.7-REL (Build 31)</example>
|
|
718
|
+
<example service.version.version="4704">Meta IP/DNS V4.1 - BIND V8.1.2 (Build 4704 )</example>
|
|
719
|
+
<param pos="0" name="service.vendor" value="Check Point"/>
|
|
720
|
+
<param pos="0" name="service.family" value="META IP"/>
|
|
721
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
722
|
+
<param pos="1" name="service.version"/>
|
|
723
|
+
<param pos="2" name="service.version.version"/>
|
|
724
|
+
</fingerprint>
|
|
725
|
+
<fingerprint pattern="^CleanBrowsing v([^ ]+) - (.*)">
|
|
726
|
+
<description>CleanBrowsing DNS Server</description>
|
|
727
|
+
<example service.vendor="CleanBrowsing" service.family="CleanBrowsing" service.version="1.5a" service.node="dns-edge-usa-west-sunnyvale-p">CleanBrowsing v1.5a - dns-edge-usa-west-sunnyvale-p</example>
|
|
728
|
+
<example service.vendor="CleanBrowsing" service.family="CleanBrowsing" service.version="1.4a" service.node="dns-edge-usa-west-sunnyvale.cleanbrowsing.org">CleanBrowsing v1.4a - dns-edge-usa-west-sunnyvale.cleanbrowsing.org</example>
|
|
729
|
+
<param pos="0" name="service.vendor" value="CleanBrowsing"/>
|
|
730
|
+
<param pos="0" name="service.family" value="CleanBrowsing"/>
|
|
731
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
732
|
+
<param pos="1" name="service.version"/>
|
|
733
|
+
<param pos="2" name="service.node"/>
|
|
734
|
+
</fingerprint>
|
|
735
|
+
<fingerprint pattern="^dnsmasq-pi-hole-(.*)$">
|
|
736
|
+
<description>dnsmasq: pi-hole</description>
|
|
737
|
+
<example os.vendor="Pi-hole" service.vendor="Thekelleys" service.family="Dnsmasq" service.product="Dnsmasq" os.version="2.80" os.cpe23="cpe:/a:pi-hole:pi-hole:2.80" service.cpe23="cpe:/a:thekelleys:dnsmasq:-">dnsmasq-pi-hole-2.80</example>
|
|
738
|
+
<param pos="0" name="os.vendor" value="Pi-hole"/>
|
|
739
|
+
<param pos="0" name="service.vendor" value="Thekelleys"/>
|
|
740
|
+
<param pos="0" name="service.family" value="Dnsmasq"/>
|
|
741
|
+
<param pos="0" name="service.product" value="Dnsmasq"/>
|
|
742
|
+
<param pos="1" name="os.version"/>
|
|
743
|
+
<param pos="0" name="os.cpe23" value="cpe:/a:pi-hole:pi-hole:{os.version}"/>
|
|
744
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:thekelleys:dnsmasq:-"/>
|
|
745
|
+
</fingerprint>
|
|
746
|
+
<fingerprint pattern="^Q9-[^\-]-(.*)$">
|
|
747
|
+
<description>Quad9 Resolver</description>
|
|
748
|
+
<example service.vendor="IBM" service.family="Quad9" service.product="DNS" service.version="6.0">Q9-P-6.0</example>
|
|
749
|
+
<param pos="0" name="service.vendor" value="IBM"/>
|
|
750
|
+
<param pos="0" name="service.family" value="Quad9"/>
|
|
751
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
752
|
+
<param pos="1" name="service.version"/>
|
|
753
|
+
</fingerprint>
|
|
754
|
+
<fingerprint pattern="^keweonDNS v\.(.*)$">
|
|
755
|
+
<description>Keweon DNS</description>
|
|
756
|
+
<example service.vendor="Keweon" service.product="DNS" service.version="9.63.7201">keweonDNS v.9.63.7201</example>
|
|
757
|
+
<param pos="0" name="service.vendor" value="Keweon"/>
|
|
758
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
759
|
+
<param pos="1" name="service.version"/>
|
|
760
|
+
</fingerprint>
|
|
761
|
+
</fingerprints>
|