recog 2.1.20 → 2.1.21

Sign up to get free protection for your applications and to get access to all the features.
Files changed (47) hide show
  1. checksums.yaml +4 -4
  2. data/lib/recog/version.rb +1 -1
  3. data/remap.json +131 -0
  4. data/spec/lib/fingerprint_self_test_spec.rb +16 -1
  5. data/update_cpes.py +202 -0
  6. data/xml/apache_os.xml +29 -5
  7. data/xml/architecture.xml +3 -3
  8. data/xml/dns_versionbind.xml +56 -10
  9. data/xml/ftp_banners.xml +56 -12
  10. data/xml/h323_callresp.xml +4 -4
  11. data/xml/hp_pjl_id.xml +8 -8
  12. data/xml/http_cookies.xml +20 -8
  13. data/xml/http_servers.xml +122 -8
  14. data/xml/http_wwwauth.xml +13 -3
  15. data/xml/imap_banners.xml +19 -1
  16. data/xml/ldap_searchresult.xml +44 -68
  17. data/xml/mdns_device-info_txt.xml +18 -7
  18. data/xml/mdns_workstation_txt.xml +7 -7
  19. data/xml/mysql_banners.xml +159 -13
  20. data/xml/mysql_error.xml +124 -21
  21. data/xml/nntp_banners.xml +10 -4
  22. data/xml/ntp_banners.xml +144 -84
  23. data/xml/operating_system.xml +39 -10
  24. data/xml/pop_banners.xml +32 -12
  25. data/xml/rsh_resp.xml +8 -3
  26. data/xml/sip_banners.xml +4 -3
  27. data/xml/sip_user_agents.xml +4 -3
  28. data/xml/smb_native_lm.xml +9 -4
  29. data/xml/smb_native_os.xml +50 -25
  30. data/xml/smtp_banners.xml +108 -33
  31. data/xml/smtp_debug.xml +11 -8
  32. data/xml/smtp_ehlo.xml +14 -11
  33. data/xml/smtp_expn.xml +17 -11
  34. data/xml/smtp_help.xml +17 -11
  35. data/xml/smtp_mailfrom.xml +4 -3
  36. data/xml/smtp_noop.xml +13 -8
  37. data/xml/smtp_quit.xml +10 -8
  38. data/xml/smtp_rcptto.xml +1 -3
  39. data/xml/smtp_rset.xml +10 -8
  40. data/xml/smtp_turn.xml +10 -8
  41. data/xml/smtp_vrfy.xml +18 -11
  42. data/xml/snmp_sysdescr.xml +157 -451
  43. data/xml/snmp_sysobjid.xml +57 -4
  44. data/xml/ssh_banners.xml +104 -5
  45. data/xml/upnp_banners.xml +16 -1
  46. data/xml/x11_banners.xml +34 -9
  47. metadata +4 -2
data/xml/snmp_sysobjid.xml CHANGED
@@ -1,9 +1,9 @@
1
1
  <?xml version="1.0" encoding="UTF-8"?>
2
- <!--
3
- SNMP fingerprint definitions for SysObjectIDs. These are matched against the value of the
4
- 'sysObjectID' (OID 1.3.6.1.2.1.1.2) variable.
5
- -->
6
2
  <fingerprints matches="snmp.sys_object_id" protocol="snmp" database_type="service">
3
+ <!--
4
+ SNMP fingerprint definitions for SysObjectIDs. These are matched against the value of the
5
+ 'sysObjectID' (OID 1.3.6.1.2.1.1.2) variable.
6
+ -->
7
7
  <!--======================================================================
8
8
  MICROSOFT
9
9
  =======================================================================-->
@@ -20,6 +20,7 @@
20
20
  <param pos="0" name="os.version" value="4.0"/>
21
21
  <param pos="0" name="os.device" value="General"/>
22
22
  <param pos="0" name="os.arch" value="x86"/>
23
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_nt:4.0"/>
23
24
  </fingerprint>
24
25
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows 2000 Version 5\.0.*$">
25
26
  <description>Windows 2000 on x86</description>
@@ -29,6 +30,7 @@
29
30
  <param pos="0" name="os.product" value="Windows 2000 Server"/>
30
31
  <param pos="0" name="os.device" value="General"/>
31
32
  <param pos="0" name="os.arch" value="x86"/>
33
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_2000:-"/>
32
34
  </fingerprint>
33
35
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows 2000 Version 5\.0.*$">
34
36
  <description>Windows 2000 on x86</description>
@@ -38,6 +40,7 @@
38
40
  <param pos="0" name="os.product" value="Windows 2000 Datacenter Server"/>
39
41
  <param pos="0" name="os.device" value="General"/>
40
42
  <param pos="0" name="os.arch" value="x86"/>
43
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_2000:-"/>
41
44
  </fingerprint>
42
45
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 5\.2.*$">
43
46
  <description>Windows Server 2003 on x86</description>
@@ -47,6 +50,7 @@
47
50
  <param pos="0" name="os.product" value="Windows Server 2003"/>
48
51
  <param pos="0" name="os.device" value="General"/>
49
52
  <param pos="0" name="os.arch" value="x86"/>
53
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
50
54
  </fingerprint>
51
55
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 5\.2.*$">
52
56
  <description>Windows Server 2003 on x86</description>
@@ -56,6 +60,7 @@
56
60
  <param pos="0" name="os.product" value="Windows Server 2003, Datacenter Edition"/>
57
61
  <param pos="0" name="os.device" value="General"/>
58
62
  <param pos="0" name="os.arch" value="x86"/>
63
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
59
64
  </fingerprint>
60
65
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 5\.2.*$">
61
66
  <description>Windows Server 2003 on x86_64</description>
@@ -66,6 +71,7 @@
66
71
  <param pos="0" name="os.product" value="Windows Server 2003"/>
67
72
  <param pos="0" name="os.device" value="General"/>
68
73
  <param pos="0" name="os.arch" value="x86_64"/>
74
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
69
75
  </fingerprint>
70
76
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 5\.2.*$">
71
77
  <description>Windows Server 2003 on x86_64</description>
@@ -76,6 +82,7 @@
76
82
  <param pos="0" name="os.product" value="Windows Server 2003, Datacenter Edition"/>
77
83
  <param pos="0" name="os.device" value="General"/>
78
84
  <param pos="0" name="os.arch" value="x86_64"/>
85
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
79
86
  </fingerprint>
80
87
  <fingerprint pattern="^Microsoft Windows CE Version ([\d.]+).*$">
81
88
  <description>Windows CE</description>
@@ -86,6 +93,7 @@
86
93
  <param pos="0" name="os.product" value="Windows CE"/>
87
94
  <param pos="0" name="os.device" value="General"/>
88
95
  <param pos="1" name="os.version"/>
96
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_ce:{os.version}"/>
89
97
  </fingerprint>
90
98
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 6\.0 \(Build 6001.*$">
91
99
  <description>Windows Server 2008 on x86</description>
@@ -95,6 +103,7 @@
95
103
  <param pos="0" name="os.product" value="Windows Server 2008"/>
96
104
  <param pos="0" name="os.device" value="General"/>
97
105
  <param pos="0" name="os.arch" value="x86"/>
106
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
98
107
  </fingerprint>
99
108
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 6\.0 \(Build 6001.*$">
100
109
  <description>Windows Server 2008 Datacenter on x86</description>
@@ -104,6 +113,7 @@
104
113
  <param pos="0" name="os.product" value="Windows Server 2008 Datacenter Edition"/>
105
114
  <param pos="0" name="os.device" value="General"/>
106
115
  <param pos="0" name="os.arch" value="x86"/>
116
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
107
117
  </fingerprint>
108
118
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.0 \(Build 6001.*$">
109
119
  <description>Windows Server 2008 on x86_64</description>
@@ -114,6 +124,7 @@
114
124
  <param pos="0" name="os.product" value="Windows Server 2008"/>
115
125
  <param pos="0" name="os.device" value="General"/>
116
126
  <param pos="0" name="os.arch" value="x86_64"/>
127
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
117
128
  </fingerprint>
118
129
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 6\.0 \(Build 6001.*$">
119
130
  <description>Windows Server 2008 Datacenter on x86_64</description>
@@ -124,6 +135,7 @@
124
135
  <param pos="0" name="os.product" value="Windows Server 2008 Datacenter Edition"/>
125
136
  <param pos="0" name="os.device" value="General"/>
126
137
  <param pos="0" name="os.arch" value="x86_64"/>
138
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
127
139
  </fingerprint>
128
140
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 6\.0 \(Build 6002.*$">
129
141
  <description>Windows Server 2008 SP2 on x86</description>
@@ -134,6 +146,7 @@
134
146
  <param pos="0" name="os.device" value="General"/>
135
147
  <param pos="0" name="os.version" value="SP2"/>
136
148
  <param pos="0" name="os.arch" value="x86"/>
149
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP2"/>
137
150
  </fingerprint>
138
151
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 6\.0 \(Build 6002.*$">
139
152
  <description>Windows Server 2008 Datacenter SP2 on x86</description>
@@ -144,6 +157,7 @@
144
157
  <param pos="0" name="os.device" value="General"/>
145
158
  <param pos="0" name="os.version" value="SP2"/>
146
159
  <param pos="0" name="os.arch" value="x86"/>
160
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP2"/>
147
161
  </fingerprint>
148
162
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.0 \(Build 6002.*$">
149
163
  <description>Windows Server 2008 SP2 on x86_64</description>
@@ -155,6 +169,7 @@
155
169
  <param pos="0" name="os.device" value="General"/>
156
170
  <param pos="0" name="os.version" value="SP2"/>
157
171
  <param pos="0" name="os.arch" value="x86_64"/>
172
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP2"/>
158
173
  </fingerprint>
159
174
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 6\.0 \(Build 6002.*$">
160
175
  <description>Windows Server 2008 Datacenter SP2 on x86_64</description>
@@ -166,6 +181,7 @@
166
181
  <param pos="0" name="os.device" value="General"/>
167
182
  <param pos="0" name="os.version" value="SP2"/>
168
183
  <param pos="0" name="os.arch" value="x86_64"/>
184
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP2"/>
169
185
  </fingerprint>
170
186
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 6\.1 \(Build 7600.*$">
171
187
  <description>Windows Server 2008 R2 on x86</description>
@@ -175,6 +191,7 @@
175
191
  <param pos="0" name="os.product" value="Windows Server 2008 R2"/>
176
192
  <param pos="0" name="os.device" value="General"/>
177
193
  <param pos="0" name="os.arch" value="x86"/>
194
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
178
195
  </fingerprint>
179
196
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 6\.1 \(Build 7600.*$">
180
197
  <description>Windows Server 2008 Datacenter R2 on x86</description>
@@ -184,6 +201,7 @@
184
201
  <param pos="0" name="os.product" value="Windows Server 2008 R2, Datacenter Edition"/>
185
202
  <param pos="0" name="os.device" value="General"/>
186
203
  <param pos="0" name="os.arch" value="x86"/>
204
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
187
205
  </fingerprint>
188
206
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.1 \(Build 7600.*$">
189
207
  <description>Windows Server 2008 R2 on x86_64</description>
@@ -194,6 +212,7 @@
194
212
  <param pos="0" name="os.product" value="Windows Server 2008 R2"/>
195
213
  <param pos="0" name="os.device" value="General"/>
196
214
  <param pos="0" name="os.arch" value="x86_64"/>
215
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
197
216
  </fingerprint>
198
217
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 6\.1 \(Build 7600.*$">
199
218
  <description>Windows Server 2008 Datacenter R2 on x86_64</description>
@@ -204,6 +223,7 @@
204
223
  <param pos="0" name="os.product" value="Windows Server 2008 R2, Datacenter Edition"/>
205
224
  <param pos="0" name="os.device" value="General"/>
206
225
  <param pos="0" name="os.arch" value="x86_64"/>
226
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
207
227
  </fingerprint>
208
228
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 6\.1 \(Build 7601.*$">
209
229
  <description>Windows Server 2008 R2 SP1 on x86</description>
@@ -214,6 +234,7 @@
214
234
  <param pos="0" name="os.device" value="General"/>
215
235
  <param pos="0" name="os.version" value="SP1"/>
216
236
  <param pos="0" name="os.arch" value="x86"/>
237
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP1"/>
217
238
  </fingerprint>
218
239
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 6\.1 \(Build 7601.*$">
219
240
  <description>Windows Server 2008 Datacenter R2 SP1 on x86</description>
@@ -224,6 +245,7 @@
224
245
  <param pos="0" name="os.device" value="General"/>
225
246
  <param pos="0" name="os.version" value="SP1"/>
226
247
  <param pos="0" name="os.arch" value="x86"/>
248
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP1"/>
227
249
  </fingerprint>
228
250
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.1 \(Build 7601.*$">
229
251
  <description>Windows Server 2008 R2 SP1 on x86_64</description>
@@ -235,6 +257,7 @@
235
257
  <param pos="0" name="os.device" value="General"/>
236
258
  <param pos="0" name="os.version" value="SP1"/>
237
259
  <param pos="0" name="os.arch" value="x86_64"/>
260
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP1"/>
238
261
  </fingerprint>
239
262
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 6\.1 \(Build 7601.*$">
240
263
  <description>Windows Server 2008 Datacenter R2 SP1 on x86_64</description>
@@ -246,6 +269,7 @@
246
269
  <param pos="0" name="os.device" value="General"/>
247
270
  <param pos="0" name="os.version" value="SP1"/>
248
271
  <param pos="0" name="os.arch" value="x86_64"/>
272
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP1"/>
249
273
  </fingerprint>
250
274
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.2 \(Build 9200.*$">
251
275
  <description>Windows Server 2012 on x86_64</description>
@@ -255,6 +279,7 @@
255
279
  <param pos="0" name="os.product" value="Windows Server 2012"/>
256
280
  <param pos="0" name="os.device" value="General"/>
257
281
  <param pos="0" name="os.arch" value="x86_64"/>
282
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
258
283
  </fingerprint>
259
284
  <!-- Various OIDs for Net-SNMP agents which are OS specific -->
260
285
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.1$">
@@ -264,8 +289,10 @@
264
289
  <param pos="0" name="os.family" value="HP-UX"/>
265
290
  <param pos="0" name="os.product" value="HP-UX"/>
266
291
  <param pos="0" name="os.version" value="9"/>
292
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:9"/>
267
293
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
268
294
  <param pos="0" name="service.product" value="SNMP Agent"/>
295
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
269
296
  </fingerprint>
270
297
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.2$">
271
298
  <description>Net-SNMP on sunos4</description>
@@ -273,8 +300,10 @@
273
300
  <param pos="0" name="os.vendor" value="Sun"/>
274
301
  <param pos="0" name="os.family" value="Solaris"/>
275
302
  <param pos="0" name="os.product" value="Solaris"/>
303
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:-"/>
276
304
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
277
305
  <param pos="0" name="service.product" value="SNMP Agent"/>
306
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
278
307
  </fingerprint>
279
308
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.3$">
280
309
  <description>Net-SNMP on solaris</description>
@@ -282,8 +311,10 @@
282
311
  <param pos="0" name="os.vendor" value="Sun"/>
283
312
  <param pos="0" name="os.family" value="Solaris"/>
284
313
  <param pos="0" name="os.product" value="Solaris"/>
314
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:-"/>
285
315
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
286
316
  <param pos="0" name="service.product" value="SNMP Agent"/>
317
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
287
318
  </fingerprint>
288
319
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.4$">
289
320
  <description>Net-SNMP on osf</description>
@@ -292,6 +323,7 @@
292
323
  <param pos="0" name="os.product" value="OSF/1"/>
293
324
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
294
325
  <param pos="0" name="service.product" value="SNMP Agent"/>
326
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
295
327
  </fingerprint>
296
328
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.5$">
297
329
  <description>Net-SNMP on ultrix</description>
@@ -300,6 +332,7 @@
300
332
  <param pos="0" name="os.product" value="Ultrix"/>
301
333
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
302
334
  <param pos="0" name="service.product" value="SNMP Agent"/>
335
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
303
336
  </fingerprint>
304
337
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.6$">
305
338
  <description>Net-SNMP on hpux10</description>
@@ -308,8 +341,10 @@
308
341
  <param pos="0" name="os.family" value="HP-UX"/>
309
342
  <param pos="0" name="os.product" value="HP-UX"/>
310
343
  <param pos="0" name="os.version" value="10"/>
344
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:10"/>
311
345
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
312
346
  <param pos="0" name="service.product" value="SNMP Agent"/>
347
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
313
348
  </fingerprint>
314
349
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.7$">
315
350
  <description>Net-SNMP on netbsd</description>
@@ -317,8 +352,10 @@
317
352
  <param pos="0" name="os.vendor" value="NetBSD"/>
318
353
  <param pos="0" name="os.family" value="NetBSD"/>
319
354
  <param pos="0" name="os.product" value="NetBSD"/>
355
+ <param pos="0" name="os.cpe23" value="cpe:/o:netbsd:netbsd:-"/>
320
356
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
321
357
  <param pos="0" name="service.product" value="SNMP Agent"/>
358
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
322
359
  </fingerprint>
323
360
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.8$">
324
361
  <description>Net-SNMP on freebsd</description>
@@ -326,8 +363,10 @@
326
363
  <param pos="0" name="os.vendor" value="FreeBSD"/>
327
364
  <param pos="0" name="os.family" value="FreeBSD"/>
328
365
  <param pos="0" name="os.product" value="FreeBSD"/>
366
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:-"/>
329
367
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
330
368
  <param pos="0" name="service.product" value="SNMP Agent"/>
369
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
331
370
  </fingerprint>
332
371
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.9$">
333
372
  <description>Net-SNMP on irix</description>
@@ -335,8 +374,10 @@
335
374
  <param pos="0" name="os.vendor" value="SGI"/>
336
375
  <param pos="0" name="os.family" value="IRIX"/>
337
376
  <param pos="0" name="os.product" value="IRIX"/>
377
+ <param pos="0" name="os.cpe23" value="cpe:/o:sgi:irix:-"/>
338
378
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
339
379
  <param pos="0" name="service.product" value="SNMP Agent"/>
380
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
340
381
  </fingerprint>
341
382
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.10$">
342
383
  <description>Net-SNMP on linux</description>
@@ -345,6 +386,7 @@
345
386
  <param pos="0" name="os.product" value="Linux"/>
346
387
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
347
388
  <param pos="0" name="service.product" value="SNMP Agent"/>
389
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
348
390
  </fingerprint>
349
391
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.11$">
350
392
  <description>Net-SNMP on bsdi</description>
@@ -353,6 +395,7 @@
353
395
  <param pos="0" name="os.product" value="BSD/OS"/>
354
396
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
355
397
  <param pos="0" name="service.product" value="SNMP Agent"/>
398
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
356
399
  </fingerprint>
357
400
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.12$">
358
401
  <description>Net-SNMP on openbsd</description>
@@ -360,8 +403,10 @@
360
403
  <param pos="0" name="os.vendor" value="OpenBSD"/>
361
404
  <param pos="0" name="os.family" value="OpenBSD"/>
362
405
  <param pos="0" name="os.product" value="OpenBSD"/>
406
+ <param pos="0" name="os.cpe23" value="cpe:/o:openbsd:openbsd:-"/>
363
407
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
364
408
  <param pos="0" name="service.product" value="SNMP Agent"/>
409
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
365
410
  </fingerprint>
366
411
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.13$">
367
412
  <description>Net-SNMP on win32</description>
@@ -369,8 +414,10 @@
369
414
  <param pos="0" name="os.vendor" value="Microsoft"/>
370
415
  <param pos="0" name="os.product" value="Windows"/>
371
416
  <param pos="0" name="os.family" value="Windows"/>
417
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
372
418
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
373
419
  <param pos="0" name="service.product" value="SNMP Agent"/>
420
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
374
421
  </fingerprint>
375
422
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.14$">
376
423
  <description>Net-SNMP on hpux11</description>
@@ -379,8 +426,10 @@
379
426
  <param pos="0" name="os.family" value="HP-UX"/>
380
427
  <param pos="0" name="os.product" value="HP-UX"/>
381
428
  <param pos="0" name="os.version" value="11"/>
429
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:11"/>
382
430
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
383
431
  <param pos="0" name="service.product" value="SNMP Agent"/>
432
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
384
433
  </fingerprint>
385
434
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.15$">
386
435
  <description>Net-SNMP on aix</description>
@@ -388,15 +437,19 @@
388
437
  <param pos="0" name="os.vendor" value="IBM"/>
389
438
  <param pos="0" name="os.family" value="AIX"/>
390
439
  <param pos="0" name="os.product" value="AIX"/>
440
+ <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:-"/>
391
441
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
392
442
  <param pos="0" name="service.product" value="SNMP Agent"/>
443
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
393
444
  </fingerprint>
394
445
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.16$">
395
446
  <description>Net-SNMP on macosx</description>
396
447
  <example>1.3.6.1.4.1.8072.3.2.16</example>
397
448
  <param pos="0" name="os.vendor" value="Apple"/>
398
449
  <param pos="0" name="os.product" value="Mac OS X"/>
450
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:-"/>
399
451
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
400
452
  <param pos="0" name="service.product" value="SNMP Agent"/>
453
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
401
454
  </fingerprint>
402
455
  </fingerprints>
data/xml/ssh_banners.xml CHANGED
@@ -1,10 +1,10 @@
1
1
  <?xml version="1.0" encoding="UTF-8"?>
2
- <!--
3
- SSH "software revision and comment" strings (official RFC nomenclature for the part of
4
- the identification string after "SSH-x.x-") are matched against these patterns to
5
- fingerprint SSH servers.
6
- -->
7
2
  <fingerprints matches="ssh.banner" protocol="ssh" database_type="service" preference="0.90">
3
+ <!--
4
+ SSH "software revision and comment" strings (official RFC nomenclature for the part of
5
+ the identification string after "SSH-x.x-") are matched against these patterns to
6
+ fingerprint SSH servers.
7
+ -->
8
8
  <fingerprint pattern="^RomSShell_([\d\.]+)$">
9
9
  <description>Allegro RomSShell SSH</description>
10
10
  <example service.version="4.62">RomSShell_4.62</example>
@@ -19,6 +19,7 @@ fingerprint SSH servers.
19
19
  <param pos="0" name="service.product" value="iLO"/>
20
20
  <param pos="0" name="service.family" value="iLO"/>
21
21
  <param pos="1" name="service.version"/>
22
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:integrated_lights_out:{service.version}"/>
22
23
  <param pos="0" name="hw.vendor" value="HP"/>
23
24
  <param pos="0" name="os.vendor" value="HP"/>
24
25
  <param pos="0" name="os.product" value="iLO"/>
@@ -39,6 +40,7 @@ fingerprint SSH servers.
39
40
  <param pos="0" name="service.vendor" value="Ipswitch"/>
40
41
  <param pos="0" name="service.product" value="WS_FTP"/>
41
42
  <param pos="1" name="service.version"/>
43
+ <param pos="0" name="service.cpe23" value="cpe:/a:ipswitch:ws_ftp:{service.version}"/>
42
44
  </fingerprint>
43
45
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(FreeBSD[ -].*)$">
44
46
  <description>OpenSSH running on FreeBSD</description>
@@ -48,10 +50,12 @@ fingerprint SSH servers.
48
50
  <param pos="0" name="service.vendor" value="OpenBSD"/>
49
51
  <param pos="0" name="service.family" value="OpenSSH"/>
50
52
  <param pos="0" name="service.product" value="OpenSSH"/>
53
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
51
54
  <param pos="0" name="os.vendor" value="FreeBSD"/>
52
55
  <param pos="0" name="os.device" value="General"/>
53
56
  <param pos="0" name="os.family" value="FreeBSD"/>
54
57
  <param pos="0" name="os.product" value="FreeBSD"/>
58
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:-"/>
55
59
  </fingerprint>
56
60
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(NetBSD(?:_Secure_Shell)?[ -].*)$">
57
61
  <description>OpenSSH running on NetBSD</description>
@@ -62,10 +66,12 @@ fingerprint SSH servers.
62
66
  <param pos="0" name="service.vendor" value="OpenBSD"/>
63
67
  <param pos="0" name="service.family" value="OpenSSH"/>
64
68
  <param pos="0" name="service.product" value="OpenSSH"/>
69
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
65
70
  <param pos="0" name="os.vendor" value="NetBSD"/>
66
71
  <param pos="0" name="os.device" value="General"/>
67
72
  <param pos="0" name="os.family" value="NetBSD"/>
68
73
  <param pos="0" name="os.product" value="NetBSD"/>
74
+ <param pos="0" name="os.cpe23" value="cpe:/o:netbsd:netbsd:-"/>
69
75
  </fingerprint>
70
76
  <fingerprint pattern="^OpenSSH_(4\.1p1) (Debian-7ubuntu\d+(?:\.\d+)?)$">
71
77
  <description>OpenSSH running on Ubuntu 5.10</description>
@@ -75,11 +81,13 @@ fingerprint SSH servers.
75
81
  <param pos="0" name="service.vendor" value="OpenBSD"/>
76
82
  <param pos="0" name="service.family" value="OpenSSH"/>
77
83
  <param pos="0" name="service.product" value="OpenSSH"/>
84
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
78
85
  <param pos="0" name="os.vendor" value="Ubuntu"/>
79
86
  <param pos="0" name="os.device" value="General"/>
80
87
  <param pos="0" name="os.family" value="Linux"/>
81
88
  <param pos="0" name="os.product" value="Linux"/>
82
89
  <param pos="0" name="os.version" value="5.10"/>
90
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:5.10"/>
83
91
  </fingerprint>
84
92
  <fingerprint pattern="^OpenSSH_(4\.2p1) (Debian-7ubuntu\d+(?:\.\d+)?)$">
85
93
  <description>OpenSSH running on Ubuntu 6.04</description>
@@ -90,11 +98,13 @@ fingerprint SSH servers.
90
98
  <param pos="0" name="service.vendor" value="OpenBSD"/>
91
99
  <param pos="0" name="service.family" value="OpenSSH"/>
92
100
  <param pos="0" name="service.product" value="OpenSSH"/>
101
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
93
102
  <param pos="0" name="os.vendor" value="Ubuntu"/>
94
103
  <param pos="0" name="os.device" value="General"/>
95
104
  <param pos="0" name="os.family" value="Linux"/>
96
105
  <param pos="0" name="os.product" value="Linux"/>
97
106
  <param pos="0" name="os.version" value="6.04"/>
107
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:6.04"/>
98
108
  </fingerprint>
99
109
  <fingerprint pattern="^OpenSSH_(4\.3p2) (Debian-8ubuntu\d+(?:\.\d+)?)$">
100
110
  <description>OpenSSH running on Ubuntu 7.04</description>
@@ -104,11 +114,13 @@ fingerprint SSH servers.
104
114
  <param pos="0" name="service.vendor" value="OpenBSD"/>
105
115
  <param pos="0" name="service.family" value="OpenSSH"/>
106
116
  <param pos="0" name="service.product" value="OpenSSH"/>
117
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
107
118
  <param pos="0" name="os.vendor" value="Ubuntu"/>
108
119
  <param pos="0" name="os.device" value="General"/>
109
120
  <param pos="0" name="os.family" value="Linux"/>
110
121
  <param pos="0" name="os.product" value="Linux"/>
111
122
  <param pos="0" name="os.version" value="7.04"/>
123
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:7.04"/>
112
124
  </fingerprint>
113
125
  <fingerprint pattern="^OpenSSH_(4\.6p1) (Debian-5ubuntu\d+(?:\.\d+)?)$">
114
126
  <description>OpenSSH running on Ubuntu 7.10</description>
@@ -120,11 +132,13 @@ fingerprint SSH servers.
120
132
  <param pos="0" name="service.vendor" value="OpenBSD"/>
121
133
  <param pos="0" name="service.family" value="OpenSSH"/>
122
134
  <param pos="0" name="service.product" value="OpenSSH"/>
135
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
123
136
  <param pos="0" name="os.vendor" value="Ubuntu"/>
124
137
  <param pos="0" name="os.device" value="General"/>
125
138
  <param pos="0" name="os.family" value="Linux"/>
126
139
  <param pos="0" name="os.product" value="Linux"/>
127
140
  <param pos="0" name="os.version" value="7.10"/>
141
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:7.10"/>
128
142
  </fingerprint>
129
143
  <fingerprint pattern="^OpenSSH_(4\.6p1) (Debian-5build1)$">
130
144
  <description>OpenSSH running on very early versions of Ubuntu 7.10</description>
@@ -134,11 +148,13 @@ fingerprint SSH servers.
134
148
  <param pos="0" name="service.vendor" value="OpenBSD"/>
135
149
  <param pos="0" name="service.family" value="OpenSSH"/>
136
150
  <param pos="0" name="service.product" value="OpenSSH"/>
151
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
137
152
  <param pos="0" name="os.vendor" value="Ubuntu"/>
138
153
  <param pos="0" name="os.device" value="General"/>
139
154
  <param pos="0" name="os.family" value="Linux"/>
140
155
  <param pos="0" name="os.product" value="Linux"/>
141
156
  <param pos="0" name="os.version" value="7.10"/>
157
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:7.10"/>
142
158
  </fingerprint>
143
159
  <fingerprint pattern="^OpenSSH_(4\.7p1) (Debian-8ubuntu\d+(?:\.\d+)?)$">
144
160
  <description>OpenSSH running on Ubuntu 8.04</description>
@@ -149,11 +165,13 @@ fingerprint SSH servers.
149
165
  <param pos="0" name="service.vendor" value="OpenBSD"/>
150
166
  <param pos="0" name="service.family" value="OpenSSH"/>
151
167
  <param pos="0" name="service.product" value="OpenSSH"/>
168
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
152
169
  <param pos="0" name="os.vendor" value="Ubuntu"/>
153
170
  <param pos="0" name="os.device" value="General"/>
154
171
  <param pos="0" name="os.family" value="Linux"/>
155
172
  <param pos="0" name="os.product" value="Linux"/>
156
173
  <param pos="0" name="os.version" value="8.04"/>
174
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:8.04"/>
157
175
  </fingerprint>
158
176
  <fingerprint pattern="^OpenSSH_(5\.1p1) (Debian-3ubuntu\d+(?:\.\d+)?)$">
159
177
  <description>OpenSSH running on Ubuntu 8.10</description>
@@ -163,11 +181,13 @@ fingerprint SSH servers.
163
181
  <param pos="0" name="service.vendor" value="OpenBSD"/>
164
182
  <param pos="0" name="service.family" value="OpenSSH"/>
165
183
  <param pos="0" name="service.product" value="OpenSSH"/>
184
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
166
185
  <param pos="0" name="os.vendor" value="Ubuntu"/>
167
186
  <param pos="0" name="os.device" value="General"/>
168
187
  <param pos="0" name="os.family" value="Linux"/>
169
188
  <param pos="0" name="os.product" value="Linux"/>
170
189
  <param pos="0" name="os.version" value="8.10"/>
190
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:8.10"/>
171
191
  </fingerprint>
172
192
  <fingerprint pattern="^OpenSSH_(5\.1p1) (Debian-5ubuntu\d+(?:\.\d+)?)$">
173
193
  <description>OpenSSH running on Ubuntu 9.04</description>
@@ -177,11 +197,13 @@ fingerprint SSH servers.
177
197
  <param pos="0" name="service.vendor" value="OpenBSD"/>
178
198
  <param pos="0" name="service.family" value="OpenSSH"/>
179
199
  <param pos="0" name="service.product" value="OpenSSH"/>
200
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
180
201
  <param pos="0" name="os.vendor" value="Ubuntu"/>
181
202
  <param pos="0" name="os.device" value="General"/>
182
203
  <param pos="0" name="os.family" value="Linux"/>
183
204
  <param pos="0" name="os.product" value="Linux"/>
184
205
  <param pos="0" name="os.version" value="9.04"/>
206
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:9.04"/>
185
207
  </fingerprint>
186
208
  <fingerprint pattern="^OpenSSH_(5\.1p1) (Debian-6ubuntu\d+(?:\.\d+)?)$">
187
209
  <description>OpenSSH running on Ubuntu 9.10</description>
@@ -191,11 +213,13 @@ fingerprint SSH servers.
191
213
  <param pos="0" name="service.vendor" value="OpenBSD"/>
192
214
  <param pos="0" name="service.family" value="OpenSSH"/>
193
215
  <param pos="0" name="service.product" value="OpenSSH"/>
216
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
194
217
  <param pos="0" name="os.vendor" value="Ubuntu"/>
195
218
  <param pos="0" name="os.device" value="General"/>
196
219
  <param pos="0" name="os.family" value="Linux"/>
197
220
  <param pos="0" name="os.product" value="Linux"/>
198
221
  <param pos="0" name="os.version" value="9.10"/>
222
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:9.10"/>
199
223
  </fingerprint>
200
224
  <fingerprint pattern="^OpenSSH_(5\.3p1) (Debian-3ubuntu\d+(?:\.\d+)?)$">
201
225
  <description>OpenSSH running on Ubuntu 10.04 (lucid)</description>
@@ -210,11 +234,13 @@ fingerprint SSH servers.
210
234
  <param pos="0" name="service.vendor" value="OpenBSD"/>
211
235
  <param pos="0" name="service.family" value="OpenSSH"/>
212
236
  <param pos="0" name="service.product" value="OpenSSH"/>
237
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
213
238
  <param pos="0" name="os.vendor" value="Ubuntu"/>
214
239
  <param pos="0" name="os.device" value="General"/>
215
240
  <param pos="0" name="os.family" value="Linux"/>
216
241
  <param pos="0" name="os.product" value="Linux"/>
217
242
  <param pos="0" name="os.version" value="10.04"/>
243
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:10.04"/>
218
244
  </fingerprint>
219
245
  <fingerprint pattern="^OpenSSH_(5\.5p1) (Debian-4ubuntu\d+(?:\.\d+)?)$">
220
246
  <description>OpenSSH running on Ubuntu 10.10</description>
@@ -226,11 +252,13 @@ fingerprint SSH servers.
226
252
  <param pos="0" name="service.vendor" value="OpenBSD"/>
227
253
  <param pos="0" name="service.family" value="OpenSSH"/>
228
254
  <param pos="0" name="service.product" value="OpenSSH"/>
255
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
229
256
  <param pos="0" name="os.vendor" value="Ubuntu"/>
230
257
  <param pos="0" name="os.device" value="General"/>
231
258
  <param pos="0" name="os.family" value="Linux"/>
232
259
  <param pos="0" name="os.product" value="Linux"/>
233
260
  <param pos="0" name="os.version" value="10.10"/>
261
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:10.10"/>
234
262
  </fingerprint>
235
263
  <fingerprint pattern="^OpenSSH_(5\.8p1) (Debian-1ubuntu\d(?:\.\d)?)$">
236
264
  <description>OpenSSH running on Ubuntu 11.04</description>
@@ -240,11 +268,13 @@ fingerprint SSH servers.
240
268
  <param pos="0" name="service.vendor" value="OpenBSD"/>
241
269
  <param pos="0" name="service.family" value="OpenSSH"/>
242
270
  <param pos="0" name="service.product" value="OpenSSH"/>
271
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
243
272
  <param pos="0" name="os.vendor" value="Ubuntu"/>
244
273
  <param pos="0" name="os.device" value="General"/>
245
274
  <param pos="0" name="os.family" value="Linux"/>
246
275
  <param pos="0" name="os.product" value="Linux"/>
247
276
  <param pos="0" name="os.version" value="11.04"/>
277
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:11.04"/>
248
278
  </fingerprint>
249
279
  <fingerprint pattern="^OpenSSH_(5\.8p1) (Debian-7ubuntu\d(?:\.\d)?)$">
250
280
  <description>OpenSSH running on Ubuntu 11.10</description>
@@ -254,11 +284,13 @@ fingerprint SSH servers.
254
284
  <param pos="0" name="service.vendor" value="OpenBSD"/>
255
285
  <param pos="0" name="service.family" value="OpenSSH"/>
256
286
  <param pos="0" name="service.product" value="OpenSSH"/>
287
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
257
288
  <param pos="0" name="os.vendor" value="Ubuntu"/>
258
289
  <param pos="0" name="os.device" value="General"/>
259
290
  <param pos="0" name="os.family" value="Linux"/>
260
291
  <param pos="0" name="os.product" value="Linux"/>
261
292
  <param pos="0" name="os.version" value="11.10"/>
293
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:11.10"/>
262
294
  </fingerprint>
263
295
  <fingerprint pattern="^OpenSSH_(5\.9p1) (Debian-5ubuntu\d(?:\.\d)?)$">
264
296
  <description>OpenSSH running on Ubuntu 12.04</description>
@@ -269,11 +301,13 @@ fingerprint SSH servers.
269
301
  <param pos="0" name="service.vendor" value="OpenBSD"/>
270
302
  <param pos="0" name="service.family" value="OpenSSH"/>
271
303
  <param pos="0" name="service.product" value="OpenSSH"/>
304
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
272
305
  <param pos="0" name="os.vendor" value="Ubuntu"/>
273
306
  <param pos="0" name="os.device" value="General"/>
274
307
  <param pos="0" name="os.family" value="Linux"/>
275
308
  <param pos="0" name="os.product" value="Linux"/>
276
309
  <param pos="0" name="os.version" value="12.04"/>
310
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:12.04"/>
277
311
  </fingerprint>
278
312
  <fingerprint pattern="^OpenSSH_(6\.0p1) (Debian-3ubuntu\d(?:\.\d)?)$">
279
313
  <description>OpenSSH running on Ubuntu 12.10</description>
@@ -283,11 +317,13 @@ fingerprint SSH servers.
283
317
  <param pos="0" name="service.vendor" value="OpenBSD"/>
284
318
  <param pos="0" name="service.family" value="OpenSSH"/>
285
319
  <param pos="0" name="service.product" value="OpenSSH"/>
320
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
286
321
  <param pos="0" name="os.vendor" value="Ubuntu"/>
287
322
  <param pos="0" name="os.device" value="General"/>
288
323
  <param pos="0" name="os.family" value="Linux"/>
289
324
  <param pos="0" name="os.product" value="Linux"/>
290
325
  <param pos="0" name="os.version" value="12.10"/>
326
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:12.10"/>
291
327
  </fingerprint>
292
328
  <fingerprint pattern="^OpenSSH_(6\.1p1) (Debian-4)$">
293
329
  <description>OpenSSH running on Ubuntu 13.04</description>
@@ -297,11 +333,13 @@ fingerprint SSH servers.
297
333
  <param pos="0" name="service.vendor" value="OpenBSD"/>
298
334
  <param pos="0" name="service.family" value="OpenSSH"/>
299
335
  <param pos="0" name="service.product" value="OpenSSH"/>
336
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
300
337
  <param pos="0" name="os.vendor" value="Ubuntu"/>
301
338
  <param pos="0" name="os.device" value="General"/>
302
339
  <param pos="0" name="os.family" value="Linux"/>
303
340
  <param pos="0" name="os.product" value="Linux"/>
304
341
  <param pos="0" name="os.version" value="13.04"/>
342
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:13.04"/>
305
343
  </fingerprint>
306
344
  <fingerprint pattern="^OpenSSH_(\d+\.\d+(?:\.\d+)?(?:p\d+)?)[_|-](hpn\d+v\d+)$">
307
345
  <description>OpenSSH with HPN patches</description>
@@ -313,6 +351,7 @@ fingerprint SSH servers.
313
351
  <param pos="0" name="service.vendor" value="OpenBSD"/>
314
352
  <param pos="0" name="service.family" value="OpenSSH"/>
315
353
  <param pos="0" name="service.product" value="OpenSSH"/>
354
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
316
355
  </fingerprint>
317
356
  <fingerprint pattern="^OpenSSH_(6\.6(?:\.\d)?p1) (Ubuntu-2ubuntu\d+(?:\.\d+)?)$">
318
357
  <description>OpenSSH running on Ubuntu 14.04</description>
@@ -323,11 +362,13 @@ fingerprint SSH servers.
323
362
  <param pos="0" name="service.vendor" value="OpenBSD"/>
324
363
  <param pos="0" name="service.family" value="OpenSSH"/>
325
364
  <param pos="0" name="service.product" value="OpenSSH"/>
365
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
326
366
  <param pos="0" name="os.vendor" value="Ubuntu"/>
327
367
  <param pos="0" name="os.device" value="General"/>
328
368
  <param pos="0" name="os.family" value="Linux"/>
329
369
  <param pos="0" name="os.product" value="Linux"/>
330
370
  <param pos="0" name="os.version" value="14.04"/>
371
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:14.04"/>
331
372
  </fingerprint>
332
373
  <fingerprint pattern="^OpenSSH_(6\.7p1) (Ubuntu-5ubuntu\d(?:\.\d)?)$">
333
374
  <description>OpenSSH running on Ubuntu 15.04 (vivid)</description>
@@ -337,11 +378,13 @@ fingerprint SSH servers.
337
378
  <param pos="0" name="service.vendor" value="OpenBSD"/>
338
379
  <param pos="0" name="service.family" value="OpenSSH"/>
339
380
  <param pos="0" name="service.product" value="OpenSSH"/>
381
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
340
382
  <param pos="0" name="os.vendor" value="Ubuntu"/>
341
383
  <param pos="0" name="os.device" value="General"/>
342
384
  <param pos="0" name="os.family" value="Linux"/>
343
385
  <param pos="0" name="os.product" value="Linux"/>
344
386
  <param pos="0" name="os.version" value="15.04"/>
387
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:15.04"/>
345
388
  </fingerprint>
346
389
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Ubuntu-\d\d?)$">
347
390
  <description>OpenSSH running on Ubuntu (unknown release)</description>
@@ -352,10 +395,12 @@ fingerprint SSH servers.
352
395
  <param pos="0" name="service.vendor" value="OpenBSD"/>
353
396
  <param pos="0" name="service.family" value="OpenSSH"/>
354
397
  <param pos="0" name="service.product" value="OpenSSH"/>
398
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
355
399
  <param pos="0" name="os.vendor" value="Ubuntu"/>
356
400
  <param pos="0" name="os.device" value="General"/>
357
401
  <param pos="0" name="os.family" value="Linux"/>
358
402
  <param pos="0" name="os.product" value="Linux"/>
403
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
359
404
  </fingerprint>
360
405
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-4(?:\+deb7u\d+)?)$">
361
406
  <description>OpenSSH running on Debian 7.x (wheezy)</description>
@@ -367,11 +412,13 @@ fingerprint SSH servers.
367
412
  <param pos="0" name="service.vendor" value="OpenBSD"/>
368
413
  <param pos="0" name="service.family" value="OpenSSH"/>
369
414
  <param pos="0" name="service.product" value="OpenSSH"/>
415
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
370
416
  <param pos="0" name="os.vendor" value="Debian"/>
371
417
  <param pos="0" name="os.device" value="General"/>
372
418
  <param pos="0" name="os.family" value="Linux"/>
373
419
  <param pos="0" name="os.product" value="Linux"/>
374
420
  <param pos="0" name="os.version" value="7.0"/>
421
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:7.0"/>
375
422
  </fingerprint>
376
423
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-\d~bpo7\d?\+\d+)$">
377
424
  <description>OpenSSH backport running on Debian 7.x (wheezy)</description>
@@ -382,11 +429,13 @@ fingerprint SSH servers.
382
429
  <param pos="0" name="service.vendor" value="OpenBSD"/>
383
430
  <param pos="0" name="service.family" value="OpenSSH"/>
384
431
  <param pos="0" name="service.product" value="OpenSSH"/>
432
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
385
433
  <param pos="0" name="os.vendor" value="Debian"/>
386
434
  <param pos="0" name="os.device" value="General"/>
387
435
  <param pos="0" name="os.family" value="Linux"/>
388
436
  <param pos="0" name="os.product" value="Linux"/>
389
437
  <param pos="0" name="os.version" value="7.0"/>
438
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:7.0"/>
390
439
  </fingerprint>
391
440
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-5\+deb8u\d+.*)$">
392
441
  <description>OpenSSH running on Debian 8.x (jessie)</description>
@@ -397,11 +446,13 @@ fingerprint SSH servers.
397
446
  <param pos="0" name="service.vendor" value="OpenBSD"/>
398
447
  <param pos="0" name="service.family" value="OpenSSH"/>
399
448
  <param pos="0" name="service.product" value="OpenSSH"/>
449
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
400
450
  <param pos="0" name="os.vendor" value="Debian"/>
401
451
  <param pos="0" name="os.device" value="General"/>
402
452
  <param pos="0" name="os.family" value="Linux"/>
403
453
  <param pos="0" name="os.product" value="Linux"/>
404
454
  <param pos="0" name="os.version" value="8.0"/>
455
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:8.0"/>
405
456
  </fingerprint>
406
457
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-\d\d?\+deb9u\d+)$">
407
458
  <description>OpenSSH running on Debian 9.x (stretch)</description>
@@ -412,11 +463,13 @@ fingerprint SSH servers.
412
463
  <param pos="0" name="service.vendor" value="OpenBSD"/>
413
464
  <param pos="0" name="service.family" value="OpenSSH"/>
414
465
  <param pos="0" name="service.product" value="OpenSSH"/>
466
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
415
467
  <param pos="0" name="os.vendor" value="Debian"/>
416
468
  <param pos="0" name="os.device" value="General"/>
417
469
  <param pos="0" name="os.family" value="Linux"/>
418
470
  <param pos="0" name="os.product" value="Linux"/>
419
471
  <param pos="0" name="os.version" value="9.0"/>
472
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:9.0"/>
420
473
  </fingerprint>
421
474
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-\d+[+~]squeeze.*)$">
422
475
  <description>OpenSSH running on Debian 6.0 (squeeze)</description>
@@ -428,11 +481,13 @@ fingerprint SSH servers.
428
481
  <param pos="0" name="service.vendor" value="OpenBSD"/>
429
482
  <param pos="0" name="service.family" value="OpenSSH"/>
430
483
  <param pos="0" name="service.product" value="OpenSSH"/>
484
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
431
485
  <param pos="0" name="os.vendor" value="Debian"/>
432
486
  <param pos="0" name="os.device" value="General"/>
433
487
  <param pos="0" name="os.family" value="Linux"/>
434
488
  <param pos="0" name="os.product" value="Linux"/>
435
489
  <param pos="0" name="os.version" value="6.0"/>
490
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:6.0"/>
436
491
  </fingerprint>
437
492
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+((?:Debian|Ubuntu).+ubuntu.*)$">
438
493
  <description>OpenSSH running on Ubuntu</description>
@@ -442,11 +497,13 @@ fingerprint SSH servers.
442
497
  <param pos="0" name="service.vendor" value="OpenBSD"/>
443
498
  <param pos="0" name="service.family" value="OpenSSH"/>
444
499
  <param pos="0" name="service.product" value="OpenSSH"/>
500
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
445
501
  <param pos="0" name="os.vendor" value="Ubuntu"/>
446
502
  <param pos="0" name="os.device" value="General"/>
447
503
  <param pos="0" name="os.family" value="Linux"/>
448
504
  <param pos="0" name="os.product" value="Linux"/>
449
505
  <param pos="0" name="os.certainty" value="0.75"/>
506
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
450
507
  </fingerprint>
451
508
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian.+etch.*)$">
452
509
  <description>OpenSSH running on Debian 4.0 (etch)</description>
@@ -456,11 +513,13 @@ fingerprint SSH servers.
456
513
  <param pos="0" name="service.vendor" value="OpenBSD"/>
457
514
  <param pos="0" name="service.family" value="OpenSSH"/>
458
515
  <param pos="0" name="service.product" value="OpenSSH"/>
516
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
459
517
  <param pos="0" name="os.vendor" value="Debian"/>
460
518
  <param pos="0" name="os.device" value="General"/>
461
519
  <param pos="0" name="os.family" value="Linux"/>
462
520
  <param pos="0" name="os.product" value="Linux"/>
463
521
  <param pos="0" name="os.version" value="4.0"/>
522
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:4.0"/>
464
523
  </fingerprint>
465
524
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian.+sarge.*)$">
466
525
  <description>OpenSSH running on Debian 3.1 (sarge)</description>
@@ -470,11 +529,13 @@ fingerprint SSH servers.
470
529
  <param pos="0" name="service.vendor" value="OpenBSD"/>
471
530
  <param pos="0" name="service.family" value="OpenSSH"/>
472
531
  <param pos="0" name="service.product" value="OpenSSH"/>
532
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
473
533
  <param pos="0" name="os.vendor" value="Debian"/>
474
534
  <param pos="0" name="os.device" value="General"/>
475
535
  <param pos="0" name="os.family" value="Linux"/>
476
536
  <param pos="0" name="os.product" value="Linux"/>
477
537
  <param pos="0" name="os.version" value="3.1"/>
538
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:3.1"/>
478
539
  </fingerprint>
479
540
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian.+woody.*)$">
480
541
  <description>OpenSSH running on Debian 3.0 (woody)</description>
@@ -484,11 +545,13 @@ fingerprint SSH servers.
484
545
  <param pos="0" name="service.vendor" value="OpenBSD"/>
485
546
  <param pos="0" name="service.family" value="OpenSSH"/>
486
547
  <param pos="0" name="service.product" value="OpenSSH"/>
548
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
487
549
  <param pos="0" name="os.vendor" value="Debian"/>
488
550
  <param pos="0" name="os.device" value="General"/>
489
551
  <param pos="0" name="os.family" value="Linux"/>
490
552
  <param pos="0" name="os.product" value="Linux"/>
491
553
  <param pos="0" name="os.version" value="3.0"/>
554
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:3.0"/>
492
555
  </fingerprint>
493
556
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-\d+(?:[~]?bpo[.]?\d+)?)$">
494
557
  <description>OpenSSH running on Debian (unknown release)</description>
@@ -501,10 +564,12 @@ fingerprint SSH servers.
501
564
  <param pos="0" name="service.vendor" value="OpenBSD"/>
502
565
  <param pos="0" name="service.family" value="OpenSSH"/>
503
566
  <param pos="0" name="service.product" value="OpenSSH"/>
567
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
504
568
  <param pos="0" name="os.vendor" value="Debian"/>
505
569
  <param pos="0" name="os.device" value="General"/>
506
570
  <param pos="0" name="os.family" value="Linux"/>
507
571
  <param pos="0" name="os.product" value="Linux"/>
572
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
508
573
  </fingerprint>
509
574
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Raspbian-\d\d?\+deb9u\d+)$">
510
575
  <description>OpenSSH running on Raspbian (Debian 9 "Stretch" based)</description>
@@ -515,6 +580,7 @@ fingerprint SSH servers.
515
580
  <param pos="0" name="service.vendor" value="OpenBSD"/>
516
581
  <param pos="0" name="service.family" value="OpenSSH"/>
517
582
  <param pos="0" name="service.product" value="OpenSSH"/>
583
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
518
584
  <param pos="0" name="os.vendor" value="Raspbian"/>
519
585
  <param pos="0" name="os.device" value="General"/>
520
586
  <param pos="0" name="os.family" value="Linux"/>
@@ -530,6 +596,7 @@ fingerprint SSH servers.
530
596
  <param pos="0" name="service.vendor" value="OpenBSD"/>
531
597
  <param pos="0" name="service.family" value="OpenSSH"/>
532
598
  <param pos="0" name="service.product" value="OpenSSH"/>
599
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
533
600
  <param pos="0" name="os.vendor" value="Raspbian"/>
534
601
  <param pos="0" name="os.device" value="General"/>
535
602
  <param pos="0" name="os.family" value="Linux"/>
@@ -545,6 +612,7 @@ fingerprint SSH servers.
545
612
  <param pos="0" name="service.vendor" value="OpenBSD"/>
546
613
  <param pos="0" name="service.family" value="OpenSSH"/>
547
614
  <param pos="0" name="service.product" value="OpenSSH"/>
615
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
548
616
  <param pos="0" name="os.vendor" value="Raspbian"/>
549
617
  <param pos="0" name="os.device" value="General"/>
550
618
  <param pos="0" name="os.family" value="Linux"/>
@@ -558,10 +626,12 @@ fingerprint SSH servers.
558
626
  <param pos="0" name="service.vendor" value="OpenBSD"/>
559
627
  <param pos="0" name="service.family" value="OpenSSH"/>
560
628
  <param pos="0" name="service.product" value="OpenSSH"/>
629
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
561
630
  <param pos="0" name="os.vendor" value="Apple"/>
562
631
  <param pos="0" name="os.device" value="General"/>
563
632
  <param pos="0" name="os.family" value="Mac OS X"/>
564
633
  <param pos="0" name="os.product" value="Mac OS X"/>
634
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:-"/>
565
635
  </fingerprint>
566
636
  <fingerprint pattern="^OpenSSH_(.*)_Mikrotik_v(.*)$">
567
637
  <description>OpenSSH on MikroTik</description>
@@ -571,10 +641,12 @@ fingerprint SSH servers.
571
641
  <param pos="0" name="service.vendor" value="OpenBSD"/>
572
642
  <param pos="0" name="service.family" value="OpenSSH"/>
573
643
  <param pos="0" name="service.product" value="OpenSSH"/>
644
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
574
645
  <param pos="0" name="os.vendor" value="MikroTik"/>
575
646
  <param pos="0" name="os.device" value="Router"/>
576
647
  <param pos="0" name="os.family" value="RouterOS"/>
577
648
  <param pos="0" name="os.product" value="RouterOS"/>
649
+ <param pos="0" name="os.cpe23" value="cpe:/o:mikrotik:routeros:{os.version}"/>
578
650
  </fingerprint>
579
651
  <fingerprint pattern="^OpenSSH_(.*)-HipServ$">
580
652
  <description>OpenSSH on HipServ</description>
@@ -583,6 +655,7 @@ fingerprint SSH servers.
583
655
  <param pos="0" name="service.vendor" value="OpenBSD"/>
584
656
  <param pos="0" name="service.family" value="OpenSSH"/>
585
657
  <param pos="0" name="service.product" value="OpenSSH"/>
658
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
586
659
  <param pos="0" name="os.vendor" value="HipServ"/>
587
660
  <param pos="0" name="os.device" value="NAS"/>
588
661
  <param pos="0" name="os.family" value="Linux"/>
@@ -595,9 +668,11 @@ fingerprint SSH servers.
595
668
  <param pos="0" name="service.vendor" value="OpenBSD"/>
596
669
  <param pos="0" name="service.family" value="OpenSSH"/>
597
670
  <param pos="0" name="service.product" value="OpenSSH"/>
671
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
598
672
  <param pos="0" name="os.vendor" value="Microsoft"/>
599
673
  <param pos="0" name="os.family" value="Windows"/>
600
674
  <param pos="0" name="os.product" value="Windows"/>
675
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
601
676
  </fingerprint>
602
677
  <fingerprint pattern="^OpenSSH_(\d+\.\d+(?:\.\d+)?(?:p\d+)?) ((?:PKIX\s+)?FIPS)$">
603
678
  <description>OpenSSH with a version and FIPS mode enabled</description>
@@ -609,6 +684,7 @@ fingerprint SSH servers.
609
684
  <param pos="0" name="service.vendor" value="OpenBSD"/>
610
685
  <param pos="0" name="service.family" value="OpenSSH"/>
611
686
  <param pos="0" name="service.product" value="OpenSSH"/>
687
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
612
688
  </fingerprint>
613
689
  <fingerprint pattern="^OpenSSH_(\d+\.\d+(?:\.\d+)?(?:p\d+)?) *$">
614
690
  <description>OpenSSH with just a version, no comment by vendor</description>
@@ -620,6 +696,7 @@ fingerprint SSH servers.
620
696
  <param pos="0" name="service.vendor" value="OpenBSD"/>
621
697
  <param pos="0" name="service.family" value="OpenSSH"/>
622
698
  <param pos="0" name="service.product" value="OpenSSH"/>
699
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
623
700
  </fingerprint>
624
701
  <fingerprint pattern="^OpenSSH$">
625
702
  <description>OpenSSH w/o version or comment</description>
@@ -627,6 +704,7 @@ fingerprint SSH servers.
627
704
  <param pos="0" name="service.vendor" value="OpenBSD"/>
628
705
  <param pos="0" name="service.family" value="OpenSSH"/>
629
706
  <param pos="0" name="service.product" value="OpenSSH"/>
707
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:-"/>
630
708
  </fingerprint>
631
709
  <!-- SSH-1.99-OpenSSH_4.3p2-4.cern-hpn-CERN-4.3p2-4.cern -->
632
710
  <!--<fingerprint pattern="^OpenSSH_?([^\s]*)\s*(.*)$">
@@ -653,6 +731,7 @@ fingerprint SSH servers.
653
731
  <param pos="0" name="os.vendor" value="Cisco"/>
654
732
  <param pos="0" name="os.product" value="IOS"/>
655
733
  <param pos="0" name="os.certainty" value="0.8"/>
734
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:-"/>
656
735
  </fingerprint>
657
736
  <fingerprint pattern="^CISCO_WLC$">
658
737
  <description>SSH banner from a Cisco Wireless LAN Controller (WLC)</description>
@@ -661,6 +740,7 @@ fingerprint SSH servers.
661
740
  <param pos="0" name="service.product" value="SSH"/>
662
741
  <param pos="0" name="os.vendor" value="Cisco"/>
663
742
  <param pos="0" name="os.product" value="Wireless LAN Controller"/>
743
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller:-"/>
664
744
  </fingerprint>
665
745
  <fingerprint pattern="^Sun_SSH_(.*)$">
666
746
  <description>Sun SSH banner</description>
@@ -671,6 +751,7 @@ fingerprint SSH servers.
671
751
  <param pos="0" name="os.vendor" value="Sun"/>
672
752
  <param pos="0" name="os.family" value="Solaris"/>
673
753
  <param pos="0" name="os.product" value="Solaris"/>
754
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:-"/>
674
755
  </fingerprint>
675
756
  <fingerprint pattern="^SSH Protocol Compatible Server SCS (.*)$">
676
757
  <description>Netscreen</description>
@@ -682,6 +763,7 @@ fingerprint SSH servers.
682
763
  <param pos="0" name="os.device" value="Firewall"/>
683
764
  <param pos="0" name="os.family" value="ScreenOS"/>
684
765
  <param pos="0" name="os.product" value="ScreenOS"/>
766
+ <param pos="0" name="os.cpe23" value="cpe:/o:juniper:screenos:-"/>
685
767
  </fingerprint>
686
768
  <fingerprint pattern="^NetScreen$">
687
769
  <description>Netscreen</description>
@@ -693,6 +775,7 @@ fingerprint SSH servers.
693
775
  <param pos="0" name="os.device" value="Firewall"/>
694
776
  <param pos="0" name="os.family" value="ScreenOS"/>
695
777
  <param pos="0" name="os.product" value="ScreenOS"/>
778
+ <param pos="0" name="os.cpe23" value="cpe:/o:juniper:screenos:-"/>
696
779
  </fingerprint>
697
780
  <fingerprint pattern="^(?:HUAWEI-VRP-?|VRP-)(.*)$">
698
781
  <description>Huawei Versatile Routing Platform (VRP)</description>
@@ -722,6 +805,7 @@ fingerprint SSH servers.
722
805
  <param pos="0" name="os.vendor" value="Microsoft"/>
723
806
  <param pos="0" name="os.family" value="Windows"/>
724
807
  <param pos="0" name="os.product" value="Windows"/>
808
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
725
809
  </fingerprint>
726
810
  <fingerprint pattern="^([^\s]+) sshlib: WinSSHD (.*)$">
727
811
  <description>Bitvise WinSSHD (which uses Bitvise sshlib)</description>
@@ -737,6 +821,7 @@ fingerprint SSH servers.
737
821
  <param pos="0" name="os.vendor" value="Microsoft"/>
738
822
  <param pos="0" name="os.family" value="Windows"/>
739
823
  <param pos="0" name="os.product" value="Windows"/>
824
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
740
825
  </fingerprint>
741
826
  <fingerprint pattern="^([^\s]+) FlowSsh: (?:Bitvise SSH Server \(WinSSHD\)|WinSSHD) ([\d\.]+):?.*$">
742
827
  <description>Bitvise WinSSHD (which uses Bitvise flowssh)</description>
@@ -754,6 +839,7 @@ fingerprint SSH servers.
754
839
  <param pos="0" name="os.vendor" value="Microsoft"/>
755
840
  <param pos="0" name="os.family" value="Windows"/>
756
841
  <param pos="0" name="os.product" value="Windows"/>
842
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
757
843
  </fingerprint>
758
844
  <fingerprint pattern="^([^\s]+) sshlib: MOVEit DMZ SSH (.*)$">
759
845
  <description>MOVEit DMZ (which uses Bitvise sshlib)</description>
@@ -768,6 +854,7 @@ fingerprint SSH servers.
768
854
  <param pos="0" name="os.vendor" value="Microsoft"/>
769
855
  <param pos="0" name="os.family" value="Windows"/>
770
856
  <param pos="0" name="os.product" value="Windows"/>
857
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
771
858
  </fingerprint>
772
859
  <fingerprint pattern="^Pragma SecureShell\s*(.*)$">
773
860
  <description>Pragma SecureShell</description>
@@ -778,6 +865,7 @@ fingerprint SSH servers.
778
865
  <param pos="0" name="os.vendor" value="Microsoft"/>
779
866
  <param pos="0" name="os.family" value="Windows"/>
780
867
  <param pos="0" name="os.product" value="Windows"/>
868
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
781
869
  </fingerprint>
782
870
  <fingerprint pattern="^Pragma FortressSSH\s+([\d.]+)(?:\s+\[([\d.:]+)\])?$">
783
871
  <description>Pragma FortressSSH</description>
@@ -791,6 +879,7 @@ fingerprint SSH servers.
791
879
  <param pos="0" name="os.vendor" value="Microsoft"/>
792
880
  <param pos="0" name="os.family" value="Windows"/>
793
881
  <param pos="0" name="os.product" value="Windows"/>
882
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
794
883
  </fingerprint>
795
884
  <fingerprint pattern="^VShell_(?:Special_Edition_)?(\d+)_(\d+)_(\d+)_(\d+) VShell$">
796
885
  <description>VanDyke VShell</description>
@@ -803,6 +892,7 @@ fingerprint SSH servers.
803
892
  <param pos="0" name="service.vendor" value="VanDyke Software"/>
804
893
  <param pos="0" name="service.family" value="VShell"/>
805
894
  <param pos="0" name="service.product" value="VShell"/>
895
+ <param pos="0" name="service.cpe23" value="cpe:/a:vandyke:vshell:{service.version}"/>
806
896
  </fingerprint>
807
897
  <fingerprint pattern="^([\s]*)\s*VShell$">
808
898
  <description>VanDyke VShell</description>
@@ -810,6 +900,7 @@ fingerprint SSH servers.
810
900
  <param pos="0" name="service.vendor" value="VanDyke Software"/>
811
901
  <param pos="0" name="service.family" value="VShell"/>
812
902
  <param pos="0" name="service.product" value="VShell"/>
903
+ <param pos="0" name="service.cpe23" value="cpe:/a:vandyke:vshell:{service.version}"/>
813
904
  </fingerprint>
814
905
  <fingerprint pattern="^WRQReflection(?i:F)orSecureIT_(.*)$">
815
906
  <description>Attachmate Reflection (formerly WRQ Reflection for Secure IT)
@@ -854,6 +945,7 @@ fingerprint SSH servers.
854
945
  <param pos="0" name="os.vendor" value="Microsoft"/>
855
946
  <param pos="0" name="os.family" value="Windows"/>
856
947
  <param pos="0" name="os.product" value="Windows"/>
948
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
857
949
  <param pos="1" name="service.version"/>
858
950
  <param pos="0" name="service.vendor" value="SSH Communications Security"/>
859
951
  <param pos="0" name="service.family" value="SSH Tectia Server"/>
@@ -903,6 +995,7 @@ fingerprint SSH servers.
903
995
  <param pos="0" name="os.vendor" value="HP"/>
904
996
  <param pos="0" name="os.family" value="OpenVMS"/>
905
997
  <param pos="0" name="os.product" value="OpenVMS"/>
998
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:openvms:-"/>
906
999
  </fingerprint>
907
1000
  <fingerprint pattern="^dropbear$">
908
1001
  <description>Dropbear w/o version - http://matt.ucc.asn.au/dropbear/dropbear.html</description>
@@ -936,6 +1029,7 @@ fingerprint SSH servers.
936
1029
  <param pos="0" name="os.vendor" value="Microsoft"/>
937
1030
  <param pos="0" name="os.family" value="Windows"/>
938
1031
  <param pos="0" name="os.product" value="Windows"/>
1032
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
939
1033
  </fingerprint>
940
1034
  <fingerprint pattern="^Comware-(\d+\.?\d*\.?\d*)$">
941
1035
  <description>SSH on H3C Comware</description>
@@ -955,6 +1049,7 @@ fingerprint SSH servers.
955
1049
  <param pos="0" name="os.vendor" value="NetApp"/>
956
1050
  <param pos="0" name="os.family" value="Data ONTAP"/>
957
1051
  <param pos="0" name="os.product" value="Data ONTAP"/>
1052
+ <param pos="0" name="os.cpe23" value="cpe:/o:netapp:data_ontap:-"/>
958
1053
  </fingerprint>
959
1054
  <fingerprint pattern="^(\d\.\d+\.\d+) SSH Secure Shell OpenVMS V\d+\.\d+$">
960
1055
  <description>SSH for OpenVMS</description>
@@ -972,6 +1067,7 @@ fingerprint SSH servers.
972
1067
  <param pos="0" name="os.family" value="OpenVMS"/>
973
1068
  <param pos="0" name="os.product" value="OpenVMS"/>
974
1069
  <param pos="0" name="os.certainty" value="0.75"/>
1070
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:openvms:-"/>
975
1071
  </fingerprint>
976
1072
  <fingerprint pattern="^(\d\.\d+\.\d+) SSH (?:Secure Shell )?OpenVMS V\d\.\d VMS_sftp_version (\d)$">
977
1073
  <description>SSH for OpenVMS sftp</description>
@@ -997,6 +1093,7 @@ fingerprint SSH servers.
997
1093
  <param pos="0" name="os.family" value="Unix"/>
998
1094
  <param pos="0" name="os.product" value="Tru64 Unix"/>
999
1095
  <param pos="0" name="os.device" value="General"/>
1096
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:tru64:-"/>
1000
1097
  </fingerprint>
1001
1098
  <fingerprint pattern="^(?:SSH-(\d\.\d)-)?ROSSSH$">
1002
1099
  <description>MikroTik RouterOS sshd</description>
@@ -1007,6 +1104,7 @@ fingerprint SSH servers.
1007
1104
  <param pos="0" name="os.device" value="Router"/>
1008
1105
  <param pos="0" name="os.family" value="RouterOS"/>
1009
1106
  <param pos="0" name="os.product" value="RouterOS"/>
1107
+ <param pos="0" name="os.cpe23" value="cpe:/o:mikrotik:routeros:-"/>
1010
1108
  </fingerprint>
1011
1109
  <fingerprint pattern="^xlightftpd_release_([\d.]+)$">
1012
1110
  <description>Xlight FTP Server</description>
@@ -1018,6 +1116,7 @@ fingerprint SSH servers.
1018
1116
  <param pos="0" name="os.vendor" value="Microsoft"/>
1019
1117
  <param pos="0" name="os.family" value="Windows"/>
1020
1118
  <param pos="0" name="os.product" value="Windows"/>
1119
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1021
1120
  </fingerprint>
1022
1121
  <!--
1023
1122
  1.2.22j4rad