recog 2.3.12 → 2.3.17

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (46) hide show
  1. checksums.yaml +4 -4
  2. data/.github/SECURITY.md +35 -0
  3. data/.snyk +10 -0
  4. data/LICENSE +1 -1
  5. data/bin/recog_standardize +2 -2
  6. data/cpe-remap.yaml +46 -14
  7. data/identifiers/hw_device.txt +3 -4
  8. data/identifiers/hw_family.txt +6 -0
  9. data/identifiers/hw_product.txt +17 -6
  10. data/identifiers/os_architecture.txt +0 -10
  11. data/identifiers/os_device.txt +11 -31
  12. data/identifiers/os_family.txt +1 -95
  13. data/identifiers/os_product.txt +9 -117
  14. data/identifiers/service_family.txt +4 -36
  15. data/identifiers/service_product.txt +211 -92
  16. data/identifiers/vendor.txt +46 -194
  17. data/lib/recog/version.rb +1 -1
  18. data/requirements.txt +1 -1
  19. data/update_cpes.py +93 -45
  20. data/xml/dns_versionbind.xml +39 -16
  21. data/xml/favicons.xml +42 -17
  22. data/xml/ftp_banners.xml +39 -24
  23. data/xml/hp_pjl_id.xml +1 -1
  24. data/xml/html_title.xml +72 -22
  25. data/xml/http_cookies.xml +4 -1
  26. data/xml/http_servers.xml +342 -73
  27. data/xml/http_wwwauth.xml +20 -20
  28. data/xml/imap_banners.xml +39 -0
  29. data/xml/ldap_searchresult.xml +9 -6
  30. data/xml/ntp_banners.xml +1 -1
  31. data/xml/operating_system.xml +1 -0
  32. data/xml/pop_banners.xml +55 -2
  33. data/xml/sip_user_agents.xml +3 -3
  34. data/xml/smb_native_os.xml +1 -0
  35. data/xml/smtp_banners.xml +7 -2
  36. data/xml/smtp_help.xml +2 -0
  37. data/xml/smtp_vrfy.xml +2 -1
  38. data/xml/snmp_sysdescr.xml +125 -87
  39. data/xml/ssh_banners.xml +1 -1
  40. data/xml/telnet_banners.xml +155 -15
  41. data/xml/x509_issuers.xml +8 -5
  42. data/xml/x509_subjects.xml +25 -17
  43. metadata +4 -5
  44. data/identifiers/software_class.txt +0 -26
  45. data/identifiers/software_family.txt +0 -91
  46. data/identifiers/software_product.txt +0 -333
@@ -506,9 +506,10 @@ more text</example>
506
506
  <example service.version="0.9.54 beta">FileZilla Server 0.9.54 beta</example>
507
507
  <example service.version="0.9.33 beta">FileZilla Server v0.9.33 beta</example>
508
508
  <param pos="0" name="service.vendor" value="Filezilla-Project"/>
509
- <param pos="0" name="service.family" value="FileZilla FTP Server"/>
510
- <param pos="0" name="service.product" value="FileZilla FTP Server"/>
509
+ <param pos="0" name="service.family" value="FileZilla FTP"/>
510
+ <param pos="0" name="service.product" value="FileZilla Server"/>
511
511
  <param pos="1" name="service.version"/>
512
+ <param pos="0" name="service.cpe23" value="cpe:/a:filezilla-project:filezilla_server:{service.version}"/>
512
513
  <param pos="0" name="os.vendor" value="Microsoft"/>
513
514
  <param pos="0" name="os.family" value="Windows"/>
514
515
  <param pos="0" name="os.product" value="Windows"/>
@@ -521,9 +522,9 @@ more text</example>
521
522
  <param pos="0" name="service.vendor" value="APC"/>
522
523
  <param pos="0" name="service.product" value="FTP"/>
523
524
  <param pos="0" name="os.vendor" value="APC"/>
524
- <param pos="0" name="os.device" value="Power device"/>
525
+ <param pos="0" name="os.device" value="Power Device"/>
525
526
  <param pos="0" name="hw.vendor" value="APC"/>
526
- <param pos="0" name="hw.device" value="Power device"/>
527
+ <param pos="0" name="hw.device" value="Power Device"/>
527
528
  </fingerprint>
528
529
 
529
530
  <fingerprint pattern="^(\S+) Network Management Card AOS v(\d+\..+) FTP server ready\.$">
@@ -536,11 +537,11 @@ more text</example>
536
537
  <param pos="0" name="service.family" value="AOS"/>
537
538
  <param pos="2" name="service.version"/>
538
539
  <param pos="0" name="os.vendor" value="APC"/>
539
- <param pos="0" name="os.device" value="Power device"/>
540
+ <param pos="0" name="os.device" value="Power Device"/>
540
541
  <param pos="1" name="os.product"/>
541
542
  <param pos="2" name="os.version"/>
542
543
  <param pos="0" name="hw.vendor" value="APC"/>
543
- <param pos="0" name="hw.device" value="Power device"/>
544
+ <param pos="0" name="hw.device" value="Power Device"/>
544
545
  </fingerprint>
545
546
 
546
547
  <fingerprint pattern="^(\S+) FTP server \(EMC-SNAS: ([^\)]+)\)(?: \S+)?$">
@@ -559,6 +560,7 @@ more text</example>
559
560
  <param pos="0" name="hw.vendor" value="EMC"/>
560
561
  <param pos="0" name="hw.device" value="Storage"/>
561
562
  <param pos="0" name="hw.product" value="Celerra"/>
563
+ <param pos="0" name="hw.cpe23" value="cpe:/h:emc:celerra_network_attached_storage:-"/>
562
564
  </fingerprint>
563
565
 
564
566
  <fingerprint pattern="^JD FTP Server Ready.*$">
@@ -602,7 +604,7 @@ more text</example>
602
604
  <param pos="0" name="service.vendor" value="Blue Coat"/>
603
605
  <param pos="0" name="service.product" value="Proxy"/>
604
606
  <param pos="0" name="os.vendor" value="Blue Coat"/>
605
- <param pos="0" name="os.device" value="Web proxy"/>
607
+ <param pos="0" name="os.device" value="Web Proxy"/>
606
608
  </fingerprint>
607
609
 
608
610
  <fingerprint pattern="^---freeFTPd 1.0---warFTPd 1.65---$">
@@ -633,7 +635,7 @@ more text</example>
633
635
  <param pos="0" name="os.vendor" value="IBM"/>
634
636
  <param pos="0" name="os.product" value="4690"/>
635
637
  <param pos="0" name="os.family" value="4690"/>
636
- <param pos="0" name="os.device" value="Point of sale"/>
638
+ <param pos="0" name="os.device" value="Point of Sale"/>
637
639
  </fingerprint>
638
640
 
639
641
  <fingerprint pattern="^([^ ]+) NcFTPd Server \(licensed copy\) ready\.$">
@@ -650,7 +652,7 @@ more text</example>
650
652
  <example>hostname DCS-2100 FTP server ready.</example>
651
653
  <param pos="0" name="os.vendor" value="D-Link"/>
652
654
  <param pos="0" name="os.product" value="DCS-2100"/>
653
- <param pos="0" name="os.device" value="Web cam"/>
655
+ <param pos="0" name="os.device" value="IP Camera"/>
654
656
  <param pos="1" name="host.name"/>
655
657
  </fingerprint>
656
658
 
@@ -681,12 +683,12 @@ more text</example>
681
683
  <example hw.product="233D" hw.version="4.48.4">AXIS 233D Network Dome Camera 4.48.4 (Mar 23 2010) ready.</example>
682
684
  <example hw.product="P1346" hw.version="5.50beta3">AXIS P1346 Network Camera 5.50beta3 (2014) ready</example>
683
685
  <param pos="0" name="hw.vendor" value="Axis"/>
684
- <param pos="0" name="hw.device" value="Web cam"/>
686
+ <param pos="0" name="hw.device" value="IP Camera"/>
685
687
  <param pos="1" name="hw.product"/>
686
688
  <param pos="2" name="hw.version"/>
687
689
  <param pos="0" name="os.vendor" value="AXIS"/>
688
690
  <param pos="0" name="os.family" value="Linux"/>
689
- <param pos="0" name="os.device" value="Web cam"/>
691
+ <param pos="0" name="os.device" value="IP Camera"/>
690
692
  </fingerprint>
691
693
 
692
694
  <fingerprint pattern="(?i)^AXIS (\S+) (?:(?:Mk II )?Video) (?:Encoder|Encoder Blade|Module|Server|Decoder) (\S+) .*">
@@ -731,7 +733,7 @@ more text</example>
731
733
  <example hw.product="560">AXIS 560 FTP Network Print Server V6.00 Jul 7 1999 ready.</example>
732
734
  <example hw.version="6.30.beta2">AXIS 5470e FTP Network Print Server V6.30.beta2 Sep 25 2002 ready.</example>
733
735
  <param pos="0" name="hw.vendor" value="Axis"/>
734
- <param pos="0" name="hw.device" value="Print server"/>
736
+ <param pos="0" name="hw.device" value="Print Server"/>
735
737
  <param pos="1" name="hw.product"/>
736
738
  <param pos="2" name="hw.version"/>
737
739
  </fingerprint>
@@ -985,7 +987,7 @@ more text</example>
985
987
  <example hw.product="10/100 +IPDS" os.version="1.0">LinkCom Xpress 10/100 +IPDS FTP version 1.0 ready</example>
986
988
  <param pos="0" name="hw.vendor" value="MPI Technologies"/>
987
989
  <param pos="0" name="hw.family" value="LinkCom Xpress"/>
988
- <param pos="0" name="hw.device" value="Print server"/>
990
+ <param pos="0" name="hw.device" value="Print Server"/>
989
991
  <param pos="1" name="hw.product"/>
990
992
  <param pos="2" name="os.version"/>
991
993
  </fingerprint>
@@ -995,7 +997,7 @@ more text</example>
995
997
  <example hw.product="EIO PRO 10">LinkCom Xpress EIO PRO 10</example>
996
998
  <param pos="0" name="hw.vendor" value="MPI Technologies"/>
997
999
  <param pos="0" name="hw.family" value="LinkCom Xpress"/>
998
- <param pos="0" name="hw.device" value="Print server"/>
1000
+ <param pos="0" name="hw.device" value="Print Server"/>
999
1001
  <param pos="1" name="hw.product"/>
1000
1002
  </fingerprint>
1001
1003
 
@@ -1038,7 +1040,7 @@ more text</example>
1038
1040
  <example>EUFSALE MarkNet X2011e FTP Server 4.20.21 ready.</example>
1039
1041
  <param pos="0" name="os.vendor" value="Lexmark"/>
1040
1042
  <param pos="0" name="os.family" value="MarkNet"/>
1041
- <param pos="0" name="os.device" value="Print server"/>
1043
+ <param pos="0" name="os.device" value="Print Server"/>
1042
1044
  <param pos="1" name="os.product"/>
1043
1045
  <param pos="2" name="os.version"/>
1044
1046
  </fingerprint>
@@ -1188,11 +1190,11 @@ more text</example>
1188
1190
  <example>ESI-2999A Version 6.30a.07 ready.</example>
1189
1191
  <param pos="0" name="os.vendor" value="Sybase"/>
1190
1192
  <param pos="0" name="os.family" value="Extended Systems ExtendNet"/>
1191
- <param pos="0" name="os.device" value="Print server"/>
1193
+ <param pos="0" name="os.device" value="Print Server"/>
1192
1194
  <param pos="1" name="os.product"/>
1193
1195
  <param pos="2" name="os.version"/>
1194
1196
  <param pos="0" name="hw.family" value="Extended Systems ExtendNet"/>
1195
- <param pos="0" name="hw.device" value="Print server"/>
1197
+ <param pos="0" name="hw.device" value="Print Server"/>
1196
1198
  <param pos="1" name="hw.product"/>
1197
1199
  </fingerprint>
1198
1200
 
@@ -1232,7 +1234,7 @@ more text</example>
1232
1234
  <param pos="0" name="service.product" value="Fiery Print Server"/>
1233
1235
  <param pos="0" name="os.vendor" value="EFI"/>
1234
1236
  <param pos="0" name="os.product" value="Fiery Print Server"/>
1235
- <param pos="0" name="os.device" value="Print server"/>
1237
+ <param pos="0" name="os.device" value="Print Server"/>
1236
1238
  </fingerprint>
1237
1239
 
1238
1240
  <!-- Conjectured based on known MX FTP fingerprints -->
@@ -1288,11 +1290,11 @@ more text</example>
1288
1290
  <example os.version="V56.17.5Z">ZBR-79071 Version V56.17.5Z ready.</example>
1289
1291
  <example os.version="7.02">ZBR-46687 Version 7.02 ready.</example>
1290
1292
  <param pos="0" name="os.vendor" value="ZebraNet"/>
1291
- <param pos="0" name="os.device" value="Print server"/>
1293
+ <param pos="0" name="os.device" value="Print Server"/>
1292
1294
  <param pos="1" name="os.product"/>
1293
1295
  <param pos="2" name="os.version"/>
1294
1296
  <param pos="0" name="hw.vendor" value="ZebraNet"/>
1295
- <param pos="0" name="hw.device" value="Print server"/>
1297
+ <param pos="0" name="hw.device" value="Print Server"/>
1296
1298
  <param pos="1" name="hw.product"/>
1297
1299
  </fingerprint>
1298
1300
 
@@ -1339,7 +1341,7 @@ more text</example>
1339
1341
  <param pos="0" name="os.product" value="Tru64 Unix"/>
1340
1342
  <param pos="1" name="host.name"/>
1341
1343
  <param pos="2" name="os.version"/>
1342
- <param pos="0" name="os.cpe23" value="cpe:/o:hp:tru64:{os.version}"/>
1344
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:tru64_unix:{os.version}"/>
1343
1345
  </fingerprint>
1344
1346
 
1345
1347
  <fingerprint pattern="^(\S+) FTP server \(Digital UNIX Version (\S+)\) ready\.?$">
@@ -1362,9 +1364,11 @@ more text</example>
1362
1364
  <param pos="0" name="os.cpe23" value="cpe:/o:mikrotik:routeros:{os.version}"/>
1363
1365
  </fingerprint>
1364
1366
 
1365
- <fingerprint pattern="^MikroTik FTP server \(MikroTik ([\w.]+)\) ready\.?$">
1366
- <description>MikroTik w/o hostname</description>
1367
- <example os.version="6.0rc14">MikroTik FTP server (MikroTik 6.0rc14) ready</example>
1367
+ <fingerprint pattern="^.* FTP server \(MikroTik (\d\.[\w\.]+)\) ready\.?$">
1368
+ <description>MikroTik with description</description>
1369
+ <example os.version="6.43.16">Super Thing_Place- FTP server (MikroTik 6.43.16) ready</example>
1370
+ <example os.version="6.43.16beta2">Super Thing_Place- FTP server (MikroTik 6.43.16beta2) ready</example>
1371
+ <example os.version="6.43.16rc56">Super Thing_Place- FTP server (MikroTik 6.43.16rc56) ready</example>
1368
1372
  <param pos="0" name="os.vendor" value="MikroTik"/>
1369
1373
  <param pos="0" name="os.product" value="RouterOS"/>
1370
1374
  <param pos="1" name="os.version"/>
@@ -1769,4 +1773,15 @@ more text</example>
1769
1773
  <param pos="0" name="os.device" value="Printer"/>
1770
1774
  </fingerprint>
1771
1775
 
1776
+ <fingerprint pattern="^SurgeFTP ([\S]+) \(Version ([a-f\d.]+)\)$">
1777
+ <description>NetWin SurgeFTP</description>
1778
+ <example service.version="2.3a12">SurgeFTP 192.168.0.0 (Version 2.3a12)</example>
1779
+ <example host.name="foo.bar.baz">SurgeFTP foo.bar.baz (Version 2.2f9)</example>
1780
+ <param pos="0" name="service.vendor" value="NetWin"/>
1781
+ <param pos="0" name="service.product" value="SurgeFTP"/>
1782
+ <param pos="2" name="service.version"/>
1783
+ <param pos="0" name="service.cpe23" value="cpe:/a:netwin:surgeftp:{service.version}"/>
1784
+ <param pos="1" name="host.name"/>
1785
+ </fingerprint>
1786
+
1772
1787
  </fingerprints>
@@ -393,7 +393,7 @@
393
393
  <example>EX4112-4127</example>
394
394
  <param pos="0" name="os.vendor" value="Xerox"/>
395
395
  <param pos="0" name="os.family" value="EX"/>
396
- <param pos="0" name="os.device" value="Print server"/>
396
+ <param pos="0" name="os.device" value="Print Server"/>
397
397
  <param pos="1" name="os.product"/>
398
398
  </fingerprint>
399
399
 
@@ -2,6 +2,26 @@
2
2
  <fingerprints matches="html_title" database_type="service" preference="0.90">
3
3
  <!-- HTML Title elements found in HTTP response bodies are matched against these patterns to fingerprint HTTP servers. -->
4
4
 
5
+ <fingerprint pattern="^301 Moved Permanently$">
6
+ <description>301 Moved Permanently - generic -- assert nothing.</description>
7
+ <example>301 Moved Permanently</example>
8
+ </fingerprint>
9
+
10
+ <fingerprint pattern="^400 Bad Request$">
11
+ <description>400 Bad Request - generic -- assert nothing.</description>
12
+ <example>400 Bad Request</example>
13
+ </fingerprint>
14
+
15
+ <fingerprint pattern="^401 Unauthorized$">
16
+ <description>401 Unauthorized - generic -- assert nothing.</description>
17
+ <example>401 Unauthorized</example>
18
+ </fingerprint>
19
+
20
+ <fingerprint pattern="^404 Not Found$">
21
+ <description>404 Not Found - generic -- assert nothing.</description>
22
+ <example>404 Not Found</example>
23
+ </fingerprint>
24
+
5
25
  <fingerprint pattern="^Index of /">
6
26
  <description>Apache HTTPD indexes</description>
7
27
  <example>Index of /</example>
@@ -358,8 +378,10 @@
358
378
  <param pos="0" name="os.vendor" value="Ubiquiti"/>
359
379
  <param pos="0" name="os.family" value="Linux"/>
360
380
  <param pos="0" name="os.product" value="EdgeOS"/>
381
+ <param pos="0" name="os.cpe23" value="cpe:/o:ui:edgeos:-"/>
361
382
  <param pos="0" name="hw.vendor" value="Ubiquiti"/>
362
383
  <param pos="0" name="hw.product" value="EdgeSwitch"/>
384
+ <param pos="0" name="hw.cpe23" value="cpe:/h:ui:edgeswitch:-"/>
363
385
  </fingerprint>
364
386
 
365
387
  <fingerprint pattern="^EdgeOS$">
@@ -368,6 +390,7 @@
368
390
  <param pos="0" name="os.vendor" value="Ubiquiti"/>
369
391
  <param pos="0" name="os.family" value="Linux"/>
370
392
  <param pos="0" name="os.product" value="EdgeOS"/>
393
+ <param pos="0" name="os.cpe23" value="cpe:/o:ui:edgeos:-"/>
371
394
  <param pos="0" name="hw.vendor" value="Ubiquiti"/>
372
395
  </fingerprint>
373
396
 
@@ -601,14 +624,14 @@
601
624
  <description>Eltek Power Controller</description>
602
625
  <example>WebPower</example>
603
626
  <param pos="0" name="hw.vendor" value="Eltek"/>
604
- <param pos="0" name="hw.device" value="Power device"/>
627
+ <param pos="0" name="hw.device" value="Power Device"/>
605
628
  </fingerprint>
606
629
 
607
630
  <fingerprint pattern="(Expert Power Control NET \d+x\d+) - (.*)$">
608
631
  <description>Gude Expert Power Control</description>
609
632
  <example host.name="Rack42" hw.product="Expert Power Control NET 2x6">Expert Power Control NET 2x6 - Rack42</example>
610
633
  <param pos="0" name="hw.vendor" value="Gude"/>
611
- <param pos="0" name="hw.device" value="Power device"/>
634
+ <param pos="0" name="hw.device" value="Power Device"/>
612
635
  <param pos="1" name="hw.product"/>
613
636
  <param pos="2" name="host.name"/>
614
637
  </fingerprint>
@@ -617,7 +640,7 @@
617
640
  <description>Sentry Switched CDU</description>
618
641
  <example>Sentry Switched CDU</example>
619
642
  <param pos="0" name="hw.vendor" value="ServerTech"/>
620
- <param pos="0" name="hw.device" value="Power device"/>
643
+ <param pos="0" name="hw.device" value="Power Device"/>
621
644
  <param pos="0" name="hw.product" value="Sentry Switched CDU"/>
622
645
  </fingerprint>
623
646
 
@@ -625,7 +648,7 @@
625
648
  <description>Emerson Network Power Rack PDU Card</description>
626
649
  <example>Emerson Network Power Rack PDU Card</example>
627
650
  <param pos="0" name="hw.vendor" value="Emerson"/>
628
- <param pos="0" name="hw.device" value="Power device"/>
651
+ <param pos="0" name="hw.device" value="Power Device"/>
629
652
  <param pos="0" name="hw.product" value="Rack PDU Card"/>
630
653
  </fingerprint>
631
654
 
@@ -636,7 +659,7 @@
636
659
  <example hw.vendor="Vertiv">Vertiv IntelliSlot Web Card</example>
637
660
  <example hw.vendor="Liebert">Liebert IntelliSlot Web Card</example>
638
661
  <param pos="1" name="hw.vendor"/>
639
- <param pos="0" name="hw.device" value="Power device"/>
662
+ <param pos="0" name="hw.device" value="Power Device"/>
640
663
  <param pos="0" name="hw.product" value="IntelliSlot Web Card"/>
641
664
  </fingerprint>
642
665
 
@@ -644,7 +667,7 @@
644
667
  <description>ConnectUPS Web/SNMP Card</description>
645
668
  <example>ConnectUPS Web/SNMP Card</example>
646
669
  <param pos="0" name="hw.vendor" value="APC"/>
647
- <param pos="0" name="hw.device" value="Power device"/>
670
+ <param pos="0" name="hw.device" value="Power Device"/>
648
671
  <param pos="0" name="hw.product" value="ConnectUPS Web Card"/>
649
672
  </fingerprint>
650
673
 
@@ -981,7 +1004,7 @@
981
1004
  <description>Cisco IP Camera</description>
982
1005
  <example>Cisco IP Camera</example>
983
1006
  <param pos="0" name="hw.vendor" value="Cisco"/>
984
- <param pos="0" name="hw.device" value="Web cam"/>
1007
+ <param pos="0" name="hw.device" value="IP Camera"/>
985
1008
  </fingerprint>
986
1009
 
987
1010
  <fingerprint pattern="^Cisco TelePresence MCU">
@@ -1138,19 +1161,19 @@
1138
1161
  <description>Axis Communications Web Cam</description>
1139
1162
  <example>AXIS</example>
1140
1163
  <param pos="0" name="hw.vendor" value="AXIS"/>
1141
- <param pos="0" name="hw.device" value="Web cam"/>
1164
+ <param pos="0" name="hw.device" value="IP Camera"/>
1142
1165
  <param pos="0" name="os.vendor" value="AXIS"/>
1143
1166
  <param pos="0" name="os.family" value="Linux"/>
1144
- <param pos="0" name="os.device" value="Web cam"/>
1167
+ <param pos="0" name="os.device" value="IP Camera"/>
1145
1168
  </fingerprint>
1146
1169
 
1147
1170
  <fingerprint pattern="^Hanwha Techwin$">
1148
1171
  <description>Hanwha Techwin IP Camera</description>
1149
1172
  <example>Hanwha Techwin</example>
1150
1173
  <param pos="0" name="hw.vendor" value="Hanwha Techwin"/>
1151
- <param pos="0" name="hw.device" value="Web cam"/>
1174
+ <param pos="0" name="hw.device" value="IP Camera"/>
1152
1175
  <param pos="0" name="os.vendor" value="Hanwha Techwin"/>
1153
- <param pos="0" name="os.device" value="Web cam"/>
1176
+ <param pos="0" name="os.device" value="IP Camera"/>
1154
1177
  <param pos="0" name="os.family" value="Linux"/>
1155
1178
  </fingerprint>
1156
1179
 
@@ -1159,10 +1182,10 @@
1159
1182
  <example hw.product="WV-NS202A">WV-NS202A Network Camera</example>
1160
1183
  <example hw.product="WV-NS954">WV-NS954 Network Camera</example>
1161
1184
  <param pos="0" name="hw.vendor" value="Panasonic"/>
1162
- <param pos="0" name="hw.device" value="Web cam"/>
1185
+ <param pos="0" name="hw.device" value="IP Camera"/>
1163
1186
  <param pos="1" name="hw.product"/>
1164
1187
  <param pos="0" name="os.vendor" value="Panasonic"/>
1165
- <param pos="0" name="os.device" value="Web cam"/>
1188
+ <param pos="0" name="os.device" value="IP Camera"/>
1166
1189
  <param pos="0" name="os.family" value="Linux"/>
1167
1190
  </fingerprint>
1168
1191
 
@@ -1438,6 +1461,14 @@
1438
1461
  <param pos="0" name="service.cpe23" value="cpe:/a:novnc:novnc:-"/>
1439
1462
  </fingerprint>
1440
1463
 
1464
+ <fingerprint pattern="^VNC Viewer for Java$">
1465
+ <description>RealVNC built-in webserver</description>
1466
+ <example>VNC Viewer for Java</example>
1467
+ <param pos="0" name="service.vendor" value="RealVNC Ltd."/>
1468
+ <param pos="0" name="service.product" value="RealVNC"/>
1469
+ <param pos="0" name="service.cpe23" value="cpe:/a:realvnc:realvnc:-"/>
1470
+ </fingerprint>
1471
+
1441
1472
  <fingerprint pattern="^.* \[Jenkins\]$">
1442
1473
  <description>Jenkins Customized Dashboard</description>
1443
1474
  <example>Continuous Integrations [Jenkins]</example>
@@ -1523,6 +1554,7 @@
1523
1554
  <example>Elastic Kibana</example>
1524
1555
  <param pos="0" name="service.vendor" value="Elastic"/>
1525
1556
  <param pos="0" name="service.product" value="Kibana"/>
1557
+ <param pos="0" name="service.cpe23" value="cpe:/a:elastic:kibana:-"/>
1526
1558
  </fingerprint>
1527
1559
 
1528
1560
  <fingerprint pattern="^Grafana$">
@@ -1594,9 +1626,9 @@
1594
1626
  <fingerprint pattern="^Liebert OpenComms Network Interface Card$">
1595
1627
  <description>Liebert UPS</description>
1596
1628
  <example>Liebert OpenComms Network Interface Card</example>
1597
- <param pos="0" name="hw.device" value="Power device"/>
1629
+ <param pos="0" name="hw.device" value="Power Device"/>
1598
1630
  <param pos="0" name="hw.vendor" value="Liebert"/>
1599
- <param pos="0" name="os.device" value="Power device"/>
1631
+ <param pos="0" name="os.device" value="Power Device"/>
1600
1632
  <param pos="0" name="os.vendor" value="Liebert"/>
1601
1633
  </fingerprint>
1602
1634
 
@@ -1972,7 +2004,7 @@
1972
2004
  <description>Mobotix Network Camera</description>
1973
2005
  <example>Redirect to userimage: /control/userimage.html</example>
1974
2006
  <param pos="0" name="hw.vendor" value="Mobotix"/>
1975
- <param pos="0" name="hw.device" value="Web cam"/>
2007
+ <param pos="0" name="hw.device" value="IP Camera"/>
1976
2008
  <param pos="0" name="hw.product" value="IP Camera"/>
1977
2009
  </fingerprint>
1978
2010
 
@@ -2031,6 +2063,7 @@
2031
2063
  <param pos="0" name="os.vendor" value="Data Domain"/>
2032
2064
  <param pos="0" name="os.product" value="DD OS"/>
2033
2065
  <param pos="0" name="os.device" value="Storage"/>
2066
+ <param pos="0" name="os.cpe23" value="cpe:/o:dell:emc_data_domain_os:-"/>
2034
2067
  <param pos="0" name="hw.vendor" value="Data Domain"/>
2035
2068
  <param pos="0" name="hw.product" value="DD OS"/>
2036
2069
  <param pos="0" name="hw.device" value="Storage"/>
@@ -2164,7 +2197,7 @@
2164
2197
  <example hw.product="IQA22N">IQA22N IQEYE1A1613: Live Images</example>
2165
2198
  <example hw.product="IQeye703">IQeye703 IQEYE011750: Live Images</example>
2166
2199
  <param pos="0" name="hw.vendor" value="IQinVision"/>
2167
- <param pos="0" name="hw.device" value="Web cam"/>
2200
+ <param pos="0" name="hw.device" value="IP Camera"/>
2168
2201
  <param pos="1" name="hw.product"/>
2169
2202
  </fingerprint>
2170
2203
 
@@ -2186,7 +2219,7 @@
2186
2219
  <description>Genetec AutoVu SharpV ALPR Camera</description>
2187
2220
  <example>Genetec - SHARPV01111</example>
2188
2221
  <param pos="0" name="hw.vendor" value="Genetec"/>
2189
- <param pos="0" name="hw.device" value="Web cam"/>
2222
+ <param pos="0" name="hw.device" value="IP Camera"/>
2190
2223
  <param pos="0" name="hw.product" value="AutoVu SharpV"/>
2191
2224
  </fingerprint>
2192
2225
 
@@ -2213,6 +2246,7 @@
2213
2246
  <example>TwonkyMedia server media browser</example>
2214
2247
  <param pos="0" name="service.vendor" value="Lynx Technology"/>
2215
2248
  <param pos="0" name="service.product" value="Twonky Media Server"/>
2249
+ <param pos="0" name="service.cpe23" value="cpe:/a:lynxtechnology:twonky_server:-"/>
2216
2250
  </fingerprint>
2217
2251
 
2218
2252
  <fingerprint pattern="^Spiceworks(?: Server Busy| Help Desk)?$">
@@ -2246,6 +2280,7 @@
2246
2280
  <example>SABnzbd - Log in</example>
2247
2281
  <param pos="0" name="service.vendor" value="SABnzbd"/>
2248
2282
  <param pos="0" name="service.product" value="SABnzbd"/>
2283
+ <param pos="0" name="service.cpe23" value="cpe:/a:sabnzbd:sabnzbd:-"/>
2249
2284
  </fingerprint>
2250
2285
 
2251
2286
  <fingerprint pattern="^(?:Zabbix|.*: Zabbix)$">
@@ -2316,6 +2351,9 @@
2316
2351
  <description>OpenMediaVault</description>
2317
2352
  <example host.name="raspberrypi">openmediavault control panel - raspberrypi</example>
2318
2353
  <example host.name="raspberrypi">OpenMediaVault web administration interface - raspberrypi</example>
2354
+ <param pos="0" name="service.vendor" value="OpenMediaVault"/>
2355
+ <param pos="0" name="service.product" value="OpenMediaVault"/>
2356
+ <param pos="0" name="service.cpe23" value="cpe:/a:openmediavault:openmediavault:-"/>
2319
2357
  <param pos="0" name="os.vendor" value="OpenMediaVault"/>
2320
2358
  <param pos="0" name="os.family" value="Linux"/>
2321
2359
  <param pos="0" name="os.product" value="OpenMediaVault"/>
@@ -2362,6 +2400,7 @@
2362
2400
  <param pos="0" name="service.vendor" value="CrushFTP"/>
2363
2401
  <param pos="0" name="service.product" value="CrushFTP Web Interface"/>
2364
2402
  <param pos="0" name="service.certainty" value="0.5"/>
2403
+ <param pos="0" name="service.cpe23" value="cpe:/a:crushftp:crushftp:-"/>
2365
2404
  </fingerprint>
2366
2405
 
2367
2406
  <fingerprint pattern="^OpenEdge Explorer$">
@@ -2369,6 +2408,7 @@
2369
2408
  <example>OpenEdge Explorer</example>
2370
2409
  <param pos="0" name="service.vendor" value="Progress"/>
2371
2410
  <param pos="0" name="service.product" value="OpenEdge Explorer"/>
2411
+ <param pos="0" name="service.cpe23" value="cpe:/a:progress:openedge:-"/>
2372
2412
  </fingerprint>
2373
2413
 
2374
2414
  <fingerprint pattern="^Consul by HashiCorp$">
@@ -2414,7 +2454,8 @@
2414
2454
  <example>Swagger UI</example>
2415
2455
  <example>Swagger Editor</example>
2416
2456
  <param pos="0" name="service.vendor" value="Swagger"/>
2417
- <param pos="0" name="service.product" value="UI"/>
2457
+ <param pos="0" name="service.product" value="Swagger UI"/>
2458
+ <param pos="0" name="service.cpe23" value="cpe:/a:smartbear:swagger_ui:-"/>
2418
2459
  </fingerprint>
2419
2460
 
2420
2461
  <fingerprint pattern="^Emby$">
@@ -2487,7 +2528,9 @@
2487
2528
  <description>Metasploit Pro (and Community Edition Web UI)</description>
2488
2529
  <example>Metasploit</example>
2489
2530
  <param pos="0" name="service.vendor" value="Rapid7"/>
2490
- <param pos="0" name="service.product" value="Metasploit Pro"/>
2531
+ <param pos="0" name="service.product" value="Metasploit"/>
2532
+ <param pos="0" name="service.edition" value="Pro"/>
2533
+ <param pos="0" name="service.cpe23" value="cpe:/a:rapid7:metasploit:-"/>
2491
2534
  </fingerprint>
2492
2535
 
2493
2536
  <fingerprint pattern="^Makito X Decoder$">
@@ -2531,6 +2574,7 @@
2531
2574
  <param pos="0" name="service.vendor" value="ownCloud"/>
2532
2575
  <param pos="0" name="service.product" value="ownCloud Server"/>
2533
2576
  <param pos="0" name="service.certainty" value="0.5"/>
2577
+ <param pos="0" name="service.cpe23" value="cpe:/a:owncloud:owncloud:-"/>
2534
2578
  </fingerprint>
2535
2579
 
2536
2580
  <fingerprint pattern="^Octopus Deploy$">
@@ -2560,8 +2604,9 @@
2560
2604
  <example>TurnKey Moodle</example>
2561
2605
  <example>New Site</example>
2562
2606
  <param pos="0" name="service.vendor" value="Moodle"/>
2563
- <param pos="0" name="service.product" value="Moodle CMS"/>
2607
+ <param pos="0" name="service.product" value="Moodle"/>
2564
2608
  <param pos="0" name="service.certainty" value="0.5"/>
2609
+ <param pos="0" name="service.cpe23" value="cpe:/a:moodle:moodle:-"/>
2565
2610
  </fingerprint>
2566
2611
 
2567
2612
  <fingerprint pattern="^ArchiveTeam Warrior$">
@@ -2614,6 +2659,7 @@
2614
2659
  <example>Kodi</example>
2615
2660
  <param pos="0" name="service.vendor" value="Kodi"/>
2616
2661
  <param pos="0" name="service.product" value="Media Server"/>
2662
+ <param pos="0" name="service.cpe23" value="cpe:/a:kodi:kodi:-"/>
2617
2663
  </fingerprint>
2618
2664
 
2619
2665
  <fingerprint pattern="^(?:Drupal|TurnKey Drupal\d+|Select an installation profile)$">
@@ -2624,6 +2670,7 @@
2624
2670
  <example>Select an installation profile</example>
2625
2671
  <param pos="0" name="service.vendor" value="Drupal"/>
2626
2672
  <param pos="0" name="service.product" value="CMS"/>
2673
+ <param pos="0" name="service.cpe23" value="cpe:/a:drupal:drupal:-"/>
2627
2674
  </fingerprint>
2628
2675
 
2629
2676
  <fingerprint pattern="^LibreNMS$">
@@ -2679,10 +2726,13 @@
2679
2726
  <fingerprint pattern="^Pulse Connect Secure - SSL">
2680
2727
  <description>Pulse Secure VPN</description>
2681
2728
  <example>Pulse Connect Secure - SSL</example>
2729
+ <param pos="0" name="service.vendor" value="Pulse Secure"/>
2730
+ <param pos="0" name="service.product" value="Pulse Connect Secure"/>
2731
+ <param pos="0" name="service.cpe23" value="cpe:/a:pulsesecure:pulse_connect_secure:-"/>
2682
2732
  <param pos="0" name="os.vendor" value="Pulse Secure"/>
2683
2733
  <param pos="0" name="os.family" value="SSL-VPN"/>
2684
2734
  <param pos="0" name="os.device" value="SSL-VPN"/>
2685
- <param pos="0" name="os.product" value="SSL-VPN"/>
2735
+ <param pos="0" name="os.product" value="Pulse Connect Secure"/>
2686
2736
  </fingerprint>
2687
2737
 
2688
2738
  </fingerprints>