recog 2.3.12 → 2.3.17

Sign up to get free protection for your applications and to get access to all the features.
Files changed (46) hide show
  1. checksums.yaml +4 -4
  2. data/.github/SECURITY.md +35 -0
  3. data/.snyk +10 -0
  4. data/LICENSE +1 -1
  5. data/bin/recog_standardize +2 -2
  6. data/cpe-remap.yaml +46 -14
  7. data/identifiers/hw_device.txt +3 -4
  8. data/identifiers/hw_family.txt +6 -0
  9. data/identifiers/hw_product.txt +17 -6
  10. data/identifiers/os_architecture.txt +0 -10
  11. data/identifiers/os_device.txt +11 -31
  12. data/identifiers/os_family.txt +1 -95
  13. data/identifiers/os_product.txt +9 -117
  14. data/identifiers/service_family.txt +4 -36
  15. data/identifiers/service_product.txt +211 -92
  16. data/identifiers/vendor.txt +46 -194
  17. data/lib/recog/version.rb +1 -1
  18. data/requirements.txt +1 -1
  19. data/update_cpes.py +93 -45
  20. data/xml/dns_versionbind.xml +39 -16
  21. data/xml/favicons.xml +42 -17
  22. data/xml/ftp_banners.xml +39 -24
  23. data/xml/hp_pjl_id.xml +1 -1
  24. data/xml/html_title.xml +72 -22
  25. data/xml/http_cookies.xml +4 -1
  26. data/xml/http_servers.xml +342 -73
  27. data/xml/http_wwwauth.xml +20 -20
  28. data/xml/imap_banners.xml +39 -0
  29. data/xml/ldap_searchresult.xml +9 -6
  30. data/xml/ntp_banners.xml +1 -1
  31. data/xml/operating_system.xml +1 -0
  32. data/xml/pop_banners.xml +55 -2
  33. data/xml/sip_user_agents.xml +3 -3
  34. data/xml/smb_native_os.xml +1 -0
  35. data/xml/smtp_banners.xml +7 -2
  36. data/xml/smtp_help.xml +2 -0
  37. data/xml/smtp_vrfy.xml +2 -1
  38. data/xml/snmp_sysdescr.xml +125 -87
  39. data/xml/ssh_banners.xml +1 -1
  40. data/xml/telnet_banners.xml +155 -15
  41. data/xml/x509_issuers.xml +8 -5
  42. data/xml/x509_subjects.xml +25 -17
  43. metadata +4 -5
  44. data/identifiers/software_class.txt +0 -26
  45. data/identifiers/software_family.txt +0 -91
  46. data/identifiers/software_product.txt +0 -333
@@ -506,9 +506,10 @@ more text</example>
506
506
  <example service.version="0.9.54 beta">FileZilla Server 0.9.54 beta</example>
507
507
  <example service.version="0.9.33 beta">FileZilla Server v0.9.33 beta</example>
508
508
  <param pos="0" name="service.vendor" value="Filezilla-Project"/>
509
- <param pos="0" name="service.family" value="FileZilla FTP Server"/>
510
- <param pos="0" name="service.product" value="FileZilla FTP Server"/>
509
+ <param pos="0" name="service.family" value="FileZilla FTP"/>
510
+ <param pos="0" name="service.product" value="FileZilla Server"/>
511
511
  <param pos="1" name="service.version"/>
512
+ <param pos="0" name="service.cpe23" value="cpe:/a:filezilla-project:filezilla_server:{service.version}"/>
512
513
  <param pos="0" name="os.vendor" value="Microsoft"/>
513
514
  <param pos="0" name="os.family" value="Windows"/>
514
515
  <param pos="0" name="os.product" value="Windows"/>
@@ -521,9 +522,9 @@ more text</example>
521
522
  <param pos="0" name="service.vendor" value="APC"/>
522
523
  <param pos="0" name="service.product" value="FTP"/>
523
524
  <param pos="0" name="os.vendor" value="APC"/>
524
- <param pos="0" name="os.device" value="Power device"/>
525
+ <param pos="0" name="os.device" value="Power Device"/>
525
526
  <param pos="0" name="hw.vendor" value="APC"/>
526
- <param pos="0" name="hw.device" value="Power device"/>
527
+ <param pos="0" name="hw.device" value="Power Device"/>
527
528
  </fingerprint>
528
529
 
529
530
  <fingerprint pattern="^(\S+) Network Management Card AOS v(\d+\..+) FTP server ready\.$">
@@ -536,11 +537,11 @@ more text</example>
536
537
  <param pos="0" name="service.family" value="AOS"/>
537
538
  <param pos="2" name="service.version"/>
538
539
  <param pos="0" name="os.vendor" value="APC"/>
539
- <param pos="0" name="os.device" value="Power device"/>
540
+ <param pos="0" name="os.device" value="Power Device"/>
540
541
  <param pos="1" name="os.product"/>
541
542
  <param pos="2" name="os.version"/>
542
543
  <param pos="0" name="hw.vendor" value="APC"/>
543
- <param pos="0" name="hw.device" value="Power device"/>
544
+ <param pos="0" name="hw.device" value="Power Device"/>
544
545
  </fingerprint>
545
546
 
546
547
  <fingerprint pattern="^(\S+) FTP server \(EMC-SNAS: ([^\)]+)\)(?: \S+)?$">
@@ -559,6 +560,7 @@ more text</example>
559
560
  <param pos="0" name="hw.vendor" value="EMC"/>
560
561
  <param pos="0" name="hw.device" value="Storage"/>
561
562
  <param pos="0" name="hw.product" value="Celerra"/>
563
+ <param pos="0" name="hw.cpe23" value="cpe:/h:emc:celerra_network_attached_storage:-"/>
562
564
  </fingerprint>
563
565
 
564
566
  <fingerprint pattern="^JD FTP Server Ready.*$">
@@ -602,7 +604,7 @@ more text</example>
602
604
  <param pos="0" name="service.vendor" value="Blue Coat"/>
603
605
  <param pos="0" name="service.product" value="Proxy"/>
604
606
  <param pos="0" name="os.vendor" value="Blue Coat"/>
605
- <param pos="0" name="os.device" value="Web proxy"/>
607
+ <param pos="0" name="os.device" value="Web Proxy"/>
606
608
  </fingerprint>
607
609
 
608
610
  <fingerprint pattern="^---freeFTPd 1.0---warFTPd 1.65---$">
@@ -633,7 +635,7 @@ more text</example>
633
635
  <param pos="0" name="os.vendor" value="IBM"/>
634
636
  <param pos="0" name="os.product" value="4690"/>
635
637
  <param pos="0" name="os.family" value="4690"/>
636
- <param pos="0" name="os.device" value="Point of sale"/>
638
+ <param pos="0" name="os.device" value="Point of Sale"/>
637
639
  </fingerprint>
638
640
 
639
641
  <fingerprint pattern="^([^ ]+) NcFTPd Server \(licensed copy\) ready\.$">
@@ -650,7 +652,7 @@ more text</example>
650
652
  <example>hostname DCS-2100 FTP server ready.</example>
651
653
  <param pos="0" name="os.vendor" value="D-Link"/>
652
654
  <param pos="0" name="os.product" value="DCS-2100"/>
653
- <param pos="0" name="os.device" value="Web cam"/>
655
+ <param pos="0" name="os.device" value="IP Camera"/>
654
656
  <param pos="1" name="host.name"/>
655
657
  </fingerprint>
656
658
 
@@ -681,12 +683,12 @@ more text</example>
681
683
  <example hw.product="233D" hw.version="4.48.4">AXIS 233D Network Dome Camera 4.48.4 (Mar 23 2010) ready.</example>
682
684
  <example hw.product="P1346" hw.version="5.50beta3">AXIS P1346 Network Camera 5.50beta3 (2014) ready</example>
683
685
  <param pos="0" name="hw.vendor" value="Axis"/>
684
- <param pos="0" name="hw.device" value="Web cam"/>
686
+ <param pos="0" name="hw.device" value="IP Camera"/>
685
687
  <param pos="1" name="hw.product"/>
686
688
  <param pos="2" name="hw.version"/>
687
689
  <param pos="0" name="os.vendor" value="AXIS"/>
688
690
  <param pos="0" name="os.family" value="Linux"/>
689
- <param pos="0" name="os.device" value="Web cam"/>
691
+ <param pos="0" name="os.device" value="IP Camera"/>
690
692
  </fingerprint>
691
693
 
692
694
  <fingerprint pattern="(?i)^AXIS (\S+) (?:(?:Mk II )?Video) (?:Encoder|Encoder Blade|Module|Server|Decoder) (\S+) .*">
@@ -731,7 +733,7 @@ more text</example>
731
733
  <example hw.product="560">AXIS 560 FTP Network Print Server V6.00 Jul 7 1999 ready.</example>
732
734
  <example hw.version="6.30.beta2">AXIS 5470e FTP Network Print Server V6.30.beta2 Sep 25 2002 ready.</example>
733
735
  <param pos="0" name="hw.vendor" value="Axis"/>
734
- <param pos="0" name="hw.device" value="Print server"/>
736
+ <param pos="0" name="hw.device" value="Print Server"/>
735
737
  <param pos="1" name="hw.product"/>
736
738
  <param pos="2" name="hw.version"/>
737
739
  </fingerprint>
@@ -985,7 +987,7 @@ more text</example>
985
987
  <example hw.product="10/100 +IPDS" os.version="1.0">LinkCom Xpress 10/100 +IPDS FTP version 1.0 ready</example>
986
988
  <param pos="0" name="hw.vendor" value="MPI Technologies"/>
987
989
  <param pos="0" name="hw.family" value="LinkCom Xpress"/>
988
- <param pos="0" name="hw.device" value="Print server"/>
990
+ <param pos="0" name="hw.device" value="Print Server"/>
989
991
  <param pos="1" name="hw.product"/>
990
992
  <param pos="2" name="os.version"/>
991
993
  </fingerprint>
@@ -995,7 +997,7 @@ more text</example>
995
997
  <example hw.product="EIO PRO 10">LinkCom Xpress EIO PRO 10</example>
996
998
  <param pos="0" name="hw.vendor" value="MPI Technologies"/>
997
999
  <param pos="0" name="hw.family" value="LinkCom Xpress"/>
998
- <param pos="0" name="hw.device" value="Print server"/>
1000
+ <param pos="0" name="hw.device" value="Print Server"/>
999
1001
  <param pos="1" name="hw.product"/>
1000
1002
  </fingerprint>
1001
1003
 
@@ -1038,7 +1040,7 @@ more text</example>
1038
1040
  <example>EUFSALE MarkNet X2011e FTP Server 4.20.21 ready.</example>
1039
1041
  <param pos="0" name="os.vendor" value="Lexmark"/>
1040
1042
  <param pos="0" name="os.family" value="MarkNet"/>
1041
- <param pos="0" name="os.device" value="Print server"/>
1043
+ <param pos="0" name="os.device" value="Print Server"/>
1042
1044
  <param pos="1" name="os.product"/>
1043
1045
  <param pos="2" name="os.version"/>
1044
1046
  </fingerprint>
@@ -1188,11 +1190,11 @@ more text</example>
1188
1190
  <example>ESI-2999A Version 6.30a.07 ready.</example>
1189
1191
  <param pos="0" name="os.vendor" value="Sybase"/>
1190
1192
  <param pos="0" name="os.family" value="Extended Systems ExtendNet"/>
1191
- <param pos="0" name="os.device" value="Print server"/>
1193
+ <param pos="0" name="os.device" value="Print Server"/>
1192
1194
  <param pos="1" name="os.product"/>
1193
1195
  <param pos="2" name="os.version"/>
1194
1196
  <param pos="0" name="hw.family" value="Extended Systems ExtendNet"/>
1195
- <param pos="0" name="hw.device" value="Print server"/>
1197
+ <param pos="0" name="hw.device" value="Print Server"/>
1196
1198
  <param pos="1" name="hw.product"/>
1197
1199
  </fingerprint>
1198
1200
 
@@ -1232,7 +1234,7 @@ more text</example>
1232
1234
  <param pos="0" name="service.product" value="Fiery Print Server"/>
1233
1235
  <param pos="0" name="os.vendor" value="EFI"/>
1234
1236
  <param pos="0" name="os.product" value="Fiery Print Server"/>
1235
- <param pos="0" name="os.device" value="Print server"/>
1237
+ <param pos="0" name="os.device" value="Print Server"/>
1236
1238
  </fingerprint>
1237
1239
 
1238
1240
  <!-- Conjectured based on known MX FTP fingerprints -->
@@ -1288,11 +1290,11 @@ more text</example>
1288
1290
  <example os.version="V56.17.5Z">ZBR-79071 Version V56.17.5Z ready.</example>
1289
1291
  <example os.version="7.02">ZBR-46687 Version 7.02 ready.</example>
1290
1292
  <param pos="0" name="os.vendor" value="ZebraNet"/>
1291
- <param pos="0" name="os.device" value="Print server"/>
1293
+ <param pos="0" name="os.device" value="Print Server"/>
1292
1294
  <param pos="1" name="os.product"/>
1293
1295
  <param pos="2" name="os.version"/>
1294
1296
  <param pos="0" name="hw.vendor" value="ZebraNet"/>
1295
- <param pos="0" name="hw.device" value="Print server"/>
1297
+ <param pos="0" name="hw.device" value="Print Server"/>
1296
1298
  <param pos="1" name="hw.product"/>
1297
1299
  </fingerprint>
1298
1300
 
@@ -1339,7 +1341,7 @@ more text</example>
1339
1341
  <param pos="0" name="os.product" value="Tru64 Unix"/>
1340
1342
  <param pos="1" name="host.name"/>
1341
1343
  <param pos="2" name="os.version"/>
1342
- <param pos="0" name="os.cpe23" value="cpe:/o:hp:tru64:{os.version}"/>
1344
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:tru64_unix:{os.version}"/>
1343
1345
  </fingerprint>
1344
1346
 
1345
1347
  <fingerprint pattern="^(\S+) FTP server \(Digital UNIX Version (\S+)\) ready\.?$">
@@ -1362,9 +1364,11 @@ more text</example>
1362
1364
  <param pos="0" name="os.cpe23" value="cpe:/o:mikrotik:routeros:{os.version}"/>
1363
1365
  </fingerprint>
1364
1366
 
1365
- <fingerprint pattern="^MikroTik FTP server \(MikroTik ([\w.]+)\) ready\.?$">
1366
- <description>MikroTik w/o hostname</description>
1367
- <example os.version="6.0rc14">MikroTik FTP server (MikroTik 6.0rc14) ready</example>
1367
+ <fingerprint pattern="^.* FTP server \(MikroTik (\d\.[\w\.]+)\) ready\.?$">
1368
+ <description>MikroTik with description</description>
1369
+ <example os.version="6.43.16">Super Thing_Place- FTP server (MikroTik 6.43.16) ready</example>
1370
+ <example os.version="6.43.16beta2">Super Thing_Place- FTP server (MikroTik 6.43.16beta2) ready</example>
1371
+ <example os.version="6.43.16rc56">Super Thing_Place- FTP server (MikroTik 6.43.16rc56) ready</example>
1368
1372
  <param pos="0" name="os.vendor" value="MikroTik"/>
1369
1373
  <param pos="0" name="os.product" value="RouterOS"/>
1370
1374
  <param pos="1" name="os.version"/>
@@ -1769,4 +1773,15 @@ more text</example>
1769
1773
  <param pos="0" name="os.device" value="Printer"/>
1770
1774
  </fingerprint>
1771
1775
 
1776
+ <fingerprint pattern="^SurgeFTP ([\S]+) \(Version ([a-f\d.]+)\)$">
1777
+ <description>NetWin SurgeFTP</description>
1778
+ <example service.version="2.3a12">SurgeFTP 192.168.0.0 (Version 2.3a12)</example>
1779
+ <example host.name="foo.bar.baz">SurgeFTP foo.bar.baz (Version 2.2f9)</example>
1780
+ <param pos="0" name="service.vendor" value="NetWin"/>
1781
+ <param pos="0" name="service.product" value="SurgeFTP"/>
1782
+ <param pos="2" name="service.version"/>
1783
+ <param pos="0" name="service.cpe23" value="cpe:/a:netwin:surgeftp:{service.version}"/>
1784
+ <param pos="1" name="host.name"/>
1785
+ </fingerprint>
1786
+
1772
1787
  </fingerprints>
@@ -393,7 +393,7 @@
393
393
  <example>EX4112-4127</example>
394
394
  <param pos="0" name="os.vendor" value="Xerox"/>
395
395
  <param pos="0" name="os.family" value="EX"/>
396
- <param pos="0" name="os.device" value="Print server"/>
396
+ <param pos="0" name="os.device" value="Print Server"/>
397
397
  <param pos="1" name="os.product"/>
398
398
  </fingerprint>
399
399
 
@@ -2,6 +2,26 @@
2
2
  <fingerprints matches="html_title" database_type="service" preference="0.90">
3
3
  <!-- HTML Title elements found in HTTP response bodies are matched against these patterns to fingerprint HTTP servers. -->
4
4
 
5
+ <fingerprint pattern="^301 Moved Permanently$">
6
+ <description>301 Moved Permanently - generic -- assert nothing.</description>
7
+ <example>301 Moved Permanently</example>
8
+ </fingerprint>
9
+
10
+ <fingerprint pattern="^400 Bad Request$">
11
+ <description>400 Bad Request - generic -- assert nothing.</description>
12
+ <example>400 Bad Request</example>
13
+ </fingerprint>
14
+
15
+ <fingerprint pattern="^401 Unauthorized$">
16
+ <description>401 Unauthorized - generic -- assert nothing.</description>
17
+ <example>401 Unauthorized</example>
18
+ </fingerprint>
19
+
20
+ <fingerprint pattern="^404 Not Found$">
21
+ <description>404 Not Found - generic -- assert nothing.</description>
22
+ <example>404 Not Found</example>
23
+ </fingerprint>
24
+
5
25
  <fingerprint pattern="^Index of /">
6
26
  <description>Apache HTTPD indexes</description>
7
27
  <example>Index of /</example>
@@ -358,8 +378,10 @@
358
378
  <param pos="0" name="os.vendor" value="Ubiquiti"/>
359
379
  <param pos="0" name="os.family" value="Linux"/>
360
380
  <param pos="0" name="os.product" value="EdgeOS"/>
381
+ <param pos="0" name="os.cpe23" value="cpe:/o:ui:edgeos:-"/>
361
382
  <param pos="0" name="hw.vendor" value="Ubiquiti"/>
362
383
  <param pos="0" name="hw.product" value="EdgeSwitch"/>
384
+ <param pos="0" name="hw.cpe23" value="cpe:/h:ui:edgeswitch:-"/>
363
385
  </fingerprint>
364
386
 
365
387
  <fingerprint pattern="^EdgeOS$">
@@ -368,6 +390,7 @@
368
390
  <param pos="0" name="os.vendor" value="Ubiquiti"/>
369
391
  <param pos="0" name="os.family" value="Linux"/>
370
392
  <param pos="0" name="os.product" value="EdgeOS"/>
393
+ <param pos="0" name="os.cpe23" value="cpe:/o:ui:edgeos:-"/>
371
394
  <param pos="0" name="hw.vendor" value="Ubiquiti"/>
372
395
  </fingerprint>
373
396
 
@@ -601,14 +624,14 @@
601
624
  <description>Eltek Power Controller</description>
602
625
  <example>WebPower</example>
603
626
  <param pos="0" name="hw.vendor" value="Eltek"/>
604
- <param pos="0" name="hw.device" value="Power device"/>
627
+ <param pos="0" name="hw.device" value="Power Device"/>
605
628
  </fingerprint>
606
629
 
607
630
  <fingerprint pattern="(Expert Power Control NET \d+x\d+) - (.*)$">
608
631
  <description>Gude Expert Power Control</description>
609
632
  <example host.name="Rack42" hw.product="Expert Power Control NET 2x6">Expert Power Control NET 2x6 - Rack42</example>
610
633
  <param pos="0" name="hw.vendor" value="Gude"/>
611
- <param pos="0" name="hw.device" value="Power device"/>
634
+ <param pos="0" name="hw.device" value="Power Device"/>
612
635
  <param pos="1" name="hw.product"/>
613
636
  <param pos="2" name="host.name"/>
614
637
  </fingerprint>
@@ -617,7 +640,7 @@
617
640
  <description>Sentry Switched CDU</description>
618
641
  <example>Sentry Switched CDU</example>
619
642
  <param pos="0" name="hw.vendor" value="ServerTech"/>
620
- <param pos="0" name="hw.device" value="Power device"/>
643
+ <param pos="0" name="hw.device" value="Power Device"/>
621
644
  <param pos="0" name="hw.product" value="Sentry Switched CDU"/>
622
645
  </fingerprint>
623
646
 
@@ -625,7 +648,7 @@
625
648
  <description>Emerson Network Power Rack PDU Card</description>
626
649
  <example>Emerson Network Power Rack PDU Card</example>
627
650
  <param pos="0" name="hw.vendor" value="Emerson"/>
628
- <param pos="0" name="hw.device" value="Power device"/>
651
+ <param pos="0" name="hw.device" value="Power Device"/>
629
652
  <param pos="0" name="hw.product" value="Rack PDU Card"/>
630
653
  </fingerprint>
631
654
 
@@ -636,7 +659,7 @@
636
659
  <example hw.vendor="Vertiv">Vertiv IntelliSlot Web Card</example>
637
660
  <example hw.vendor="Liebert">Liebert IntelliSlot Web Card</example>
638
661
  <param pos="1" name="hw.vendor"/>
639
- <param pos="0" name="hw.device" value="Power device"/>
662
+ <param pos="0" name="hw.device" value="Power Device"/>
640
663
  <param pos="0" name="hw.product" value="IntelliSlot Web Card"/>
641
664
  </fingerprint>
642
665
 
@@ -644,7 +667,7 @@
644
667
  <description>ConnectUPS Web/SNMP Card</description>
645
668
  <example>ConnectUPS Web/SNMP Card</example>
646
669
  <param pos="0" name="hw.vendor" value="APC"/>
647
- <param pos="0" name="hw.device" value="Power device"/>
670
+ <param pos="0" name="hw.device" value="Power Device"/>
648
671
  <param pos="0" name="hw.product" value="ConnectUPS Web Card"/>
649
672
  </fingerprint>
650
673
 
@@ -981,7 +1004,7 @@
981
1004
  <description>Cisco IP Camera</description>
982
1005
  <example>Cisco IP Camera</example>
983
1006
  <param pos="0" name="hw.vendor" value="Cisco"/>
984
- <param pos="0" name="hw.device" value="Web cam"/>
1007
+ <param pos="0" name="hw.device" value="IP Camera"/>
985
1008
  </fingerprint>
986
1009
 
987
1010
  <fingerprint pattern="^Cisco TelePresence MCU">
@@ -1138,19 +1161,19 @@
1138
1161
  <description>Axis Communications Web Cam</description>
1139
1162
  <example>AXIS</example>
1140
1163
  <param pos="0" name="hw.vendor" value="AXIS"/>
1141
- <param pos="0" name="hw.device" value="Web cam"/>
1164
+ <param pos="0" name="hw.device" value="IP Camera"/>
1142
1165
  <param pos="0" name="os.vendor" value="AXIS"/>
1143
1166
  <param pos="0" name="os.family" value="Linux"/>
1144
- <param pos="0" name="os.device" value="Web cam"/>
1167
+ <param pos="0" name="os.device" value="IP Camera"/>
1145
1168
  </fingerprint>
1146
1169
 
1147
1170
  <fingerprint pattern="^Hanwha Techwin$">
1148
1171
  <description>Hanwha Techwin IP Camera</description>
1149
1172
  <example>Hanwha Techwin</example>
1150
1173
  <param pos="0" name="hw.vendor" value="Hanwha Techwin"/>
1151
- <param pos="0" name="hw.device" value="Web cam"/>
1174
+ <param pos="0" name="hw.device" value="IP Camera"/>
1152
1175
  <param pos="0" name="os.vendor" value="Hanwha Techwin"/>
1153
- <param pos="0" name="os.device" value="Web cam"/>
1176
+ <param pos="0" name="os.device" value="IP Camera"/>
1154
1177
  <param pos="0" name="os.family" value="Linux"/>
1155
1178
  </fingerprint>
1156
1179
 
@@ -1159,10 +1182,10 @@
1159
1182
  <example hw.product="WV-NS202A">WV-NS202A Network Camera</example>
1160
1183
  <example hw.product="WV-NS954">WV-NS954 Network Camera</example>
1161
1184
  <param pos="0" name="hw.vendor" value="Panasonic"/>
1162
- <param pos="0" name="hw.device" value="Web cam"/>
1185
+ <param pos="0" name="hw.device" value="IP Camera"/>
1163
1186
  <param pos="1" name="hw.product"/>
1164
1187
  <param pos="0" name="os.vendor" value="Panasonic"/>
1165
- <param pos="0" name="os.device" value="Web cam"/>
1188
+ <param pos="0" name="os.device" value="IP Camera"/>
1166
1189
  <param pos="0" name="os.family" value="Linux"/>
1167
1190
  </fingerprint>
1168
1191
 
@@ -1438,6 +1461,14 @@
1438
1461
  <param pos="0" name="service.cpe23" value="cpe:/a:novnc:novnc:-"/>
1439
1462
  </fingerprint>
1440
1463
 
1464
+ <fingerprint pattern="^VNC Viewer for Java$">
1465
+ <description>RealVNC built-in webserver</description>
1466
+ <example>VNC Viewer for Java</example>
1467
+ <param pos="0" name="service.vendor" value="RealVNC Ltd."/>
1468
+ <param pos="0" name="service.product" value="RealVNC"/>
1469
+ <param pos="0" name="service.cpe23" value="cpe:/a:realvnc:realvnc:-"/>
1470
+ </fingerprint>
1471
+
1441
1472
  <fingerprint pattern="^.* \[Jenkins\]$">
1442
1473
  <description>Jenkins Customized Dashboard</description>
1443
1474
  <example>Continuous Integrations [Jenkins]</example>
@@ -1523,6 +1554,7 @@
1523
1554
  <example>Elastic Kibana</example>
1524
1555
  <param pos="0" name="service.vendor" value="Elastic"/>
1525
1556
  <param pos="0" name="service.product" value="Kibana"/>
1557
+ <param pos="0" name="service.cpe23" value="cpe:/a:elastic:kibana:-"/>
1526
1558
  </fingerprint>
1527
1559
 
1528
1560
  <fingerprint pattern="^Grafana$">
@@ -1594,9 +1626,9 @@
1594
1626
  <fingerprint pattern="^Liebert OpenComms Network Interface Card$">
1595
1627
  <description>Liebert UPS</description>
1596
1628
  <example>Liebert OpenComms Network Interface Card</example>
1597
- <param pos="0" name="hw.device" value="Power device"/>
1629
+ <param pos="0" name="hw.device" value="Power Device"/>
1598
1630
  <param pos="0" name="hw.vendor" value="Liebert"/>
1599
- <param pos="0" name="os.device" value="Power device"/>
1631
+ <param pos="0" name="os.device" value="Power Device"/>
1600
1632
  <param pos="0" name="os.vendor" value="Liebert"/>
1601
1633
  </fingerprint>
1602
1634
 
@@ -1972,7 +2004,7 @@
1972
2004
  <description>Mobotix Network Camera</description>
1973
2005
  <example>Redirect to userimage: /control/userimage.html</example>
1974
2006
  <param pos="0" name="hw.vendor" value="Mobotix"/>
1975
- <param pos="0" name="hw.device" value="Web cam"/>
2007
+ <param pos="0" name="hw.device" value="IP Camera"/>
1976
2008
  <param pos="0" name="hw.product" value="IP Camera"/>
1977
2009
  </fingerprint>
1978
2010
 
@@ -2031,6 +2063,7 @@
2031
2063
  <param pos="0" name="os.vendor" value="Data Domain"/>
2032
2064
  <param pos="0" name="os.product" value="DD OS"/>
2033
2065
  <param pos="0" name="os.device" value="Storage"/>
2066
+ <param pos="0" name="os.cpe23" value="cpe:/o:dell:emc_data_domain_os:-"/>
2034
2067
  <param pos="0" name="hw.vendor" value="Data Domain"/>
2035
2068
  <param pos="0" name="hw.product" value="DD OS"/>
2036
2069
  <param pos="0" name="hw.device" value="Storage"/>
@@ -2164,7 +2197,7 @@
2164
2197
  <example hw.product="IQA22N">IQA22N IQEYE1A1613: Live Images</example>
2165
2198
  <example hw.product="IQeye703">IQeye703 IQEYE011750: Live Images</example>
2166
2199
  <param pos="0" name="hw.vendor" value="IQinVision"/>
2167
- <param pos="0" name="hw.device" value="Web cam"/>
2200
+ <param pos="0" name="hw.device" value="IP Camera"/>
2168
2201
  <param pos="1" name="hw.product"/>
2169
2202
  </fingerprint>
2170
2203
 
@@ -2186,7 +2219,7 @@
2186
2219
  <description>Genetec AutoVu SharpV ALPR Camera</description>
2187
2220
  <example>Genetec - SHARPV01111</example>
2188
2221
  <param pos="0" name="hw.vendor" value="Genetec"/>
2189
- <param pos="0" name="hw.device" value="Web cam"/>
2222
+ <param pos="0" name="hw.device" value="IP Camera"/>
2190
2223
  <param pos="0" name="hw.product" value="AutoVu SharpV"/>
2191
2224
  </fingerprint>
2192
2225
 
@@ -2213,6 +2246,7 @@
2213
2246
  <example>TwonkyMedia server media browser</example>
2214
2247
  <param pos="0" name="service.vendor" value="Lynx Technology"/>
2215
2248
  <param pos="0" name="service.product" value="Twonky Media Server"/>
2249
+ <param pos="0" name="service.cpe23" value="cpe:/a:lynxtechnology:twonky_server:-"/>
2216
2250
  </fingerprint>
2217
2251
 
2218
2252
  <fingerprint pattern="^Spiceworks(?: Server Busy| Help Desk)?$">
@@ -2246,6 +2280,7 @@
2246
2280
  <example>SABnzbd - Log in</example>
2247
2281
  <param pos="0" name="service.vendor" value="SABnzbd"/>
2248
2282
  <param pos="0" name="service.product" value="SABnzbd"/>
2283
+ <param pos="0" name="service.cpe23" value="cpe:/a:sabnzbd:sabnzbd:-"/>
2249
2284
  </fingerprint>
2250
2285
 
2251
2286
  <fingerprint pattern="^(?:Zabbix|.*: Zabbix)$">
@@ -2316,6 +2351,9 @@
2316
2351
  <description>OpenMediaVault</description>
2317
2352
  <example host.name="raspberrypi">openmediavault control panel - raspberrypi</example>
2318
2353
  <example host.name="raspberrypi">OpenMediaVault web administration interface - raspberrypi</example>
2354
+ <param pos="0" name="service.vendor" value="OpenMediaVault"/>
2355
+ <param pos="0" name="service.product" value="OpenMediaVault"/>
2356
+ <param pos="0" name="service.cpe23" value="cpe:/a:openmediavault:openmediavault:-"/>
2319
2357
  <param pos="0" name="os.vendor" value="OpenMediaVault"/>
2320
2358
  <param pos="0" name="os.family" value="Linux"/>
2321
2359
  <param pos="0" name="os.product" value="OpenMediaVault"/>
@@ -2362,6 +2400,7 @@
2362
2400
  <param pos="0" name="service.vendor" value="CrushFTP"/>
2363
2401
  <param pos="0" name="service.product" value="CrushFTP Web Interface"/>
2364
2402
  <param pos="0" name="service.certainty" value="0.5"/>
2403
+ <param pos="0" name="service.cpe23" value="cpe:/a:crushftp:crushftp:-"/>
2365
2404
  </fingerprint>
2366
2405
 
2367
2406
  <fingerprint pattern="^OpenEdge Explorer$">
@@ -2369,6 +2408,7 @@
2369
2408
  <example>OpenEdge Explorer</example>
2370
2409
  <param pos="0" name="service.vendor" value="Progress"/>
2371
2410
  <param pos="0" name="service.product" value="OpenEdge Explorer"/>
2411
+ <param pos="0" name="service.cpe23" value="cpe:/a:progress:openedge:-"/>
2372
2412
  </fingerprint>
2373
2413
 
2374
2414
  <fingerprint pattern="^Consul by HashiCorp$">
@@ -2414,7 +2454,8 @@
2414
2454
  <example>Swagger UI</example>
2415
2455
  <example>Swagger Editor</example>
2416
2456
  <param pos="0" name="service.vendor" value="Swagger"/>
2417
- <param pos="0" name="service.product" value="UI"/>
2457
+ <param pos="0" name="service.product" value="Swagger UI"/>
2458
+ <param pos="0" name="service.cpe23" value="cpe:/a:smartbear:swagger_ui:-"/>
2418
2459
  </fingerprint>
2419
2460
 
2420
2461
  <fingerprint pattern="^Emby$">
@@ -2487,7 +2528,9 @@
2487
2528
  <description>Metasploit Pro (and Community Edition Web UI)</description>
2488
2529
  <example>Metasploit</example>
2489
2530
  <param pos="0" name="service.vendor" value="Rapid7"/>
2490
- <param pos="0" name="service.product" value="Metasploit Pro"/>
2531
+ <param pos="0" name="service.product" value="Metasploit"/>
2532
+ <param pos="0" name="service.edition" value="Pro"/>
2533
+ <param pos="0" name="service.cpe23" value="cpe:/a:rapid7:metasploit:-"/>
2491
2534
  </fingerprint>
2492
2535
 
2493
2536
  <fingerprint pattern="^Makito X Decoder$">
@@ -2531,6 +2574,7 @@
2531
2574
  <param pos="0" name="service.vendor" value="ownCloud"/>
2532
2575
  <param pos="0" name="service.product" value="ownCloud Server"/>
2533
2576
  <param pos="0" name="service.certainty" value="0.5"/>
2577
+ <param pos="0" name="service.cpe23" value="cpe:/a:owncloud:owncloud:-"/>
2534
2578
  </fingerprint>
2535
2579
 
2536
2580
  <fingerprint pattern="^Octopus Deploy$">
@@ -2560,8 +2604,9 @@
2560
2604
  <example>TurnKey Moodle</example>
2561
2605
  <example>New Site</example>
2562
2606
  <param pos="0" name="service.vendor" value="Moodle"/>
2563
- <param pos="0" name="service.product" value="Moodle CMS"/>
2607
+ <param pos="0" name="service.product" value="Moodle"/>
2564
2608
  <param pos="0" name="service.certainty" value="0.5"/>
2609
+ <param pos="0" name="service.cpe23" value="cpe:/a:moodle:moodle:-"/>
2565
2610
  </fingerprint>
2566
2611
 
2567
2612
  <fingerprint pattern="^ArchiveTeam Warrior$">
@@ -2614,6 +2659,7 @@
2614
2659
  <example>Kodi</example>
2615
2660
  <param pos="0" name="service.vendor" value="Kodi"/>
2616
2661
  <param pos="0" name="service.product" value="Media Server"/>
2662
+ <param pos="0" name="service.cpe23" value="cpe:/a:kodi:kodi:-"/>
2617
2663
  </fingerprint>
2618
2664
 
2619
2665
  <fingerprint pattern="^(?:Drupal|TurnKey Drupal\d+|Select an installation profile)$">
@@ -2624,6 +2670,7 @@
2624
2670
  <example>Select an installation profile</example>
2625
2671
  <param pos="0" name="service.vendor" value="Drupal"/>
2626
2672
  <param pos="0" name="service.product" value="CMS"/>
2673
+ <param pos="0" name="service.cpe23" value="cpe:/a:drupal:drupal:-"/>
2627
2674
  </fingerprint>
2628
2675
 
2629
2676
  <fingerprint pattern="^LibreNMS$">
@@ -2679,10 +2726,13 @@
2679
2726
  <fingerprint pattern="^Pulse Connect Secure - SSL">
2680
2727
  <description>Pulse Secure VPN</description>
2681
2728
  <example>Pulse Connect Secure - SSL</example>
2729
+ <param pos="0" name="service.vendor" value="Pulse Secure"/>
2730
+ <param pos="0" name="service.product" value="Pulse Connect Secure"/>
2731
+ <param pos="0" name="service.cpe23" value="cpe:/a:pulsesecure:pulse_connect_secure:-"/>
2682
2732
  <param pos="0" name="os.vendor" value="Pulse Secure"/>
2683
2733
  <param pos="0" name="os.family" value="SSL-VPN"/>
2684
2734
  <param pos="0" name="os.device" value="SSL-VPN"/>
2685
- <param pos="0" name="os.product" value="SSL-VPN"/>
2735
+ <param pos="0" name="os.product" value="Pulse Connect Secure"/>
2686
2736
  </fingerprint>
2687
2737
 
2688
2738
  </fingerprints>