recog 2.1.20 → 2.1.21

Sign up to get free protection for your applications and to get access to all the features.
Files changed (47) hide show
  1. checksums.yaml +4 -4
  2. data/lib/recog/version.rb +1 -1
  3. data/remap.json +131 -0
  4. data/spec/lib/fingerprint_self_test_spec.rb +16 -1
  5. data/update_cpes.py +202 -0
  6. data/xml/apache_os.xml +29 -5
  7. data/xml/architecture.xml +3 -3
  8. data/xml/dns_versionbind.xml +56 -10
  9. data/xml/ftp_banners.xml +56 -12
  10. data/xml/h323_callresp.xml +4 -4
  11. data/xml/hp_pjl_id.xml +8 -8
  12. data/xml/http_cookies.xml +20 -8
  13. data/xml/http_servers.xml +122 -8
  14. data/xml/http_wwwauth.xml +13 -3
  15. data/xml/imap_banners.xml +19 -1
  16. data/xml/ldap_searchresult.xml +44 -68
  17. data/xml/mdns_device-info_txt.xml +18 -7
  18. data/xml/mdns_workstation_txt.xml +7 -7
  19. data/xml/mysql_banners.xml +159 -13
  20. data/xml/mysql_error.xml +124 -21
  21. data/xml/nntp_banners.xml +10 -4
  22. data/xml/ntp_banners.xml +144 -84
  23. data/xml/operating_system.xml +39 -10
  24. data/xml/pop_banners.xml +32 -12
  25. data/xml/rsh_resp.xml +8 -3
  26. data/xml/sip_banners.xml +4 -3
  27. data/xml/sip_user_agents.xml +4 -3
  28. data/xml/smb_native_lm.xml +9 -4
  29. data/xml/smb_native_os.xml +50 -25
  30. data/xml/smtp_banners.xml +108 -33
  31. data/xml/smtp_debug.xml +11 -8
  32. data/xml/smtp_ehlo.xml +14 -11
  33. data/xml/smtp_expn.xml +17 -11
  34. data/xml/smtp_help.xml +17 -11
  35. data/xml/smtp_mailfrom.xml +4 -3
  36. data/xml/smtp_noop.xml +13 -8
  37. data/xml/smtp_quit.xml +10 -8
  38. data/xml/smtp_rcptto.xml +1 -3
  39. data/xml/smtp_rset.xml +10 -8
  40. data/xml/smtp_turn.xml +10 -8
  41. data/xml/smtp_vrfy.xml +18 -11
  42. data/xml/snmp_sysdescr.xml +157 -451
  43. data/xml/snmp_sysobjid.xml +57 -4
  44. data/xml/ssh_banners.xml +104 -5
  45. data/xml/upnp_banners.xml +16 -1
  46. data/xml/x11_banners.xml +34 -9
  47. metadata +4 -2
data/xml/h323_callresp.xml CHANGED
@@ -1,9 +1,9 @@
1
1
  <?xml version="1.0" encoding="UTF-8"?>
2
- <!--
3
- Responses to H.323 call SETUP messages are matched against these patterns
4
- to fingerprint H.323 servers.
5
- -->
6
2
  <fingerprints protocol="h.323" database_type="service" preference="0.80">
3
+ <!--
4
+ Responses to H.323 call SETUP messages are matched against these patterns
5
+ to fingerprint H.323 servers.
6
+ -->
7
7
  <fingerprint pattern="^0x000b2d00\:(.*)\:.*?(\d*\.*\d*\.*\d*).*$" flags="REG_ICASE">
8
8
  <description>Sony H.323 Server</description>
9
9
  <param pos="0" name="service.vendor" value="Sony"/>
data/xml/hp_pjl_id.xml CHANGED
@@ -1,13 +1,13 @@
1
1
  <?xml version="1.0" encoding="UTF-8"?>
2
- <!--
3
- For printers running the PJL protocol (usually on 9100/tcp), their type can be requested
4
- by the INFO ID command. The printer types (strings surrounded by double quotes) are
5
- matched against these patterns to fingerprint the printer.
6
-
7
- 'preference' notes: The value has been explicitly set to 0.10 due to the very loose
8
- regex that is used here.
9
- -->
10
2
  <fingerprints protocol="pjl" database_type="service" preference="0.10">
3
+ <!--
4
+ For printers running the PJL protocol (usually on 9100/tcp), their type can be requested
5
+ by the INFO ID command. The printer types (strings surrounded by double quotes) are
6
+ matched against these patterns to fingerprint the printer.
7
+
8
+ 'preference' notes: The value has been explicitly set to 0.10 due to the very loose
9
+ regex that is used here.
10
+ -->
11
11
  <!--
12
12
  LaserJet and Designjet are registered trademarks of HP. Therefore matching for the keywords
13
13
  is sufficient for asserting all relevant information
data/xml/http_cookies.xml CHANGED
@@ -1,9 +1,9 @@
1
1
  <?xml version="1.0" encoding="UTF-8"?>
2
- <!--
3
- Set-Cookie HTTP header values are matched against these patterns to fingerprint HTTP
4
- servers.
5
- -->
6
2
  <fingerprints matches="http_header.cookie" protocol="http" database_type="service">
3
+ <!--
4
+ Set-Cookie HTTP header values are matched against these patterns to fingerprint HTTP
5
+ servers.
6
+ -->
7
7
  <fingerprint pattern="^(CFCLIENT_[^=]+|CFGLOBALS|CFID|CFTOKEN)=.*">
8
8
  <description>
9
9
  Adobe (Macromedia) ColdFusion uses various cookies.
@@ -14,6 +14,7 @@ servers.
14
14
  <param pos="0" name="service.vendor" value="Adobe"/>
15
15
  <param pos="0" name="service.family" value="ColdFusion"/>
16
16
  <param pos="0" name="service.product" value="ColdFusion"/>
17
+ <param pos="0" name="service.cpe23" value="cpe:/a:adobe:coldfusion:-"/>
17
18
  </fingerprint>
18
19
  <fingerprint pattern="^(Apache)=[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.([0-9]+);.*">
19
20
  <description>Apache</description>
@@ -22,6 +23,7 @@ servers.
22
23
  <param pos="0" name="service.vendor" value="Apache"/>
23
24
  <param pos="0" name="service.family" value="Apache"/>
24
25
  <param pos="0" name="service.product" value="HTTPD"/>
26
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
25
27
  </fingerprint>
26
28
  <fingerprint pattern="^(JServSessionIdroot)=.*">
27
29
  <description>Apache JServ</description>
@@ -44,6 +46,7 @@ servers.
44
46
  <param pos="0" name="service.vendor" value="BEA"/>
45
47
  <param pos="0" name="service.family" value="WebLogic"/>
46
48
  <param pos="0" name="service.product" value="WebLogic"/>
49
+ <param pos="0" name="service.cpe23" value="cpe:/a:bea:weblogic_server:-"/>
47
50
  </fingerprint>
48
51
  <fingerprint pattern="^(WebLogicSession)=.*">
49
52
  <description>BEA WebLogic (no timestamp)</description>
@@ -51,6 +54,7 @@ servers.
51
54
  <param pos="0" name="service.vendor" value="BEA"/>
52
55
  <param pos="0" name="service.family" value="WebLogic"/>
53
56
  <param pos="0" name="service.product" value="WebLogic"/>
57
+ <param pos="0" name="service.cpe23" value="cpe:/a:bea:weblogic_server:-"/>
54
58
  </fingerprint>
55
59
  <fingerprint pattern="^(BCSI-CSC[0-9A-Za-z]+)=.*">
56
60
  <description>BlueCoat Proxy</description>
@@ -65,7 +69,7 @@ servers.
65
69
  <param pos="0" name="service.family" value="PHP"/>
66
70
  <param pos="0" name="service.product" value="CakePHP"/>
67
71
  </fingerprint>
68
- <fingerprint pattern="^(ARPT)=([A-Z]+)([0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3})([A-Z]+).*">
72
+ <fingerprint pattern="^(ARPT)=([A-Z]+)([0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3})[A-Z]+.*">
69
73
  <description>Cisco 11000 Series Content Service Switch (CSS)
70
74
  http://www.cisco.com/warp/public/117/AP_cookies.html
71
75
 
@@ -76,7 +80,6 @@ servers.
76
80
  <param pos="1" name="cookie"/>
77
81
  <param pos="2" name="host.id"/>
78
82
  <param pos="3" name="host.ip"/>
79
- <param pos="4" name="timeout"/>
80
83
  <param pos="0" name="service.vendor" value="Cisco"/>
81
84
  <param pos="0" name="service.family" value="Content Service Switch"/>
82
85
  <param pos="0" name="service.product" value="11000 Series Content Service Switch"/>
@@ -119,9 +122,10 @@ servers.
119
122
  </description>
120
123
  <param pos="1" name="cookie"/>
121
124
  <param pos="2" name="loadbalancer.poolname"/>
122
- <param pos="0" name="service.vendor" value="F5 Labs"/>
125
+ <param pos="0" name="service.vendor" value="F5"/>
123
126
  <param pos="0" name="service.family" value="BIG-IP"/>
124
127
  <param pos="0" name="service.product" value="BIG-IP LTM"/>
128
+ <param pos="0" name="service.cpe23" value="cpe:/a:f5:big-ip_local_traffic_manager:-"/>
125
129
  </fingerprint>
126
130
  <fingerprint pattern="^(BigIPCookie)=.*">
127
131
  <description>F5 BIG-IP LTM
@@ -129,9 +133,10 @@ servers.
129
133
  http://www.f5.com/solutions/deployment/pdfs/SAP_v94_dg.pdf
130
134
  </description>
131
135
  <param pos="1" name="cookie"/>
132
- <param pos="0" name="service.vendor" value="F5 Labs"/>
136
+ <param pos="0" name="service.vendor" value="F5"/>
133
137
  <param pos="0" name="service.family" value="BIG-IP"/>
134
138
  <param pos="0" name="service.product" value="BIG-IP LTM"/>
139
+ <param pos="0" name="service.cpe23" value="cpe:/a:f5:big-ip_local_traffic_manager:-"/>
135
140
  </fingerprint>
136
141
  <fingerprint pattern="^(SERVERID)=([A-Za-z0-9\-_]+)">
137
142
  <description>HAProxy
@@ -186,6 +191,7 @@ servers.
186
191
  <param pos="0" name="service.vendor" value="Microsoft"/>
187
192
  <param pos="0" name="service.family" value="Commerce Server"/>
188
193
  <param pos="0" name="service.product" value="Commerce Server"/>
194
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:commerce_server:-"/>
189
195
  </fingerprint>
190
196
  <fingerprint pattern="^(ASPSESSIONID[A-Z]+|ASP\.NET_SessionId|\.ASPXANONYMOUS)=.*">
191
197
  <description>Microsoft IIS (ASP.NET)
@@ -197,9 +203,11 @@ servers.
197
203
  <param pos="0" name="service.vendor" value="Microsoft"/>
198
204
  <param pos="0" name="service.family" value="IIS"/>
199
205
  <param pos="0" name="service.product" value="IIS"/>
206
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:-"/>
200
207
  <param pos="0" name="service.component.vendor" value="Microsoft"/>
201
208
  <param pos="0" name="service.component.family" value="ASP.NET"/>
202
209
  <param pos="0" name="service.component.product" value="ASP.NET"/>
210
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:microsoft:asp.net:-"/>
203
211
  </fingerprint>
204
212
  <fingerprint pattern="^(AlteonP)=.*">
205
213
  <description>Nortel Alteon Web Switch</description>
@@ -228,6 +236,7 @@ servers.
228
236
  <param pos="0" name="service.vendor" value="PHP"/>
229
237
  <param pos="0" name="service.family" value="PHP"/>
230
238
  <param pos="0" name="service.product" value="PHP"/>
239
+ <param pos="0" name="service.cpe23" value="cpe:/a:php:php:-"/>
231
240
  </fingerprint>
232
241
  <fingerprint pattern="^(RMID)=.*">
233
242
  <description>RealMedia OpenAdStream</description>
@@ -268,6 +277,7 @@ servers.
268
277
  <param pos="0" name="service.family" value="Java System Web Server"/>
269
278
  <param pos="0" name="service.product" value="Java System Web Server"/>
270
279
  <param pos="0" name="service.version" value="4.0"/>
280
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_web_server:4.0"/>
271
281
  </fingerprint>
272
282
  <fingerprint pattern="^(gx_session_id|JROUTE)=.*">
273
283
  <description>Sun Java System Application Server (formerly iPlanet Application Server,
@@ -276,6 +286,7 @@ servers.
276
286
  <param pos="0" name="service.vendor" value="Sun"/>
277
287
  <param pos="0" name="service.family" value="Java System Application Server"/>
278
288
  <param pos="0" name="service.product" value="Java System Application Server"/>
289
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_application_server:-"/>
279
290
  </fingerprint>
280
291
  <fingerprint pattern="^(fe_typo_user)=.*">
281
292
  <description>TYPO3 CMS - http://typo3.com/</description>
@@ -351,6 +362,7 @@ servers.
351
362
  <param pos="0" name="service.component.vendor" value="Moodle"/>
352
363
  <param pos="0" name="service.component.family" value="Moodle"/>
353
364
  <param pos="0" name="service.component.product" value="Moodle"/>
365
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:moodle:moodle:-"/>
354
366
  </fingerprint>
355
367
  <!--
356
368
  Ignore various cookies that are very generic cookies for session IDs
data/xml/http_servers.xml CHANGED
@@ -1,6 +1,6 @@
1
1
  <?xml version="1.0" encoding="UTF-8"?>
2
- <!-- HTTP Server headers are matched against these patterns to fingerprint HTTP servers. -->
3
2
  <fingerprints matches="http_header.server" protocol="http" database_type="service" preference="0.90">
3
+ <!-- HTTP Server headers are matched against these patterns to fingerprint HTTP servers. -->
4
4
  <fingerprint pattern="^Stronghold/(\d\.\d) Apache/([012][\d.]*)\s*(.*)$">
5
5
  <description>Red Hat Stronghold Enterprise Apache</description>
6
6
  <example>Stronghold/3.0 Apache/1.3.19 RedHat/3014c</example>
@@ -12,15 +12,18 @@
12
12
  <param pos="0" name="service.product" value="HTTPD"/>
13
13
  <param pos="0" name="service.family" value="Apache"/>
14
14
  <param pos="2" name="service.version"/>
15
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:{service.version}"/>
15
16
  <param pos="0" name="service.component.vendor" value="Red Hat"/>
16
17
  <param pos="0" name="service.component.product" value="Stronghold"/>
17
18
  <param pos="0" name="service.component.family" value="Stronghold"/>
18
19
  <param pos="1" name="service.component.version"/>
20
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:redhat:stronghold:{service.component.version}"/>
19
21
  <param pos="3" name="apache.info"/>
20
22
  <param pos="0" name="os.vendor" value="Red Hat"/>
21
23
  <param pos="0" name="os.device" value="General"/>
22
24
  <param pos="0" name="os.product" value="Linux"/>
23
25
  <param pos="0" name="os.family" value="Linux"/>
26
+ <param pos="0" name="os.cpe23" value="cpe:/o:redhat:linux:-"/>
24
27
  </fingerprint>
25
28
  <fingerprint pattern="^Apache/\d$" flags="REG_ICASE">
26
29
  <description>Apache returning only its major version number</description>
@@ -29,6 +32,7 @@
29
32
  <param pos="0" name="service.vendor" value="Apache"/>
30
33
  <param pos="0" name="service.product" value="HTTPD"/>
31
34
  <param pos="0" name="service.family" value="Apache"/>
35
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
32
36
  </fingerprint>
33
37
  <fingerprint pattern="^Apache$" flags="REG_ICASE">
34
38
  <description>Apache returning no version information</description>
@@ -37,6 +41,7 @@
37
41
  <param pos="0" name="service.vendor" value="Apache"/>
38
42
  <param pos="0" name="service.product" value="HTTPD"/>
39
43
  <param pos="0" name="service.family" value="Apache"/>
44
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
40
45
  </fingerprint>
41
46
  <fingerprint pattern="^Apache(?:-AdvancedExtranetServer)?(?:/([012][\d.]*)\s*(.*))?$" flags="REG_ICASE">
42
47
  <description>Apache</description>
@@ -1459,6 +1464,7 @@
1459
1464
  <param pos="0" name="service.product" value="HTTPD"/>
1460
1465
  <param pos="0" name="service.family" value="Apache"/>
1461
1466
  <param pos="1" name="service.version"/>
1467
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:{service.version}"/>
1462
1468
  <param pos="2" name="apache.info"/>
1463
1469
  </fingerprint>
1464
1470
  <fingerprint pattern="^Check Point SVN foundation$">
@@ -1467,6 +1473,7 @@
1467
1473
  <param pos="0" name="service.vendor" value="Check Point"/>
1468
1474
  <param pos="0" name="service.product" value="Firewall-1"/>
1469
1475
  <param pos="0" name="service.family" value="Firewall-1"/>
1476
+ <param pos="0" name="service.cpe23" value="cpe:/a:checkpoint:firewall-1:-"/>
1470
1477
  <param pos="0" name="os.vendor" value="Check Point"/>
1471
1478
  <param pos="0" name="os.device" value="Firewall"/>
1472
1479
  <param pos="0" name="os.family" value="Firewall-1"/>
@@ -1479,11 +1486,13 @@
1479
1486
  <param pos="0" name="service.product" value="IIS"/>
1480
1487
  <param pos="0" name="service.family" value="IIS"/>
1481
1488
  <param pos="1" name="service.version"/>
1489
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
1482
1490
  <param pos="0" name="os.vendor" value="Microsoft"/>
1483
1491
  <param pos="0" name="os.device" value="General"/>
1484
1492
  <param pos="0" name="os.family" value="Windows"/>
1485
1493
  <param pos="0" name="os.product" value="Windows NT"/>
1486
1494
  <param pos="0" name="os.version" value="4.0"/>
1495
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_nt:4.0"/>
1487
1496
  </fingerprint>
1488
1497
  <fingerprint pattern="^Microsoft-IIS/5.0$">
1489
1498
  <description>Microsoft IIS 5.0 runs on Windows 2000</description>
@@ -1492,10 +1501,12 @@
1492
1501
  <param pos="0" name="service.product" value="IIS"/>
1493
1502
  <param pos="0" name="service.family" value="IIS"/>
1494
1503
  <param pos="0" name="service.version" value="5.0"/>
1504
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:5.0"/>
1495
1505
  <param pos="0" name="os.vendor" value="Microsoft"/>
1496
1506
  <param pos="0" name="os.device" value="General"/>
1497
1507
  <param pos="0" name="os.family" value="Windows"/>
1498
1508
  <param pos="0" name="os.product" value="Windows 2000"/>
1509
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_2000:-"/>
1499
1510
  </fingerprint>
1500
1511
  <fingerprint pattern="^Microsoft-IIS/5.1$">
1501
1512
  <description>Microsoft IIS 5.1 runs on Windows XP</description>
@@ -1504,10 +1515,12 @@
1504
1515
  <param pos="0" name="service.product" value="IIS"/>
1505
1516
  <param pos="0" name="service.family" value="IIS"/>
1506
1517
  <param pos="0" name="service.version" value="5.1"/>
1518
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:5.1"/>
1507
1519
  <param pos="0" name="os.vendor" value="Microsoft"/>
1508
1520
  <param pos="0" name="os.device" value="General"/>
1509
1521
  <param pos="0" name="os.family" value="Windows"/>
1510
1522
  <param pos="0" name="os.product" value="Windows XP"/>
1523
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_xp:-"/>
1511
1524
  </fingerprint>
1512
1525
  <fingerprint pattern="^Microsoft-IIS/6.0$">
1513
1526
  <description>Microsoft IIS 6.0 runs on Windows Server 2003 (and Windows XP x64)</description>
@@ -1516,10 +1529,12 @@
1516
1529
  <param pos="0" name="service.product" value="IIS"/>
1517
1530
  <param pos="0" name="service.family" value="IIS"/>
1518
1531
  <param pos="0" name="service.version" value="6.0"/>
1532
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:6.0"/>
1519
1533
  <param pos="0" name="os.vendor" value="Microsoft"/>
1520
1534
  <param pos="0" name="os.device" value="General"/>
1521
1535
  <param pos="0" name="os.family" value="Windows"/>
1522
1536
  <param pos="0" name="os.product" value="Windows Server 2003"/>
1537
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
1523
1538
  </fingerprint>
1524
1539
  <fingerprint pattern="^Microsoft-IIS/7.0$">
1525
1540
  <description>Microsoft IIS 7.0 runs on Windows Server 2008 (and Windows Vista)</description>
@@ -1528,10 +1543,12 @@
1528
1543
  <param pos="0" name="service.product" value="IIS"/>
1529
1544
  <param pos="0" name="service.family" value="IIS"/>
1530
1545
  <param pos="0" name="service.version" value="7.0"/>
1546
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:7.0"/>
1531
1547
  <param pos="0" name="os.vendor" value="Microsoft"/>
1532
1548
  <param pos="0" name="os.device" value="General"/>
1533
1549
  <param pos="0" name="os.family" value="Windows"/>
1534
1550
  <param pos="0" name="os.product" value="Windows Server 2008"/>
1551
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
1535
1552
  </fingerprint>
1536
1553
  <fingerprint pattern="^Microsoft-IIS/7.5$">
1537
1554
  <description>Microsoft IIS 7.5 runs on Windows Server 2008 R2 (and Windows 7)</description>
@@ -1540,10 +1557,12 @@
1540
1557
  <param pos="0" name="service.product" value="IIS"/>
1541
1558
  <param pos="0" name="service.family" value="IIS"/>
1542
1559
  <param pos="0" name="service.version" value="7.5"/>
1560
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:7.5"/>
1543
1561
  <param pos="0" name="os.vendor" value="Microsoft"/>
1544
1562
  <param pos="0" name="os.device" value="General"/>
1545
1563
  <param pos="0" name="os.family" value="Windows"/>
1546
1564
  <param pos="0" name="os.product" value="Windows Server 2008 R2"/>
1565
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
1547
1566
  </fingerprint>
1548
1567
  <fingerprint pattern="^Microsoft-IIS/8.0$">
1549
1568
  <description>Microsoft IIS 8.0 runs on Windows Server 2012 (and Windows 8)</description>
@@ -1552,10 +1571,12 @@
1552
1571
  <param pos="0" name="service.product" value="IIS"/>
1553
1572
  <param pos="0" name="service.family" value="IIS"/>
1554
1573
  <param pos="0" name="service.version" value="8.0"/>
1574
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:8.0"/>
1555
1575
  <param pos="0" name="os.vendor" value="Microsoft"/>
1556
1576
  <param pos="0" name="os.device" value="General"/>
1557
1577
  <param pos="0" name="os.family" value="Windows"/>
1558
1578
  <param pos="0" name="os.product" value="Windows Server 2012"/>
1579
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
1559
1580
  </fingerprint>
1560
1581
  <fingerprint pattern="^Microsoft-IIS/8.5$">
1561
1582
  <description>Microsoft IIS 8.5 runs on Windows Server 2012 R2 (and Windows 8.1)</description>
@@ -1564,10 +1585,12 @@
1564
1585
  <param pos="0" name="service.product" value="IIS"/>
1565
1586
  <param pos="0" name="service.family" value="IIS"/>
1566
1587
  <param pos="0" name="service.version" value="8.5"/>
1588
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:8.5"/>
1567
1589
  <param pos="0" name="os.vendor" value="Microsoft"/>
1568
1590
  <param pos="0" name="os.device" value="General"/>
1569
1591
  <param pos="0" name="os.family" value="Windows"/>
1570
1592
  <param pos="0" name="os.product" value="Windows Server 2012 R2"/>
1593
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
1571
1594
  </fingerprint>
1572
1595
  <fingerprint pattern="^Microsoft-IIS/([\d\.]+)$">
1573
1596
  <description>Microsoft IIS new, unknown version</description>
@@ -1576,6 +1599,7 @@
1576
1599
  <param pos="0" name="service.product" value="IIS"/>
1577
1600
  <param pos="0" name="service.family" value="IIS"/>
1578
1601
  <param pos="1" name="service.version"/>
1602
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
1579
1603
  </fingerprint>
1580
1604
  <fingerprint pattern="^Microsoft-IIS$">
1581
1605
  <description>Microsoft IIS, no version information</description>
@@ -1583,6 +1607,7 @@
1583
1607
  <param pos="0" name="service.vendor" value="Microsoft"/>
1584
1608
  <param pos="0" name="service.product" value="IIS"/>
1585
1609
  <param pos="0" name="service.family" value="IIS"/>
1610
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:-"/>
1586
1611
  <param pos="0" name="os.vendor" value="Microsoft"/>
1587
1612
  <param pos="0" name="os.device" value="General"/>
1588
1613
  <param pos="0" name="os.family" value="Windows"/>
@@ -1601,6 +1626,7 @@
1601
1626
  <param pos="0" name="os.device" value="General"/>
1602
1627
  <param pos="0" name="os.family" value="Windows"/>
1603
1628
  <param pos="0" name="os.product" value="Windows"/>
1629
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1604
1630
  </fingerprint>
1605
1631
  <fingerprint pattern="^Microsoft-WinCE/(\d\.\d+)$">
1606
1632
  <description>Windows CE embedded devices, including HP iPAQ,
@@ -1618,6 +1644,7 @@
1618
1644
  <param pos="0" name="os.family" value="Windows"/>
1619
1645
  <param pos="0" name="os.product" value="Windows CE"/>
1620
1646
  <param pos="1" name="os.version"/>
1647
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_ce:{os.version}"/>
1621
1648
  </fingerprint>
1622
1649
  <fingerprint pattern="^Microsoft-PWS/(\d\.\d+)$">
1623
1650
  <description>Microsoft Personal Web Server runs on Windows 9x, ME, etc.</description>
@@ -1626,10 +1653,12 @@
1626
1653
  <param pos="0" name="service.family" value="PWS"/>
1627
1654
  <param pos="0" name="service.product" value="PWS"/>
1628
1655
  <param pos="1" name="service.version"/>
1656
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:personal_web_server:{service.version}"/>
1629
1657
  <param pos="0" name="os.vendor" value="Microsoft"/>
1630
1658
  <param pos="0" name="os.device" value="General"/>
1631
1659
  <param pos="0" name="os.family" value="Windows"/>
1632
1660
  <param pos="0" name="os.product" value="Windows"/>
1661
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1633
1662
  </fingerprint>
1634
1663
  <fingerprint pattern="^Microsoft-PWS-95/(\d\.\d+)$">
1635
1664
  <description>Microsoft Personal Web Server for Windows 95</description>
@@ -1638,10 +1667,12 @@
1638
1667
  <param pos="0" name="service.family" value="PWS"/>
1639
1668
  <param pos="0" name="service.product" value="PWS"/>
1640
1669
  <param pos="1" name="service.version"/>
1670
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:personal_web_server:{service.version}"/>
1641
1671
  <param pos="0" name="os.vendor" value="Microsoft"/>
1642
1672
  <param pos="0" name="os.device" value="General"/>
1643
1673
  <param pos="0" name="os.family" value="Windows"/>
1644
1674
  <param pos="0" name="os.product" value="Windows 95"/>
1675
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_95:-"/>
1645
1676
  </fingerprint>
1646
1677
  <fingerprint pattern="^Apache[ -]Coyote/(\d\.\d)$">
1647
1678
  <description>HTTP connector for Apache Tomcat to run as a standalone
@@ -1651,6 +1682,7 @@
1651
1682
  <param pos="0" name="service.vendor" value="Apache"/>
1652
1683
  <param pos="0" name="service.product" value="Tomcat"/>
1653
1684
  <param pos="0" name="service.family" value="Tomcat"/>
1685
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:-"/>
1654
1686
  <param pos="0" name="service.component.vendor" value="Apache"/>
1655
1687
  <param pos="0" name="service.component.product" value="Coyote"/>
1656
1688
  <param pos="0" name="service.component.family" value="Coyote"/>
@@ -1662,10 +1694,12 @@
1662
1694
  <param pos="0" name="service.vendor" value="Red Hat"/>
1663
1695
  <param pos="0" name="service.product" value="JBoss EAP"/>
1664
1696
  <param pos="1" name="service.version"/>
1697
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:{service.version}"/>
1665
1698
  <param pos="0" name="service.component.vendor" value="Apache"/>
1666
1699
  <param pos="0" name="service.component.product" value="Tomcat"/>
1667
1700
  <param pos="0" name="service.component.family" value="Tomcat"/>
1668
1701
  <param pos="2" name="service.component.version"/>
1702
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:apache:tomcat:{service.component.version}"/>
1669
1703
  </fingerprint>
1670
1704
  <fingerprint pattern="^Servlet [\d\.]+; Tomcat-(\S+)/JBoss-(\S+) \(build: .*\)$">
1671
1705
  <description>JBoss with embedded tomcat</description>
@@ -1673,10 +1707,12 @@
1673
1707
  <param pos="0" name="service.vendor" value="Red Hat"/>
1674
1708
  <param pos="0" name="service.product" value="JBoss EAP"/>
1675
1709
  <param pos="2" name="service.version"/>
1710
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:{service.version}"/>
1676
1711
  <param pos="0" name="service.component.vendor" value="Apache"/>
1677
1712
  <param pos="0" name="service.component.product" value="Tomcat"/>
1678
1713
  <param pos="0" name="service.component.family" value="Tomcat"/>
1679
1714
  <param pos="1" name="service.component.version"/>
1715
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:apache:tomcat:{service.component.version}"/>
1680
1716
  </fingerprint>
1681
1717
  <fingerprint pattern="^Servlet [\d\.]+; JBoss-([\S]+)(?: \(build.*)?/JBossWeb-(\S+)$">
1682
1718
  <description>JBoss with JBossweb</description>
@@ -1685,6 +1721,7 @@
1685
1721
  <param pos="0" name="service.vendor" value="Red Hat"/>
1686
1722
  <param pos="0" name="service.product" value="JBoss EAP"/>
1687
1723
  <param pos="1" name="service.version"/>
1724
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:{service.version}"/>
1688
1725
  <param pos="0" name="service.component.vendor" value="RedHat"/>
1689
1726
  <param pos="0" name="service.component.product" value="JBossWeb"/>
1690
1727
  <param pos="2" name="service.component.version"/>
@@ -1695,14 +1732,16 @@
1695
1732
  <param pos="0" name="service.vendor" value="Red Hat"/>
1696
1733
  <param pos="0" name="service.product" value="JBoss AS"/>
1697
1734
  <param pos="1" name="service.version"/>
1735
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_wildfly_application_server:{service.version}"/>
1698
1736
  </fingerprint>
1699
- <fingerprint pattern="^JBoss-EAP\/(\d+)$">
1737
+ <fingerprint pattern="^JBoss-EAP\/(\d+)$">
1700
1738
  <description>JBoss EAP</description>
1701
1739
  <example service.version="7">JBoss-EAP/7</example>
1702
1740
  <param pos="0" name="service.vendor" value="Red Hat"/>
1703
1741
  <param pos="0" name="service.family" value="JBoss"/>
1704
1742
  <param pos="0" name="service.product" value="JBoss EAP"/>
1705
1743
  <param pos="1" name="service.version"/>
1744
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:{service.version}"/>
1706
1745
  </fingerprint>
1707
1746
  <fingerprint pattern="^Apache Tomcat/(\d\.[\d.]+)(?:-LE-jdk14)? \(HTTP/1.1 Connector\)$">
1708
1747
  <description>HTTP connector for Apache Tomcat to run as a standalone
@@ -1714,6 +1753,7 @@
1714
1753
  <param pos="0" name="service.family" value="Tomcat"/>
1715
1754
  <param pos="0" name="service.product" value="Tomcat"/>
1716
1755
  <param pos="1" name="service.version"/>
1756
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
1717
1757
  <param pos="0" name="service.component.vendor" value="Apache"/>
1718
1758
  <param pos="0" name="service.component.family" value="Apache Tomcat HTTP Connector"/>
1719
1759
  <param pos="0" name="service.component.product" value="Apache Tomcat HTTP Connector"/>
@@ -1729,6 +1769,7 @@
1729
1769
  <param pos="0" name="service.product" value="Tomcat"/>
1730
1770
  <param pos="0" name="service.family" value="Tomcat"/>
1731
1771
  <param pos="1" name="service.version"/>
1772
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
1732
1773
  <param pos="2" name="tomcat.info"/>
1733
1774
  </fingerprint>
1734
1775
  <fingerprint pattern="^Tomcat/(\S+)$">
@@ -1738,6 +1779,7 @@
1738
1779
  <param pos="0" name="service.product" value="Tomcat"/>
1739
1780
  <param pos="0" name="service.family" value="Tomcat"/>
1740
1781
  <param pos="1" name="service.version"/>
1782
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
1741
1783
  </fingerprint>
1742
1784
  <fingerprint pattern="^PHP/(\S+)$">
1743
1785
  <description>PHP</description>
@@ -1775,6 +1817,7 @@
1775
1817
  <param pos="0" name="service.product" value="HTTPD"/>
1776
1818
  <param pos="0" name="service.family" value="Apache"/>
1777
1819
  <param pos="2" name="service.version"/>
1820
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:{service.version}"/>
1778
1821
  <param pos="3" name="apache.info"/>
1779
1822
  <param pos="0" name="apache.variant" value="Oracle"/>
1780
1823
  <param pos="1" name="apache.variant.version"/>
@@ -1791,6 +1834,7 @@
1791
1834
  <param pos="0" name="service.vendor" value="Apache"/>
1792
1835
  <param pos="0" name="service.product" value="HTTPD"/>
1793
1836
  <param pos="0" name="service.family" value="Apache"/>
1837
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
1794
1838
  <param pos="2" name="apache.info"/>
1795
1839
  <param pos="0" name="apache.variant" value="Oracle"/>
1796
1840
  <param pos="1" name="apache.variant.version"/>
@@ -1802,6 +1846,7 @@
1802
1846
  <param pos="0" name="service.vendor" value="Apache"/>
1803
1847
  <param pos="0" name="service.product" value="HTTPD"/>
1804
1848
  <param pos="0" name="service.family" value="Apache"/>
1849
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
1805
1850
  <param pos="2" name="apache.info"/>
1806
1851
  <param pos="0" name="apache.variant" value="Oracle"/>
1807
1852
  <param pos="1" name="apache.variant.version"/>
@@ -1815,6 +1860,7 @@
1815
1860
  <param pos="0" name="service.product" value="HTTPD"/>
1816
1861
  <param pos="0" name="service.family" value="Apache"/>
1817
1862
  <param pos="1" name="service.version"/>
1863
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:{service.version}"/>
1818
1864
  <param pos="2" name="apache.info"/>
1819
1865
  <param pos="0" name="apache.variant" value="Oracle"/>
1820
1866
  </fingerprint>
@@ -1824,6 +1870,7 @@
1824
1870
  <param pos="0" name="service.vendor" value="Apache"/>
1825
1871
  <param pos="0" name="service.product" value="HTTPD"/>
1826
1872
  <param pos="0" name="service.family" value="Apache"/>
1873
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
1827
1874
  <param pos="0" name="apache.variant" value="Oracle"/>
1828
1875
  </fingerprint>
1829
1876
  <fingerprint pattern="^HP Apache-based Web Server/([012][\d.]*)\s*\(Unix\)\s*(.*)$">
@@ -1834,12 +1881,14 @@
1834
1881
  <param pos="0" name="service.product" value="HTTPD"/>
1835
1882
  <param pos="0" name="service.family" value="Apache"/>
1836
1883
  <param pos="1" name="service.version"/>
1884
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:{service.version}"/>
1837
1885
  <param pos="2" name="apache.info"/>
1838
1886
  <param pos="0" name="apache.variant" value="HP-UX"/>
1839
1887
  <param pos="0" name="os.vendor" value="HP"/>
1840
1888
  <param pos="0" name="os.device" value="General"/>
1841
1889
  <param pos="0" name="os.family" value="HP-UX"/>
1842
1890
  <param pos="0" name="os.product" value="HP-UX"/>
1891
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:-"/>
1843
1892
  </fingerprint>
1844
1893
  <fingerprint pattern="^CompaqHTTPServer/([0-9.]*)(?: HP System Management Homepage(?:/.*)?)?$">
1845
1894
  <description>HP/Compaq HTTP Server</description>
@@ -1880,6 +1929,7 @@
1880
1929
  <param pos="0" name="service.vendor" value="HP"/>
1881
1930
  <param pos="0" name="service.family" value="OpenView"/>
1882
1931
  <param pos="0" name="service.product" value="OpenView"/>
1932
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:openview:-"/>
1883
1933
  <param pos="0" name="service.component.vendor" value="HP"/>
1884
1934
  <param pos="0" name="service.component.family" value="OpenView"/>
1885
1935
  <param pos="0" name="service.component.product" value="CODA"/>
@@ -1891,6 +1941,7 @@
1891
1941
  <param pos="0" name="service.vendor" value="HP"/>
1892
1942
  <param pos="0" name="service.family" value="OpenView"/>
1893
1943
  <param pos="0" name="service.product" value="OpenView"/>
1944
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:openview:-"/>
1894
1945
  <param pos="0" name="service.component.vendor" value="HP"/>
1895
1946
  <param pos="0" name="service.component.family" value="OpenView"/>
1896
1947
  <param pos="0" name="service.component.product" value="Reverse Channel Proxy"/>
@@ -1903,6 +1954,7 @@
1903
1954
  <param pos="0" name="service.vendor" value="HP"/>
1904
1955
  <param pos="0" name="service.family" value="OpenView"/>
1905
1956
  <param pos="0" name="service.product" value="OpenView"/>
1957
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:openview:-"/>
1906
1958
  <param pos="0" name="service.component.vendor" value="HP"/>
1907
1959
  <param pos="0" name="service.component.family" value="OpenView"/>
1908
1960
  <param pos="0" name="service.component.product" value="LLBServer"/>
@@ -1915,6 +1967,7 @@
1915
1967
  <param pos="0" name="service.vendor" value="HP"/>
1916
1968
  <param pos="0" name="service.family" value="OpenView"/>
1917
1969
  <param pos="0" name="service.product" value="OpenView"/>
1970
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:openview:-"/>
1918
1971
  <param pos="0" name="service.component.vendor" value="HP"/>
1919
1972
  <param pos="0" name="service.component.family" value="OpenView"/>
1920
1973
  <param pos="0" name="service.component.product" value="Communication Broker"/>
@@ -1926,6 +1979,7 @@
1926
1979
  <param pos="0" name="service.vendor" value="HP"/>
1927
1980
  <param pos="0" name="service.family" value="OpenView"/>
1928
1981
  <param pos="0" name="service.product" value="OpenView"/>
1982
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:openview:-"/>
1929
1983
  <param pos="0" name="service.component.vendor" value="HP"/>
1930
1984
  <param pos="0" name="service.component.family" value="OpenView"/>
1931
1985
  <param pos="0" name="service.component.product" value="Communication Broker"/>
@@ -1947,6 +2001,7 @@
1947
2001
  <param pos="0" name="os.device" value="General"/>
1948
2002
  <param pos="0" name="os.family" value="Windows"/>
1949
2003
  <param pos="0" name="os.product" value="Windows"/>
2004
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1950
2005
  <param pos="0" name="service.vendor" value="RealMedia"/>
1951
2006
  <param pos="0" name="service.product" value="HTTP"/>
1952
2007
  <param pos="0" name="service.family" value="Helix Server"/>
@@ -1969,6 +2024,7 @@
1969
2024
  <param pos="0" name="os.device" value="General"/>
1970
2025
  <param pos="0" name="os.family" value="Windows"/>
1971
2026
  <param pos="0" name="os.product" value="Windows"/>
2027
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1972
2028
  <param pos="0" name="service.vendor" value="Microsoft"/>
1973
2029
  <param pos="0" name="service.product" value="HTTP"/>
1974
2030
  <param pos="0" name="service.family" value="Windows Media Services"/>
@@ -1981,6 +2037,7 @@
1981
2037
  <param pos="0" name="os.device" value="General"/>
1982
2038
  <param pos="0" name="os.family" value="Windows"/>
1983
2039
  <param pos="0" name="os.product" value="Windows"/>
2040
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1984
2041
  <param pos="0" name="service.vendor" value="Microsoft"/>
1985
2042
  <param pos="0" name="service.product" value="HTTP"/>
1986
2043
  <param pos="0" name="service.family" value="Windows Media Services"/>
@@ -1993,6 +2050,7 @@
1993
2050
  <param pos="0" name="os.device" value="General"/>
1994
2051
  <param pos="0" name="os.family" value="Windows"/>
1995
2052
  <param pos="0" name="os.product" value="Windows"/>
2053
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1996
2054
  </fingerprint>
1997
2055
  <fingerprint pattern="^ASP.NET$">
1998
2056
  <description>Something written in ASP.NET</description>
@@ -2002,6 +2060,7 @@
2002
2060
  <param pos="0" name="os.family" value="Windows"/>
2003
2061
  <param pos="0" name="os.product" value="Windows"/>
2004
2062
  <param pos="0" name="os.certainty" value="0.6"/>
2063
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
2005
2064
  </fingerprint>
2006
2065
  <fingerprint pattern="^[Xx]itami$">
2007
2066
  <description>Xitami web server</description>
@@ -2038,6 +2097,7 @@
2038
2097
  <param pos="0" name="service.vendor" value="IBM"/>
2039
2098
  <param pos="0" name="service.product" value="HTTP Server"/>
2040
2099
  <param pos="0" name="service.family" value="HTTP Server"/>
2100
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:http_server:-"/>
2041
2101
  <param pos="0" name="os.certainty" value="0.9"/>
2042
2102
  <param pos="0" name="os.vendor" value="IBM"/>
2043
2103
  <param pos="0" name="os.device" value="General"/>
@@ -2061,6 +2121,7 @@
2061
2121
  <param pos="0" name="service.product" value="HTTPD"/>
2062
2122
  <param pos="0" name="service.family" value="Apache"/>
2063
2123
  <param pos="2" name="service.version"/>
2124
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:{service.version}"/>
2064
2125
  <param pos="3" name="apache.info"/>
2065
2126
  <param pos="0" name="apache.variant" value="IBM"/>
2066
2127
  <param pos="1" name="apache.variant.version"/>
@@ -2072,6 +2133,7 @@
2072
2133
  <param pos="0" name="service.vendor" value="Apache"/>
2073
2134
  <param pos="0" name="service.product" value="HTTPD"/>
2074
2135
  <param pos="0" name="service.family" value="Apache"/>
2136
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
2075
2137
  <param pos="0" name="apache.variant" value="IBM"/>
2076
2138
  <param pos="1" name="apache.variant.version"/>
2077
2139
  </fingerprint>
@@ -2082,6 +2144,7 @@
2082
2144
  <param pos="0" name="service.vendor" value="Apache"/>
2083
2145
  <param pos="0" name="service.product" value="HTTPD"/>
2084
2146
  <param pos="0" name="service.family" value="Apache"/>
2147
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
2085
2148
  <param pos="0" name="apache.variant" value="IBM"/>
2086
2149
  </fingerprint>
2087
2150
  <!--
@@ -2095,6 +2158,7 @@
2095
2158
  <param pos="0" name="service.family" value="Java System Application Server"/>
2096
2159
  <param pos="0" name="service.product" value="Java System Application Server"/>
2097
2160
  <param pos="1" name="service.version"/>
2161
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_application_server:{service.version}"/>
2098
2162
  </fingerprint>
2099
2163
  <fingerprint pattern="^Sun[ -]Java[ -]System[ /]Application[ -]Server Platform Edition( \d\.[\d_]+)?$">
2100
2164
  <description>Sun Java System Application Server (formerly iPlanet Application Server,
@@ -2132,6 +2196,7 @@
2132
2196
  <param pos="0" name="service.family" value="Java System Web Server"/>
2133
2197
  <param pos="0" name="service.product" value="Java System Web Server"/>
2134
2198
  <param pos="1" name="service.version"/>
2199
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_web_server:{service.version}"/>
2135
2200
  </fingerprint>
2136
2201
  <fingerprint pattern="^(?:Sun-Java-System-Web-Server|Sun-ONE-Web-Server)/(?:\d\.[\d_]+)$">
2137
2202
  <description>Sun Java System Web Server (formerly Netscape Enterprise Server, iPlanet Web
@@ -2141,6 +2206,7 @@
2141
2206
  <param pos="0" name="service.vendor" value="Sun"/>
2142
2207
  <param pos="0" name="service.family" value="Java System Web Server"/>
2143
2208
  <param pos="0" name="service.product" value="Java System Web Server"/>
2209
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_web_server:-"/>
2144
2210
  </fingerprint>
2145
2211
  <!--
2146
2212
  Netscape/Sun's Web Proxy Server
@@ -2164,6 +2230,7 @@
2164
2230
  <param pos="0" name="service.family" value="Java System Web Proxy Server"/>
2165
2231
  <param pos="0" name="service.product" value="Java System Web Proxy Server"/>
2166
2232
  <param pos="1" name="service.version"/>
2233
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_web_proxy_server:{service.version}"/>
2167
2234
  </fingerprint>
2168
2235
  <fingerprint pattern="^Sun-ONE-Web-Proxy-Server/(.*)$">
2169
2236
  <description>Sun ONE WebProxy Server (formerly iPlanet WebProxy Server,
@@ -2173,6 +2240,7 @@
2173
2240
  <param pos="0" name="service.family" value="Java System Web Proxy Server"/>
2174
2241
  <param pos="0" name="service.product" value="Java System Web Proxy Server"/>
2175
2242
  <param pos="1" name="service.version"/>
2243
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_web_proxy_server:{service.version}"/>
2176
2244
  </fingerprint>
2177
2245
  <fingerprint pattern="^Sun-Java-System-Web-Proxy-Server/([^.]+\.[^.]+\.[^.]+)$">
2178
2246
  <description>Sun Java System Web Proxy Server (formerly iPlanet WebProxy Server,
@@ -2182,6 +2250,7 @@
2182
2250
  <param pos="0" name="service.family" value="Java System Web Proxy Server"/>
2183
2251
  <param pos="0" name="service.product" value="Java System Web Proxy Server"/>
2184
2252
  <param pos="1" name="service.version"/>
2253
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_web_proxy_server:{service.version}"/>
2185
2254
  </fingerprint>
2186
2255
  <fingerprint pattern="^Sun-Java-System-Web-Proxy-Server/(?:4\.\d+)$">
2187
2256
  <description>Sun Java System Web Proxy Server (formerly iPlanet WebProxy Server,
@@ -2190,6 +2259,7 @@
2190
2259
  <param pos="0" name="service.vendor" value="Sun"/>
2191
2260
  <param pos="0" name="service.family" value="Java System Web Proxy Server"/>
2192
2261
  <param pos="0" name="service.product" value="Java System Web Proxy Server"/>
2262
+ <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_web_proxy_server:-"/>
2193
2263
  </fingerprint>
2194
2264
  <fingerprint pattern="^Sun-ILOM-Web-Server/(?:\d\.[\d._]+)$">
2195
2265
  <description>Sun Integrated Lights Out Manager (ILOM) usually
@@ -2211,6 +2281,7 @@
2211
2281
  <param pos="0" name="service.vendor" value="HP"/>
2212
2282
  <param pos="0" name="service.product" value="iLO"/>
2213
2283
  <param pos="0" name="service.family" value="iLO"/>
2284
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:integrated_lights_out:-"/>
2214
2285
  <param pos="0" name="hw.vendor" value="HP"/>
2215
2286
  <param pos="0" name="os.vendor" value="HP"/>
2216
2287
  <param pos="0" name="os.product" value="iLO"/>
@@ -2231,6 +2302,7 @@
2231
2302
  <param pos="0" name="service.product" value="Jetty"/>
2232
2303
  <param pos="0" name="service.family" value="Jetty"/>
2233
2304
  <param pos="1" name="service.version"/>
2305
+ <param pos="0" name="service.cpe23" value="cpe:/a:mortbay:jetty:{service.version}"/>
2234
2306
  <param pos="2" name="jetty.info"/>
2235
2307
  </fingerprint>
2236
2308
  <!-- Catch-all for Jetty versions using the Jetty/version format. -->
@@ -2241,6 +2313,7 @@
2241
2313
  <param pos="0" name="service.product" value="Jetty"/>
2242
2314
  <param pos="0" name="service.family" value="Jetty"/>
2243
2315
  <param pos="1" name="service.version"/>
2316
+ <param pos="0" name="service.cpe23" value="cpe:/a:mortbay:jetty:{service.version}"/>
2244
2317
  </fingerprint>
2245
2318
  <fingerprint pattern="^Jetty\((\S+)\)$">
2246
2319
  <description>Mort Bay Jetty</description>
@@ -2249,6 +2322,7 @@
2249
2322
  <param pos="0" name="service.product" value="Jetty"/>
2250
2323
  <param pos="0" name="service.family" value="Jetty"/>
2251
2324
  <param pos="1" name="service.version"/>
2325
+ <param pos="0" name="service.cpe23" value="cpe:/a:mortbay:jetty:{service.version}"/>
2252
2326
  </fingerprint>
2253
2327
  <fingerprint pattern="^[Ss]quid/(\d+\.[\w.]+)$">
2254
2328
  <description>Squid Web </description>
@@ -2296,6 +2370,7 @@
2296
2370
  <param pos="0" name="service.family" value="nginx"/>
2297
2371
  <param pos="0" name="service.vendor" value="nginx"/>
2298
2372
  <param pos="1" name="service.version"/>
2373
+ <param pos="0" name="service.cpe23" value="cpe:/a:nginx:nginx:{service.version}"/>
2299
2374
  </fingerprint>
2300
2375
  <fingerprint pattern="^nginx$">
2301
2376
  <description>nginx without version info</description>
@@ -2303,6 +2378,7 @@
2303
2378
  <param pos="0" name="service.product" value="nginx"/>
2304
2379
  <param pos="0" name="service.family" value="nginx"/>
2305
2380
  <param pos="0" name="service.vendor" value="nginx"/>
2381
+ <param pos="0" name="service.cpe23" value="cpe:/a:nginx:nginx:-"/>
2306
2382
  </fingerprint>
2307
2383
  <fingerprint pattern="^Lotus(?:-Domino)?(?:/|/0|/Release)?$">
2308
2384
  <description>IBM Lotus Notes/Domino with no useful version info</description>
@@ -2313,6 +2389,7 @@
2313
2389
  <param pos="0" name="service.vendor" value="IBM"/>
2314
2390
  <param pos="0" name="service.product" value="Lotus Domino"/>
2315
2391
  <param pos="0" name="service.family" value="Lotus Domino"/>
2392
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_domino:-"/>
2316
2393
  </fingerprint>
2317
2394
  <fingerprint pattern="^Lotus(?:-Domino)?/(?:Release-?)?([4-7][\d.]+)\s*(?:.*)$">
2318
2395
  <description>IBM Lotus Notes/Domino with version info</description>
@@ -2322,6 +2399,7 @@
2322
2399
  <param pos="0" name="service.product" value="Lotus Domino"/>
2323
2400
  <param pos="0" name="service.family" value="Lotus Domino"/>
2324
2401
  <param pos="1" name="service.version"/>
2402
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_domino:{service.version}"/>
2325
2403
  </fingerprint>
2326
2404
  <fingerprint pattern="^WebLogic (?:WebLogic )?Server (\d+\.\d+(?:\s+SP\d+)?)\s+.*$">
2327
2405
  <description>BEA WebLogic</description>
@@ -2332,6 +2410,7 @@
2332
2410
  <param pos="0" name="service.product" value="WebLogic"/>
2333
2411
  <param pos="0" name="service.family" value="WebLogic"/>
2334
2412
  <param pos="1" name="service.version"/>
2413
+ <param pos="0" name="service.cpe23" value="cpe:/a:bea:weblogic_server:{service.version}"/>
2335
2414
  </fingerprint>
2336
2415
  <fingerprint pattern="^WebSphere Application Server/(\d+\.\d+)$">
2337
2416
  <description>IBM WebSphere</description>
@@ -2351,6 +2430,7 @@
2351
2430
  <param pos="0" name="service.product" value="Resin"/>
2352
2431
  <param pos="0" name="service.family" value="Resin"/>
2353
2432
  <param pos="1" name="service.version"/>
2433
+ <param pos="0" name="service.cpe23" value="cpe:/a:caucho:resin:{service.version}"/>
2354
2434
  </fingerprint>
2355
2435
  <fingerprint pattern="^Ipswitch-IMail/(\d\.\d+)$">
2356
2436
  <description>Ipswitch IMail Server</description>
@@ -2361,10 +2441,12 @@
2361
2441
  <param pos="0" name="service.product" value="IMail Server"/>
2362
2442
  <param pos="0" name="service.family" value="IMail Server"/>
2363
2443
  <param pos="1" name="service.version"/>
2444
+ <param pos="0" name="service.cpe23" value="cpe:/a:ipswitch:imail_server:{service.version}"/>
2364
2445
  <param pos="0" name="os.vendor" value="Microsoft"/>
2365
2446
  <param pos="0" name="os.device" value="General"/>
2366
2447
  <param pos="0" name="os.family" value="Windows"/>
2367
2448
  <param pos="0" name="os.product" value="Windows"/>
2449
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
2368
2450
  </fingerprint>
2369
2451
  <fingerprint pattern="^Abyss/(\d\.[\d.]+)-X1-Win32 AbyssLib/(?:\d\.[\d.]+)$">
2370
2452
  <description>Aprelium Technologies Abyss Web Server X1
@@ -2379,6 +2461,7 @@
2379
2461
  <param pos="0" name="os.device" value="General"/>
2380
2462
  <param pos="0" name="os.family" value="Windows"/>
2381
2463
  <param pos="0" name="os.product" value="Windows"/>
2464
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
2382
2465
  </fingerprint>
2383
2466
  <fingerprint pattern="^Abyss/(\d\.[\d.]+)-X2-Win32 AbyssLib/(?:\d\.[\d.]+)$">
2384
2467
  <description>Aprelium Technologies Abyss Web Server X2
@@ -2391,6 +2474,7 @@
2391
2474
  <param pos="0" name="os.device" value="General"/>
2392
2475
  <param pos="0" name="os.family" value="Windows"/>
2393
2476
  <param pos="0" name="os.product" value="Windows"/>
2477
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
2394
2478
  </fingerprint>
2395
2479
  <fingerprint pattern="^Microsoft (Commerce Server\s*(?:2002|2007)?, (?:Enterprise|Standard|Evaluation|Developer) Edition)$">
2396
2480
  <description>Microsoft Commerce Server</description>
@@ -2401,6 +2485,7 @@
2401
2485
  <param pos="0" name="os.device" value="General"/>
2402
2486
  <param pos="0" name="os.family" value="Windows"/>
2403
2487
  <param pos="0" name="os.product" value="Windows"/>
2488
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
2404
2489
  </fingerprint>
2405
2490
  <fingerprint pattern="^NetWare-Enterprise-Web-Server/(\d+\.\d+)$">
2406
2491
  <description>NetWare Enterprise Web Server (runs on NetWare 5.1)</description>
@@ -2408,12 +2493,14 @@
2408
2493
  <param pos="0" name="service.product" value="NetWare Enterprise Web Server"/>
2409
2494
  <param pos="0" name="service.family" value="NetWare Enterprise Web Server"/>
2410
2495
  <param pos="1" name="service.version"/>
2496
+ <param pos="0" name="service.cpe23" value="cpe:/a:novell:netware_enterprise_web_server:{service.version}"/>
2411
2497
  <param pos="0" name="os.certainty" value="0.9"/>
2412
2498
  <param pos="0" name="os.vendor" value="Novell"/>
2413
2499
  <param pos="0" name="os.device" value="General"/>
2414
2500
  <param pos="0" name="os.family" value="NetWare"/>
2415
2501
  <param pos="0" name="os.product" value="NetWare"/>
2416
2502
  <param pos="1" name="os.version"/>
2503
+ <param pos="0" name="os.cpe23" value="cpe:/o:novell:netware:{os.version}"/>
2417
2504
  </fingerprint>
2418
2505
  <fingerprint pattern="^NetWare HTTP Stack$">
2419
2506
  <description>NetWare HTTP stack (runs on 6.0 and 6.5)</description>
@@ -2424,6 +2511,7 @@
2424
2511
  <param pos="0" name="os.device" value="General"/>
2425
2512
  <param pos="0" name="os.family" value="NetWare"/>
2426
2513
  <param pos="0" name="os.product" value="NetWare"/>
2514
+ <param pos="0" name="os.cpe23" value="cpe:/o:novell:netware:-"/>
2427
2515
  </fingerprint>
2428
2516
  <fingerprint pattern="^Novell-HTTP-Server/3.1R1$">
2429
2517
  <description>NetWare HTTP Server (runs on NetWare 4.11)</description>
@@ -2437,6 +2525,7 @@
2437
2525
  <param pos="0" name="os.family" value="NetWare"/>
2438
2526
  <param pos="0" name="os.product" value="NetWare"/>
2439
2527
  <param pos="0" name="os.version" value="4.11"/>
2528
+ <param pos="0" name="os.cpe23" value="cpe:/o:novell:netware:4.11"/>
2440
2529
  </fingerprint>
2441
2530
  <fingerprint pattern="^Novell-HTTP-Server/2.51R1$">
2442
2531
  <description>NetWare HTTP Server (runs on NetWare 4.1)</description>
@@ -2450,6 +2539,7 @@
2450
2539
  <param pos="0" name="os.family" value="NetWare"/>
2451
2540
  <param pos="0" name="os.product" value="NetWare"/>
2452
2541
  <param pos="0" name="os.version" value="4.1"/>
2542
+ <param pos="0" name="os.cpe23" value="cpe:/o:novell:netware:4.1"/>
2453
2543
  </fingerprint>
2454
2544
  <fingerprint pattern="^Netscape-FastTrack/(\d+\.[\w\s.]+)$">
2455
2545
  <description>Netscape FastTrack Server</description>
@@ -2457,6 +2547,7 @@
2457
2547
  <param pos="0" name="service.product" value="FastTrack Server"/>
2458
2548
  <param pos="0" name="service.family" value="FastTrack Server"/>
2459
2549
  <param pos="1" name="service.version"/>
2550
+ <param pos="0" name="service.cpe23" value="cpe:/a:netscape:fasttrack_server:{service.version}"/>
2460
2551
  </fingerprint>
2461
2552
  <fingerprint pattern="^Netscape-Commerce/(\d+\.[\w\s.]+)$">
2462
2553
  <description>Netscape Commerce Server</description>
@@ -2464,6 +2555,7 @@
2464
2555
  <param pos="0" name="service.product" value="Commerce Server"/>
2465
2556
  <param pos="0" name="service.family" value="Commerce Server"/>
2466
2557
  <param pos="1" name="service.version"/>
2558
+ <param pos="0" name="service.cpe23" value="cpe:/a:netscape:commerce_server:{service.version}"/>
2467
2559
  </fingerprint>
2468
2560
  <!--
2469
2561
  TODO
@@ -2524,6 +2616,7 @@
2524
2616
  <param pos="0" name="os.product" value="Data ONTAP"/>
2525
2617
  <param pos="0" name="os.device" value="File server"/>
2526
2618
  <param pos="1" name="os.version"/>
2619
+ <param pos="0" name="os.cpe23" value="cpe:/o:netapp:data_ontap:{os.version}"/>
2527
2620
  </fingerprint>
2528
2621
  <fingerprint pattern="^BlueCoat-Security-Appliance$">
2529
2622
  <description>Blue Coat security appliance</description>
@@ -2535,13 +2628,10 @@
2535
2628
  </fingerprint>
2536
2629
  <fingerprint pattern="^(?:BigIP|BIG-IP)$">
2537
2630
  <description>F5 BIG-IP</description>
2538
- <param pos="0" name="service.vendor" value="F5 Labs"/>
2539
- <param pos="0" name="service.product" value="BIG-IP"/>
2631
+ <param pos="0" name="service.vendor" value="F5"/>
2632
+ <param pos="0" name="service.product" value="BIG-IP LTM"/>
2540
2633
  <param pos="0" name="service.family" value="BIG-IP"/>
2541
- <param pos="0" name="os.vendor" value="F5 Labs"/>
2542
- <param pos="0" name="os.device" value="Load balancer"/>
2543
- <param pos="0" name="os.family" value="BIG-IP"/>
2544
- <param pos="0" name="os.product" value="BIG-IP"/>
2634
+ <param pos="0" name="service.cpe23" value="cpe:/a:f5:big-ip_local_traffic_manager:-"/>
2545
2635
  </fingerprint>
2546
2636
  <fingerprint pattern="^Foundry Networks(?:/(\d+\.\d+))?$">
2547
2637
  <description>Foundry Networks device (though not sure which)</description>
@@ -2631,10 +2721,12 @@
2631
2721
  <param pos="0" name="service.vendor" value="Cisco"/>
2632
2722
  <param pos="0" name="service.family" value="IOS"/>
2633
2723
  <param pos="0" name="service.product" value="IOS"/>
2724
+ <param pos="0" name="service.cpe23" value="cpe:/a:cisco:ios:-"/>
2634
2725
  <param pos="0" name="os.vendor" value="Cisco"/>
2635
2726
  <param pos="0" name="os.family" value="IOS"/>
2636
2727
  <param pos="0" name="os.product" value="IOS"/>
2637
2728
  <param pos="0" name="os.certainty" value="0.8"/>
2729
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:-"/>
2638
2730
  </fingerprint>
2639
2731
  <fingerprint pattern="^cisco-IOS/([^\s]+) HTTP-server/.*$">
2640
2732
  <description>Cisco IOS with version information</description>
@@ -2642,10 +2734,12 @@
2642
2734
  <param pos="0" name="service.vendor" value="Cisco"/>
2643
2735
  <param pos="0" name="service.family" value="IOS"/>
2644
2736
  <param pos="0" name="service.product" value="IOS"/>
2737
+ <param pos="0" name="service.cpe23" value="cpe:/a:cisco:ios:-"/>
2645
2738
  <param pos="0" name="os.vendor" value="Cisco"/>
2646
2739
  <param pos="0" name="os.family" value="IOS"/>
2647
2740
  <param pos="0" name="os.product" value="IOS"/>
2648
2741
  <param pos="1" name="os.version"/>
2742
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:{os.version}"/>
2649
2743
  </fingerprint>
2650
2744
  <fingerprint pattern="^Cisco AWARE (.*)$">
2651
2745
  <description>Cisco ASA</description>
@@ -2666,12 +2760,14 @@
2666
2760
  <param pos="0" name="os.vendor" value="Microsoft"/>
2667
2761
  <param pos="0" name="os.family" value="Windows"/>
2668
2762
  <param pos="0" name="os.product" value="Windows"/>
2763
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
2669
2764
  </fingerprint>
2670
2765
  <fingerprint pattern="^Agent-ListenServer-HttpSvr/.*$">
2671
2766
  <description>McAfee ePolicy Orchestrator</description>
2672
2767
  <param pos="0" name="service.vendor" value="McAfee"/>
2673
2768
  <param pos="0" name="service.product" value="ePolicy Orchestrator"/>
2674
2769
  <param pos="0" name="service.family" value="ePolicy Orchestrator"/>
2770
+ <param pos="0" name="service.cpe23" value="cpe:/a:mcafee:epolicy_orchestrator:-"/>
2675
2771
  </fingerprint>
2676
2772
  <fingerprint pattern="^EWS-NIC\d/(\S+)$">
2677
2773
  <description>Xerox Embedded Web Server (EWS)</description>
@@ -2695,12 +2791,14 @@
2695
2791
  <param pos="0" name="os.vendor" value="Microsoft"/>
2696
2792
  <param pos="0" name="os.family" value="Windows"/>
2697
2793
  <param pos="0" name="os.product" value="Windows"/>
2794
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
2698
2795
  </fingerprint>
2699
2796
  <fingerprint pattern="^JRun Web Server$">
2700
2797
  <description>Macromedia (formerly Allaire) JRun</description>
2701
2798
  <param pos="0" name="service.vendor" value="Macromedia"/>
2702
2799
  <param pos="0" name="service.family" value="JRun"/>
2703
2800
  <param pos="0" name="service.product" value="JRun"/>
2801
+ <param pos="0" name="service.cpe23" value="cpe:/a:macromedia:jrun:-"/>
2704
2802
  </fingerprint>
2705
2803
  <fingerprint pattern="^(?:Raptor )?Simple, Secure Web Server ([\d.]+)$">
2706
2804
  <description>Symantec Raptor Firewall</description>
@@ -2727,6 +2825,7 @@
2727
2825
  <param pos="0" name="os.vendor" value="Apple"/>
2728
2826
  <param pos="0" name="os.family" value="Mac OS X"/>
2729
2827
  <param pos="0" name="os.product" value="Mac OS X"/>
2828
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:-"/>
2730
2829
  </fingerprint>
2731
2830
  <fingerprint pattern="^servermgrd$">
2732
2831
  <description>Mac OS X Server administrative daemon</description>
@@ -2734,6 +2833,7 @@
2734
2833
  <param pos="0" name="os.vendor" value="Apple"/>
2735
2834
  <param pos="0" name="os.family" value="Mac OS X"/>
2736
2835
  <param pos="0" name="os.product" value="Mac OS X"/>
2836
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:-"/>
2737
2837
  </fingerprint>
2738
2838
  <fingerprint pattern="^(RMC Webserver|RAC_ONE_HTTP) (\d\.\d)$">
2739
2839
  <description>Dell Remote Access Controller</description>
@@ -2757,6 +2857,7 @@
2757
2857
  <param pos="0" name="service.vendor" value="IBM"/>
2758
2858
  <param pos="0" name="service.family" value="Tivoli"/>
2759
2859
  <param pos="0" name="service.product" value="Tivoli Storage Manager"/>
2860
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:tivoli_storage_manager:-"/>
2760
2861
  </fingerprint>
2761
2862
  <fingerprint pattern="^D-Link MiniAVServer$">
2762
2863
  <description>D-Link embedded web server for web cams</description>
@@ -2779,6 +2880,7 @@
2779
2880
  <param pos="0" name="os.vendor" value="Linux"/>
2780
2881
  <param pos="0" name="os.family" value="Linux"/>
2781
2882
  <param pos="0" name="os.product" value="Linux"/>
2883
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:-"/>
2782
2884
  </fingerprint>
2783
2885
  <fingerprint pattern="^RealVNC/(?:\S+)$">
2784
2886
  <description>RealVNC built-in webserver</description>
@@ -2814,12 +2916,14 @@
2814
2916
  <example>NSC/0.6.4 (JVM)</example>
2815
2917
  <param pos="0" name="service.vendor" value="Rapid7"/>
2816
2918
  <param pos="0" name="service.product" value="Nexpose"/>
2919
+ <param pos="0" name="service.cpe23" value="cpe:/a:rapid7:nexpose:-"/>
2817
2920
  </fingerprint>
2818
2921
  <fingerprint pattern="^Security Console$">
2819
2922
  <description>Rapid7 Nexpose Security Console</description>
2820
2923
  <example>Security Console</example>
2821
2924
  <param pos="0" name="service.vendor" value="Rapid7"/>
2822
2925
  <param pos="0" name="service.product" value="Nexpose"/>
2926
+ <param pos="0" name="service.cpe23" value="cpe:/a:rapid7:nexpose:-"/>
2823
2927
  </fingerprint>
2824
2928
  <fingerprint pattern="^Polycom SoundPoint IP Telephone HTTPd$">
2825
2929
  <description>Polycom Soundpoint IP Telephone</description>
@@ -2898,6 +3002,7 @@
2898
3002
  <param pos="0" name="service.product" value="CherryPy"/>
2899
3003
  <param pos="0" name="service.family" value="CherryPy"/>
2900
3004
  <param pos="1" name="service.version"/>
3005
+ <param pos="0" name="service.cpe23" value="cpe:/a:cherrypy:cherrypy:{service.version}"/>
2901
3006
  </fingerprint>
2902
3007
  <fingerprint pattern="^TornadoServer/((?:\d+\.)*\d+)$" flags="REG_ICASE">
2903
3008
  <description>Tornado Python web framework and asynchronous networking library.</description>
@@ -2926,6 +3031,7 @@
2926
3031
  <param pos="0" name="service.family" value="Apache"/>
2927
3032
  <param pos="0" name="apache.variant" value="HP Web Jetadmin"/>
2928
3033
  <param pos="1" name="service.version"/>
3034
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:{service.version}"/>
2929
3035
  <param pos="2" name="apache.info"/>
2930
3036
  </fingerprint>
2931
3037
  <fingerprint pattern="^HP Web Jetadmin ([\d\.]+)(?: \([^\)]+\))?$">
@@ -2935,6 +3041,7 @@
2935
3041
  <param pos="0" name="service.vendor" value="HP"/>
2936
3042
  <param pos="0" name="service.product" value="Web Jetadmin"/>
2937
3043
  <param pos="1" name="service.version"/>
3044
+ <param pos="0" name="service.cpe23" value="cpe:/a:hp:web_jetadmin:{service.version}"/>
2938
3045
  </fingerprint>
2939
3046
  <fingerprint pattern="^Citrix Web PN Server$">
2940
3047
  <description>Citrix Web PN (Program Neighborhood) Server is an HTTP server used by Citrix products</description>
@@ -2968,6 +3075,7 @@
2968
3075
  <param pos="0" name="service.product" value="Appweb"/>
2969
3076
  <param pos="0" name="service.family" value="Appweb"/>
2970
3077
  <param pos="1" name="service.version"/>
3078
+ <param pos="0" name="service.cpe23" value="cpe:/a:embedthis:appweb:{service.version}"/>
2971
3079
  </fingerprint>
2972
3080
  <fingerprint pattern="^Embedthis-http$">
2973
3081
  <description>An embedded web server for hosting dynamic web applications.</description>
@@ -2975,6 +3083,7 @@
2975
3083
  <param pos="0" name="service.vendor" value="Embedthis"/>
2976
3084
  <param pos="0" name="service.product" value="Appweb"/>
2977
3085
  <param pos="0" name="service.family" value="Appweb"/>
3086
+ <param pos="0" name="service.cpe23" value="cpe:/a:embedthis:appweb:-"/>
2978
3087
  </fingerprint>
2979
3088
  <fingerprint pattern="^Avaya CMBE/((?:\d+\.)*\d+)$">
2980
3089
  <description>Web server for Avaya Aura Communication Manager Branch, a SIP-based communications platform.</description>
@@ -3015,6 +3124,7 @@
3015
3124
  <param pos="0" name="service.product" value="CUPS"/>
3016
3125
  <param pos="0" name="service.family" value="CUPS"/>
3017
3126
  <param pos="1" name="service.version"/>
3127
+ <param pos="0" name="service.cpe23" value="cpe:/a:apple:cups:{service.version}"/>
3018
3128
  </fingerprint>
3019
3129
  <fingerprint pattern="^TwistedWeb/((?:\d\.)+\d+)$">
3020
3130
  <description>An HTTP server, HTML templating engind, and HTTP client library from Twisted Labs.</description>
@@ -3049,6 +3159,7 @@
3049
3159
  <param pos="0" name="service.product" value="DSView"/>
3050
3160
  <param pos="0" name="service.family" value="DSView"/>
3051
3161
  <param pos="1" name="service.version"/>
3162
+ <param pos="0" name="service.cpe23" value="cpe:/a:avocent:dsview:{service.version}"/>
3052
3163
  </fingerprint>
3053
3164
  <fingerprint pattern="^Mongrel ((?:\d+\.)*\d+)$">
3054
3165
  <description>Ruby-based web server and HTTP library.</description>
@@ -3122,6 +3233,7 @@
3122
3233
  <param pos="0" name="os.vendor" value="Palo Alto Networks"/>
3123
3234
  <param pos="0" name="os.product" value="PA Firewall"/>
3124
3235
  <param pos="0" name="os.device" value="Firewall"/>
3236
+ <param pos="0" name="os.cpe23" value="cpe:/o:paloaltonetworks:pan-os:-"/>
3125
3237
  </fingerprint>
3126
3238
  <fingerprint pattern="^Ews/((?:\d+\.)*\d+)$">
3127
3239
  <description>IBM Network Printer Manager.</description>
@@ -3263,6 +3375,7 @@
3263
3375
  <param pos="0" name="os.product" value="Mac OS X"/>
3264
3376
  <param pos="0" name="os.device" value="General"/>
3265
3377
  <param pos="0" name="os.version" value="10.3"/>
3378
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.3"/>
3266
3379
  <param pos="0" name="service.product" value="QTSS"/>
3267
3380
  <param pos="1" name="service.version"/>
3268
3381
  </fingerprint>
@@ -3273,6 +3386,7 @@
3273
3386
  <param pos="0" name="os.family" value="Mac OS X"/>
3274
3387
  <param pos="0" name="os.product" value="Mac OS X"/>
3275
3388
  <param pos="0" name="os.device" value="General"/>
3389
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:-"/>
3276
3390
  <param pos="0" name="service.product" value="QTSS"/>
3277
3391
  <param pos="1" name="service.version"/>
3278
3392
  </fingerprint>