recog 2.2.1 → 2.3.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.travis.yml +4 -3
- data/lib/recog/version.rb +1 -1
- data/xml/x509_issuers.xml +134 -0
- data/xml/x509_subjects.xml +952 -0
- metadata +5 -3
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA1:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: e1c998eada64784f6c8b38a44f146aea9176bde1
|
4
|
+
data.tar.gz: f651b55c9550222d5c6e91cdb49df1bbc17cfe65
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 004fc2c3552f9e60eb5c0c94533c27fbf137db37089877440a82104a041356a20c364e88e4ace79baa692a5a7edf6d4941973dd1f3d6edcc0e377008f0af5fb9
|
7
|
+
data.tar.gz: a662695949fb1ff138b845fe04f139f58988fc7f693dd9e86048e05f9a07177ffc70b77036842f04c9c0a2f22c429087760d5b9b83f2b142e32257dda28261ca
|
data/.travis.yml
CHANGED
data/lib/recog/version.rb
CHANGED
@@ -0,0 +1,134 @@
|
|
1
|
+
<?xml version="1.0" encoding="UTF-8"?>
|
2
|
+
<fingerprints matches="x509.issuer" protocol="x509">
|
3
|
+
<!--
|
4
|
+
This fingerprint set matches the Issuer field of x509 certificates. These x509
|
5
|
+
certificates may be sourced from any SSL or TLS service. If a particular system
|
6
|
+
has identical subject and issuer fields, the subject field should be preferred.
|
7
|
+
|
8
|
+
The format of the Issuer field is built from the x509 distinguished names using
|
9
|
+
a specific order. Please see the comments in x509_subjects.xml for details.
|
10
|
+
|
11
|
+
-->
|
12
|
+
<!-- Chromecast and various devices that support the Cast protocol -->
|
13
|
+
<fingerprint pattern="^CN=Chromecast ICA (\d+)\s*\(?([^,\)]*)\)?,OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US$">
|
14
|
+
<description>Google Chromecast</description>
|
15
|
+
<example chromecast.generation="3">CN=Chromecast ICA 3,OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
16
|
+
<example chromecast.generation="4" chromecast.capabilities="Audio">CN=Chromecast ICA 4 (Audio),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
17
|
+
<example chromecast.generation="5" chromecast.capabilities="4K">CN=Chromecast ICA 5 (4K),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
18
|
+
<example chromecast.generation="6" chromecast.capabilities="Audio Assist">CN=Chromecast ICA 6 (Audio Assist),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
19
|
+
<example chromecast.generation="7" chromecast.capabilities="Audio Assist 2">CN=Chromecast ICA 7 (Audio Assist 2),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
20
|
+
<example chromecast.generation="9" chromecast.capabilities="Audio Assist">CN=Chromecast ICA 9 (Audio Assist),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
21
|
+
<example chromecast.generation="11" chromecast.capabilities="Video Assist">CN=Chromecast ICA 11 (Video Assist),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
22
|
+
<example chromecast.generation="12">CN=Chromecast ICA 12,OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
23
|
+
<param pos="0" name="os.vendor" value="Google"/>
|
24
|
+
<param pos="0" name="os.product" value="ChromeOS"/>
|
25
|
+
<param pos="0" name="hw.device" value="Media Server"/>
|
26
|
+
<param pos="0" name="hw.vendor" value="Google"/>
|
27
|
+
<param pos="0" name="hw.product" value="Chromecast"/>
|
28
|
+
<param pos="1" name="chromecast.generation"/>
|
29
|
+
<param pos="2" name="chromecast.capabilities"/>
|
30
|
+
</fingerprint>
|
31
|
+
<fingerprint pattern="^CN=Asus fugu Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US$">
|
32
|
+
<description>ASUS Nexus Player (Android) with Google Cast</description>
|
33
|
+
<example>CN=Asus fugu Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US</example>
|
34
|
+
<param pos="0" name="os.vendor" value="Google"/>
|
35
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
|
36
|
+
<param pos="0" name="os.family" value="Linux"/>
|
37
|
+
<param pos="0" name="os.product" value="Android"/>
|
38
|
+
<param pos="0" name="hw.device" value="Media Server"/>
|
39
|
+
<param pos="0" name="hw.vendor" value="ASUS"/>
|
40
|
+
<param pos="0" name="hw.product" value="Nexus Player"/>
|
41
|
+
</fingerprint>
|
42
|
+
<fingerprint pattern="^CN=Sony amai Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US$">
|
43
|
+
<description>Sony SmartTV (Android) with Google Cast</description>
|
44
|
+
<example>CN=Sony amai Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US</example>
|
45
|
+
<param pos="0" name="os.vendor" value="Google"/>
|
46
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
|
47
|
+
<param pos="0" name="os.family" value="Linux"/>
|
48
|
+
<param pos="0" name="os.product" value="Android"/>
|
49
|
+
<param pos="0" name="hw.device" value="Smart TV"/>
|
50
|
+
<param pos="0" name="hw.vendor" value="Sony"/>
|
51
|
+
</fingerprint>
|
52
|
+
<fingerprint pattern="^CN=Cast TV ICA \(Vizio\),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US$">
|
53
|
+
<description>Vizio SmartTV (Android) with Google Cast</description>
|
54
|
+
<example>CN=Cast TV ICA (Vizio),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
55
|
+
<param pos="0" name="os.vendor" value="Google"/>
|
56
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
|
57
|
+
<param pos="0" name="os.family" value="Linux"/>
|
58
|
+
<param pos="0" name="os.product" value="Android"/>
|
59
|
+
<param pos="0" name="hw.device" value="Smart TV"/>
|
60
|
+
<param pos="0" name="hw.vendor" value="Vizio"/>
|
61
|
+
</fingerprint>
|
62
|
+
<fingerprint pattern="^CN=NVidia Shield Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US$">
|
63
|
+
<description>NVIDIA SHIELD (Android) with Google Cast</description>
|
64
|
+
<example>CN=NVidia Shield Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US</example>
|
65
|
+
<param pos="0" name="os.vendor" value="Google"/>
|
66
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
|
67
|
+
<param pos="0" name="os.family" value="Linux"/>
|
68
|
+
<param pos="0" name="os.product" value="Android"/>
|
69
|
+
<param pos="0" name="hw.device" value="Tablet"/>
|
70
|
+
<param pos="0" name="hw.vendor" value="NVIDIA"/>
|
71
|
+
<param pos="0" name="hw.product" value="SHIELD"/>
|
72
|
+
</fingerprint>
|
73
|
+
<fingerprint pattern="^CN=NVidia Darcy NVidia Tegra K1-Denver Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US$">
|
74
|
+
<description>NVIDIA SHIELD (Android) with Google Cast (Darcy)</description>
|
75
|
+
<example>CN=NVidia Darcy NVidia Tegra K1-Denver Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US</example>
|
76
|
+
<param pos="0" name="os.vendor" value="Google"/>
|
77
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
|
78
|
+
<param pos="0" name="os.family" value="Linux"/>
|
79
|
+
<param pos="0" name="os.product" value="Android"/>
|
80
|
+
<param pos="0" name="hw.device" value="Tablet"/>
|
81
|
+
<param pos="0" name="hw.vendor" value="NVIDIA"/>
|
82
|
+
<param pos="0" name="hw.product" value="SHIELD"/>
|
83
|
+
</fingerprint>
|
84
|
+
<!-- End of Chromecast -->
|
85
|
+
<fingerprint pattern="^CN=Yealink Equipment Issuing CA,OU=yealink\.com,O=Yealink Network Technology Co\.\\,Ltd.,L=Xiamen,ST=Fujian,C=CN$">
|
86
|
+
<description>Yealink VoIP Phone</description>
|
87
|
+
<example>CN=Yealink Equipment Issuing CA,OU=yealink.com,O=Yealink Network Technology Co.\,Ltd.,L=Xiamen,ST=Fujian,C=CN</example>
|
88
|
+
<param pos="0" name="os.vendor" value="Yealink"/>
|
89
|
+
<param pos="0" name="os.family" value="Linux"/>
|
90
|
+
<param pos="0" name="os.product" value="Linux"/>
|
91
|
+
<param pos="0" name="hw.device" value="IP Phone"/>
|
92
|
+
<param pos="0" name="hw.vendor" value="Yealink"/>
|
93
|
+
</fingerprint>
|
94
|
+
<fingerprint pattern="^CN=[a-zA-Z0-9]+,OU=Internally Generated Certificate,O=American Power Conversion Corp,L=Default Locality,ST=Default State,C=US$">
|
95
|
+
<description>APC UPS</description>
|
96
|
+
<example>CN=ZA1117619249,OU=Internally Generated Certificate,O=American Power Conversion Corp,L=Default Locality,ST=Default State,C=US</example>
|
97
|
+
<param pos="0" name="hw.device" value="Power Device"/>
|
98
|
+
<param pos="0" name="hw.vendor" value="APC"/>
|
99
|
+
</fingerprint>
|
100
|
+
<fingerprint pattern="^CN=Temporary CA [a-fA-F0-9]{8}\-[a-fA-F0-9]{4}\-[a-fA-F0-9]{4}\-[a-fA-F0-9]{4}\-[a-fA-F0-9]{12},OU=Temporary CA">
|
101
|
+
<description>Cisco Video Communication Server</description>
|
102
|
+
<example>CN=Temporary CA 218131fe-8af4-11e7-aa6e-9950d6bbaf74,OU=Temporary CA 218131fe-8af4-11e7-aa6e-9950d6bbaf74,O=Temporary CA 218131fe-8af4-11e7-aa6e-9950d6bbaf74</example>
|
103
|
+
<param pos="0" name="hw.device" value="Video Conference"/>
|
104
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
105
|
+
<param pos="0" name="hw.product" value="TelePresence"/>
|
106
|
+
</fingerprint>
|
107
|
+
<fingerprint pattern="^O=VMware Installer$">
|
108
|
+
<description>VMWare ESXi w/Installer</description>
|
109
|
+
<example>O=VMware Installer</example>
|
110
|
+
<param pos="0" name="os.vendor" value="VMWare"/>
|
111
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:vmware:esxi:-"/>
|
112
|
+
<param pos="0" name="os.product" value="ESXi"/>
|
113
|
+
<param pos="0" name="os.device" value="Hypervisor"/>
|
114
|
+
</fingerprint>
|
115
|
+
<fingerprint pattern="^CN=CA,OU=VMware Engineering,O=vCenter,ST=California,C=US$">
|
116
|
+
<description>VMWare vCenter</description>
|
117
|
+
<example>CN=CA,OU=VMware Engineering,O=vCenter,ST=California,C=US</example>
|
118
|
+
<param pos="0" name="service.vendor" value="VMWare"/>
|
119
|
+
<param pos="0" name="service.product" value="vCenter"/>
|
120
|
+
</fingerprint>
|
121
|
+
<fingerprint pattern="^CN=Default Issuer \(Do not trust\),OU=ISS,O=Hewlett Packard Enterprise,L=Houston,ST=Texas,C=US$">
|
122
|
+
<description>HP iLO</description>
|
123
|
+
<example>CN=Default Issuer (Do not trust),OU=ISS,O=Hewlett Packard Enterprise,L=Houston,ST=Texas,C=US</example>
|
124
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
125
|
+
<param pos="0" name="hw.vendor" value="HP"/>
|
126
|
+
<param pos="0" name="hw.family" value="iLO"/>
|
127
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
|
128
|
+
<param pos="0" name="hw.product" value="iLO"/>
|
129
|
+
<param pos="0" name="os.device" value="Lights Out Management"/>
|
130
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
131
|
+
<param pos="0" name="os.family" value="iLO"/>
|
132
|
+
<param pos="0" name="os.product" value="iLO"/>
|
133
|
+
</fingerprint>
|
134
|
+
</fingerprints>
|
@@ -0,0 +1,952 @@
|
|
1
|
+
<?xml version="1.0" encoding="UTF-8"?>
|
2
|
+
<fingerprints matches="x509.subject" protocol="x509">
|
3
|
+
<!--
|
4
|
+
This fingerprint set matches the Subject field of x509 certificates. These x509
|
5
|
+
certificates may be sourced from any SSL or TLS service. If a particular system
|
6
|
+
has identical subject and issuer fields, the subject field should be preferred.
|
7
|
+
|
8
|
+
The format of the Subject field is built from the x509 distinguished names using
|
9
|
+
a specific order. This order matches the Go implementation at the URL:
|
10
|
+
https://golang.org/src/crypto/x509/pkix/pkix.go#203
|
11
|
+
|
12
|
+
The ToRDNSequence() function builds the string in reverse order:
|
13
|
+
|
14
|
+
func (n Name) ToRDNSequence() (ret RDNSequence) {
|
15
|
+
ret = n.appendRDNs(ret, n.Country, oidCountry)
|
16
|
+
ret = n.appendRDNs(ret, n.Province, oidProvince)
|
17
|
+
ret = n.appendRDNs(ret, n.Locality, oidLocality)
|
18
|
+
ret = n.appendRDNs(ret, n.StreetAddress, oidStreetAddress)
|
19
|
+
ret = n.appendRDNs(ret, n.PostalCode, oidPostalCode)
|
20
|
+
ret = n.appendRDNs(ret, n.Organization, oidOrganization)
|
21
|
+
ret = n.appendRDNs(ret, n.OrganizationalUnit, oidOrganizationalUnit)
|
22
|
+
if len(n.CommonName) > 0 {
|
23
|
+
ret = n.appendRDNs(ret, []string{n.CommonName}, oidCommonName)
|
24
|
+
}
|
25
|
+
if len(n.SerialNumber) > 0 {
|
26
|
+
ret = n.appendRDNs(ret, []string{n.SerialNumber}, oidSerialNumber)
|
27
|
+
}
|
28
|
+
for _, atv := range n.ExtraNames {
|
29
|
+
ret = append(ret, []AttributeTypeAndValue{atv})
|
30
|
+
}
|
31
|
+
|
32
|
+
return ret
|
33
|
+
}
|
34
|
+
|
35
|
+
All names are separated by commas and any commas inside a name are escaped with a
|
36
|
+
single backslash character. See RFC 2253 for additional details on formatting.
|
37
|
+
|
38
|
+
Practically, most Subjects start with the Common Name (CN=) and then step through
|
39
|
+
Organization Unit (OU), Organization (O), and then some level of location, but
|
40
|
+
typically Locality (L) and Country (C). Names are guaranteed to be listed in
|
41
|
+
the order described above, but may start at any point in the list. For example,
|
42
|
+
Subjects may start with a Serial Number (SERIALNUMBER=) or even Extra Names, but
|
43
|
+
these are somewhat rare. Keep this name order in mind when working on these
|
44
|
+
fingerprints.
|
45
|
+
|
46
|
+
The same constraints also apply to the x509 Issuers (x509_issuers.xml).
|
47
|
+
|
48
|
+
-->
|
49
|
+
<fingerprint pattern="^CN=([0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}),OU=([^,]+),O=Araknis Networks \(TM\),L=Charlotte,C=US$">
|
50
|
+
<description>Araknis Networks Router</description>
|
51
|
+
<example host.mac="d4:6a:91:7a:a3:c4" hw.product="AN-300-RT-4L2W">CN=d4:6a:91:7a:a3:c4,OU=AN-300-RT-4L2W,O=Araknis Networks (TM),L=Charlotte,C=US</example>
|
52
|
+
<param pos="0" name="hw.device" value="Router"/>
|
53
|
+
<param pos="0" name="hw.vendor" value="Araknis Networks"/>
|
54
|
+
<param pos="2" name="hw.product"/>
|
55
|
+
<param pos="1" name="host.mac"/>
|
56
|
+
</fingerprint>
|
57
|
+
<fingerprint pattern="^CN=([a-fA-F0-9:]+),OU=([^,]+),O=Cisco-Linksys\\, LLC">
|
58
|
+
<description>Cisco / Linksys Router</description>
|
59
|
+
<example host.mac="00:22:6b:ef:1e:d0" hw.product="RV042">CN=00:22:6b:ef:1e:d0,OU=RV042,O=Cisco-Linksys\, LLC,L=Irvine,C=US</example>
|
60
|
+
<param pos="0" name="hw.device" value="Broadband Router"/>
|
61
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
62
|
+
<param pos="2" name="hw.product"/>
|
63
|
+
<param pos="1" name="host.mac"/>
|
64
|
+
</fingerprint>
|
65
|
+
<fingerprint pattern="^CN=([a-fA-F0-9\:]+),OU=([^,]+),O=Cisco Systems\\, Inc\.">
|
66
|
+
<description>Cisco Post-Linksys Router</description>
|
67
|
+
<example host.mac="74:a2:e6:5c:99:21" hw.product="RV042G">CN=74:a2:e6:5c:99:21,OU=RV042G,O=Cisco Systems\, Inc.,L=Irvine,C=US</example>
|
68
|
+
<example host.mac="4C4E315901D0" hw.product="RV180">CN=4C4E315901D0,OU=RV180,O=Cisco Systems\, Inc.,C=US</example>
|
69
|
+
<param pos="0" name="hw.device" value="Broadband Router"/>
|
70
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
71
|
+
<param pos="2" name="hw.product"/>
|
72
|
+
<param pos="1" name="host.mac"/>
|
73
|
+
</fingerprint>
|
74
|
+
<fingerprint pattern="^SERIALNUMBER=PID:([^ ]+) SN:([^,]+),CN=(?:[a-zA-Z0-9\-]+)-SEP([a-fA-F0-9]{12}),OU=CTG,O=Cisco Systems Inc\.$">
|
75
|
+
<description>Cisco / Linksys Router</description>
|
76
|
+
<example host.mac="B07D47D33A1C" hw.product="CP-8851" cisco.serial_number="FCH1924AHCA">SERIALNUMBER=PID:CP-8851 SN:FCH1924AHCA,CN=CP-8851-SEPB07D47D33A1C,OU=CTG,O=Cisco Systems Inc.</example>
|
77
|
+
<param pos="0" name="hw.device" value="IP Phone"/>
|
78
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
79
|
+
<param pos="1" name="hw.product"/>
|
80
|
+
<param pos="2" name="cisco.serial_number"/>
|
81
|
+
<param pos="3" name="host.mac"/>
|
82
|
+
</fingerprint>
|
83
|
+
<fingerprint pattern="^CN=Cambium WLAN AP,OU=Products,O=Cambium Networks Inc,L=San Jose,ST=CA,C=US$">
|
84
|
+
<description>Cambium Networks WAP</description>
|
85
|
+
<example>CN=Cambium WLAN AP,OU=Products,O=Cambium Networks Inc,L=San Jose,ST=CA,C=US</example>
|
86
|
+
<param pos="0" name="hw.device" value="WAP"/>
|
87
|
+
<param pos="0" name="hw.vendor" value="Cambium Networks"/>
|
88
|
+
<param pos="0" name="hw.product" value="WLAN AP"/>
|
89
|
+
</fingerprint>
|
90
|
+
<fingerprint pattern="^CN=([^,]+),OU=Products,O=Cambium Networks Inc,L=San Jose,ST=CA,C=US$">
|
91
|
+
<description>Cambium Networks Router</description>
|
92
|
+
<example hw.product="R190V">CN=R190V,OU=Products,O=Cambium Networks Inc,L=San Jose,ST=CA,C=US</example>
|
93
|
+
<example hw.product="R200">CN=R200,OU=Products,O=Cambium Networks Inc,L=San Jose,ST=CA,C=US</example>
|
94
|
+
<param pos="0" name="hw.device" value="Router"/>
|
95
|
+
<param pos="0" name="hw.vendor" value="Cambium Networks"/>
|
96
|
+
<param pos="1" name="hw.product"/>
|
97
|
+
</fingerprint>
|
98
|
+
<fingerprint pattern="^CN=Nepenthes Development Team,OU=anv,O=dionaea\.carnivore\.it,C=DE$">
|
99
|
+
<description>Nepenthes honeypot</description>
|
100
|
+
<example>CN=Nepenthes Development Team,OU=anv,O=dionaea.carnivore.it,C=DE</example>
|
101
|
+
<param pos="0" name="service.family" value="Nepenthes"/>
|
102
|
+
<param pos="0" name="service.product" value="Nepenthes"/>
|
103
|
+
</fingerprint>
|
104
|
+
<fingerprint pattern="^CN=IPMI,OU=Software,O=Super Micro Computer,ST=California,C=US$">
|
105
|
+
<description>Super Micro IPMI Controller</description>
|
106
|
+
<example>CN=IPMI,OU=Software,O=Super Micro Computer,ST=California,C=US</example>
|
107
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
108
|
+
<param pos="0" name="hw.vendor" value="Super Micro"/>
|
109
|
+
<param pos="0" name="hw.product" value="IPMI"/>
|
110
|
+
<param pos="0" name="os.vendor" value="Super Micro"/>
|
111
|
+
<param pos="0" name="os.product" value="ATEN Linux"/>
|
112
|
+
</fingerprint>
|
113
|
+
<fingerprint pattern="^CN=iDRACdefault([a-fA-F0-9]{12}),OU=iDRAC Group,O=Dell Inc.,L=Round Rock,C=US$">
|
114
|
+
<description>Dell iDRAC Remote Access Controller w/MAC</description>
|
115
|
+
<example host.mac="0023AEF89AD1">CN=iDRACdefault0023AEF89AD1,OU=iDRAC Group,O=Dell Inc.,L=Round Rock,C=US</example>
|
116
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
117
|
+
<param pos="0" name="hw.vendor" value="Dell"/>
|
118
|
+
<param pos="0" name="hw.product" value="iDRAC"/>
|
119
|
+
<param pos="0" name="os.vendor" value="Dell"/>
|
120
|
+
<param pos="0" name="os.product" value="iDRAC Linux"/>
|
121
|
+
<param pos="1" name="host.mac"/>
|
122
|
+
</fingerprint>
|
123
|
+
<fingerprint pattern="^CN=idrac-([A-Z0-9]{7}),OU=Remote Access Group,O=Dell Inc\.,L=Round Rock,ST=Texas,C=US$">
|
124
|
+
<description>Dell iDRAC Remote Access Controller w/Service Tag</description>
|
125
|
+
<example dell.service_tag="JXJJC02">CN=idrac-JXJJC02,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
126
|
+
<example dell.service_tag="FMDSJH3">CN=idrac-FMDSJH3,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
127
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
128
|
+
<param pos="0" name="hw.vendor" value="Dell"/>
|
129
|
+
<param pos="0" name="hw.product" value="iDRAC"/>
|
130
|
+
<param pos="0" name="os.vendor" value="Dell"/>
|
131
|
+
<param pos="0" name="os.product" value="iDRAC Linux"/>
|
132
|
+
<param pos="1" name="dell.service_tag"/>
|
133
|
+
</fingerprint>
|
134
|
+
<fingerprint pattern="^CN=idrac.*,OU=Remote Access Group,O=Dell Inc\.,L=Round Rock,ST=Texas,C=US$">
|
135
|
+
<description>Dell iDRAC Remote Access Controller w/o Service Tag</description>
|
136
|
+
<example>CN=idrac-SVCTAG,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
137
|
+
<example>CN=idrac-prosit-laks,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
138
|
+
<example>CN=idrac-,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
139
|
+
<example>CN=idrac-SVCTAG,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
140
|
+
<example>CN=idrac,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
141
|
+
<example>CN=idrac,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
142
|
+
<example>CN=idrac-SVCTAG,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
143
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
144
|
+
<param pos="0" name="hw.vendor" value="Dell"/>
|
145
|
+
<param pos="0" name="hw.product" value="iDRAC"/>
|
146
|
+
<param pos="0" name="os.vendor" value="Dell"/>
|
147
|
+
<param pos="0" name="os.product" value="iDRAC Linux"/>
|
148
|
+
</fingerprint>
|
149
|
+
<fingerprint pattern="^CN=(i?DRAC\d+) default certificate,OU=Remote Access Group,O=Dell Inc\.,L=Round Rock,ST=Texas,C=US$">
|
150
|
+
<description>Dell iDRAC Remote Access Controller w/Version</description>
|
151
|
+
<example>CN=iDRAC7 default certificate,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
152
|
+
<example>CN=iDRAC6 default certificate,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
153
|
+
<example>CN=DRAC5 default certificate,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
154
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
155
|
+
<param pos="0" name="hw.vendor" value="Dell"/>
|
156
|
+
<param pos="1" name="hw.product"/>
|
157
|
+
<param pos="0" name="os.vendor" value="Dell"/>
|
158
|
+
<param pos="0" name="os.product" value="iDRAC Linux"/>
|
159
|
+
</fingerprint>
|
160
|
+
<fingerprint pattern="^CN=iDRAC default certificate,OU=Server Firmware Group,O=Dell Inc\.,L=Round Rock,ST=Texas,C=US$">
|
161
|
+
<description>Dell iDRAC Remote Access Controller Default Certificate</description>
|
162
|
+
<example>CN=iDRAC default certificate,OU=Server Firmware Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
163
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
164
|
+
<param pos="0" name="hw.vendor" value="Dell"/>
|
165
|
+
<param pos="0" name="hw.product" value="iDRAC"/>
|
166
|
+
<param pos="0" name="os.vendor" value="Dell"/>
|
167
|
+
<param pos="0" name="os.product" value="iDRAC Linux"/>
|
168
|
+
</fingerprint>
|
169
|
+
<fingerprint pattern="^CN=XCC-([a-zA-Z0-9]+)-([a-zA-Z0-9]+),O=System X,L=RTP,ST=NC,C=US$">
|
170
|
+
<description>Lenovo XCC</description>
|
171
|
+
<example lenovo.machine_type="7X06" lenovo.machine_model="J1005NEX">CN=XCC-7X06-J1005NEX,O=System X,L=RTP,ST=NC,C=US</example>
|
172
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
173
|
+
<param pos="0" name="hw.vendor" value="Lenovo"/>
|
174
|
+
<param pos="0" name="hw.family" value="System X"/>
|
175
|
+
<param pos="0" name="hw.product" value="XCC"/>
|
176
|
+
<param pos="0" name="os.vendor" value="Lenovo"/>
|
177
|
+
<param pos="0" name="os.product" value="XCC Linux"/>
|
178
|
+
<param pos="1" name="lenovo.machine_type"/>
|
179
|
+
<param pos="2" name="lenovo.machine_model"/>
|
180
|
+
</fingerprint>
|
181
|
+
<fingerprint pattern="^CN=([A-Za-z0-9\_\-\.]+),OU=ISS,O=Hewlett-Packard Company,L=Houston,ST=Texas,C=US$">
|
182
|
+
<description>HP iLO</description>
|
183
|
+
<example>CN=SERVER-1231,OU=ISS,O=Hewlett-Packard Company,L=Houston,ST=Texas,C=US</example>
|
184
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
185
|
+
<param pos="0" name="hw.vendor" value="HP"/>
|
186
|
+
<param pos="0" name="hw.family" value="iLO"/>
|
187
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
|
188
|
+
<param pos="0" name="hw.product" value="iLO"/>
|
189
|
+
<param pos="0" name="os.device" value="Lights Out Management"/>
|
190
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
191
|
+
<param pos="0" name="os.family" value="iLO"/>
|
192
|
+
<param pos="0" name="os.product" value="iLO"/>
|
193
|
+
<param pos="1" name="host.name"/>
|
194
|
+
</fingerprint>
|
195
|
+
<fingerprint pattern="^CN=HP Service Processor,OU=UDU Service Tools,O=Hewlett-Packard Development Company\\, L\.P\.\\ ,L=Fremont,ST=California,C=US$">
|
196
|
+
<description>HP iLO</description>
|
197
|
+
<example>CN=HP Service Processor,OU=UDU Service Tools,O=Hewlett-Packard Development Company\, L.P.\ ,L=Fremont,ST=California,C=US</example>
|
198
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
199
|
+
<param pos="0" name="hw.vendor" value="HP"/>
|
200
|
+
<param pos="0" name="hw.family" value="iLO"/>
|
201
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
|
202
|
+
<param pos="0" name="hw.product" value="iLO"/>
|
203
|
+
<param pos="0" name="os.device" value="Lights Out Management"/>
|
204
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
205
|
+
<param pos="0" name="os.family" value="iLO"/>
|
206
|
+
<param pos="0" name="os.product" value="iLO"/>
|
207
|
+
</fingerprint>
|
208
|
+
<fingerprint pattern="^CN=OA\-([a-fA-F0-9]+),OU=Onboard Administrator,">
|
209
|
+
<description>HP iLO (Onboard Administrator)</description>
|
210
|
+
<example>CN=OA-001F296E21A3,OU=Onboard Administrator,O=Corp.,L=Location,ST=N/A,C=US</example>
|
211
|
+
<example>CN=OA-80C16E999999,OU=Onboard Administrator,O=Hewlett-Packard</example>
|
212
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
213
|
+
<param pos="0" name="hw.vendor" value="HP"/>
|
214
|
+
<param pos="0" name="hw.family" value="iLO"/>
|
215
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
|
216
|
+
<param pos="0" name="hw.product" value="iLO"/>
|
217
|
+
<param pos="0" name="os.device" value="Lights Out Management"/>
|
218
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
219
|
+
<param pos="0" name="os.family" value="iLO"/>
|
220
|
+
<param pos="0" name="os.product" value="iLO"/>
|
221
|
+
<param pos="1" name="host.mac"/>
|
222
|
+
</fingerprint>
|
223
|
+
<fingerprint pattern="^CN=([A-Za-z0-9\_\-\.]+),OU=Hewlett Packard Enterprise Network Management Software \(SMH\),O=Hewlett Packard Enterprise,L=Houston,ST=Texas,C=US$">
|
224
|
+
<description>HP iLO</description>
|
225
|
+
<example>CN=bigsrv99,OU=Hewlett Packard Enterprise Network Management Software (SMH),O=Hewlett Packard Enterprise,L=Houston,ST=Texas,C=US</example>
|
226
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
227
|
+
<param pos="0" name="hw.vendor" value="HP"/>
|
228
|
+
<param pos="0" name="hw.family" value="iLO"/>
|
229
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
|
230
|
+
<param pos="0" name="hw.product" value="iLO"/>
|
231
|
+
<param pos="0" name="os.device" value="Lights Out Management"/>
|
232
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
233
|
+
<param pos="0" name="os.family" value="iLO"/>
|
234
|
+
<param pos="0" name="os.product" value="iLO"/>
|
235
|
+
<param pos="1" name="host.name"/>
|
236
|
+
</fingerprint>
|
237
|
+
<fingerprint pattern="^CN=Oracle Integrated Lights Out Manager,O=Oracle America\\, Inc\.,L=Redwood Shores,ST=California,C=US$">
|
238
|
+
<description>Oracle iLO</description>
|
239
|
+
<example>CN=Oracle Integrated Lights Out Manager,O=Oracle America\, Inc.,L=Redwood Shores,ST=California,C=US</example>
|
240
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
241
|
+
<param pos="0" name="hw.vendor" value="Oracle"/>
|
242
|
+
<param pos="0" name="hw.family" value="ILOM"/>
|
243
|
+
<param pos="0" name="hw.product" value="ILOM"/>
|
244
|
+
<param pos="0" name="os.device" value="Lights Out Management"/>
|
245
|
+
<param pos="0" name="os.vendor" value="Oracle"/>
|
246
|
+
<param pos="0" name="os.family" value="ILOM"/>
|
247
|
+
<param pos="0" name="os.product" value="ILOM"/>
|
248
|
+
</fingerprint>
|
249
|
+
<fingerprint pattern="^CN=AMI,OU=Service Processors,O=American Megatrends Inc\.,L=Norcross,ST=Georgia,C=US$">
|
250
|
+
<description>AMI MegaRAC LOM</description>
|
251
|
+
<example>CN=AMI,OU=Service Processors,O=American Megatrends Inc.,L=Norcross,ST=Georgia,C=US</example>
|
252
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
253
|
+
<param pos="0" name="hw.vendor" value="AMI"/>
|
254
|
+
<param pos="0" name="hw.family" value="MegaRAC"/>
|
255
|
+
<param pos="0" name="hw.product" value="MegaRAC"/>
|
256
|
+
<param pos="0" name="os.device" value="Lights Out Management"/>
|
257
|
+
<param pos="0" name="os.vendor" value="AMI"/>
|
258
|
+
<param pos="0" name="os.family" value="MegaRAC"/>
|
259
|
+
<param pos="0" name="os.product" value="MegaRAC"/>
|
260
|
+
</fingerprint>
|
261
|
+
<fingerprint pattern="^CN=avocent.com,OU=AESS,O=Avocent,L=Sunrise,ST=FL,C=US$">
|
262
|
+
<description>Avocent KVM</description>
|
263
|
+
<example>CN=avocent.com,OU=AESS,O=Avocent,L=Sunrise,ST=FL,C=US</example>
|
264
|
+
<param pos="0" name="hw.device" value="KVM"/>
|
265
|
+
<param pos="0" name="hw.vendor" value="Avocent"/>
|
266
|
+
<param pos="0" name="os.device" value="KVM"/>
|
267
|
+
<param pos="0" name="os.vendor" value="Avocent"/>
|
268
|
+
</fingerprint>
|
269
|
+
<fingerprint pattern="^CN=Avocent Mergepoint Unity,O=Avocent Mergepoint Unity,L=Huntsville,ST=Alabama,C=US$">
|
270
|
+
<description>Avocent KVM</description>
|
271
|
+
<example>CN=Avocent Mergepoint Unity,O=Avocent Mergepoint Unity,L=Huntsville,ST=Alabama,C=US</example>
|
272
|
+
<param pos="0" name="hw.device" value="KVM"/>
|
273
|
+
<param pos="0" name="hw.vendor" value="Avocent"/>
|
274
|
+
<param pos="0" name="hw.product" value="Mergepoint"/>
|
275
|
+
<param pos="0" name="os.device" value="KVM"/>
|
276
|
+
<param pos="0" name="os.vendor" value="Avocent"/>
|
277
|
+
<param pos="0" name="os.product" value="Mergepoint"/>
|
278
|
+
</fingerprint>
|
279
|
+
<fingerprint pattern="^CN=HP Jetdirect [a-zA-Z0-9]+,OU=([a-fA-F0-9]{12})\+OU=([a-zA-Z0-9]+),O=Hewlett-Packard Co\.$">
|
280
|
+
<description>HP Jet Direct</description>
|
281
|
+
<example>CN=HP Jetdirect 38831831,OU=2C413883186A+OU=J8028E,O=Hewlett-Packard Co.</example>
|
282
|
+
<example>CN=HP Jetdirect FBFA31E7,OU=8851FBE33ABB+OU=J8016E,O=Hewlett-Packard Co.</example>
|
283
|
+
<param pos="0" name="hw.device" value="Printer"/>
|
284
|
+
<param pos="0" name="hw.vendor" value="HP"/>
|
285
|
+
<param pos="0" name="hw.family" value="JetDirect"/>
|
286
|
+
<param pos="0" name="os.device" value="Printer"/>
|
287
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
288
|
+
<param pos="0" name="os.family" value="JetDirect"/>
|
289
|
+
<param pos="1" name="host.mac"/>
|
290
|
+
<param pos="2" name="hw.product"/>
|
291
|
+
<param pos="2" name="os.product"/>
|
292
|
+
</fingerprint>
|
293
|
+
<fingerprint pattern="^CN=([a-zA-Z0-9\.\-\_]+),OU=HP-IPG,O=HP,L=Vancouver,ST=Washington,C=US$">
|
294
|
+
<description>HP Jet Direct</description>
|
295
|
+
<example host.name="HPD49F21">CN=HPD49F21,OU=HP-IPG,O=HP,L=Vancouver,ST=Washington,C=US</example>
|
296
|
+
<param pos="0" name="hw.device" value="Printer"/>
|
297
|
+
<param pos="0" name="hw.vendor" value="HP"/>
|
298
|
+
<param pos="0" name="hw.family" value="JetDirect"/>
|
299
|
+
<param pos="0" name="os.device" value="Printer"/>
|
300
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
301
|
+
<param pos="0" name="os.family" value="JetDirect"/>
|
302
|
+
<param pos="1" name="host.name"/>
|
303
|
+
</fingerprint>
|
304
|
+
<fingerprint pattern="^CN=(?:Sourcefire3D|firepower|ciscoasa),OU=Intrusion Management System,O=(?:Sourcefire\\, Inc.|Cisco Systems\\, Inc),C=US$">
|
305
|
+
<description>Cisco Firepower</description>
|
306
|
+
<example>CN=firepower,OU=Intrusion Management System,O=Cisco Systems\, Inc,C=US</example>
|
307
|
+
<example>CN=ciscoasa,OU=Intrusion Management System,O=Cisco Systems\, Inc,C=US</example>
|
308
|
+
<example>CN=Sourcefire3D,OU=Intrusion Management System,O=Sourcefire\, Inc.,C=US</example>
|
309
|
+
<param pos="0" name="hw.device" value="IPS"/>
|
310
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
311
|
+
<param pos="0" name="hw.product" value="Firepower"/>
|
312
|
+
<param pos="0" name="os.device" value="IPS"/>
|
313
|
+
<param pos="0" name="os.vendor" value="Cisco"/>
|
314
|
+
<param pos="0" name="os.product" value="Firepower"/>
|
315
|
+
<param pos="0" name="os.family" value="Linux"/>
|
316
|
+
</fingerprint>
|
317
|
+
<fingerprint pattern="^CN=ASA Temporary Self Signed Certificate$">
|
318
|
+
<description>Cisco ASA</description>
|
319
|
+
<example>CN=ASA Temporary Self Signed Certificate</example>
|
320
|
+
<param pos="0" name="hw.device" value="Firewall"/>
|
321
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:cisco:adaptive_security_appliance:-"/>
|
322
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
323
|
+
<param pos="0" name="hw.product" value="Adaptive Security Appliance"/>
|
324
|
+
</fingerprint>
|
325
|
+
<fingerprint pattern="^CN=synology\.com.*,O=Synology Inc\.,L=Taipei.*,C=TW$">
|
326
|
+
<description>Synology NAS</description>
|
327
|
+
<example>CN=synology.com,OU=FTP Team,O=Synology Inc.,L=Taipei,ST=Taiwan,C=TW</example>
|
328
|
+
<example>CN=synology.com,O=Synology Inc.,L=Taipei,C=TW</example>
|
329
|
+
<param pos="0" name="hw.vendor" value="Synology"/>
|
330
|
+
<param pos="0" name="hw.family" value="DiskStation"/>
|
331
|
+
<param pos="0" name="hw.device" value="Storage"/>
|
332
|
+
<param pos="0" name="os.device" value="Storage"/>
|
333
|
+
<param pos="0" name="os.family" value="Linux"/>
|
334
|
+
<param pos="0" name="os.product" value="DSM"/>
|
335
|
+
<param pos="0" name="os.vendor" value="Synology"/>
|
336
|
+
</fingerprint>
|
337
|
+
<fingerprint pattern="^CN=(?:\*\.)?([a-zA-Z0-9\.\_\-]+)\.wd2go\.com">
|
338
|
+
<description>Western Digital WD2GO Devices</description>
|
339
|
+
<example wd2go.device_id="device1133796-01b3e3fa">CN=device1133796-01b3e3fa.wd2go.com,OU=Domain Control Validated+OU=Hosted by Western Digital Corporation+OU=COMODO SSL Unified Communications</example>
|
340
|
+
<example wd2go.device_id="device4113440">CN=*.device4113440.wd2go.com,OU=Branded Products,O=Western Digital,L=Mountain View,ST=California,C=US</example>
|
341
|
+
<param pos="0" name="hw.vendor" value="Western Digital"/>
|
342
|
+
<param pos="0" name="hw.family" value="WD2GO"/>
|
343
|
+
<param pos="0" name="hw.device" value="Storage"/>
|
344
|
+
<param pos="0" name="os.family" value="Linux"/>
|
345
|
+
<param pos="0" name="os.vendor" value="Western Digital"/>
|
346
|
+
<param pos="0" name="os.device" value="Storage"/>
|
347
|
+
<param pos="1" name="wd2go.device_id"/>
|
348
|
+
</fingerprint>
|
349
|
+
<fingerprint pattern="^CN=Seagate Technology LLC,O=Seagate Technology LLC,L=Cupertino,ST=California,C=US$">
|
350
|
+
<description>Seagate NAS</description>
|
351
|
+
<example>CN=Seagate Technology LLC,O=Seagate Technology LLC,L=Cupertino,ST=California,C=US</example>
|
352
|
+
<param pos="0" name="hw.vendor" value="Seagate"/>
|
353
|
+
<param pos="0" name="hw.device" value="Storage"/>
|
354
|
+
<param pos="0" name="os.vendor" value="Seagate"/>
|
355
|
+
<param pos="0" name="os.family" value="Linux"/>
|
356
|
+
</fingerprint>
|
357
|
+
<fingerprint pattern="^CN=[\d\.]+,OU=Q-Series,O=Quantum,ST=CO,C=US$">
|
358
|
+
<description>Seagate Q-Series NAS (previously Quantum)</description>
|
359
|
+
<example>CN=1.1.1.1,OU=Q-Series,O=Quantum,ST=CO,C=US</example>
|
360
|
+
<param pos="0" name="hw.vendor" value="Seagate"/>
|
361
|
+
<param pos="0" name="hw.device" value="Storage"/>
|
362
|
+
<param pos="0" name="os.vendor" value="Seagate"/>
|
363
|
+
<param pos="0" name="os.family" value="Linux"/>
|
364
|
+
</fingerprint>
|
365
|
+
<fingerprint pattern="^CN=QNAP NAS,OU=QTS,O=QNAP Systems\\, Inc\.,L=Taipei,ST=Taipei,C=TW$">
|
366
|
+
<description>QNAP NAS</description>
|
367
|
+
<example>CN=QNAP NAS,OU=QTS,O=QNAP Systems\, Inc.,L=Taipei,ST=Taipei,C=TW</example>
|
368
|
+
<param pos="0" name="hw.vendor" value="QNAP Systems"/>
|
369
|
+
<param pos="0" name="hw.family" value="Storage"/>
|
370
|
+
<param pos="0" name="hw.device" value="Storage"/>
|
371
|
+
<param pos="0" name="os.family" value="Linux"/>
|
372
|
+
<param pos="0" name="os.vendor" value="QNAP Systems"/>
|
373
|
+
<param pos="0" name="os.device" value="Storage"/>
|
374
|
+
</fingerprint>
|
375
|
+
<fingerprint pattern="^CN=VMware,OU=VMware,L=Palo Alto,C=US$">
|
376
|
+
<description>VMWare Authentication Daemon</description>
|
377
|
+
<example>CN=VMware,OU=VMware,L=Palo Alto,C=US</example>
|
378
|
+
<param pos="0" name="service.vendor" value="VMWare"/>
|
379
|
+
<param pos="0" name="service.product" value="vmauthd"/>
|
380
|
+
</fingerprint>
|
381
|
+
<fingerprint pattern="^CN=([a-zA-Z0-9\.\-\_]+),OU=VMware ESX Server Default Certificate,O=VMware\\, Inc,L=Palo Alto,ST=California,C=US$">
|
382
|
+
<description>VMWare ESX</description>
|
383
|
+
<example>CN=server99.,OU=VMware ESX Server Default Certificate,O=VMware\, Inc,L=Palo Alto,ST=California,C=US</example>
|
384
|
+
<param pos="0" name="os.vendor" value="VMWare"/>
|
385
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:vmware:esx:-"/>
|
386
|
+
<param pos="0" name="os.product" value="ESX"/>
|
387
|
+
<param pos="0" name="os.device" value="Hypervisor"/>
|
388
|
+
<param pos="1" name="host.name"/>
|
389
|
+
</fingerprint>
|
390
|
+
<fingerprint pattern="^CN=IOS-Self-Signed-Certificate-">
|
391
|
+
<description>Cisco IOS Default Certificate</description>
|
392
|
+
<example>CN=IOS-Self-Signed-Certificate-4163115936</example>
|
393
|
+
<param pos="0" name="os.vendor" value="Cisco"/>
|
394
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:-"/>
|
395
|
+
<param pos="0" name="os.family" value="IOS"/>
|
396
|
+
<param pos="0" name="os.product" value="IOS"/>
|
397
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
398
|
+
<param pos="0" name="hw.device" value="Router"/>
|
399
|
+
</fingerprint>
|
400
|
+
<fingerprint pattern="^CN=([a-zA-Z0-9]{5,12}) ([a-zA-Z0-9]{12}),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US$">
|
401
|
+
<description>Google Chromecast</description>
|
402
|
+
<example chromecast.serial_number="LVDZG5" host.mac_local="FA8FCA67413D">CN=LVDZG5 FA8FCA67413D,OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
403
|
+
<param pos="0" name="os.vendor" value="Google"/>
|
404
|
+
<param pos="0" name="os.product" value="ChromeOS"/>
|
405
|
+
<param pos="0" name="hw.device" value="Media Server"/>
|
406
|
+
<param pos="0" name="hw.vendor" value="Google"/>
|
407
|
+
<param pos="0" name="hw.product" value="Chromecast"/>
|
408
|
+
<param pos="1" name="chromecast.serial_number"/>
|
409
|
+
<!-- local administered mac address (clear bit 2 of first byte) -->
|
410
|
+
<param pos="2" name="host.mac_local"/>
|
411
|
+
</fingerprint>
|
412
|
+
<fingerprint pattern="^CN=([a-zA-Z0-9]{5,12}) ([a-zA-Z0-9]{12}),OU=Cast TV \(Vizio\),O=Google Inc,L=Mountain View,ST=California,C=US$">
|
413
|
+
<description>Vizio SmartTV (Android) with Google Cast</description>
|
414
|
+
<example chromecast.serial_number="9V039WC9" host.mac_local="FA8FCA697898">CN=9V039WC9 FA8FCA697898,OU=Cast TV (Vizio),O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
415
|
+
<param pos="0" name="os.vendor" value="Google"/>
|
416
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
|
417
|
+
<param pos="0" name="os.family" value="Linux"/>
|
418
|
+
<param pos="0" name="os.product" value="Android"/>
|
419
|
+
<param pos="0" name="hw.device" value="Smart TV"/>
|
420
|
+
<param pos="0" name="hw.vendor" value="Vizio"/>
|
421
|
+
<param pos="1" name="chromecast.serial_number"/>
|
422
|
+
<!-- local administered mac address (clear bit 2 of first byte) -->
|
423
|
+
<param pos="2" name="host.mac_local"/>
|
424
|
+
</fingerprint>
|
425
|
+
<fingerprint pattern="^CN=TANDBERG,OU=R&D,O=TANDBERG ASA,L=Lysaker,ST=Askerhus,C=NO$">
|
426
|
+
<description>Cisco (TANDBERG) TelePresence</description>
|
427
|
+
<example>CN=TANDBERG,OU=R&D,O=TANDBERG ASA,L=Lysaker,ST=Askerhus,C=NO</example>
|
428
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
429
|
+
<param pos="0" name="hw.device" value="Video Conferencing"/>
|
430
|
+
<param pos="0" name="hw.product" value="TelePresence"/>
|
431
|
+
<param pos="0" name="os.vendor" value="Cisco"/>
|
432
|
+
<param pos="0" name="os.family" value="Linux"/>
|
433
|
+
<param pos="0" name="os.product" value="TelePresence"/>
|
434
|
+
<param pos="0" name="os.device" value="Video Conferencing"/>
|
435
|
+
</fingerprint>
|
436
|
+
<fingerprint pattern="^CN=lifesize.com,C=US$">
|
437
|
+
<description>Lifesize TelePresence</description>
|
438
|
+
<example>CN=lifesize.com,C=US</example>
|
439
|
+
<param pos="0" name="hw.vendor" value="Lifesize"/>
|
440
|
+
<param pos="0" name="hw.device" value="Video Conferencing"/>
|
441
|
+
<param pos="0" name="hw.product" value="TelePresence"/>
|
442
|
+
<param pos="0" name="os.vendor" value="Lifesize"/>
|
443
|
+
<param pos="0" name="os.family" value="Linux"/>
|
444
|
+
<param pos="0" name="os.product" value="TelePresence"/>
|
445
|
+
<param pos="0" name="os.device" value="Video Conferencing"/>
|
446
|
+
</fingerprint>
|
447
|
+
<fingerprint pattern="^CN=VMM APIC,OU=VMM\d+,O=Cisco,L=San Jose,ST=CA,C=US$">
|
448
|
+
<description>Cisco APIC</description>
|
449
|
+
<example>CN=VMM APIC,OU=VMM15,O=Cisco,L=San Jose,ST=CA,C=US</example>
|
450
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
451
|
+
<param pos="0" name="hw.product" value="APIC"/>
|
452
|
+
</fingerprint>
|
453
|
+
<fingerprint pattern="^CN=APIC$">
|
454
|
+
<description>Cisco APIC</description>
|
455
|
+
<example>CN=APIC</example>
|
456
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
457
|
+
<param pos="0" name="hw.product" value="APIC"/>
|
458
|
+
</fingerprint>
|
459
|
+
<fingerprint pattern="^CN=(iPX\d+),OU=I Project,O=Samsung Electronics,L=Suwon,ST=Gyeonggi-do,C=KR$">
|
460
|
+
<description>Samsung Communication Manager</description>
|
461
|
+
<example hw.product="iPX3010">CN=iPX3010,OU=I Project,O=Samsung Electronics,L=Suwon,ST=Gyeonggi-do,C=KR</example>
|
462
|
+
<param pos="0" name="hw.vendor" value="Samsung"/>
|
463
|
+
<param pos="0" name="hw.device" value="VoIP Server"/>
|
464
|
+
<param pos="0" name="hw.family" value="Communication Manager"/>
|
465
|
+
<param pos="1" name="hw.product"/>
|
466
|
+
<param pos="0" name="os.vendor" value="Samsung"/>
|
467
|
+
<param pos="0" name="os.family" value="Linux"/>
|
468
|
+
</fingerprint>
|
469
|
+
<fingerprint pattern="^CN=www.hikvision.com,OU=DVRNVR,O=HIKVISION,L=HangZhou,ST=ZheJiang,C=CN$">
|
470
|
+
<description>HIKVISION DVR</description>
|
471
|
+
<example>CN=www.hikvision.com,OU=DVRNVR,O=HIKVISION,L=HangZhou,ST=ZheJiang,C=CN</example>
|
472
|
+
<param pos="0" name="os.vendor" value="Hikvision"/>
|
473
|
+
<param pos="0" name="os.device" value="DVR"/>
|
474
|
+
<param pos="0" name="hw.vendor" value="Hikvision"/>
|
475
|
+
<param pos="0" name="hw.device" value="DVR"/>
|
476
|
+
</fingerprint>
|
477
|
+
<fingerprint pattern="^CN=([a-zA-Z0-9\.\-\_]+),OU=Polatis Switch ([a-zA-Z0-9]+),O=Polatis Inc\.,ST=N/A,C=UK$">
|
478
|
+
<description>Polatis Switch</description>
|
479
|
+
<example host.name="192.168.0.1" hw.product="1591">CN=192.168.0.1,OU=Polatis Switch 1591,O=Polatis Inc.,ST=N/A,C=UK</example>
|
480
|
+
<example host.name="central-01" hw.product="1590">CN=central-01,OU=Polatis Switch 1590,O=Polatis Inc.,ST=N/A,C=UK</example>
|
481
|
+
<param pos="0" name="os.vendor" value="Polatis"/>
|
482
|
+
<param pos="0" name="os.device" value="Switch"/>
|
483
|
+
<param pos="0" name="hw.vendor" value="Polatis"/>
|
484
|
+
<param pos="0" name="hw.device" value="Switch"/>
|
485
|
+
<param pos="1" name="host.name"/>
|
486
|
+
<param pos="2" name="hw.product"/>
|
487
|
+
</fingerprint>
|
488
|
+
<fingerprint pattern="^CN=([a-zA-Z0-9\.\-\_]+),O=Fidelis Cybersecurity$">
|
489
|
+
<description>Fidelis CommandPost</description>
|
490
|
+
<example host.name="localhost.localdomain">CN=localhost.localdomain,O=Fidelis Cybersecurity</example>
|
491
|
+
<param pos="0" name="hw.vendor" value="Fidelis"/>
|
492
|
+
<param pos="0" name="hw.product" value="CommandPost"/>
|
493
|
+
<param pos="0" name="hw.device" value="Appliance"/>
|
494
|
+
<param pos="0" name="os.vendor" value="Fidelis"/>
|
495
|
+
<param pos="0" name="os.product" value="CommandPost"/>
|
496
|
+
<param pos="1" name="host.name"/>
|
497
|
+
</fingerprint>
|
498
|
+
<fingerprint pattern="^CN=([a-zA-Z0-9]+\-[a-zA-Z0-9]+)\-([a-zA-Z0-9]+),O=IBM,L=Endicott,ST=New York,C=IN$">
|
499
|
+
<description>IBM POWER System</description>
|
500
|
+
<example hw.product="8284-22A" hw.model="211BAFW">CN=8284-22A-211BAFW,O=IBM,L=Endicott,ST=New York,C=IN</example>
|
501
|
+
<param pos="0" name="hw.vendor" value="IBM"/>
|
502
|
+
<param pos="0" name="hw.family" value="POWER System"/>
|
503
|
+
<param pos="1" name="hw.product" value=""/>
|
504
|
+
<param pos="2" name="hw.model"/>
|
505
|
+
</fingerprint>
|
506
|
+
<fingerprint pattern="^CN=EagleEyeDirectorII.polycom.com,OU=Video Division,O=Polycom Inc.,L=San Jose,ST=California,C=US$">
|
507
|
+
<description>Polycom Eagle Eye Director</description>
|
508
|
+
<example>CN=EagleEyeDirectorII.polycom.com,OU=Video Division,O=Polycom Inc.,L=San Jose,ST=California,C=US</example>
|
509
|
+
<param pos="0" name="hw.vendor" value="Polycom"/>
|
510
|
+
<param pos="0" name="hw.device" value="Video Conferencing"/>
|
511
|
+
<param pos="0" name="hw.product" value="Eagle Eye Director II"/>
|
512
|
+
</fingerprint>
|
513
|
+
<fingerprint pattern="^CN=([a-zA-Z0-9]+),OU=RD,O=QSC\\, LLC,ST=Colorado,C=US$">
|
514
|
+
<description>Q-SYS Licensing Manager</description>
|
515
|
+
<example host.name="SVRTIP44">CN=SVRTIP44,OU=RD,O=QSC\, LLC,ST=Colorado,C=US</example>
|
516
|
+
<param pos="0" name="service.vendor" value="Q-SYS"/>
|
517
|
+
<param pos="0" name="service.product" value="Licensing Manager"/>
|
518
|
+
<param pos="1" name="host.name"/>
|
519
|
+
</fingerprint>
|
520
|
+
<fingerprint pattern="^CN=([A-Za-z0-9]+),OU=FortiGate,O=Fortinet,L=Sunnyvale,ST=California,C=US$">
|
521
|
+
<description>Fortinet Gateway</description>
|
522
|
+
<example fortinet.serial_number="FG100ETK1800118">CN=FG100ETK1800118,OU=FortiGate,O=Fortinet,L=Sunnyvale,ST=California,C=US</example>
|
523
|
+
<example fortinet.serial_number="FGT30D3X15038375">CN=FGT30D3X15038375,OU=FortiGate,O=Fortinet,L=Sunnyvale,ST=California,C=US</example>
|
524
|
+
<param pos="0" name="hw.vendor" value="Fortinet"/>
|
525
|
+
<param pos="0" name="hw.device" value="Firewall"/>
|
526
|
+
<param pos="0" name="os.vendor" value="Fortinet"/>
|
527
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
|
528
|
+
<param pos="0" name="os.family" value="Linux"/>
|
529
|
+
<param pos="0" name="os.device" value="Firewall"/>
|
530
|
+
<param pos="0" name="os.product" value="FortiOS"/>
|
531
|
+
<param pos="1" name="fortinet.serial_number"/>
|
532
|
+
</fingerprint>
|
533
|
+
<fingerprint pattern="^CN=([A-Za-z0-9]+),O=Fortinet Ltd\.$">
|
534
|
+
<description>Fortinet Gateway (Older)</description>
|
535
|
+
<example fortinet.serial_number="FG100D3G13803999">CN=FG100D3G13803999,O=Fortinet Ltd.</example>
|
536
|
+
<param pos="0" name="hw.vendor" value="Fortinet"/>
|
537
|
+
<param pos="0" name="hw.device" value="Firewall"/>
|
538
|
+
<param pos="0" name="os.vendor" value="Fortinet"/>
|
539
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
|
540
|
+
<param pos="0" name="os.family" value="Linux"/>
|
541
|
+
<param pos="0" name="os.device" value="Firewall"/>
|
542
|
+
<param pos="0" name="os.product" value="FortiOS"/>
|
543
|
+
<param pos="1" name="fortinet.serial_number"/>
|
544
|
+
</fingerprint>
|
545
|
+
<fingerprint pattern="^CN=FortiMail,OU=FortiMail,O=Fortinet,L=Sunnyvale,ST=California,C=US$">
|
546
|
+
<description>Fortinet FortiMail Appliance</description>
|
547
|
+
<example>CN=FortiMail,OU=FortiMail,O=Fortinet,L=Sunnyvale,ST=California,C=US</example>
|
548
|
+
<param pos="0" name="hw.vendor" value="Fortinet"/>
|
549
|
+
<param pos="0" name="hw.device" value="Appliance"/>
|
550
|
+
<param pos="0" name="hw.product" value="FortiMail"/>
|
551
|
+
<param pos="0" name="os.vendor" value="Fortinet"/>
|
552
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
|
553
|
+
<param pos="0" name="os.family" value="Linux"/>
|
554
|
+
<param pos="0" name="os.product" value="FortiOS"/>
|
555
|
+
<param pos="0" name="os.device" value="Appliance"/>
|
556
|
+
</fingerprint>
|
557
|
+
<fingerprint pattern="^CN=.*,OU=FortiManager,O=Fortinet,L=Sunnyvale,ST=California,C=US$">
|
558
|
+
<description>Fortinet FortiMail Appliance</description>
|
559
|
+
<example>CN=FMG-VM0000000000,OU=FortiManager,O=Fortinet,L=Sunnyvale,ST=California,C=US</example>
|
560
|
+
<param pos="0" name="hw.vendor" value="Fortinet"/>
|
561
|
+
<param pos="0" name="hw.device" value="Appliance"/>
|
562
|
+
<param pos="0" name="hw.product" value="FortiManager"/>
|
563
|
+
<param pos="0" name="os.vendor" value="Fortinet"/>
|
564
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
|
565
|
+
<param pos="0" name="os.family" value="Linux"/>
|
566
|
+
<param pos="0" name="os.product" value="FortiOS"/>
|
567
|
+
<param pos="0" name="os.device" value="Appliance"/>
|
568
|
+
</fingerprint>
|
569
|
+
<fingerprint pattern="^CN=CyberoamApplianceCertificate">
|
570
|
+
<description>Cyberoam SSL VPN</description>
|
571
|
+
<example>CN=CyberoamApplianceCertificate_C35316263111,OU=Cyberoam Appliance,O=Cyberoam,L=Ahmedabad,ST=Gujarat,C=IN</example>
|
572
|
+
<example>CN=CyberoamApplianceCertificate,OU=Cyberoam Appliance,O=Cyberoam,L=Ahmedabad,ST=Gujarat,C=IN</example>
|
573
|
+
<param pos="0" name="hw.vendor" value="Cyberoam"/>
|
574
|
+
<param pos="0" name="hw.device" value="VPN"/>
|
575
|
+
<param pos="0" name="hw.product" value="Appliance"/>
|
576
|
+
<param pos="0" name="os.vendor" value="Cyberoam"/>
|
577
|
+
<param pos="0" name="os.device" value="VPN"/>
|
578
|
+
</fingerprint>
|
579
|
+
<fingerprint pattern="^CN=UBNT\-([0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}),OU=Technical Support,O=Ubiquiti Networks Inc.,L=San Jose,ST=CA,C=US$">
|
580
|
+
<description>Ubiquiti Wireless AP</description>
|
581
|
+
<example host.mac="68:72:51:4B:90:16">CN=UBNT-68:72:51:4B:90:16,OU=Technical Support,O=Ubiquiti Networks Inc.,L=San Jose,ST=CA,C=US</example>
|
582
|
+
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
583
|
+
<param pos="0" name="hw.device" value="WAP"/>
|
584
|
+
<param pos="0" name="os.vendor" value="Ubiquiti"/>
|
585
|
+
<param pos="0" name="os.family" value="Linux"/>
|
586
|
+
<param pos="0" name="os.device" value="WAP"/>
|
587
|
+
<param pos="1" name="host.mac"/>
|
588
|
+
</fingerprint>
|
589
|
+
<fingerprint pattern="^CN=unifi$">
|
590
|
+
<description>Ubiquiti Controller</description>
|
591
|
+
<example>CN=unifi</example>
|
592
|
+
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
593
|
+
<param pos="0" name="hw.device" value="Wireless Controller"/>
|
594
|
+
<param pos="0" name="os.vendor" value="Ubiquiti"/>
|
595
|
+
<param pos="0" name="os.family" value="Linux"/>
|
596
|
+
<param pos="0" name="os.device" value="Wireless Controller"/>
|
597
|
+
</fingerprint>
|
598
|
+
<fingerprint pattern="^CN=UniFi,OU=UniFi,O=ubnt\.com,L=San Jose,ST=CA,C=US$">
|
599
|
+
<description>Ubiquiti Controller</description>
|
600
|
+
<example>CN=UniFi,OU=UniFi,O=ubnt.com,L=San Jose,ST=CA,C=US</example>
|
601
|
+
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
602
|
+
<param pos="0" name="hw.device" value="Wireless Controller"/>
|
603
|
+
<param pos="0" name="os.vendor" value="Ubiquiti"/>
|
604
|
+
<param pos="0" name="os.family" value="Linux"/>
|
605
|
+
<param pos="0" name="os.device" value="Wireless Controller"/>
|
606
|
+
</fingerprint>
|
607
|
+
<fingerprint pattern="^CN=UBNT,OU=Technical Support,O=Ubiquiti Networks Inc\.,L=San Jose,ST=CA,C=US$">
|
608
|
+
<description>Ubiquiti Controller</description>
|
609
|
+
<example>CN=UBNT,OU=Technical Support,O=Ubiquiti Networks Inc.,L=San Jose,ST=CA,C=US</example>
|
610
|
+
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
611
|
+
<param pos="0" name="hw.device" value="Wireless Controller"/>
|
612
|
+
<param pos="0" name="os.vendor" value="Ubiquiti"/>
|
613
|
+
<param pos="0" name="os.family" value="Linux"/>
|
614
|
+
<param pos="0" name="os.device" value="Wireless Controller"/>
|
615
|
+
</fingerprint>
|
616
|
+
<fingerprint pattern="^CN=CloudKey,O=Ubiquiti Networks,L=San Jose,ST=CA,C=US$">
|
617
|
+
<description>Ubiquiti CloudKey Controller</description>
|
618
|
+
<example>CN=CloudKey,O=Ubiquiti Networks,L=San Jose,ST=CA,C=US</example>
|
619
|
+
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
620
|
+
<param pos="0" name="hw.device" value="Wireless Controller"/>
|
621
|
+
<param pos="0" name="hw.product" value="CloudKey"/>
|
622
|
+
<param pos="0" name="os.vendor" value="Ubiquiti"/>
|
623
|
+
<param pos="0" name="os.family" value="Linux"/>
|
624
|
+
<param pos="0" name="os.device" value="Wireless Controller"/>
|
625
|
+
<param pos="0" name="os.product" value="CloudKey"/>
|
626
|
+
</fingerprint>
|
627
|
+
<fingerprint pattern="^CN=UBNT Router UI,O=Ubiquiti Networks,L=San Jose,ST=CA,C=US$">
|
628
|
+
<description>Ubiquiti Router</description>
|
629
|
+
<example>CN=UBNT Router UI,O=Ubiquiti Networks,L=San Jose,ST=CA,C=US</example>
|
630
|
+
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
631
|
+
<param pos="0" name="hw.device" value="Router"/>
|
632
|
+
<param pos="0" name="os.vendor" value="Ubiquiti"/>
|
633
|
+
<param pos="0" name="os.family" value="Linux"/>
|
634
|
+
<param pos="0" name="os.device" value="Router"/>
|
635
|
+
</fingerprint>
|
636
|
+
<fingerprint pattern="^CN=UniFi-Video Controller,OU=R&D,O=Ubiquiti Networks,L=New York,ST=NY,C=US$">
|
637
|
+
<description>Ubiquiti Video Controller</description>
|
638
|
+
<example>CN=UniFi-Video Controller,OU=R&D,O=Ubiquiti Networks,L=New York,ST=NY,C=US</example>
|
639
|
+
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
640
|
+
<param pos="0" name="hw.device" value="DVR"/>
|
641
|
+
<param pos="0" name="hw.product" value="Video Controller"/>
|
642
|
+
<param pos="0" name="os.vendor" value="Ubiquiti"/>
|
643
|
+
<param pos="0" name="os.family" value="Linux"/>
|
644
|
+
<param pos="0" name="os.device" value="DVR"/>
|
645
|
+
</fingerprint>
|
646
|
+
<fingerprint pattern="^CN=camera.ubnt.dev,OU=devint,O=Ubiquiti Networks Inc.,L=Taipei,C=TW$">
|
647
|
+
<description>Ubiquiti Video Camera</description>
|
648
|
+
<example>CN=camera.ubnt.dev,OU=devint,O=Ubiquiti Networks Inc.,L=Taipei,C=TW</example>
|
649
|
+
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
650
|
+
<param pos="0" name="hw.device" value="Web Cam"/>
|
651
|
+
<param pos="0" name="hw.product" value="Camera"/>
|
652
|
+
<param pos="0" name="os.vendor" value="Ubiquiti"/>
|
653
|
+
<param pos="0" name="os.family" value="Linux"/>
|
654
|
+
<param pos="0" name="os.device" value="Web Cam"/>
|
655
|
+
</fingerprint>
|
656
|
+
<fingerprint pattern="^CN=GreenWave Systems,OU=PKI,O=GreenWave Systems,L=Irvine,ST=California,C=US$">
|
657
|
+
<description>Verizon / Greenwave FIOS Router</description>
|
658
|
+
<example>CN=GreenWave Systems,OU=PKI,O=GreenWave Systems,L=Irvine,ST=California,C=US</example>
|
659
|
+
<param pos="0" name="hw.vendor" value="Greenwave Systems"/>
|
660
|
+
<param pos="0" name="hw.device" value="Broadband Router"/>
|
661
|
+
<param pos="0" name="hw.product" value="Verizon FiOS Router"/>
|
662
|
+
</fingerprint>
|
663
|
+
<fingerprint pattern="^CN=PoliWall,OU=Bandura Labs,O=Bandura\\, LLC\.,L=Lake Saint Louis,ST=Missouri,C=US$">
|
664
|
+
<description>PoliWall Firewall</description>
|
665
|
+
<example>CN=PoliWall,OU=Bandura Labs,O=Bandura\, LLC.,L=Lake Saint Louis,ST=Missouri,C=US</example>
|
666
|
+
<param pos="0" name="hw.vendor" value="Bandura Labs"/>
|
667
|
+
<param pos="0" name="hw.device" value="Firewall"/>
|
668
|
+
<param pos="0" name="hw.product" value="PoliWall"/>
|
669
|
+
</fingerprint>
|
670
|
+
<fingerprint pattern="^CN=pfSense-[a-zA-Z0-9]+,O=pfSense webConfigurator Self-Signed Certificate">
|
671
|
+
<description>pfSense Firewall</description>
|
672
|
+
<example>CN=pfSense-58fb5b0b06777,O=pfSense webConfigurator Self-Signed Certificate,L=Locality,ST=State,C=US</example>
|
673
|
+
<example>CN=pfSense-5c76251e4d3e4,O=pfSense webConfigurator Self-Signed Certificate</example>
|
674
|
+
<param pos="0" name="hw.vendor" value="pfSense"/>
|
675
|
+
<param pos="0" name="hw.device" value="Firewall"/>
|
676
|
+
<param pos="0" name="hw.product" value="Firewall"/>
|
677
|
+
<param pos="0" name="os.vendor" value="pfSense"/>
|
678
|
+
<param pos="0" name="os.product" value="FreeBSD"/>
|
679
|
+
</fingerprint>
|
680
|
+
<fingerprint pattern="^CN=SophosApplianceCertificate">
|
681
|
+
<description>Sophos Appliance</description>
|
682
|
+
<example>CN=SophosApplianceCertificate_C330AC22W713PAF,OU=OU,O=Green House Data,L=Cheyenne,ST=WY,C=US</example>
|
683
|
+
<example>CN=SophosApplianceCertificate_C22315405928-UU5JKO,OU=OU,O=(null),L=NA,ST=NA,C=PK</example>
|
684
|
+
<example>CN=SophosApplianceCertificate,OU=OU,O=Sophos,L=Abingdon,ST=Oxfordshire,C=GB</example>
|
685
|
+
<param pos="0" name="hw.vendor" value="Sophos"/>
|
686
|
+
<param pos="0" name="hw.device" value="Appliance"/>
|
687
|
+
</fingerprint>
|
688
|
+
<fingerprint pattern="^CN=Hubitat Elevation,OU=Hub,O=Hubitat\\, Inc\.,L=Scottsdale,ST=Arizona,C=US$">
|
689
|
+
<description>Hubitat Device Hub</description>
|
690
|
+
<example>CN=Hubitat Elevation,OU=Hub,O=Hubitat\, Inc.,L=Scottsdale,ST=Arizona,C=US</example>
|
691
|
+
<param pos="0" name="hw.vendor" value="Hubitat"/>
|
692
|
+
<param pos="0" name="hw.device" value="Device Hub"/>
|
693
|
+
<param pos="0" name="hw.product" value="Elevation"/>
|
694
|
+
<param pos="0" name="os.vendor" value="Hubitat"/>
|
695
|
+
<param pos="0" name="os.product" value="Linux"/>
|
696
|
+
</fingerprint>
|
697
|
+
<fingerprint pattern="^CN=MAC([a-fA-F0-9]{12}),OU=([^,]+),O=Mercury Security Products\\, LLC,L=Long Beach,ST=CA,C=US$">
|
698
|
+
<description>Mercurity Security (now HID Global)</description>
|
699
|
+
<example hw.product="M5IC" host.mac="000FE507A1F1">CN=MAC000FE507A1F1,OU=M5IC,O=Mercury Security Products\, LLC,L=Long Beach,ST=CA,C=US</example>
|
700
|
+
<example hw.product="EP-1502" host.mac="000FE508BC71">CN=MAC000FE508BC71,OU=EP-1502,O=Mercury Security Products\, LLC,L=Long Beach,ST=CA,C=US</example>
|
701
|
+
<param pos="0" name="hw.vendor" value="Mercury Security"/>
|
702
|
+
<param pos="0" name="hw.device" value="Access Controller"/>
|
703
|
+
<param pos="1" name="host.mac"/>
|
704
|
+
<param pos="2" name="hw.product"/>
|
705
|
+
</fingerprint>
|
706
|
+
<fingerprint pattern="^CN=securelogin.arubanetworks.com,">
|
707
|
+
<description>Aruba Wireless Controller</description>
|
708
|
+
<example>CN=securelogin.arubanetworks.com,O=Aruba Networks,C=US</example>
|
709
|
+
<example>CN=securelogin.arubanetworks.com,OU=Instant,O=Aruba Networks,L=Sunnyvale,ST=California,C=US</example>
|
710
|
+
<param pos="0" name="hw.vendor" value="Aruba Networks"/>
|
711
|
+
<param pos="0" name="hw.device" value="Wireless Controller"/>
|
712
|
+
<param pos="0" name="hw.product" value="Captive Portal"/>
|
713
|
+
</fingerprint>
|
714
|
+
<fingerprint pattern="^CN=Fireware web CA,OU=Fireware,O=WatchGuard$">
|
715
|
+
<description>WatchGuard Firewall</description>
|
716
|
+
<example>CN=Fireware web CA,OU=Fireware,O=WatchGuard</example>
|
717
|
+
<param pos="0" name="hw.vendor" value="WatchGuard"/>
|
718
|
+
<param pos="0" name="hw.device" value="Firewall"/>
|
719
|
+
<param pos="0" name="os.vendor" value="WatchGuard"/>
|
720
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:watchguard:fireware:-"/>
|
721
|
+
<param pos="0" name="os.product" value="Fireware"/>
|
722
|
+
</fingerprint>
|
723
|
+
<fingerprint pattern="^CN=[0-9\.]+,OU=SSL-VPN,O=SonicWALL\\, Inc\.,L=Sunnyvale,ST=CA,C=US$">
|
724
|
+
<description>SonicWALL Firewall</description>
|
725
|
+
<example>CN=192.168.200.1,OU=SSL-VPN,O=SonicWALL\, Inc.,L=Sunnyvale,ST=CA,C=US</example>
|
726
|
+
<param pos="0" name="hw.vendor" value="SonicWALL"/>
|
727
|
+
<param pos="0" name="hw.device" value="VPN"/>
|
728
|
+
<param pos="0" name="os.vendor" value="SonicWALL"/>
|
729
|
+
<param pos="0" name="os.product" value="VPN"/>
|
730
|
+
<param pos="0" name="os.family" value="VPN"/>
|
731
|
+
</fingerprint>
|
732
|
+
<fingerprint pattern="^CN=.*\.akamai\.net,O=Akamai Technologies\\, Inc\.,L=Cambridge,ST=Massachusetts,C=US$">
|
733
|
+
<description>Akamai Global Host</description>
|
734
|
+
<example>CN=a248.e.akamai.net,O=Akamai Technologies\, Inc.,L=Cambridge,ST=Massachusetts,C=US</example>
|
735
|
+
<param pos="0" name="service.vendor" value="Akamai"/>
|
736
|
+
<param pos="0" name="service.product" value="GHost"/>
|
737
|
+
<param pos="0" name="os.vendor" value="Akamai"/>
|
738
|
+
<param pos="0" name="os.device" value="Web proxy"/>
|
739
|
+
</fingerprint>
|
740
|
+
<fingerprint pattern="^CN=HP_3PAR_">
|
741
|
+
<description>HP 3PAR</description>
|
742
|
+
<example>CN=HP_3PAR_1626615</example>
|
743
|
+
<example>CN=HP_3PAR_CZ3601VYFJ</example>
|
744
|
+
<param pos="0" name="hw.vendor" value="HP"/>
|
745
|
+
<param pos="0" name="hw.device" value="Storage"/>
|
746
|
+
<param pos="0" name="hw.product" value="3PAR"/>
|
747
|
+
</fingerprint>
|
748
|
+
<fingerprint pattern="^CN=(?:alienvault|VirtualUSMAllInOne)$">
|
749
|
+
<description>Alienvault OSSIM</description>
|
750
|
+
<example>CN=alienvault</example>
|
751
|
+
<example>CN=VirtualUSMAllInOne</example>
|
752
|
+
<param pos="0" name="os.vendor" value="AlienVault"/>
|
753
|
+
<param pos="0" name="os.device" value="Appliance"/>
|
754
|
+
<param pos="0" name="os.product" value="OSSIM"/>
|
755
|
+
<param pos="0" name="os.family" value="Linux"/>
|
756
|
+
</fingerprint>
|
757
|
+
<fingerprint pattern="^CN=Canon (iR-[a-zA-Z0-9\.\-\_]+)$">
|
758
|
+
<description>Canon iR-ADV Printer</description>
|
759
|
+
<example os.product="iR-ADV">CN=Canon iR-ADV</example>
|
760
|
+
<param pos="0" name="hw.device" value="Printer"/>
|
761
|
+
<param pos="0" name="hw.vendor" value="Canon"/>
|
762
|
+
<param pos="0" name="os.device" value="Printer"/>
|
763
|
+
<param pos="0" name="os.vendor" value="Canon"/>
|
764
|
+
<param pos="1" name="hw.product"/>
|
765
|
+
<param pos="1" name="os.product"/>
|
766
|
+
</fingerprint>
|
767
|
+
<fingerprint pattern="^CN=Canon Imaging Product$">
|
768
|
+
<description>Canon iR-ADV Printer</description>
|
769
|
+
<example>CN=Canon Imaging Product</example>
|
770
|
+
<param pos="0" name="hw.device" value="Printer"/>
|
771
|
+
<param pos="0" name="hw.vendor" value="Canon"/>
|
772
|
+
<param pos="0" name="os.device" value="Printer"/>
|
773
|
+
<param pos="0" name="os.vendor" value="Canon"/>
|
774
|
+
</fingerprint>
|
775
|
+
<fingerprint pattern="^CN=tnsappliance.*,O=Tenable Network Security\\, Inc\.,L=Columbia,ST=Maryland,C=US$">
|
776
|
+
<description>Tenable Appliance</description>
|
777
|
+
<example>CN=tnsappliance-b088a321,OU=--,O=Tenable Network Security\, Inc.,L=Columbia,ST=Maryland,C=US</example>
|
778
|
+
<example>CN=tnsappliance,OU=--,O=Tenable Network Security\, Inc.,L=Columbia,ST=Maryland,C=US</example>
|
779
|
+
<param pos="0" name="hw.device" value="Appliance"/>
|
780
|
+
<param pos="0" name="hw.vendor" value="Tenable"/>
|
781
|
+
<param pos="0" name="hw.product" value="Tenable Core"/>
|
782
|
+
<param pos="0" name="os.device" value="Appliance"/>
|
783
|
+
<param pos="0" name="os.vendor" value="Tenable"/>
|
784
|
+
<param pos="0" name="os.product" value="Tenable Core"/>
|
785
|
+
</fingerprint>
|
786
|
+
<fingerprint pattern="^CN=extrahop,OU=extrahop\.com,O=ExtraHop,C=US$">
|
787
|
+
<description>ExtraHop Appliance</description>
|
788
|
+
<example>CN=extrahop,OU=extrahop.com,O=ExtraHop,C=US</example>
|
789
|
+
<param pos="0" name="hw.device" value="Appliance"/>
|
790
|
+
<param pos="0" name="hw.vendor" value="ExtraHop"/>
|
791
|
+
<param pos="0" name="hw.product" value="Discover"/>
|
792
|
+
<param pos="0" name="os.device" value="Appliance"/>
|
793
|
+
<param pos="0" name="os.vendor" value="ExtraHop"/>
|
794
|
+
<param pos="0" name="os.product" value="Discover"/>
|
795
|
+
</fingerprint>
|
796
|
+
<fingerprint pattern="^CN=Ruckus Wireless ZoneDirector SN-(\d+),O=Ruckus Wireless\\, Inc\.,ST=CA,C=US$">
|
797
|
+
<description>Ruckus Zone Director</description>
|
798
|
+
<example ruckus.serial_number="221301007591">CN=Ruckus Wireless ZoneDirector SN-221301007591,O=Ruckus Wireless\, Inc.,ST=CA,C=US</example>
|
799
|
+
<param pos="0" name="hw.device" value="Wireless Controller"/>
|
800
|
+
<param pos="0" name="hw.vendor" value="Ruckus"/>
|
801
|
+
<param pos="0" name="hw.product" value="Zone Director"/>
|
802
|
+
<param pos="0" name="os.device" value="Wireless Controller"/>
|
803
|
+
<param pos="0" name="os.vendor" value="Ruckus"/>
|
804
|
+
<param pos="0" name="os.product" value="Zone Director"/>
|
805
|
+
<param pos="1" name="ruckus.serial_number"/>
|
806
|
+
</fingerprint>
|
807
|
+
<fingerprint pattern="^CN=DT([^\s]+) Series,O=NEC Corporation,ST=Tokyo,C=JP$">
|
808
|
+
<description>NEC DT Series IP Phone</description>
|
809
|
+
<example>CN=DT800 Series,O=NEC Corporation,ST=Tokyo,C=JP</example>
|
810
|
+
<param pos="0" name="os.vendor" value="NEC"/>
|
811
|
+
<param pos="0" name="os.device" value="IP Phone"/>
|
812
|
+
<param pos="0" name="hw.vendor" value="NEC"/>
|
813
|
+
<param pos="0" name="hw.device" value="IP Phone"/>
|
814
|
+
<param pos="1" name="hw.product"/>
|
815
|
+
</fingerprint>
|
816
|
+
<fingerprint pattern="^CN=([a-fA-F0-9]{12}),O=Polycom Inc\.$">
|
817
|
+
<description>NEC DT Series IP Phone</description>
|
818
|
+
<example host.mac="64167F169981">CN=64167F169981,O=Polycom Inc.</example>
|
819
|
+
<param pos="0" name="os.vendor" value="Polycom"/>
|
820
|
+
<param pos="0" name="os.device" value="IP Phone"/>
|
821
|
+
<param pos="0" name="hw.vendor" value="Polycom"/>
|
822
|
+
<param pos="0" name="hw.device" value="IP Phone"/>
|
823
|
+
<param pos="0" name="hw.product" value="SoundPoint"/>
|
824
|
+
<param pos="1" name="host.mac"/>
|
825
|
+
</fingerprint>
|
826
|
+
<fingerprint pattern="^CN=EN Software Production & Release,OU=Enterprise Networks,O=Siemens AG,L=Munich,ST=Germany,C=DE$">
|
827
|
+
<description>Siemens EN Software</description>
|
828
|
+
<example>CN=EN Software Production & Release,OU=Enterprise Networks,O=Siemens AG,L=Munich,ST=Germany,C=DE</example>
|
829
|
+
<param pos="0" name="os.vendor" value="Siemens"/>
|
830
|
+
<param pos="0" name="os.device" value="IP Phone"/>
|
831
|
+
<param pos="0" name="hw.vendor" value="Siemens"/>
|
832
|
+
<param pos="0" name="hw.device" value="IP Phone"/>
|
833
|
+
</fingerprint>
|
834
|
+
<fingerprint pattern="^CN=SecureConnect server,O=Quest,ST=CA,C=US$">
|
835
|
+
<description>SecureConnect SSL VPN</description>
|
836
|
+
<example>CN=SecureConnect server,O=Quest,ST=CA,C=US</example>
|
837
|
+
<param pos="0" name="hw.vendor" value="SecureConnect"/>
|
838
|
+
<param pos="0" name="hw.device" value="VPN"/>
|
839
|
+
<param pos="0" name="os.vendor" value="SecureConnect"/>
|
840
|
+
<param pos="0" name="os.device" value="VPN"/>
|
841
|
+
</fingerprint>
|
842
|
+
<fingerprint pattern="^CN=RecoverPoint,OU=Data Protection and Availability Division,O=EMC Corporation,L=Hopkinton,ST=Massachusetts,C=US$">
|
843
|
+
<description>RecoverPoint Appliance</description>
|
844
|
+
<example>CN=RecoverPoint,OU=Data Protection and Availability Division,O=EMC Corporation,L=Hopkinton,ST=Massachusetts,C=US</example>
|
845
|
+
<param pos="0" name="hw.device" value="Appliance"/>
|
846
|
+
<param pos="0" name="hw.vendor" value="EMC"/>
|
847
|
+
<param pos="0" name="hw.product" value="RecoverPoint"/>
|
848
|
+
<param pos="0" name="os.device" value="Appliance"/>
|
849
|
+
<param pos="0" name="os.vendor" value="EMC"/>
|
850
|
+
<param pos="0" name="os.product" value="RecoverPoint"/>
|
851
|
+
</fingerprint>
|
852
|
+
<fingerprint pattern="^CN=[a-fA-F0-9]+,O=Palo Alto Networks,L=Santa Clara,ST=CA,C=US$">
|
853
|
+
<description>Palo Alto Firewall</description>
|
854
|
+
<example>CN=d9fc2294968367a3a8ad1acd4c816c78444e6ea4d69869b40cc9751951fd3693,O=Palo Alto Networks,L=Santa Clara,ST=CA,C=US</example>
|
855
|
+
<param pos="0" name="hw.vendor" value="Palo Alto Networks"/>
|
856
|
+
<param pos="0" name="hw.device" value="Firewall"/>
|
857
|
+
<param pos="0" name="os.vendor" value="Palo Alto Networks"/>
|
858
|
+
<param pos="0" name="os.product" value="PANOS"/>
|
859
|
+
<param pos="0" name="os.device" value="Firewall"/>
|
860
|
+
</fingerprint>
|
861
|
+
<fingerprint pattern="^CN=VMware default certificate,OU=vCenterServer.*,O=VMware\\, Inc\.$">
|
862
|
+
<description>VMWare vCenter</description>
|
863
|
+
<example>CN=VMware default certificate,OU=vCenterServer_2013.09.26_220623,O=VMware\, Inc.</example>
|
864
|
+
<param pos="0" name="service.vendor" value="VMWare"/>
|
865
|
+
<param pos="0" name="service.product" value="vCenter"/>
|
866
|
+
</fingerprint>
|
867
|
+
<fingerprint pattern="^CN=selfappliance,OU=Engineering,O=Symplified,L=Boulder,ST=Colorado,C=US$">
|
868
|
+
<description>Symplified IAM Appliance (now RSA)</description>
|
869
|
+
<example>CN=selfappliance,OU=Engineering,O=Symplified,L=Boulder,ST=Colorado,C=US</example>
|
870
|
+
<param pos="0" name="hw.vendor" value="Symplified"/>
|
871
|
+
<param pos="0" name="hw.device" value="Appliance"/>
|
872
|
+
<param pos="0" name="hw.product" value="IAM"/>
|
873
|
+
</fingerprint>
|
874
|
+
<fingerprint pattern="^CN=OpenWrt,L=Leipzig,ST=Saxony,C=DE$">
|
875
|
+
<description>OpenWRT WAP</description>
|
876
|
+
<example>CN=OpenWrt,L=Leipzig,ST=Saxony,C=DE</example>
|
877
|
+
<param pos="0" name="os.vendor" value="OpenWRT"/>
|
878
|
+
<param pos="0" name="os.device" value="WAP"/>
|
879
|
+
</fingerprint>
|
880
|
+
<fingerprint pattern="^CN=axis-([a-fA-F0-9]{12}),O=Axis Communications AB$">
|
881
|
+
<description>OpenWRT WAP</description>
|
882
|
+
<example host.mac="accc8ea31abf">CN=axis-accc8ea31abf,O=Axis Communications AB</example>
|
883
|
+
<param pos="0" name="hw.vendor" value="AXIS"/>
|
884
|
+
<param pos="0" name="hw.device" value="Web Cam"/>
|
885
|
+
<param pos="0" name="os.vendor" value="AXIS"/>
|
886
|
+
<param pos="0" name="os.device" value="Web Cam"/>
|
887
|
+
<param pos="0" name="os.family" value="Linux"/>
|
888
|
+
<param pos="1" name="host.mac"/>
|
889
|
+
</fingerprint>
|
890
|
+
<fingerprint pattern="^CN=Dell_OpenManage.*,OU=PG,O=Dell Inc\.,ST=Texas,C=US$">
|
891
|
+
<description>Dell OpenManage</description>
|
892
|
+
<example>CN=Dell_OpenManage01,OU=PG,O=Dell Inc.,ST=Texas,C=US</example>
|
893
|
+
<param pos="0" name="hw.vendor" value="Dell"/>
|
894
|
+
<param pos="0" name="hw.device" value="Appliance"/>
|
895
|
+
<param pos="0" name="hw.product" value="OpenManage"/>
|
896
|
+
<param pos="0" name="os.vendor" value="Dell"/>
|
897
|
+
<param pos="0" name="os.device" value="Appliance"/>
|
898
|
+
<param pos="0" name="os.family" value="Linux"/>
|
899
|
+
</fingerprint>
|
900
|
+
<fingerprint pattern="^CN=Equallogic PS Array,OU=Dell Equallogic,O=Dell Inc\.,L=Nashua,ST=New Hampshire,C=US$">
|
901
|
+
<description>Dell EqualLogic PS Array</description>
|
902
|
+
<example>CN=Equallogic PS Array,OU=Dell Equallogic,O=Dell Inc.,L=Nashua,ST=New Hampshire,C=US</example>
|
903
|
+
<param pos="0" name="hw.vendor" value="Dell"/>
|
904
|
+
<param pos="0" name="hw.device" value="Storage"/>
|
905
|
+
<param pos="0" name="hw.product" value="EqualLogic"/>
|
906
|
+
<param pos="0" name="os.vendor" value="Dell"/>
|
907
|
+
<param pos="0" name="os.device" value="Storage"/>
|
908
|
+
<param pos="0" name="os.product" value="EqualLogic"/>
|
909
|
+
</fingerprint>
|
910
|
+
<fingerprint pattern="^CN=opennac\.test,L=Madrid,ST=Madrid,C=ES$">
|
911
|
+
<description>OpenNAC Appliance</description>
|
912
|
+
<example>CN=opennac.test,L=Madrid,ST=Madrid,C=ES</example>
|
913
|
+
<param pos="0" name="hw.vendor" value="OpenNAC"/>
|
914
|
+
<param pos="0" name="hw.device" value="Appliance"/>
|
915
|
+
<param pos="0" name="hw.product" value="OpenNAC"/>
|
916
|
+
<param pos="0" name="os.vendor" value="OpenNAC"/>
|
917
|
+
<param pos="0" name="os.family" value="Linux"/>
|
918
|
+
<param pos="0" name="os.product" value="Linux"/>
|
919
|
+
</fingerprint>
|
920
|
+
<fingerprint pattern="^CN=SmartEdge Sensor,O=AirMagnet,L=Sunnyvale,ST=California,C=US$">
|
921
|
+
<description>AirMagnet SmartEdge Sensor</description>
|
922
|
+
<example>CN=SmartEdge Sensor,O=AirMagnet,L=Sunnyvale,ST=California,C=US</example>
|
923
|
+
<param pos="0" name="hw.vendor" value="AirMagnet"/>
|
924
|
+
<param pos="0" name="hw.device" value="Wireless Controller"/>
|
925
|
+
<param pos="0" name="hw.product" value="SmartEdge Sensor"/>
|
926
|
+
</fingerprint>
|
927
|
+
<fingerprint pattern="^CN=Sensor WebUI,O=AirDefense Inc.,L=Alpharetta,ST=GA,C=US$">
|
928
|
+
<description>AirDefense Inc Sensor</description>
|
929
|
+
<example>CN=Sensor WebUI,O=AirDefense Inc.,L=Alpharetta,ST=GA,C=US</example>
|
930
|
+
<param pos="0" name="hw.vendor" value="AirDefense"/>
|
931
|
+
<param pos="0" name="hw.device" value="Wireless Controller"/>
|
932
|
+
<param pos="0" name="hw.product" value="Sensor"/>
|
933
|
+
</fingerprint>
|
934
|
+
<fingerprint pattern="^CN=(usg[^_]+)_([a-fA-F0-9]{12})$">
|
935
|
+
<description>ZyWall Router</description>
|
936
|
+
<example hw.product="usg20w" host.mac="5CF4AB615FAC">CN=usg20w_5CF4AB615FAC</example>
|
937
|
+
<example hw.product="usg20w" host.mac="5067F0BC1D3C">CN=usg20w_5067F0BC1D3C</example>
|
938
|
+
<example hw.product="usg20" host.mac="107BEF0AD201">CN=usg20_107BEF0AD201</example>
|
939
|
+
<param pos="0" name="hw.vendor" value="ZyWall"/>
|
940
|
+
<param pos="0" name="hw.device" value="Broadband Router"/>
|
941
|
+
<param pos="1" name="hw.product"/>
|
942
|
+
<param pos="2" name="host.mac"/>
|
943
|
+
</fingerprint>
|
944
|
+
<fingerprint pattern="^CN=([a-fA-F0-9]{16}),O=Philips Hue,C=NL$">
|
945
|
+
<description>Philips Hue Personal Wireless Lighting</description>
|
946
|
+
<example host.mac_eui64="001788fffe4f1999">CN=001788fffe4f1999,O=Philips Hue,C=NL</example>
|
947
|
+
<param pos="0" name="hw.vendor" value="Philips"/>
|
948
|
+
<param pos="0" name="hw.product" value="Hue"/>
|
949
|
+
<param pos="0" name="hw.device" value="Light Bulb"/>
|
950
|
+
<param pos="1" name="host.mac_eui64"/>
|
951
|
+
</fingerprint>
|
952
|
+
</fingerprints>
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: recog
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 2.
|
4
|
+
version: 2.3.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Rapid7 Research
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2019-
|
11
|
+
date: 2019-04-10 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: rspec
|
@@ -229,6 +229,8 @@ files:
|
|
229
229
|
- xml/ssh_banners.xml
|
230
230
|
- xml/telnet_banners.xml
|
231
231
|
- xml/x11_banners.xml
|
232
|
+
- xml/x509_issuers.xml
|
233
|
+
- xml/x509_subjects.xml
|
232
234
|
homepage: https://www.github.com/rapid7/recog
|
233
235
|
licenses: []
|
234
236
|
metadata: {}
|
@@ -248,7 +250,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
248
250
|
version: '0'
|
249
251
|
requirements: []
|
250
252
|
rubyforge_project:
|
251
|
-
rubygems_version: 2.
|
253
|
+
rubygems_version: 2.6.11
|
252
254
|
signing_key:
|
253
255
|
specification_version: 4
|
254
256
|
summary: Network service fingerprint database, classes, and utilities
|