recog 2.1.20 → 2.1.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (47) hide show
  1. checksums.yaml +4 -4
  2. data/lib/recog/version.rb +1 -1
  3. data/remap.json +131 -0
  4. data/spec/lib/fingerprint_self_test_spec.rb +16 -1
  5. data/update_cpes.py +202 -0
  6. data/xml/apache_os.xml +29 -5
  7. data/xml/architecture.xml +3 -3
  8. data/xml/dns_versionbind.xml +56 -10
  9. data/xml/ftp_banners.xml +56 -12
  10. data/xml/h323_callresp.xml +4 -4
  11. data/xml/hp_pjl_id.xml +8 -8
  12. data/xml/http_cookies.xml +20 -8
  13. data/xml/http_servers.xml +122 -8
  14. data/xml/http_wwwauth.xml +13 -3
  15. data/xml/imap_banners.xml +19 -1
  16. data/xml/ldap_searchresult.xml +44 -68
  17. data/xml/mdns_device-info_txt.xml +18 -7
  18. data/xml/mdns_workstation_txt.xml +7 -7
  19. data/xml/mysql_banners.xml +159 -13
  20. data/xml/mysql_error.xml +124 -21
  21. data/xml/nntp_banners.xml +10 -4
  22. data/xml/ntp_banners.xml +144 -84
  23. data/xml/operating_system.xml +39 -10
  24. data/xml/pop_banners.xml +32 -12
  25. data/xml/rsh_resp.xml +8 -3
  26. data/xml/sip_banners.xml +4 -3
  27. data/xml/sip_user_agents.xml +4 -3
  28. data/xml/smb_native_lm.xml +9 -4
  29. data/xml/smb_native_os.xml +50 -25
  30. data/xml/smtp_banners.xml +108 -33
  31. data/xml/smtp_debug.xml +11 -8
  32. data/xml/smtp_ehlo.xml +14 -11
  33. data/xml/smtp_expn.xml +17 -11
  34. data/xml/smtp_help.xml +17 -11
  35. data/xml/smtp_mailfrom.xml +4 -3
  36. data/xml/smtp_noop.xml +13 -8
  37. data/xml/smtp_quit.xml +10 -8
  38. data/xml/smtp_rcptto.xml +1 -3
  39. data/xml/smtp_rset.xml +10 -8
  40. data/xml/smtp_turn.xml +10 -8
  41. data/xml/smtp_vrfy.xml +18 -11
  42. data/xml/snmp_sysdescr.xml +157 -451
  43. data/xml/snmp_sysobjid.xml +57 -4
  44. data/xml/ssh_banners.xml +104 -5
  45. data/xml/upnp_banners.xml +16 -1
  46. data/xml/x11_banners.xml +34 -9
  47. metadata +4 -2
data/xml/snmp_sysobjid.xml CHANGED
@@ -1,9 +1,9 @@
1
1
  <?xml version="1.0" encoding="UTF-8"?>
2
- <!--
3
- SNMP fingerprint definitions for SysObjectIDs. These are matched against the value of the
4
- 'sysObjectID' (OID 1.3.6.1.2.1.1.2) variable.
5
- -->
6
2
  <fingerprints matches="snmp.sys_object_id" protocol="snmp" database_type="service">
3
+ <!--
4
+ SNMP fingerprint definitions for SysObjectIDs. These are matched against the value of the
5
+ 'sysObjectID' (OID 1.3.6.1.2.1.1.2) variable.
6
+ -->
7
7
  <!--======================================================================
8
8
  MICROSOFT
9
9
  =======================================================================-->
@@ -20,6 +20,7 @@
20
20
  <param pos="0" name="os.version" value="4.0"/>
21
21
  <param pos="0" name="os.device" value="General"/>
22
22
  <param pos="0" name="os.arch" value="x86"/>
23
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_nt:4.0"/>
23
24
  </fingerprint>
24
25
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows 2000 Version 5\.0.*$">
25
26
  <description>Windows 2000 on x86</description>
@@ -29,6 +30,7 @@
29
30
  <param pos="0" name="os.product" value="Windows 2000 Server"/>
30
31
  <param pos="0" name="os.device" value="General"/>
31
32
  <param pos="0" name="os.arch" value="x86"/>
33
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_2000:-"/>
32
34
  </fingerprint>
33
35
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows 2000 Version 5\.0.*$">
34
36
  <description>Windows 2000 on x86</description>
@@ -38,6 +40,7 @@
38
40
  <param pos="0" name="os.product" value="Windows 2000 Datacenter Server"/>
39
41
  <param pos="0" name="os.device" value="General"/>
40
42
  <param pos="0" name="os.arch" value="x86"/>
43
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_2000:-"/>
41
44
  </fingerprint>
42
45
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 5\.2.*$">
43
46
  <description>Windows Server 2003 on x86</description>
@@ -47,6 +50,7 @@
47
50
  <param pos="0" name="os.product" value="Windows Server 2003"/>
48
51
  <param pos="0" name="os.device" value="General"/>
49
52
  <param pos="0" name="os.arch" value="x86"/>
53
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
50
54
  </fingerprint>
51
55
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 5\.2.*$">
52
56
  <description>Windows Server 2003 on x86</description>
@@ -56,6 +60,7 @@
56
60
  <param pos="0" name="os.product" value="Windows Server 2003, Datacenter Edition"/>
57
61
  <param pos="0" name="os.device" value="General"/>
58
62
  <param pos="0" name="os.arch" value="x86"/>
63
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
59
64
  </fingerprint>
60
65
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 5\.2.*$">
61
66
  <description>Windows Server 2003 on x86_64</description>
@@ -66,6 +71,7 @@
66
71
  <param pos="0" name="os.product" value="Windows Server 2003"/>
67
72
  <param pos="0" name="os.device" value="General"/>
68
73
  <param pos="0" name="os.arch" value="x86_64"/>
74
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
69
75
  </fingerprint>
70
76
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 5\.2.*$">
71
77
  <description>Windows Server 2003 on x86_64</description>
@@ -76,6 +82,7 @@
76
82
  <param pos="0" name="os.product" value="Windows Server 2003, Datacenter Edition"/>
77
83
  <param pos="0" name="os.device" value="General"/>
78
84
  <param pos="0" name="os.arch" value="x86_64"/>
85
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
79
86
  </fingerprint>
80
87
  <fingerprint pattern="^Microsoft Windows CE Version ([\d.]+).*$">
81
88
  <description>Windows CE</description>
@@ -86,6 +93,7 @@
86
93
  <param pos="0" name="os.product" value="Windows CE"/>
87
94
  <param pos="0" name="os.device" value="General"/>
88
95
  <param pos="1" name="os.version"/>
96
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_ce:{os.version}"/>
89
97
  </fingerprint>
90
98
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 6\.0 \(Build 6001.*$">
91
99
  <description>Windows Server 2008 on x86</description>
@@ -95,6 +103,7 @@
95
103
  <param pos="0" name="os.product" value="Windows Server 2008"/>
96
104
  <param pos="0" name="os.device" value="General"/>
97
105
  <param pos="0" name="os.arch" value="x86"/>
106
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
98
107
  </fingerprint>
99
108
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 6\.0 \(Build 6001.*$">
100
109
  <description>Windows Server 2008 Datacenter on x86</description>
@@ -104,6 +113,7 @@
104
113
  <param pos="0" name="os.product" value="Windows Server 2008 Datacenter Edition"/>
105
114
  <param pos="0" name="os.device" value="General"/>
106
115
  <param pos="0" name="os.arch" value="x86"/>
116
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
107
117
  </fingerprint>
108
118
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.0 \(Build 6001.*$">
109
119
  <description>Windows Server 2008 on x86_64</description>
@@ -114,6 +124,7 @@
114
124
  <param pos="0" name="os.product" value="Windows Server 2008"/>
115
125
  <param pos="0" name="os.device" value="General"/>
116
126
  <param pos="0" name="os.arch" value="x86_64"/>
127
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
117
128
  </fingerprint>
118
129
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 6\.0 \(Build 6001.*$">
119
130
  <description>Windows Server 2008 Datacenter on x86_64</description>
@@ -124,6 +135,7 @@
124
135
  <param pos="0" name="os.product" value="Windows Server 2008 Datacenter Edition"/>
125
136
  <param pos="0" name="os.device" value="General"/>
126
137
  <param pos="0" name="os.arch" value="x86_64"/>
138
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
127
139
  </fingerprint>
128
140
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 6\.0 \(Build 6002.*$">
129
141
  <description>Windows Server 2008 SP2 on x86</description>
@@ -134,6 +146,7 @@
134
146
  <param pos="0" name="os.device" value="General"/>
135
147
  <param pos="0" name="os.version" value="SP2"/>
136
148
  <param pos="0" name="os.arch" value="x86"/>
149
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP2"/>
137
150
  </fingerprint>
138
151
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 6\.0 \(Build 6002.*$">
139
152
  <description>Windows Server 2008 Datacenter SP2 on x86</description>
@@ -144,6 +157,7 @@
144
157
  <param pos="0" name="os.device" value="General"/>
145
158
  <param pos="0" name="os.version" value="SP2"/>
146
159
  <param pos="0" name="os.arch" value="x86"/>
160
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP2"/>
147
161
  </fingerprint>
148
162
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.0 \(Build 6002.*$">
149
163
  <description>Windows Server 2008 SP2 on x86_64</description>
@@ -155,6 +169,7 @@
155
169
  <param pos="0" name="os.device" value="General"/>
156
170
  <param pos="0" name="os.version" value="SP2"/>
157
171
  <param pos="0" name="os.arch" value="x86_64"/>
172
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP2"/>
158
173
  </fingerprint>
159
174
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 6\.0 \(Build 6002.*$">
160
175
  <description>Windows Server 2008 Datacenter SP2 on x86_64</description>
@@ -166,6 +181,7 @@
166
181
  <param pos="0" name="os.device" value="General"/>
167
182
  <param pos="0" name="os.version" value="SP2"/>
168
183
  <param pos="0" name="os.arch" value="x86_64"/>
184
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP2"/>
169
185
  </fingerprint>
170
186
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 6\.1 \(Build 7600.*$">
171
187
  <description>Windows Server 2008 R2 on x86</description>
@@ -175,6 +191,7 @@
175
191
  <param pos="0" name="os.product" value="Windows Server 2008 R2"/>
176
192
  <param pos="0" name="os.device" value="General"/>
177
193
  <param pos="0" name="os.arch" value="x86"/>
194
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
178
195
  </fingerprint>
179
196
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 6\.1 \(Build 7600.*$">
180
197
  <description>Windows Server 2008 Datacenter R2 on x86</description>
@@ -184,6 +201,7 @@
184
201
  <param pos="0" name="os.product" value="Windows Server 2008 R2, Datacenter Edition"/>
185
202
  <param pos="0" name="os.device" value="General"/>
186
203
  <param pos="0" name="os.arch" value="x86"/>
204
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
187
205
  </fingerprint>
188
206
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.1 \(Build 7600.*$">
189
207
  <description>Windows Server 2008 R2 on x86_64</description>
@@ -194,6 +212,7 @@
194
212
  <param pos="0" name="os.product" value="Windows Server 2008 R2"/>
195
213
  <param pos="0" name="os.device" value="General"/>
196
214
  <param pos="0" name="os.arch" value="x86_64"/>
215
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
197
216
  </fingerprint>
198
217
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 6\.1 \(Build 7600.*$">
199
218
  <description>Windows Server 2008 Datacenter R2 on x86_64</description>
@@ -204,6 +223,7 @@
204
223
  <param pos="0" name="os.product" value="Windows Server 2008 R2, Datacenter Edition"/>
205
224
  <param pos="0" name="os.device" value="General"/>
206
225
  <param pos="0" name="os.arch" value="x86_64"/>
226
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
207
227
  </fingerprint>
208
228
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 6\.1 \(Build 7601.*$">
209
229
  <description>Windows Server 2008 R2 SP1 on x86</description>
@@ -214,6 +234,7 @@
214
234
  <param pos="0" name="os.device" value="General"/>
215
235
  <param pos="0" name="os.version" value="SP1"/>
216
236
  <param pos="0" name="os.arch" value="x86"/>
237
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP1"/>
217
238
  </fingerprint>
218
239
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 6\.1 \(Build 7601.*$">
219
240
  <description>Windows Server 2008 Datacenter R2 SP1 on x86</description>
@@ -224,6 +245,7 @@
224
245
  <param pos="0" name="os.device" value="General"/>
225
246
  <param pos="0" name="os.version" value="SP1"/>
226
247
  <param pos="0" name="os.arch" value="x86"/>
248
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP1"/>
227
249
  </fingerprint>
228
250
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.1 \(Build 7601.*$">
229
251
  <description>Windows Server 2008 R2 SP1 on x86_64</description>
@@ -235,6 +257,7 @@
235
257
  <param pos="0" name="os.device" value="General"/>
236
258
  <param pos="0" name="os.version" value="SP1"/>
237
259
  <param pos="0" name="os.arch" value="x86_64"/>
260
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP1"/>
238
261
  </fingerprint>
239
262
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 6\.1 \(Build 7601.*$">
240
263
  <description>Windows Server 2008 Datacenter R2 SP1 on x86_64</description>
@@ -246,6 +269,7 @@
246
269
  <param pos="0" name="os.device" value="General"/>
247
270
  <param pos="0" name="os.version" value="SP1"/>
248
271
  <param pos="0" name="os.arch" value="x86_64"/>
272
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP1"/>
249
273
  </fingerprint>
250
274
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.2 \(Build 9200.*$">
251
275
  <description>Windows Server 2012 on x86_64</description>
@@ -255,6 +279,7 @@
255
279
  <param pos="0" name="os.product" value="Windows Server 2012"/>
256
280
  <param pos="0" name="os.device" value="General"/>
257
281
  <param pos="0" name="os.arch" value="x86_64"/>
282
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
258
283
  </fingerprint>
259
284
  <!-- Various OIDs for Net-SNMP agents which are OS specific -->
260
285
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.1$">
@@ -264,8 +289,10 @@
264
289
  <param pos="0" name="os.family" value="HP-UX"/>
265
290
  <param pos="0" name="os.product" value="HP-UX"/>
266
291
  <param pos="0" name="os.version" value="9"/>
292
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:9"/>
267
293
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
268
294
  <param pos="0" name="service.product" value="SNMP Agent"/>
295
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
269
296
  </fingerprint>
270
297
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.2$">
271
298
  <description>Net-SNMP on sunos4</description>
@@ -273,8 +300,10 @@
273
300
  <param pos="0" name="os.vendor" value="Sun"/>
274
301
  <param pos="0" name="os.family" value="Solaris"/>
275
302
  <param pos="0" name="os.product" value="Solaris"/>
303
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:-"/>
276
304
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
277
305
  <param pos="0" name="service.product" value="SNMP Agent"/>
306
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
278
307
  </fingerprint>
279
308
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.3$">
280
309
  <description>Net-SNMP on solaris</description>
@@ -282,8 +311,10 @@
282
311
  <param pos="0" name="os.vendor" value="Sun"/>
283
312
  <param pos="0" name="os.family" value="Solaris"/>
284
313
  <param pos="0" name="os.product" value="Solaris"/>
314
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:-"/>
285
315
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
286
316
  <param pos="0" name="service.product" value="SNMP Agent"/>
317
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
287
318
  </fingerprint>
288
319
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.4$">
289
320
  <description>Net-SNMP on osf</description>
@@ -292,6 +323,7 @@
292
323
  <param pos="0" name="os.product" value="OSF/1"/>
293
324
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
294
325
  <param pos="0" name="service.product" value="SNMP Agent"/>
326
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
295
327
  </fingerprint>
296
328
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.5$">
297
329
  <description>Net-SNMP on ultrix</description>
@@ -300,6 +332,7 @@
300
332
  <param pos="0" name="os.product" value="Ultrix"/>
301
333
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
302
334
  <param pos="0" name="service.product" value="SNMP Agent"/>
335
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
303
336
  </fingerprint>
304
337
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.6$">
305
338
  <description>Net-SNMP on hpux10</description>
@@ -308,8 +341,10 @@
308
341
  <param pos="0" name="os.family" value="HP-UX"/>
309
342
  <param pos="0" name="os.product" value="HP-UX"/>
310
343
  <param pos="0" name="os.version" value="10"/>
344
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:10"/>
311
345
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
312
346
  <param pos="0" name="service.product" value="SNMP Agent"/>
347
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
313
348
  </fingerprint>
314
349
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.7$">
315
350
  <description>Net-SNMP on netbsd</description>
@@ -317,8 +352,10 @@
317
352
  <param pos="0" name="os.vendor" value="NetBSD"/>
318
353
  <param pos="0" name="os.family" value="NetBSD"/>
319
354
  <param pos="0" name="os.product" value="NetBSD"/>
355
+ <param pos="0" name="os.cpe23" value="cpe:/o:netbsd:netbsd:-"/>
320
356
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
321
357
  <param pos="0" name="service.product" value="SNMP Agent"/>
358
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
322
359
  </fingerprint>
323
360
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.8$">
324
361
  <description>Net-SNMP on freebsd</description>
@@ -326,8 +363,10 @@
326
363
  <param pos="0" name="os.vendor" value="FreeBSD"/>
327
364
  <param pos="0" name="os.family" value="FreeBSD"/>
328
365
  <param pos="0" name="os.product" value="FreeBSD"/>
366
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:-"/>
329
367
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
330
368
  <param pos="0" name="service.product" value="SNMP Agent"/>
369
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
331
370
  </fingerprint>
332
371
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.9$">
333
372
  <description>Net-SNMP on irix</description>
@@ -335,8 +374,10 @@
335
374
  <param pos="0" name="os.vendor" value="SGI"/>
336
375
  <param pos="0" name="os.family" value="IRIX"/>
337
376
  <param pos="0" name="os.product" value="IRIX"/>
377
+ <param pos="0" name="os.cpe23" value="cpe:/o:sgi:irix:-"/>
338
378
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
339
379
  <param pos="0" name="service.product" value="SNMP Agent"/>
380
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
340
381
  </fingerprint>
341
382
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.10$">
342
383
  <description>Net-SNMP on linux</description>
@@ -345,6 +386,7 @@
345
386
  <param pos="0" name="os.product" value="Linux"/>
346
387
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
347
388
  <param pos="0" name="service.product" value="SNMP Agent"/>
389
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
348
390
  </fingerprint>
349
391
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.11$">
350
392
  <description>Net-SNMP on bsdi</description>
@@ -353,6 +395,7 @@
353
395
  <param pos="0" name="os.product" value="BSD/OS"/>
354
396
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
355
397
  <param pos="0" name="service.product" value="SNMP Agent"/>
398
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
356
399
  </fingerprint>
357
400
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.12$">
358
401
  <description>Net-SNMP on openbsd</description>
@@ -360,8 +403,10 @@
360
403
  <param pos="0" name="os.vendor" value="OpenBSD"/>
361
404
  <param pos="0" name="os.family" value="OpenBSD"/>
362
405
  <param pos="0" name="os.product" value="OpenBSD"/>
406
+ <param pos="0" name="os.cpe23" value="cpe:/o:openbsd:openbsd:-"/>
363
407
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
364
408
  <param pos="0" name="service.product" value="SNMP Agent"/>
409
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
365
410
  </fingerprint>
366
411
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.13$">
367
412
  <description>Net-SNMP on win32</description>
@@ -369,8 +414,10 @@
369
414
  <param pos="0" name="os.vendor" value="Microsoft"/>
370
415
  <param pos="0" name="os.product" value="Windows"/>
371
416
  <param pos="0" name="os.family" value="Windows"/>
417
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
372
418
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
373
419
  <param pos="0" name="service.product" value="SNMP Agent"/>
420
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
374
421
  </fingerprint>
375
422
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.14$">
376
423
  <description>Net-SNMP on hpux11</description>
@@ -379,8 +426,10 @@
379
426
  <param pos="0" name="os.family" value="HP-UX"/>
380
427
  <param pos="0" name="os.product" value="HP-UX"/>
381
428
  <param pos="0" name="os.version" value="11"/>
429
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:11"/>
382
430
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
383
431
  <param pos="0" name="service.product" value="SNMP Agent"/>
432
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
384
433
  </fingerprint>
385
434
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.15$">
386
435
  <description>Net-SNMP on aix</description>
@@ -388,15 +437,19 @@
388
437
  <param pos="0" name="os.vendor" value="IBM"/>
389
438
  <param pos="0" name="os.family" value="AIX"/>
390
439
  <param pos="0" name="os.product" value="AIX"/>
440
+ <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:-"/>
391
441
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
392
442
  <param pos="0" name="service.product" value="SNMP Agent"/>
443
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
393
444
  </fingerprint>
394
445
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.16$">
395
446
  <description>Net-SNMP on macosx</description>
396
447
  <example>1.3.6.1.4.1.8072.3.2.16</example>
397
448
  <param pos="0" name="os.vendor" value="Apple"/>
398
449
  <param pos="0" name="os.product" value="Mac OS X"/>
450
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:-"/>
399
451
  <param pos="0" name="service.vendor" value="Net-SNMP"/>
400
452
  <param pos="0" name="service.product" value="SNMP Agent"/>
453
+ <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
401
454
  </fingerprint>
402
455
  </fingerprints>
data/xml/ssh_banners.xml CHANGED
@@ -1,10 +1,10 @@
1
1
  <?xml version="1.0" encoding="UTF-8"?>
2
- <!--
3
- SSH "software revision and comment" strings (official RFC nomenclature for the part of
4
- the identification string after "SSH-x.x-") are matched against these patterns to
5
- fingerprint SSH servers.
6
- -->
7
2
  <fingerprints matches="ssh.banner" protocol="ssh" database_type="service" preference="0.90">
3
+ <!--
4
+ SSH "software revision and comment" strings (official RFC nomenclature for the part of
5
+ the identification string after "SSH-x.x-") are matched against these patterns to
6
+ fingerprint SSH servers.
7
+ -->
8
8
  <fingerprint pattern="^RomSShell_([\d\.]+)$">
9
9
  <description>Allegro RomSShell SSH</description>
10
10
  <example service.version="4.62">RomSShell_4.62</example>
@@ -19,6 +19,7 @@ fingerprint SSH servers.
19
19
  <param pos="0" name="service.product" value="iLO"/>
20
20
  <param pos="0" name="service.family" value="iLO"/>
21
21
  <param pos="1" name="service.version"/>
22
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:integrated_lights_out:{service.version}"/>
22
23
  <param pos="0" name="hw.vendor" value="HP"/>
23
24
  <param pos="0" name="os.vendor" value="HP"/>
24
25
  <param pos="0" name="os.product" value="iLO"/>
@@ -39,6 +40,7 @@ fingerprint SSH servers.
39
40
  <param pos="0" name="service.vendor" value="Ipswitch"/>
40
41
  <param pos="0" name="service.product" value="WS_FTP"/>
41
42
  <param pos="1" name="service.version"/>
43
+ <param pos="0" name="service.cpe23" value="cpe:/a:ipswitch:ws_ftp:{service.version}"/>
42
44
  </fingerprint>
43
45
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(FreeBSD[ -].*)$">
44
46
  <description>OpenSSH running on FreeBSD</description>
@@ -48,10 +50,12 @@ fingerprint SSH servers.
48
50
  <param pos="0" name="service.vendor" value="OpenBSD"/>
49
51
  <param pos="0" name="service.family" value="OpenSSH"/>
50
52
  <param pos="0" name="service.product" value="OpenSSH"/>
53
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
51
54
  <param pos="0" name="os.vendor" value="FreeBSD"/>
52
55
  <param pos="0" name="os.device" value="General"/>
53
56
  <param pos="0" name="os.family" value="FreeBSD"/>
54
57
  <param pos="0" name="os.product" value="FreeBSD"/>
58
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:-"/>
55
59
  </fingerprint>
56
60
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(NetBSD(?:_Secure_Shell)?[ -].*)$">
57
61
  <description>OpenSSH running on NetBSD</description>
@@ -62,10 +66,12 @@ fingerprint SSH servers.
62
66
  <param pos="0" name="service.vendor" value="OpenBSD"/>
63
67
  <param pos="0" name="service.family" value="OpenSSH"/>
64
68
  <param pos="0" name="service.product" value="OpenSSH"/>
69
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
65
70
  <param pos="0" name="os.vendor" value="NetBSD"/>
66
71
  <param pos="0" name="os.device" value="General"/>
67
72
  <param pos="0" name="os.family" value="NetBSD"/>
68
73
  <param pos="0" name="os.product" value="NetBSD"/>
74
+ <param pos="0" name="os.cpe23" value="cpe:/o:netbsd:netbsd:-"/>
69
75
  </fingerprint>
70
76
  <fingerprint pattern="^OpenSSH_(4\.1p1) (Debian-7ubuntu\d+(?:\.\d+)?)$">
71
77
  <description>OpenSSH running on Ubuntu 5.10</description>
@@ -75,11 +81,13 @@ fingerprint SSH servers.
75
81
  <param pos="0" name="service.vendor" value="OpenBSD"/>
76
82
  <param pos="0" name="service.family" value="OpenSSH"/>
77
83
  <param pos="0" name="service.product" value="OpenSSH"/>
84
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
78
85
  <param pos="0" name="os.vendor" value="Ubuntu"/>
79
86
  <param pos="0" name="os.device" value="General"/>
80
87
  <param pos="0" name="os.family" value="Linux"/>
81
88
  <param pos="0" name="os.product" value="Linux"/>
82
89
  <param pos="0" name="os.version" value="5.10"/>
90
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:5.10"/>
83
91
  </fingerprint>
84
92
  <fingerprint pattern="^OpenSSH_(4\.2p1) (Debian-7ubuntu\d+(?:\.\d+)?)$">
85
93
  <description>OpenSSH running on Ubuntu 6.04</description>
@@ -90,11 +98,13 @@ fingerprint SSH servers.
90
98
  <param pos="0" name="service.vendor" value="OpenBSD"/>
91
99
  <param pos="0" name="service.family" value="OpenSSH"/>
92
100
  <param pos="0" name="service.product" value="OpenSSH"/>
101
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
93
102
  <param pos="0" name="os.vendor" value="Ubuntu"/>
94
103
  <param pos="0" name="os.device" value="General"/>
95
104
  <param pos="0" name="os.family" value="Linux"/>
96
105
  <param pos="0" name="os.product" value="Linux"/>
97
106
  <param pos="0" name="os.version" value="6.04"/>
107
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:6.04"/>
98
108
  </fingerprint>
99
109
  <fingerprint pattern="^OpenSSH_(4\.3p2) (Debian-8ubuntu\d+(?:\.\d+)?)$">
100
110
  <description>OpenSSH running on Ubuntu 7.04</description>
@@ -104,11 +114,13 @@ fingerprint SSH servers.
104
114
  <param pos="0" name="service.vendor" value="OpenBSD"/>
105
115
  <param pos="0" name="service.family" value="OpenSSH"/>
106
116
  <param pos="0" name="service.product" value="OpenSSH"/>
117
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
107
118
  <param pos="0" name="os.vendor" value="Ubuntu"/>
108
119
  <param pos="0" name="os.device" value="General"/>
109
120
  <param pos="0" name="os.family" value="Linux"/>
110
121
  <param pos="0" name="os.product" value="Linux"/>
111
122
  <param pos="0" name="os.version" value="7.04"/>
123
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:7.04"/>
112
124
  </fingerprint>
113
125
  <fingerprint pattern="^OpenSSH_(4\.6p1) (Debian-5ubuntu\d+(?:\.\d+)?)$">
114
126
  <description>OpenSSH running on Ubuntu 7.10</description>
@@ -120,11 +132,13 @@ fingerprint SSH servers.
120
132
  <param pos="0" name="service.vendor" value="OpenBSD"/>
121
133
  <param pos="0" name="service.family" value="OpenSSH"/>
122
134
  <param pos="0" name="service.product" value="OpenSSH"/>
135
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
123
136
  <param pos="0" name="os.vendor" value="Ubuntu"/>
124
137
  <param pos="0" name="os.device" value="General"/>
125
138
  <param pos="0" name="os.family" value="Linux"/>
126
139
  <param pos="0" name="os.product" value="Linux"/>
127
140
  <param pos="0" name="os.version" value="7.10"/>
141
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:7.10"/>
128
142
  </fingerprint>
129
143
  <fingerprint pattern="^OpenSSH_(4\.6p1) (Debian-5build1)$">
130
144
  <description>OpenSSH running on very early versions of Ubuntu 7.10</description>
@@ -134,11 +148,13 @@ fingerprint SSH servers.
134
148
  <param pos="0" name="service.vendor" value="OpenBSD"/>
135
149
  <param pos="0" name="service.family" value="OpenSSH"/>
136
150
  <param pos="0" name="service.product" value="OpenSSH"/>
151
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
137
152
  <param pos="0" name="os.vendor" value="Ubuntu"/>
138
153
  <param pos="0" name="os.device" value="General"/>
139
154
  <param pos="0" name="os.family" value="Linux"/>
140
155
  <param pos="0" name="os.product" value="Linux"/>
141
156
  <param pos="0" name="os.version" value="7.10"/>
157
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:7.10"/>
142
158
  </fingerprint>
143
159
  <fingerprint pattern="^OpenSSH_(4\.7p1) (Debian-8ubuntu\d+(?:\.\d+)?)$">
144
160
  <description>OpenSSH running on Ubuntu 8.04</description>
@@ -149,11 +165,13 @@ fingerprint SSH servers.
149
165
  <param pos="0" name="service.vendor" value="OpenBSD"/>
150
166
  <param pos="0" name="service.family" value="OpenSSH"/>
151
167
  <param pos="0" name="service.product" value="OpenSSH"/>
168
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
152
169
  <param pos="0" name="os.vendor" value="Ubuntu"/>
153
170
  <param pos="0" name="os.device" value="General"/>
154
171
  <param pos="0" name="os.family" value="Linux"/>
155
172
  <param pos="0" name="os.product" value="Linux"/>
156
173
  <param pos="0" name="os.version" value="8.04"/>
174
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:8.04"/>
157
175
  </fingerprint>
158
176
  <fingerprint pattern="^OpenSSH_(5\.1p1) (Debian-3ubuntu\d+(?:\.\d+)?)$">
159
177
  <description>OpenSSH running on Ubuntu 8.10</description>
@@ -163,11 +181,13 @@ fingerprint SSH servers.
163
181
  <param pos="0" name="service.vendor" value="OpenBSD"/>
164
182
  <param pos="0" name="service.family" value="OpenSSH"/>
165
183
  <param pos="0" name="service.product" value="OpenSSH"/>
184
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
166
185
  <param pos="0" name="os.vendor" value="Ubuntu"/>
167
186
  <param pos="0" name="os.device" value="General"/>
168
187
  <param pos="0" name="os.family" value="Linux"/>
169
188
  <param pos="0" name="os.product" value="Linux"/>
170
189
  <param pos="0" name="os.version" value="8.10"/>
190
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:8.10"/>
171
191
  </fingerprint>
172
192
  <fingerprint pattern="^OpenSSH_(5\.1p1) (Debian-5ubuntu\d+(?:\.\d+)?)$">
173
193
  <description>OpenSSH running on Ubuntu 9.04</description>
@@ -177,11 +197,13 @@ fingerprint SSH servers.
177
197
  <param pos="0" name="service.vendor" value="OpenBSD"/>
178
198
  <param pos="0" name="service.family" value="OpenSSH"/>
179
199
  <param pos="0" name="service.product" value="OpenSSH"/>
200
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
180
201
  <param pos="0" name="os.vendor" value="Ubuntu"/>
181
202
  <param pos="0" name="os.device" value="General"/>
182
203
  <param pos="0" name="os.family" value="Linux"/>
183
204
  <param pos="0" name="os.product" value="Linux"/>
184
205
  <param pos="0" name="os.version" value="9.04"/>
206
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:9.04"/>
185
207
  </fingerprint>
186
208
  <fingerprint pattern="^OpenSSH_(5\.1p1) (Debian-6ubuntu\d+(?:\.\d+)?)$">
187
209
  <description>OpenSSH running on Ubuntu 9.10</description>
@@ -191,11 +213,13 @@ fingerprint SSH servers.
191
213
  <param pos="0" name="service.vendor" value="OpenBSD"/>
192
214
  <param pos="0" name="service.family" value="OpenSSH"/>
193
215
  <param pos="0" name="service.product" value="OpenSSH"/>
216
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
194
217
  <param pos="0" name="os.vendor" value="Ubuntu"/>
195
218
  <param pos="0" name="os.device" value="General"/>
196
219
  <param pos="0" name="os.family" value="Linux"/>
197
220
  <param pos="0" name="os.product" value="Linux"/>
198
221
  <param pos="0" name="os.version" value="9.10"/>
222
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:9.10"/>
199
223
  </fingerprint>
200
224
  <fingerprint pattern="^OpenSSH_(5\.3p1) (Debian-3ubuntu\d+(?:\.\d+)?)$">
201
225
  <description>OpenSSH running on Ubuntu 10.04 (lucid)</description>
@@ -210,11 +234,13 @@ fingerprint SSH servers.
210
234
  <param pos="0" name="service.vendor" value="OpenBSD"/>
211
235
  <param pos="0" name="service.family" value="OpenSSH"/>
212
236
  <param pos="0" name="service.product" value="OpenSSH"/>
237
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
213
238
  <param pos="0" name="os.vendor" value="Ubuntu"/>
214
239
  <param pos="0" name="os.device" value="General"/>
215
240
  <param pos="0" name="os.family" value="Linux"/>
216
241
  <param pos="0" name="os.product" value="Linux"/>
217
242
  <param pos="0" name="os.version" value="10.04"/>
243
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:10.04"/>
218
244
  </fingerprint>
219
245
  <fingerprint pattern="^OpenSSH_(5\.5p1) (Debian-4ubuntu\d+(?:\.\d+)?)$">
220
246
  <description>OpenSSH running on Ubuntu 10.10</description>
@@ -226,11 +252,13 @@ fingerprint SSH servers.
226
252
  <param pos="0" name="service.vendor" value="OpenBSD"/>
227
253
  <param pos="0" name="service.family" value="OpenSSH"/>
228
254
  <param pos="0" name="service.product" value="OpenSSH"/>
255
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
229
256
  <param pos="0" name="os.vendor" value="Ubuntu"/>
230
257
  <param pos="0" name="os.device" value="General"/>
231
258
  <param pos="0" name="os.family" value="Linux"/>
232
259
  <param pos="0" name="os.product" value="Linux"/>
233
260
  <param pos="0" name="os.version" value="10.10"/>
261
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:10.10"/>
234
262
  </fingerprint>
235
263
  <fingerprint pattern="^OpenSSH_(5\.8p1) (Debian-1ubuntu\d(?:\.\d)?)$">
236
264
  <description>OpenSSH running on Ubuntu 11.04</description>
@@ -240,11 +268,13 @@ fingerprint SSH servers.
240
268
  <param pos="0" name="service.vendor" value="OpenBSD"/>
241
269
  <param pos="0" name="service.family" value="OpenSSH"/>
242
270
  <param pos="0" name="service.product" value="OpenSSH"/>
271
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
243
272
  <param pos="0" name="os.vendor" value="Ubuntu"/>
244
273
  <param pos="0" name="os.device" value="General"/>
245
274
  <param pos="0" name="os.family" value="Linux"/>
246
275
  <param pos="0" name="os.product" value="Linux"/>
247
276
  <param pos="0" name="os.version" value="11.04"/>
277
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:11.04"/>
248
278
  </fingerprint>
249
279
  <fingerprint pattern="^OpenSSH_(5\.8p1) (Debian-7ubuntu\d(?:\.\d)?)$">
250
280
  <description>OpenSSH running on Ubuntu 11.10</description>
@@ -254,11 +284,13 @@ fingerprint SSH servers.
254
284
  <param pos="0" name="service.vendor" value="OpenBSD"/>
255
285
  <param pos="0" name="service.family" value="OpenSSH"/>
256
286
  <param pos="0" name="service.product" value="OpenSSH"/>
287
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
257
288
  <param pos="0" name="os.vendor" value="Ubuntu"/>
258
289
  <param pos="0" name="os.device" value="General"/>
259
290
  <param pos="0" name="os.family" value="Linux"/>
260
291
  <param pos="0" name="os.product" value="Linux"/>
261
292
  <param pos="0" name="os.version" value="11.10"/>
293
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:11.10"/>
262
294
  </fingerprint>
263
295
  <fingerprint pattern="^OpenSSH_(5\.9p1) (Debian-5ubuntu\d(?:\.\d)?)$">
264
296
  <description>OpenSSH running on Ubuntu 12.04</description>
@@ -269,11 +301,13 @@ fingerprint SSH servers.
269
301
  <param pos="0" name="service.vendor" value="OpenBSD"/>
270
302
  <param pos="0" name="service.family" value="OpenSSH"/>
271
303
  <param pos="0" name="service.product" value="OpenSSH"/>
304
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
272
305
  <param pos="0" name="os.vendor" value="Ubuntu"/>
273
306
  <param pos="0" name="os.device" value="General"/>
274
307
  <param pos="0" name="os.family" value="Linux"/>
275
308
  <param pos="0" name="os.product" value="Linux"/>
276
309
  <param pos="0" name="os.version" value="12.04"/>
310
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:12.04"/>
277
311
  </fingerprint>
278
312
  <fingerprint pattern="^OpenSSH_(6\.0p1) (Debian-3ubuntu\d(?:\.\d)?)$">
279
313
  <description>OpenSSH running on Ubuntu 12.10</description>
@@ -283,11 +317,13 @@ fingerprint SSH servers.
283
317
  <param pos="0" name="service.vendor" value="OpenBSD"/>
284
318
  <param pos="0" name="service.family" value="OpenSSH"/>
285
319
  <param pos="0" name="service.product" value="OpenSSH"/>
320
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
286
321
  <param pos="0" name="os.vendor" value="Ubuntu"/>
287
322
  <param pos="0" name="os.device" value="General"/>
288
323
  <param pos="0" name="os.family" value="Linux"/>
289
324
  <param pos="0" name="os.product" value="Linux"/>
290
325
  <param pos="0" name="os.version" value="12.10"/>
326
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:12.10"/>
291
327
  </fingerprint>
292
328
  <fingerprint pattern="^OpenSSH_(6\.1p1) (Debian-4)$">
293
329
  <description>OpenSSH running on Ubuntu 13.04</description>
@@ -297,11 +333,13 @@ fingerprint SSH servers.
297
333
  <param pos="0" name="service.vendor" value="OpenBSD"/>
298
334
  <param pos="0" name="service.family" value="OpenSSH"/>
299
335
  <param pos="0" name="service.product" value="OpenSSH"/>
336
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
300
337
  <param pos="0" name="os.vendor" value="Ubuntu"/>
301
338
  <param pos="0" name="os.device" value="General"/>
302
339
  <param pos="0" name="os.family" value="Linux"/>
303
340
  <param pos="0" name="os.product" value="Linux"/>
304
341
  <param pos="0" name="os.version" value="13.04"/>
342
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:13.04"/>
305
343
  </fingerprint>
306
344
  <fingerprint pattern="^OpenSSH_(\d+\.\d+(?:\.\d+)?(?:p\d+)?)[_|-](hpn\d+v\d+)$">
307
345
  <description>OpenSSH with HPN patches</description>
@@ -313,6 +351,7 @@ fingerprint SSH servers.
313
351
  <param pos="0" name="service.vendor" value="OpenBSD"/>
314
352
  <param pos="0" name="service.family" value="OpenSSH"/>
315
353
  <param pos="0" name="service.product" value="OpenSSH"/>
354
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
316
355
  </fingerprint>
317
356
  <fingerprint pattern="^OpenSSH_(6\.6(?:\.\d)?p1) (Ubuntu-2ubuntu\d+(?:\.\d+)?)$">
318
357
  <description>OpenSSH running on Ubuntu 14.04</description>
@@ -323,11 +362,13 @@ fingerprint SSH servers.
323
362
  <param pos="0" name="service.vendor" value="OpenBSD"/>
324
363
  <param pos="0" name="service.family" value="OpenSSH"/>
325
364
  <param pos="0" name="service.product" value="OpenSSH"/>
365
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
326
366
  <param pos="0" name="os.vendor" value="Ubuntu"/>
327
367
  <param pos="0" name="os.device" value="General"/>
328
368
  <param pos="0" name="os.family" value="Linux"/>
329
369
  <param pos="0" name="os.product" value="Linux"/>
330
370
  <param pos="0" name="os.version" value="14.04"/>
371
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:14.04"/>
331
372
  </fingerprint>
332
373
  <fingerprint pattern="^OpenSSH_(6\.7p1) (Ubuntu-5ubuntu\d(?:\.\d)?)$">
333
374
  <description>OpenSSH running on Ubuntu 15.04 (vivid)</description>
@@ -337,11 +378,13 @@ fingerprint SSH servers.
337
378
  <param pos="0" name="service.vendor" value="OpenBSD"/>
338
379
  <param pos="0" name="service.family" value="OpenSSH"/>
339
380
  <param pos="0" name="service.product" value="OpenSSH"/>
381
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
340
382
  <param pos="0" name="os.vendor" value="Ubuntu"/>
341
383
  <param pos="0" name="os.device" value="General"/>
342
384
  <param pos="0" name="os.family" value="Linux"/>
343
385
  <param pos="0" name="os.product" value="Linux"/>
344
386
  <param pos="0" name="os.version" value="15.04"/>
387
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:15.04"/>
345
388
  </fingerprint>
346
389
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Ubuntu-\d\d?)$">
347
390
  <description>OpenSSH running on Ubuntu (unknown release)</description>
@@ -352,10 +395,12 @@ fingerprint SSH servers.
352
395
  <param pos="0" name="service.vendor" value="OpenBSD"/>
353
396
  <param pos="0" name="service.family" value="OpenSSH"/>
354
397
  <param pos="0" name="service.product" value="OpenSSH"/>
398
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
355
399
  <param pos="0" name="os.vendor" value="Ubuntu"/>
356
400
  <param pos="0" name="os.device" value="General"/>
357
401
  <param pos="0" name="os.family" value="Linux"/>
358
402
  <param pos="0" name="os.product" value="Linux"/>
403
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
359
404
  </fingerprint>
360
405
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-4(?:\+deb7u\d+)?)$">
361
406
  <description>OpenSSH running on Debian 7.x (wheezy)</description>
@@ -367,11 +412,13 @@ fingerprint SSH servers.
367
412
  <param pos="0" name="service.vendor" value="OpenBSD"/>
368
413
  <param pos="0" name="service.family" value="OpenSSH"/>
369
414
  <param pos="0" name="service.product" value="OpenSSH"/>
415
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
370
416
  <param pos="0" name="os.vendor" value="Debian"/>
371
417
  <param pos="0" name="os.device" value="General"/>
372
418
  <param pos="0" name="os.family" value="Linux"/>
373
419
  <param pos="0" name="os.product" value="Linux"/>
374
420
  <param pos="0" name="os.version" value="7.0"/>
421
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:7.0"/>
375
422
  </fingerprint>
376
423
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-\d~bpo7\d?\+\d+)$">
377
424
  <description>OpenSSH backport running on Debian 7.x (wheezy)</description>
@@ -382,11 +429,13 @@ fingerprint SSH servers.
382
429
  <param pos="0" name="service.vendor" value="OpenBSD"/>
383
430
  <param pos="0" name="service.family" value="OpenSSH"/>
384
431
  <param pos="0" name="service.product" value="OpenSSH"/>
432
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
385
433
  <param pos="0" name="os.vendor" value="Debian"/>
386
434
  <param pos="0" name="os.device" value="General"/>
387
435
  <param pos="0" name="os.family" value="Linux"/>
388
436
  <param pos="0" name="os.product" value="Linux"/>
389
437
  <param pos="0" name="os.version" value="7.0"/>
438
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:7.0"/>
390
439
  </fingerprint>
391
440
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-5\+deb8u\d+.*)$">
392
441
  <description>OpenSSH running on Debian 8.x (jessie)</description>
@@ -397,11 +446,13 @@ fingerprint SSH servers.
397
446
  <param pos="0" name="service.vendor" value="OpenBSD"/>
398
447
  <param pos="0" name="service.family" value="OpenSSH"/>
399
448
  <param pos="0" name="service.product" value="OpenSSH"/>
449
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
400
450
  <param pos="0" name="os.vendor" value="Debian"/>
401
451
  <param pos="0" name="os.device" value="General"/>
402
452
  <param pos="0" name="os.family" value="Linux"/>
403
453
  <param pos="0" name="os.product" value="Linux"/>
404
454
  <param pos="0" name="os.version" value="8.0"/>
455
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:8.0"/>
405
456
  </fingerprint>
406
457
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-\d\d?\+deb9u\d+)$">
407
458
  <description>OpenSSH running on Debian 9.x (stretch)</description>
@@ -412,11 +463,13 @@ fingerprint SSH servers.
412
463
  <param pos="0" name="service.vendor" value="OpenBSD"/>
413
464
  <param pos="0" name="service.family" value="OpenSSH"/>
414
465
  <param pos="0" name="service.product" value="OpenSSH"/>
466
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
415
467
  <param pos="0" name="os.vendor" value="Debian"/>
416
468
  <param pos="0" name="os.device" value="General"/>
417
469
  <param pos="0" name="os.family" value="Linux"/>
418
470
  <param pos="0" name="os.product" value="Linux"/>
419
471
  <param pos="0" name="os.version" value="9.0"/>
472
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:9.0"/>
420
473
  </fingerprint>
421
474
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-\d+[+~]squeeze.*)$">
422
475
  <description>OpenSSH running on Debian 6.0 (squeeze)</description>
@@ -428,11 +481,13 @@ fingerprint SSH servers.
428
481
  <param pos="0" name="service.vendor" value="OpenBSD"/>
429
482
  <param pos="0" name="service.family" value="OpenSSH"/>
430
483
  <param pos="0" name="service.product" value="OpenSSH"/>
484
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
431
485
  <param pos="0" name="os.vendor" value="Debian"/>
432
486
  <param pos="0" name="os.device" value="General"/>
433
487
  <param pos="0" name="os.family" value="Linux"/>
434
488
  <param pos="0" name="os.product" value="Linux"/>
435
489
  <param pos="0" name="os.version" value="6.0"/>
490
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:6.0"/>
436
491
  </fingerprint>
437
492
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+((?:Debian|Ubuntu).+ubuntu.*)$">
438
493
  <description>OpenSSH running on Ubuntu</description>
@@ -442,11 +497,13 @@ fingerprint SSH servers.
442
497
  <param pos="0" name="service.vendor" value="OpenBSD"/>
443
498
  <param pos="0" name="service.family" value="OpenSSH"/>
444
499
  <param pos="0" name="service.product" value="OpenSSH"/>
500
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
445
501
  <param pos="0" name="os.vendor" value="Ubuntu"/>
446
502
  <param pos="0" name="os.device" value="General"/>
447
503
  <param pos="0" name="os.family" value="Linux"/>
448
504
  <param pos="0" name="os.product" value="Linux"/>
449
505
  <param pos="0" name="os.certainty" value="0.75"/>
506
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
450
507
  </fingerprint>
451
508
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian.+etch.*)$">
452
509
  <description>OpenSSH running on Debian 4.0 (etch)</description>
@@ -456,11 +513,13 @@ fingerprint SSH servers.
456
513
  <param pos="0" name="service.vendor" value="OpenBSD"/>
457
514
  <param pos="0" name="service.family" value="OpenSSH"/>
458
515
  <param pos="0" name="service.product" value="OpenSSH"/>
516
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
459
517
  <param pos="0" name="os.vendor" value="Debian"/>
460
518
  <param pos="0" name="os.device" value="General"/>
461
519
  <param pos="0" name="os.family" value="Linux"/>
462
520
  <param pos="0" name="os.product" value="Linux"/>
463
521
  <param pos="0" name="os.version" value="4.0"/>
522
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:4.0"/>
464
523
  </fingerprint>
465
524
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian.+sarge.*)$">
466
525
  <description>OpenSSH running on Debian 3.1 (sarge)</description>
@@ -470,11 +529,13 @@ fingerprint SSH servers.
470
529
  <param pos="0" name="service.vendor" value="OpenBSD"/>
471
530
  <param pos="0" name="service.family" value="OpenSSH"/>
472
531
  <param pos="0" name="service.product" value="OpenSSH"/>
532
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
473
533
  <param pos="0" name="os.vendor" value="Debian"/>
474
534
  <param pos="0" name="os.device" value="General"/>
475
535
  <param pos="0" name="os.family" value="Linux"/>
476
536
  <param pos="0" name="os.product" value="Linux"/>
477
537
  <param pos="0" name="os.version" value="3.1"/>
538
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:3.1"/>
478
539
  </fingerprint>
479
540
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian.+woody.*)$">
480
541
  <description>OpenSSH running on Debian 3.0 (woody)</description>
@@ -484,11 +545,13 @@ fingerprint SSH servers.
484
545
  <param pos="0" name="service.vendor" value="OpenBSD"/>
485
546
  <param pos="0" name="service.family" value="OpenSSH"/>
486
547
  <param pos="0" name="service.product" value="OpenSSH"/>
548
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
487
549
  <param pos="0" name="os.vendor" value="Debian"/>
488
550
  <param pos="0" name="os.device" value="General"/>
489
551
  <param pos="0" name="os.family" value="Linux"/>
490
552
  <param pos="0" name="os.product" value="Linux"/>
491
553
  <param pos="0" name="os.version" value="3.0"/>
554
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:3.0"/>
492
555
  </fingerprint>
493
556
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-\d+(?:[~]?bpo[.]?\d+)?)$">
494
557
  <description>OpenSSH running on Debian (unknown release)</description>
@@ -501,10 +564,12 @@ fingerprint SSH servers.
501
564
  <param pos="0" name="service.vendor" value="OpenBSD"/>
502
565
  <param pos="0" name="service.family" value="OpenSSH"/>
503
566
  <param pos="0" name="service.product" value="OpenSSH"/>
567
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
504
568
  <param pos="0" name="os.vendor" value="Debian"/>
505
569
  <param pos="0" name="os.device" value="General"/>
506
570
  <param pos="0" name="os.family" value="Linux"/>
507
571
  <param pos="0" name="os.product" value="Linux"/>
572
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
508
573
  </fingerprint>
509
574
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Raspbian-\d\d?\+deb9u\d+)$">
510
575
  <description>OpenSSH running on Raspbian (Debian 9 "Stretch" based)</description>
@@ -515,6 +580,7 @@ fingerprint SSH servers.
515
580
  <param pos="0" name="service.vendor" value="OpenBSD"/>
516
581
  <param pos="0" name="service.family" value="OpenSSH"/>
517
582
  <param pos="0" name="service.product" value="OpenSSH"/>
583
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
518
584
  <param pos="0" name="os.vendor" value="Raspbian"/>
519
585
  <param pos="0" name="os.device" value="General"/>
520
586
  <param pos="0" name="os.family" value="Linux"/>
@@ -530,6 +596,7 @@ fingerprint SSH servers.
530
596
  <param pos="0" name="service.vendor" value="OpenBSD"/>
531
597
  <param pos="0" name="service.family" value="OpenSSH"/>
532
598
  <param pos="0" name="service.product" value="OpenSSH"/>
599
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
533
600
  <param pos="0" name="os.vendor" value="Raspbian"/>
534
601
  <param pos="0" name="os.device" value="General"/>
535
602
  <param pos="0" name="os.family" value="Linux"/>
@@ -545,6 +612,7 @@ fingerprint SSH servers.
545
612
  <param pos="0" name="service.vendor" value="OpenBSD"/>
546
613
  <param pos="0" name="service.family" value="OpenSSH"/>
547
614
  <param pos="0" name="service.product" value="OpenSSH"/>
615
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
548
616
  <param pos="0" name="os.vendor" value="Raspbian"/>
549
617
  <param pos="0" name="os.device" value="General"/>
550
618
  <param pos="0" name="os.family" value="Linux"/>
@@ -558,10 +626,12 @@ fingerprint SSH servers.
558
626
  <param pos="0" name="service.vendor" value="OpenBSD"/>
559
627
  <param pos="0" name="service.family" value="OpenSSH"/>
560
628
  <param pos="0" name="service.product" value="OpenSSH"/>
629
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
561
630
  <param pos="0" name="os.vendor" value="Apple"/>
562
631
  <param pos="0" name="os.device" value="General"/>
563
632
  <param pos="0" name="os.family" value="Mac OS X"/>
564
633
  <param pos="0" name="os.product" value="Mac OS X"/>
634
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:-"/>
565
635
  </fingerprint>
566
636
  <fingerprint pattern="^OpenSSH_(.*)_Mikrotik_v(.*)$">
567
637
  <description>OpenSSH on MikroTik</description>
@@ -571,10 +641,12 @@ fingerprint SSH servers.
571
641
  <param pos="0" name="service.vendor" value="OpenBSD"/>
572
642
  <param pos="0" name="service.family" value="OpenSSH"/>
573
643
  <param pos="0" name="service.product" value="OpenSSH"/>
644
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
574
645
  <param pos="0" name="os.vendor" value="MikroTik"/>
575
646
  <param pos="0" name="os.device" value="Router"/>
576
647
  <param pos="0" name="os.family" value="RouterOS"/>
577
648
  <param pos="0" name="os.product" value="RouterOS"/>
649
+ <param pos="0" name="os.cpe23" value="cpe:/o:mikrotik:routeros:{os.version}"/>
578
650
  </fingerprint>
579
651
  <fingerprint pattern="^OpenSSH_(.*)-HipServ$">
580
652
  <description>OpenSSH on HipServ</description>
@@ -583,6 +655,7 @@ fingerprint SSH servers.
583
655
  <param pos="0" name="service.vendor" value="OpenBSD"/>
584
656
  <param pos="0" name="service.family" value="OpenSSH"/>
585
657
  <param pos="0" name="service.product" value="OpenSSH"/>
658
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
586
659
  <param pos="0" name="os.vendor" value="HipServ"/>
587
660
  <param pos="0" name="os.device" value="NAS"/>
588
661
  <param pos="0" name="os.family" value="Linux"/>
@@ -595,9 +668,11 @@ fingerprint SSH servers.
595
668
  <param pos="0" name="service.vendor" value="OpenBSD"/>
596
669
  <param pos="0" name="service.family" value="OpenSSH"/>
597
670
  <param pos="0" name="service.product" value="OpenSSH"/>
671
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
598
672
  <param pos="0" name="os.vendor" value="Microsoft"/>
599
673
  <param pos="0" name="os.family" value="Windows"/>
600
674
  <param pos="0" name="os.product" value="Windows"/>
675
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
601
676
  </fingerprint>
602
677
  <fingerprint pattern="^OpenSSH_(\d+\.\d+(?:\.\d+)?(?:p\d+)?) ((?:PKIX\s+)?FIPS)$">
603
678
  <description>OpenSSH with a version and FIPS mode enabled</description>
@@ -609,6 +684,7 @@ fingerprint SSH servers.
609
684
  <param pos="0" name="service.vendor" value="OpenBSD"/>
610
685
  <param pos="0" name="service.family" value="OpenSSH"/>
611
686
  <param pos="0" name="service.product" value="OpenSSH"/>
687
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
612
688
  </fingerprint>
613
689
  <fingerprint pattern="^OpenSSH_(\d+\.\d+(?:\.\d+)?(?:p\d+)?) *$">
614
690
  <description>OpenSSH with just a version, no comment by vendor</description>
@@ -620,6 +696,7 @@ fingerprint SSH servers.
620
696
  <param pos="0" name="service.vendor" value="OpenBSD"/>
621
697
  <param pos="0" name="service.family" value="OpenSSH"/>
622
698
  <param pos="0" name="service.product" value="OpenSSH"/>
699
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
623
700
  </fingerprint>
624
701
  <fingerprint pattern="^OpenSSH$">
625
702
  <description>OpenSSH w/o version or comment</description>
@@ -627,6 +704,7 @@ fingerprint SSH servers.
627
704
  <param pos="0" name="service.vendor" value="OpenBSD"/>
628
705
  <param pos="0" name="service.family" value="OpenSSH"/>
629
706
  <param pos="0" name="service.product" value="OpenSSH"/>
707
+ <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:-"/>
630
708
  </fingerprint>
631
709
  <!-- SSH-1.99-OpenSSH_4.3p2-4.cern-hpn-CERN-4.3p2-4.cern -->
632
710
  <!--<fingerprint pattern="^OpenSSH_?([^\s]*)\s*(.*)$">
@@ -653,6 +731,7 @@ fingerprint SSH servers.
653
731
  <param pos="0" name="os.vendor" value="Cisco"/>
654
732
  <param pos="0" name="os.product" value="IOS"/>
655
733
  <param pos="0" name="os.certainty" value="0.8"/>
734
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:-"/>
656
735
  </fingerprint>
657
736
  <fingerprint pattern="^CISCO_WLC$">
658
737
  <description>SSH banner from a Cisco Wireless LAN Controller (WLC)</description>
@@ -661,6 +740,7 @@ fingerprint SSH servers.
661
740
  <param pos="0" name="service.product" value="SSH"/>
662
741
  <param pos="0" name="os.vendor" value="Cisco"/>
663
742
  <param pos="0" name="os.product" value="Wireless LAN Controller"/>
743
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller:-"/>
664
744
  </fingerprint>
665
745
  <fingerprint pattern="^Sun_SSH_(.*)$">
666
746
  <description>Sun SSH banner</description>
@@ -671,6 +751,7 @@ fingerprint SSH servers.
671
751
  <param pos="0" name="os.vendor" value="Sun"/>
672
752
  <param pos="0" name="os.family" value="Solaris"/>
673
753
  <param pos="0" name="os.product" value="Solaris"/>
754
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:-"/>
674
755
  </fingerprint>
675
756
  <fingerprint pattern="^SSH Protocol Compatible Server SCS (.*)$">
676
757
  <description>Netscreen</description>
@@ -682,6 +763,7 @@ fingerprint SSH servers.
682
763
  <param pos="0" name="os.device" value="Firewall"/>
683
764
  <param pos="0" name="os.family" value="ScreenOS"/>
684
765
  <param pos="0" name="os.product" value="ScreenOS"/>
766
+ <param pos="0" name="os.cpe23" value="cpe:/o:juniper:screenos:-"/>
685
767
  </fingerprint>
686
768
  <fingerprint pattern="^NetScreen$">
687
769
  <description>Netscreen</description>
@@ -693,6 +775,7 @@ fingerprint SSH servers.
693
775
  <param pos="0" name="os.device" value="Firewall"/>
694
776
  <param pos="0" name="os.family" value="ScreenOS"/>
695
777
  <param pos="0" name="os.product" value="ScreenOS"/>
778
+ <param pos="0" name="os.cpe23" value="cpe:/o:juniper:screenos:-"/>
696
779
  </fingerprint>
697
780
  <fingerprint pattern="^(?:HUAWEI-VRP-?|VRP-)(.*)$">
698
781
  <description>Huawei Versatile Routing Platform (VRP)</description>
@@ -722,6 +805,7 @@ fingerprint SSH servers.
722
805
  <param pos="0" name="os.vendor" value="Microsoft"/>
723
806
  <param pos="0" name="os.family" value="Windows"/>
724
807
  <param pos="0" name="os.product" value="Windows"/>
808
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
725
809
  </fingerprint>
726
810
  <fingerprint pattern="^([^\s]+) sshlib: WinSSHD (.*)$">
727
811
  <description>Bitvise WinSSHD (which uses Bitvise sshlib)</description>
@@ -737,6 +821,7 @@ fingerprint SSH servers.
737
821
  <param pos="0" name="os.vendor" value="Microsoft"/>
738
822
  <param pos="0" name="os.family" value="Windows"/>
739
823
  <param pos="0" name="os.product" value="Windows"/>
824
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
740
825
  </fingerprint>
741
826
  <fingerprint pattern="^([^\s]+) FlowSsh: (?:Bitvise SSH Server \(WinSSHD\)|WinSSHD) ([\d\.]+):?.*$">
742
827
  <description>Bitvise WinSSHD (which uses Bitvise flowssh)</description>
@@ -754,6 +839,7 @@ fingerprint SSH servers.
754
839
  <param pos="0" name="os.vendor" value="Microsoft"/>
755
840
  <param pos="0" name="os.family" value="Windows"/>
756
841
  <param pos="0" name="os.product" value="Windows"/>
842
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
757
843
  </fingerprint>
758
844
  <fingerprint pattern="^([^\s]+) sshlib: MOVEit DMZ SSH (.*)$">
759
845
  <description>MOVEit DMZ (which uses Bitvise sshlib)</description>
@@ -768,6 +854,7 @@ fingerprint SSH servers.
768
854
  <param pos="0" name="os.vendor" value="Microsoft"/>
769
855
  <param pos="0" name="os.family" value="Windows"/>
770
856
  <param pos="0" name="os.product" value="Windows"/>
857
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
771
858
  </fingerprint>
772
859
  <fingerprint pattern="^Pragma SecureShell\s*(.*)$">
773
860
  <description>Pragma SecureShell</description>
@@ -778,6 +865,7 @@ fingerprint SSH servers.
778
865
  <param pos="0" name="os.vendor" value="Microsoft"/>
779
866
  <param pos="0" name="os.family" value="Windows"/>
780
867
  <param pos="0" name="os.product" value="Windows"/>
868
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
781
869
  </fingerprint>
782
870
  <fingerprint pattern="^Pragma FortressSSH\s+([\d.]+)(?:\s+\[([\d.:]+)\])?$">
783
871
  <description>Pragma FortressSSH</description>
@@ -791,6 +879,7 @@ fingerprint SSH servers.
791
879
  <param pos="0" name="os.vendor" value="Microsoft"/>
792
880
  <param pos="0" name="os.family" value="Windows"/>
793
881
  <param pos="0" name="os.product" value="Windows"/>
882
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
794
883
  </fingerprint>
795
884
  <fingerprint pattern="^VShell_(?:Special_Edition_)?(\d+)_(\d+)_(\d+)_(\d+) VShell$">
796
885
  <description>VanDyke VShell</description>
@@ -803,6 +892,7 @@ fingerprint SSH servers.
803
892
  <param pos="0" name="service.vendor" value="VanDyke Software"/>
804
893
  <param pos="0" name="service.family" value="VShell"/>
805
894
  <param pos="0" name="service.product" value="VShell"/>
895
+ <param pos="0" name="service.cpe23" value="cpe:/a:vandyke:vshell:{service.version}"/>
806
896
  </fingerprint>
807
897
  <fingerprint pattern="^([\s]*)\s*VShell$">
808
898
  <description>VanDyke VShell</description>
@@ -810,6 +900,7 @@ fingerprint SSH servers.
810
900
  <param pos="0" name="service.vendor" value="VanDyke Software"/>
811
901
  <param pos="0" name="service.family" value="VShell"/>
812
902
  <param pos="0" name="service.product" value="VShell"/>
903
+ <param pos="0" name="service.cpe23" value="cpe:/a:vandyke:vshell:{service.version}"/>
813
904
  </fingerprint>
814
905
  <fingerprint pattern="^WRQReflection(?i:F)orSecureIT_(.*)$">
815
906
  <description>Attachmate Reflection (formerly WRQ Reflection for Secure IT)
@@ -854,6 +945,7 @@ fingerprint SSH servers.
854
945
  <param pos="0" name="os.vendor" value="Microsoft"/>
855
946
  <param pos="0" name="os.family" value="Windows"/>
856
947
  <param pos="0" name="os.product" value="Windows"/>
948
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
857
949
  <param pos="1" name="service.version"/>
858
950
  <param pos="0" name="service.vendor" value="SSH Communications Security"/>
859
951
  <param pos="0" name="service.family" value="SSH Tectia Server"/>
@@ -903,6 +995,7 @@ fingerprint SSH servers.
903
995
  <param pos="0" name="os.vendor" value="HP"/>
904
996
  <param pos="0" name="os.family" value="OpenVMS"/>
905
997
  <param pos="0" name="os.product" value="OpenVMS"/>
998
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:openvms:-"/>
906
999
  </fingerprint>
907
1000
  <fingerprint pattern="^dropbear$">
908
1001
  <description>Dropbear w/o version - http://matt.ucc.asn.au/dropbear/dropbear.html</description>
@@ -936,6 +1029,7 @@ fingerprint SSH servers.
936
1029
  <param pos="0" name="os.vendor" value="Microsoft"/>
937
1030
  <param pos="0" name="os.family" value="Windows"/>
938
1031
  <param pos="0" name="os.product" value="Windows"/>
1032
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
939
1033
  </fingerprint>
940
1034
  <fingerprint pattern="^Comware-(\d+\.?\d*\.?\d*)$">
941
1035
  <description>SSH on H3C Comware</description>
@@ -955,6 +1049,7 @@ fingerprint SSH servers.
955
1049
  <param pos="0" name="os.vendor" value="NetApp"/>
956
1050
  <param pos="0" name="os.family" value="Data ONTAP"/>
957
1051
  <param pos="0" name="os.product" value="Data ONTAP"/>
1052
+ <param pos="0" name="os.cpe23" value="cpe:/o:netapp:data_ontap:-"/>
958
1053
  </fingerprint>
959
1054
  <fingerprint pattern="^(\d\.\d+\.\d+) SSH Secure Shell OpenVMS V\d+\.\d+$">
960
1055
  <description>SSH for OpenVMS</description>
@@ -972,6 +1067,7 @@ fingerprint SSH servers.
972
1067
  <param pos="0" name="os.family" value="OpenVMS"/>
973
1068
  <param pos="0" name="os.product" value="OpenVMS"/>
974
1069
  <param pos="0" name="os.certainty" value="0.75"/>
1070
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:openvms:-"/>
975
1071
  </fingerprint>
976
1072
  <fingerprint pattern="^(\d\.\d+\.\d+) SSH (?:Secure Shell )?OpenVMS V\d\.\d VMS_sftp_version (\d)$">
977
1073
  <description>SSH for OpenVMS sftp</description>
@@ -997,6 +1093,7 @@ fingerprint SSH servers.
997
1093
  <param pos="0" name="os.family" value="Unix"/>
998
1094
  <param pos="0" name="os.product" value="Tru64 Unix"/>
999
1095
  <param pos="0" name="os.device" value="General"/>
1096
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:tru64:-"/>
1000
1097
  </fingerprint>
1001
1098
  <fingerprint pattern="^(?:SSH-(\d\.\d)-)?ROSSSH$">
1002
1099
  <description>MikroTik RouterOS sshd</description>
@@ -1007,6 +1104,7 @@ fingerprint SSH servers.
1007
1104
  <param pos="0" name="os.device" value="Router"/>
1008
1105
  <param pos="0" name="os.family" value="RouterOS"/>
1009
1106
  <param pos="0" name="os.product" value="RouterOS"/>
1107
+ <param pos="0" name="os.cpe23" value="cpe:/o:mikrotik:routeros:-"/>
1010
1108
  </fingerprint>
1011
1109
  <fingerprint pattern="^xlightftpd_release_([\d.]+)$">
1012
1110
  <description>Xlight FTP Server</description>
@@ -1018,6 +1116,7 @@ fingerprint SSH servers.
1018
1116
  <param pos="0" name="os.vendor" value="Microsoft"/>
1019
1117
  <param pos="0" name="os.family" value="Windows"/>
1020
1118
  <param pos="0" name="os.product" value="Windows"/>
1119
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1021
1120
  </fingerprint>
1022
1121
  <!--
1023
1122
  1.2.22j4rad