recog-intrigue 2.3.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (130) hide show
  1. checksums.yaml +7 -0
  2. data/.github/ISSUE_TEMPLATE/bug_report.md +37 -0
  3. data/.github/ISSUE_TEMPLATE/feature_request.md +17 -0
  4. data/.github/ISSUE_TEMPLATE/fingerprint_request.md +27 -0
  5. data/.github/PULL_REQUEST_TEMPLATE +24 -0
  6. data/.gitignore +14 -0
  7. data/.rbenv-gemset +1 -0
  8. data/.rspec +3 -0
  9. data/.ruby-gemset +1 -0
  10. data/.ruby-version +1 -0
  11. data/.travis.yml +25 -0
  12. data/.yardopts +1 -0
  13. data/CONTRIBUTING.md +171 -0
  14. data/COPYING +23 -0
  15. data/Gemfile +10 -0
  16. data/LICENSE +7 -0
  17. data/README.md +85 -0
  18. data/Rakefile +22 -0
  19. data/bin/recog_export +81 -0
  20. data/bin/recog_match +55 -0
  21. data/bin/recog_standardize +118 -0
  22. data/bin/recog_verify +64 -0
  23. data/cpe-remap.yaml +134 -0
  24. data/features/data/failing_banners_fingerprints.xml +20 -0
  25. data/features/data/matching_banners_fingerprints.xml +23 -0
  26. data/features/data/multiple_banners_fingerprints.xml +32 -0
  27. data/features/data/no_tests.xml +3 -0
  28. data/features/data/sample_banner.txt +2 -0
  29. data/features/data/successful_tests.xml +18 -0
  30. data/features/data/tests_with_failures.xml +20 -0
  31. data/features/data/tests_with_warnings.xml +17 -0
  32. data/features/match.feature +36 -0
  33. data/features/support/aruba.rb +3 -0
  34. data/features/support/env.rb +6 -0
  35. data/features/verify.feature +48 -0
  36. data/identifiers/README.md +47 -0
  37. data/identifiers/os_architecture.txt +20 -0
  38. data/identifiers/os_device.txt +52 -0
  39. data/identifiers/os_family.txt +160 -0
  40. data/identifiers/os_product.txt +199 -0
  41. data/identifiers/service_family.txt +185 -0
  42. data/identifiers/service_product.txt +255 -0
  43. data/identifiers/software_class.txt +26 -0
  44. data/identifiers/software_family.txt +91 -0
  45. data/identifiers/software_product.txt +333 -0
  46. data/identifiers/vendor.txt +405 -0
  47. data/lib/recog.rb +4 -0
  48. data/lib/recog/db.rb +78 -0
  49. data/lib/recog/db_manager.rb +31 -0
  50. data/lib/recog/fingerprint.rb +280 -0
  51. data/lib/recog/fingerprint/regexp_factory.rb +56 -0
  52. data/lib/recog/fingerprint/test.rb +18 -0
  53. data/lib/recog/formatter.rb +51 -0
  54. data/lib/recog/match_reporter.rb +77 -0
  55. data/lib/recog/matcher.rb +94 -0
  56. data/lib/recog/matcher_factory.rb +14 -0
  57. data/lib/recog/nizer.rb +347 -0
  58. data/lib/recog/verifier.rb +39 -0
  59. data/lib/recog/verifier_factory.rb +13 -0
  60. data/lib/recog/verify_reporter.rb +86 -0
  61. data/lib/recog/version.rb +3 -0
  62. data/misc/convert_mysql_err +61 -0
  63. data/misc/order.xsl +17 -0
  64. data/recog-intrigue.gemspec +45 -0
  65. data/requirements.txt +2 -0
  66. data/spec/data/best_os_match_1.yml +17 -0
  67. data/spec/data/best_os_match_2.yml +17 -0
  68. data/spec/data/best_service_match_1.yml +17 -0
  69. data/spec/data/smb_native_os.txt +25 -0
  70. data/spec/data/test_fingerprints.xml +36 -0
  71. data/spec/data/verification_fingerprints.xml +86 -0
  72. data/spec/data/whitespaced_fingerprint.xml +5 -0
  73. data/spec/lib/fingerprint_self_test_spec.rb +174 -0
  74. data/spec/lib/recog/db_spec.rb +98 -0
  75. data/spec/lib/recog/fingerprint/regexp_factory_spec.rb +73 -0
  76. data/spec/lib/recog/fingerprint_spec.rb +112 -0
  77. data/spec/lib/recog/formatter_spec.rb +69 -0
  78. data/spec/lib/recog/match_reporter_spec.rb +91 -0
  79. data/spec/lib/recog/nizer_spec.rb +330 -0
  80. data/spec/lib/recog/verify_reporter_spec.rb +113 -0
  81. data/spec/spec_helper.rb +82 -0
  82. data/update_cpes.py +186 -0
  83. data/xml/apache_modules.xml +1911 -0
  84. data/xml/apache_os.xml +273 -0
  85. data/xml/architecture.xml +36 -0
  86. data/xml/dns_versionbind.xml +761 -0
  87. data/xml/fingerprints.xsd +128 -0
  88. data/xml/ftp_banners.xml +1553 -0
  89. data/xml/h323_callresp.xml +603 -0
  90. data/xml/hp_pjl_id.xml +358 -0
  91. data/xml/html_title.xml +1630 -0
  92. data/xml/http_cookies.xml +411 -0
  93. data/xml/http_servers.xml +3195 -0
  94. data/xml/http_wwwauth.xml +595 -0
  95. data/xml/imap_banners.xml +245 -0
  96. data/xml/ldap_searchresult.xml +711 -0
  97. data/xml/mdns_device-info_txt.xml +1796 -0
  98. data/xml/mdns_workstation_txt.xml +15 -0
  99. data/xml/mysql_banners.xml +1649 -0
  100. data/xml/mysql_error.xml +871 -0
  101. data/xml/nntp_banners.xml +82 -0
  102. data/xml/ntp_banners.xml +1223 -0
  103. data/xml/operating_system.xml +629 -0
  104. data/xml/pop_banners.xml +499 -0
  105. data/xml/rsh_resp.xml +76 -0
  106. data/xml/rtsp_servers.xml +76 -0
  107. data/xml/sip_banners.xml +359 -0
  108. data/xml/sip_user_agents.xml +221 -0
  109. data/xml/smb_native_lm.xml +62 -0
  110. data/xml/smb_native_os.xml +662 -0
  111. data/xml/smtp_banners.xml +1690 -0
  112. data/xml/smtp_debug.xml +39 -0
  113. data/xml/smtp_ehlo.xml +49 -0
  114. data/xml/smtp_expn.xml +82 -0
  115. data/xml/smtp_help.xml +157 -0
  116. data/xml/smtp_mailfrom.xml +20 -0
  117. data/xml/smtp_noop.xml +44 -0
  118. data/xml/smtp_quit.xml +29 -0
  119. data/xml/smtp_rcptto.xml +25 -0
  120. data/xml/smtp_rset.xml +26 -0
  121. data/xml/smtp_turn.xml +26 -0
  122. data/xml/smtp_vrfy.xml +89 -0
  123. data/xml/snmp_sysdescr.xml +6507 -0
  124. data/xml/snmp_sysobjid.xml +430 -0
  125. data/xml/ssh_banners.xml +1968 -0
  126. data/xml/telnet_banners.xml +1595 -0
  127. data/xml/x11_banners.xml +232 -0
  128. data/xml/x509_issuers.xml +134 -0
  129. data/xml/x509_subjects.xml +1268 -0
  130. metadata +304 -0
data/xml/http_cookies.xml ADDED
@@ -0,0 +1,411 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <fingerprints matches="http_header.cookie" protocol="http" database_type="service">
3
+ <!--
4
+ Set-Cookie HTTP header values are matched against these patterns to fingerprint HTTP
5
+ servers.
6
+ -->
7
+ <fingerprint pattern="^(CFCLIENT_[^=]+|CFGLOBALS|CFID|CFTOKEN)=.*">
8
+ <description>Adobe (Macromedia) ColdFusion uses various cookies</description>
9
+ <param pos="1" name="cookie"/>
10
+ <param pos="0" name="service.vendor" value="Adobe"/>
11
+ <param pos="0" name="service.family" value="ColdFusion"/>
12
+ <param pos="0" name="service.product" value="ColdFusion"/>
13
+ <param pos="0" name="service.cpe23" value="cpe:/a:adobe:coldfusion:-"/>
14
+ </fingerprint>
15
+ <fingerprint pattern="^ANsession\d+=(\S+);.*">
16
+ <description>Array Networks Secure Access Gateway / SSL VPN</description>
17
+ <example>ANsession0002262072457555=IPMI; path=/;secure</example>
18
+ <param pos="1" name="cookie"/>
19
+ <param pos="0" name="service.vendor" value="Array Networks"/>
20
+ <param pos="0" name="service.family" value="Secure Access Gateway"/>
21
+ <param pos="0" name="hw.device" value="VPN"/>
22
+ </fingerprint>
23
+ <fingerprint pattern="^(Apache)=[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.([0-9]+);.*">
24
+ <description>Apache</description>
25
+ <param pos="1" name="cookie"/>
26
+ <param pos="2" name="system.time.micros"/>
27
+ <param pos="0" name="service.vendor" value="Apache"/>
28
+ <param pos="0" name="service.family" value="Apache"/>
29
+ <param pos="0" name="service.product" value="HTTPD"/>
30
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
31
+ </fingerprint>
32
+ <fingerprint pattern="^(JServSessionIdroot)=.*">
33
+ <description>Apache JServ</description>
34
+ <param pos="1" name="cookie"/>
35
+ <param pos="0" name="service.vendor" value="Apache"/>
36
+ <param pos="0" name="service.family" value="JServ"/>
37
+ <param pos="0" name="service.product" value="JServ"/>
38
+ </fingerprint>
39
+ <fingerprint pattern="^(ATG_SESSION_ID|DYN_USER_CONFIRM|DYN_USER_ID)=.*">
40
+ <description>ATG Dynamo</description>
41
+ <param pos="1" name="cookie"/>
42
+ <param pos="0" name="service.vendor" value="ATG"/>
43
+ <param pos="0" name="service.family" value="Dynamo"/>
44
+ <param pos="0" name="service.product" value="Dynamo"/>
45
+ </fingerprint>
46
+ <fingerprint pattern="^(WebLogicSession)=[^!]+![^!]+!([0-9]+);.*">
47
+ <description>BEA WebLogic (with timestamp)</description>
48
+ <param pos="1" name="cookie"/>
49
+ <param pos="2" name="system.time.millis"/>
50
+ <param pos="0" name="service.vendor" value="BEA"/>
51
+ <param pos="0" name="service.family" value="WebLogic"/>
52
+ <param pos="0" name="service.product" value="WebLogic"/>
53
+ <param pos="0" name="service.cpe23" value="cpe:/a:bea:weblogic_server:-"/>
54
+ </fingerprint>
55
+ <fingerprint pattern="^(WebLogicSession)=.*">
56
+ <description>BEA WebLogic (no timestamp)</description>
57
+ <param pos="1" name="cookie"/>
58
+ <param pos="0" name="service.vendor" value="BEA"/>
59
+ <param pos="0" name="service.family" value="WebLogic"/>
60
+ <param pos="0" name="service.product" value="WebLogic"/>
61
+ <param pos="0" name="service.cpe23" value="cpe:/a:bea:weblogic_server:-"/>
62
+ </fingerprint>
63
+ <fingerprint pattern="^(BCSI-CSC[0-9A-Za-z]+)=.*">
64
+ <description>BlueCoat Proxy</description>
65
+ <param pos="1" name="cookie"/>
66
+ <param pos="0" name="service.vendor" value="Blue Coat"/>
67
+ <param pos="0" name="service.family" value="Proxy"/>
68
+ <param pos="0" name="service.product" value="Proxy"/>
69
+ </fingerprint>
70
+ <fingerprint pattern="^(CAKEPHP)=.*">
71
+ <description>CakePHP - http://www.cakephp.org/</description>
72
+ <param pos="1" name="cookie"/>
73
+ <param pos="0" name="service.family" value="PHP"/>
74
+ <param pos="0" name="service.product" value="CakePHP"/>
75
+ </fingerprint>
76
+ <!--
77
+ For the following two Cisco Content Service Switch fingerprints:
78
+ The cookie value breaks down to [box-id][service-id][timeout-value]
79
+ unfortunately, there's no separator so it's hard to tell what the
80
+ actual break is between the pieces of data.
81
+
82
+ http://www.cisco.com/warp/public/117/AP_cookies.html
83
+ -->
84
+ <fingerprint pattern="^(ARPT)=([A-Z]+)([0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3})[A-Z]+.*">
85
+ <description>Cisco 11000 Series Content Service Switch (CSS)</description>
86
+ <param pos="1" name="cookie"/>
87
+ <param pos="2" name="host.id"/>
88
+ <param pos="3" name="host.ip"/>
89
+ <param pos="0" name="service.vendor" value="Cisco"/>
90
+ <param pos="0" name="service.family" value="Content Service Switch"/>
91
+ <param pos="0" name="service.product" value="11000 Series Content Service Switch"/>
92
+ </fingerprint>
93
+ <fingerprint pattern="^(ARPT)=.*">
94
+ <description>Cisco 11000 Series Content Service Switch (CSS) - catch all variant</description>
95
+ <param pos="1" name="cookie"/>
96
+ <param pos="0" name="service.vendor" value="Cisco"/>
97
+ <param pos="0" name="service.family" value="Content Service Switch"/>
98
+ <param pos="0" name="service.product" value="11000 Series Content Service Switch"/>
99
+ </fingerprint>
100
+ <fingerprint pattern="^webvpn(?:c|context|_portal|Lang|login|SharePoint)?=">
101
+ <description>Cisco ASA VPN</description>
102
+ <example>webvpn=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; secure</example>
103
+ <example>webvpnc=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; secure</example>
104
+ <example>webvpn_portal=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; secure</example>
105
+ <example>webvpnSharePoint=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; secure</example>
106
+ <example>webvpnlogin=1; path=/; secure</example>
107
+ <example>webvpncontext=00@sslvpn</example>
108
+ <param pos="0" name="service.vendor" value="Cisco"/>
109
+ <param pos="0" name="service.product" value="HTTP"/>
110
+ <param pos="0" name="os.vendor" value="Cisco"/>
111
+ <param pos="0" name="os.family" value="Adaptive Security Appliance"/>
112
+ <param pos="0" name="os.product" value="Adaptive Security Appliance"/>
113
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:adaptive_security_appliance"/>
114
+ <param pos="0" name="hw.vendor" value="Cisco"/>
115
+ <param pos="0" name="hw.family" value="Adaptive Security Appliance"/>
116
+ <param pos="0" name="hw.product" value="Adaptive Security Appliance"/>
117
+ <param pos="0" name="hw.device" value="Firewall"/>
118
+ <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:adaptive_security_appliance:-"/>
119
+ </fingerprint>
120
+ <fingerprint pattern="^(st8id)=.*">
121
+ <description>Citrix Application Protection System, Enterprise - http://support.citrix.com/article/CTX109330</description>
122
+ <param pos="1" name="cookie"/>
123
+ <param pos="0" name="service.vendor" value="Citrix"/>
124
+ <param pos="0" name="service.family" value="Application Protection System"/>
125
+ <param pos="0" name="service.product" value="Application Protection System, Enterprise"/>
126
+ </fingerprint>
127
+ <fingerprint pattern="^NSC_(?:AAAC|CERT|DLGE|EPAC|TASS|TEMP|TMA[APS]|PERS)=.*">
128
+ <description>Citrix NetScaler</description>
129
+ <example>NSC_AAAC=xyz;</example>
130
+ <param pos="0" name="os.vendor" value="Citrix"/>
131
+ <param pos="0" name="os.family" value="NetScaler"/>
132
+ <param pos="0" name="os.device" value="Network Management Device"/>
133
+ <param pos="0" name="os.product" value="NetScaler"/>
134
+ </fingerprint>
135
+ <fingerprint pattern="^DSSignInURL=/">
136
+ <description>Pulse Secure VPN</description>
137
+ <example>DSSignInURL=/; path=/; secure</example>
138
+ <param pos="0" name="os.vendor" value="Pulse Secure"/>
139
+ <param pos="0" name="os.family" value="SSL VPN"/>
140
+ <param pos="0" name="os.device" value="SSL VPN"/>
141
+ <param pos="0" name="os.product" value="SSL VPN"/>
142
+ </fingerprint>
143
+ <fingerprint pattern="^(EktGUID|ecm)=.*">
144
+ <description>Ektron CMS400.net</description>
145
+ <param pos="1" name="cookie"/>
146
+ <param pos="0" name="service.vendor" value="Ektron"/>
147
+ <param pos="0" name="service.family" value="CMS400.NET"/>
148
+ <param pos="0" name="service.product" value="CMS400.NET"/>
149
+ </fingerprint>
150
+ <fingerprint pattern="^(BIGipServer([^=]+))=.*">
151
+ <description>F5 BIG-IP LTM - Server variant</description>
152
+ <param pos="1" name="cookie"/>
153
+ <param pos="2" name="loadbalancer.poolname"/>
154
+ <param pos="0" name="service.vendor" value="F5"/>
155
+ <param pos="0" name="service.family" value="BIG-IP"/>
156
+ <param pos="0" name="service.product" value="BIG-IP LTM"/>
157
+ <param pos="0" name="service.cpe23" value="cpe:/a:f5:big-ip_local_traffic_manager:-"/>
158
+ </fingerprint>
159
+ <fingerprint pattern="^(BigIPCookie)=.*">
160
+ <description>F5 BIG-IP LTM</description>
161
+ <param pos="1" name="cookie"/>
162
+ <param pos="0" name="service.vendor" value="F5"/>
163
+ <param pos="0" name="service.family" value="BIG-IP"/>
164
+ <param pos="0" name="service.product" value="BIG-IP LTM"/>
165
+ <param pos="0" name="service.cpe23" value="cpe:/a:f5:big-ip_local_traffic_manager:-"/>
166
+ </fingerprint>
167
+ <fingerprint pattern="^(SERVERID)=([A-Za-z0-9\-_]+)">
168
+ <description>HAProxy - http://haproxy.1wt.eu/download/1.2/doc/architecture.txt</description>
169
+ <param pos="1" name="cookie"/>
170
+ <param pos="2" name="host.name"/>
171
+ <param pos="0" name="service.family" value="HAProxy"/>
172
+ <param pos="0" name="service.product" value="HAProxy"/>
173
+ </fingerprint>
174
+ <fingerprint pattern="^(AMWEBJCT!([^!]+)!([^=]+))=.*">
175
+ <description>IBM Tivoli Access Manager for e-business WebSEAL
176
+ http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/index.jsp?topic=/com.ibm.itame.doc/am60_webseal_admin180.htm
177
+ </description>
178
+ <param pos="1" name="cookie"/>
179
+ <param pos="2" name="junction.name"/>
180
+ <param pos="3" name="junction.cookie"/>
181
+ <param pos="0" name="service.vendor" value="IBM"/>
182
+ <param pos="0" name="service.family" value="Tivoli"/>
183
+ <param pos="0" name="service.product" value="Tivoli Access Manager for e-business WebSEAL"/>
184
+ </fingerprint>
185
+ <fingerprint pattern="^(PD-S-SESSION-ID|PD-H-SESSION-ID|PD_STATEFUL_[^=]+)=.*">
186
+ <description>IBM Tivoli Access Manager for e-business WebSeal
187
+ http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/index.jsp?topic=/com.ibm.itame.doc/am60_webseal_admin117.htm
188
+ </description>
189
+ <param pos="1" name="cookie"/>
190
+ <param pos="0" name="service.vendor" value="IBM"/>
191
+ <param pos="0" name="service.family" value="Tivoli"/>
192
+ <param pos="0" name="service.product" value="Tivoli Access Manager for e-business WebSEAL"/>
193
+ </fingerprint>
194
+ <fingerprint pattern="^(IBMCBR)=.*">
195
+ <description>IBM WebSphere Load Balancer</description>
196
+ <param pos="1" name="cookie"/>
197
+ <param pos="0" name="service.vendor" value="IBM"/>
198
+ <param pos="0" name="service.family" value="WebSphere"/>
199
+ <param pos="0" name="service.product" value="WebSphere Load Balancer"/>
200
+ </fingerprint>
201
+ <fingerprint pattern="^(mbfcookie(?:\[lang\])?)=.*">
202
+ <description>Joom!Fish http://www.joomfish.net/</description>
203
+ <param pos="1" name="cookie"/>
204
+ <param pos="0" name="service.family" value="Joom!Fish"/>
205
+ <param pos="0" name="service.product" value="Joom!Fish"/>
206
+ </fingerprint>
207
+ <fingerprint pattern="^(MSCSAuth|MSCSProfile)=.*">
208
+ <description>Microsoft Commerce Server - http://msdn2.microsoft.com/en-us/library/ms953828.aspx</description>
209
+ <param pos="1" name="cookie"/>
210
+ <param pos="0" name="service.vendor" value="Microsoft"/>
211
+ <param pos="0" name="service.family" value="Commerce Server"/>
212
+ <param pos="0" name="service.product" value="Commerce Server"/>
213
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:commerce_server:-"/>
214
+ </fingerprint>
215
+ <fingerprint pattern="^(ASPSESSIONID[A-Z]+|ASP\.NET_SessionId|\.ASPXANONYMOUS)=.*">
216
+ <description>Microsoft IIS (ASP.NET)
217
+ http://msdn2.microsoft.com/en-us/library/ms953828.aspx
218
+ http://msdn2.microsoft.com/en-us/library/91ka2e6a.aspx
219
+ </description>
220
+ <param pos="1" name="cookie"/>
221
+ <param pos="0" name="service.vendor" value="Microsoft"/>
222
+ <param pos="0" name="service.family" value="IIS"/>
223
+ <param pos="0" name="service.product" value="IIS"/>
224
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:-"/>
225
+ <param pos="0" name="service.component.vendor" value="Microsoft"/>
226
+ <param pos="0" name="service.component.family" value="ASP.NET"/>
227
+ <param pos="0" name="service.component.product" value="ASP.NET"/>
228
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:microsoft:asp.net:-"/>
229
+ </fingerprint>
230
+ <fingerprint pattern="^(AlteonP)=.*">
231
+ <description>Nortel Alteon Web Switch</description>
232
+ <param pos="1" name="cookie"/>
233
+ <param pos="0" name="service.vendor" value="Nortel"/>
234
+ <param pos="0" name="service.family" value="Alteon"/>
235
+ <param pos="0" name="service.product" value="Alteon Web Switch"/>
236
+ </fingerprint>
237
+ <fingerprint pattern="^((?:SS_X_)?CSINTERSESSIONID)=.*">
238
+ <description>OpenMarket/FatWire Content Server (www.fatwire.com)</description>
239
+ <param pos="1" name="cookie"/>
240
+ <param pos="0" name="service.vendor" value="FatWire"/>
241
+ <param pos="0" name="service.family" value="Content Server"/>
242
+ <param pos="0" name="service.product" value="Content Server"/>
243
+ </fingerprint>
244
+ <fingerprint pattern="^(parkinglot)=.*">
245
+ <description>Oversee Webserver</description>
246
+ <param pos="1" name="cookie"/>
247
+ <param pos="0" name="service.vendor" value="Oversee"/>
248
+ <param pos="0" name="service.family" value="Webserver"/>
249
+ <param pos="0" name="service.product" value="Webserver"/>
250
+ </fingerprint>
251
+ <fingerprint pattern="^(PHPSESSID|PHPSESSION)=.*">
252
+ <description>PHP - http://www.php.net/ref.session</description>
253
+ <param pos="1" name="cookie"/>
254
+ <param pos="0" name="service.vendor" value="PHP"/>
255
+ <param pos="0" name="service.family" value="PHP"/>
256
+ <param pos="0" name="service.product" value="PHP"/>
257
+ <param pos="0" name="service.cpe23" value="cpe:/a:php:php:-"/>
258
+ </fingerprint>
259
+ <fingerprint pattern="^(RMID)=.*">
260
+ <description>RealMedia OpenAdStream</description>
261
+ <param pos="1" name="cookie"/>
262
+ <param pos="0" name="service.vendor" value="RealMedia"/>
263
+ <param pos="0" name="service.family" value="OpenAdStream"/>
264
+ <param pos="0" name="service.product" value="OpenAdStream"/>
265
+ </fingerprint>
266
+ <fingerprint pattern="^(RoxenUserID)=.*">
267
+ <description>Roxen WebServer</description>
268
+ <param pos="1" name="cookie"/>
269
+ <param pos="0" name="service.vendor" value="Roxen"/>
270
+ <param pos="0" name="service.family" value="WebServer"/>
271
+ <param pos="0" name="service.product" value="WebServer"/>
272
+ </fingerprint>
273
+ <fingerprint pattern="^(_sn)=.*">
274
+ <description>Siebel CRM</description>
275
+ <param pos="1" name="cookie"/>
276
+ <param pos="0" name="service.vendor" value="Siebel"/>
277
+ <param pos="0" name="service.family" value="CRM"/>
278
+ <param pos="0" name="service.product" value="CRM"/>
279
+ </fingerprint>
280
+ <!-- This fingerprint is not specific enough. Multiple products are sold under
281
+ the brand iPlanet/Sun ONE/Sun Java.
282
+ <fingerprint pattern="^(iPlanetUserId)=.*">
283
+ <description>Sun iPlanet</description>
284
+ <param pos="1" name="cookie"/>
285
+ <param pos="0" name="service.vendor" value="Sun"/>
286
+ <param pos="0" name="service.family" value="???"/>
287
+ <param pos="0" name="service.product" value="???"/>
288
+ </fingerprint>
289
+ -->
290
+ <fingerprint pattern="^(NSES40Session)=.*">
291
+ <description>Netscape Enterprise Server (subsequently iPlanet Web Server, Sun ONE Web Server, presently Sun Java System Web Server)</description>
292
+ <param pos="1" name="cookie"/>
293
+ <param pos="0" name="service.vendor" value="Sun"/>
294
+ <param pos="0" name="service.family" value="Java System Web Server"/>
295
+ <param pos="0" name="service.product" value="Java System Web Server"/>
296
+ <param pos="0" name="service.version" value="4.0"/>
297
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_web_server:4.0"/>
298
+ </fingerprint>
299
+ <fingerprint pattern="^(gx_session_id|JROUTE)=.*">
300
+ <description>Sun Java System Application Server (formerly iPlanet Application Server, Sun ONE Application Server)</description>
301
+ <param pos="1" name="cookie"/>
302
+ <param pos="0" name="service.vendor" value="Sun"/>
303
+ <param pos="0" name="service.family" value="Java System Application Server"/>
304
+ <param pos="0" name="service.product" value="Java System Application Server"/>
305
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_application_server:-"/>
306
+ </fingerprint>
307
+ <fingerprint pattern="^(fe_typo_user)=.*">
308
+ <description>TYPO3 CMS - http://typo3.com/</description>
309
+ <param pos="1" name="cookie"/>
310
+ <param pos="0" name="service.vendor" value="TYPO3"/>
311
+ <param pos="0" name="service.family" value="CMS"/>
312
+ <param pos="0" name="service.product" value="CMS"/>
313
+ </fingerprint>
314
+ <fingerprint pattern="^(SaneID)=.*">
315
+ <description>Unica NetTracker - http://netinsight.unica.com/Products/NetTracker.cfm</description>
316
+ <param pos="1" name="cookie"/>
317
+ <param pos="0" name="service.vendor" value="Unica"/>
318
+ <param pos="0" name="service.family" value="NetTracker"/>
319
+ <param pos="0" name="service.product" value="NetTracker"/>
320
+ </fingerprint>
321
+ <fingerprint pattern="^(__utm[a-z])=.*">
322
+ <description>Urchin Tracking Module - http://www.google.com/support/urchin45/bin/answer.py?answer=28307&amp;topic=7425</description>
323
+ <param pos="1" name="cookie"/>
324
+ <param pos="0" name="service.vendor" value="Google"/>
325
+ <param pos="0" name="service.family" value="Urchin"/>
326
+ <param pos="0" name="service.product" value="Urchin Tracking Module"/>
327
+ </fingerprint>
328
+ <fingerprint pattern="^(vgncontext|vgnvisitor|ssuid)=.*">
329
+ <description>Vignette</description>
330
+ <param pos="1" name="cookie"/>
331
+ <param pos="0" name="service.vendor" value="Vignette"/>
332
+ <param pos="0" name="service.family" value="Vignette"/>
333
+ <param pos="0" name="service.product" value="Vignette"/>
334
+ </fingerprint>
335
+ <fingerprint pattern="^(wgSession)=.*">
336
+ <description>Plain Black WebGUI - http://www.plainblack.com/webgui</description>
337
+ <param pos="1" name="cookie"/>
338
+ <param pos="0" name="service.vendor" value="Plain Black"/>
339
+ <param pos="0" name="service.family" value="WebGUI"/>
340
+ <param pos="0" name="service.product" value="WebGUI"/>
341
+ </fingerprint>
342
+ <fingerprint pattern="^(WEBTRENDSID|WEBTRENDS_ID)=.*">
343
+ <description>WebTrends</description>
344
+ <param pos="1" name="cookie"/>
345
+ <param pos="0" name="service.vendor" value="WebTrends"/>
346
+ <param pos="0" name="service.family" value="WebTrends"/>
347
+ <param pos="0" name="service.product" value="WebTrends"/>
348
+ </fingerprint>
349
+ <fingerprint pattern="^(_ZopeId)=.*">
350
+ <description>Zope</description>
351
+ <param pos="1" name="cookie"/>
352
+ <param pos="0" name="service.family" value="Zope"/>
353
+ <param pos="0" name="service.product" value="Zope"/>
354
+ </fingerprint>
355
+ <fingerprint pattern="^(portal)=([0-9]+\.[0-9]+\.[0-9]+).*">
356
+ <description>OracleAS Portal default cookie name - http://download.oracle.com/docs/cd/B14099_19/portal.1014/b19305/cg_app_f.htm</description>
357
+ <param pos="1" name="cookie"/>
358
+ <param pos="2" name="service.version"/>
359
+ <param pos="0" name="service.vendor" value="Oracle"/>
360
+ <param pos="0" name="service.family" value="OracleAS"/>
361
+ <param pos="0" name="service.product" value="OracleAS Portal"/>
362
+ </fingerprint>
363
+ <fingerprint pattern="^Compaq-HMMD=[^;]+;.*$">
364
+ <description>HP System Management Homepage (SMH)</description>
365
+ <example>Compaq-HMMD=0001-c01fffff-487a-394a-aab0-ffffffffffff-ffffffffffffffff; path=/</example>
366
+ <example>Compaq-HMMD=0001-c01fffff-487a-394a-aab0-ffffffffffff-ffffffffffffffff; path=/; Secure</example>
367
+ <param pos="0" name="service.vendor" value="HP"/>
368
+ <param pos="0" name="service.family" value="SMH"/>
369
+ <param pos="0" name="service.product" value="SMH"/>
370
+ </fingerprint>
371
+ <fingerprint pattern="^MoodleSession=">
372
+ <description>Moodle</description>
373
+ <example>MoodleSession=uohhsgcain708q5l4gqcmmb5s2; path=/</example>
374
+ <param pos="0" name="service.component.vendor" value="Moodle"/>
375
+ <param pos="0" name="service.component.family" value="Moodle"/>
376
+ <param pos="0" name="service.component.product" value="Moodle"/>
377
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:moodle:moodle:-"/>
378
+ </fingerprint>
379
+ <fingerprint pattern="_arachni_webui_session=">
380
+ <description>Arachni Security Scanner</description>
381
+ <example>_arachni_webui_session=el2MMEVVcld3Q2dBc3UvSmtQYmlPckpxSE2CMmlwd1Nja2lvUk5tRG5XYTlnRHJuVVVTblVNMTBOdGhrUU02dzC0K1I0Mnk3d1I3SUlCcngwQkliV3Y5VDBnVVZkOWJsS0VGSlYwM1RGMlVzVDNKcXlrdFNQZ0lIM1VBN3RDZFIrZTBrdjZmdSt0YnV2djh1RFE0S1czUmZQcGxNNW9UWVQydXFCZmNHZDRmTlg4cWludE5SUDRYU2JwdWw4Qmk3dEpDV3ZBejRkbU9ueFJKNG1HenplUEJjem9LU09IM0Z6ZHM4YU00aVpKUHJRVzR3SG8rRzBjWG9jclpqZGd2dmp2TnVGbjkvb0lmanZvM3lPZGhXb3c9PS0tR0dXVWppWnorMG1NNjlXTkYvaEswUT09--44b846e66f558667d7503010a726e2388803136f; path=/; HttpOnly</example>
382
+ <param pos="0" name="service.vendor" value="Arachni"/>
383
+ <param pos="0" name="service.product" value="Arachni"/>
384
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:arachni:arachni:-"/>
385
+ </fingerprint>
386
+
387
+ <!--
388
+ Ignore various cookies that are very generic cookies for session IDs
389
+ that are not necessarily indicative of any particular
390
+ product/device/etc. If a future fingerprint comes along that utilizes
391
+ a similar cookie name, you must ensure that it is located prior to
392
+ these and this is enforced by rspec.
393
+ -->
394
+ <fingerprint pattern="(?i)^JSESSIONID(?:\.[^=]+)?=[^;]+;.*$">
395
+ <description>Ignore simple JSESSIONID and related cookies</description>
396
+ <example>JSESSIONID=6ooov35i4l3n36qtaf8csvg0;Path=/</example>
397
+ <example>jsessionid=6nkp66iogcdc92720%2Dc6e4%2D4989%2Db7b2%2D5021624cfdff;Path=/;secure</example>
398
+ <example>JSESSIONID.c00a9623=v216643eijh19p9duve5srgf;Path=/;HttpOnly</example>
399
+ </fingerprint>
400
+ <fingerprint pattern="(?i)^_?SESSION_?ID\s*=\s*[^;]+;.*$">
401
+ <description>Ignore simple SESSIONID and related cookies</description>
402
+ <example>sessionId=7dba3249cfcd4b59854055311099a294; path=/;</example>
403
+ <example>_session_id=7fe933db0fea13e9c872103ba2d142db; path=/; HttpOnly</example>
404
+ <example>sessionId =0VrS6Ro6uC5QPXKgNdqGvyUgUFtUOVwv6OWAEWcWQ3jLRtAk2TVAgAApN9yTWVz;postId=; path=/;</example>
405
+ <example>_session_id=18b3e173aa11db0533fd01752e81f583; path=/; HttpOnly</example>
406
+ </fingerprint>
407
+ <fingerprint pattern="(?i)^sid=[^;]+;.*$">
408
+ <description>Ignore simple SID and related cookies</description>
409
+ <example>sid=sfd10bf73-654458f687aa3c68b3874915f651e0ca;path=/;"</example>
410
+ </fingerprint>
411
+ </fingerprints>
data/xml/http_servers.xml ADDED
@@ -0,0 +1,3195 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <fingerprints matches="http_header.server" protocol="http" database_type="service" preference="0.90">
3
+ <!-- HTTP Server headers are matched against these patterns to fingerprint HTTP servers. -->
4
+ <fingerprint pattern="(?i)^AirTunes/([\d\.]+)$">
5
+ <description>Apple AirTunes/AirPlay, more generally RTSP used by a variety of wireless a/v products</description>
6
+ <example service.version="220.68">AirTunes/220.68</example>
7
+ <param pos="0" name="service.vendor" value="Apple"/>
8
+ <param pos="0" name="service.product" value="AirTunes"/>
9
+ <param pos="1" name="service.version"/>
10
+ <param pos="0" name="hw.device" value="Media Server"/>
11
+ </fingerprint>
12
+ <fingerprint pattern="(?i)^cpsrvd(?:/([\d\.]+))?$">
13
+ <description>cPanel Service Daemon</description>
14
+ <example service.version="11.44.3.0">cpsrvd/11.44.3.0</example>
15
+ <example>cpsrvd</example>
16
+ <param pos="0" name="service.vendor" value="cPanel"/>
17
+ <param pos="0" name="service.product" value="cPanel Service Daemon"/>
18
+ <param pos="1" name="service.version"/>
19
+ </fingerprint>
20
+ <fingerprint pattern="(?i)^cwpsrv$">
21
+ <description>CentOS Web Panel</description>
22
+ <example>cwpsrv</example>
23
+ <param pos="0" name="service.vendor" value="CentOS"/>
24
+ <param pos="0" name="service.product" value="CentOS Web Panel"/>
25
+ <param pos="0" name="os.vendor" value="CentOS"/>
26
+ <param pos="0" name="os.family" value="Linux"/>
27
+ <param pos="0" name="os.product" value="Linux"/>
28
+ <param pos="0" name="os.cpe23" value="cpe:/o:centos:centos:-"/>
29
+ </fingerprint>
30
+ <fingerprint pattern="^Stronghold/(\d\.\d) Apache/([012][\d.]*)\s*(.*)$">
31
+ <description>Red Hat Stronghold Enterprise Apache</description>
32
+ <example service.version="1.3.19" service.cpe23="cpe:/a:apache:http_server:1.3.19" service.component.cpe23="cpe:/a:redhat:stronghold:3.0">Stronghold/3.0 Apache/1.3.19 RedHat/3014c</example>
33
+ <example service.version="1.3.22" service.cpe23="cpe:/a:apache:http_server:1.3.22" service.component.cpe23="cpe:/a:redhat:stronghold:4.0" apache.info="(Unix) mod_ssl/2.8.7 OpenSSL/0.9.6c mod_perl/1.26">Stronghold/4.0 Apache/1.3.22 (Unix) mod_ssl/2.8.7 OpenSSL/0.9.6c mod_perl/1.26</example>
34
+ <param pos="0" name="service.vendor" value="Apache"/>
35
+ <param pos="0" name="service.product" value="HTTPD"/>
36
+ <param pos="0" name="service.family" value="Apache"/>
37
+ <param pos="2" name="service.version"/>
38
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:{service.version}"/>
39
+ <param pos="0" name="service.component.vendor" value="Red Hat"/>
40
+ <param pos="0" name="service.component.product" value="Stronghold"/>
41
+ <param pos="0" name="service.component.family" value="Stronghold"/>
42
+ <param pos="1" name="service.component.version"/>
43
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:redhat:stronghold:{service.component.version}"/>
44
+ <param pos="3" name="apache.info"/>
45
+ <param pos="0" name="os.vendor" value="Red Hat"/>
46
+ <param pos="0" name="os.product" value="Linux"/>
47
+ <param pos="0" name="os.family" value="Linux"/>
48
+ <param pos="0" name="os.cpe23" value="cpe:/o:redhat:linux:-"/>
49
+ </fingerprint>
50
+ <fingerprint pattern="(?i)^Apache/\d$">
51
+ <description>Apache returning only its major version number</description>
52
+ <example>Apache/1</example>
53
+ <example>Apache/2</example>
54
+ <param pos="0" name="service.vendor" value="Apache"/>
55
+ <param pos="0" name="service.product" value="HTTPD"/>
56
+ <param pos="0" name="service.family" value="Apache"/>
57
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
58
+ </fingerprint>
59
+ <fingerprint pattern="(?i)^Apache$">
60
+ <description>Apache returning no version information</description>
61
+ <example>Apache</example>
62
+ <example>apache</example>
63
+ <param pos="0" name="service.vendor" value="Apache"/>
64
+ <param pos="0" name="service.product" value="HTTPD"/>
65
+ <param pos="0" name="service.family" value="Apache"/>
66
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
67
+ </fingerprint>
68
+ <fingerprint pattern="(?i)^Apache(?:-AdvancedExtranetServer)?(?:/([012][\d.]*)\s*(.*))?$">
69
+ <description>Apache</description>
70
+ <example>Apache-AdvancedExtranetServer/2.0.44 (Mandrake Linux/11mdk) mod_perl/1.99_08 Perl/v5.8.0 mod_ssl/2.0.44 OpenSSL/0.9.7a PHP/4.3.1 mod_jk2/2.0.0</example>
71
+ <example>Apache-AdvancedExtranetServer/2.0.47 (Mandrake Linux/6.12.92mdk) mod_perl/1.99_09 Perl/v5.8.1 mod_ssl/2.0.47 OpenSSL/0.9.7b PHP/4.3.2</example>
72
+ <example>Apache-AdvancedExtranetServer/2.0.47 (Mandrake Linux/6.3.92mdk) mod_ssl/2.0.47 OpenSSL/0.9.7b PHP/4.3.2</example>
73
+ <example>Apache-AdvancedExtranetServer/2.0.48 (Mandrake Linux/6.8.100mdk) mod_perl/1.99_11 Perl/v5.8.3 mod_ssl/2.0.48 OpenSSL/0.9.7c PHP/4.3.4</example>
74
+ <example>Apache-AdvancedExtranetServer/2.0.48 (Mandrake Linux/6mdk) PHP/4.3.4</example>
75
+ <example>Apache-AdvancedExtranetServer/2.0.53 (Mandrakelinux/PREFORK-9mdk) mod_ssl/2.0.53 OpenSSL/0.9.7e PHP/4.3.10 mod_perl/1.999.21 Perl/v5.8.6</example>
76
+ <example>Apache/0.6.5</example>
77
+ <example>Apache/1.1.3</example>
78
+ <example>Apache/1.2.42 (PalmOS)</example>
79
+ <example>Apache/1.3.28 (SolutionIP) mod_perl/1.28 mod_ssl/2.8.15 OpenSSL/0.9.7b</example>
80
+ <example>Apache/1.3.28 (Unix)</example>
81
+ <example>Apache/1.3.28 (Unix) mod_auth_pam/1.1.1</example>
82
+ <example>Apache/2.2.3 (Red Hat)</example>
83
+ <example>Apache/2.2.4 (Win32) PHP/5.2.2</example>
84
+ <example>Apache/2.2.4 (Win32) PHP/5.2.3</example>
85
+ <example>APACHE/1.3.9</example>
86
+ <param pos="0" name="service.vendor" value="Apache"/>
87
+ <param pos="0" name="service.product" value="HTTPD"/>
88
+ <param pos="0" name="service.family" value="Apache"/>
89
+ <param pos="1" name="service.version"/>
90
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:{service.version}"/>
91
+ <param pos="2" name="apache.info"/>
92
+ </fingerprint>
93
+ <fingerprint pattern="(?i)^CouchDB/([\.\d]+) .*$">
94
+ <description>Apache CouchDB</description>
95
+ <example service.version="2.1.1">CouchDB/2.1.1 (Erlang OTP/20)</example>
96
+ <param pos="0" name="service.vendor" value="Apache"/>
97
+ <param pos="0" name="service.product" value="CouchDB"/>
98
+ <param pos="1" name="service.version"/>
99
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:couchdb:{service.version}"/>
100
+ </fingerprint>
101
+ <fingerprint pattern="^support@arraynetworks.net$">
102
+ <description>Array Networks device</description>
103
+ <example>support@arraynetworks.net</example>
104
+ <param pos="0" name="service.vendor" value="Array Networks"/>
105
+ </fingerprint>
106
+ <fingerprint pattern="^Check Point SVN foundation$">
107
+ <description>Check Point Firewall NG</description>
108
+ <example>Check Point SVN foundation</example>
109
+ <param pos="0" name="service.vendor" value="Check Point"/>
110
+ <param pos="0" name="service.product" value="Firewall-1"/>
111
+ <param pos="0" name="service.family" value="Firewall-1"/>
112
+ <param pos="0" name="service.cpe23" value="cpe:/a:checkpoint:firewall-1:-"/>
113
+ <param pos="0" name="os.vendor" value="Check Point"/>
114
+ <param pos="0" name="os.device" value="Firewall"/>
115
+ <param pos="0" name="os.family" value="Firewall-1"/>
116
+ <param pos="0" name="os.product" value="GAiA OS"/>
117
+ <param pos="0" name="os.cpe23" value="cpe:/o:checkpoint:gaia_os:-"/>
118
+ <param pos="0" name="hw.vendor" value="Check Point"/>
119
+ <param pos="0" name="hw.device" value="Firewall"/>
120
+ <param pos="0" name="hw.family" value="Firewall-1"/>
121
+ <param pos="0" name="hw.product" value="Firewall-1"/>
122
+ </fingerprint>
123
+ <fingerprint pattern="^Microsoft-IIS/([1234]\.0)$">
124
+ <description>Microsoft IIS 1.0 - 4.0 runs on Windows NT 4.0</description>
125
+ <example>Microsoft-IIS/4.0</example>
126
+ <param pos="0" name="service.vendor" value="Microsoft"/>
127
+ <param pos="0" name="service.product" value="IIS"/>
128
+ <param pos="0" name="service.family" value="IIS"/>
129
+ <param pos="1" name="service.version"/>
130
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
131
+ <param pos="0" name="os.vendor" value="Microsoft"/>
132
+ <param pos="0" name="os.family" value="Windows"/>
133
+ <param pos="0" name="os.product" value="Windows NT"/>
134
+ <param pos="0" name="os.version" value="4.0"/>
135
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_nt:4.0"/>
136
+ </fingerprint>
137
+ <fingerprint pattern="^Microsoft-IIS/5.0$">
138
+ <description>Microsoft IIS 5.0 runs on Windows 2000</description>
139
+ <example>Microsoft-IIS/5.0</example>
140
+ <param pos="0" name="service.vendor" value="Microsoft"/>
141
+ <param pos="0" name="service.product" value="IIS"/>
142
+ <param pos="0" name="service.family" value="IIS"/>
143
+ <param pos="0" name="service.version" value="5.0"/>
144
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:5.0"/>
145
+ <param pos="0" name="os.vendor" value="Microsoft"/>
146
+ <param pos="0" name="os.family" value="Windows"/>
147
+ <param pos="0" name="os.product" value="Windows 2000"/>
148
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_2000:-"/>
149
+ </fingerprint>
150
+ <fingerprint pattern="^Microsoft-IIS/5.1$">
151
+ <description>Microsoft IIS 5.1 runs on Windows XP</description>
152
+ <example>Microsoft-IIS/5.1</example>
153
+ <param pos="0" name="service.vendor" value="Microsoft"/>
154
+ <param pos="0" name="service.product" value="IIS"/>
155
+ <param pos="0" name="service.family" value="IIS"/>
156
+ <param pos="0" name="service.version" value="5.1"/>
157
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:5.1"/>
158
+ <param pos="0" name="os.vendor" value="Microsoft"/>
159
+ <param pos="0" name="os.family" value="Windows"/>
160
+ <param pos="0" name="os.product" value="Windows XP"/>
161
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_xp:-"/>
162
+ </fingerprint>
163
+ <fingerprint pattern="^Microsoft-IIS/6.0$">
164
+ <description>Microsoft IIS 6.0 runs on Windows Server 2003 (and Windows XP x64)</description>
165
+ <example>Microsoft-IIS/6.0</example>
166
+ <param pos="0" name="service.vendor" value="Microsoft"/>
167
+ <param pos="0" name="service.product" value="IIS"/>
168
+ <param pos="0" name="service.family" value="IIS"/>
169
+ <param pos="0" name="service.version" value="6.0"/>
170
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:6.0"/>
171
+ <param pos="0" name="os.vendor" value="Microsoft"/>
172
+ <param pos="0" name="os.family" value="Windows"/>
173
+ <param pos="0" name="os.product" value="Windows Server 2003"/>
174
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
175
+ </fingerprint>
176
+ <fingerprint pattern="^Microsoft-IIS/7.0$">
177
+ <description>Microsoft IIS 7.0 runs on Windows Server 2008 (and Windows Vista)</description>
178
+ <example>Microsoft-IIS/7.0</example>
179
+ <param pos="0" name="service.vendor" value="Microsoft"/>
180
+ <param pos="0" name="service.product" value="IIS"/>
181
+ <param pos="0" name="service.family" value="IIS"/>
182
+ <param pos="0" name="service.version" value="7.0"/>
183
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:7.0"/>
184
+ <param pos="0" name="os.vendor" value="Microsoft"/>
185
+ <param pos="0" name="os.family" value="Windows"/>
186
+ <param pos="0" name="os.product" value="Windows Server 2008"/>
187
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
188
+ </fingerprint>
189
+ <fingerprint pattern="^Microsoft-IIS/7.5$">
190
+ <description>Microsoft IIS 7.5 runs on Windows Server 2008 R2 (and Windows 7)</description>
191
+ <example>Microsoft-IIS/7.5</example>
192
+ <param pos="0" name="service.vendor" value="Microsoft"/>
193
+ <param pos="0" name="service.product" value="IIS"/>
194
+ <param pos="0" name="service.family" value="IIS"/>
195
+ <param pos="0" name="service.version" value="7.5"/>
196
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:7.5"/>
197
+ <param pos="0" name="os.vendor" value="Microsoft"/>
198
+ <param pos="0" name="os.family" value="Windows"/>
199
+ <param pos="0" name="os.product" value="Windows Server 2008 R2"/>
200
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
201
+ </fingerprint>
202
+ <fingerprint pattern="^Microsoft-IIS/8.0$">
203
+ <description>Microsoft IIS 8.0 runs on Windows Server 2012 (and Windows 8)</description>
204
+ <example>Microsoft-IIS/8.0</example>
205
+ <param pos="0" name="service.vendor" value="Microsoft"/>
206
+ <param pos="0" name="service.product" value="IIS"/>
207
+ <param pos="0" name="service.family" value="IIS"/>
208
+ <param pos="0" name="service.version" value="8.0"/>
209
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:8.0"/>
210
+ <param pos="0" name="os.vendor" value="Microsoft"/>
211
+ <param pos="0" name="os.family" value="Windows"/>
212
+ <param pos="0" name="os.product" value="Windows Server 2012"/>
213
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
214
+ </fingerprint>
215
+ <fingerprint pattern="^Microsoft-IIS/8.5$">
216
+ <description>Microsoft IIS 8.5 runs on Windows Server 2012 R2 (and Windows 8.1)</description>
217
+ <example>Microsoft-IIS/8.5</example>
218
+ <param pos="0" name="service.vendor" value="Microsoft"/>
219
+ <param pos="0" name="service.product" value="IIS"/>
220
+ <param pos="0" name="service.family" value="IIS"/>
221
+ <param pos="0" name="service.version" value="8.5"/>
222
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:8.5"/>
223
+ <param pos="0" name="os.vendor" value="Microsoft"/>
224
+ <param pos="0" name="os.family" value="Windows"/>
225
+ <param pos="0" name="os.product" value="Windows Server 2012 R2"/>
226
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
227
+ </fingerprint>
228
+ <fingerprint pattern="^Microsoft-IIS/10.0$">
229
+ <description>Microsoft IIS 10.0 runs on Windows Server 2016 and 2019</description>
230
+ <example>Microsoft-IIS/10.0</example>
231
+ <param pos="0" name="service.vendor" value="Microsoft"/>
232
+ <param pos="0" name="service.product" value="IIS"/>
233
+ <param pos="0" name="service.family" value="IIS"/>
234
+ <param pos="0" name="service.version" value="10.0"/>
235
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:10.0"/>
236
+ <param pos="0" name="os.vendor" value="Microsoft"/>
237
+ <param pos="0" name="os.family" value="Windows"/>
238
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
239
+ </fingerprint>
240
+ <fingerprint pattern="^Microsoft-IIS/([\d\.]+)$">
241
+ <description>Microsoft IIS new, unknown Windows version</description>
242
+ <example>Microsoft-IIS/9.0</example>
243
+ <param pos="0" name="service.vendor" value="Microsoft"/>
244
+ <param pos="0" name="service.product" value="IIS"/>
245
+ <param pos="0" name="service.family" value="IIS"/>
246
+ <param pos="1" name="service.version"/>
247
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
248
+ </fingerprint>
249
+ <fingerprint pattern="^Microsoft-IIS$">
250
+ <description>Microsoft IIS, no version information</description>
251
+ <example>Microsoft-IIS</example>
252
+ <param pos="0" name="service.vendor" value="Microsoft"/>
253
+ <param pos="0" name="service.product" value="IIS"/>
254
+ <param pos="0" name="service.family" value="IIS"/>
255
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:-"/>
256
+ <param pos="0" name="os.vendor" value="Microsoft"/>
257
+ <param pos="0" name="os.family" value="Windows"/>
258
+ </fingerprint>
259
+ <fingerprint pattern="^MS .NET Remoting, MS .NET CLR (\d+\.\d+\.\d+\.\d+)$">
260
+ <description>Microsoft .NET Remoting and Common Language Runtime (CLR)</description>
261
+ <example>MS .NET Remoting, MS .NET CLR 2.0.50727.42</example>
262
+ <param pos="0" name="service.vendor" value="Microsoft"/>
263
+ <param pos="0" name="service.product" value=".NET Remoting"/>
264
+ <param pos="0" name="service.family" value=".NET"/>
265
+ <param pos="0" name="service.component.vendor" value="Microsoft"/>
266
+ <param pos="0" name="service.component.product" value=".NET CLR"/>
267
+ <param pos="0" name="service.component.family" value=".NET"/>
268
+ <param pos="1" name="service.component.version"/>
269
+ <param pos="0" name="os.vendor" value="Microsoft"/>
270
+ <param pos="0" name="os.family" value="Windows"/>
271
+ <param pos="0" name="os.product" value="Windows"/>
272
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
273
+ </fingerprint>
274
+ <fingerprint pattern="^Microsoft-WinCE/(\d\.\d+)$">
275
+ <description>Windows CE embedded devices, including HP iPAQ, Palm Treo, Motorola phones, and many more</description>
276
+ <example os.version="4.10">Microsoft-WinCE/4.10</example>
277
+ <example>Microsoft-WinCE/4.20</example>
278
+ <example>Microsoft-WinCE/5.0</example>
279
+ <param pos="0" name="service.vendor" value="Microsoft"/>
280
+ <param pos="0" name="service.product" value="Windows CE Web Server"/>
281
+ <param pos="0" name="service.family" value="Windows CE Web Server"/>
282
+ <param pos="1" name="service.version"/>
283
+ <param pos="0" name="os.certainty" value="0.9"/>
284
+ <param pos="0" name="os.vendor" value="Microsoft"/>
285
+ <param pos="0" name="os.family" value="Windows"/>
286
+ <param pos="0" name="os.product" value="Windows CE"/>
287
+ <param pos="1" name="os.version"/>
288
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_ce:{os.version}"/>
289
+ </fingerprint>
290
+ <fingerprint pattern="^Microsoft-PWS/(\d\.\d+)$">
291
+ <description>Microsoft Personal Web Server runs on Windows 9x, ME, etc.</description>
292
+ <example>Microsoft-PWS/4.0</example>
293
+ <param pos="0" name="service.vendor" value="Microsoft"/>
294
+ <param pos="0" name="service.family" value="PWS"/>
295
+ <param pos="0" name="service.product" value="PWS"/>
296
+ <param pos="1" name="service.version"/>
297
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:personal_web_server:{service.version}"/>
298
+ <param pos="0" name="os.vendor" value="Microsoft"/>
299
+ <param pos="0" name="os.family" value="Windows"/>
300
+ <param pos="0" name="os.product" value="Windows"/>
301
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
302
+ </fingerprint>
303
+ <fingerprint pattern="^Microsoft-PWS-95/(\d\.\d+)$">
304
+ <description>Microsoft Personal Web Server for Windows 95</description>
305
+ <example>Microsoft-PWS-95/4.0</example>
306
+ <param pos="0" name="service.vendor" value="Microsoft"/>
307
+ <param pos="0" name="service.family" value="PWS"/>
308
+ <param pos="0" name="service.product" value="PWS"/>
309
+ <param pos="1" name="service.version"/>
310
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:personal_web_server:{service.version}"/>
311
+ <param pos="0" name="os.vendor" value="Microsoft"/>
312
+ <param pos="0" name="os.family" value="Windows"/>
313
+ <param pos="0" name="os.product" value="Windows 95"/>
314
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_95:-"/>
315
+ </fingerprint>
316
+ <fingerprint pattern="(?i)^mt-daapd(?:/(.+))?$">
317
+ <description>Firefly Media Server</description>
318
+ <example service.version="0.2.4.1">mt-daapd/0.2.4.1</example>
319
+ <example service.version="svn-999">mt-daapd/svn-999</example>
320
+ <param pos="0" name="service.vendor" value="Firefly"/>
321
+ <param pos="0" name="service.product" value="Media Server"/>
322
+ <param pos="1" name="service.version"/>
323
+ </fingerprint>
324
+ <fingerprint pattern="^Apache[ -]Coyote/(\d\.\d)$">
325
+ <description>HTTP connector for Apache Tomcat to run as a standalone HTTP server - Coyote variant</description>
326
+ <example>Apache-Coyote/1.1</example>
327
+ <example>Apache Coyote/1.0</example>
328
+ <param pos="0" name="service.vendor" value="Apache"/>
329
+ <param pos="0" name="service.product" value="Tomcat"/>
330
+ <param pos="0" name="service.family" value="Tomcat"/>
331
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:-"/>
332
+ <param pos="0" name="service.component.vendor" value="Apache"/>
333
+ <param pos="0" name="service.component.product" value="Coyote"/>
334
+ <param pos="0" name="service.component.family" value="Coyote"/>
335
+ <param pos="1" name="service.component.version"/>
336
+ </fingerprint>
337
+ <fingerprint pattern="^Apache Tomcat$">
338
+ <description>HTTP connector for Apache Tomcat with no version</description>
339
+ <example>Apache Tomcat</example>
340
+ <param pos="0" name="service.vendor" value="Apache"/>
341
+ <param pos="0" name="service.product" value="Tomcat"/>
342
+ <param pos="0" name="service.family" value="Tomcat"/>
343
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:-"/>
344
+ </fingerprint>
345
+ <fingerprint pattern="^Servlet [\d\.]+; JBoss-(\S+) \(build: .*\)/Tomcat-(\S+)$">
346
+ <description>JBoss with embedded Tomcat</description>
347
+ <example service.version="4.0.4.GA" service.component.version="5.5">Servlet 2.4; JBoss-4.0.4.GA (build: CVSTag=JBoss_4_0_4_GA date=200605151000)/Tomcat-5.5</example>
348
+ <param pos="0" name="service.vendor" value="Red Hat"/>
349
+ <param pos="0" name="service.product" value="JBoss EAP"/>
350
+ <param pos="1" name="service.version"/>
351
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:{service.version}"/>
352
+ <param pos="0" name="service.component.vendor" value="Apache"/>
353
+ <param pos="0" name="service.component.product" value="Tomcat"/>
354
+ <param pos="0" name="service.component.family" value="Tomcat"/>
355
+ <param pos="2" name="service.component.version"/>
356
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:apache:tomcat:{service.component.version}"/>
357
+ </fingerprint>
358
+ <fingerprint pattern="^Servlet [\d\.]+; Tomcat-(\S+)/JBoss-(\S+) \(build: .*\)$">
359
+ <description>JBoss with embedded Tomcat - Tomcat build variant</description>
360
+ <example service.version="4.0.1sp1" service.component.version="5.0.28">Servlet 2.4; Tomcat-5.0.28/JBoss-4.0.1sp1 (build: CVSTag=JBoss_4_0_1_SP1 date=200502160314)</example>
361
+ <param pos="0" name="service.vendor" value="Red Hat"/>
362
+ <param pos="0" name="service.product" value="JBoss EAP"/>
363
+ <param pos="2" name="service.version"/>
364
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:{service.version}"/>
365
+ <param pos="0" name="service.component.vendor" value="Apache"/>
366
+ <param pos="0" name="service.component.product" value="Tomcat"/>
367
+ <param pos="0" name="service.component.family" value="Tomcat"/>
368
+ <param pos="1" name="service.component.version"/>
369
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:apache:tomcat:{service.component.version}"/>
370
+ </fingerprint>
371
+ <fingerprint pattern="^Servlet [\d\.]+; JBoss-([\S]+)(?: \(build.*)?/JBossWeb-(\S+)$">
372
+ <description>JBoss with JBossweb</description>
373
+ <example service.version="4.2.3.GA" service.component.version="2.0">Servlet 2.4; JBoss-4.2.3.GA (build: SVNTag=JBoss_4_2_3_GA date=200807181439)/JBossWeb-2.0</example>
374
+ <example service.version="5.0" service.component.version="2.1">Servlet 2.5; JBoss-5.0/JBossWeb-2.1</example>
375
+ <param pos="0" name="service.vendor" value="Red Hat"/>
376
+ <param pos="0" name="service.product" value="JBoss EAP"/>
377
+ <param pos="1" name="service.version"/>
378
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:{service.version}"/>
379
+ <param pos="0" name="service.component.vendor" value="RedHat"/>
380
+ <param pos="0" name="service.component.product" value="JBossWeb"/>
381
+ <param pos="2" name="service.component.version"/>
382
+ </fingerprint>
383
+ <fingerprint pattern="^Servlet\/[\d\.]+; JBossAS-(.*)$">
384
+ <description>JBoss AS</description>
385
+ <example service.version="6">Servlet/3.0; JBossAS-6</example>
386
+ <param pos="0" name="service.vendor" value="Red Hat"/>
387
+ <param pos="0" name="service.product" value="JBoss AS"/>
388
+ <param pos="1" name="service.version"/>
389
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_wildfly_application_server:{service.version}"/>
390
+ </fingerprint>
391
+ <fingerprint pattern="^JBoss-EAP\/(\d+)$">
392
+ <description>JBoss EAP</description>
393
+ <example service.version="7">JBoss-EAP/7</example>
394
+ <param pos="0" name="service.vendor" value="Red Hat"/>
395
+ <param pos="0" name="service.family" value="JBoss"/>
396
+ <param pos="0" name="service.product" value="JBoss EAP"/>
397
+ <param pos="1" name="service.version"/>
398
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:{service.version}"/>
399
+ </fingerprint>
400
+ <fingerprint pattern="^Apache Tomcat/(\d\.[\d.]+)(?:-LE-jdk14)? \(HTTP/1.1 Connector\)$">
401
+ <description>HTTP connector for Apache Tomcat to run as a standalone HTTP server - Apache variant</description>
402
+ <example service.version="4.0.6">Apache Tomcat/4.0.6 (HTTP/1.1 Connector)</example>
403
+ <example service.version="4.1.12">Apache Tomcat/4.1.12 (HTTP/1.1 Connector)</example>
404
+ <example service.version="4.1.27">Apache Tomcat/4.1.27-LE-jdk14 (HTTP/1.1 Connector)</example>
405
+ <param pos="0" name="service.vendor" value="Apache"/>
406
+ <param pos="0" name="service.family" value="Tomcat"/>
407
+ <param pos="0" name="service.product" value="Tomcat"/>
408
+ <param pos="1" name="service.version"/>
409
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
410
+ <param pos="0" name="service.component.vendor" value="Apache"/>
411
+ <param pos="0" name="service.component.family" value="Apache Tomcat HTTP Connector"/>
412
+ <param pos="0" name="service.component.product" value="Apache Tomcat HTTP Connector"/>
413
+ </fingerprint>
414
+ <fingerprint pattern="^Tomcat Web Server/(\d\.[\dA-Z.]+)(?: Final)?(?:\s\(([^\)]+)\))?$">
415
+ <description>HTTP connector for Apache Tomcat to run as a standalone HTTP server</description>
416
+ <example>Tomcat Web Server/3.2.2 (JSP 1.1; Servlet 2.2; Java 1.3.1; Windows 2000 5.0 x86; java.vendor=Sun Microsystems Inc.)</example>
417
+ <example>Tomcat Web Server/3.2.2 (JSP 1.1; Servlet 2.2; Java 1.4.2_13; Windows 2003 5.2 x86; java.vendor=Sun Microsystems Inc.)</example>
418
+ <example>Tomcat Web Server/3.1M1 (JSP 1.1; Servlet 2.2; Java 1.3.1; AIX 5.3 ppc; java.vendor=IBM Corporation)</example>
419
+ <example>Tomcat Web Server/3.3.1 Final ( JSP 1.1; Servlet 2.2 )</example>
420
+ <param pos="0" name="service.vendor" value="Apache"/>
421
+ <param pos="0" name="service.product" value="Tomcat"/>
422
+ <param pos="0" name="service.family" value="Tomcat"/>
423
+ <param pos="1" name="service.version"/>
424
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
425
+ <param pos="2" name="tomcat.info"/>
426
+ </fingerprint>
427
+ <fingerprint pattern="^Tomcat/(\S+)$">
428
+ <description>Apache tomcat with minimal version information</description>
429
+ <example>Tomcat/2.1</example>
430
+ <param pos="0" name="service.vendor" value="Apache"/>
431
+ <param pos="0" name="service.product" value="Tomcat"/>
432
+ <param pos="0" name="service.family" value="Tomcat"/>
433
+ <param pos="1" name="service.version"/>
434
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
435
+ </fingerprint>
436
+ <fingerprint pattern="^PDR-M800/1.0$">
437
+ <description>Merit LILIN PDR M800</description>
438
+ <example>PDR-M800/1.0</example>
439
+ <param pos="0" name="hw.vendor" value="Merit LILIN"/>
440
+ <param pos="0" name="hw.product" value="PDR M800"/>
441
+ <param pos="0" name="hw.device" value="DVR"/>
442
+ </fingerprint>
443
+ <fingerprint pattern="^PHP/(\S+)$">
444
+ <description>PHP</description>
445
+ <example service.component.version="4.4.2-1build1">PHP/4.4.2-1build1</example>
446
+ <example service.component.version="5.1.2">PHP/5.1.2</example>
447
+ <param pos="0" name="service.component.product" value="PHP"/>
448
+ <param pos="1" name="service.component.version"/>
449
+ </fingerprint>
450
+ <!-- TODO: Capture ZendServer version in fingerprint -->
451
+ <fingerprint pattern="^PHP/(\S+)\s+ZendServer/\S+$">
452
+ <description>PHP with ZendServer</description>
453
+ <example service.component.version="5.3.14">PHP/5.3.14 ZendServer/5.0</example>
454
+ <param pos="0" name="service.component.product" value="PHP"/>
455
+ <param pos="1" name="service.component.version"/>
456
+ </fingerprint>
457
+ <fingerprint pattern="^Oracle Application Server Containers for J2EE 10g \(([\d.]+)\)$">
458
+ <description>Oracle Application Server Containers for J2EE 10g</description>
459
+ <example>Oracle Application Server Containers for J2EE 10g (9.0.4.0.0)</example>
460
+ <param pos="0" name="service.vendor" value="Oracle"/>
461
+ <param pos="0" name="service.product" value="Oracle Application Server Containers"/>
462
+ <param pos="0" name="service.family" value="Oracle"/>
463
+ <param pos="1" name="service.version"/>
464
+ </fingerprint>
465
+ <fingerprint pattern="^Oracle Containers for J2EE$">
466
+ <description>Oracle Application Server Containers for J2EE</description>
467
+ <example>Oracle Containers for J2EE</example>
468
+ <param pos="0" name="service.vendor" value="Oracle"/>
469
+ <param pos="0" name="service.product" value="Oracle Application Server Containers"/>
470
+ <param pos="0" name="service.family" value="Oracle"/>
471
+ </fingerprint>
472
+ <fingerprint pattern="^Oracle Application Server/10g \(([\d.]+)\) Apache/([12][\d.]+)\s*(.*)$">
473
+ <description>Oracle Application Server 10g with Apache info (powered by Apache)</description>
474
+ <example>Oracle Application Server/10g (10.1.2) Apache/1.3.34 (Unix) mod_perl/1.29 mod_jk/1.2.14 OracleAS-Web-Cache-10g/10.1.2.0.2 (N;ecid=119642322340,0)</example>
475
+ <param pos="0" name="service.vendor" value="Apache"/>
476
+ <param pos="0" name="service.product" value="HTTPD"/>
477
+ <param pos="0" name="service.family" value="Apache"/>
478
+ <param pos="2" name="service.version"/>
479
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:{service.version}"/>
480
+ <param pos="3" name="apache.info"/>
481
+ <param pos="0" name="apache.variant" value="Oracle"/>
482
+ <param pos="1" name="apache.variant.version"/>
483
+ </fingerprint>
484
+ <!-- TODO: this needs to be improved -->
485
+ <fingerprint pattern="^Oracle-Application-Server-\d+[ig](?:[ /]([\d.]+) (?:\(.*\)|Oracle-HTTP-Server\s*(.*)))?$">
486
+ <description>Oracle Application Server 10g (powered by Apache)</description>
487
+ <example>Oracle-Application-Server-11g</example>
488
+ <example>Oracle-Application-Server-10g</example>
489
+ <example>Oracle-Application-Server-10g/10.1.2.0.2 Oracle-HTTP-Server</example>
490
+ <example>Oracle-Application-Server-10g/10.1.2.2.0 Oracle-HTTP-Server (Unix) mod_plsql/10.1.2.2.0 mod_ossl/10.1.2.0.0 mod_perl/1.29 OracleAS-Web-Cache-10g/10.1.2.0.2 (N;ecid=89116016562,0)</example>
491
+ <example>Oracle-Application-Server-10g/10.1.2.2.0 Oracle-HTTP-Server OracleAS-Web-Cache-10g/10.1.2.2.0 (N;ecid=153541209221,0)</example>
492
+ <example>Oracle-Application-Server-10g/9.0.4.1.0 Oracle-HTTP-Server</example>
493
+ <param pos="0" name="service.vendor" value="Apache"/>
494
+ <param pos="0" name="service.product" value="HTTPD"/>
495
+ <param pos="0" name="service.family" value="Apache"/>
496
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
497
+ <param pos="2" name="apache.info"/>
498
+ <param pos="0" name="apache.variant" value="Oracle"/>
499
+ <param pos="1" name="apache.variant.version"/>
500
+ </fingerprint>
501
+ <fingerprint pattern="^Oracle9iAS/([\d.]+) Oracle HTTP Server\s*(.*)$">
502
+ <description>Oracle 9i Application Server</description>
503
+ <example>Oracle9iAS/9.0.2.3.0 Oracle HTTP Server Oracle9iAS-Web-Cache/9.0.2.3.0 (N)</example>
504
+ <example>Oracle9iAS/9.0.3.1 Oracle HTTP Server Oracle9iAS-Web-Cache/9.0.3.1.0 (N)</example>
505
+ <param pos="0" name="service.vendor" value="Apache"/>
506
+ <param pos="0" name="service.product" value="HTTPD"/>
507
+ <param pos="0" name="service.family" value="Apache"/>
508
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
509
+ <param pos="2" name="apache.info"/>
510
+ <param pos="0" name="apache.variant" value="Oracle"/>
511
+ <param pos="1" name="apache.variant.version"/>
512
+ </fingerprint>
513
+ <fingerprint pattern="^Oracle HTTP Server Powered by Apache/([12][\d.]*)\s*(.*)$">
514
+ <description>Oracle HTTP Server (powered by Apache) - version string variant</description>
515
+ <example>Oracle HTTP Server Powered by Apache/1.3.12 (Unix) ApacheJServ/1.1 mod_ssl/2.6.4 OpenSSL/0.9.5a</example>
516
+ <example>Oracle HTTP Server Powered by Apache/1.3.19 (Unix) mod_plsql/3.0.9.8.3b PHP/4.3.10 mod_fastcgi/2.2.10 mod_perl/1.25 mod_oprocmgr/1.0</example>
517
+ <example>Oracle HTTP Server Powered by Apache/1.3.19 (Win32) mod_ssl/2.8.1 OpenSSL/0.9.5a mod_fastcgi/2.2.10 mod_oprocmgr/1.0 mod_perl/1.25</example>
518
+ <param pos="0" name="service.vendor" value="Apache"/>
519
+ <param pos="0" name="service.product" value="HTTPD"/>
520
+ <param pos="0" name="service.family" value="Apache"/>
521
+ <param pos="1" name="service.version"/>
522
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:{service.version}"/>
523
+ <param pos="2" name="apache.info"/>
524
+ <param pos="0" name="apache.variant" value="Oracle"/>
525
+ </fingerprint>
526
+ <fingerprint pattern="^Oracle HTTP Server Powered by Apache$">
527
+ <description>Oracle HTTP Server (powered by Apache)</description>
528
+ <example>Oracle HTTP Server Powered by Apache</example>
529
+ <param pos="0" name="service.vendor" value="Apache"/>
530
+ <param pos="0" name="service.product" value="HTTPD"/>
531
+ <param pos="0" name="service.family" value="Apache"/>
532
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
533
+ <param pos="0" name="apache.variant" value="Oracle"/>
534
+ </fingerprint>
535
+ <fingerprint pattern="^HP Apache-based Web Server/([012][\d.]*)\s*\(Unix\)\s*(.*)$">
536
+ <description>Apache running on HP-UX</description>
537
+ <example>HP Apache-based Web Server/1.3.26 (Unix) mod_ssl/2.8.9 OpenSSL/0.9.6c</example>
538
+ <example>HP Apache-based Web Server/1.3.26 (Unix)</example>
539
+ <param pos="0" name="service.vendor" value="Apache"/>
540
+ <param pos="0" name="service.product" value="HTTPD"/>
541
+ <param pos="0" name="service.family" value="Apache"/>
542
+ <param pos="1" name="service.version"/>
543
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:{service.version}"/>
544
+ <param pos="2" name="apache.info"/>
545
+ <param pos="0" name="apache.variant" value="HP-UX"/>
546
+ <param pos="0" name="os.vendor" value="HP"/>
547
+ <param pos="0" name="os.family" value="HP-UX"/>
548
+ <param pos="0" name="os.product" value="HP-UX"/>
549
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:-"/>
550
+ </fingerprint>
551
+ <fingerprint pattern="^CompaqHTTPServer/([0-9.]*)(?: HP System Management Homepage(?:/.*)?)?$">
552
+ <description>HP/Compaq HTTP Server</description>
553
+ <example>CompaqHTTPServer/9.9 HP System Management Homepage/2.1.5.146</example>
554
+ <example>CompaqHTTPServer/9.9 HP System Management Homepage/3.0.1.73 httpd/2.2.6+</example>
555
+ <example>CompaqHTTPServer/9.9 HP System Management Homepage/6.0.0.96 httpd/2.2.6+</example>
556
+ <example>CompaqHTTPServer/9.9 HP System Management Homepage</example>
557
+ <example>CompaqHTTPServer/4.1</example>
558
+ <param pos="0" name="service.vendor" value="HP"/>
559
+ <param pos="0" name="service.product" value="HTTP"/>
560
+ <param pos="0" name="service.family" value="Compaq HTTP Server"/>
561
+ <param pos="1" name="service.version"/>
562
+ </fingerprint>
563
+ <fingerprint pattern="^HPSMH$">
564
+ <description>HP System Management Homepage (SMH)</description>
565
+ <example>HPSMH</example>
566
+ <param pos="0" name="service.vendor" value="HP"/>
567
+ <param pos="0" name="service.family" value="SMH"/>
568
+ <param pos="0" name="service.product" value="SMH"/>
569
+ </fingerprint>
570
+ <fingerprint pattern="(?i)^eHTTP[/ ]v?(\d+\.\d+)">
571
+ <description>HTTP Server present on seemingly only HP ProCurve network devices</description>
572
+ <example service.version="1.1">EHTTP/1.1</example>
573
+ <example service.version="2.0">eHTTP v2.0</example>
574
+ <param pos="0" name="service.vendor" value="HP"/>
575
+ <param pos="0" name="service.product" value="HTTP"/>
576
+ <param pos="0" name="service.family" value="ProCurve"/>
577
+ <param pos="1" name="service.version"/>
578
+ <param pos="0" name="os.vendor" value="HP"/>
579
+ <param pos="0" name="os.family" value="ProCurve"/>
580
+ <param pos="0" name="os.certainty" value="0.75"/>
581
+ </fingerprint>
582
+ <fingerprint pattern="^(?:BBC \d+\.\d+\.\d+\.?\d*; )?(?:com.hp.openview.)?[c|C]oda (\d+\.\d+\.\d+\.?\d*)$">
583
+ <description>HP Openview Coda (Communications Daemon)</description>
584
+ <example service.component.version="0.0.1">com.hp.openview.Coda 0.0.1</example>
585
+ <example service.component.version="10.00.123">BBC 05.20.050; coda 10.00.123</example>
586
+ <example service.component.version="0.0.1">BBC 2.6.0.7; com.hp.openview.Coda 0.0.1</example>
587
+ <param pos="0" name="service.vendor" value="HP"/>
588
+ <param pos="0" name="service.family" value="OpenView"/>
589
+ <param pos="0" name="service.product" value="OpenView"/>
590
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:openview:-"/>
591
+ <param pos="0" name="service.component.vendor" value="HP"/>
592
+ <param pos="0" name="service.component.family" value="OpenView"/>
593
+ <param pos="0" name="service.component.product" value="CODA"/>
594
+ <param pos="1" name="service.component.version"/>
595
+ </fingerprint>
596
+ <fingerprint pattern="^BBC \d+\.\d+\.\d+\.?\d*; ovbbcrcp (\d+\.\d+\.\d+\.?\d*)$">
597
+ <description>OpenView Reverse Channel Proxy (RCP)</description>
598
+ <example service.component.version="11.00.044">BBC 11.00.044; ovbbcrcp 11.00.044</example>
599
+ <param pos="0" name="service.vendor" value="HP"/>
600
+ <param pos="0" name="service.family" value="OpenView"/>
601
+ <param pos="0" name="service.product" value="OpenView"/>
602
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:openview:-"/>
603
+ <param pos="0" name="service.component.vendor" value="HP"/>
604
+ <param pos="0" name="service.component.family" value="OpenView"/>
605
+ <param pos="0" name="service.component.product" value="Reverse Channel Proxy"/>
606
+ <param pos="1" name="service.component.version"/>
607
+ </fingerprint>
608
+ <fingerprint pattern="^(?:BBC \d+\.\d+\.\d+\.?\d*; )?com.hp.openview.bbc.LLBServer (\d+\.\d+\.\d+\.?\d*)$">
609
+ <description>HP Openview LLBServer (Local Location Broker)</description>
610
+ <example service.component.version="2.6.8.1">com.hp.openview.bbc.LLBServer 2.6.8.1</example>
611
+ <example service.component.version="2.6.0.7">BBC 2.6.0.7; com.hp.openview.bbc.LLBServer 2.6.0.7</example>
612
+ <param pos="0" name="service.vendor" value="HP"/>
613
+ <param pos="0" name="service.family" value="OpenView"/>
614
+ <param pos="0" name="service.product" value="OpenView"/>
615
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:openview:-"/>
616
+ <param pos="0" name="service.component.vendor" value="HP"/>
617
+ <param pos="0" name="service.component.family" value="OpenView"/>
618
+ <param pos="0" name="service.component.product" value="LLBServer"/>
619
+ <param pos="1" name="service.component.version"/>
620
+ </fingerprint>
621
+ <fingerprint pattern="^BBC \d+\.\d+\.\d+; ovbbccb (\d+\.\d+\.\d+)$">
622
+ <description>OpenView Communication Broker (ovbbccb)</description>
623
+ <example service.component.version="06.00.083">BBC 06.00.083; ovbbccb 06.00.083</example>
624
+ <example service.component.version="11.10.035">BBC 11.10.035; ovbbccb 11.10.035</example>
625
+ <param pos="0" name="service.vendor" value="HP"/>
626
+ <param pos="0" name="service.family" value="OpenView"/>
627
+ <param pos="0" name="service.product" value="OpenView"/>
628
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:openview:-"/>
629
+ <param pos="0" name="service.component.vendor" value="HP"/>
630
+ <param pos="0" name="service.component.family" value="OpenView"/>
631
+ <param pos="0" name="service.component.product" value="Communication Broker"/>
632
+ <param pos="1" name="service.component.version"/>
633
+ </fingerprint>
634
+ <fingerprint pattern="^BBC \d+\.\d+\.\d+; ovbbccb unknown version$">
635
+ <description>OpenView Communication Broker (ovbbccb) with no version</description>
636
+ <example>BBC 11.13.007; ovbbccb unknown version</example>
637
+ <param pos="0" name="service.vendor" value="HP"/>
638
+ <param pos="0" name="service.family" value="OpenView"/>
639
+ <param pos="0" name="service.product" value="OpenView"/>
640
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:openview:-"/>
641
+ <param pos="0" name="service.component.vendor" value="HP"/>
642
+ <param pos="0" name="service.component.family" value="OpenView"/>
643
+ <param pos="0" name="service.component.product" value="Communication Broker"/>
644
+ </fingerprint>
645
+ <fingerprint pattern="^UOS$">
646
+ <description>HTTP Server that appears unique to Managment Console on HP TippingPoint IPS Devices</description>
647
+ <example>UOS</example>
648
+ <param pos="0" name="service.vendor" value="HP"/>
649
+ <param pos="0" name="service.product" value="HTTP"/>
650
+ <param pos="0" name="service.family" value="TippingPoint"/>
651
+ <param pos="0" name="os.vendor" value="HP"/>
652
+ <param pos="0" name="os.family" value="TippingPoint"/>
653
+ <param pos="0" name="os.device" value="IPS"/>
654
+ <param pos="0" name="hw.vendor" value="HP"/>
655
+ <param pos="0" name="hw.family" value="TippingPoint"/>
656
+ <param pos="0" name="hw.device" value="IPS"/>
657
+ </fingerprint>
658
+ <fingerprint pattern="^uc-httpd[ \/]([\d.]+)$">
659
+ <description>Xiongmai Tech uc-httpd</description>
660
+ <example service.version="1.0.0">uc-httpd 1.0.0</example>
661
+ <example service.version="1.0.0">uc-httpd/1.0.0</example>
662
+ <param pos="0" name="service.vendor" value="Xiongmai Tech"/>
663
+ <param pos="0" name="service.product" value="uc-httpd"/>
664
+ <param pos="1" name="service.version"/>
665
+ </fingerprint>
666
+ <fingerprint pattern="^micro_httpd$">
667
+ <description>ACME micro_httpd</description>
668
+ <example>micro_httpd</example>
669
+ <param pos="0" name="service.vendor" value="ACME"/>
670
+ <param pos="0" name="service.product" value="micro_httpd"/>
671
+ <param pos="0" name="service.cpe23" value="cpe:/a:acme:micro_httpd:-"/>
672
+ </fingerprint>
673
+ <fingerprint pattern="^mini_httpd$">
674
+ <description>ACME mini_httpd</description>
675
+ <example>mini_httpd</example>
676
+ <param pos="0" name="service.vendor" value="ACME"/>
677
+ <param pos="0" name="service.product" value="mini_httpd"/>
678
+ <param pos="0" name="service.cpe23" value="cpe:/a:acme:mini_httpd:-"/>
679
+ </fingerprint>
680
+ <fingerprint pattern="^LiteSpeed\/?(:?[\d.]+)?(?: \S+)?">
681
+ <description>LiteSpeed</description>
682
+ <example>LiteSpeed</example>
683
+ <example>LiteSpeed/5.2.8 Enterprise</example>
684
+ <param pos="0" name="service.vendor" value="LiteSpeed Technologies"/>
685
+ <param pos="0" name="service.product" value="LiteSpeed Web Server"/>
686
+ <param pos="1" name="service.version"/>
687
+ </fingerprint>
688
+ <fingerprint pattern="^IdeaWebServer\/v?([\d.]+)$">
689
+ <description>Idea Web Server</description>
690
+ <example service.version="0.83.74">IdeaWebServer/0.83.74</example>
691
+ <example service.version="0.70">IdeaWebServer/v0.70</example>
692
+ <param pos="0" name="service.vendor" value="home.pl"/>
693
+ <param pos="0" name="service.product" value="Idea Web Server"/>
694
+ <param pos="1" name="service.version"/>
695
+ </fingerprint>
696
+ <fingerprint pattern="^openresty\/?(:?[\d.]+)?$">
697
+ <description>OpenResty OpenResty</description>
698
+ <example>openresty</example>
699
+ <example service.version="1.13.6.2">openresty/1.13.6.2</example>
700
+ <param pos="0" name="service.vendor" value="OpenResty"/>
701
+ <param pos="0" name="service.product" value="OpenResty"/>
702
+ <param pos="1" name="service.version"/>
703
+ </fingerprint>
704
+ <fingerprint pattern="^gunicorn\/([\d.]+)+$">
705
+ <description>Gunicorn Gunicorn</description>
706
+ <example service.version="19.7.1">gunicorn/19.7.1</example>
707
+ <param pos="0" name="service.vendor" value="Gunicorn"/>
708
+ <param pos="0" name="service.product" value="Gunicorn"/>
709
+ <param pos="1" name="service.version"/>
710
+ </fingerprint>
711
+ <fingerprint pattern="^Serv-U\/([\d.]+)$">
712
+ <description>Serv-U HTTP interface</description>
713
+ <example service.version="15.1.6.31">Serv-U/15.1.6.31</example>
714
+ <param pos="0" name="service.vendor" value="SolarWinds"/>
715
+ <param pos="0" name="service.family" value="Serv-U"/>
716
+ <param pos="0" name="service.product" value="FTP Server"/>
717
+ <param pos="1" name="service.version"/>
718
+ </fingerprint>
719
+ <fingerprint pattern="^(?i)Linux UPnP/1.0 Sonos/([\d\.\-a-z]+) \((BR\d+)\)$">
720
+ <description>Sonos Bridge/ZoneBridge</description>
721
+ <example hw.model="BR100" hw.version="47.2-59120">Linux UPnP/1.0 Sonos/47.2-59120 (BR100)</example>
722
+ <param pos="0" name="hw.vendor" value="Sonos"/>
723
+ <param pos="0" name="hw.product" value="Bridge"/>
724
+ <param pos="0" name="hw.device" value="Network Audio"/>
725
+ <param pos="1" name="hw.version"/>
726
+ <param pos="2" name="hw.model"/>
727
+ <param pos="0" name="os.product" value="Linux"/>
728
+ </fingerprint>
729
+ <fingerprint pattern="^(?i)Linux UPnP/1.0 Sonos/([\d\.\-a-z]+) \(ANVIL\)$">
730
+ <description>Sonos Subwoofer Speaker</description>
731
+ <example>Linux UPnP/1.0 Sonos/31.3-22220 (ANVIL)</example>
732
+ <param pos="0" name="hw.vendor" value="Sonos"/>
733
+ <param pos="0" name="hw.product" value="Sub"/>
734
+ <param pos="0" name="hw.device" value="Network Audio"/>
735
+ <param pos="1" name="hw.version"/>
736
+ <param pos="0" name="os.product" value="Linux"/>
737
+ </fingerprint>
738
+ <fingerprint pattern="(?i)^Linux UPnP/1.0 Sonos/([\d\.\-a-z]+) \(ZP(S?\d+)\)$">
739
+ <description>Sonos PLAY/ZonePlayer wireless speaker</description>
740
+ <example hw.model="S1" hw.version="39.2-47040c">Linux UPnP/1.0 Sonos/39.2-47040c (ZPS1)</example>
741
+ <example hw.model="S3" hw.version="47.2-59120">Linux UPnP/1.0 Sonos/47.2-59120 (ZPS3)</example>
742
+ <example hw.model="120" hw.version="34.16-37101">Linux UPnP/1.0 Sonos/34.16-37101 (ZP120)</example>
743
+ <param pos="0" name="hw.vendor" value="Sonos"/>
744
+ <param pos="0" name="hw.product" value="PLAY"/>
745
+ <param pos="0" name="hw.device" value="Network Audio"/>
746
+ <param pos="1" name="hw.version"/>
747
+ <param pos="2" name="hw.model"/>
748
+ <param pos="0" name="os.product" value="Linux"/>
749
+ </fingerprint>
750
+ <fingerprint pattern="(?i)^Linux UPnP/1.0 Sonos/([\d\.\-a-z]+) \(WD(\d+)\)$">
751
+ <description>Sonos Wireless Dock</description>
752
+ <example hw.model="100" hw.version="36.4-41270">Linux UPnP/1.0 Sonos/36.4-41270 (WD100)</example>
753
+ <param pos="0" name="hw.vendor" value="Sonos"/>
754
+ <param pos="0" name="hw.product" value="Wireless Dock"/>
755
+ <param pos="0" name="hw.device" value="Network Audio"/>
756
+ <param pos="1" name="hw.version"/>
757
+ <param pos="2" name="hw.model"/>
758
+ <param pos="0" name="os.product" value="Linux"/>
759
+ </fingerprint>
760
+ <fingerprint pattern="^Varnish(?:[- ]Cache)?$">
761
+ <description>Varnish Cache</description>
762
+ <example>Varnish</example>
763
+ <example>Varnish-Cache</example>
764
+ <param pos="0" name="service.vendor" value="Varnish-cache"/>
765
+ <param pos="0" name="service.family" value="Varnish"/>
766
+ <param pos="0" name="service.product" value="Varnish"/>
767
+ <param pos="0" name="service.cpe23" value="cpe:/a:varnish-cache:varnish:-"/>
768
+ </fingerprint>
769
+ <fingerprint pattern="^Tengine\/?(:?[\d.]+)?$">
770
+ <description>Tengine</description>
771
+ <example>Tengine</example>
772
+ <example service.version="2.0.0">Tengine/2.0.0</example>
773
+ <param pos="0" name="service.vendor" value="Taobao"/>
774
+ <param pos="0" name="service.family" value="Tengine"/>
775
+ <param pos="0" name="service.product" value="Tengine"/>
776
+ <param pos="1" name="service.version"/>
777
+ </fingerprint>
778
+ <fingerprint pattern="^Mikrotik HttpProxy$">
779
+ <description>MikroTik RouterOS - Proxy service</description>
780
+ <example>Mikrotik HttpProxy</example>
781
+ <param pos="0" name="service.vendor" value="MikroTik"/>
782
+ <param pos="0" name="service.product" value="HttpProxy"/>
783
+ <param pos="0" name="os.vendor" value="MikroTik"/>
784
+ <param pos="0" name="os.device" value="Router"/>
785
+ <param pos="0" name="os.product" value="RouterOS"/>
786
+ <param pos="0" name="os.cpe23" value="cpe:/o:mikrotik:routeros:-"/>
787
+ <param pos="0" name="hw.vendor" value="MikroTik"/>
788
+ <param pos="0" name="hw.device" value="Router"/>
789
+ </fingerprint>
790
+ <fingerprint pattern="^Helix Server Version ([0-9.]*) \(win32\) \(RealServer compatible\)$">
791
+ <description>RealMedia Helix Server - Windows</description>
792
+ <example>Helix Server Version 9.0.4.960 (win32) (RealServer compatible)</example>
793
+ <param pos="0" name="os.vendor" value="Microsoft"/>
794
+ <param pos="0" name="os.family" value="Windows"/>
795
+ <param pos="0" name="os.product" value="Windows"/>
796
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
797
+ <param pos="0" name="service.vendor" value="RealMedia"/>
798
+ <param pos="0" name="service.product" value="HTTP"/>
799
+ <param pos="0" name="service.family" value="Helix Server"/>
800
+ <param pos="1" name="service.version"/>
801
+ </fingerprint>
802
+ <fingerprint pattern="^Helix Server Version ([0-9.]*) \(linux-\S+\) \(RealServer compatible\)$">
803
+ <description>RealMedia Helix Server - Linux</description>
804
+ <example>Helix Server Version 9.0.4.960 (linux-2.2-libc6-i586-server) (RealServer compatible)</example>
805
+ <param pos="0" name="os.family" value="Linux"/>
806
+ <param pos="0" name="os.product" value="Linux"/>
807
+ <param pos="0" name="service.vendor" value="RealMedia"/>
808
+ <param pos="0" name="service.product" value="HTTP"/>
809
+ <param pos="0" name="service.family" value="Helix Server"/>
810
+ <param pos="1" name="service.version"/>
811
+ </fingerprint>
812
+ <fingerprint pattern="^ReeCam IP Camera$">
813
+ <description>Shenzhen ReeCam cameras</description>
814
+ <example>ReeCam IP Camera</example>
815
+ <param pos="0" name="hw.vendor" value="Shenzhen Reecam Tech. Ltd."/>
816
+ <param pos="0" name="hw.product" value="ReeCam"/>
817
+ <param pos="0" name="hw.device" value="Web cam"/>
818
+ </fingerprint>
819
+ <fingerprint pattern="^Netwave IP Camera$">
820
+ <description>Netwave cameras</description>
821
+ <example>Netwave IP Camera</example>
822
+ <param pos="0" name="hw.vendor" value="Netwave"/>
823
+ <param pos="0" name="hw.device" value="Web cam"/>
824
+ </fingerprint>
825
+ <fingerprint pattern="^Cougar/([0-9.]*)$">
826
+ <description>Windows Media Services (older versions)</description>
827
+ <example>Cougar/9.01.01.3841</example>
828
+ <param pos="0" name="os.vendor" value="Microsoft"/>
829
+ <param pos="0" name="os.family" value="Windows"/>
830
+ <param pos="0" name="os.product" value="Windows"/>
831
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
832
+ <param pos="0" name="service.vendor" value="Microsoft"/>
833
+ <param pos="0" name="service.product" value="HTTP"/>
834
+ <param pos="0" name="service.family" value="Windows Media Services"/>
835
+ <param pos="1" name="service.version"/>
836
+ </fingerprint>
837
+ <fingerprint pattern="^WMServer/([0-9.]*)$">
838
+ <description>Windows Media Services (newer versions)</description>
839
+ <example>WMServer/9.1.1.3841</example>
840
+ <param pos="0" name="os.vendor" value="Microsoft"/>
841
+ <param pos="0" name="os.family" value="Windows"/>
842
+ <param pos="0" name="os.product" value="Windows"/>
843
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
844
+ <param pos="0" name="service.vendor" value="Microsoft"/>
845
+ <param pos="0" name="service.product" value="HTTP"/>
846
+ <param pos="0" name="service.family" value="Windows Media Services"/>
847
+ <param pos="1" name="service.version"/>
848
+ </fingerprint>
849
+ <fingerprint pattern="^Microsoft-HTTPAPI/(?:[0-9\.]*)$">
850
+ <description>Generic Microsoft HTTP service</description>
851
+ <example>Microsoft-HTTPAPI/2.0</example>
852
+ <param pos="0" name="os.vendor" value="Microsoft"/>
853
+ <param pos="0" name="os.family" value="Windows"/>
854
+ <param pos="0" name="os.product" value="Windows"/>
855
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
856
+ </fingerprint>
857
+ <fingerprint pattern="(?i)^(?:(?:Cube|(?:Mini )?Dome|Day/Night|PAN/?Tilt|POE|IR|HD|H.264|Surveillance|With|Wired|Wireless(?: N)?|Network|Internet|(?:IP(?:[\s_-])?)?Cameras?[\s_]*\d*) ?){1,5}?(?: Login)?$">
858
+ <description>Generic IP Cameras</description>
859
+ <example>camera</example>
860
+ <example>IPCamera Login</example>
861
+ <example>Mini Dome IP Camera</example>
862
+ <param pos="0" name="hw.device" value="Web cam"/>
863
+ </fingerprint>
864
+ <fingerprint pattern="^ASP.NET$">
865
+ <description>Something written in ASP.NET</description>
866
+ <example>ASP.NET</example>
867
+ <param pos="0" name="os.vendor" value="Microsoft"/>
868
+ <param pos="0" name="os.family" value="Windows"/>
869
+ <param pos="0" name="os.product" value="Windows"/>
870
+ <param pos="0" name="os.certainty" value="0.6"/>
871
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
872
+ </fingerprint>
873
+ <fingerprint pattern="^[Xx]itami$">
874
+ <description>Xitami web server</description>
875
+ <example>Xitami</example>
876
+ <param pos="0" name="service.vendor" value="Xitami"/>
877
+ <param pos="0" name="service.product" value="HTTP"/>
878
+ <param pos="0" name="service.family" value="Webserver"/>
879
+ </fingerprint>
880
+ <fingerprint pattern="^VCS-VIDOS-NVR$">
881
+ <description>Bosch VCS VIDOS-NVR network video recorder</description>
882
+ <example>VCS-VIDOS-NVR</example>
883
+ <param pos="0" name="os.vendor" value="Bosch"/>
884
+ <param pos="0" name="os.device" value="DVR"/>
885
+ <param pos="0" name="os.product" value="VIDOS-NVR"/>
886
+ <param pos="0" name="hw.vendor" value="Bosch"/>
887
+ <param pos="0" name="hw.device" value="DVR"/>
888
+ </fingerprint>
889
+ <fingerprint pattern="^FUHO-DVR$">
890
+ <description>FUHO Surveillance/DVR</description>
891
+ <example>FUHO-DVR</example>
892
+ <param pos="0" name="hw.vendor" value="FUHO"/>
893
+ <param pos="0" name="hw.device" value="DVR"/>
894
+ </fingerprint>
895
+ <fingerprint pattern="^HeiTel GmbH Web Server \[\S+\]$">
896
+ <description>HeiTel Digital Video Recorder</description>
897
+ <example>HeiTel GmbH Web Server [V1.15/V1.14/V1.3]</example>
898
+ <example>HeiTel GmbH Web Server [V1.26/V1.15/V1.7]</example>
899
+ <param pos="0" name="os.vendor" value="HeiTel"/>
900
+ <param pos="0" name="os.device" value="DVR"/>
901
+ <param pos="0" name="hw.vendor" value="HeiTel"/>
902
+ <param pos="0" name="hw.device" value="DVR"/>
903
+ </fingerprint>
904
+ <fingerprint pattern="^MiniServ/([0-9.]*)$">
905
+ <description>mini_httpd</description>
906
+ <example>MiniServ/0.01</example>
907
+ <param pos="0" name="service.product" value="HTTP"/>
908
+ <param pos="0" name="service.family" value="WebServer"/>
909
+ <param pos="1" name="service.version"/>
910
+ </fingerprint>
911
+ <fingerprint pattern="^IBM HTTP Server/(V\d+R\d+M\d+)$">
912
+ <description>IBM HTTP server running on AS/400</description>
913
+ <example>IBM HTTP Server/V5R3M0</example>
914
+ <param pos="0" name="service.vendor" value="IBM"/>
915
+ <param pos="0" name="service.product" value="HTTP Server"/>
916
+ <param pos="0" name="service.family" value="HTTP Server"/>
917
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:http_server:-"/>
918
+ <param pos="0" name="os.certainty" value="0.9"/>
919
+ <param pos="0" name="os.vendor" value="IBM"/>
920
+ <param pos="0" name="os.family" value="OS/400"/>
921
+ <param pos="0" name="os.product" value="OS/400"/>
922
+ <param pos="1" name="os.version"/>
923
+ </fingerprint>
924
+ <fingerprint pattern="^(?:IBM_HTTP_Server|IBM_HTTP_SERVER)/([\w.-]+)\s+Apache/([12][\d.]+)\s*(.*)$">
925
+ <description>IBM HTTP Server</description>
926
+ <example>IBM_HTTP_SERVER/1.3.19.2 Apache/1.3.20 (Win32)</example>
927
+ <example>IBM_HTTP_SERVER/1.3.28.1-PK16139 Apache/1.3.28 (Unix)</example>
928
+ <example>IBM_HTTP_Server/1.3.12 Apache/1.3.12 (Unix)</example>
929
+ <example>IBM_HTTP_Server/2.0.42.2-PK25355 Apache/2.0.47 (Unix) DAV/2</example>
930
+ <example>IBM_HTTP_Server/2.0.47.1-PK01070 Apache/2.0.47 (Win32) PHP/5.0.4</example>
931
+ <example>IBM_HTTP_Server/2.0.47.1 Apache/2.0.47 (Unix) DAV/2 PHP/4.3.8</example>
932
+ <example>IBM_HTTP_Server/6.0 Apache/2.0.47 (Unix) DAV/2</example>
933
+ <example>IBM_HTTP_Server/6.0.2 Apache/2.0.47 (Unix)</example>
934
+ <example>IBM_HTTP_Server/6.0.2.19 Apache/2.0.47 (Unix)</example>
935
+ <example>IBM_HTTP_Server/6.1 Apache/2.0.47 (Win32) PHP/5.1.1</example>
936
+ <param pos="0" name="service.vendor" value="Apache"/>
937
+ <param pos="0" name="service.product" value="HTTPD"/>
938
+ <param pos="0" name="service.family" value="Apache"/>
939
+ <param pos="2" name="service.version"/>
940
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:{service.version}"/>
941
+ <param pos="3" name="apache.info"/>
942
+ <param pos="0" name="apache.variant" value="IBM"/>
943
+ <param pos="1" name="apache.variant.version"/>
944
+ </fingerprint>
945
+ <fingerprint pattern="(?i)^(?:IBM_HTTP_SERVER|IBM-HTTP-SERVER)/(\S+)(?: \(\S+\))?$">
946
+ <description>IBM HTTP Server with hardly useful version info</description>
947
+ <example>IBM-HTTP-Server/1.0</example>
948
+ <example>IBM_HTTP_Server/7.0.0.9 (Unix)</example>
949
+ <param pos="0" name="service.vendor" value="Apache"/>
950
+ <param pos="0" name="service.product" value="HTTPD"/>
951
+ <param pos="0" name="service.family" value="Apache"/>
952
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
953
+ <param pos="0" name="apache.variant" value="IBM"/>
954
+ <param pos="1" name="apache.variant.version"/>
955
+ </fingerprint>
956
+ <fingerprint pattern="(?i)^(?:IBM_HTTP_SERVER|IBM-HTTP-SERVER)$">
957
+ <description>IBM HTTP Server with no version info</description>
958
+ <example>IBM_HTTP_SERVER</example>
959
+ <example>IBM_HTTP_Server</example>
960
+ <param pos="0" name="service.vendor" value="Apache"/>
961
+ <param pos="0" name="service.product" value="HTTPD"/>
962
+ <param pos="0" name="service.family" value="Apache"/>
963
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
964
+ <param pos="0" name="apache.variant" value="IBM"/>
965
+ </fingerprint>
966
+ <!--
967
+ Netscape/Sun's Application Server
968
+ -->
969
+ <fingerprint pattern="^Sun[ -]Java[ -]System[ /]Application[ -]Server( \d\.[\d_]+)?$">
970
+ <description>Sun Java System Application Server (formerly iPlanet Application Server, Sun ONE Application Server)</description>
971
+ <example>Sun-Java-System/Application-Server</example>
972
+ <param pos="0" name="service.vendor" value="Sun"/>
973
+ <param pos="0" name="service.family" value="Java System Application Server"/>
974
+ <param pos="0" name="service.product" value="Java System Application Server"/>
975
+ <param pos="1" name="service.version"/>
976
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_application_server:{service.version}"/>
977
+ </fingerprint>
978
+ <fingerprint pattern="^Sun[ -]Java[ -]System[ /]Application[ -]Server Platform Edition (\d\.[\d_]+)?$">
979
+ <description>Sun Java System Application Server Platform Edition(formerly iPlanet Application Server, Sun ONE Application Server)</description>
980
+ <example>Sun Java System Application Server Platform Edition 9.0</example>
981
+ <example service.version="9.0_01">Sun Java System Application Server Platform Edition 9.0_01</example>
982
+ <param pos="0" name="service.vendor" value="Sun"/>
983
+ <param pos="0" name="service.family" value="Java System Application Server"/>
984
+ <param pos="0" name="service.product" value="Java System Application Server Platform Edition"/>
985
+ <param pos="1" name="service.version"/>
986
+ </fingerprint>
987
+ <fingerprint pattern="^Sun GlassFish Enterprise Server v(\S+)$">
988
+ <description>Glassfish with version information</description>
989
+ <example>Sun GlassFish Enterprise Server v2.1</example>
990
+ <param pos="0" name="service.vendor" value="Sun"/>
991
+ <param pos="0" name="service.product" value="GlassFish"/>
992
+ <param pos="1" name="service.version"/>
993
+ </fingerprint>
994
+ <fingerprint pattern="^GlassFish$">
995
+ <description>Glassfish without version information</description>
996
+ <example>GlassFish</example>
997
+ <param pos="0" name="service.vendor" value="Sun"/>
998
+ <param pos="0" name="service.product" value="GlassFish"/>
999
+ </fingerprint>
1000
+ <!--
1001
+ Netscape/Sun's Web Server
1002
+ -->
1003
+ <fingerprint pattern="^Netscape-Enterprise/(\d+\.[\w\s.]+)$">
1004
+ <description>Netscape Enterprise Server (subsequently iPlanet Web Server, Sun ONE Web Server, presently Sun Java System Web Server)</description>
1005
+ <example>Netscape-Enterprise/3.5.1</example>
1006
+ <example>Netscape-Enterprise/3.6 SP3</example>
1007
+ <example>Netscape-Enterprise/6.0</example>
1008
+ <param pos="0" name="service.vendor" value="Sun"/>
1009
+ <param pos="0" name="service.family" value="Java System Web Server"/>
1010
+ <param pos="0" name="service.product" value="Java System Web Server"/>
1011
+ <param pos="1" name="service.version"/>
1012
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_web_server:{service.version}"/>
1013
+ </fingerprint>
1014
+ <fingerprint pattern="^(?:Sun-Java-System-Web-Server|Sun-ONE-Web-Server)/(?:\d\.[\d_]+)$">
1015
+ <description>Sun Java System Web Server (formerly Netscape Enterprise Server, iPlanet Web Server and Sun ONE Web Server)</description>
1016
+ <example>Sun-Java-System-Web-Server/7.0</example>
1017
+ <example>Sun-ONE-Web-Server/6.1</example>
1018
+ <param pos="0" name="service.vendor" value="Sun"/>
1019
+ <param pos="0" name="service.family" value="Java System Web Server"/>
1020
+ <param pos="0" name="service.product" value="Java System Web Server"/>
1021
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_web_server:-"/>
1022
+ </fingerprint>
1023
+ <!--
1024
+ Netscape/Sun's Web Proxy Server
1025
+ -->
1026
+ <!--
1027
+ Header seen on admin port 8081 (not regular proxy port 8080) of Sun Java
1028
+ System Web Proxy Server 3.6 Service Pack 4 running on Windows:
1029
+
1030
+ Server: Netscape-Administrator/3.54
1031
+
1032
+ However this header might be used by Web Server too, so it might be
1033
+ impossible to differentiate Web Server from Web Proxy Server. Also note how
1034
+ there seems to be no relation between 3.54 and "3.6 Service Pack 4".
1035
+ -->
1036
+ <fingerprint pattern="^iPlanet-Web-Proxy-Server/(.*)$">
1037
+ <description>iPlanet WebProxy Server (subsequently Sun ONE WebProxy Server, presently Sun Java System Web Proxy Server)</description>
1038
+ <example>iPlanet-Web-Proxy-Server/3.6</example>
1039
+ <example service.version="3.6-SP5">iPlanet-Web-Proxy-Server/3.6-SP5</example>
1040
+ <param pos="0" name="service.vendor" value="Sun"/>
1041
+ <param pos="0" name="service.family" value="Java System Web Proxy Server"/>
1042
+ <param pos="0" name="service.product" value="Java System Web Proxy Server"/>
1043
+ <param pos="1" name="service.version"/>
1044
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_web_proxy_server:{service.version}"/>
1045
+ </fingerprint>
1046
+ <fingerprint pattern="^Sun-ONE-Web-Proxy-Server/(.*)$">
1047
+ <description>Sun ONE WebProxy Server (formerly iPlanet WebProxy Server, presently Sun Java System Web Proxy Server)</description>
1048
+ <example service.version="3.6-SP4">Sun-ONE-Web-Proxy-Server/3.6-SP4</example>
1049
+ <param pos="0" name="service.vendor" value="Sun"/>
1050
+ <param pos="0" name="service.family" value="Java System Web Proxy Server"/>
1051
+ <param pos="0" name="service.product" value="Java System Web Proxy Server"/>
1052
+ <param pos="1" name="service.version"/>
1053
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_web_proxy_server:{service.version}"/>
1054
+ </fingerprint>
1055
+ <fingerprint pattern="^Sun-Java-System-Web-Proxy-Server/(\d\.[\d.]+)$">
1056
+ <description>Sun Java System Web Proxy Server (formerly iPlanet WebProxy Server, Sun ONE WebProxy Server)</description>
1057
+ <example>Sun-Java-System-Web-Proxy-Server/4.0.2</example>
1058
+ <example>Sun-Java-System-Web-Proxy-Server/4.0</example>
1059
+ <param pos="0" name="service.vendor" value="Sun"/>
1060
+ <param pos="0" name="service.family" value="Java System Web Proxy Server"/>
1061
+ <param pos="0" name="service.product" value="Java System Web Proxy Server"/>
1062
+ <param pos="1" name="service.version"/>
1063
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_web_proxy_server:{service.version}"/>
1064
+ </fingerprint>
1065
+ <fingerprint pattern="^Sun-ILOM-Web-Server/(?:\d\.[\d._]+)$">
1066
+ <description>Sun Integrated Lights Out Manager (ILOM) usually bundled with Sun Fire servers</description>
1067
+ <example>Sun-ILOM-Web-Server/1.0</example>
1068
+ <param pos="0" name="service.vendor" value="Sun"/>
1069
+ <param pos="0" name="service.product" value="Integrated Lights Out Manager"/>
1070
+ <param pos="0" name="service.family" value="Integrated Lights Out Manager"/>
1071
+ <param pos="0" name="hw.vendor" value="Sun"/>
1072
+ <param pos="0" name="hw.family" value="Sun Fire"/>
1073
+ </fingerprint>
1074
+ <fingerprint pattern="^HP-iLO-Server/(?:[\S]+)">
1075
+ <description>HP Integrated Lights Out Manager (iLO). Version in the Server header (found on in iLO4) is the firmware version and is not currently used.</description>
1076
+ <example>HP-iLO-Server/1.30</example>
1077
+ <param pos="0" name="service.vendor" value="HP"/>
1078
+ <param pos="0" name="service.product" value="iLO"/>
1079
+ <param pos="0" name="service.family" value="iLO"/>
1080
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:integrated_lights_out:-"/>
1081
+ <param pos="0" name="hw.vendor" value="HP"/>
1082
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
1083
+ <param pos="0" name="os.vendor" value="HP"/>
1084
+ <param pos="0" name="os.product" value="iLO"/>
1085
+ <param pos="0" name="os.family" value="iLO"/>
1086
+ <param pos="0" name="os.device" value="Lights Out Management"/>
1087
+ </fingerprint>
1088
+ <!--
1089
+ TODO:
1090
+
1091
+ Sun_WebServer/2.1
1092
+ -->
1093
+ <!-- Mort Bay Jetty 1.0 to 6.x -->
1094
+ <fingerprint pattern="^Jetty\/([1-6]\.[\w.]+)(?: \(([^)]*))?">
1095
+ <description>Mort Bay Jetty with info</description>
1096
+ <example service.version="4.0.1" jetty.info="SunOS 5.8 sparc">Jetty/4.0.1 (SunOS 5.8 sparc)</example>
1097
+ <example service.version="4.2.23" jetty.info="SunOS/5.9 sparc java/1.4.2_04">Jetty/4.2.23 (SunOS/5.9 sparc java/1.4.2_04)</example>
1098
+ <example service.version="4.2.x" jetty.info="VxWorks/WIND version 2.9 ppc java/1.1-rr-std-b12">Jetty/4.2.x (VxWorks/WIND version 2.9 ppc java/1.1-rr-std-b12)</example>
1099
+ <example service.version="5.1.4" jetty.info="Windows Server 2008 R2/6.1 x86 java/1.5.0_22">Jetty/5.1.4 (Windows Server 2008 R2/6.1 x86 java/1.5.0_22</example>
1100
+ <example service.version="5.1.10" jetty.info="Linux/2.6.12 i386 java/1.5.0_05">Jetty/5.1.10 (Linux/2.6.12 i386 java/1.5.0_05)</example>
1101
+ <param pos="0" name="service.vendor" value="Mort Bay"/>
1102
+ <param pos="0" name="service.product" value="Jetty"/>
1103
+ <param pos="0" name="service.family" value="Jetty"/>
1104
+ <param pos="1" name="service.version"/>
1105
+ <param pos="0" name="service.cpe23" value="cpe:/a:mortbay:jetty:{service.version}"/>
1106
+ <param pos="2" name="jetty.info"/>
1107
+ </fingerprint>
1108
+ <fingerprint pattern="^Jetty\(([1-6]\S+)\)$">
1109
+ <description>Mort Bay Jetty</description>
1110
+ <example service.version="1.4.5">Jetty(1.4.5)</example>
1111
+ <example service.version="6.1.12.rc2">Jetty(6.1.12.rc2)</example>
1112
+ <param pos="0" name="service.vendor" value="Mort Bay"/>
1113
+ <param pos="0" name="service.product" value="Jetty"/>
1114
+ <param pos="0" name="service.family" value="Jetty"/>
1115
+ <param pos="1" name="service.version"/>
1116
+ <param pos="0" name="service.cpe23" value="cpe:/a:mortbay:jetty:{service.version}"/>
1117
+ </fingerprint>
1118
+ <!--
1119
+ Jetty moved to Eclipse.org at version 7, CVEs after this version are
1120
+ associated with Eclipse CPEs.
1121
+ -->
1122
+ <fingerprint pattern="^Jetty\((\S+)\)$">
1123
+ <description>Eclipse Jetty</description>
1124
+ <example service.version="7.6.9.v20130131">Jetty(7.6.9.v20130131)</example>
1125
+ <example service.version="8.1.10.v20130312">Jetty(8.1.10.v20130312)</example>
1126
+ <example service.version="9.4.z-SNAPSHOT">Jetty(9.4.z-SNAPSHOT)</example>
1127
+ <param pos="0" name="service.vendor" value="Eclipse"/>
1128
+ <param pos="0" name="service.product" value="Jetty"/>
1129
+ <param pos="0" name="service.family" value="Jetty"/>
1130
+ <param pos="1" name="service.version"/>
1131
+ <param pos="0" name="service.cpe23" value="cpe:/a:eclipse:jetty:{service.version}"/>
1132
+ </fingerprint>
1133
+ <fingerprint pattern="^(?i)squid/(\d+\.[\w.\-\+]+)$">
1134
+ <description>Squid Web Proxy with a version</description>
1135
+ <example service.version="2.3.STABLE1">Squid/2.3.STABLE1</example>
1136
+ <example service.version="4.4">squid/4.4</example>
1137
+ <example service.version="3.2.9-BZR">squid/3.2.9-BZR</example>
1138
+ <param pos="0" name="service.vendor" value="Squid Cache"/>
1139
+ <param pos="0" name="service.product" value="Squid"/>
1140
+ <param pos="0" name="service.family" value="Squid"/>
1141
+ <param pos="1" name="service.version"/>
1142
+ <param pos="0" name="service.cpe23" value="cpe:/a:squid-cache:squid:{service.version}"/>
1143
+ </fingerprint>
1144
+ <fingerprint pattern="^(?i)squid$">
1145
+ <description>Squid Web Proxy without a version</description>
1146
+ <example>Squid</example>
1147
+ <example>squid</example>
1148
+ <param pos="0" name="service.vendor" value="Squid Cache"/>
1149
+ <param pos="0" name="service.product" value="Squid"/>
1150
+ <param pos="0" name="service.family" value="Squid"/>
1151
+ <param pos="0" name="service.cpe23" value="cpe:/a:squid-cache:squid:-"/>
1152
+ </fingerprint>
1153
+ <fingerprint pattern="^thttpd/(\d\.[\w.]+)-MX\s*.*$">
1154
+ <description>thttpd with SSL support</description>
1155
+ <example>thttpd/2.19-MX Jan 24 2006</example>
1156
+ <param pos="0" name="service.product" value="thttpd"/>
1157
+ <param pos="0" name="service.family" value="thttpd"/>
1158
+ <param pos="1" name="service.version"/>
1159
+ <param pos="0" name="thttpd.mx-patch" value="enabled"/>
1160
+ </fingerprint>
1161
+ <fingerprint pattern="^thttpd(?:/(\d\.[\w.]+)\s*.*)?$">
1162
+ <description>thttpd</description>
1163
+ <example>thttpd</example>
1164
+ <example>thttpd/2.04 10aug98</example>
1165
+ <example>thttpd/2.20b</example>
1166
+ <example>thttpd/2.21b PHP/20030920</example>
1167
+ <example>thttpd/2.23beta1 26may2002</example>
1168
+ <param pos="0" name="service.product" value="thttpd"/>
1169
+ <param pos="0" name="service.family" value="thttpd"/>
1170
+ <param pos="1" name="service.version"/>
1171
+ </fingerprint>
1172
+ <fingerprint pattern="^lighttpd(?:/(\d[\d.]+))?.*$">
1173
+ <description>Lighttpd</description>
1174
+ <example>lighttpd</example>
1175
+ <example service.version="1.4.16">lighttpd/1.4.16</example>
1176
+ <example>lighttpd/1.3.7 (Mar 23 2007/16:00:15)</example>
1177
+ <param pos="0" name="service.product" value="lighttpd"/>
1178
+ <param pos="0" name="service.family" value="lighttpd"/>
1179
+ <param pos="1" name="service.version"/>
1180
+ </fingerprint>
1181
+ <fingerprint pattern="^nginx$">
1182
+ <description>nginx without version info</description>
1183
+ <example>nginx</example>
1184
+ <param pos="0" name="service.product" value="nginx"/>
1185
+ <param pos="0" name="service.family" value="nginx"/>
1186
+ <param pos="0" name="service.vendor" value="nginx"/>
1187
+ <param pos="0" name="service.cpe23" value="cpe:/a:nginx:nginx:-"/>
1188
+ </fingerprint>
1189
+ <fingerprint pattern="^nginx\/?(:?[\d.]+)?">
1190
+ <description>nginx with version info and/or mods</description>
1191
+ <example service.version="0.8.53">nginx/0.8.53 + Phusion Passenger 3.0.0 (mod_rails/mod_rack)</example>
1192
+ <example>nginx/0.8.53</example>
1193
+ <example>nginx + Phusion Passenger 5.1.11</example>
1194
+ <example>nginx + Phusion Passenger</example>
1195
+ <param pos="0" name="service.product" value="nginx"/>
1196
+ <param pos="0" name="service.family" value="nginx"/>
1197
+ <param pos="0" name="service.vendor" value="nginx"/>
1198
+ <param pos="1" name="service.version"/>
1199
+ <param pos="0" name="service.cpe23" value="cpe:/a:nginx:nginx:{service.version}"/>
1200
+ </fingerprint>
1201
+ <fingerprint pattern="^Lotus(?:-Domino)?(?:/|/0|/Release)?$">
1202
+ <description>IBM Lotus Notes/Domino with no useful version info</description>
1203
+ <example>Lotus</example>
1204
+ <example>Lotus-Domino</example>
1205
+ <example>Lotus-Domino/0</example>
1206
+ <example>Lotus-Domino/Release</example>
1207
+ <param pos="0" name="service.vendor" value="IBM"/>
1208
+ <param pos="0" name="service.product" value="Lotus Domino"/>
1209
+ <param pos="0" name="service.family" value="Lotus Domino"/>
1210
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_domino:-"/>
1211
+ </fingerprint>
1212
+ <fingerprint pattern="^Lotus(?:-Domino)?/(?:Release-?)?([4-7][\d.]+)\s*(?:.*)$">
1213
+ <description>IBM Lotus Notes/Domino with version info</description>
1214
+ <example>Lotus-Domino/5.0.8</example>
1215
+ <example>Lotus-Domino/Release-4.6.7(Intl)</example>
1216
+ <param pos="0" name="service.vendor" value="IBM"/>
1217
+ <param pos="0" name="service.product" value="Lotus Domino"/>
1218
+ <param pos="0" name="service.family" value="Lotus Domino"/>
1219
+ <param pos="1" name="service.version"/>
1220
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_domino:{service.version}"/>
1221
+ </fingerprint>
1222
+ <fingerprint pattern="^WebLogic (?:WebLogic )?Server (\d+\.\d+(?:\s+SP\d+)?)\s+.*$">
1223
+ <description>BEA WebLogic</description>
1224
+ <example service.version="8.1 SP3">WebLogic Server 8.1 SP3 Tue Jun 29 23:11:19 PDT 2004 404973</example>
1225
+ <example service.version="7.0 SP4">WebLogic Server 7.0 SP4 Tue Aug 12 11:22:26 PDT 2003</example>
1226
+ <example service.version="6.1 SP4">WebLogic WebLogic Server 6.1 SP4 11/08/2002 21:50:43 #221641</example>
1227
+ <param pos="0" name="service.vendor" value="BEA"/>
1228
+ <param pos="0" name="service.product" value="WebLogic"/>
1229
+ <param pos="0" name="service.family" value="WebLogic"/>
1230
+ <param pos="1" name="service.version"/>
1231
+ <param pos="0" name="service.cpe23" value="cpe:/a:bea:weblogic_server:{service.version}"/>
1232
+ </fingerprint>
1233
+ <fingerprint pattern="^WebSphere Application Server/(\d+\.\d+)$">
1234
+ <description>IBM WebSphere</description>
1235
+ <example service.version="5.0">WebSphere Application Server/5.0</example>
1236
+ <example service.version="6.1">WebSphere Application Server/6.1</example>
1237
+ <param pos="0" name="service.vendor" value="IBM"/>
1238
+ <param pos="0" name="service.product" value="WebSphere"/>
1239
+ <param pos="0" name="service.family" value="WebSphere"/>
1240
+ <param pos="1" name="service.version"/>
1241
+ </fingerprint>
1242
+ <fingerprint pattern="^Resin/(\S+)$">
1243
+ <description>Caucho Resin</description>
1244
+ <example>Resin/2.1.13</example>
1245
+ <example>Resin/3.0.23</example>
1246
+ <example>Resin/2.1.s030827</example>
1247
+ <param pos="0" name="service.vendor" value="Caucho"/>
1248
+ <param pos="0" name="service.product" value="Resin"/>
1249
+ <param pos="0" name="service.family" value="Resin"/>
1250
+ <param pos="1" name="service.version"/>
1251
+ <param pos="0" name="service.cpe23" value="cpe:/a:caucho:resin:{service.version}"/>
1252
+ </fingerprint>
1253
+ <fingerprint pattern="^Ipswitch-IMail/(\d\.\d+)$">
1254
+ <description>Ipswitch IMail Server</description>
1255
+ <example>Ipswitch-IMail/5.08</example>
1256
+ <example>Ipswitch-IMail/7.07</example>
1257
+ <example>Ipswitch-IMail/8.05</example>
1258
+ <param pos="0" name="service.vendor" value="Ipswitch"/>
1259
+ <param pos="0" name="service.product" value="IMail Server"/>
1260
+ <param pos="0" name="service.family" value="IMail Server"/>
1261
+ <param pos="1" name="service.version"/>
1262
+ <param pos="0" name="service.cpe23" value="cpe:/a:ipswitch:imail_server:{service.version}"/>
1263
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1264
+ <param pos="0" name="os.family" value="Windows"/>
1265
+ <param pos="0" name="os.product" value="Windows"/>
1266
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1267
+ </fingerprint>
1268
+ <fingerprint pattern="^Abyss/(\d\.[\d.]+)-X1-Win32 AbyssLib/(?:\d\.[\d.]+)$">
1269
+ <description>Aprelium Technologies Abyss Web Server X1 (free personal edition) on Windows</description>
1270
+ <example>Abyss/2.0.0.20-X1-Win32 AbyssLib/2.0.0.20</example>
1271
+ <example>Abyss/2.3.2-X1-Win32 AbyssLib/2.3.2</example>
1272
+ <param pos="0" name="service.vendor" value="Aprelium Technologies"/>
1273
+ <param pos="0" name="service.product" value="Abyss Web Server X1"/>
1274
+ <param pos="0" name="service.family" value="Abyss Web Server"/>
1275
+ <param pos="1" name="service.version"/>
1276
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1277
+ <param pos="0" name="os.family" value="Windows"/>
1278
+ <param pos="0" name="os.product" value="Windows"/>
1279
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1280
+ </fingerprint>
1281
+ <fingerprint pattern="^Abyss/(\d\.[\d.]+)-X2-Win32 AbyssLib/(?:\d\.[\d.]+)$">
1282
+ <description>Aprelium Technologies Abyss Web Server X2 (licensed professional edition) on Windows</description>
1283
+ <param pos="0" name="service.vendor" value="Aprelium Technologies"/>
1284
+ <param pos="0" name="service.product" value="Abyss Web Server X1"/>
1285
+ <param pos="0" name="service.family" value="Abyss Web Server"/>
1286
+ <param pos="1" name="service.version"/>
1287
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1288
+ <param pos="0" name="os.family" value="Windows"/>
1289
+ <param pos="0" name="os.product" value="Windows"/>
1290
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1291
+ </fingerprint>
1292
+ <fingerprint pattern="^Microsoft (Commerce Server\s*(?:2002|2007)?, (?:Enterprise|Standard|Evaluation|Developer) Edition)$">
1293
+ <description>Microsoft Commerce Server</description>
1294
+ <param pos="0" name="service.vendor" value="Microsoft"/>
1295
+ <param pos="1" name="service.product"/>
1296
+ <param pos="0" name="service.family" value="Commerce Server"/>
1297
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1298
+ <param pos="0" name="os.family" value="Windows"/>
1299
+ <param pos="0" name="os.product" value="Windows"/>
1300
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1301
+ </fingerprint>
1302
+ <fingerprint pattern="^NetWare-Enterprise-Web-Server/(\d+\.\d+)$">
1303
+ <description>NetWare Enterprise Web Server (runs on NetWare 5.1)</description>
1304
+ <param pos="0" name="service.vendor" value="Novell"/>
1305
+ <param pos="0" name="service.product" value="NetWare Enterprise Web Server"/>
1306
+ <param pos="0" name="service.family" value="NetWare Enterprise Web Server"/>
1307
+ <param pos="1" name="service.version"/>
1308
+ <param pos="0" name="service.cpe23" value="cpe:/a:novell:netware_enterprise_web_server:{service.version}"/>
1309
+ <param pos="0" name="os.certainty" value="0.9"/>
1310
+ <param pos="0" name="os.vendor" value="Novell"/>
1311
+ <param pos="0" name="os.family" value="NetWare"/>
1312
+ <param pos="0" name="os.product" value="NetWare"/>
1313
+ <param pos="1" name="os.version"/>
1314
+ <param pos="0" name="os.cpe23" value="cpe:/o:novell:netware:{os.version}"/>
1315
+ </fingerprint>
1316
+ <fingerprint pattern="^NetWare HTTP Stack$">
1317
+ <description>NetWare HTTP stack (runs on 6.0 and 6.5)</description>
1318
+ <param pos="0" name="service.vendor" value="Novell"/>
1319
+ <param pos="0" name="service.product" value="NetWare HTTP Stack"/>
1320
+ <param pos="0" name="service.family" value="NetWare HTTP Stack"/>
1321
+ <param pos="0" name="os.vendor" value="Novell"/>
1322
+ <param pos="0" name="os.family" value="NetWare"/>
1323
+ <param pos="0" name="os.product" value="NetWare"/>
1324
+ <param pos="0" name="os.cpe23" value="cpe:/o:novell:netware:-"/>
1325
+ </fingerprint>
1326
+ <fingerprint pattern="^Novell-HTTP-Server/3.1R1$">
1327
+ <description>NetWare HTTP Server (runs on NetWare 4.11)</description>
1328
+ <param pos="0" name="service.vendor" value="Novell"/>
1329
+ <param pos="0" name="service.product" value="NetWare HTTP Server"/>
1330
+ <param pos="0" name="service.family" value="NetWare HTTP Server"/>
1331
+ <param pos="0" name="service.version" value="3.1R1"/>
1332
+ <param pos="0" name="os.certainty" value="0.9"/>
1333
+ <param pos="0" name="os.vendor" value="Novell"/>
1334
+ <param pos="0" name="os.family" value="NetWare"/>
1335
+ <param pos="0" name="os.product" value="NetWare"/>
1336
+ <param pos="0" name="os.version" value="4.11"/>
1337
+ <param pos="0" name="os.cpe23" value="cpe:/o:novell:netware:4.11"/>
1338
+ </fingerprint>
1339
+ <fingerprint pattern="^Novell-HTTP-Server/2.51R1$">
1340
+ <description>NetWare HTTP Server (runs on NetWare 4.1)</description>
1341
+ <param pos="0" name="service.vendor" value="Novell"/>
1342
+ <param pos="0" name="service.product" value="NetWare HTTP Server"/>
1343
+ <param pos="0" name="service.family" value="NetWare HTTP Server"/>
1344
+ <param pos="0" name="service.version" value="2.51R1"/>
1345
+ <param pos="0" name="os.certainty" value="0.9"/>
1346
+ <param pos="0" name="os.vendor" value="Novell"/>
1347
+ <param pos="0" name="os.family" value="NetWare"/>
1348
+ <param pos="0" name="os.product" value="NetWare"/>
1349
+ <param pos="0" name="os.version" value="4.1"/>
1350
+ <param pos="0" name="os.cpe23" value="cpe:/o:novell:netware:4.1"/>
1351
+ </fingerprint>
1352
+ <fingerprint pattern="^Netscape-FastTrack/(\d+\.[\w\s.]+)$">
1353
+ <description>Netscape FastTrack Server</description>
1354
+ <param pos="0" name="service.vendor" value="Netscape"/>
1355
+ <param pos="0" name="service.product" value="FastTrack Server"/>
1356
+ <param pos="0" name="service.family" value="FastTrack Server"/>
1357
+ <param pos="1" name="service.version"/>
1358
+ <param pos="0" name="service.cpe23" value="cpe:/a:netscape:fasttrack_server:{service.version}"/>
1359
+ </fingerprint>
1360
+ <fingerprint pattern="^Netscape-Commerce/(\d+\.[\w\s.]+)$">
1361
+ <description>Netscape Commerce Server</description>
1362
+ <param pos="0" name="service.vendor" value="Netscape"/>
1363
+ <param pos="0" name="service.product" value="Commerce Server"/>
1364
+ <param pos="0" name="service.family" value="Commerce Server"/>
1365
+ <param pos="1" name="service.version"/>
1366
+ <param pos="0" name="service.cpe23" value="cpe:/a:netscape:commerce_server:{service.version}"/>
1367
+ </fingerprint>
1368
+ <!--
1369
+ TODO
1370
+
1371
+ "Powered by PowerBSD - Apache"
1372
+ "SSE(Apache)"
1373
+ -->
1374
+ <fingerprint pattern="^SAP J2EE Engine/(\d+\.\d+)$">
1375
+ <description>SAP NetWeaver Web AS (Application Server)</description>
1376
+ <param pos="0" name="service.vendor" value="SAP"/>
1377
+ <param pos="0" name="service.product" value="NetWeaver Web AS"/>
1378
+ <param pos="0" name="service.family" value="NetWeaver"/>
1379
+ <param pos="1" name="service.version"/>
1380
+ </fingerprint>
1381
+ <fingerprint pattern="^OpenVPN-AS$">
1382
+ <description>OpenVPN Access Server</description>
1383
+ <example>OpenVPN-AS</example>
1384
+ <param pos="0" name="service.vendor" value="OpenVPN"/>
1385
+ <param pos="0" name="service.product" value="Access Server"/>
1386
+ <param pos="0" name="hw.device" value="VPN"/>
1387
+ </fingerprint>
1388
+ <fingerprint pattern="^SonicWALL (SSL-?VPN(?: (?:\d+))?) Web Server\.?$">
1389
+ <description>SonicWALL SSL-VPN device</description>
1390
+ <example>SonicWALL SSLVPN Web Server</example>
1391
+ <example>SonicWALL SSL-VPN Web Server</example>
1392
+ <param pos="0" name="service.vendor" value="SonicWALL"/>
1393
+ <param pos="0" name="service.product" value="SSL-VPN"/>
1394
+ <param pos="0" name="service.family" value="SSL-VPN"/>
1395
+ <param pos="0" name="os.vendor" value="SonicWALL"/>
1396
+ <param pos="0" name="os.device" value="VPN"/>
1397
+ <param pos="0" name="os.family" value="SSL-VPN"/>
1398
+ <param pos="1" name="os.product"/>
1399
+ <param pos="0" name="hw.vendor" value="SonicWALL"/>
1400
+ <param pos="0" name="hw.device" value="VPN"/>
1401
+ </fingerprint>
1402
+ <fingerprint pattern="^SonicWALL$">
1403
+ <description>SonicWALL device</description>
1404
+ <example>SonicWALL</example>
1405
+ <param pos="0" name="service.vendor" value="SonicWALL"/>
1406
+ <param pos="0" name="service.product" value="HTTP"/>
1407
+ <param pos="0" name="os.vendor" value="SonicWALL"/>
1408
+ </fingerprint>
1409
+ <fingerprint pattern="^NetCache appliance \(NetApp/+(\d+\.\d+[\w.]+)\)$">
1410
+ <description>NetCache appliance (product line formerly owned by Network Appliances, now owned by Blue Coat Systems).</description>
1411
+ <example service.version="5.3.1R3">NetCache appliance (NetApp/5.3.1R3)</example>
1412
+ <example>NetCache appliance (NetApp/5.4R2D2)</example>
1413
+ <example>NetCache appliance (NetApp/5.6.1D22)</example>
1414
+ <example>NetCache appliance (NetApp/6.0.2P1)</example>
1415
+ <example>NetCache appliance (NetApp/6.0.4)</example>
1416
+ <example>NetCache appliance (NetApp/6.1RC2)</example>
1417
+ <param pos="0" name="service.vendor" value="Blue Coat"/>
1418
+ <param pos="0" name="service.family" value="NetCache"/>
1419
+ <param pos="0" name="service.product" value="NetCache"/>
1420
+ <param pos="1" name="service.version"/>
1421
+ <param pos="0" name="os.vendor" value="Blue Coat"/>
1422
+ <param pos="0" name="os.device" value="Web proxy"/>
1423
+ <param pos="0" name="os.family" value="NetCache"/>
1424
+ <param pos="0" name="os.product" value="NetCache"/>
1425
+ </fingerprint>
1426
+ <fingerprint pattern="^NetApp/+(.*)$">
1427
+ <description>NetApp file servers</description>
1428
+ <example>NetApp/7.3.4P1</example>
1429
+ <example>NetApp/7.2.1.1</example>
1430
+ <example>NetApp//8.1RC2</example>
1431
+ <param pos="0" name="os.certainty" value="0.9"/>
1432
+ <param pos="0" name="os.vendor" value="NetApp"/>
1433
+ <param pos="0" name="os.family" value="Data ONTAP"/>
1434
+ <param pos="0" name="os.product" value="Data ONTAP"/>
1435
+ <param pos="0" name="os.device" value="File server"/>
1436
+ <param pos="1" name="os.version"/>
1437
+ <param pos="0" name="os.cpe23" value="cpe:/o:netapp:data_ontap:{os.version}"/>
1438
+ </fingerprint>
1439
+ <fingerprint pattern="^BlueCoat-Security-Appliance$">
1440
+ <description>Blue Coat security appliance</description>
1441
+ <example>BlueCoat-Security-Appliance</example>
1442
+ <param pos="0" name="os.vendor" value="Blue Coat"/>
1443
+ <param pos="0" name="os.device" value="Web proxy"/>
1444
+ <param pos="0" name="os.family" value="Blue Coat"/>
1445
+ <param pos="0" name="os.product" value="Appliance"/>
1446
+ </fingerprint>
1447
+ <fingerprint pattern="^(?:BigIP|BIG-IP)$">
1448
+ <description>F5 BIG-IP</description>
1449
+ <param pos="0" name="service.vendor" value="F5"/>
1450
+ <param pos="0" name="service.product" value="BIG-IP LTM"/>
1451
+ <param pos="0" name="service.family" value="BIG-IP"/>
1452
+ <param pos="0" name="service.cpe23" value="cpe:/a:f5:big-ip_local_traffic_manager:-"/>
1453
+ <param pos="0" name="os.family" value="Linux"/>
1454
+ <param pos="0" name="os.product" value="Linux"/>
1455
+ </fingerprint>
1456
+ <fingerprint pattern="^TargetWeb/[\d\.]+ \(TargetOS\)$">
1457
+ <description>Mercurity Security TargetOS</description>
1458
+ <example>TargetWeb/2011.0 (TargetOS)</example>
1459
+ <param pos="0" name="hw.vendor" value="Mercury Security"/>
1460
+ <param pos="0" name="hw.device" value="Access Controller"/>
1461
+ <param pos="0" name="hw.product" value="EP-series"/>
1462
+ </fingerprint>
1463
+ <fingerprint pattern="^Foundry Networks(?:/(\d+\.\d+))?$">
1464
+ <description>Foundry Networks device (though not sure which)</description>
1465
+ <param pos="0" name="service.vendor" value="Foundry"/>
1466
+ <param pos="0" name="service.product" value="HTTP"/>
1467
+ <param pos="1" name="service.version"/>
1468
+ <param pos="0" name="os.vendor" value="Foundry"/>
1469
+ </fingerprint>
1470
+ <fingerprint pattern="^HP-Chai(?:Server|SOE)/(\d+\.\d+)$">
1471
+ <description>HP Printer running the Chai embedded web server</description>
1472
+ <example>HP-ChaiServer/2.2</example>
1473
+ <example>HP-ChaiSOE/1.0</example>
1474
+ <param pos="0" name="service.vendor" value="HP"/>
1475
+ <param pos="0" name="service.product" value="JetDirect"/>
1476
+ <param pos="0" name="service.family" value="JetDirect"/>
1477
+ <param pos="1" name="service.version"/>
1478
+ <param pos="0" name="os.vendor" value="HP"/>
1479
+ <param pos="0" name="os.device" value="Printer"/>
1480
+ <param pos="0" name="os.family" value="JetDirect"/>
1481
+ <param pos="0" name="os.product" value="JetDirect"/>
1482
+ <param pos="0" name="hw.vendor" value="HP"/>
1483
+ <param pos="0" name="hw.family" value="JetDirect"/>
1484
+ <param pos="0" name="hw.product" value="JetDirect"/>
1485
+ <param pos="0" name="hw.device" value="Printer"/>
1486
+ </fingerprint>
1487
+ <fingerprint pattern="^HP HTTP Server; (?:Hewlett-Packard )?HP ((\S+) \S+)">
1488
+ <description>HP Printer</description>
1489
+ <example os.product="Photosmart C309a" os.family="Photosmart">HP HTTP Server; HP Photosmart C309a series - CC335A; Serial Number: abc123; Vader Built:Wed Apr 15, 2009 11:40:58AM {abc123, ASIC id 0x00280004}</example>
1490
+ <example os.product="Officejet 6500" os.family="Officejet">HP HTTP Server; HP Officejet 6500 E709n - CB057A; Serial Number: abc123; Rainbow Built:Sat Dec 13, 2008 10:58:21AM {abc123, ASIC id 0x00ffc2105}</example>
1491
+ <example os.product="Designjet T520" os.family="Designjet">HP HTTP Server; Hewlett-Packard HP Designjet T520 36in - ABC123; Serial Number: 0123456789; Built:Tue Sep 09, 2014 08:32:54AM {012345678901}</example>
1492
+ <param pos="0" name="service.vendor" value="HP"/>
1493
+ <param pos="0" name="service.product" value="JetDirect"/>
1494
+ <param pos="0" name="service.family" value="JetDirect"/>
1495
+ <param pos="0" name="os.vendor" value="HP"/>
1496
+ <param pos="0" name="os.device" value="Printer"/>
1497
+ <param pos="2" name="os.family"/>
1498
+ <param pos="1" name="os.product"/>
1499
+ <param pos="0" name="hw.vendor" value="HP"/>
1500
+ <param pos="0" name="hw.family" value="JetDirect"/>
1501
+ <param pos="0" name="hw.product" value="JetDirect"/>
1502
+ <param pos="0" name="hw.device" value="Printer"/>
1503
+ </fingerprint>
1504
+ <fingerprint pattern="^HTTP/1\.0$">
1505
+ <description>Old HP printers identify themselves as "HTTP/1.0"</description>
1506
+ <param pos="0" name="service.vendor" value="HP"/>
1507
+ <param pos="0" name="service.product" value="JetDirect"/>
1508
+ <param pos="0" name="service.family" value="JetDirect"/>
1509
+ <param pos="0" name="os.vendor" value="HP"/>
1510
+ <param pos="0" name="os.device" value="Printer"/>
1511
+ <param pos="0" name="os.family" value="JetDirect"/>
1512
+ <param pos="0" name="os.product" value="JetDirect"/>
1513
+ <param pos="0" name="hw.vendor" value="HP"/>
1514
+ <param pos="0" name="hw.family" value="JetDirect"/>
1515
+ <param pos="0" name="hw.product" value="JetDirect"/>
1516
+ <param pos="0" name="hw.device" value="Printer"/>
1517
+ </fingerprint>
1518
+ <fingerprint pattern="^(?:Allegro-Software-)?RomPager/\s*(\S+)">
1519
+ <description>Embedded HTTP server used by many vendors and device
1520
+ types, including APC, 3Com, Andover Controls, Cisco VoIP, D-Link,
1521
+ Extreme Networks, Foundry Networks, Konica Minolta, Kronos
1522
+ Timekeeper, McDATA, Netopia, Nortel Networks, Power Measurement Ltd,
1523
+ and Xerox.</description>
1524
+ <example service.version="4.01">Allegro-Software-RomPager/4.01</example>
1525
+ <example service.version="4.07">RomPager/4.07 UPnP/1.0</example>
1526
+ <example service.version="4.30b3">Allegro-Software-RomPager/4.30b3</example>
1527
+ <example service.version="2.10">Allegro-Software-RomPager/ 2.10</example>
1528
+ <param pos="0" name="service.vendor" value="Allegro Software"/>
1529
+ <param pos="0" name="service.product" value="RomPager"/>
1530
+ <param pos="1" name="service.version"/>
1531
+ </fingerprint>
1532
+ <fingerprint pattern="^YAMAHA-RT$">
1533
+ <description>Yamaha RT series routers</description>
1534
+ <param pos="0" name="service.vendor" value="Yamaha"/>
1535
+ <param pos="0" name="service.product" value="RT"/>
1536
+ <param pos="0" name="service.family" value="RT"/>
1537
+ <param pos="0" name="os.vendor" value="Yamaha"/>
1538
+ <param pos="0" name="os.device" value="Router"/>
1539
+ <param pos="0" name="os.family" value="RT"/>
1540
+ <param pos="0" name="os.product" value="RT"/>
1541
+ <param pos="0" name="hw.vendor" value="Yamaha"/>
1542
+ <param pos="0" name="hw.device" value="Router"/>
1543
+ </fingerprint>
1544
+ <fingerprint pattern="^(?:Canon Http|CANON HTTP) Server (?:Ver)?(?:\d+\.\d+)$">
1545
+ <description>Canon Multifunction Printer/Copiers</description>
1546
+ <param pos="0" name="service.vendor" value="Canon"/>
1547
+ <param pos="0" name="service.product" value="HTTP"/>
1548
+ <param pos="0" name="os.vendor" value="Canon"/>
1549
+ <param pos="0" name="hw.vendor" value="Canon"/>
1550
+ <param pos="0" name="hw.device" value="Multifunction Device"/>
1551
+ </fingerprint>
1552
+ <fingerprint pattern=".*Linksys.*">
1553
+ <description>Linksys Wireless Access Point</description>
1554
+ <param pos="0" name="os.vendor" value="Linksys"/>
1555
+ <param pos="0" name="os.device" value="WAP"/>
1556
+ <param pos="0" name="hw.vendor" value="Linksys"/>
1557
+ <param pos="0" name="hw.device" value="WAP"/>
1558
+ </fingerprint>
1559
+ <fingerprint pattern="^cisco-IOS$">
1560
+ <description>Cisco IOS</description>
1561
+ <example>cisco-IOS</example>
1562
+ <param pos="0" name="service.vendor" value="Cisco"/>
1563
+ <param pos="0" name="service.family" value="IOS"/>
1564
+ <param pos="0" name="service.product" value="IOS"/>
1565
+ <param pos="0" name="service.cpe23" value="cpe:/a:cisco:ios:-"/>
1566
+ <param pos="0" name="os.vendor" value="Cisco"/>
1567
+ <param pos="0" name="os.family" value="IOS"/>
1568
+ <param pos="0" name="os.product" value="IOS"/>
1569
+ <param pos="0" name="os.certainty" value="0.8"/>
1570
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:-"/>
1571
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1572
+ </fingerprint>
1573
+ <fingerprint pattern="^cisco-IOS/([^\s]+) HTTP-server/.*$">
1574
+ <description>Cisco IOS with version information</description>
1575
+ <example>cisco-IOS/12.1 HTTP-server/1.0(1)</example>
1576
+ <param pos="0" name="service.vendor" value="Cisco"/>
1577
+ <param pos="0" name="service.family" value="IOS"/>
1578
+ <param pos="0" name="service.product" value="IOS"/>
1579
+ <param pos="0" name="service.cpe23" value="cpe:/a:cisco:ios:-"/>
1580
+ <param pos="0" name="os.vendor" value="Cisco"/>
1581
+ <param pos="0" name="os.family" value="IOS"/>
1582
+ <param pos="0" name="os.product" value="IOS"/>
1583
+ <param pos="1" name="os.version"/>
1584
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:{os.version}"/>
1585
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1586
+ </fingerprint>
1587
+ <fingerprint pattern="^Cisco AWARE (.*)$">
1588
+ <description>Cisco ASA</description>
1589
+ <example>Cisco AWARE 2.0</example>
1590
+ <param pos="1" name="service.version"/>
1591
+ <param pos="0" name="service.vendor" value="Cisco"/>
1592
+ <param pos="0" name="service.product" value="HTTP"/>
1593
+ <param pos="0" name="os.vendor" value="Cisco"/>
1594
+ <param pos="0" name="os.family" value="Adaptive Security Appliance"/>
1595
+ <param pos="0" name="os.product" value="Adaptive Security Appliance"/>
1596
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:adaptive_security_appliance"/>
1597
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1598
+ <param pos="0" name="hw.family" value="Adaptive Security Appliance"/>
1599
+ <param pos="0" name="hw.product" value="Adaptive Security Appliance"/>
1600
+ <param pos="0" name="hw.device" value="Firewall"/>
1601
+ <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:adaptive_security_appliance:-"/>
1602
+ </fingerprint>
1603
+ <fingerprint pattern="^CradlepointHTTPService/([\d\.]+)$">
1604
+ <description>Cradlepoint HTTP service</description>
1605
+ <example service.version="1.0.0">CradlepointHTTPService/1.0.0</example>
1606
+ <param pos="1" name="service.version"/>
1607
+ <param pos="0" name="service.vendor" value="Cradlepoint"/>
1608
+ <param pos="0" name="service.product" value="HTTP"/>
1609
+ </fingerprint>
1610
+ <fingerprint pattern="^DesktopAuthority/(.*)$">
1611
+ <description>ScriptLogic DesktopAuthority</description>
1612
+ <param pos="1" name="service.version"/>
1613
+ <param pos="0" name="service.vendor" value="ScriptLogic"/>
1614
+ <param pos="0" name="service.product" value="Desktop Authority"/>
1615
+ <param pos="0" name="service.family" value="Desktop Authority"/>
1616
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1617
+ <param pos="0" name="os.family" value="Windows"/>
1618
+ <param pos="0" name="os.product" value="Windows"/>
1619
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1620
+ </fingerprint>
1621
+ <fingerprint pattern="^Agent-ListenServer-HttpSvr/.*$">
1622
+ <description>McAfee ePolicy Orchestrator</description>
1623
+ <param pos="0" name="service.vendor" value="McAfee"/>
1624
+ <param pos="0" name="service.product" value="ePolicy Orchestrator"/>
1625
+ <param pos="0" name="service.family" value="ePolicy Orchestrator"/>
1626
+ <param pos="0" name="service.cpe23" value="cpe:/a:mcafee:epolicy_orchestrator:-"/>
1627
+ </fingerprint>
1628
+ <fingerprint pattern="^LANDesk Management Agent/.*$">
1629
+ <description>LANDesk Management Agent</description>
1630
+ <param pos="0" name="service.vendor" value="LANDesk"/>
1631
+ <param pos="0" name="service.product" value="Management Agent"/>
1632
+ <param pos="0" name="service.family" value="Management Agent"/>
1633
+ <param pos="0" name="service.cpe23" value="cpe:/a:landesk:management_agent:-"/>
1634
+ </fingerprint>
1635
+ <fingerprint pattern="^EWS-NIC\d/(\S+)$">
1636
+ <description>Xerox Embedded Web Server (EWS)</description>
1637
+ <example service.version="6.31">EWS-NIC3/6.31</example>
1638
+ <example service.version="13.40">EWS-NIC4/13.40</example>
1639
+ <example service.version="13.39">EWS-NIC4/13.39</example>
1640
+ <param pos="0" name="service.vendor" value="Xerox"/>
1641
+ <param pos="0" name="service.family" value="EWS"/>
1642
+ <param pos="0" name="service.product" value="EWS"/>
1643
+ <param pos="1" name="service.version"/>
1644
+ <param pos="0" name="os.vendor" value="Xerox"/>
1645
+ <param pos="0" name="os.device" value="Printer"/>
1646
+ <param pos="0" name="hw.vendor" value="Xerox"/>
1647
+ <param pos="0" name="hw.device" value="Printer"/>
1648
+ </fingerprint>
1649
+ <fingerprint pattern="^Adaptec ASM (\S+)$">
1650
+ <description>Adaptec - Adaptec Storage Manager (runs on Windows Only)</description>
1651
+ <param pos="0" name="service.vendor" value="Adaptec"/>
1652
+ <param pos="0" name="service.family" value="ASM"/>
1653
+ <param pos="0" name="service.product" value="ASM"/>
1654
+ <param pos="1" name="service.version"/>
1655
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1656
+ <param pos="0" name="os.family" value="Windows"/>
1657
+ <param pos="0" name="os.product" value="Windows"/>
1658
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1659
+ </fingerprint>
1660
+ <fingerprint pattern="^JRun Web Server$">
1661
+ <description>Macromedia (formerly Allaire) JRun</description>
1662
+ <param pos="0" name="service.vendor" value="Macromedia"/>
1663
+ <param pos="0" name="service.family" value="JRun"/>
1664
+ <param pos="0" name="service.product" value="JRun"/>
1665
+ <param pos="0" name="service.cpe23" value="cpe:/a:macromedia:jrun:-"/>
1666
+ </fingerprint>
1667
+ <fingerprint pattern="^(?:Raptor )?Simple, Secure Web Server ([\d.]+)$">
1668
+ <description>Symantec Raptor Firewall</description>
1669
+ <example>Simple, Secure Web Server 1.1</example>
1670
+ <example>Raptor Simple, Secure Web Server 1.0</example>
1671
+ <param pos="0" name="os.vendor" value="Symantec"/>
1672
+ <param pos="0" name="os.family" value="Raptor"/>
1673
+ <param pos="0" name="os.device" value="Firewall"/>
1674
+ <param pos="0" name="os.product" value="Raptor"/>
1675
+ <param pos="1" name="os.version"/>
1676
+ </fingerprint>
1677
+ <fingerprint pattern="^IPG(\d+)$">
1678
+ <description>Systech Internet Payment Gateway</description>
1679
+ <example hw.model="8000">IPG8000</example>
1680
+ <param pos="0" name="hw.vendor" value="Systech"/>
1681
+ <param pos="0" name="hw.device" value="Telecom"/>
1682
+ <param pos="0" name="hw.product" value="Internet Payment Gateway"/>
1683
+ <param pos="1" name="hw.model"/>
1684
+ </fingerprint>
1685
+ <fingerprint pattern="^NS_(\d\.\d)$">
1686
+ <description>Citrix NetScaler</description>
1687
+ <example>NS_6.1</example>
1688
+ <param pos="0" name="os.vendor" value="Citrix"/>
1689
+ <param pos="0" name="os.family" value="NetScaler"/>
1690
+ <param pos="0" name="os.device" value="Network Management Device"/>
1691
+ <param pos="0" name="os.product" value="NetScaler"/>
1692
+ <param pos="1" name="os.version"/>
1693
+ </fingerprint>
1694
+ <fingerprint pattern="^Rumpus$">
1695
+ <description>Rumpus FTP Server, Web File Manager interface</description>
1696
+ <example>Rumpus</example>
1697
+ <param pos="0" name="os.vendor" value="Apple"/>
1698
+ <param pos="0" name="os.family" value="Mac OS X"/>
1699
+ <param pos="0" name="os.product" value="Mac OS X"/>
1700
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:-"/>
1701
+ </fingerprint>
1702
+ <fingerprint pattern="^servermgrd$">
1703
+ <description>Mac OS X Server administrative daemon</description>
1704
+ <example>servermgrd</example>
1705
+ <param pos="0" name="os.vendor" value="Apple"/>
1706
+ <param pos="0" name="os.family" value="Mac OS X"/>
1707
+ <param pos="0" name="os.product" value="Mac OS X"/>
1708
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:-"/>
1709
+ </fingerprint>
1710
+ <fingerprint pattern="^(RMC Webserver|RAC_ONE_HTTP) (\d\.\d)$">
1711
+ <description>Dell Remote Access Controller</description>
1712
+ <param pos="0" name="os.vendor" value="Dell"/>
1713
+ <param pos="0" name="os.family" value="Dell Remote Access Controller"/>
1714
+ <param pos="0" name="os.product" value="Dell Remote Access Controller"/>
1715
+ <param pos="0" name="service.vendor" value="Dell"/>
1716
+ <param pos="0" name="service.family" value="Remote Access Controller"/>
1717
+ <param pos="1" name="service.product"/>
1718
+ <param pos="2" name="service.version"/>
1719
+ </fingerprint>
1720
+ <fingerprint pattern="^Xerox_MicroServer/Xerox11$">
1721
+ <description>Xerox Document Centre</description>
1722
+ <param pos="0" name="os.vendor" value="Xerox"/>
1723
+ <param pos="0" name="os.family" value="Document Centre"/>
1724
+ <param pos="0" name="os.product" value="Document Centre"/>
1725
+ <param pos="0" name="os.device" value="Printer"/>
1726
+ <param pos="0" name="hw.vendor" value="Xerox"/>
1727
+ <param pos="0" name="hw.family" value="Document Centre"/>
1728
+ <param pos="0" name="hw.product" value="Document Centre"/>
1729
+ <param pos="0" name="hw.device" value="Printer"/>
1730
+ </fingerprint>
1731
+ <fingerprint pattern="^TSM_HTTP/\d\.\d$">
1732
+ <description>IBM Tivoli Storage Manager</description>
1733
+ <param pos="0" name="service.vendor" value="IBM"/>
1734
+ <param pos="0" name="service.family" value="Tivoli"/>
1735
+ <param pos="0" name="service.product" value="Tivoli Storage Manager"/>
1736
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:tivoli_storage_manager:-"/>
1737
+ </fingerprint>
1738
+ <fingerprint pattern="^D-Link MiniAVServer$">
1739
+ <description>D-Link embedded web server for web cams</description>
1740
+ <param pos="0" name="os.vendor" value="D-Link"/>
1741
+ <param pos="0" name="os.device" value="Web cam"/>
1742
+ </fingerprint>
1743
+ <fingerprint pattern="^ListManagerWeb/(\S+) .*$">
1744
+ <description>Lyris ListManager</description>
1745
+ <example>ListManagerWeb/8.8a (based on Tcl-Webserver/3.4.2)</example>
1746
+ <param pos="0" name="service.vendor" value="Lyris"/>
1747
+ <param pos="0" name="service.product" value="ListManager"/>
1748
+ <param pos="1" name="service.version"/>
1749
+ </fingerprint>
1750
+ <fingerprint pattern="^kHTTPd (\S+)" certainty="0.50">
1751
+ <description>TUX web server, an in-kernel Linux HTTP Accelerator</description>
1752
+ <example>kHTTPd 0.1.6</example>
1753
+ <param pos="0" name="service.product" value="TUX Web Server"/>
1754
+ <param pos="1" name="service.version"/>
1755
+ <param pos="0" name="os.vendor" value="Linux"/>
1756
+ <param pos="0" name="os.family" value="Linux"/>
1757
+ <param pos="0" name="os.product" value="Linux"/>
1758
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:-"/>
1759
+ </fingerprint>
1760
+ <fingerprint pattern="^RealVNC/(?:\S+)$">
1761
+ <description>RealVNC built-in webserver</description>
1762
+ <example>RealVNC/4.0</example>
1763
+ <param pos="0" name="service.vendor" value="RealVNC Ltd."/>
1764
+ <param pos="0" name="service.product" value="RealVNC"/>
1765
+ <param pos="0" name="service.cpe23" value="cpe:/a:realvnc:realvnc:-"/>
1766
+ </fingerprint>
1767
+ <fingerprint pattern="^SecureTransport (\d+[\d\.]+) \(build: (\d+)\)$">
1768
+ <description>AxWay SecureTransport</description>
1769
+ <example>SecureTransport 5.3.6 (build: 412)</example>
1770
+ <param pos="0" name="service.vendor" value="Axway"/>
1771
+ <param pos="0" name="service.product" value="SecureTransport"/>
1772
+ <param pos="0" name="service.cpe23" value="cpe:/a:realvnc:realvnc:{service.version}"/>
1773
+ <param pos="1" name="service.version"/>
1774
+ <param pos="2" name="securetransport.build"/>
1775
+ </fingerprint>
1776
+ <fingerprint pattern="(Agranat|Conexant|(?:Globespan)?Virata)-EmWeb/(.*)$">
1777
+ <description>EmWeb variants</description>
1778
+ <example>Agranat-EmWeb/R4_01</example>
1779
+ <example>Agranat-EmWeb/R5_1_2</example>
1780
+ <example>Agranat-EmWeb/R5_2_4</example>
1781
+ <example>Agranat-EmWeb/R5_2_6</example>
1782
+ <example>Conexant-EmWeb/R6_1_0</example>
1783
+ <example>ISOS/9.0 UPnP/1.0 Conexant-EmWeb/R6_1_0</example>
1784
+ <example>Nucleus/4.3 UPnP/1.0 Virata-EmWeb/R6_2_0</example>
1785
+ <example>Unknown/0.0 UPnP/1.0 Conexant-EmWeb/R6_1_0</example>
1786
+ <example>Unknown/0.0 UPnP/1.0 GlobespanVirata-EmWeb/R6_1_0</example>
1787
+ <example>Unknown/0.0 UPnP/1.0 Virata-EmWeb/R6_1_0</example>
1788
+ <example>Virata-EmWeb/R5_3_0</example>
1789
+ <example>Virata-EmWeb/R5_3_2</example>
1790
+ <example>Virata-EmWeb/R6_0_1</example>
1791
+ <example>Virata-EmWeb/R6_1_0</example>
1792
+ <example>Virata-EmWeb/R6_2_0</example>
1793
+ <example>Virata-EmWeb/R6_2_1</example>
1794
+ <param pos="1" name="service.vendor"/>
1795
+ <param pos="0" name="service.family" value="EmWeb"/>
1796
+ <param pos="0" name="service.product" value="EmWeb"/>
1797
+ <param pos="2" name="service.version"/>
1798
+ </fingerprint>
1799
+ <fingerprint pattern="^NSC/\S+ \(JVM\)$">
1800
+ <description>Rapid7 NSC</description>
1801
+ <example>NSC/0.6.4 (JVM)</example>
1802
+ <param pos="0" name="service.vendor" value="Rapid7"/>
1803
+ <param pos="0" name="service.product" value="Nexpose"/>
1804
+ <param pos="0" name="service.cpe23" value="cpe:/a:rapid7:nexpose:-"/>
1805
+ </fingerprint>
1806
+ <fingerprint pattern="^Security Console$">
1807
+ <description>Rapid7 Nexpose Security Console</description>
1808
+ <example>Security Console</example>
1809
+ <param pos="0" name="service.vendor" value="Rapid7"/>
1810
+ <param pos="0" name="service.product" value="Nexpose"/>
1811
+ <param pos="0" name="service.cpe23" value="cpe:/a:rapid7:nexpose:-"/>
1812
+ </fingerprint>
1813
+ <fingerprint pattern="^Polycom SoundPoint IP Telephone HTTPd$">
1814
+ <description>Polycom Soundpoint IP Telephone</description>
1815
+ <example>Polycom SoundPoint IP Telephone HTTPd</example>
1816
+ <param pos="0" name="service.vendor" value="Polycom"/>
1817
+ <param pos="0" name="service.family" value="SoundPoint"/>
1818
+ <param pos="0" name="hw.vendor" value="Polycom"/>
1819
+ <param pos="0" name="hw.family" value="SoundPoint"/>
1820
+ <param pos="0" name="hw.device" value="VoIP"/>
1821
+ </fingerprint>
1822
+ <!-- 4D WebSTAR was aquired by Kerio but it seems that both
1823
+ Kerio and 4D have branched the product. The 4D banners
1824
+ use the new version scheme (just 2004 it would appear):
1825
+
1826
+ 4D_WebStar_D/2004
1827
+
1828
+ whereas Kerio banners are:
1829
+
1830
+ 4D_WebSTAR_S/5.3.2 (MacOS X)
1831
+ 4D_WebStar_D/7.8
1832
+ 4D_WebSTAR_S/5.4.1 (MacOS X)
1833
+
1834
+ WebSTAR/4.4 ID/72547
1835
+ WebSTAR/4.5(SSL) ID/82535
1836
+ WebSTAR NetCloak
1837
+ WebSTAR/4.5(SSL) ID/85282
1838
+ -->
1839
+ <!--
1840
+ <fingerprint pattern="^4D_WebSTAR_S/2004$">
1841
+ <description>4D 4th Dimension 2004</description>
1842
+ <param pos="0" name="service.vendor" value="4D"/>
1843
+ <param pos="0" name="service.product" value="4th Dimension 2004"/>
1844
+ <param pos="0" name="service.family" value="4th Dimension 2004"/>
1845
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1846
+ <param pos="0" name="os.family" value="Windows"/>
1847
+ <param pos="0" name="os.product" value="Windows"/>
1848
+ </fingerprint>
1849
+ <fingerprint pattern="^4D_WebSTAR_S/5.3.2 \(MacOS X\)$">
1850
+ <description>Kerio WebSTAR</description>
1851
+ <param pos="0" name="service.vendor" value="Kerio"/>
1852
+ <param pos="0" name="service.product" value="WebSTAR"/>
1853
+ <param pos="0" name="service.family" value="WebSTAR"/>
1854
+ <param pos="1" name="service.version"/>
1855
+ <param pos="0" name="os.vendor" value="Microsoft"/>
1856
+ <param pos="0" name="os.family" value="Windows"/>
1857
+ <param pos="0" name="os.product" value="Windows"/>
1858
+ </fingerprint>
1859
+ -->
1860
+ <fingerprint pattern="^SentinelProtectionServer/((?:\d+\.)*\d+)$">
1861
+ <description>Sentinel Protection Server - Embedded httpd in SafeNet's memory key dongles</description>
1862
+ <example service.version="7.1">SentinelProtectionServer/7.1</example>
1863
+ <example>SentinelProtectionServer/7.3</example>
1864
+ <example>SentinelProtectionServer/7.0</example>
1865
+ <example>SentinelProtectionServer/7</example>
1866
+ <param pos="0" name="service.vendor" value="SafeNet"/>
1867
+ <param pos="0" name="service.product" value="Sentinel Protection Server"/>
1868
+ <param pos="0" name="service.family" value="Sentinel"/>
1869
+ <param pos="1" name="service.version"/>
1870
+ </fingerprint>
1871
+ <fingerprint pattern="^SentinelKeysServer/((?:\d+\.)*\d+)$">
1872
+ <description>Sentinel Key Server - Embedded httpd in SafeNet's memory key dongles</description>
1873
+ <example service.version="1.3.1">SentinelKeysServer/1.3.1</example>
1874
+ <example>SentinelKeysServer/1.0</example>
1875
+ <example>SentinelKeysServer/1</example>
1876
+ <param pos="0" name="service.vendor" value="SafeNet"/>
1877
+ <param pos="0" name="service.product" value="Sentinel Keys Server"/>
1878
+ <param pos="0" name="service.family" value="Sentinel"/>
1879
+ <param pos="1" name="service.version"/>
1880
+ </fingerprint>
1881
+ <fingerprint pattern="^CherryPy/((?:\d+\.)*\d+)$">
1882
+ <description>Web server component of CherryPy web application framework.</description>
1883
+ <example>CherryPy/3.1.2</example>
1884
+ <example>CherryPy/3</example>
1885
+ <param pos="0" name="service.vendor" value="CherryPy"/>
1886
+ <param pos="0" name="service.product" value="CherryPy"/>
1887
+ <param pos="0" name="service.family" value="CherryPy"/>
1888
+ <param pos="1" name="service.version"/>
1889
+ <param pos="0" name="service.cpe23" value="cpe:/a:cherrypy:cherrypy:{service.version}"/>
1890
+ </fingerprint>
1891
+ <fingerprint pattern="(?i)^TornadoServer/((?:\d+\.)*\d+)$">
1892
+ <description>Tornado Python web framework and asynchronous networking library.</description>
1893
+ <example>TornadoServer/4.0.2</example>
1894
+ <param pos="0" name="service.vendor" value="TornadoWeb"/>
1895
+ <param pos="0" name="service.product" value="Tornado"/>
1896
+ <param pos="0" name="service.family" value="Tornado"/>
1897
+ <param pos="1" name="service.version"/>
1898
+ <param pos="0" name="service.cpe23" value="cpe:/a:tornadoweb:tornado:{service.version}"/>
1899
+ </fingerprint>
1900
+ <fingerprint pattern="(?i)^SimpleHTTP/((?:\d+\.)*\d+)\s*Python/((?:\d+\.)*\d+)$">
1901
+ <description>SimpleHTTPRequestHandler Python class is a simple HTTP request handler.</description>
1902
+ <example>SimpleHTTP/0.6 Python/2.7.6</example>
1903
+ <example>SimpleHTTP/0.6 Python/3.4.0</example>
1904
+ <param pos="0" name="service.vendor" value="Python Software Foundation"/>
1905
+ <param pos="0" name="service.product" value="SimpleHTTP"/>
1906
+ <param pos="0" name="service.family" value="Python"/>
1907
+ <param pos="1" name="service.version"/>
1908
+ <param pos="2" name="python.version"/>
1909
+ </fingerprint>
1910
+ <fingerprint pattern="^HP Web Jetadmin/((?:\d+\.)*\d+)\s*(.*)$">
1911
+ <description>Apache variant for web access to HP printers.</description>
1912
+ <example>HP Web Jetadmin/2.0.50 (Win32) mod_auth_sspi/1.0.1 mod_ssl/2.0.50 OpenSSL/0.9.6m</example>
1913
+ <example>HP Web Jetadmin/2 (Win32) mod_auth_sspi/1.0.1 mod_ssl/2.0.50 OpenSSL/0.9.6m</example>
1914
+ <param pos="0" name="service.vendor" value="Apache"/>
1915
+ <param pos="0" name="service.product" value="HTTPD"/>
1916
+ <param pos="0" name="service.family" value="Apache"/>
1917
+ <param pos="0" name="apache.variant" value="HP Web Jetadmin"/>
1918
+ <param pos="1" name="service.version"/>
1919
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:{service.version}"/>
1920
+ <param pos="2" name="apache.info"/>
1921
+ </fingerprint>
1922
+ <fingerprint pattern="^HP Web Jetadmin ([\d\.]+)(?: \([^\)]+\))?$">
1923
+ <description>HP printers, perhaps Apache, but we can't say for sure</description>
1924
+ <example service.version="10.3.85669">HP Web Jetadmin 10.3.85669</example>
1925
+ <example service.version="10.3.91358">HP Web Jetadmin 10.3.91358 (10.3 SR5)</example>
1926
+ <param pos="0" name="service.vendor" value="HP"/>
1927
+ <param pos="0" name="service.product" value="Web Jetadmin"/>
1928
+ <param pos="1" name="service.version"/>
1929
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:web_jetadmin:{service.version}"/>
1930
+ </fingerprint>
1931
+ <fingerprint pattern="^KM-MFP-http/V([\d\.]+)$">
1932
+ <description>Kyocera Printers</description>
1933
+ <example service.version="0.0.1">KM-MFP-http/V0.0.1</example>
1934
+ <param pos="0" name="os.vendor" value="Kycoera"/>
1935
+ <param pos="0" name="os.device" value="Multifunction Device"/>
1936
+ <param pos="0" name="hw.vendor" value="Kycoera"/>
1937
+ <param pos="0" name="hw.device" value="Multifunction Device"/>
1938
+ <param pos="0" name="service.vendor" value="Kyocera"/>
1939
+ <param pos="0" name="service.product" value="KM-MFP-HTTP"/>
1940
+ <param pos="1" name="service.version"/>
1941
+ </fingerprint>
1942
+ <fingerprint pattern="^Citrix Web PN Server$">
1943
+ <description>Citrix Web PN (Program Neighborhood) Server is an HTTP server used by Citrix products</description>
1944
+ <example>Citrix Web PN Server</example>
1945
+ <param pos="0" name="service.vendor" value="Citrix"/>
1946
+ <param pos="0" name="service.product" value="Web PN Server"/>
1947
+ <param pos="0" name="service.family" value="Web PN Server"/>
1948
+ </fingerprint>
1949
+ <fingerprint pattern="^Lotus Expeditor Web Container/((?:\d+\.)*\d+)$">
1950
+ <description>Expeditor is a framework used by IBM in many products in the Lotus brand, such as Sametime and Notes.</description>
1951
+ <example>Lotus Expeditor Web Container/6.1</example>
1952
+ <example>Lotus Expeditor Web Container/6</example>
1953
+ <param pos="0" name="service.vendor" value="IBM"/>
1954
+ <param pos="0" name="service.product" value="Lotus Expeditor Server"/>
1955
+ <param pos="0" name="service.family" value="Lotus Expeditor"/>
1956
+ <param pos="1" name="service.version"/>
1957
+ </fingerprint>
1958
+ <!-- GoAhead software was acquired by Oracle in 2011. They later handed this
1959
+ off to (E)Mbedthis. Version 3.0 released in October 2012 appears to be
1960
+ the first version to fully be Mbedthis software.
1961
+ -->
1962
+ <fingerprint pattern="^GoAhead-(?:Webs|http)$">
1963
+ <description>GoAhead-Webs - no version</description>
1964
+ <example>GoAhead-Webs</example>
1965
+ <param pos="0" name="service.vendor" value="Oracle"/>
1966
+ <param pos="0" name="service.product" value="GoAhead Webserver"/>
1967
+ <param pos="0" name="service.family" value="GoAhead Webserver"/>
1968
+ </fingerprint>
1969
+ <fingerprint pattern="^GoAhead-(?:Webs|http)\/([\d.]+)(?: PeerSec-MatrixSSL\/[\d.]+-OPEN)?$">
1970
+ <description>GoAhead-Webs - version</description>
1971
+ <example service.version="2.5.0">GoAhead-Webs/2.5.0 PeerSec-MatrixSSL/3.4.2-OPEN</example>
1972
+ <example>GoAhead-Webs/2.5.0</example>
1973
+ <param pos="0" name="service.vendor" value="Oracle"/>
1974
+ <param pos="0" name="service.product" value="GoAhead Webserver"/>
1975
+ <param pos="0" name="service.family" value="GoAhead Webserver"/>
1976
+ <param pos="1" name="service.version"/>
1977
+ </fingerprint>
1978
+ <!-- MBedthis changed its name/branding to Embedthis-->
1979
+ <fingerprint pattern="^Mbedthis-App[Ww]eb/([\d.]+)$">
1980
+ <description>Mbedthis Appweb</description>
1981
+ <example service.version="2.4.0">Mbedthis-Appweb/2.4.0</example>
1982
+ <example service.version="2.4.0">Mbedthis-AppWeb/2.4.0</example>
1983
+ <example>Mbedthis-Appweb/2.4.2</example>
1984
+ <example>Mbedthis-Appweb/2</example>
1985
+ <param pos="0" name="service.vendor" value="Mbedthis Software"/>
1986
+ <param pos="0" name="service.product" value="Appweb"/>
1987
+ <param pos="0" name="service.family" value="Appweb"/>
1988
+ <param pos="1" name="service.version"/>
1989
+ </fingerprint>
1990
+ <fingerprint pattern="^Embedthis-(?:Appweb|http)\/?(:?[\d.]+)?$">
1991
+ <description>Embedthis AppWeb</description>
1992
+ <example service.version="3.2.3">Embedthis-Appweb/3.2.3</example>
1993
+ <example>Embedthis-http</example>
1994
+ <example service.version="4.0.0">Embedthis-http/4.0.0</example>
1995
+ <param pos="0" name="service.vendor" value="Embedthis"/>
1996
+ <param pos="0" name="service.product" value="Appweb"/>
1997
+ <param pos="0" name="service.family" value="Appweb"/>
1998
+ <param pos="1" name="service.version"/>
1999
+ <param pos="0" name="service.cpe23" value="cpe:/a:embedthis:appweb:{service.version}"/>
2000
+ </fingerprint>
2001
+ <fingerprint pattern="^Avaya CMBE/((?:\d+\.)*\d+)$">
2002
+ <description>Web server for Avaya Aura Communication Manager Branch, a SIP-based communications platform.</description>
2003
+ <example>Avaya CMBE/2.0.0</example>
2004
+ <example>Avaya CMBE/2</example>
2005
+ <param pos="0" name="service.vendor" value="Avaya"/>
2006
+ <param pos="0" name="service.product" value="Aura Communication Manager"/>
2007
+ <param pos="0" name="service.family" value="Aura"/>
2008
+ <param pos="1" name="service.version"/>
2009
+ </fingerprint>
2010
+ <fingerprint pattern="^Rapid Logic/((?:\d+\.)*\d+)$">
2011
+ <description>Embedded web server by Rapid Logic, which was acquired by Wind River.</description>
2012
+ <example service.version="1.1">Rapid Logic/1.1</example>
2013
+ <example service.version="1">Rapid Logic/1</example>
2014
+ <param pos="0" name="service.vendor" value="Wind River"/>
2015
+ <param pos="0" name="service.product" value="Rapid Logic"/>
2016
+ <param pos="1" name="service.version"/>
2017
+ </fingerprint>
2018
+ <fingerprint pattern="^WindRiver-WebServer/((?:\d+\.)*\d+)$">
2019
+ <description>Wind River HTTP server</description>
2020
+ <example service.version="4.4">WindRiver-WebServer/4.4</example>
2021
+ <param pos="0" name="service.vendor" value="Wind River"/>
2022
+ <param pos="0" name="service.product" value="WebServer"/>
2023
+ <param pos="1" name="service.version"/>
2024
+ </fingerprint>
2025
+ <fingerprint pattern="^Sophos Email Appliance$">
2026
+ <description>Embedded web server for a rack-mounted email appliance that blocks spam and malware.</description>
2027
+ <example>Sophos Email Appliance</example>
2028
+ <param pos="0" name="service.vendor" value="Sophos"/>
2029
+ <param pos="0" name="service.product" value="Email Appliance"/>
2030
+ <param pos="0" name="os.vendor" value="Sophos"/>
2031
+ <param pos="0" name="os.product" value="Email Appliance"/>
2032
+ </fingerprint>
2033
+ <fingerprint pattern="^CUPS\/((?:\d\.)+\d+)(?:\s*IPP\/\d+\.\d+)?$">
2034
+ <description>Server for the CUPS web interface.</description>
2035
+ <example service.version="1.1">CUPS/1.1</example>
2036
+ <example service.version="1.7">CUPS/1.7 IPP/2.1</example>
2037
+ <param pos="0" name="service.vendor" value="Apple"/>
2038
+ <param pos="0" name="service.product" value="CUPS"/>
2039
+ <param pos="0" name="service.family" value="CUPS"/>
2040
+ <param pos="1" name="service.version"/>
2041
+ <param pos="0" name="service.cpe23" value="cpe:/a:apple:cups:{service.version}"/>
2042
+ </fingerprint>
2043
+ <fingerprint pattern="^TwistedWeb/([\d.rc]+)$">
2044
+ <description>Twisted Matrix Labs - TwistedWeb</description>
2045
+ <example>TwistedWeb/2.5.0</example>
2046
+ <example service.version="16.4.0">TwistedWeb/16.4.0</example>
2047
+ <example service.version="16.5.0rc2">TwistedWeb/16.5.0rc2</example>
2048
+ <param pos="0" name="service.vendor" value="TwistedMatrix"/>
2049
+ <param pos="0" name="service.product" value="Twisted Web"/>
2050
+ <param pos="0" name="service.family" value="Twisted Web"/>
2051
+ <param pos="1" name="service.version"/>
2052
+ </fingerprint>
2053
+ <fingerprint pattern="^mini_httpd/((?:\d+\.)*\d+) \S*$">
2054
+ <description>A small HTTP server</description>
2055
+ <example>mini_httpd/1.14 23jun2000</example>
2056
+ <example>mini_httpd/1 23jun2000</example>
2057
+ <param pos="0" name="service.vendor" value="ACME Laboratories"/>
2058
+ <param pos="0" name="service.product" value="mini_httpd"/>
2059
+ <param pos="0" name="service.family" value="mini_httpd"/>
2060
+ <param pos="1" name="service.version"/>
2061
+ </fingerprint>
2062
+ <fingerprint pattern="^thin ((?:\d+\.)*\d+) codename .+$">
2063
+ <description>A Ruby-based web server.</description>
2064
+ <example>thin 1.2.4 codename Flaming Astroboy</example>
2065
+ <example>thin 1 codename Flaming Astroboy</example>
2066
+ <param pos="0" name="service.product" value="Thin"/>
2067
+ <param pos="0" name="service.family" value="Thin"/>
2068
+ <param pos="1" name="service.version"/>
2069
+ </fingerprint>
2070
+ <fingerprint pattern="^Avocent DSView \d+/((?:\d+\.)*\d+)$">
2071
+ <description>Web server interface for controlling data centers.</description>
2072
+ <example>Avocent DSView 3/3.7.0.71</example>
2073
+ <example>Avocent DSView 3/3</example>
2074
+ <param pos="0" name="service.vendor" value="Avocent"/>
2075
+ <param pos="0" name="service.product" value="DSView"/>
2076
+ <param pos="0" name="service.family" value="DSView"/>
2077
+ <param pos="1" name="service.version"/>
2078
+ <param pos="0" name="service.cpe23" value="cpe:/a:avocent:dsview:{service.version}"/>
2079
+ </fingerprint>
2080
+ <fingerprint pattern="^Mongrel ((?:\d+\.)*\d+)$">
2081
+ <description>Ruby-based web server and HTTP library.</description>
2082
+ <example>Mongrel 1.1.5</example>
2083
+ <example>Mongrel 1</example>
2084
+ <param pos="0" name="service.product" value="Mongrel"/>
2085
+ <param pos="0" name="service.family" value="Mongrel"/>
2086
+ <param pos="1" name="service.version"/>
2087
+ </fingerprint>
2088
+ <fingerprint pattern="^Microplex emHTTPD/((?:\d+\.)*\d+)$">
2089
+ <description>Embedded web server used by Microplex.</description>
2090
+ <example>Microplex emHTTPD/1.0</example>
2091
+ <example>Microplex emHTTPD/1.1</example>
2092
+ <example>Microplex emHTTPD/1</example>
2093
+ <param pos="0" name="service.vendor" value="Microplex"/>
2094
+ <param pos="0" name="service.product" value="emHTTPD"/>
2095
+ <param pos="0" name="service.family" value="emHTTPD"/>
2096
+ <param pos="1" name="service.version"/>
2097
+ <param pos="0" name="os.vendor" value="Microplex"/>
2098
+ <param pos="0" name="os.device" value="Print server"/>
2099
+ </fingerprint>
2100
+ <fingerprint pattern="^UPS_Server/((?:\d+\.)*\d+)$">
2101
+ <description>An embedded web server used for UPS management; primarily by Eaton, but also by APC.</description>
2102
+ <example>UPS_Server/1.0</example>
2103
+ <example>UPS_Server/1</example>
2104
+ <param pos="0" name="service.vendor" value="Eaton"/>
2105
+ <param pos="0" name="service.product" value="ConnectUPS"/>
2106
+ <param pos="0" name="service.family" value="ConnectUPS"/>
2107
+ <param pos="1" name="service.version"/>
2108
+ <param pos="0" name="os.vendor" value="Eaton"/>
2109
+ <param pos="0" name="os.device" value="UPS"/>
2110
+ </fingerprint>
2111
+ <fingerprint pattern="^JC-HTTPD/((?:\d+\.)*\d+)$">
2112
+ <description>An embedded web server, used notably by Oki and Kyocera in printers.</description>
2113
+ <example>JC-HTTPD/1.11.14</example>
2114
+ <example>JC-HTTPD/1</example>
2115
+ <param pos="0" name="service.product" value="JC-HTTPD"/>
2116
+ <param pos="0" name="service.family" value="JC-HTTPD"/>
2117
+ <param pos="1" name="service.version"/>
2118
+ </fingerprint>
2119
+ <fingerprint pattern="^JC-SHTTPD/((?:\d+\.)*\d+)$">
2120
+ <description>An embedded web server.</description>
2121
+ <example>JC-SHTTPD/1.17.20</example>
2122
+ <example>JC-SHTTPD/1</example>
2123
+ <param pos="0" name="service.product" value="JC-SHTTPD"/>
2124
+ <param pos="0" name="service.family" value="JC-SHTTPD"/>
2125
+ <param pos="1" name="service.version"/>
2126
+ </fingerprint>
2127
+ <fingerprint pattern="^Oracle XML DB/Oracle\S+ Enterprise Edition Release ((?:\d+\.)*\d+) - Production$">
2128
+ <description>Web server providing web services for Oracle's XML DB - with version string</description>
2129
+ <example>Oracle XML DB/Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production</example>
2130
+ <example>Oracle XML DB/Oracle9i Enterprise Edition Release 9 - Production</example>
2131
+ <param pos="0" name="service.vendor" value="Oracle"/>
2132
+ <param pos="0" name="service.product" value="XML DB"/>
2133
+ <param pos="0" name="service.family" value="Oracle"/>
2134
+ <param pos="1" name="service.version"/>
2135
+ </fingerprint>
2136
+ <fingerprint pattern="^Oracle XML DB/Oracle Database$">
2137
+ <description>Web server providing web services for Oracle's XML DB</description>
2138
+ <example>Oracle XML DB/Oracle Database</example>
2139
+ <param pos="0" name="service.vendor" value="Oracle"/>
2140
+ <param pos="0" name="service.product" value="XML DB"/>
2141
+ <param pos="0" name="service.family" value="Oracle"/>
2142
+ </fingerprint>
2143
+ <fingerprint pattern="^sfcHttpd$">
2144
+ <description>Server for HTTP interface to sfcb, a lightweight CIM server</description>
2145
+ <example>sfcHttpd</example>
2146
+ <param pos="0" name="service.vendor" value="SBLIM"/>
2147
+ <param pos="0" name="service.product" value="sfcb"/>
2148
+ <param pos="0" name="service.family" value="sfcb"/>
2149
+ </fingerprint>
2150
+ <fingerprint pattern="^PanWeb Server/ -">
2151
+ <description>HTTP and HTTPS server found on Palo Alto Networks devices</description>
2152
+ <example>PanWeb Server/ -</example>
2153
+ <param pos="0" name="service.vendor" value="Palo Alto Networks"/>
2154
+ <param pos="0" name="service.product" value="PA Firewall"/>
2155
+ <param pos="0" name="os.vendor" value="Palo Alto Networks"/>
2156
+ <param pos="0" name="os.product" value="PA Firewall"/>
2157
+ <param pos="0" name="os.device" value="Firewall"/>
2158
+ <param pos="0" name="os.cpe23" value="cpe:/o:paloaltonetworks:pan-os:-"/>
2159
+ </fingerprint>
2160
+ <fingerprint pattern="^Ews/((?:\d+\.)*\d+)$">
2161
+ <description>IBM Network Printer Manager.</description>
2162
+ <example>Ews/0.1</example>
2163
+ <example>Ews/0</example>
2164
+ <param pos="0" name="service.vendor" value="IBM"/>
2165
+ <param pos="0" name="service.product" value="Network Printer Manager"/>
2166
+ <param pos="0" name="service.family" value="Network Printer Manager"/>
2167
+ <param pos="1" name="service.version"/>
2168
+ </fingerprint>
2169
+ <!-- NOTE: '$ProjectRevision: {some version string} $' has been seen in a
2170
+ variety of products including printers, PDUs, etc.
2171
+ -->
2172
+ <fingerprint pattern="^\$ProjectRevision: 4.0.2.38 \$$">
2173
+ <description>This banner is seen on some HP LaserJet printers.</description>
2174
+ <example>$ProjectRevision: 4.0.2.38 $</example>
2175
+ <param pos="0" name="os.vendor" value="HP"/>
2176
+ <param pos="0" name="os.device" value="Printer"/>
2177
+ <param pos="0" name="os.family" value="LaserJet"/>
2178
+ </fingerprint>
2179
+ <fingerprint pattern="^WEBrick/([\d\.]+) .*$">
2180
+ <description>WEBrick default setup</description>
2181
+ <example>WEBrick/1.3.1 (Ruby/1.9.3/2013-02-22)</example>
2182
+ <param pos="0" name="service.vendor" value="Ruby"/>
2183
+ <param pos="0" name="service.product" value="WEBrick"/>
2184
+ <param pos="1" name="service.version"/>
2185
+ </fingerprint>
2186
+ <fingerprint pattern="^Aspen/(\S+)">
2187
+ <description>Aspen web server</description>
2188
+ <example service.version="0.8">Aspen/0.8</example>
2189
+ <param pos="0" name="service.product" value="Aspen"/>
2190
+ <param pos="1" name="service.version"/>
2191
+ </fingerprint>
2192
+ <fingerprint pattern="^Boa/([\d\.]+\S*)">
2193
+ <description>Boa web server</description>
2194
+ <example service.version="0.94.14rc21">Boa/0.94.14rc21</example>
2195
+ <example service.version="0.94.14rc18-ipcam">Boa/0.94.14rc18-ipcam</example>
2196
+ <example service.version="0.93.15">Boa/0.93.15 (with Intersil Extensions)</example>
2197
+ <example service.version="0.92p">Boa/0.92p OS-9 Version</example>
2198
+ <example service.version="0.93.15">Boa/0.93.15</example>
2199
+ <param pos="0" name="service.product" value="Boa"/>
2200
+ <param pos="1" name="service.version"/>
2201
+ </fingerprint>
2202
+ <!-- HiSilicon is OEMd by a number of DVR manufacturers -->
2203
+ <fingerprint pattern="^Cross Web Server$">
2204
+ <description>Web server found on DVR and webcam servers sourced from HiSilicon</description>
2205
+ <example>Cross Web Server</example>
2206
+ <param pos="0" name="service.vendor" value="HiSilicon"/>
2207
+ <param pos="0" name="service.product" value="Cross Web Server"/>
2208
+ <param pos="0" name="os.vendor" value="HiSilicon"/>
2209
+ <param pos="0" name="os.device" value="DVR"/>
2210
+ <param pos="0" name="hw.device" value="DVR"/>
2211
+ </fingerprint>
2212
+ <!-- Hikvision is OEMd by a number of DVR manufacturers -->
2213
+ <fingerprint pattern="^(?:Hikvision|DNVRS|DVRDVS)-Webs$">
2214
+ <description>Web server found on DVR and webcam servers sourced from Hikvision</description>
2215
+ <example>Hikvision-Webs</example>
2216
+ <example>DVRDVS-Webs</example>
2217
+ <example>DNVRS-Webs</example>
2218
+ <param pos="0" name="service.vendor" value="Hikvision"/>
2219
+ <param pos="0" name="service.product" value="Hikvision Web Server"/>
2220
+ <param pos="0" name="os.vendor" value="Hikvision"/>
2221
+ <param pos="0" name="os.device" value="DVR"/>
2222
+ <param pos="0" name="hw.device" value="DVR"/>
2223
+ </fingerprint>
2224
+ <fingerprint pattern="^NET-DK[/ ](\d+\.\d+)$">
2225
+ <description>Web server found on ARRIS cable modems</description>
2226
+ <example>NET-DK/1.0</example>
2227
+ <example>NET-DK 1.1</example>
2228
+ <param pos="0" name="service.vendor" value="ARRIS"/>
2229
+ <param pos="0" name="service.product" value="Net-DK Web Server"/>
2230
+ <param pos="1" name="service.version"/>
2231
+ <param pos="0" name="os.vendor" value="ARRIS"/>
2232
+ <param pos="0" name="os.device" value="Cable Modem"/>
2233
+ <param pos="0" name="hw.vendor" value="ARRIS"/>
2234
+ <param pos="0" name="hw.device" value="Cable Modem"/>
2235
+ </fingerprint>
2236
+ <fingerprint pattern="^2wire Gateway$">
2237
+ <description>Web server found on some Arris/2wire devices</description>
2238
+ <example>2wire Gateway</example>
2239
+ <param pos="0" name="service.vendor" value="ARRIS"/>
2240
+ <param pos="0" name="service.product" value="2wire"/>
2241
+ </fingerprint>
2242
+ <!-- junit says,
2243
+ "Example pattern '' from http_servers.xml didn't match pattern '^$'"
2244
+ Figure out if we have a way to support matching empty strings later.
2245
+ <fingerprint pattern="^?">
2246
+ <example></example>
2247
+ <description>A blank banner; assert nothing.</description>
2248
+ </fingerprint>
2249
+ -->
2250
+ <fingerprint pattern="^(?:(?:\d+.){3}\d+):\d{1,4}$">
2251
+ <description>A banner consisting of an IP address and port -- assert nothing.</description>
2252
+ <example>192.168.0.4:9999</example>
2253
+ </fingerprint>
2254
+ <fingerprint pattern="^Web-Server/(?:\d+\.+\d+)$">
2255
+ <description>Obfuscated web server -- assert nothing.</description>
2256
+ <example>Web-Server/3.0</example>
2257
+ </fingerprint>
2258
+ <fingerprint pattern="^httpd$">
2259
+ <description>httpd - generic -- assert nothing.</description>
2260
+ <example>httpd</example>
2261
+ </fingerprint>
2262
+ <!-- Service provider equipment (CDNs, etc) -->
2263
+ <fingerprint pattern="^AkamaiGHost$">
2264
+ <description>Akamai Global Host</description>
2265
+ <example>AkamaiGHost</example>
2266
+ <param pos="0" name="service.vendor" value="Akamai"/>
2267
+ <param pos="0" name="service.product" value="GHost"/>
2268
+ <param pos="0" name="os.vendor" value="Akamai"/>
2269
+ <param pos="0" name="os.device" value="Web proxy"/>
2270
+ </fingerprint>
2271
+ <fingerprint pattern="^gws$">
2272
+ <description>Google Web Services</description>
2273
+ <example>gws</example>
2274
+ <param pos="0" name="service.vendor" value="Google"/>
2275
+ <param pos="0" name="service.product" value="Google Web Services"/>
2276
+ <param pos="0" name="service.family" value="Google Web Server"/>
2277
+ </fingerprint>
2278
+ <fingerprint pattern="^GFE/((?:\d+\.)*\d+)$">
2279
+ <description>Google Front End for apps running on Google services.</description>
2280
+ <example>GFE/1.3</example>
2281
+ <example>GFE/1</example>
2282
+ <param pos="0" name="service.vendor" value="Google"/>
2283
+ <param pos="0" name="service.product" value="Google Front End"/>
2284
+ <param pos="0" name="service.family" value="Google Web Server"/>
2285
+ <param pos="1" name="service.version"/>
2286
+ </fingerprint>
2287
+ <fingerprint pattern="^CloudFront$">
2288
+ <description>Amazon CloudFront web load balancer endpoint</description>
2289
+ <example>CloudFront</example>
2290
+ <param pos="0" name="service.vendor" value="Amazon"/>
2291
+ <param pos="0" name="service.product" value="CloudFront Load Balancer"/>
2292
+ <param pos="0" name="service.family" value="CloudFront"/>
2293
+ </fingerprint>
2294
+ <fingerprint pattern="^Amazon-Cloud-Drive$">
2295
+ <description>Amazon Cloud Drive / Drive</description>
2296
+ <example>Amazon-Cloud-Drive</example>
2297
+ <param pos="0" name="service.vendor" value="Amazon"/>
2298
+ <param pos="0" name="service.product" value="Drive"/>
2299
+ </fingerprint>
2300
+ <fingerprint pattern="^AmazonS3$">
2301
+ <description>Amazon S3 (Simple Cloud Storage Service)</description>
2302
+ <example>AmazonS3</example>
2303
+ <param pos="0" name="service.vendor" value="Amazon"/>
2304
+ <param pos="0" name="service.product" value="S3"/>
2305
+ </fingerprint>
2306
+ <fingerprint pattern="^Amazon SimpleDB$">
2307
+ <description>Amazon SimpleDB / Simple Database Service</description>
2308
+ <example>Amazon SimpleDB</example>
2309
+ <param pos="0" name="service.vendor" value="Amazon"/>
2310
+ <param pos="0" name="service.product" value="SimpleDB"/>
2311
+ </fingerprint>
2312
+ <fingerprint pattern="^AmazonSnowball$">
2313
+ <description>Amazon Snowball</description>
2314
+ <example>AmazonSnowball</example>
2315
+ <param pos="0" name="service.vendor" value="Amazon"/>
2316
+ <param pos="0" name="service.product" value="Snowball"/>
2317
+ </fingerprint>
2318
+ <fingerprint pattern="^awselb/([\d.rc]+)$">
2319
+ <description>Amazon Elastic Load Balancing</description>
2320
+ <example service.version="2.0">awselb/2.0</example>
2321
+ <param pos="0" name="service.vendor" value="Amazon"/>
2322
+ <param pos="0" name="service.family" value="Elastic Load Balancing"/>
2323
+ <param pos="1" name="service.version"/>
2324
+ </fingerprint>
2325
+ <fingerprint pattern="^cloudflare(?:-nginx)?$">
2326
+ <description>CloudFlare web load balancer endpoint</description>
2327
+ <example>cloudflare-nginx</example>
2328
+ <example>cloudflare</example>
2329
+ <param pos="0" name="service.vendor" value="CloudFlare"/>
2330
+ <param pos="0" name="service.product" value="CloudFlare Load Balancer"/>
2331
+ <param pos="0" name="service.family" value="CloudFlare"/>
2332
+ </fingerprint>
2333
+ <fingerprint pattern="^gSOAP/([\d\.]+)$">
2334
+ <description>gSOAP</description>
2335
+ <example service.version="2.7">gSOAP/2.7</example>
2336
+ <param pos="0" name="service.product" value="gSOAP"/>
2337
+ <param pos="1" name="service.version"/>
2338
+ </fingerprint>
2339
+ <!-- Apple QuickTime streaming server -->
2340
+ <fingerprint pattern="^QTSS\/([\d\.]+) \(Build\/[\d\.]+; Platform\/MacOSX; Release\/Panther">
2341
+ <description>QTSS on OS X 10.3</description>
2342
+ <example service.version="5.0">QTSS/5.0 (Build/452; Platform/MacOSX; Release/Panther; )</example>
2343
+ <example service.version="5.0.3.3">QTSS/5.0.3.3 (Build/452.22.4; Platform/MacOSX; Release/Panther; Update/Security; )</example>
2344
+ <param pos="0" name="os.vendor" value="Apple"/>
2345
+ <param pos="0" name="os.family" value="Mac OS X"/>
2346
+ <param pos="0" name="os.product" value="Mac OS X"/>
2347
+ <param pos="0" name="os.version" value="10.3"/>
2348
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.3"/>
2349
+ <param pos="0" name="service.product" value="QTSS"/>
2350
+ <param pos="1" name="service.version"/>
2351
+ </fingerprint>
2352
+ <fingerprint pattern="^QTSS\/([\d\.]+) \(Build\/[\d\.]+; Platform\/MacOSX; Release\/Mac OS X">
2353
+ <description>QTSS OS X</description>
2354
+ <example service.version="6.1.0">QTSS/6.1.0 (Build/532; Platform/MacOSX; Release/Mac OS X Server; )</example>
2355
+ <param pos="0" name="os.vendor" value="Apple"/>
2356
+ <param pos="0" name="os.family" value="Mac OS X"/>
2357
+ <param pos="0" name="os.product" value="Mac OS X"/>
2358
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:-"/>
2359
+ <param pos="0" name="service.product" value="QTSS"/>
2360
+ <param pos="1" name="service.version"/>
2361
+ </fingerprint>
2362
+ <fingerprint pattern="^SEPM$">
2363
+ <description>Symantec Endpoint Protection Manager</description>
2364
+ <example>SEPM</example>
2365
+ <param pos="0" name="service.vendor" value="Symantec"/>
2366
+ <param pos="0" name="service.product" value="Symantec Endpoint Protection Manager"/>
2367
+ <param pos="0" name="service.family" value="Symantec Endpoint Protection Manager"/>
2368
+ </fingerprint>
2369
+ <fingerprint pattern="^Intel\(R\) Active Management Technology\s(\d+\.\d+\.\d+\.\d+|\d+\.\d+\.\d+|\d+\.\d+)">
2370
+ <description>Intel(R) Active Management Technology (AMT) with a version</description>
2371
+ <example service.version="7.1.86">Intel(R) Active Management Technology 7.1.86</example>
2372
+ <param pos="0" name="service.vendor" value="Intel"/>
2373
+ <param pos="0" name="service.product" value="Intel(R) Active Management Technology"/>
2374
+ <param pos="0" name="service.family" value="Intel(R) Active Management Technology"/>
2375
+ <param pos="1" name="service.version"/>
2376
+ </fingerprint>
2377
+ <fingerprint pattern="^(?:AMT|Intel\(R\) Active Management Technology)$">
2378
+ <description>Intel(R) Active Management Technology (AMT) without a version</description>
2379
+ <example>AMT</example>
2380
+ <example>Intel(R) Active Management Technology</example>
2381
+ <param pos="0" name="service.vendor" value="Intel"/>
2382
+ <param pos="0" name="service.product" value="Intel(R) Active Management Technology"/>
2383
+ <param pos="0" name="service.family" value="Intel(R) Active Management Technology"/>
2384
+ </fingerprint>
2385
+ <fingerprint pattern="^Intel\(R\) Standard Manageability\s(\d+\.\d+\.\d+\.\d+|\d+\.\d+\.\d+|\d+\.\d+)">
2386
+ <description>Intel(R) Standard Manageability</description>
2387
+ <example service.version="5.0.50">Intel(R) Standard Manageability 5.0.50</example>
2388
+ <example service.version="9.0.3">Intel(R) Standard Manageability 9.0.3</example>
2389
+ <param pos="0" name="service.vendor" value="Intel"/>
2390
+ <param pos="0" name="service.product" value="Intel(R) Standard Manageability"/>
2391
+ <param pos="0" name="service.family" value="Intel(R) Active Management Technology"/>
2392
+ <param pos="1" name="service.version"/>
2393
+ </fingerprint>
2394
+ <fingerprint pattern="^Sunny WebBox$">
2395
+ <description>Sunny WebBox</description>
2396
+ <example>Sunny WebBox</example>
2397
+ <param pos="0" name="service.vendor" value="SMA Solar Technology Ag"/>
2398
+ <param pos="0" name="service.family" value="Sunny"/>
2399
+ <param pos="0" name="service.product" value="WebBox"/>
2400
+ <param pos="0" name="hw.family" value="Sunny"/>
2401
+ <param pos="0" name="hw.product" value="WebBox"/>
2402
+ <param pos="0" name="hw.device" value="Power device"/>
2403
+ <param pos="0" name="os.vendor" value="Microsoft"/>
2404
+ <param pos="0" name="os.family" value="Windows"/>
2405
+ <param pos="0" name="os.product" value="Windows CE"/>
2406
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_ce:-"/>
2407
+ </fingerprint>
2408
+ <fingerprint pattern="^EnergyICT RTU \d+-\w+-\d+$">
2409
+ <description>EnergyICT RTU</description>
2410
+ <example>EnergyICT RTU 101-F25CE1-1524</example>
2411
+ <param pos="0" name="hw.family" value="Honeywell"/>
2412
+ <param pos="0" name="hw.product" value="RTU"/>
2413
+ <param pos="0" name="hw.device" value="Power device"/>
2414
+ </fingerprint>
2415
+ <fingerprint pattern="^AV-TECH AV787 Video Web Server$">
2416
+ <description>AV-TECH AVC787 Video Web Server</description>
2417
+ <example>AV-TECH AV787 Video Web Server</example>
2418
+ <param pos="0" name="service.vendor" value="AVTECH"/>
2419
+ <param pos="0" name="service.family" value="MPEG4 DVR"/>
2420
+ <param pos="0" name="service.product" value="HTTPD"/>
2421
+ <param pos="0" name="hw.family" value="MPEG4 DVR"/>
2422
+ <param pos="0" name="hw.product" value="AVC787"/>
2423
+ <param pos="0" name="hw.device" value="DVR"/>
2424
+ </fingerprint>
2425
+ <fingerprint pattern="^Splunkd$">
2426
+ <description>Splunk HTTP server used in the web interface, forwarders, indexers and more</description>
2427
+ <example>Splunkd</example>
2428
+ <param pos="0" name="service.vendor" value="Splunk"/>
2429
+ </fingerprint>
2430
+ <fingerprint pattern="^tivo-httpd-\S+$">
2431
+ <description>Tivo DVR</description>
2432
+ <example>tivo-httpd-1:20.7.4.RC35-D18-6:D18</example>
2433
+ <param pos="0" name="hw.vendor" value="Tivo"/>
2434
+ <param pos="0" name="hw.family" value="DVR"/>
2435
+ <param pos="0" name="hw.device" value="DVR"/>
2436
+ </fingerprint>
2437
+ <fingerprint pattern="^OpenTV/([\d\.]+)$">
2438
+ <description>OpenTV</description>
2439
+ <example os.version="5.40">OpenTV/5.40</example>
2440
+ <param pos="0" name="os.vendor" value="NAGRA"/>
2441
+ <param pos="0" name="os.product" value="OpenTV"/>
2442
+ <param pos="0" name="os.device" value="DVR"/>
2443
+ <param pos="1" name="os.version"/>
2444
+ <param pos="0" name="hw.device" value="DVR"/>
2445
+ </fingerprint>
2446
+ <!-- Tridium previously had a product with the 'Niagra' spelling -->
2447
+ <fingerprint pattern="^Niagara Web Server\/([\d.]+)$">
2448
+ <description>Tridium Niagara AX Framework</description>
2449
+ <example service.version="3.8.111">Niagara Web Server/3.8.111</example>
2450
+ <param pos="0" name="service.vendor" value="Tridium"/>
2451
+ <param pos="0" name="service.family" value="Niagara"/>
2452
+ <param pos="0" name="service.product" value="Niagara AX"/>
2453
+ <param pos="1" name="service.version"/>
2454
+ </fingerprint>
2455
+ <fingerprint pattern="^Microsoft WinCE Fidelix v([\d.]+)$">
2456
+ <description>Fidelix Industrial Control Web Server</description>
2457
+ <example service.version="11.50.29">Microsoft WinCE Fidelix v11.50.29</example>
2458
+ <param pos="0" name="os.certainty" value="0.9"/>
2459
+ <param pos="0" name="os.vendor" value="Microsoft"/>
2460
+ <param pos="0" name="os.family" value="Windows"/>
2461
+ <param pos="0" name="os.product" value="Windows CE"/>
2462
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_ce:-"/>
2463
+ <param pos="0" name="service.vendor" value="Fidelix"/>
2464
+ <param pos="0" name="service.product" value="Web Server"/>
2465
+ <param pos="1" name="service.version"/>
2466
+ <param pos="0" name="hw.vendor" value="Fidelix"/>
2467
+ <param pos="0" name="hw.device" value="Industrial Control"/>
2468
+ </fingerprint>
2469
+ <fingerprint pattern="^chainpoint-node$">
2470
+ <description>Chainpoint Node</description>
2471
+ <example>chainpoint-node</example>
2472
+ <param pos="0" name="service.vendor" value="Chainpoint"/>
2473
+ <param pos="0" name="service.product" value="Node"/>
2474
+ </fingerprint>
2475
+ <fingerprint pattern="(?i)^(.*) UPnP/[\d\.]+\s+AVM FRITZ!(.*) ([\d\.]+)$">
2476
+ <description>AVM FRITZ! devices of various types</description>
2477
+ <example host.name="some thing" os.product="WLAN Repeater 1750E" os.version="134.07.01">some thing UPnP/1.0 AVM FRITZ!WLAN Repeater 1750E 134.07.01</example>
2478
+ <param pos="0" name="os.vendor" value="AVM"/>
2479
+ <param pos="0" name="os.family" value="FRITZ!Box"/>
2480
+ <param pos="2" name="os.product"/>
2481
+ <param pos="3" name="os.version"/>
2482
+ <param pos="1" name="host.name"/>
2483
+ </fingerprint>
2484
+ <fingerprint pattern="(?i)^Linux/(\S+) UPnP/[\d\.]+ miniupnpd/([\d\.]+)$">
2485
+ <description>Linux MiniUPnPd UPnP Server</description>
2486
+ <example>Linux/Cross_compiled UPnP/1.0 miniupnpd/1.0</example>
2487
+ <example>Linux/2.6.29.6-217.2.3.fc11.i686.PAE UPnP/1.0 miniupnpd/1.0</example>
2488
+ <example>Linux/2.4.21 UPnP/1.0 miniupnpd/1.0</example>
2489
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2490
+ <param pos="2" name="service.version"/>
2491
+ <param pos="0" name="os.vendor" value="Linux"/>
2492
+ <param pos="0" name="os.product" value="Linux"/>
2493
+ <param pos="1" name="os.version"/>
2494
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
2495
+ </fingerprint>
2496
+ <fingerprint pattern="^Tomato UPnP/\S+ MiniUPnPd/(\S+)$">
2497
+ <description>Tomato UPnP Server</description>
2498
+ <example>Tomato UPnP/1.0 MiniUPnPd/1.2</example>
2499
+ <example>Tomato UPnP/1.0 MiniUPnPd/1.4</example>
2500
+ <param pos="0" name="service.vendor" value="Tomato"/>
2501
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2502
+ <param pos="1" name="service.version"/>
2503
+ </fingerprint>
2504
+ <fingerprint pattern="(?i)^(RT-\w+) UPnP/\S+ MiniUPnPd/(\S+)$">
2505
+ <description>Asus WAP UPnP Server</description>
2506
+ <example>RT-G32 UPnP/1.0 MiniUPnPd/1.2</example>
2507
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2508
+ <param pos="2" name="service.version"/>
2509
+ <param pos="0" name="os.vendor" value="Asus"/>
2510
+ <param pos="1" name="os.product"/>
2511
+ <param pos="0" name="os.device" value="WAP"/>
2512
+ </fingerprint>
2513
+ <fingerprint pattern="(?i)^DrayTek/Vigor(\S+) UPnP/\S+ miniupnpd/(\S+)$">
2514
+ <description>DrayTek Vigor router UPnP Server</description>
2515
+ <example hw.model="2130">DrayTek/Vigor2130 UPnP/1.0 miniupnpd/1.0</example>
2516
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2517
+ <param pos="2" name="service.version"/>
2518
+ <param pos="0" name="hw.vendor" value="DrayTek"/>
2519
+ <param pos="0" name="hw.product" value="Vigor"/>
2520
+ <param pos="1" name="hw.model"/>
2521
+ <param pos="0" name="hw.device" value="Router"/>
2522
+ </fingerprint>
2523
+ <fingerprint pattern="(?i)Linux UPnP/\d\.\d Huawei-ATP-IGD$">
2524
+ <description>Huawei Echolife / Home Gateway (and possibly other) devices with UPnP</description>
2525
+ <example>Linux UPnP/1.0 Huawei-ATP-IGD</example>
2526
+ <param pos="0" name="hw.vendor" value="Huawei"/>
2527
+ <param pos="0" name="hw.device" value="Broadband router"/>
2528
+ </fingerprint>
2529
+ <fingerprint pattern="(?i)^OpenWRT/kamikaze UPnP/\S+ MiniUPnPd/(\S+)$">
2530
+ <description>OpenWRT Kamikaze WAP UPnP Server</description>
2531
+ <example>OpenWRT/kamikaze UPnP/1.0 MiniUPnPd/1.5</example>
2532
+ <example>OpenWRT/kamikaze UPnP/1.0 MiniUPnPd/1.2</example>
2533
+ <example>OpenWRT/kamikaze UPnP/1.0 MiniUPnPd/1.4</example>
2534
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2535
+ <param pos="1" name="service.version"/>
2536
+ <param pos="0" name="os.vendor" value="Linux"/>
2537
+ <param pos="0" name="os.family" value="OpenWRT"/>
2538
+ <param pos="0" name="os.product" value="Kamikaze"/>
2539
+ <param pos="0" name="os.device" value="WAP"/>
2540
+ </fingerprint>
2541
+ <fingerprint pattern="(?i)^Netgear/\S+ UPnP/\S+ miniupnpd/(\S+)$">
2542
+ <description>Netgear DG834G or WNDR3300 WAP UPnP Server</description>
2543
+ <example>Netgear/1.0 UPnP/1.0 miniupnpd/1.0</example>
2544
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2545
+ <param pos="1" name="service.version"/>
2546
+ <param pos="0" name="os.vendor" value="Netgear"/>
2547
+ <param pos="0" name="os.device" value="WAP"/>
2548
+ </fingerprint>
2549
+ <fingerprint pattern="^[^/]+/(\S+) DLNADOC/\S+ UPnP/\S+ MiniDLNA/(\S+)$">
2550
+ <description>DLNADOC UPnP Server</description>
2551
+ <example>Debian/4.0r8 DLNADOC/1.50 UPnP/1.0 MiniDLNA/1.0</example>
2552
+ <example>FreeBSD/8.2-RELEASE-p4 DLNADOC/1.50 UPnP/1.0 MiniDLNA/1.0.24</example>
2553
+ <example>Linux/2.6.36+ DLNADOC/1.50 UPnP/1.0 MiniDLNA/1.0</example>
2554
+ <param pos="0" name="service.product" value="MiniDLNA"/>
2555
+ <param pos="2" name="service.version"/>
2556
+ <param pos="0" name="os.vendor" value="Linux"/>
2557
+ <param pos="0" name="os.product" value="Linux"/>
2558
+ <param pos="1" name="os.version"/>
2559
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
2560
+ </fingerprint>
2561
+ <fingerprint pattern="(?i)^Debian\/(\S+) UPnP/\S+ MiniUPnPd/(\S+)$">
2562
+ <description>miniupnpd on a Debian variant</description>
2563
+ <example os.version="wheezy/sid" service.version="1.8">Debian/wheezy/sid UPnP/1.1 MiniUPnPd/1.8</example>
2564
+ <example os.version="4.0" service.version="1.0">Debian/4.0 UPnP/1.0 miniupnpd/1.0</example>
2565
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2566
+ <param pos="2" name="service.version"/>
2567
+ <param pos="0" name="os.vendor" value="Debian"/>
2568
+ <param pos="0" name="os.product" value="Linux"/>
2569
+ <param pos="0" name="os.certainty" value="0.5"/>
2570
+ <param pos="1" name="os.version"/>
2571
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
2572
+ </fingerprint>
2573
+ <fingerprint pattern="(?i)^Fedora(?:Core)?\/(\S+) UPnP/\S+ MiniUPnPd/(\S+)$">
2574
+ <description>miniupnpd on a Fedora variant</description>
2575
+ <example os.version="10" service.version="1.4">Fedora/10 UPnP/1.0 MiniUPnPd/1.4</example>
2576
+ <example os.version="8" service.version="1.0">Fedora/8 UPnP/1.0 miniupnpd/1.0</example>
2577
+ <example os.version="6" service.version="1.0">FedoraCore/6 UPnP/1.0 miniupnpd/1.0</example>
2578
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2579
+ <param pos="2" name="service.version"/>
2580
+ <param pos="0" name="os.family" value="Linux"/>
2581
+ <param pos="0" name="os.vendor" value="Red Hat"/>
2582
+ <param pos="0" name="os.product" value="Fedora Core Linux"/>
2583
+ <param pos="1" name="os.version"/>
2584
+ <param pos="0" name="os.cpe23" value="cpe:/o:redhat:fedora_core:{os.version}"/>
2585
+ </fingerprint>
2586
+ <fingerprint pattern="(?i)^Ubuntu\/([\d\.]+) UPnP/\S+ MiniUPnPd/(\S+)$">
2587
+ <description>miniupnpd on an Ubuntu variant</description>
2588
+ <example os.version="10.04" service.version="1.0">Ubuntu/10.04 UPnP/1.0 miniupnpd/1.0</example>
2589
+ <example os.version="10.10" service.version="1.0">Ubuntu/10.10 UPnP/1.0 miniupnpd/1.0</example>
2590
+ <example os.version="7.10" service.version="1.0">Ubuntu/7.10 UPnP/1.0 miniupnpd/1.0</example>
2591
+ <example os.version="9.04" service.version="1.0">Ubuntu/9.04 UPnP/1.0 miniupnpd/1.0</example>
2592
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2593
+ <param pos="2" name="service.version"/>
2594
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2595
+ <param pos="0" name="os.product" value="Linux"/>
2596
+ <param pos="1" name="os.version"/>
2597
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
2598
+ </fingerprint>
2599
+ <fingerprint pattern="(?i)^Ubuntu\/bionic UPnP/\S+ MiniUPnPd/(\S+)$">
2600
+ <description>miniupnpd on an Ubuntu bionic/18.04</description>
2601
+ <example os.version="18.04" service.version="1.4">Ubuntu/bionic UPnP/1.0 MiniUPnPd/1.4</example>
2602
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2603
+ <param pos="1" name="service.version"/>
2604
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2605
+ <param pos="0" name="os.product" value="Linux"/>
2606
+ <param pos="0" name="os.version" value="18.04"/>
2607
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:18.04"/>
2608
+ </fingerprint>
2609
+ <fingerprint pattern="(?i)^Ubuntu\/yakkety UPnP/\S+ MiniUPnPd/(\S+)$">
2610
+ <description>miniupnpd on an Ubuntu yakkety/16.10</description>
2611
+ <example os.version="16.10" service.version="1.4">Ubuntu/yakkety UPnP/1.0 MiniUPnPd/1.4</example>
2612
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2613
+ <param pos="1" name="service.version"/>
2614
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2615
+ <param pos="0" name="os.product" value="Linux"/>
2616
+ <param pos="0" name="os.version" value="16.10"/>
2617
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:16.10"/>
2618
+ </fingerprint>
2619
+ <fingerprint pattern="(?i)^Ubuntu\/xenial UPnP/\S+ MiniUPnPd/(\S+)$">
2620
+ <description>miniupnpd on an Ubuntu xenial/16.04</description>
2621
+ <example os.version="16.04" service.version="1.4">Ubuntu/xenial UPnP/1.0 MiniUPnPd/1.4</example>
2622
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2623
+ <param pos="1" name="service.version"/>
2624
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2625
+ <param pos="0" name="os.product" value="Linux"/>
2626
+ <param pos="0" name="os.version" value="16.04"/>
2627
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:16.04"/>
2628
+ </fingerprint>
2629
+ <fingerprint pattern="(?i)^Ubuntu\/utopic UPnP/\S+ MiniUPnPd/(\S+)$">
2630
+ <description>miniupnpd on an Ubuntu utopic/14.10</description>
2631
+ <example os.version="14.10" service.version="1.4">Ubuntu/utopic UPnP/1.0 MiniUPnPd/1.4</example>
2632
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2633
+ <param pos="1" name="service.version"/>
2634
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2635
+ <param pos="0" name="os.product" value="Linux"/>
2636
+ <param pos="0" name="os.version" value="14.10"/>
2637
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:14.10"/>
2638
+ </fingerprint>
2639
+ <fingerprint pattern="(?i)^Ubuntu\/trusty UPnP/\S+ MiniUPnPd/(\S+)$">
2640
+ <description>miniupnpd on an Ubuntu trusty/14.04</description>
2641
+ <example os.version="14.04" service.version="1.4">Ubuntu/trusty UPnP/1.0 MiniUPnPd/1.4</example>
2642
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2643
+ <param pos="1" name="service.version"/>
2644
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2645
+ <param pos="0" name="os.product" value="Linux"/>
2646
+ <param pos="0" name="os.version" value="14.04"/>
2647
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:14.04"/>
2648
+ </fingerprint>
2649
+ <fingerprint pattern="(?i)^Ubuntu\/saucy UPnP/\S+ MiniUPnPd/(\S+)$">
2650
+ <description>miniupnpd on an Ubuntu saucy/13.10</description>
2651
+ <example os.version="13.10" service.version="1.4">Ubuntu/saucy UPnP/1.0 MiniUPnPd/1.4</example>
2652
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2653
+ <param pos="1" name="service.version"/>
2654
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2655
+ <param pos="0" name="os.product" value="Linux"/>
2656
+ <param pos="0" name="os.version" value="13.10"/>
2657
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:13.10"/>
2658
+ </fingerprint>
2659
+ <fingerprint pattern="(?i)^Ubuntu\/raring UPnP/\S+ MiniUPnPd/(\S+)$">
2660
+ <description>miniupnpd on an Ubuntu raring/13.04</description>
2661
+ <example os.version="13.04" service.version="1.4">Ubuntu/raring UPnP/1.0 MiniUPnPd/1.4</example>
2662
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2663
+ <param pos="1" name="service.version"/>
2664
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2665
+ <param pos="0" name="os.product" value="Linux"/>
2666
+ <param pos="0" name="os.version" value="13.04"/>
2667
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:13.04"/>
2668
+ </fingerprint>
2669
+ <fingerprint pattern="(?i)^Ubuntu\/quantal UPnP/\S+ MiniUPnPd/(\S+)$">
2670
+ <description>miniupnpd on an Ubuntu quantal/12.10</description>
2671
+ <example os.version="12.10" service.version="1.4">Ubuntu/quantal UPnP/1.0 MiniUPnPd/1.4</example>
2672
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2673
+ <param pos="1" name="service.version"/>
2674
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2675
+ <param pos="0" name="os.product" value="Linux"/>
2676
+ <param pos="0" name="os.version" value="12.10"/>
2677
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:12.10"/>
2678
+ </fingerprint>
2679
+ <fingerprint pattern="(?i)^Ubuntu\/precise UPnP/\S+ MiniUPnPd/(\S+)$">
2680
+ <description>miniupnpd on an Ubuntu precise/12.04</description>
2681
+ <example os.version="12.04" service.version="1.4">Ubuntu/precise UPnP/1.0 MiniUPnPd/1.4</example>
2682
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2683
+ <param pos="1" name="service.version"/>
2684
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2685
+ <param pos="0" name="os.product" value="Linux"/>
2686
+ <param pos="0" name="os.version" value="12.04"/>
2687
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:12.04"/>
2688
+ </fingerprint>
2689
+ <fingerprint pattern="(?i)^Ubuntu\/oneiric UPnP/\S+ MiniUPnPd/(\S+)$">
2690
+ <description>miniupnpd on an Ubuntu oneiric/11.10</description>
2691
+ <example os.version="11.10" service.version="1.4">Ubuntu/oneiric UPnP/1.0 MiniUPnPd/1.4</example>
2692
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2693
+ <param pos="1" name="service.version"/>
2694
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2695
+ <param pos="0" name="os.product" value="Linux"/>
2696
+ <param pos="0" name="os.version" value="11.10"/>
2697
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:11.10"/>
2698
+ </fingerprint>
2699
+ <fingerprint pattern="(?i)^Ubuntu\/natty UPnP/\S+ MiniUPnPd/(\S+)$">
2700
+ <description>miniupnpd on an Ubuntu natty/11.04</description>
2701
+ <example os.version="11.04" service.version="1.4">Ubuntu/natty UPnP/1.0 MiniUPnPd/1.4</example>
2702
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2703
+ <param pos="1" name="service.version"/>
2704
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2705
+ <param pos="0" name="os.product" value="Linux"/>
2706
+ <param pos="0" name="os.version" value="11.04"/>
2707
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:11.04"/>
2708
+ </fingerprint>
2709
+ <fingerprint pattern="(?i)^Ubuntu\/maverick UPnP/\S+ MiniUPnPd/(\S+)$">
2710
+ <description>miniupnpd on an Ubuntu maverick/10.10</description>
2711
+ <example os.version="10.10" service.version="1.4">Ubuntu/maverick UPnP/1.0 MiniUPnPd/1.4</example>
2712
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2713
+ <param pos="1" name="service.version"/>
2714
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2715
+ <param pos="0" name="os.product" value="Linux"/>
2716
+ <param pos="0" name="os.version" value="10.10"/>
2717
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:10.10"/>
2718
+ </fingerprint>
2719
+ <fingerprint pattern="(?i)^Ubuntu\/lucid UPnP/\S+ MiniUPnPd/(\S+)$">
2720
+ <description>miniupnpd on an Ubuntu lucid/10.04</description>
2721
+ <example os.version="10.04" service.version="1.4">Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4</example>
2722
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2723
+ <param pos="1" name="service.version"/>
2724
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2725
+ <param pos="0" name="os.product" value="Linux"/>
2726
+ <param pos="0" name="os.version" value="10.04"/>
2727
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:10.04"/>
2728
+ </fingerprint>
2729
+ <fingerprint pattern="(?i)^Ubuntu\/karmic UPnP/\S+ MiniUPnPd/(\S+)$">
2730
+ <description>miniupnpd on an Ubuntu karmic/9.10</description>
2731
+ <example os.version="9.10" service.version="1.4">Ubuntu/karmic UPnP/1.0 MiniUPnPd/1.4</example>
2732
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2733
+ <param pos="1" name="service.version"/>
2734
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2735
+ <param pos="0" name="os.product" value="Linux"/>
2736
+ <param pos="0" name="os.version" value="9.10"/>
2737
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:9.10"/>
2738
+ </fingerprint>
2739
+ <fingerprint pattern="(?i)^Ubuntu\/jaunty UPnP/\S+ MiniUPnPd/(\S+)$">
2740
+ <description>miniupnpd on an Ubuntu jaunty/9.04</description>
2741
+ <example os.version="9.04" service.version="1.4">Ubuntu/jaunty UPnP/1.0 MiniUPnPd/1.4</example>
2742
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2743
+ <param pos="1" name="service.version"/>
2744
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2745
+ <param pos="0" name="os.product" value="Linux"/>
2746
+ <param pos="0" name="os.version" value="9.04"/>
2747
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:9.04"/>
2748
+ </fingerprint>
2749
+ <fingerprint pattern="(?i)^Ubuntu\/hardy UPnP/\S+ MiniUPnPd/(\S+)$">
2750
+ <description>miniupnpd on an Ubuntu hardy/8.04</description>
2751
+ <example os.version="8.04" service.version="1.4">Ubuntu/hardy UPnP/1.0 MiniUPnPd/1.4</example>
2752
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2753
+ <param pos="1" name="service.version"/>
2754
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
2755
+ <param pos="0" name="os.product" value="Linux"/>
2756
+ <param pos="0" name="os.version" value="8.04"/>
2757
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:8.04"/>
2758
+ </fingerprint>
2759
+ <fingerprint pattern="(?i)^Linux Mips (\S+) UPnP/\S+ MiniUPnPd/(\S+)$">
2760
+ <description>Linux MIPS UPnP Server</description>
2761
+ <example>Linux Mips 2.4.20 UPnP/1.0 MiniUPnPd/1.2</example>
2762
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2763
+ <param pos="2" name="service.version"/>
2764
+ <param pos="0" name="os.vendor" value="Linux"/>
2765
+ <param pos="0" name="os.product" value="Linux"/>
2766
+ <param pos="1" name="os.version"/>
2767
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
2768
+ </fingerprint>
2769
+ <fingerprint pattern="(?i)^SmoothWall Express/(\S+) UPnP/\S+ miniupnpd/(\S+)$">
2770
+ <description>Smoothwall Express UPnP Server</description>
2771
+ <example os.version="3.0" service.version="1.0">SmoothWall Express/3.0 UPnP/1.0 miniupnpd/1.0</example>
2772
+ <param pos="0" name="os.vendor" value="Smoothwall"/>
2773
+ <param pos="0" name="os.product" value="Smoothwall"/>
2774
+ <param pos="1" name="os.version"/>
2775
+ <param pos="0" name="os.cpe23" value="cpe:/o:smoothwall:smoothwall:{os.version}"/>
2776
+ <param pos="0" name="service.product" value="MiniUPnP"/>
2777
+ <param pos="2" name="service.version"/>
2778
+ </fingerprint>
2779
+ <fingerprint pattern="^(\S+) \d+/Service Pack \d+, UPnP/[\d\.]+, TVersity Media Server$">
2780
+ <description>TVersity Media Server UPnP Server with Service Pack</description>
2781
+ <example>5.2.3790 2/Service Pack 1, UPnP/1.0, TVersity Media Server</example>
2782
+ <example>5.1.2600 2/Service Pack 3, UPnP/1.0, TVersity Media Server</example>
2783
+ <param pos="0" name="service.vendor" value="TVersity"/>
2784
+ <param pos="0" name="service.product" value="Media Server"/>
2785
+ <param pos="1" name="service.version"/>
2786
+ </fingerprint>
2787
+ <fingerprint pattern="^(\S+) 2/, UPnP/\S+, TVersity Media Server$">
2788
+ <description>TVersity Media Server UPnP Server</description>
2789
+ <example>6.2.8400 2/, UPnP/1.0, TVersity Media Server</example>
2790
+ <example>6.2.9200 2/, UPnP/1.0, TVersity Media Server</example>
2791
+ <example>6.0.6000 2/, UPnP/1.0, TVersity Media Server</example>
2792
+ <example>6.1.7600 2/, UPnP/1.0, TVersity Media Server</example>
2793
+ <param pos="0" name="service.vendor" value="TVersity"/>
2794
+ <param pos="0" name="service.product" value="Media Server"/>
2795
+ <param pos="1" name="service.version"/>
2796
+ </fingerprint>
2797
+ <fingerprint pattern="^LINUX/([\d\.]+) UPnP/[\d\.]+ BRCM400/([\d\.]+)$">
2798
+ <description>Belkin/Linksys BRCM400 Wireless Router UPnP Server</description>
2799
+ <example>LINUX/2.4 UPnP/1.0 BRCM400/1.0</example>
2800
+ <param pos="0" name="service.vendor" value="Linksys"/>
2801
+ <param pos="0" name="service.product" value="BRCM400"/>
2802
+ <param pos="2" name="service.version"/>
2803
+ <param pos="0" name="os.vendor" value="Linksys"/>
2804
+ <param pos="0" name="os.product" value="Linux"/>
2805
+ <param pos="1" name="os.version"/>
2806
+ <param pos="0" name="os.device" value="Router"/>
2807
+ </fingerprint>
2808
+ <fingerprint pattern="^Linux-(\S+), UPnP/[\d\.]+, PMS/([\d\.]+)$">
2809
+ <description>PlayStation3 Media Server UPnP Server - linux</description>
2810
+ <example>Linux-amd64-2.6.18-238.9.1.el5, UPnP/1.0, PMS/1.52.1</example>
2811
+ <example>Linux-i386-2.6.33.2, UPnP/1.0, PMS/1.21.1</example>
2812
+ <param pos="0" name="service.vendor" value="Sony"/>
2813
+ <param pos="0" name="service.product" value="PMS"/>
2814
+ <param pos="2" name="service.version"/>
2815
+ <param pos="0" name="os.vendor" value="Linux"/>
2816
+ <param pos="0" name="os.product" value="Linux"/>
2817
+ <param pos="1" name="os.version"/>
2818
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
2819
+ </fingerprint>
2820
+ <fingerprint pattern="^Windows_XP-(\S+), UPnP/[\d\.]+, PMS/([\d\.]+)$">
2821
+ <description>PlayStation3 Media Server UPnP Server - Windows XP</description>
2822
+ <example>Windows_XP-amd64-5.2, UPnP/1.0, PMS/1.54.0</example>
2823
+ <example>Windows_XP-x86-5.1, UPnP/1.0, PMS/1.20.400</example>
2824
+ <param pos="0" name="service.vendor" value="Sony"/>
2825
+ <param pos="0" name="service.product" value="PMS"/>
2826
+ <param pos="2" name="service.version"/>
2827
+ <param pos="0" name="os.vendor" value="Microsoft"/>
2828
+ <param pos="0" name="os.product" value="Windows XP"/>
2829
+ <param pos="1" name="os.version"/>
2830
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_xp:{os.version}"/>
2831
+ </fingerprint>
2832
+ <fingerprint pattern="^Windows_7-x86-(\S+), UPnP/[\d\.]+, PMS/([\d\.]+)$">
2833
+ <description>PlayStation3 Media Server UPnP Server - Windows 7 x86</description>
2834
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.20</example>
2835
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.22.0</example>
2836
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.25.1</example>
2837
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.51.0</example>
2838
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.20.412</example>
2839
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.71.0</example>
2840
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.20.409</example>
2841
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.72.0</example>
2842
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.10.51</example>
2843
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.40.0</example>
2844
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.53.0</example>
2845
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.52.0</example>
2846
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.50.1</example>
2847
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.30.1</example>
2848
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.50.0</example>
2849
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.54.0</example>
2850
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.52.1</example>
2851
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.60.0</example>
2852
+ <example>Windows_7-x86-6.1, UPnP/1.0, PMS/1.70.1</example>
2853
+ <param pos="0" name="service.vendor" value="Sony"/>
2854
+ <param pos="0" name="service.product" value="PMS"/>
2855
+ <param pos="2" name="service.version"/>
2856
+ <param pos="0" name="os.vendor" value="Microsoft"/>
2857
+ <param pos="0" name="os.product" value="Windows 7"/>
2858
+ <param pos="1" name="os.version"/>
2859
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_7:{os.version}"/>
2860
+ </fingerprint>
2861
+ <fingerprint pattern="^Windows_7-x86_64-(\S+), UPnP/[\d\.]+, PMS/([\d\.]+)$">
2862
+ <description>PlayStation3 Media Server UPnP Server - Windows 7 x86_64</description>
2863
+ <param pos="0" name="service.vendor" value="Sony"/>
2864
+ <param pos="0" name="service.product" value="PMS"/>
2865
+ <param pos="2" name="service.version"/>
2866
+ <param pos="0" name="os.vendor" value="Microsoft"/>
2867
+ <param pos="0" name="os.product" value="Windows 7"/>
2868
+ <param pos="1" name="os.version"/>
2869
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_7:{os.version}"/>
2870
+ </fingerprint>
2871
+ <fingerprint pattern="^Microsoft-Windows/6.2 UPnP/(?:\S+) UPnP-Device-Host/(?:\S+)$">
2872
+ <description>Windows 8 or Windows Server 2012 with unknown UPnP components</description>
2873
+ <param pos="0" name="os.vendor" value="Microsoft"/>
2874
+ <param pos="0" name="os.product" value="Windows 8"/>
2875
+ <param pos="0" name="os.certainty" value="0.65"/>
2876
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_8:-"/>
2877
+ </fingerprint>
2878
+ <fingerprint pattern="^Mac_OS_X-x86_64-(\S+), UPnP/[\d\.]+, PMS/([\d\.]+)$">
2879
+ <description>PlayStation3 Media Server UPnP Server - macOS x86_64</description>
2880
+ <example>Mac_OS_X-x86_64-10.5.8, UPnP/1.0, PMS/1.20</example>
2881
+ <param pos="0" name="service.vendor" value="Sony"/>
2882
+ <param pos="0" name="service.product" value="PMS"/>
2883
+ <param pos="2" name="service.version"/>
2884
+ <param pos="0" name="os.vendor" value="Apple"/>
2885
+ <param pos="0" name="os.product" value="Mac OS X"/>
2886
+ <param pos="1" name="os.version"/>
2887
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:{os.version}"/>
2888
+ </fingerprint>
2889
+ <fingerprint pattern="^Linux/(\S+), UPnP/\S+, Free UPnP Entertainment Service/ReadyNAS$">
2890
+ <description>Free UPnP Entertainment Service UPnP Server - Linux on ReadyNAS</description>
2891
+ <param pos="0" name="service.product" value="FUPPES"/>
2892
+ <param pos="0" name="os.vendor" value="Linux"/>
2893
+ <param pos="0" name="os.product" value="Linux"/>
2894
+ <param pos="1" name="os.version"/>
2895
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
2896
+ <param pos="0" name="hw.vendor" value="Netgear"/>
2897
+ <param pos="0" name="hw.device" value="NAS"/>
2898
+ <param pos="0" name="hw.family" value="ReadyNAS"/>
2899
+ <param pos="0" name="hw.product" value="ReadyNAS"/>
2900
+ </fingerprint>
2901
+ <fingerprint pattern="^Linux/(\S+), UPnP/\S+, Free UPnP Entertainment Service/$">
2902
+ <description>Free UPnP Entertainment Service UPnP Server - Linux</description>
2903
+ <param pos="0" name="service.product" value="FUPPES"/>
2904
+ <param pos="0" name="os.vendor" value="Linux"/>
2905
+ <param pos="0" name="os.product" value="Linux"/>
2906
+ <param pos="1" name="os.version"/>
2907
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
2908
+ </fingerprint>
2909
+ <fingerprint pattern="^FreeBSD/(\S+), UPnP/\S+, Free UPnP Entertainment Service/$">
2910
+ <description>Free UPnP Entertainment Service UPnP Server - FreeBSD</description>
2911
+ <param pos="0" name="service.product" value="FUPPES"/>
2912
+ <param pos="0" name="os.vendor" value="FreeBSD"/>
2913
+ <param pos="0" name="os.product" value="FreeBSD"/>
2914
+ <param pos="1" name="os.version"/>
2915
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
2916
+ </fingerprint>
2917
+ <fingerprint pattern="^ipOS/([\d\.]+) UPnP/[\d\.]+ ipUPnP/([\d\.]+)$">
2918
+ <description>D-Link WAP Dynamic DNS UPnP Server</description>
2919
+ <param pos="0" name="service.vendor" value="D-Link"/>
2920
+ <param pos="0" name="service.product" value="ipUPnP"/>
2921
+ <param pos="2" name="service.version"/>
2922
+ <param pos="0" name="os.vendor" value="D-Link"/>
2923
+ <param pos="0" name="os.product" value="ipOS"/>
2924
+ <param pos="1" name="os.version"/>
2925
+ <param pos="0" name="os.device" value="WAP"/>
2926
+ </fingerprint>
2927
+ <fingerprint pattern="^ipOS/([\d\.]+) UPnP/[\d\.]+ ipGENADevice/([\d\.]+)$">
2928
+ <description>D-Link DGL-4300 Gaming Router UPnP Server</description>
2929
+ <param pos="0" name="service.vendor" value="D-Link"/>
2930
+ <param pos="0" name="service.product" value="ipGENADevice"/>
2931
+ <param pos="2" name="service.version"/>
2932
+ <param pos="0" name="os.vendor" value="D-Link"/>
2933
+ <param pos="0" name="os.product" value="ipOS"/>
2934
+ <param pos="1" name="os.version"/>
2935
+ <param pos="0" name="os.device" value="Router"/>
2936
+ </fingerprint>
2937
+ <fingerprint pattern="^TBS/R2 UPnP/[\d\.]+ MiniUPnPd/[\d\.]+$">
2938
+ <description>D-Link generic</description>
2939
+ <example>TBS/R2 UPnP/1.0 MiniUPnPd/1.2</example>
2940
+ <param pos="0" name="hw.vendor" value="D-Link"/>
2941
+ </fingerprint>
2942
+ <fingerprint pattern="^ipos/([\d\.]+) UPnP/[\d\.]+ (TL-\w+)/(\S+)$">
2943
+ <description>TP-Link WAP UPnP Server</description>
2944
+ <example>ipos/7.0 UPnP/1.0 TL-WR841N/6.0/7.0</example>
2945
+ <example>ipos/7.0 UPnP/1.0 TL-WR841N/8.0</example>
2946
+ <example>ipos/7.0 UPnP/1.0 TL-WR740N/4.0</example>
2947
+ <example>ipos/7.0 UPnP/1.0 TL-WR940N/1.0</example>
2948
+ <example>ipos/7.0 UPnP/1.0 TL-WR741N/4.0</example>
2949
+ <example>ipos/7.0 UPnP/1.0 TL-WR740N/1.0</example>
2950
+ <example>ipos/7.0 UPnP/1.0 TL-WR741N/1.0/2.0</example>
2951
+ <example>ipos/7.0 UPnP/1.0 TL-WR740N/1.0/2.0</example>
2952
+ <example>ipos/7.0 UPnP/1.0 TL-WR941N/2.0</example>
2953
+ <param pos="0" name="service.vendor" value="TP-Link"/>
2954
+ <param pos="2" name="service.product"/>
2955
+ <param pos="3" name="service.version"/>
2956
+ <param pos="0" name="os.vendor" value="TP-Link"/>
2957
+ <param pos="0" name="os.product" value="ipOS"/>
2958
+ <param pos="1" name="os.version"/>
2959
+ <param pos="0" name="os.device" value="WAP"/>
2960
+ </fingerprint>
2961
+ <fingerprint pattern="^Linux/(\S+\-ami), UPnP/[\d\.]+, Portable SDK for UPnP devices/(\S+)$">
2962
+ <description>AMI MegaRAC LOM UPnP</description>
2963
+ <example>Linux/3.14.17-ami, UPnP/1.0, Portable SDK for UPnP devices/1.6.20</example>
2964
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
2965
+ <param pos="0" name="hw.vendor" value="AMI"/>
2966
+ <param pos="0" name="hw.family" value="MegaRAC"/>
2967
+ <param pos="0" name="hw.product" value="MegaRAC"/>
2968
+ <param pos="0" name="os.device" value="Lights Out Management"/>
2969
+ <param pos="0" name="os.vendor" value="AMI"/>
2970
+ <param pos="1" name="os.version"/>
2971
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
2972
+ <param pos="0" name="service.product" value="libupnp"/>
2973
+ <param pos="2" name="service.version"/>
2974
+ </fingerprint>
2975
+ <fingerprint pattern="^Linux/(\S+\-axis[^,]+), UPnP/[\d\.]+, Portable SDK for UPnP devices/(\S+)$">
2976
+ <description>Axis Network Camera</description>
2977
+ <example>Linux/4.9.94-axis5, UPnP/1.0, Portable SDK for UPnP devices/1.6.22</example>
2978
+ <param pos="0" name="hw.vendor" value="AXIS"/>
2979
+ <param pos="0" name="hw.device" value="Web cam"/>
2980
+ <param pos="0" name="os.vendor" value="AXIS"/>
2981
+ <param pos="0" name="os.device" value="Web cam"/>
2982
+ <param pos="0" name="os.family" value="Linux"/>
2983
+ <param pos="1" name="os.version"/>
2984
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
2985
+ <param pos="0" name="service.product" value="libupnp"/>
2986
+ <param pos="2" name="service.version"/>
2987
+ </fingerprint>
2988
+ <fingerprint pattern="^Linux/(\S+), UPnP/[\d\.]+, Portable SDK for UPnP devices/(\S+)$">
2989
+ <description>Portable SDK for UPnP Server - Linux</description>
2990
+ <example>Linux/2.4.20-46.7asp, UPnP/1.0, Portable SDK for UPnP devices/1.6.17</example>
2991
+ <example>Linux/2.6.10-iop1-1, UPnP/1.0, Portable SDK for UPnP devices/1.4.1</example>
2992
+ <example>Linux/2.6.12-5.1-brcmstb-dm800, UPnP/1.0, Portable SDK for UPnP devices/1.6.0</example>
2993
+ <example>Linux/2.6.12.6-VENUS, UPnP/1.0, Portable SDK for UPnP devices/1.6.10</example>
2994
+ <example>Linux/2.6.12.6-arm1-040, UPnP/1.0, Portable SDK for UPnP devices/1.6.5.2</example>
2995
+ <example>Linux/2.6.13, UPnP/1.0, Portable SDK for UPnP devices/1.6.0</example>
2996
+ <example>Linux/2.6.18_pro500-davinci_N03A_IPCAM_1.0-g5c649288-dirty, UPnP/1.0, Portable SDK for UPnP devices/1.6.6</example>
2997
+ <example>Linux/2.6.28, UPnP/1.0, Portable SDK for UPnP devices/1.6.10</example>
2998
+ <example>Linux/2.6.28-11-server, UPnP/1.0, Portable SDK for UPnP devices/1.6.6</example>
2999
+ <example>Linux/2.6.28-17-generic, UPnP/1.0, Portable SDK for UPnP devices/1.6.6</example>
3000
+ <example>Linux/2.6.28.1-xxxx-std-ipv4-32, UPnP/1.0, Portable SDK for UPnP devices/1.4.3</example>
3001
+ <example>Linux/2.6.32-220.7.1.el6.x86_64, UPnP/1.0, Portable SDK for UPnP devices/1.6.14</example>
3002
+ <example>Linux/2.6.32-24-generic, UPnP/1.0, Portable SDK for UPnP devices/1.6.6</example>
3003
+ <example>Linux/2.6.32-279.1.1.el6.x86_64, UPnP/1.0, Portable SDK for UPnP devices/1.6.13</example>
3004
+ <example>Linux/2.6.32-279.11.1.el6.x86_64, UPnP/1.0, Portable SDK for UPnP devices/1.6.14</example>
3005
+ <example>Linux/2.6.32-279.14.1.el6.x86_64, UPnP/1.0, Portable SDK for UPnP devices/1.6.14</example>
3006
+ <example>Linux/2.6.32-279.14.1.el6.x86_64, UPnP/1.0, Portable SDK for UPnP devices/1.6.15</example>
3007
+ <param pos="0" name="service.product" value="libupnp"/>
3008
+ <param pos="2" name="service.version"/>
3009
+ <param pos="0" name="os.vendor" value="Linux"/>
3010
+ <param pos="0" name="os.product" value="Linux"/>
3011
+ <param pos="1" name="os.version"/>
3012
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
3013
+ </fingerprint>
3014
+ <fingerprint pattern="^Linux/(\S+) UPnP/[\d\.]+ DLNADOC/[\d\.]+ Portable SDK for UPnP devices/(\S+)$">
3015
+ <description>DLNADOC Portable SDK for UPnP Server - Linux DNLADOC variant</description>
3016
+ <example>Linux/3.0.8 UPnP/1.0 DLNADOC/1.50 Portable SDK for UPnP devices/1.6.6</example>
3017
+ <example>Linux/2.6.23.17_stm23_0125dorade00 UPnP/1.0 DLNADOC/1.50 Portable SDK for UPnP devices/1.4.6-5</example>
3018
+ <param pos="0" name="service.product" value="libupnp"/>
3019
+ <param pos="2" name="service.version"/>
3020
+ <param pos="0" name="os.vendor" value="Linux"/>
3021
+ <param pos="0" name="os.product" value="Linux"/>
3022
+ <param pos="1" name="os.version"/>
3023
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
3024
+ </fingerprint>
3025
+ <fingerprint pattern="^Linux/(\S+), UPnP/[\d\.]+, Intel SDK for UPnP devices ?/(\S+)$">
3026
+ <description>Intel SDK for UPnP Server with verbose banner</description>
3027
+ <example>Linux/2.6.10_dev-malta-mips2_fp_le, UPnP/1.0, Intel SDK for UPnP devices /1.2</example>
3028
+ <example>Linux/2.4.18_mvl30-ixdp425, UPnP/1.0, Intel SDK for UPnP devices/1.3.1</example>
3029
+ <param pos="0" name="service.product" value="libupnp"/>
3030
+ <param pos="2" name="service.version"/>
3031
+ <param pos="0" name="os.vendor" value="Linux"/>
3032
+ <param pos="0" name="os.product" value="Linux"/>
3033
+ <param pos="1" name="os.version"/>
3034
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
3035
+ </fingerprint>
3036
+ <fingerprint pattern="^Linux, UPnP/[\d\.]+, Intel SDK for UPnP devices ?/(\S+)$">
3037
+ <description>Intel SDK for UPnP Server</description>
3038
+ <example>Linux, UPnP/1.0, Intel SDK for UPnP devices /1.2</example>
3039
+ <param pos="0" name="service.product" value="libupnp"/>
3040
+ <param pos="1" name="service.version"/>
3041
+ </fingerprint>
3042
+ <fingerprint pattern="^Darwin/(\S+), UPnP/\S+, Portable SDK for UPnP devices/(\S+)$">
3043
+ <description>Portable SDK for UPnP Server - macOS</description>
3044
+ <example service.version="1.6.6" os.version="10.2.0">Darwin/10.2.0, UPnP/1.0, Portable SDK for UPnP devices/1.6.6</example>
3045
+ <param pos="0" name="service.product" value="libupnp"/>
3046
+ <param pos="2" name="service.version"/>
3047
+ <param pos="0" name="os.vendor" value="Apple"/>
3048
+ <param pos="0" name="os.product" value="Mac OS X"/>
3049
+ <param pos="1" name="os.version"/>
3050
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:{os.version}"/>
3051
+ </fingerprint>
3052
+ <fingerprint pattern="^Loxone Miniserver (.*) UPnP/1.0$">
3053
+ <description>Loxone Miniserver Smart Home</description>
3054
+ <example host.name="some name">Loxone Miniserver some name UPnP/1.0</example>
3055
+ <param pos="0" name="hw.vendor" value="Loxone"/>
3056
+ <param pos="0" name="hw.product" value="Miniserver"/>
3057
+ <param pos="0" name="hw.device" value="Building Automation"/>
3058
+ <param pos="1" name="host.name"/>
3059
+ </fingerprint>
3060
+ <fingerprint pattern="^RouterOS/(\S+)UPnP/1.0 MikroTik UPnP/1.0$">
3061
+ <description>MikroTik RouterOS</description>
3062
+ <example os.version="6.43">RouterOS/6.43UPnP/1.0 MikroTik UPnP/1.0</example>
3063
+ <param pos="0" name="os.vendor" value="MikroTik"/>
3064
+ <param pos="0" name="os.device" value="Router"/>
3065
+ <param pos="0" name="os.family" value="RouterOS"/>
3066
+ <param pos="0" name="os.product" value="RouterOS"/>
3067
+ <param pos="1" name="os.version"/>
3068
+ <param pos="0" name="os.cpe23" value="cpe:/o:mikrotik:routeros:{os.version}"/>
3069
+ </fingerprint>
3070
+ <fingerprint pattern="^Roku UPnP/\S+ Roku/(\S+)$">
3071
+ <description>Roku with a version</description>
3072
+ <example hw.version="8.1.6">Roku UPnP/1.0 Roku/8.1.6</example>
3073
+ <param pos="0" name="hw.vendor" value="Roku"/>
3074
+ <param pos="0" name="hw.product" value="Roku"/>
3075
+ <param pos="0" name="hw.device" value="Media Server"/>
3076
+ <param pos="1" name="hw.version"/>
3077
+ </fingerprint>
3078
+ <fingerprint pattern="^Roku/(\S+) UPnP/\S+ Roku/\S+$">
3079
+ <description>Roku with double versions</description>
3080
+ <example hw.version="9.2.0">Roku/9.2.0 UPnP/1.0 Roku/9.2.0</example>
3081
+ <param pos="0" name="hw.vendor" value="Roku"/>
3082
+ <param pos="0" name="hw.product" value="Roku"/>
3083
+ <param pos="0" name="hw.device" value="Media Server"/>
3084
+ <param pos="1" name="hw.version"/>
3085
+ </fingerprint>
3086
+ <fingerprint pattern="^Roku UPnP/\S+ MiniUPnPd/\S+$">
3087
+ <description>Roku without a version</description>
3088
+ <example>Roku UPnP/1.0 MiniUPnPd/1.4</example>
3089
+ <param pos="0" name="hw.vendor" value="Roku"/>
3090
+ <param pos="0" name="hw.product" value="Roku"/>
3091
+ <param pos="0" name="hw.device" value="Media Server"/>
3092
+ </fingerprint>
3093
+ <fingerprint pattern="^UPnP/\S+, DLNADOC/\S+, Platinum/(\S+)$">
3094
+ <description>Xbox Media Center UPnP Server</description>
3095
+ <example>UPnP/1.0, DLNADOC/1.50, Platinum/0.5.1</example>
3096
+ <example>UPnP/1.0, DLNADOC/1.50, Platinum/0.6.6.0</example>
3097
+ <example>UPnP/1.0, DLNADOC/1.50, Platinum/0.5.4.0</example>
3098
+ <example>UPnP/1.0, DLNADOC/1.50, Platinum/0.5.3.0</example>
3099
+ <param pos="0" name="service.vendor" value="Microsoft"/>
3100
+ <param pos="0" name="service.product" value="XBMC"/>
3101
+ <param pos="1" name="service.version"/>
3102
+ </fingerprint>
3103
+ <fingerprint pattern="Synology/DSM/(\d+\.\d+\.\d+\.\d+)$">
3104
+ <description>Synology DiskStation NAS with IP</description>
3105
+ <example host.ip="192.168.1.100">Synology/DSM/192.168.1.100</example>
3106
+ <param pos="0" name="hw.vendor" value="Synology"/>
3107
+ <param pos="0" name="hw.family" value="DiskStation"/>
3108
+ <param pos="0" name="hw.device" value="NAS"/>
3109
+ <param pos="0" name="os.device" value="NAS"/>
3110
+ <param pos="0" name="os.family" value="Linux"/>
3111
+ <param pos="0" name="os.product" value="DSM"/>
3112
+ <param pos="0" name="os.vendor" value="Synology"/>
3113
+ <param pos="1" name="host.ip"/>
3114
+ </fingerprint>
3115
+ <fingerprint pattern="Synology/DSM/(\S+)$">
3116
+ <description>Synology DiskStation NAS with hostname</description>
3117
+ <example host.name="stuff">Synology/DSM/stuff</example>
3118
+ <param pos="0" name="hw.vendor" value="Synology"/>
3119
+ <param pos="0" name="hw.family" value="DiskStation"/>
3120
+ <param pos="0" name="hw.device" value="NAS"/>
3121
+ <param pos="1" name="host.name"/>
3122
+ </fingerprint>
3123
+ <fingerprint pattern="^NetData Embedded HTTP Server v([a-zA-Z0-9\-\.]+)$">
3124
+ <description>NetData Embedded HTTP Server</description>
3125
+ <example service.version="1.16.1-146-g2f5e36ef">NetData Embedded HTTP Server v1.16.1-146-g2f5e36ef</example>
3126
+ <param pos="0" name="service.vendor" value="NetData"/>
3127
+ <param pos="0" name="service.product" value="NetData"/>
3128
+ <param pos="1" name="service.version"/>
3129
+ </fingerprint>
3130
+ <fingerprint pattern="^Solstice 2\.0+$">
3131
+ <description>SolsticePod</description>
3132
+ <example>Solstice 2.0</example>
3133
+ <param pos="0" name="hw.vendor" value="Mersive"/>
3134
+ <param pos="0" name="hw.device" value="Wireless Presenter"/>
3135
+ <param pos="0" name="hw.product" value="SolsticePod"/>
3136
+ </fingerprint>
3137
+ <fingerprint pattern="^MLC ([^\/]+)/([\d\.]+)$">
3138
+ <description>Extron MediaLink Controller HTTP Server</description>
3139
+ <example extron.model="104 IP PLUS" hw.version="1.03">MLC 104 IP PLUS/1.03</example>
3140
+ <param pos="0" name="hw.vendor" value="Extron"/>
3141
+ <param pos="0" name="hw.device" value="Display Controller"/>
3142
+ <param pos="0" name="hw.product" value="{extron.model} MediaLink Controller"/>
3143
+ <param pos="0" name="os.vendor" value="Extron"/>
3144
+ <param pos="0" name="os.family" value="Linux"/>
3145
+ <param pos="1" name="extron.model"/>
3146
+ <param pos="2" name="hw.version"/>
3147
+ </fingerprint>
3148
+ <fingerprint pattern="^Jetty \(Bluecat Networks\)$">
3149
+ <description>BlueCat Appliance</description>
3150
+ <example>Jetty (Bluecat Networks)</example>
3151
+ <param pos="0" name="hw.vendor" value="BlueCat"/>
3152
+ <param pos="0" name="hw.device" value="Network Appliance"/>
3153
+ </fingerprint>
3154
+ <fingerprint pattern="^Crestron Webserver$">
3155
+ <description>Crestron Video Conferencing</description>
3156
+ <example>Crestron Webserver</example>
3157
+ <param pos="0" name="hw.vendor" value="Crestron"/>
3158
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
3159
+ <param pos="0" name="os.vendor" value="Crestron"/>
3160
+ <param pos="0" name="os.family" value="Linux"/>
3161
+ <param pos="0" name="os.device" value="Video Conferencing"/>
3162
+ </fingerprint>
3163
+ <fingerprint pattern="^OPNsense$">
3164
+ <description>OPNsense Firewall</description>
3165
+ <example>OPNsense</example>
3166
+ <param pos="0" name="hw.vendor" value="OPNsense"/>
3167
+ <param pos="0" name="hw.device" value="Firewall"/>
3168
+ <param pos="0" name="hw.product" value="Firewall"/>
3169
+ <param pos="0" name="os.vendor" value="OPNsense"/>
3170
+ <param pos="0" name="os.product" value="FreeBSD"/>
3171
+ </fingerprint>
3172
+ <fingerprint pattern="^ELAN Controller$">
3173
+ <description>ELAN Smart Home Controller</description>
3174
+ <example>ELAN Controller</example>
3175
+ <param pos="0" name="hw.vendor" value="ELAN"/>
3176
+ <param pos="0" name="hw.device" value="Building Automation"/>
3177
+ <param pos="0" name="hw.product" value="Home Controller"/>
3178
+ <param pos="0" name="os.vendor" value="ELAN"/>
3179
+ <param pos="0" name="os.family" value="Linux"/>
3180
+ </fingerprint>
3181
+ <fingerprint pattern="^STR_SettingServer$">
3182
+ <description>Sony STR AV Receiver</description>
3183
+ <example>STR_SettingServer</example>
3184
+ <param pos="0" name="hw.vendor" value="Sony"/>
3185
+ <param pos="0" name="hw.device" value="Media Server"/>
3186
+ <param pos="0" name="hw.product" value="AV Receiver"/>
3187
+ </fingerprint>
3188
+ <fingerprint pattern="^MWS 0.01$">
3189
+ <description>ANNKE IP Camera</description>
3190
+ <example>MWS 0.01</example>
3191
+ <param pos="0" name="hw.vendor" value="ANNKE"/>
3192
+ <param pos="0" name="hw.device" value="Web cam"/>
3193
+ <param pos="0" name="hw.product" value="IP Camera"/>
3194
+ </fingerprint>
3195
+ </fingerprints>