recog 2.0.13 → 2.0.14
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CONTRIBUTING.md +19 -6
- data/features/{xml → data}/failing_banners_fingerprints.xml +0 -0
- data/features/{xml → data}/matching_banners_fingerprints.xml +0 -0
- data/features/{xml → data}/no_tests.xml +0 -0
- data/features/{xml/banners.xml → data/sample_banner.txt} +0 -0
- data/features/{xml → data}/successful_tests.xml +0 -0
- data/features/{xml → data}/tests_with_failures.xml +0 -0
- data/features/{xml → data}/tests_with_warnings.xml +0 -0
- data/features/match.feature +2 -2
- data/features/support/env.rb +1 -1
- data/lib/recog/version.rb +1 -1
- data/misc/order.xsl +17 -0
- data/spec/lib/fingerprint_self_test_spec.rb +8 -0
- data/xml/apache_os.xml +270 -334
- data/xml/architecture.xml +28 -41
- data/xml/fingerprints.xsd +37 -0
- data/xml/ftp_banners.xml +52 -58
- data/xml/h323_callresp.xml +597 -695
- data/xml/hp_pjl_id.xml +370 -409
- data/xml/http_cookies.xml +304 -348
- data/xml/http_servers.xml +3202 -3483
- data/xml/http_wwwauth.xml +342 -409
- data/xml/imap_banners.xml +149 -190
- data/xml/mdns_device-info_txt.xml +97 -111
- data/xml/mdns_workstation_txt.xml +6 -6
- data/xml/mysql_banners.xml +99 -198
- data/xml/mysql_error.xml +4 -11
- data/xml/nntp_banners.xml +42 -45
- data/xml/ntp_banners.xml +2 -3
- data/xml/pop_banners.xml +214 -247
- data/xml/rsh_resp.xml +68 -76
- data/xml/sip_banners.xml +19 -19
- data/xml/sip_user_agents.xml +63 -74
- data/xml/smb_native_os.xml +387 -433
- data/xml/smtp_banners.xml +1318 -1460
- data/xml/smtp_debug.xml +24 -27
- data/xml/smtp_ehlo.xml +19 -22
- data/xml/smtp_expn.xml +61 -70
- data/xml/smtp_help.xml +139 -160
- data/xml/smtp_mailfrom.xml +14 -16
- data/xml/smtp_noop.xml +28 -31
- data/xml/smtp_quit.xml +16 -18
- data/xml/smtp_rcptto.xml +8 -10
- data/xml/smtp_rset.xml +12 -13
- data/xml/smtp_turn.xml +12 -13
- data/xml/smtp_vrfy.xml +66 -76
- data/xml/snmp_sysdescr.xml +7257 -8016
- data/xml/snmp_sysobjid.xml +392 -434
- data/xml/ssh_banners.xml +783 -867
- data/xml/upnp_banners.xml +594 -628
- metadata +11 -9
data/xml/ssh_banners.xml
CHANGED
|
@@ -1,508 +1,467 @@
|
|
|
1
|
-
<?xml version="1.0"?>
|
|
1
|
+
<?xml version="1.0" encoding="UTF-8"?>
|
|
2
2
|
<!--
|
|
3
3
|
SSH "software revision and comment" strings (official RFC nomenclature for the part of
|
|
4
4
|
the identification string after "SSH-x.x-") are matched against these patterns to
|
|
5
5
|
fingerprint SSH servers.
|
|
6
6
|
-->
|
|
7
|
-
|
|
8
7
|
<fingerprints matches="ssh.banner">
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
<
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
<
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
|
|
76
|
-
|
|
77
|
-
|
|
78
|
-
|
|
79
|
-
|
|
80
|
-
|
|
81
|
-
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
|
|
94
|
-
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
|
|
98
|
-
|
|
99
|
-
|
|
100
|
-
|
|
101
|
-
|
|
102
|
-
|
|
103
|
-
|
|
104
|
-
|
|
105
|
-
|
|
106
|
-
|
|
107
|
-
|
|
108
|
-
|
|
109
|
-
|
|
110
|
-
|
|
111
|
-
|
|
112
|
-
|
|
113
|
-
|
|
114
|
-
|
|
115
|
-
|
|
116
|
-
|
|
117
|
-
|
|
118
|
-
|
|
119
|
-
|
|
120
|
-
|
|
121
|
-
|
|
122
|
-
|
|
123
|
-
|
|
124
|
-
|
|
125
|
-
|
|
126
|
-
|
|
127
|
-
|
|
128
|
-
|
|
129
|
-
|
|
130
|
-
|
|
131
|
-
|
|
132
|
-
|
|
133
|
-
|
|
134
|
-
|
|
135
|
-
|
|
136
|
-
|
|
137
|
-
|
|
138
|
-
|
|
139
|
-
|
|
140
|
-
|
|
141
|
-
|
|
142
|
-
|
|
143
|
-
|
|
144
|
-
|
|
145
|
-
|
|
146
|
-
|
|
147
|
-
|
|
148
|
-
|
|
149
|
-
|
|
150
|
-
|
|
151
|
-
|
|
152
|
-
|
|
153
|
-
|
|
154
|
-
|
|
155
|
-
|
|
156
|
-
|
|
157
|
-
|
|
158
|
-
|
|
159
|
-
|
|
160
|
-
|
|
161
|
-
|
|
162
|
-
|
|
163
|
-
|
|
164
|
-
|
|
165
|
-
|
|
166
|
-
|
|
167
|
-
|
|
168
|
-
|
|
169
|
-
|
|
170
|
-
|
|
171
|
-
|
|
172
|
-
|
|
173
|
-
|
|
174
|
-
|
|
175
|
-
|
|
176
|
-
|
|
177
|
-
|
|
178
|
-
|
|
179
|
-
|
|
180
|
-
|
|
181
|
-
|
|
182
|
-
|
|
183
|
-
|
|
184
|
-
|
|
185
|
-
|
|
186
|
-
|
|
187
|
-
|
|
188
|
-
|
|
189
|
-
|
|
190
|
-
|
|
191
|
-
|
|
192
|
-
|
|
193
|
-
|
|
194
|
-
|
|
195
|
-
|
|
196
|
-
|
|
197
|
-
|
|
198
|
-
|
|
199
|
-
|
|
200
|
-
|
|
201
|
-
|
|
202
|
-
|
|
203
|
-
|
|
204
|
-
|
|
205
|
-
|
|
206
|
-
|
|
207
|
-
|
|
208
|
-
|
|
209
|
-
|
|
210
|
-
|
|
211
|
-
|
|
212
|
-
|
|
213
|
-
|
|
214
|
-
|
|
215
|
-
|
|
216
|
-
|
|
217
|
-
|
|
218
|
-
|
|
219
|
-
|
|
220
|
-
|
|
221
|
-
|
|
222
|
-
|
|
223
|
-
|
|
224
|
-
|
|
225
|
-
|
|
226
|
-
|
|
227
|
-
|
|
228
|
-
|
|
229
|
-
|
|
230
|
-
|
|
231
|
-
|
|
232
|
-
|
|
233
|
-
|
|
234
|
-
|
|
235
|
-
|
|
236
|
-
|
|
237
|
-
|
|
238
|
-
|
|
239
|
-
|
|
240
|
-
|
|
241
|
-
|
|
242
|
-
|
|
243
|
-
|
|
244
|
-
|
|
245
|
-
|
|
246
|
-
|
|
247
|
-
|
|
248
|
-
|
|
249
|
-
|
|
250
|
-
|
|
251
|
-
|
|
252
|
-
|
|
253
|
-
|
|
254
|
-
|
|
255
|
-
|
|
256
|
-
|
|
257
|
-
|
|
258
|
-
|
|
259
|
-
|
|
260
|
-
|
|
261
|
-
|
|
262
|
-
|
|
263
|
-
|
|
264
|
-
|
|
265
|
-
|
|
266
|
-
|
|
267
|
-
|
|
268
|
-
|
|
269
|
-
|
|
270
|
-
|
|
271
|
-
|
|
272
|
-
|
|
273
|
-
|
|
274
|
-
|
|
275
|
-
|
|
276
|
-
|
|
277
|
-
|
|
278
|
-
|
|
279
|
-
|
|
280
|
-
|
|
281
|
-
|
|
282
|
-
|
|
283
|
-
|
|
284
|
-
|
|
285
|
-
|
|
286
|
-
|
|
287
|
-
|
|
288
|
-
|
|
289
|
-
|
|
290
|
-
|
|
291
|
-
|
|
292
|
-
|
|
293
|
-
|
|
294
|
-
|
|
295
|
-
|
|
296
|
-
|
|
297
|
-
|
|
298
|
-
|
|
299
|
-
|
|
300
|
-
|
|
301
|
-
|
|
302
|
-
|
|
303
|
-
|
|
304
|
-
|
|
305
|
-
|
|
306
|
-
|
|
307
|
-
|
|
308
|
-
|
|
309
|
-
|
|
310
|
-
|
|
311
|
-
|
|
312
|
-
|
|
313
|
-
|
|
314
|
-
|
|
315
|
-
|
|
316
|
-
|
|
317
|
-
|
|
318
|
-
|
|
319
|
-
|
|
320
|
-
|
|
321
|
-
|
|
322
|
-
|
|
323
|
-
|
|
324
|
-
|
|
325
|
-
|
|
326
|
-
|
|
327
|
-
|
|
328
|
-
|
|
329
|
-
|
|
330
|
-
|
|
331
|
-
|
|
332
|
-
|
|
333
|
-
|
|
334
|
-
|
|
335
|
-
|
|
336
|
-
|
|
337
|
-
|
|
338
|
-
|
|
339
|
-
|
|
340
|
-
|
|
341
|
-
|
|
342
|
-
|
|
343
|
-
|
|
344
|
-
|
|
345
|
-
|
|
346
|
-
|
|
347
|
-
|
|
348
|
-
|
|
349
|
-
|
|
350
|
-
|
|
351
|
-
|
|
352
|
-
|
|
353
|
-
|
|
354
|
-
|
|
355
|
-
|
|
356
|
-
|
|
357
|
-
|
|
358
|
-
|
|
359
|
-
|
|
360
|
-
|
|
361
|
-
|
|
362
|
-
|
|
363
|
-
|
|
364
|
-
|
|
365
|
-
|
|
366
|
-
|
|
367
|
-
|
|
368
|
-
|
|
369
|
-
|
|
370
|
-
|
|
371
|
-
|
|
372
|
-
|
|
373
|
-
|
|
374
|
-
|
|
375
|
-
|
|
376
|
-
|
|
377
|
-
|
|
378
|
-
|
|
379
|
-
|
|
380
|
-
|
|
381
|
-
|
|
382
|
-
|
|
383
|
-
|
|
384
|
-
|
|
385
|
-
|
|
386
|
-
|
|
387
|
-
|
|
388
|
-
|
|
389
|
-
|
|
390
|
-
|
|
391
|
-
|
|
392
|
-
|
|
393
|
-
|
|
394
|
-
|
|
395
|
-
|
|
396
|
-
|
|
397
|
-
|
|
398
|
-
|
|
399
|
-
|
|
400
|
-
|
|
401
|
-
|
|
402
|
-
|
|
403
|
-
|
|
404
|
-
|
|
405
|
-
|
|
406
|
-
|
|
407
|
-
|
|
408
|
-
|
|
409
|
-
|
|
410
|
-
|
|
411
|
-
|
|
412
|
-
|
|
413
|
-
|
|
414
|
-
|
|
415
|
-
|
|
416
|
-
|
|
417
|
-
|
|
418
|
-
|
|
419
|
-
|
|
420
|
-
|
|
421
|
-
|
|
422
|
-
|
|
423
|
-
|
|
424
|
-
|
|
425
|
-
|
|
426
|
-
|
|
427
|
-
|
|
428
|
-
|
|
429
|
-
|
|
430
|
-
|
|
431
|
-
|
|
432
|
-
|
|
433
|
-
|
|
434
|
-
|
|
435
|
-
|
|
436
|
-
|
|
437
|
-
|
|
438
|
-
|
|
439
|
-
|
|
440
|
-
|
|
441
|
-
|
|
442
|
-
|
|
443
|
-
|
|
444
|
-
|
|
445
|
-
|
|
446
|
-
|
|
447
|
-
|
|
448
|
-
|
|
449
|
-
|
|
450
|
-
|
|
451
|
-
|
|
452
|
-
|
|
453
|
-
|
|
454
|
-
|
|
455
|
-
|
|
456
|
-
|
|
457
|
-
|
|
458
|
-
|
|
459
|
-
|
|
460
|
-
|
|
461
|
-
|
|
462
|
-
|
|
463
|
-
|
|
464
|
-
|
|
465
|
-
|
|
466
|
-
<fingerprint pattern="^OpenSSH_(.*)_Mikrotik_v(.*)$">
|
|
467
|
-
<description>OpenSSH on MikroTik</description>
|
|
468
|
-
<param pos="1" name="service.version"/>
|
|
469
|
-
<param pos="2" name="os.version"/>
|
|
470
|
-
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
471
|
-
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
472
|
-
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
473
|
-
<param pos="0" name="os.vendor" value="MikroTik"/>
|
|
474
|
-
<param pos="0" name="os.device" value="Router"/>
|
|
475
|
-
<param pos="0" name="os.family" value="RouterOS"/>
|
|
476
|
-
<param pos="0" name="os.product" value="RouterOS"/>
|
|
477
|
-
</fingerprint>
|
|
478
|
-
|
|
479
|
-
<fingerprint pattern="^OpenSSH_(.*) in DesktopAuthority (?:.*)$">
|
|
480
|
-
<!-- OpenSSH_3.8 in DesktopAuthority 5.55.030 -->
|
|
481
|
-
<description>DesktopAuthority SSH</description>
|
|
482
|
-
<param pos="1" name="service.version"/>
|
|
483
|
-
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
484
|
-
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
485
|
-
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
486
|
-
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
487
|
-
<param pos="0" name="os.family" value="Windows"/>
|
|
488
|
-
<param pos="0" name="os.product" value="Windows"/>
|
|
489
|
-
</fingerprint>
|
|
490
|
-
|
|
491
|
-
<fingerprint pattern="^OpenSSH_(\d+\.\d+(?:\.\d+)?(?:p\d+)?)$">
|
|
492
|
-
<description>OpenSSH with just a version, no comment by vendor</description>
|
|
493
|
-
<example service.version="5.9p1">OpenSSH_5.9p1</example>
|
|
494
|
-
<example service.version="5.9">OpenSSH_5.9</example>
|
|
495
|
-
<example service.version="3.8.1p1">OpenSSH_3.8.1p1</example>
|
|
496
|
-
<example service.version="6.6.1">OpenSSH_6.6.1</example>
|
|
497
|
-
<param pos="1" name="service.version"/>
|
|
498
|
-
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
499
|
-
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
500
|
-
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
501
|
-
</fingerprint>
|
|
502
|
-
|
|
503
|
-
<!-- SSH-1.99-OpenSSH_4.3p2-4.cern-hpn-CERN-4.3p2-4.cern -->
|
|
504
|
-
|
|
505
|
-
<!--<fingerprint pattern="^OpenSSH_?([^\s]*)\s*(.*)$">
|
|
8
|
+
<!-- Honeypot SSH server banners are useless for fingerprinting -->
|
|
9
|
+
<fingerprint pattern="honeypot" flags="REG_ICASE">
|
|
10
|
+
<description>Honeypot SSH</description>
|
|
11
|
+
</fingerprint>
|
|
12
|
+
<fingerprint pattern="^RomSShell_([\d\.]+)$">
|
|
13
|
+
<description>Allegro RomSShell SSH</description>
|
|
14
|
+
<example service.version="4.62">RomSShell_4.62</example>
|
|
15
|
+
<param pos="0" name="service.vendor" value="Allegro Software"/>
|
|
16
|
+
<param pos="0" name="service.product" value="RomSShell"/>
|
|
17
|
+
<param pos="1" name="service.version"/>
|
|
18
|
+
</fingerprint>
|
|
19
|
+
<fingerprint pattern="^mpSSH_([\d\.]+)$">
|
|
20
|
+
<description>HP Integrated Lights Out (iLO) usually bundled with HP servers</description>
|
|
21
|
+
<example>mpSSH_0.0.1</example>
|
|
22
|
+
<param pos="0" name="service.vendor" value="HP"/>
|
|
23
|
+
<param pos="0" name="service.product" value="iLO"/>
|
|
24
|
+
<param pos="0" name="service.family" value="iLO"/>
|
|
25
|
+
<param pos="1" name="service.version"/>
|
|
26
|
+
<param pos="0" name="hw.vendor" value="HP"/>
|
|
27
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
|
28
|
+
<param pos="0" name="os.product" value="iLO"/>
|
|
29
|
+
<param pos="0" name="os.family" value="iLO"/>
|
|
30
|
+
<param pos="0" name="os.device" value="Lights Out Management"/>
|
|
31
|
+
</fingerprint>
|
|
32
|
+
<fingerprint pattern="^Serv-U_([\d\.]+)$">
|
|
33
|
+
<description>Serv-U SSH</description>
|
|
34
|
+
<example>Serv-U_7.4.0.1</example>
|
|
35
|
+
<param pos="0" name="service.vendor" value="Rhino Software"/>
|
|
36
|
+
<param pos="0" name="service.product" value="Serv-U"/>
|
|
37
|
+
<param pos="1" name="service.version"/>
|
|
38
|
+
</fingerprint>
|
|
39
|
+
<fingerprint pattern="WS_FTP-SSH_([\d\.]+)$">
|
|
40
|
+
<description>WS_FTP Server with SSH</description>
|
|
41
|
+
<example>WS_FTP-SSH_6.1.1</example>
|
|
42
|
+
<example>WS_FTP-SSH_7.0</example>
|
|
43
|
+
<param pos="0" name="service.vendor" value="Ipswitch"/>
|
|
44
|
+
<param pos="0" name="service.product" value="WS_FTP"/>
|
|
45
|
+
<param pos="1" name="service.version"/>
|
|
46
|
+
</fingerprint>
|
|
47
|
+
<fingerprint pattern="^OpenSSH_([^\s]+)\s+(FreeBSD[ -].*)$">
|
|
48
|
+
<description>OpenSSH running on FreeBSD</description>
|
|
49
|
+
<param pos="1" name="service.version"/>
|
|
50
|
+
<param pos="2" name="openssh.comment"/>
|
|
51
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
52
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
53
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
54
|
+
<param pos="0" name="os.vendor" value="FreeBSD"/>
|
|
55
|
+
<param pos="0" name="os.device" value="General"/>
|
|
56
|
+
<param pos="0" name="os.family" value="FreeBSD"/>
|
|
57
|
+
<param pos="0" name="os.product" value="FreeBSD"/>
|
|
58
|
+
</fingerprint>
|
|
59
|
+
<fingerprint pattern="^OpenSSH_([^\s]+)\s+(NetBSD[ -].*)$">
|
|
60
|
+
<description>OpenSSH running on NetBSD</description>
|
|
61
|
+
<param pos="1" name="service.version"/>
|
|
62
|
+
<param pos="2" name="openssh.comment"/>
|
|
63
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
64
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
65
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
66
|
+
<param pos="0" name="os.vendor" value="NetBSD"/>
|
|
67
|
+
<param pos="0" name="os.device" value="General"/>
|
|
68
|
+
<param pos="0" name="os.family" value="NetBSD"/>
|
|
69
|
+
<param pos="0" name="os.product" value="NetBSD"/>
|
|
70
|
+
</fingerprint>
|
|
71
|
+
<fingerprint pattern="^OpenSSH_(4\.1p1) (Debian-7ubuntu\d+(?:\.\d+)?)$">
|
|
72
|
+
<description>OpenSSH running on Ubuntu 5.10</description>
|
|
73
|
+
<example>OpenSSH_4.1p1 Debian-7ubuntu4</example>
|
|
74
|
+
<param pos="1" name="service.version"/>
|
|
75
|
+
<param pos="2" name="openssh.comment"/>
|
|
76
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
77
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
78
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
79
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
80
|
+
<param pos="0" name="os.device" value="General"/>
|
|
81
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
82
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
83
|
+
<param pos="0" name="os.version" value="5.10"/>
|
|
84
|
+
</fingerprint>
|
|
85
|
+
<fingerprint pattern="^OpenSSH_(4\.2p1) (Debian-7ubuntu\d+(?:\.\d+)?)$">
|
|
86
|
+
<description>OpenSSH running on Ubuntu 6.04</description>
|
|
87
|
+
<example>OpenSSH_4.2p1 Debian-7ubuntu3.1</example>
|
|
88
|
+
<example>OpenSSH_4.2p1 Debian-7ubuntu3.2</example>
|
|
89
|
+
<param pos="1" name="service.version"/>
|
|
90
|
+
<param pos="2" name="openssh.comment"/>
|
|
91
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
92
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
93
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
94
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
95
|
+
<param pos="0" name="os.device" value="General"/>
|
|
96
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
97
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
98
|
+
<param pos="0" name="os.version" value="6.04"/>
|
|
99
|
+
</fingerprint>
|
|
100
|
+
<fingerprint pattern="^OpenSSH_(4\.3p2) (Debian-8ubuntu\d+(?:\.\d+)?)$">
|
|
101
|
+
<description>OpenSSH running on Ubuntu 7.04</description>
|
|
102
|
+
<example>OpenSSH_4.3p2 Debian-8ubuntu1.4</example>
|
|
103
|
+
<param pos="1" name="service.version"/>
|
|
104
|
+
<param pos="2" name="openssh.comment"/>
|
|
105
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
106
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
107
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
108
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
109
|
+
<param pos="0" name="os.device" value="General"/>
|
|
110
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
111
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
112
|
+
<param pos="0" name="os.version" value="7.04"/>
|
|
113
|
+
</fingerprint>
|
|
114
|
+
<fingerprint pattern="^OpenSSH_(4\.6p1) (Debian-5ubuntu\d+(?:\.\d+)?)$">
|
|
115
|
+
<description>OpenSSH running on Ubuntu 7.10</description>
|
|
116
|
+
<example>OpenSSH_4.6p1 Debian-5ubuntu0.2</example>
|
|
117
|
+
<example>OpenSSH_4.6p1 Debian-5ubuntu0.5</example>
|
|
118
|
+
<example>OpenSSH_4.6p1 Debian-5ubuntu0.6</example>
|
|
119
|
+
<param pos="1" name="service.version"/>
|
|
120
|
+
<param pos="2" name="openssh.comment"/>
|
|
121
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
122
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
123
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
124
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
125
|
+
<param pos="0" name="os.device" value="General"/>
|
|
126
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
127
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
128
|
+
<param pos="0" name="os.version" value="7.10"/>
|
|
129
|
+
</fingerprint>
|
|
130
|
+
<fingerprint pattern="^OpenSSH_(4\.6p1) (Debian-5build1)$">
|
|
131
|
+
<description>OpenSSH running on very early versions of Ubuntu 7.10</description>
|
|
132
|
+
<example service.version="4.6p1" openssh.comment="Debian-5build1">OpenSSH_4.6p1 Debian-5build1</example>
|
|
133
|
+
<param pos="1" name="service.version"/>
|
|
134
|
+
<param pos="2" name="openssh.comment"/>
|
|
135
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
136
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
137
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
138
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
139
|
+
<param pos="0" name="os.device" value="General"/>
|
|
140
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
141
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
142
|
+
<param pos="0" name="os.version" value="7.10"/>
|
|
143
|
+
</fingerprint>
|
|
144
|
+
<fingerprint pattern="^OpenSSH_(4\.7p1) (Debian-8ubuntu\d+(?:\.\d+)?)$">
|
|
145
|
+
<description>OpenSSH running on Ubuntu 8.04</description>
|
|
146
|
+
<example service.version="4.7p1" openssh.comment="Debian-8ubuntu1.2">OpenSSH_4.7p1 Debian-8ubuntu1.2</example>
|
|
147
|
+
<example service.version="4.7p1" openssh.comment="Debian-8ubuntu3">OpenSSH_4.7p1 Debian-8ubuntu3</example>
|
|
148
|
+
<param pos="1" name="service.version"/>
|
|
149
|
+
<param pos="2" name="openssh.comment"/>
|
|
150
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
151
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
152
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
153
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
154
|
+
<param pos="0" name="os.device" value="General"/>
|
|
155
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
156
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
157
|
+
<param pos="0" name="os.version" value="8.04"/>
|
|
158
|
+
</fingerprint>
|
|
159
|
+
<fingerprint pattern="^OpenSSH_(5\.1p1) (Debian-3ubuntu\d+(?:\.\d+)?)$">
|
|
160
|
+
<description>OpenSSH running on Ubuntu 8.10</description>
|
|
161
|
+
<example>OpenSSH_5.1p1 Debian-3ubuntu1</example>
|
|
162
|
+
<param pos="1" name="service.version"/>
|
|
163
|
+
<param pos="2" name="openssh.comment"/>
|
|
164
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
165
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
166
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
167
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
168
|
+
<param pos="0" name="os.device" value="General"/>
|
|
169
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
170
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
171
|
+
<param pos="0" name="os.version" value="8.10"/>
|
|
172
|
+
</fingerprint>
|
|
173
|
+
<fingerprint pattern="^OpenSSH_(5\.1p1) (Debian-5ubuntu\d+(?:\.\d+)?)$">
|
|
174
|
+
<description>OpenSSH running on Ubuntu 9.04</description>
|
|
175
|
+
<example>OpenSSH_5.1p1 Debian-5ubuntu1</example>
|
|
176
|
+
<param pos="1" name="service.version"/>
|
|
177
|
+
<param pos="2" name="openssh.comment"/>
|
|
178
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
179
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
180
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
181
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
182
|
+
<param pos="0" name="os.device" value="General"/>
|
|
183
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
184
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
185
|
+
<param pos="0" name="os.version" value="9.04"/>
|
|
186
|
+
</fingerprint>
|
|
187
|
+
<fingerprint pattern="^OpenSSH_(5\.1p1) (Debian-6ubuntu\d+(?:\.\d+)?)$">
|
|
188
|
+
<description>OpenSSH running on Ubuntu 9.10</description>
|
|
189
|
+
<example>OpenSSH_5.1p1 Debian-6ubuntu2</example>
|
|
190
|
+
<param pos="1" name="service.version"/>
|
|
191
|
+
<param pos="2" name="openssh.comment"/>
|
|
192
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
193
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
194
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
195
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
196
|
+
<param pos="0" name="os.device" value="General"/>
|
|
197
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
198
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
199
|
+
<param pos="0" name="os.version" value="9.10"/>
|
|
200
|
+
</fingerprint>
|
|
201
|
+
<fingerprint pattern="^OpenSSH_(5\.3p1) (Debian-3ubuntu\d+(?:\.\d+)?)$">
|
|
202
|
+
<description>OpenSSH running on Ubuntu 10.04 (lucid)</description>
|
|
203
|
+
<example service.version="5.3p1" openssh.comment="Debian-3ubuntu3">OpenSSH_5.3p1 Debian-3ubuntu3</example>
|
|
204
|
+
<example service.version="5.3p1" openssh.comment="Debian-3ubuntu4">OpenSSH_5.3p1 Debian-3ubuntu4</example>
|
|
205
|
+
<example service.version="5.3p1" openssh.comment="Debian-3ubuntu5">OpenSSH_5.3p1 Debian-3ubuntu5</example>
|
|
206
|
+
<example service.version="5.3p1" openssh.comment="Debian-3ubuntu6">OpenSSH_5.3p1 Debian-3ubuntu6</example>
|
|
207
|
+
<example service.version="5.3p1" openssh.comment="Debian-3ubuntu7">OpenSSH_5.3p1 Debian-3ubuntu7</example>
|
|
208
|
+
<example service.version="5.3p1" openssh.comment="Debian-3ubuntu7.1">OpenSSH_5.3p1 Debian-3ubuntu7.1</example>
|
|
209
|
+
<param pos="1" name="service.version"/>
|
|
210
|
+
<param pos="2" name="openssh.comment"/>
|
|
211
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
212
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
213
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
214
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
215
|
+
<param pos="0" name="os.device" value="General"/>
|
|
216
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
217
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
218
|
+
<param pos="0" name="os.version" value="10.04"/>
|
|
219
|
+
</fingerprint>
|
|
220
|
+
<fingerprint pattern="^OpenSSH_(5\.5p1) (Debian-4ubuntu\d+(?:\.\d+)?)$">
|
|
221
|
+
<description>OpenSSH running on Ubuntu 10.10</description>
|
|
222
|
+
<example service.version="5.5p1" openssh.comment="Debian-4ubuntu4">OpenSSH_5.5p1 Debian-4ubuntu4</example>
|
|
223
|
+
<example service.version="5.5p1" openssh.comment="Debian-4ubuntu5">OpenSSH_5.5p1 Debian-4ubuntu5</example>
|
|
224
|
+
<example service.version="5.5p1" openssh.comment="Debian-4ubuntu6">OpenSSH_5.5p1 Debian-4ubuntu6</example>
|
|
225
|
+
<param pos="1" name="service.version"/>
|
|
226
|
+
<param pos="2" name="openssh.comment"/>
|
|
227
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
228
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
229
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
230
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
231
|
+
<param pos="0" name="os.device" value="General"/>
|
|
232
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
233
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
234
|
+
<param pos="0" name="os.version" value="10.10"/>
|
|
235
|
+
</fingerprint>
|
|
236
|
+
<fingerprint pattern="^OpenSSH_(5\.8p1) (Debian-1ubuntu\d(?:\.\d)?)$">
|
|
237
|
+
<description>OpenSSH running on Ubuntu 11.04</description>
|
|
238
|
+
<example>OpenSSH_5.8p1 Debian-1ubuntu3</example>
|
|
239
|
+
<param pos="1" name="service.version"/>
|
|
240
|
+
<param pos="2" name="openssh.comment"/>
|
|
241
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
242
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
243
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
244
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
245
|
+
<param pos="0" name="os.device" value="General"/>
|
|
246
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
247
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
248
|
+
<param pos="0" name="os.version" value="11.04"/>
|
|
249
|
+
</fingerprint>
|
|
250
|
+
<fingerprint pattern="^OpenSSH_(5\.8p1) (Debian-7ubuntu\d(?:\.\d)?)$">
|
|
251
|
+
<description>OpenSSH running on Ubuntu 11.10</description>
|
|
252
|
+
<example>OpenSSH_5.8p1 Debian-7ubuntu1</example>
|
|
253
|
+
<param pos="1" name="service.version"/>
|
|
254
|
+
<param pos="2" name="openssh.comment"/>
|
|
255
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
256
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
257
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
258
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
259
|
+
<param pos="0" name="os.device" value="General"/>
|
|
260
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
261
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
262
|
+
<param pos="0" name="os.version" value="11.10"/>
|
|
263
|
+
</fingerprint>
|
|
264
|
+
<fingerprint pattern="^OpenSSH_(5\.9p1) (Debian-5ubuntu\d(?:\.\d)?)$">
|
|
265
|
+
<description>OpenSSH running on Ubuntu 12.04</description>
|
|
266
|
+
<example service.version="5.9p1" openssh.comment="Debian-5ubuntu1">OpenSSH_5.9p1 Debian-5ubuntu1</example>
|
|
267
|
+
<example service.version="5.9p1" openssh.comment="Debian-5ubuntu1.4">OpenSSH_5.9p1 Debian-5ubuntu1.4</example>
|
|
268
|
+
<param pos="1" name="service.version"/>
|
|
269
|
+
<param pos="2" name="openssh.comment"/>
|
|
270
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
271
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
272
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
273
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
274
|
+
<param pos="0" name="os.device" value="General"/>
|
|
275
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
276
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
277
|
+
<param pos="0" name="os.version" value="12.04"/>
|
|
278
|
+
</fingerprint>
|
|
279
|
+
<fingerprint pattern="^OpenSSH_(6\.0p1) (Debian-3ubuntu\d(?:\.\d)?)$">
|
|
280
|
+
<description>OpenSSH running on Ubuntu 12.10</description>
|
|
281
|
+
<example>OpenSSH_6.0p1 Debian-3ubuntu1</example>
|
|
282
|
+
<param pos="1" name="service.version"/>
|
|
283
|
+
<param pos="2" name="openssh.comment"/>
|
|
284
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
285
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
286
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
287
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
288
|
+
<param pos="0" name="os.device" value="General"/>
|
|
289
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
290
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
291
|
+
<param pos="0" name="os.version" value="12.10"/>
|
|
292
|
+
</fingerprint>
|
|
293
|
+
<fingerprint pattern="^OpenSSH_(6\.1p1) (Debian-4)$">
|
|
294
|
+
<description>OpenSSH running on Ubuntu 13.04</description>
|
|
295
|
+
<example>OpenSSH_6.1p1 Debian-4</example>
|
|
296
|
+
<param pos="1" name="service.version"/>
|
|
297
|
+
<param pos="2" name="openssh.comment"/>
|
|
298
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
299
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
300
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
301
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
302
|
+
<param pos="0" name="os.device" value="General"/>
|
|
303
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
304
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
305
|
+
<param pos="0" name="os.version" value="13.04"/>
|
|
306
|
+
</fingerprint>
|
|
307
|
+
<fingerprint pattern="^OpenSSH_(6\.6(?:\.\d)?p1) (Ubuntu-2ubuntu\d+(?:\.\d+)?)$">
|
|
308
|
+
<description>OpenSSH running on Ubuntu 14.04</description>
|
|
309
|
+
<example service.version="6.6p1" openssh.comment="Ubuntu-2ubuntu1">OpenSSH_6.6p1 Ubuntu-2ubuntu1</example>
|
|
310
|
+
<example service.version="6.6.1p1" openssh.comment="Ubuntu-2ubuntu2">OpenSSH_6.6.1p1 Ubuntu-2ubuntu2</example>
|
|
311
|
+
<param pos="1" name="service.version"/>
|
|
312
|
+
<param pos="2" name="openssh.comment"/>
|
|
313
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
314
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
315
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
316
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
317
|
+
<param pos="0" name="os.device" value="General"/>
|
|
318
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
319
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
320
|
+
<param pos="0" name="os.version" value="14.04"/>
|
|
321
|
+
</fingerprint>
|
|
322
|
+
<fingerprint pattern="^OpenSSH_(6\.7p1) (Ubuntu-5ubuntu\d(?:\.\d)?)$">
|
|
323
|
+
<description>OpenSSH running on Ubuntu 15.04 (vivid)</description>
|
|
324
|
+
<example service.version="6.7p1" openssh.comment="Ubuntu-5ubuntu1">OpenSSH_6.7p1 Ubuntu-5ubuntu1</example>
|
|
325
|
+
<param pos="1" name="service.version"/>
|
|
326
|
+
<param pos="2" name="openssh.comment"/>
|
|
327
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
328
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
329
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
330
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
331
|
+
<param pos="0" name="os.device" value="General"/>
|
|
332
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
333
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
334
|
+
<param pos="0" name="os.version" value="15.04"/>
|
|
335
|
+
</fingerprint>
|
|
336
|
+
<fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-4(?:\+deb7u\d+)?)$">
|
|
337
|
+
<description>OpenSSH running on Debian 7.x (wheezy)</description>
|
|
338
|
+
<example service.version="6.0p1" openssh.comment="Debian-4">OpenSSH_6.0p1 Debian-4</example>
|
|
339
|
+
<example service.version="6.0p1" openssh.comment="Debian-4+deb7u1">OpenSSH_6.0p1 Debian-4+deb7u1</example>
|
|
340
|
+
<example service.version="6.0p1" openssh.comment="Debian-4+deb7u2">OpenSSH_6.0p1 Debian-4+deb7u2</example>
|
|
341
|
+
<param pos="1" name="service.version"/>
|
|
342
|
+
<param pos="2" name="openssh.comment"/>
|
|
343
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
344
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
345
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
346
|
+
<param pos="0" name="os.vendor" value="Debian"/>
|
|
347
|
+
<param pos="0" name="os.device" value="General"/>
|
|
348
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
349
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
350
|
+
<param pos="0" name="os.version" value="7.0"/>
|
|
351
|
+
</fingerprint>
|
|
352
|
+
<fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian.+squeeze.*)$">
|
|
353
|
+
<description>OpenSSH running on Debian 6.0 (squeeze)</description>
|
|
354
|
+
<example service.version="5.5p1" openssh.comment="Debian-6+squeeze4">OpenSSH_5.5p1 Debian-6+squeeze4</example>
|
|
355
|
+
<param pos="1" name="service.version"/>
|
|
356
|
+
<param pos="2" name="openssh.comment"/>
|
|
357
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
358
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
359
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
360
|
+
<param pos="0" name="os.vendor" value="Debian"/>
|
|
361
|
+
<param pos="0" name="os.device" value="General"/>
|
|
362
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
363
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
364
|
+
<param pos="0" name="os.version" value="6.0"/>
|
|
365
|
+
</fingerprint>
|
|
366
|
+
<fingerprint pattern="^OpenSSH_([^\s]+)\s+((?:Debian|Ubuntu).+ubuntu.*)$">
|
|
367
|
+
<description>OpenSSH running on Ubuntu</description>
|
|
368
|
+
<param pos="1" name="service.version"/>
|
|
369
|
+
<param pos="2" name="openssh.comment"/>
|
|
370
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
371
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
372
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
373
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
374
|
+
<param pos="0" name="os.device" value="General"/>
|
|
375
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
376
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
377
|
+
<param pos="0" name="os.certainty" value="0.75"/>
|
|
378
|
+
</fingerprint>
|
|
379
|
+
<fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian.+etch.*)$">
|
|
380
|
+
<description>OpenSSH running on Debian 4.0 (etch)</description>
|
|
381
|
+
<param pos="1" name="service.version"/>
|
|
382
|
+
<param pos="2" name="openssh.comment"/>
|
|
383
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
384
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
385
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
386
|
+
<param pos="0" name="os.vendor" value="Debian"/>
|
|
387
|
+
<param pos="0" name="os.device" value="General"/>
|
|
388
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
389
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
390
|
+
<param pos="0" name="os.version" value="4.0"/>
|
|
391
|
+
</fingerprint>
|
|
392
|
+
<fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian.+sarge.*)$">
|
|
393
|
+
<description>OpenSSH running on Debian 3.1 (sarge)</description>
|
|
394
|
+
<param pos="1" name="service.version"/>
|
|
395
|
+
<param pos="2" name="openssh.comment"/>
|
|
396
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
397
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
398
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
399
|
+
<param pos="0" name="os.vendor" value="Debian"/>
|
|
400
|
+
<param pos="0" name="os.device" value="General"/>
|
|
401
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
402
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
403
|
+
<param pos="0" name="os.version" value="3.1"/>
|
|
404
|
+
</fingerprint>
|
|
405
|
+
<fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian.+woody.*)$">
|
|
406
|
+
<description>OpenSSH running on Debian 3.0 (woody)</description>
|
|
407
|
+
<param pos="1" name="service.version"/>
|
|
408
|
+
<param pos="2" name="openssh.comment"/>
|
|
409
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
410
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
411
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
412
|
+
<param pos="0" name="os.vendor" value="Debian"/>
|
|
413
|
+
<param pos="0" name="os.device" value="General"/>
|
|
414
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
415
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
416
|
+
<param pos="0" name="os.version" value="3.0"/>
|
|
417
|
+
</fingerprint>
|
|
418
|
+
<fingerprint pattern="^OpenSSH_(.*)\+(CAN-[0-9]{4}-[0-9]{4})$">
|
|
419
|
+
<description>OpenSSH with CVE patch, as seen in Mac OS X</description>
|
|
420
|
+
<param pos="1" name="service.version"/>
|
|
421
|
+
<param pos="2" name="openssh.cvepatch"/>
|
|
422
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
423
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
424
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
425
|
+
<param pos="0" name="os.vendor" value="Apple"/>
|
|
426
|
+
<param pos="0" name="os.device" value="General"/>
|
|
427
|
+
<param pos="0" name="os.family" value="Mac OS X"/>
|
|
428
|
+
<param pos="0" name="os.product" value="Mac OS X"/>
|
|
429
|
+
</fingerprint>
|
|
430
|
+
<fingerprint pattern="^OpenSSH_(.*)_Mikrotik_v(.*)$">
|
|
431
|
+
<description>OpenSSH on MikroTik</description>
|
|
432
|
+
<param pos="1" name="service.version"/>
|
|
433
|
+
<param pos="2" name="os.version"/>
|
|
434
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
435
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
436
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
437
|
+
<param pos="0" name="os.vendor" value="MikroTik"/>
|
|
438
|
+
<param pos="0" name="os.device" value="Router"/>
|
|
439
|
+
<param pos="0" name="os.family" value="RouterOS"/>
|
|
440
|
+
<param pos="0" name="os.product" value="RouterOS"/>
|
|
441
|
+
</fingerprint>
|
|
442
|
+
<fingerprint pattern="^OpenSSH_(.*) in DesktopAuthority (?:.*)$">
|
|
443
|
+
<description>DesktopAuthority SSH</description>
|
|
444
|
+
<param pos="1" name="service.version"/>
|
|
445
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
446
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
447
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
448
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
449
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
450
|
+
<param pos="0" name="os.product" value="Windows"/>
|
|
451
|
+
</fingerprint>
|
|
452
|
+
<fingerprint pattern="^OpenSSH_(\d+\.\d+(?:\.\d+)?(?:p\d+)?)$">
|
|
453
|
+
<description>OpenSSH with just a version, no comment by vendor</description>
|
|
454
|
+
<example service.version="5.9p1">OpenSSH_5.9p1</example>
|
|
455
|
+
<example service.version="5.9">OpenSSH_5.9</example>
|
|
456
|
+
<example service.version="3.8.1p1">OpenSSH_3.8.1p1</example>
|
|
457
|
+
<example service.version="6.6.1">OpenSSH_6.6.1</example>
|
|
458
|
+
<param pos="1" name="service.version"/>
|
|
459
|
+
<param pos="0" name="service.vendor" value="OpenBSD"/>
|
|
460
|
+
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
461
|
+
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
462
|
+
</fingerprint>
|
|
463
|
+
<!-- SSH-1.99-OpenSSH_4.3p2-4.cern-hpn-CERN-4.3p2-4.cern -->
|
|
464
|
+
<!--<fingerprint pattern="^OpenSSH_?([^\s]*)\s*(.*)$">
|
|
506
465
|
<description>Catch all for OpenSSH based SSH servers
|
|
507
466
|
******************** NOTE ********************
|
|
508
467
|
Be sure to put any specific OpenSSH derivative
|
|
@@ -515,375 +474,334 @@ fingerprint SSH servers.
|
|
|
515
474
|
<param pos="0" name="service.family" value="OpenSSH"/>
|
|
516
475
|
<param pos="0" name="service.product" value="OpenSSH"/>
|
|
517
476
|
</fingerprint>-->
|
|
518
|
-
|
|
519
|
-
|
|
520
|
-
|
|
521
|
-
<fingerprint pattern="^Cisco-(.*)$">
|
|
522
|
-
<description>Cisco SSH banner (could be IOS or PIX).
|
|
477
|
+
<!-- TODO: Handle "vpn3" banners for Cisco 3000 VPN Concentrators (need example banners first) -->
|
|
478
|
+
<fingerprint pattern="^Cisco-(.*)$">
|
|
479
|
+
<description>Cisco SSH banner (could be IOS or PIX).
|
|
523
480
|
The version always seems to be 1.25</description>
|
|
524
|
-
|
|
525
|
-
|
|
526
|
-
|
|
527
|
-
|
|
528
|
-
|
|
529
|
-
|
|
530
|
-
|
|
531
|
-
|
|
532
|
-
|
|
533
|
-
<
|
|
534
|
-
|
|
535
|
-
|
|
536
|
-
|
|
537
|
-
|
|
538
|
-
|
|
539
|
-
|
|
540
|
-
|
|
541
|
-
|
|
542
|
-
|
|
543
|
-
|
|
544
|
-
|
|
545
|
-
|
|
546
|
-
|
|
547
|
-
|
|
548
|
-
|
|
549
|
-
|
|
550
|
-
|
|
551
|
-
|
|
552
|
-
|
|
553
|
-
|
|
554
|
-
|
|
555
|
-
|
|
556
|
-
|
|
557
|
-
|
|
558
|
-
|
|
559
|
-
|
|
560
|
-
|
|
561
|
-
|
|
562
|
-
|
|
563
|
-
|
|
564
|
-
|
|
565
|
-
|
|
566
|
-
|
|
567
|
-
|
|
568
|
-
|
|
569
|
-
|
|
570
|
-
|
|
571
|
-
|
|
572
|
-
|
|
573
|
-
|
|
574
|
-
|
|
575
|
-
|
|
576
|
-
|
|
577
|
-
|
|
578
|
-
|
|
579
|
-
|
|
580
|
-
|
|
581
|
-
|
|
582
|
-
|
|
583
|
-
|
|
584
|
-
|
|
585
|
-
|
|
586
|
-
|
|
587
|
-
|
|
588
|
-
|
|
589
|
-
|
|
590
|
-
|
|
591
|
-
|
|
592
|
-
|
|
593
|
-
|
|
594
|
-
|
|
595
|
-
|
|
596
|
-
|
|
597
|
-
|
|
598
|
-
|
|
599
|
-
|
|
600
|
-
|
|
601
|
-
|
|
602
|
-
|
|
603
|
-
|
|
604
|
-
|
|
605
|
-
|
|
606
|
-
|
|
607
|
-
|
|
608
|
-
|
|
609
|
-
|
|
610
|
-
|
|
611
|
-
|
|
612
|
-
|
|
613
|
-
|
|
614
|
-
|
|
615
|
-
|
|
616
|
-
|
|
617
|
-
|
|
618
|
-
|
|
619
|
-
|
|
620
|
-
|
|
621
|
-
|
|
622
|
-
|
|
623
|
-
|
|
624
|
-
|
|
625
|
-
|
|
626
|
-
|
|
627
|
-
|
|
628
|
-
|
|
629
|
-
|
|
630
|
-
|
|
631
|
-
|
|
632
|
-
|
|
633
|
-
|
|
634
|
-
|
|
635
|
-
|
|
636
|
-
|
|
637
|
-
|
|
638
|
-
|
|
639
|
-
|
|
640
|
-
|
|
641
|
-
|
|
642
|
-
|
|
643
|
-
|
|
644
|
-
|
|
645
|
-
|
|
646
|
-
|
|
647
|
-
|
|
648
|
-
|
|
649
|
-
|
|
650
|
-
|
|
651
|
-
|
|
652
|
-
|
|
653
|
-
|
|
654
|
-
|
|
655
|
-
|
|
656
|
-
|
|
657
|
-
|
|
658
|
-
|
|
659
|
-
|
|
660
|
-
|
|
661
|
-
|
|
662
|
-
|
|
663
|
-
|
|
664
|
-
|
|
665
|
-
|
|
666
|
-
|
|
667
|
-
|
|
668
|
-
|
|
669
|
-
|
|
670
|
-
|
|
671
|
-
<param pos="0" name="service.family" value="VShell"/>
|
|
672
|
-
<param pos="0" name="service.product" value="VShell"/>
|
|
673
|
-
</fingerprint>
|
|
674
|
-
|
|
675
|
-
<fingerprint pattern="^([\s]*)\s*VShell$">
|
|
676
|
-
<description>VanDyke VShell</description>
|
|
677
|
-
<param pos="1" name="service.version"/>
|
|
678
|
-
<param pos="0" name="service.vendor" value="VanDyke Software"/>
|
|
679
|
-
<param pos="0" name="service.family" value="VShell"/>
|
|
680
|
-
<param pos="0" name="service.product" value="VShell"/>
|
|
681
|
-
</fingerprint>
|
|
682
|
-
|
|
683
|
-
<fingerprint pattern="^WRQReflectionForSecureIT_(.*)$">
|
|
684
|
-
<description>Attachmate Reflection (formerly WRQ Reflection for Secure IT)
|
|
481
|
+
<param pos="1" name="service.version"/>
|
|
482
|
+
<param pos="0" name="service.vendor" value="Cisco"/>
|
|
483
|
+
<param pos="0" name="service.product" value="SSH"/>
|
|
484
|
+
<param pos="0" name="os.vendor" value="Cisco"/>
|
|
485
|
+
<param pos="0" name="os.product" value="IOS"/>
|
|
486
|
+
<param pos="0" name="os.certainty" value="0.8"/>
|
|
487
|
+
</fingerprint>
|
|
488
|
+
<fingerprint pattern="^CISCO_WLC$">
|
|
489
|
+
<description>SSH banner from a Cisco Wireless LAN Controller (WLC)</description>
|
|
490
|
+
<example>CISCO_WLC</example>
|
|
491
|
+
<param pos="0" name="service.vendor" value="Cisco"/>
|
|
492
|
+
<param pos="0" name="service.product" value="SSH"/>
|
|
493
|
+
<param pos="0" name="os.vendor" value="Cisco"/>
|
|
494
|
+
<param pos="0" name="os.product" value="Wireless LAN Controller"/>
|
|
495
|
+
</fingerprint>
|
|
496
|
+
<fingerprint pattern="^Sun_SSH_(.*)$">
|
|
497
|
+
<description>Sun SSH banner</description>
|
|
498
|
+
<param pos="1" name="service.version"/>
|
|
499
|
+
<param pos="0" name="service.vendor" value="Sun"/>
|
|
500
|
+
<param pos="0" name="service.product" value="SSH"/>
|
|
501
|
+
<param pos="0" name="os.vendor" value="Sun"/>
|
|
502
|
+
<param pos="0" name="os.family" value="Solaris"/>
|
|
503
|
+
<param pos="0" name="os.product" value="Solaris"/>
|
|
504
|
+
</fingerprint>
|
|
505
|
+
<fingerprint pattern="^SSH Protocol Compatible Server SCS (.*)$">
|
|
506
|
+
<description>Netscreen</description>
|
|
507
|
+
<param pos="1" name="service.version"/>
|
|
508
|
+
<param pos="0" name="service.vendor" value="Juniper"/>
|
|
509
|
+
<param pos="0" name="service.family" value="NetScreen"/>
|
|
510
|
+
<param pos="0" name="service.product" value="NetScreen"/>
|
|
511
|
+
<param pos="0" name="os.vendor" value="Juniper"/>
|
|
512
|
+
<param pos="0" name="os.device" value="Firewall"/>
|
|
513
|
+
<param pos="0" name="os.family" value="ScreenOS"/>
|
|
514
|
+
<param pos="0" name="os.product" value="ScreenOS"/>
|
|
515
|
+
</fingerprint>
|
|
516
|
+
<fingerprint pattern="^NetScreen$">
|
|
517
|
+
<description>Netscreen</description>
|
|
518
|
+
<param pos="0" name="service.vendor" value="Juniper"/>
|
|
519
|
+
<param pos="0" name="service.family" value="NetScreen"/>
|
|
520
|
+
<param pos="0" name="service.product" value="NetScreen"/>
|
|
521
|
+
<param pos="0" name="os.vendor" value="Juniper"/>
|
|
522
|
+
<param pos="0" name="os.device" value="Firewall"/>
|
|
523
|
+
<param pos="0" name="os.family" value="ScreenOS"/>
|
|
524
|
+
<param pos="0" name="os.product" value="ScreenOS"/>
|
|
525
|
+
</fingerprint>
|
|
526
|
+
<fingerprint pattern="^(?:HUAWEI-VRP-?|VRP-)(.*)$">
|
|
527
|
+
<description>Huawei Versatile Routing Platform (VRP)</description>
|
|
528
|
+
<example os.version="3.10" service.version="3.10">HUAWEI-VRP-3.10</example>
|
|
529
|
+
<param pos="0" name="service.vendor" value="Huawei"/>
|
|
530
|
+
<param pos="0" name="service.family" value="VRP"/>
|
|
531
|
+
<param pos="0" name="service.product" value="VRP"/>
|
|
532
|
+
<param pos="1" name="service.version"/>
|
|
533
|
+
<param pos="0" name="os.vendor" value="Huawei"/>
|
|
534
|
+
<param pos="0" name="os.device" value="Router"/>
|
|
535
|
+
<param pos="0" name="os.family" value="VRP"/>
|
|
536
|
+
<param pos="0" name="os.product" value="VRP"/>
|
|
537
|
+
<param pos="1" name="os.version"/>
|
|
538
|
+
</fingerprint>
|
|
539
|
+
<fingerprint pattern="^([^\s]+) sshlib: GlobalScape$">
|
|
540
|
+
<description>GlobalScape SSH (which uses Bitvise sshlib)</description>
|
|
541
|
+
<param pos="1" name="service.component.version"/>
|
|
542
|
+
<param pos="0" name="service.component.vendor" value="Bitvise"/>
|
|
543
|
+
<param pos="0" name="service.component.family" value="sshlib"/>
|
|
544
|
+
<param pos="0" name="service.component.product" value="sshlib"/>
|
|
545
|
+
<param pos="0" name="service.vendor" value="GlobalScape"/>
|
|
546
|
+
<param pos="0" name="service.family" value="Secure FTP Server"/>
|
|
547
|
+
<param pos="0" name="service.product" value="Secure FTP Server"/>
|
|
548
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
549
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
550
|
+
<param pos="0" name="os.product" value="Windows"/>
|
|
551
|
+
</fingerprint>
|
|
552
|
+
<fingerprint pattern="^([^\s]+) sshlib: WinSSHD (.*)$">
|
|
553
|
+
<description>Bitvise WinSSHD (which uses Bitvise sshlib)</description>
|
|
554
|
+
<param pos="1" name="service.component.version"/>
|
|
555
|
+
<param pos="2" name="service.version"/>
|
|
556
|
+
<param pos="0" name="service.component.vendor" value="Bitvise"/>
|
|
557
|
+
<param pos="0" name="service.component.family" value="sshlib"/>
|
|
558
|
+
<param pos="0" name="service.component.product" value="sshlib"/>
|
|
559
|
+
<param pos="0" name="service.vendor" value="Bitvise"/>
|
|
560
|
+
<param pos="0" name="service.family" value="WinSSHD"/>
|
|
561
|
+
<param pos="0" name="service.product" value="WinSSHD"/>
|
|
562
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
563
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
564
|
+
<param pos="0" name="os.product" value="Windows"/>
|
|
565
|
+
</fingerprint>
|
|
566
|
+
<fingerprint pattern="^([^\s]+) FlowSsh: (?:Bitvise SSH Server \(WinSSHD\)|WinSSHD) ([\d\.]+):?.*$">
|
|
567
|
+
<description>Bitvise WinSSHD (which uses Bitvise flowssh)</description>
|
|
568
|
+
<example service.version="5.09" service.component.version="1.03">1.03 FlowSsh: WinSSHD 5.09</example>
|
|
569
|
+
<example service.version="5.20" service.component.version="1.07">1.07 FlowSsh: WinSSHD 5.20: free only for personal non-commercial use</example>
|
|
570
|
+
<example service.version="6.03" service.component.version="5.21">5.21 FlowSsh: Bitvise SSH Server (WinSSHD) 6.03: free only for personal non-commercial use</example>
|
|
571
|
+
<param pos="1" name="service.component.version"/>
|
|
572
|
+
<param pos="2" name="service.version"/>
|
|
573
|
+
<param pos="0" name="service.component.vendor" value="Bitvise"/>
|
|
574
|
+
<param pos="0" name="service.component.family" value="flowssh"/>
|
|
575
|
+
<param pos="0" name="service.component.product" value="flowssh"/>
|
|
576
|
+
<param pos="0" name="service.vendor" value="Bitvise"/>
|
|
577
|
+
<param pos="0" name="service.family" value="WinSSHD"/>
|
|
578
|
+
<param pos="0" name="service.product" value="WinSSHD"/>
|
|
579
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
580
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
581
|
+
<param pos="0" name="os.product" value="Windows"/>
|
|
582
|
+
</fingerprint>
|
|
583
|
+
<fingerprint pattern="^([^\s]+) sshlib: MOVEit DMZ SSH (.*)$">
|
|
584
|
+
<description>MOVEit DMZ (which uses Bitvise sshlib)</description>
|
|
585
|
+
<param pos="1" name="service.component.version"/>
|
|
586
|
+
<param pos="2" name="service.version"/>
|
|
587
|
+
<param pos="0" name="service.component.vendor" value="Bitvise"/>
|
|
588
|
+
<param pos="0" name="service.component.family" value="sshlib"/>
|
|
589
|
+
<param pos="0" name="service.component.product" value="sshlib"/>
|
|
590
|
+
<param pos="0" name="service.vendor" value="Standard Networks"/>
|
|
591
|
+
<param pos="0" name="service.family" value="MOVEit DMZ"/>
|
|
592
|
+
<param pos="0" name="service.product" value="MOVEit DMZ"/>
|
|
593
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
594
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
595
|
+
<param pos="0" name="os.product" value="Windows"/>
|
|
596
|
+
</fingerprint>
|
|
597
|
+
<fingerprint pattern="^Pragma SecureShell\s*(.*)$">
|
|
598
|
+
<description>Pragma SecureShell</description>
|
|
599
|
+
<param pos="1" name="service.version"/>
|
|
600
|
+
<param pos="0" name="service.vendor" value="Pragma Systems"/>
|
|
601
|
+
<param pos="0" name="service.family" value="FortressSSH Server"/>
|
|
602
|
+
<param pos="0" name="service.product" value="FortressSSH Server"/>
|
|
603
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
604
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
605
|
+
<param pos="0" name="os.product" value="Windows"/>
|
|
606
|
+
</fingerprint>
|
|
607
|
+
<fingerprint pattern="^VShell_(?:Special_Edition_)?(\d+)_(\d+)_(\d+)_(\d+) VShell$">
|
|
608
|
+
<description>VanDyke VShell</description>
|
|
609
|
+
<example service.version="3" service.version.version="6" service.version.version.version="2" service.version.version.version.version="446">VShell_3_6_2_446 VShell</example>
|
|
610
|
+
<example service.version="2" service.version.version="5" service.version.version.version="0" service.version.version.version.version="204">VShell_Special_Edition_2_5_0_204 VShell</example>
|
|
611
|
+
<param pos="1" name="service.version"/>
|
|
612
|
+
<param pos="2" name="service.version.version"/>
|
|
613
|
+
<param pos="3" name="service.version.version.version"/>
|
|
614
|
+
<param pos="4" name="service.version.version.version.version"/>
|
|
615
|
+
<param pos="0" name="service.vendor" value="VanDyke Software"/>
|
|
616
|
+
<param pos="0" name="service.family" value="VShell"/>
|
|
617
|
+
<param pos="0" name="service.product" value="VShell"/>
|
|
618
|
+
</fingerprint>
|
|
619
|
+
<fingerprint pattern="^([\s]*)\s*VShell$">
|
|
620
|
+
<description>VanDyke VShell</description>
|
|
621
|
+
<param pos="1" name="service.version"/>
|
|
622
|
+
<param pos="0" name="service.vendor" value="VanDyke Software"/>
|
|
623
|
+
<param pos="0" name="service.family" value="VShell"/>
|
|
624
|
+
<param pos="0" name="service.product" value="VShell"/>
|
|
625
|
+
</fingerprint>
|
|
626
|
+
<fingerprint pattern="^WRQReflectionForSecureIT_(.*)$">
|
|
627
|
+
<description>Attachmate Reflection (formerly WRQ Reflection for Secure IT)
|
|
685
628
|
</description>
|
|
686
|
-
|
|
687
|
-
|
|
688
|
-
|
|
689
|
-
|
|
690
|
-
|
|
691
|
-
|
|
692
|
-
|
|
693
|
-
<fingerprint pattern="^([^\s]*)\s*F-Secure SSH\s*(?:.*)$">
|
|
694
|
-
<!-- 3.2.3 F-Secure SSH Windows NT Server -->
|
|
695
|
-
<description>Attachmate Reflection (formerly F-Secure SSH)
|
|
629
|
+
<param pos="1" name="service.version"/>
|
|
630
|
+
<param pos="0" name="service.vendor" value="Attachmate"/>
|
|
631
|
+
<param pos="0" name="service.family" value="Reflection"/>
|
|
632
|
+
<param pos="0" name="service.product" value="Reflection"/>
|
|
633
|
+
</fingerprint>
|
|
634
|
+
<fingerprint pattern="^([^\s]*)\s*F-Secure SSH\s*(?:.*)$">
|
|
635
|
+
<description>Attachmate Reflection (formerly F-Secure SSH)
|
|
696
636
|
</description>
|
|
697
|
-
|
|
698
|
-
|
|
699
|
-
|
|
700
|
-
|
|
701
|
-
|
|
702
|
-
|
|
703
|
-
|
|
704
|
-
|
|
705
|
-
|
|
706
|
-
|
|
707
|
-
|
|
708
|
-
|
|
709
|
-
|
|
710
|
-
|
|
711
|
-
|
|
712
|
-
|
|
713
|
-
|
|
714
|
-
|
|
715
|
-
|
|
716
|
-
|
|
717
|
-
|
|
718
|
-
|
|
719
|
-
|
|
720
|
-
|
|
721
|
-
</
|
|
722
|
-
|
|
723
|
-
|
|
724
|
-
|
|
725
|
-
|
|
726
|
-
|
|
727
|
-
|
|
728
|
-
|
|
729
|
-
|
|
730
|
-
|
|
731
|
-
|
|
732
|
-
|
|
733
|
-
|
|
734
|
-
|
|
735
|
-
|
|
736
|
-
|
|
737
|
-
|
|
738
|
-
|
|
739
|
-
|
|
740
|
-
<param pos="0" name="os.vendor" value="ARRIS"/>
|
|
741
|
-
<param pos="0" name="os.product" value="Unknown"/>
|
|
742
|
-
</fingerprint>
|
|
743
|
-
|
|
744
|
-
<fingerprint pattern="^Mocana SSH.*$">
|
|
745
|
-
<description>Mocana Embedded SSH (note, there seem to be spaces at the
|
|
637
|
+
<param pos="1" name="service.version"/>
|
|
638
|
+
<param pos="0" name="service.vendor" value="Attachmate"/>
|
|
639
|
+
<param pos="0" name="service.family" value="Reflection"/>
|
|
640
|
+
<param pos="0" name="service.product" value="Reflection"/>
|
|
641
|
+
</fingerprint>
|
|
642
|
+
<fingerprint pattern="^([^\s]*)\s*SSH Tectia Server$">
|
|
643
|
+
<description>SSH Communications Security Tectia Server</description>
|
|
644
|
+
<param pos="1" name="service.version"/>
|
|
645
|
+
<param pos="0" name="service.vendor" value="SSH Communications Security"/>
|
|
646
|
+
<param pos="0" name="service.family" value="SSH Tectia Server"/>
|
|
647
|
+
<param pos="0" name="service.product" value="SSH Tectia Server"/>
|
|
648
|
+
</fingerprint>
|
|
649
|
+
<fingerprint pattern="^([0-9\.]+) SSH Secure Shell(?: \(non-commercial\))?$">
|
|
650
|
+
<description>SSH Communications Security Tectia Server</description>
|
|
651
|
+
<example>3.2.9.1 SSH Secure Shell (non-commercial)</example>
|
|
652
|
+
<example>4.0.3 SSH Secure Shell</example>
|
|
653
|
+
<example>4.4.2.3 SSH Secure Shell</example>
|
|
654
|
+
<param pos="1" name="service.version"/>
|
|
655
|
+
<param pos="0" name="service.vendor" value="SSH Communications Security"/>
|
|
656
|
+
<param pos="0" name="service.family" value="SSH Tectia Server"/>
|
|
657
|
+
<param pos="0" name="service.product" value="SSH Tectia Server"/>
|
|
658
|
+
</fingerprint>
|
|
659
|
+
<fingerprint pattern="^([0-9\.]+) SSH Secure Shell Windows NT Server$">
|
|
660
|
+
<description>Unknown Windows SSH server</description>
|
|
661
|
+
<example>4.0.3 SSH Secure Shell Windows NT Server</example>
|
|
662
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
663
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
664
|
+
<param pos="0" name="os.product" value="Windows"/>
|
|
665
|
+
<param pos="1" name="service.version"/>
|
|
666
|
+
<param pos="0" name="service.vendor" value="SSH Communications Security"/>
|
|
667
|
+
<param pos="0" name="service.family" value="SSH Tectia Server"/>
|
|
668
|
+
<param pos="0" name="service.product" value="SSH Tectia Server"/>
|
|
669
|
+
</fingerprint>
|
|
670
|
+
<fingerprint pattern="^ARRIS_(.*)$">
|
|
671
|
+
<description>ARRIS device (though not clear which) - www.arrisi.com</description>
|
|
672
|
+
<param pos="1" name="service.version"/>
|
|
673
|
+
<param pos="0" name="service.vendor" value="ARRIS"/>
|
|
674
|
+
<param pos="0" name="service.product" value="ARRIS"/>
|
|
675
|
+
<param pos="0" name="os.vendor" value="ARRIS"/>
|
|
676
|
+
<param pos="0" name="os.product" value="Unknown"/>
|
|
677
|
+
</fingerprint>
|
|
678
|
+
<fingerprint pattern="^Mocana SSH.*$">
|
|
679
|
+
<description>Mocana Embedded SSH (note, there seem to be spaces at the
|
|
746
680
|
end of the returned banner, thus the .*</description>
|
|
747
|
-
|
|
748
|
-
|
|
749
|
-
|
|
750
|
-
|
|
751
|
-
|
|
752
|
-
|
|
753
|
-
|
|
754
|
-
|
|
755
|
-
|
|
756
|
-
|
|
757
|
-
|
|
758
|
-
|
|
759
|
-
|
|
760
|
-
|
|
761
|
-
|
|
762
|
-
|
|
763
|
-
|
|
764
|
-
|
|
765
|
-
|
|
766
|
-
|
|
767
|
-
|
|
768
|
-
|
|
769
|
-
|
|
770
|
-
|
|
771
|
-
|
|
772
|
-
|
|
773
|
-
|
|
774
|
-
|
|
775
|
-
|
|
776
|
-
|
|
777
|
-
|
|
778
|
-
|
|
779
|
-
|
|
780
|
-
|
|
781
|
-
|
|
782
|
-
|
|
783
|
-
|
|
784
|
-
|
|
785
|
-
|
|
786
|
-
|
|
787
|
-
|
|
788
|
-
|
|
789
|
-
|
|
790
|
-
|
|
791
|
-
|
|
792
|
-
|
|
793
|
-
|
|
794
|
-
|
|
795
|
-
|
|
796
|
-
|
|
797
|
-
|
|
798
|
-
|
|
799
|
-
|
|
800
|
-
|
|
801
|
-
|
|
802
|
-
|
|
803
|
-
|
|
804
|
-
|
|
805
|
-
|
|
806
|
-
|
|
807
|
-
|
|
808
|
-
|
|
809
|
-
|
|
810
|
-
|
|
811
|
-
|
|
812
|
-
|
|
813
|
-
|
|
814
|
-
|
|
815
|
-
|
|
816
|
-
|
|
817
|
-
|
|
818
|
-
|
|
819
|
-
</
|
|
820
|
-
|
|
821
|
-
|
|
822
|
-
|
|
823
|
-
|
|
824
|
-
|
|
825
|
-
|
|
826
|
-
|
|
827
|
-
|
|
828
|
-
|
|
829
|
-
|
|
830
|
-
|
|
831
|
-
|
|
832
|
-
|
|
833
|
-
|
|
834
|
-
|
|
835
|
-
|
|
836
|
-
|
|
837
|
-
|
|
838
|
-
|
|
839
|
-
|
|
840
|
-
|
|
841
|
-
|
|
842
|
-
|
|
843
|
-
|
|
844
|
-
|
|
845
|
-
|
|
846
|
-
|
|
847
|
-
|
|
848
|
-
|
|
849
|
-
|
|
850
|
-
|
|
851
|
-
|
|
852
|
-
|
|
853
|
-
|
|
854
|
-
|
|
855
|
-
|
|
856
|
-
|
|
857
|
-
|
|
858
|
-
|
|
859
|
-
|
|
860
|
-
|
|
861
|
-
|
|
862
|
-
|
|
863
|
-
|
|
864
|
-
|
|
865
|
-
|
|
866
|
-
|
|
867
|
-
|
|
868
|
-
|
|
869
|
-
|
|
870
|
-
|
|
871
|
-
<param pos="0" name="os.family" value="Unix"/>
|
|
872
|
-
<param pos="0" name="os.product" value="Tru64 Unix"/>
|
|
873
|
-
<param pos="0" name="os.device" value="General"/>
|
|
874
|
-
</fingerprint>
|
|
875
|
-
|
|
876
|
-
<fingerprint pattern="^(?:SSH-(\d\.\d)-)?ROSSSH$">
|
|
877
|
-
<description>MikroTik RouterOS sshd</description>
|
|
878
|
-
<example>ROSSSH</example>
|
|
879
|
-
<example service.version="2.0">SSH-2.0-ROSSSH</example>
|
|
880
|
-
<param pos="1" name="service.version"/>
|
|
881
|
-
<param pos="0" name="os.vendor" value="MikroTik"/>
|
|
882
|
-
<param pos="0" name="os.device" value="Router"/>
|
|
883
|
-
<param pos="0" name="os.family" value="RouterOS"/>
|
|
884
|
-
<param pos="0" name="os.product" value="RouterOS"/>
|
|
885
|
-
</fingerprint>
|
|
886
|
-
<!--
|
|
681
|
+
<param pos="0" name="service.vendor" value="Mocana"/>
|
|
682
|
+
<param pos="0" name="service.family" value="Embedded SSH Server"/>
|
|
683
|
+
<param pos="0" name="service.product" value="Embedded SSH Server"/>
|
|
684
|
+
</fingerprint>
|
|
685
|
+
<fingerprint pattern="^FreSSH\.(.*)$">
|
|
686
|
+
<description>FreSSH</description>
|
|
687
|
+
<param pos="1" name="service.version"/>
|
|
688
|
+
<param pos="0" name="service.family" value="FreSSH"/>
|
|
689
|
+
<param pos="0" name="service.product" value="FreSSH"/>
|
|
690
|
+
</fingerprint>
|
|
691
|
+
<fingerprint pattern="^RomCliSecure_(.*)$">
|
|
692
|
+
<description>RomCliSecure appears to be the Adtran NetVanta products</description>
|
|
693
|
+
<param pos="1" name="service.version"/>
|
|
694
|
+
<param pos="0" name="service.vendor" value="Adtran"/>
|
|
695
|
+
<param pos="0" name="service.family" value="NetVanta"/>
|
|
696
|
+
<param pos="0" name="service.product" value="NetVanta"/>
|
|
697
|
+
<param pos="0" name="os.vendor" value="Adtran"/>
|
|
698
|
+
<param pos="0" name="os.family" value="NetVanta"/>
|
|
699
|
+
<param pos="0" name="os.product" value="NetVanta"/>
|
|
700
|
+
</fingerprint>
|
|
701
|
+
<fingerprint pattern="^.*MultiNet.*$">
|
|
702
|
+
<description>Process Software MultiNet is a suite of network apps for OpenVMS</description>
|
|
703
|
+
<param pos="0" name="service.vendor" value="Process Software"/>
|
|
704
|
+
<param pos="0" name="service.family" value="MultiNet"/>
|
|
705
|
+
<param pos="0" name="service.product" value="MultiNet"/>
|
|
706
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
|
707
|
+
<param pos="0" name="os.family" value="OpenVMS"/>
|
|
708
|
+
<param pos="0" name="os.product" value="OpenVMS"/>
|
|
709
|
+
</fingerprint>
|
|
710
|
+
<fingerprint pattern="^dropbear_(.*)$">
|
|
711
|
+
<description>Dropbear - http://matt.ucc.asn.au/dropbear/dropbear.html</description>
|
|
712
|
+
<param pos="1" name="service.version"/>
|
|
713
|
+
<param pos="0" name="service.family" value="Dropbear"/>
|
|
714
|
+
<param pos="0" name="service.product" value="Dropbear"/>
|
|
715
|
+
</fingerprint>
|
|
716
|
+
<fingerprint pattern="^lancom$">
|
|
717
|
+
<description>LANCOM Systems - http://www.lancom-systems.de/</description>
|
|
718
|
+
<param pos="0" name="service.vendor" value="LANCOM Systems"/>
|
|
719
|
+
<param pos="0" name="service.family" value="SSH"/>
|
|
720
|
+
<param pos="0" name="service.product" value="SSH"/>
|
|
721
|
+
<param pos="0" name="os.vendor" value="LANCOM Systems"/>
|
|
722
|
+
<param pos="0" name="os.product" value="Unknown"/>
|
|
723
|
+
</fingerprint>
|
|
724
|
+
<fingerprint pattern="^0$">
|
|
725
|
+
<description>MOVEit DMZ</description>
|
|
726
|
+
<param pos="0" name="service.vendor" value="Standard Networks"/>
|
|
727
|
+
<param pos="0" name="service.family" value="MOVEit DMZ"/>
|
|
728
|
+
<param pos="0" name="service.product" value="MOVEit DMZ"/>
|
|
729
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
730
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
731
|
+
<param pos="0" name="os.product" value="Windows"/>
|
|
732
|
+
</fingerprint>
|
|
733
|
+
<fingerprint pattern="^Comware-(\d+\.?\d*\.?\d*)$">
|
|
734
|
+
<description>SSH on H3C Comware</description>
|
|
735
|
+
<example os.version="5.20.105">Comware-5.20.105</example>
|
|
736
|
+
<example os.version="5.20">Comware-5.20</example>
|
|
737
|
+
<param pos="0" name="service.vendor" value="H3C"/>
|
|
738
|
+
<param pos="0" name="service.product" value="SSH"/>
|
|
739
|
+
<param pos="0" name="os.vendor" value="H3C"/>
|
|
740
|
+
<param pos="0" name="os.device" value="Network"/>
|
|
741
|
+
<param pos="0" name="os.product" value="Comware"/>
|
|
742
|
+
<param pos="0" name="os.family" value="Comware"/>
|
|
743
|
+
<param pos="1" name="os.version"/>
|
|
744
|
+
</fingerprint>
|
|
745
|
+
<fingerprint pattern="^Data ONTAP SSH [\d\.]+$">
|
|
746
|
+
<description>SSH NetApp appliances</description>
|
|
747
|
+
<example>Data ONTAP SSH 1.0</example>
|
|
748
|
+
<param pos="0" name="os.vendor" value="NetApp"/>
|
|
749
|
+
<param pos="0" name="os.family" value="Data ONTAP"/>
|
|
750
|
+
<param pos="0" name="os.product" value="Data ONTAP"/>
|
|
751
|
+
</fingerprint>
|
|
752
|
+
<fingerprint pattern="^(\d\.\d+\.\d+) SSH Secure Shell OpenVMS V\d+\.\d+$">
|
|
753
|
+
<description>SSH for OpenVMS</description>
|
|
754
|
+
<example service.component.version="3.2.0">3.2.0 SSH Secure Shell OpenVMS V5.5</example>
|
|
755
|
+
<example service.component.version="2.4.1">2.4.1 SSH Secure Shell OpenVMS V1.0</example>
|
|
756
|
+
<param pos="1" name="service.component.version"/>
|
|
757
|
+
<param pos="0" name="service.component.vendor" value="SSH Communication Security"/>
|
|
758
|
+
<param pos="0" name="service.component.family" value="SSH Secure Shell"/>
|
|
759
|
+
<param pos="0" name="service.component.product" value="SSH Secure Shell"/>
|
|
760
|
+
<param pos="0" name="service.vendor" value="HP"/>
|
|
761
|
+
<param pos="0" name="service.family" value="OpenVMS"/>
|
|
762
|
+
<param pos="0" name="service.product" value="SSH Server"/>
|
|
763
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
|
764
|
+
<param pos="0" name="os.device" value="General"/>
|
|
765
|
+
<param pos="0" name="os.family" value="OpenVMS"/>
|
|
766
|
+
<param pos="0" name="os.product" value="OpenVMS"/>
|
|
767
|
+
<param pos="0" name="os.certainty" value="0.75"/>
|
|
768
|
+
</fingerprint>
|
|
769
|
+
<fingerprint pattern="^(\d\.\d+\.\d+) SSH (?:Secure Shell )?OpenVMS V\d\.\d VMS_sftp_version (\d)$">
|
|
770
|
+
<description>SSH for OpenVMS sftp</description>
|
|
771
|
+
<example service.component.version="3.2.0" service.version="3">3.2.0 SSH Secure Shell OpenVMS V5.5 VMS_sftp_version 3</example>
|
|
772
|
+
<example service.component.version="3.2.0" service.version="3">3.2.0 SSH OpenVMS V5.5 VMS_sftp_version 3</example>
|
|
773
|
+
<param pos="1" name="service.component.version"/>
|
|
774
|
+
<param pos="0" name="service.component.vendor" value="SSH Communication Security"/>
|
|
775
|
+
<param pos="0" name="service.component.family" value="SSH Secure Shell"/>
|
|
776
|
+
<param pos="0" name="service.component.product" value="SSH Secure Shell"/>
|
|
777
|
+
<param pos="0" name="service.vendor" value="HP"/>
|
|
778
|
+
<param pos="0" name="service.family" value="OpenVMS"/>
|
|
779
|
+
<param pos="0" name="service.product" value="VMS SFTP Server"/>
|
|
780
|
+
<param pos="2" name="service.version"/>
|
|
781
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
|
782
|
+
<param pos="0" name="os.device" value="General"/>
|
|
783
|
+
<param pos="0" name="os.family" value="OpenVMS"/>
|
|
784
|
+
<param pos="0" name="os.certainty" value="0.75"/>
|
|
785
|
+
</fingerprint>
|
|
786
|
+
<fingerprint pattern="^\S+ SSH Secure Shell Tru64 UNIX$">
|
|
787
|
+
<description>Digital/Compaq/HP Tru64 Unix</description>
|
|
788
|
+
<example>3.2.0 SSH Secure Shell Tru64 UNIX</example>
|
|
789
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
|
790
|
+
<param pos="0" name="os.family" value="Unix"/>
|
|
791
|
+
<param pos="0" name="os.product" value="Tru64 Unix"/>
|
|
792
|
+
<param pos="0" name="os.device" value="General"/>
|
|
793
|
+
</fingerprint>
|
|
794
|
+
<fingerprint pattern="^(?:SSH-(\d\.\d)-)?ROSSSH$">
|
|
795
|
+
<description>MikroTik RouterOS sshd</description>
|
|
796
|
+
<example>ROSSSH</example>
|
|
797
|
+
<example service.version="2.0">SSH-2.0-ROSSSH</example>
|
|
798
|
+
<param pos="1" name="service.version"/>
|
|
799
|
+
<param pos="0" name="os.vendor" value="MikroTik"/>
|
|
800
|
+
<param pos="0" name="os.device" value="Router"/>
|
|
801
|
+
<param pos="0" name="os.family" value="RouterOS"/>
|
|
802
|
+
<param pos="0" name="os.product" value="RouterOS"/>
|
|
803
|
+
</fingerprint>
|
|
804
|
+
<!--
|
|
887
805
|
1.2.22j4rad
|
|
888
806
|
2.40
|
|
889
807
|
2.0.12
|
|
@@ -891,10 +809,8 @@ Server-VII
|
|
|
891
809
|
9.9.1
|
|
892
810
|
IPSSH-1.10.0
|
|
893
811
|
-->
|
|
894
|
-
|
|
895
|
-
<!--
|
|
812
|
+
<!--
|
|
896
813
|
Possibly Nortel Passport
|
|
897
814
|
SSH_2.1.1
|
|
898
815
|
-->
|
|
899
|
-
|
|
900
816
|
</fingerprints>
|