recog 2.3.14 → 2.3.19

data/xml/http_cookies.xml

@@ -49,6 +49,15 @@
     <param pos="0" name="service.product" value="Dynamo"/>
   </fingerprint>
 
+  <fingerprint pattern="^Bugzilla_login_request_cookie=.*">
+    <description>Bugzilla</description>
+    <example>Bugzilla_login_request_cookie=ylMVo9ZDtd; path=/; secure</example>
+    <param pos="0" name="cookie" value="Bugzilla_login_request_cookie"/>
+    <param pos="0" name="service.vendor" value="Mozilla"/>
+    <param pos="0" name="service.product" value="Bugzilla"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:mozilla:bugzilla:-"/>
+  </fingerprint>
+
   <fingerprint pattern="^(WebLogicSession)=[^!]+![^!]+!([0-9]+);.*">
     <description>BEA WebLogic (with timestamp)</description>
     <param pos="1" name="cookie"/>
@@ -156,10 +165,22 @@
   <fingerprint pattern="^DSSignInURL=/">
     <description>Pulse Secure VPN</description>
     <example>DSSignInURL=/; path=/; secure</example>
+    <param pos="0" name="service.vendor" value="Pulse Secure"/>
+    <param pos="0" name="service.product" value="Pulse Connect Secure"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:pulsesecure:pulse_connect_secure:-"/>
     <param pos="0" name="os.vendor" value="Pulse Secure"/>
     <param pos="0" name="os.family" value="SSL-VPN"/>
     <param pos="0" name="os.device" value="SSL-VPN"/>
-    <param pos="0" name="os.product" value="SSL-VPN"/>
+    <param pos="0" name="os.product" value="Pulse Connect Secure"/>
+  </fingerprint>
+
+  <fingerprint pattern="^DokuWiki=.*">
+    <description>Dokuwiki</description>
+    <example>DokuWiki=t8l1aev7703vbtejovp165pv01; path=/; secure</example>
+    <param pos="0" name="cookie" value="DokuWiki"/>
+    <param pos="0" name="service.vendor" value="Dokuwiki"/>
+    <param pos="0" name="service.product" value="Dokuwiki"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:dokuwiki:dokuwiki:-"/>
   </fingerprint>
 
   <fingerprint pattern="^(EktGUID|ecm)=.*">
@@ -181,6 +202,15 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:f5:big-ip_local_traffic_manager:-"/>
   </fingerprint>
 
+  <fingerprint pattern="^i_like_gogits=.*">
+    <description>Gogs</description>
+    <example>i_like_gogits=fc3914645f1d5c76; Path=/; HttpOnly</example>
+    <param pos="0" name="cookie" value="i_like_gogits"/>
+    <param pos="0" name="service.vendor" value="Gogs"/>
+    <param pos="0" name="service.product" value="Gogs"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:gogs:gogs:-"/>
+  </fingerprint>
+
   <fingerprint pattern="^(BigIPCookie)=.*">
     <description>F5 BIG-IP LTM</description>
     <param pos="1" name="cookie"/>
@@ -190,6 +220,25 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:f5:big-ip_local_traffic_manager:-"/>
   </fingerprint>
 
+  <fingerprint pattern="^i_like_gitea=.*">
+    <description>Gitea</description>
+    <example>i_like_gitea=fc39d4645b1d5c7c; Path=/</example>
+    <param pos="0" name="cookie" value="i_like_gitea"/>
+    <param pos="0" name="service.vendor" value="Gitea"/>
+    <param pos="0" name="service.product" value="Gitea"/>
+    <param pos="0" name="service.certainty" value="0.5"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:gitea:gitea:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^_gitlab_session=.*">
+    <description>GitLab</description>
+    <param pos="0" name="cookie" value="_gitlab_session"/>
+    <param pos="0" name="service.vendor" value="GitLab"/>
+    <param pos="0" name="service.product" value="GitLab"/>
+    <param pos="0" name="service.certainty" value="0.5"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:gitlab:gitlab:-"/>
+  </fingerprint>
+
   <fingerprint pattern="^(SERVERID)=([A-Za-z0-9\-_]+)">
     <description>HAProxy - http://haproxy.1wt.eu/download/1.2/doc/architecture.txt</description>
     <param pos="1" name="cookie"/>
@@ -293,6 +342,16 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:php:php:-"/>
   </fingerprint>
 
+  <fingerprint pattern="^phsid=.*">
+    <description>Phabricator</description>
+    <example>phsid=A%2Fxesybc4bypb74dlgojdgw2edct6osflno25h2fw7</example>
+    <param pos="0" name="cookie" value="phsid"/>
+    <param pos="0" name="service.vendor" value="Phacility"/>
+    <param pos="0" name="service.family" value="Phabricator"/>
+    <param pos="0" name="service.product" value="Phabricator"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:phacility:phabricator:-"/>
+  </fingerprint>
+
   <fingerprint pattern="^(RMID)=.*">
     <description>RealMedia OpenAdStream</description>
     <param pos="1" name="cookie"/>
@@ -339,6 +398,15 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:sun:java_system_web_server:4.0"/>
   </fingerprint>
 
+  <fingerprint pattern="^_redmine_session=.*">
+    <description>Redmine</description>
+    <example>_redmine_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWY2MGY5MTJiZjg0NGU1ZmQxZWI2OTViNzAxYjU4NTRiBjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMW1kV3Z5NDl6eVkwWDl4bFQvMUxSSmxmbjhhaDR1WWxERWUrMFQ4dVcvS0k9BjsARg%3D%3D--ce5f52d49b68e30a7ec34b75bf456d6c79d234d2; path=/; HttpOnly</example>
+    <param pos="0" name="cookie" value="_redmine_session"/>
+    <param pos="0" name="service.vendor" value="Redmine"/>
+    <param pos="0" name="service.product" value="Redmine"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:redmine:redmine:-"/>
+  </fingerprint>
+
   <fingerprint pattern="^(gx_session_id|JROUTE)=.*">
     <description>Sun Java System Application Server (formerly iPlanet Application Server, Sun ONE Application Server)</description>
     <param pos="1" name="cookie"/>
@@ -372,6 +440,16 @@
     <param pos="0" name="service.product" value="Urchin Tracking Module"/>
   </fingerprint>
 
+  <fingerprint pattern="vxoaSessionID=">
+    <description>Silver Peak Appliance</description>
+    <example>vxoaSessionID=s%3A2650cfe1df092fc617d229d6d6b5dbfc.70yKRpb371czAWFkZWXdNfCSNexQvtiVr%2B3Z51YXbIw; Path=/; HttpOnly; Secure</example>
+    <example>vxoaSessionID=s%3A65e39ce7ae15193cb4bb0f812d20105b.qgHrgV4MtPKWeKwBrfynmxZmn5iaegh%2FRP0nV5ntaE8; Path=/; HttpOnly; Secure</example>
+    <example>vxoaSessionID=s%3A7e17300953b68c4713990a01bd00aa2b.5mg3edagZCkddCmWqMXbp4AOEzTVby6K2z2jfhal7Uw; Path=/; HttpOnly; Secure</example>
+    <param pos="0" name="hw.vendor" value="Silver Peak"/>
+    <param pos="0" name="hw.device" value="Network Appliance"/>
+    <param pos="0" name="hw.product" value="SD-WAN"/>
+  </fingerprint>
+
   <fingerprint pattern="^(vgncontext|vgnvisitor|ssuid)=.*">
     <description>Vignette</description>
     <param pos="1" name="cookie"/>
@@ -396,6 +474,16 @@
     <param pos="0" name="service.product" value="WebTrends"/>
   </fingerprint>
 
+  <fingerprint pattern="^(ZM_TEST|ZM_LOGIN_CSRF)=.*">
+    <description>Zimbra</description>
+    <example cookie="ZM_TEST">ZM_TEST=true;Secure</example>
+    <example cookie="ZM_LOGIN_CSRF">ZM_LOGIN_CSRF=38ef0bea-a4c3-4f41-9ac3-73d7622f3131;Secure;HttpOnly</example>
+    <param pos="1" name="cookie"/>
+    <param pos="0" name="service.vendor" value="Synacor"/>
+    <param pos="0" name="service.product" value="Zimbra Collaboration Suite"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:synacor:zimbra_collaboration_suite:-"/>
+  </fingerprint>
+
   <fingerprint pattern="^(_ZopeId)=.*">
     <description>Zope</description>
     <param pos="1" name="cookie"/>

data/xml/http_servers.xml

@@ -2,6 +2,23 @@
 <fingerprints matches="http_header.server" protocol="http" database_type="service" preference="0.90">
   <!-- HTTP Server headers are matched against these patterns to fingerprint HTTP servers. -->
 
+  <fingerprint pattern="^BASHttpd/([\d.]+)">
+    <description>BASHttpd</description>
+    <example service.version="4.3.24">BASHttpd/4.3.24-release</example>
+    <param pos="0" name="service.product" value="bashttpd"/>
+    <param pos="0" name="service.vendor" value="Avleen Vig"/>
+    <param pos="1" name="service.version"/>
+  </fingerprint>
+
+  <fingerprint pattern="^monit ([\d.]+)$">
+    <description>Monit</description>
+    <example service.version="5.6">monit 5.6</example>
+    <param pos="0" name="service.vendor" value="Tildeslash"/>
+    <param pos="0" name="service.product" value="Monit"/>
+    <param pos="1" name="service.version"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:tildeslash:monit:{service.version}"/>
+  </fingerprint>
+
   <fingerprint pattern="(?i)^AirTunes/([\d\.]+)$">
     <description>Apple AirTunes/AirPlay, more generally RTSP used by a variety of wireless a/v products</description>
     <example service.version="220.68">AirTunes/220.68</example>
@@ -285,6 +302,7 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:10.0"/>
     <param pos="0" name="os.vendor" value="Microsoft"/>
     <param pos="0" name="os.family" value="Windows"/>
+    <param pos="0" name="os.certainty" value="0.5"/>
   </fingerprint>
 
   <fingerprint pattern="^Microsoft-IIS/([\d\.]+)$">
@@ -440,7 +458,7 @@
     <param pos="0" name="service.component.vendor" value="Red Hat"/>
     <param pos="0" name="service.component.product" value="JBossWeb"/>
     <param pos="2" name="service.component.version"/>
-    <param pos="0" name="service.component.cpe23" value="cpe:/a:redhat:jboss_web_framework_kit:{service.component.version}"/>
+    <param pos="0" name="service.component.cpe23" value="cpe:/a:redhat:jbossweb:{service.component.version}"/>
   </fingerprint>
 
   <fingerprint pattern="^Servlet\/[\d\.]+; JBossAS-(.*)$">
@@ -963,14 +981,14 @@
     <example>ReeCam IP Camera</example>
     <param pos="0" name="hw.vendor" value="Shenzhen Reecam Tech. Ltd."/>
     <param pos="0" name="hw.product" value="ReeCam"/>
-    <param pos="0" name="hw.device" value="Web cam"/>
+    <param pos="0" name="hw.device" value="IP Camera"/>
   </fingerprint>
 
   <fingerprint pattern="^Netwave IP Camera$">
     <description>Netwave cameras</description>
     <example>Netwave IP Camera</example>
     <param pos="0" name="hw.vendor" value="Netwave"/>
-    <param pos="0" name="hw.device" value="Web cam"/>
+    <param pos="0" name="hw.device" value="IP Camera"/>
   </fingerprint>
 
   <fingerprint pattern="^Cougar/([0-9.]*)$">
@@ -1013,7 +1031,7 @@
     <example>camera</example>
     <example>IPCamera Login</example>
     <example>Mini Dome IP Camera</example>
-    <param pos="0" name="hw.device" value="Web cam"/>
+    <param pos="0" name="hw.device" value="IP Camera"/>
   </fingerprint>
 
   <fingerprint pattern="^ASP.NET$">
@@ -1496,6 +1514,7 @@
     <param pos="0" name="service.product" value="Abyss Web Server X1"/>
     <param pos="0" name="service.family" value="Abyss Web Server"/>
     <param pos="1" name="service.version"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:aprelium:abyss_web_server_x1:{service.version}"/>
     <param pos="0" name="os.vendor" value="Microsoft"/>
     <param pos="0" name="os.family" value="Windows"/>
     <param pos="0" name="os.product" value="Windows"/>
@@ -1508,6 +1527,7 @@
     <param pos="0" name="service.product" value="Abyss Web Server X1"/>
     <param pos="0" name="service.family" value="Abyss Web Server"/>
     <param pos="1" name="service.version"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:aprelium:abyss_web_server_x1:{service.version}"/>
     <param pos="0" name="os.vendor" value="Microsoft"/>
     <param pos="0" name="os.family" value="Windows"/>
     <param pos="0" name="os.product" value="Windows"/>
@@ -1693,6 +1713,7 @@
     <example>SAP Internet Graphics Server</example>
     <param pos="0" name="service.vendor" value="SAP"/>
     <param pos="0" name="service.product" value="Internet Graphics Server"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:sap:internet_graphics_server:-"/>
     <param pos="0" name="service.component.vendor" value="SAP"/>
     <param pos="0" name="service.component.product" value="NetWeaver Application Server"/>
     <param pos="0" name="service.component.cpe23" value="cpe:/a:sap:netweaver_application_server:-"/>
@@ -1767,7 +1788,7 @@
     <param pos="0" name="service.product" value="NetCache"/>
     <param pos="1" name="service.version"/>
     <param pos="0" name="os.vendor" value="Blue Coat"/>
-    <param pos="0" name="os.device" value="Web proxy"/>
+    <param pos="0" name="os.device" value="Web Proxy"/>
     <param pos="0" name="os.family" value="NetCache"/>
     <param pos="0" name="os.product" value="NetCache"/>
   </fingerprint>
@@ -1781,16 +1802,20 @@
     <param pos="0" name="os.vendor" value="NetApp"/>
     <param pos="0" name="os.family" value="Data ONTAP"/>
     <param pos="0" name="os.product" value="Data ONTAP"/>
-    <param pos="0" name="os.device" value="File server"/>
     <param pos="1" name="os.version"/>
+    <param pos="0" name="os.device" value="NAS"/>
     <param pos="0" name="os.cpe23" value="cpe:/o:netapp:data_ontap:{os.version}"/>
+    <param pos="0" name="hw.vendor" value="NetApp"/>
+    <param pos="0" name="hw.family" value="Data ONTAP"/>
+    <param pos="0" name="hw.device" value="NAS"/>
+    <param pos="0" name="hw.product" value="Data ONTAP"/>
   </fingerprint>
 
   <fingerprint pattern="^BlueCoat-Security-Appliance$">
     <description>Blue Coat security appliance</description>
     <example>BlueCoat-Security-Appliance</example>
     <param pos="0" name="os.vendor" value="Blue Coat"/>
-    <param pos="0" name="os.device" value="Web proxy"/>
+    <param pos="0" name="os.device" value="Web Proxy"/>
     <param pos="0" name="os.family" value="Blue Coat"/>
     <param pos="0" name="os.product" value="Appliance"/>
   </fingerprint>
@@ -2153,7 +2178,7 @@
   <fingerprint pattern="^D-Link MiniAVServer$">
     <description>D-Link embedded web server for web cams</description>
     <param pos="0" name="os.vendor" value="D-Link"/>
-    <param pos="0" name="os.device" value="Web cam"/>
+    <param pos="0" name="os.device" value="IP Camera"/>
   </fingerprint>
 
   <fingerprint pattern="^ListManagerWeb/(\S+) .*$">
@@ -2368,6 +2393,15 @@
     <param pos="2" name="python.version"/>
   </fingerprint>
 
+  <fingerprint pattern="^Grandstream (GXP[^\s]+) ([\d\.]+)$">
+    <description>Grandstream IP Phone</description>
+    <example hw.product="GXP2020" hw.version="1.2.5.3">Grandstream GXP2020 1.2.5.3</example>
+    <param pos="0" name="hw.vendor" value="Grandstream"/>
+    <param pos="0" name="hw.device" value="VoIP"/>
+    <param pos="2" name="hw.version"/>
+    <param pos="1" name="hw.product"/>
+  </fingerprint>
+
   <fingerprint pattern="^HP Web Jetadmin/((?:\d+\.)*\d+)\s*(.*)$">
     <description>Apache variant for web access to HP printers.</description>
     <example>HP Web Jetadmin/2.0.50 (Win32) mod_auth_sspi/1.0.1 mod_ssl/2.0.50 OpenSSL/0.9.6m</example>
@@ -2583,7 +2617,7 @@
     <param pos="0" name="service.family" value="emHTTPD"/>
     <param pos="1" name="service.version"/>
     <param pos="0" name="os.vendor" value="Microplex"/>
-    <param pos="0" name="os.device" value="Print server"/>
+    <param pos="0" name="os.device" value="Print Server"/>
   </fingerprint>
 
   <fingerprint pattern="^UPS_Server/((?:\d+\.)*\d+)$">
@@ -2791,7 +2825,7 @@
     <param pos="0" name="service.vendor" value="Akamai"/>
     <param pos="0" name="service.product" value="GHost"/>
     <param pos="0" name="os.vendor" value="Akamai"/>
-    <param pos="0" name="os.device" value="Web proxy"/>
+    <param pos="0" name="os.device" value="Web Proxy"/>
   </fingerprint>
 
   <fingerprint pattern="^gws$">
@@ -2925,6 +2959,7 @@
     <param pos="0" name="service.product" value="Intel(R) Active Management Technology"/>
     <param pos="0" name="service.family" value="Intel(R) Active Management Technology"/>
     <param pos="1" name="service.version"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:intel:active_management_technology:{service.version}"/>
   </fingerprint>
 
   <fingerprint pattern="^(?:AMT|Intel\(R\) Active Management Technology)$">
@@ -2934,6 +2969,7 @@
     <param pos="0" name="service.vendor" value="Intel"/>
     <param pos="0" name="service.product" value="Intel(R) Active Management Technology"/>
     <param pos="0" name="service.family" value="Intel(R) Active Management Technology"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:intel:active_management_technology:-"/>
   </fingerprint>
 
   <fingerprint pattern="^Intel\(R\) Standard Manageability\s(\d+\.\d+\.\d+\.\d+|\d+\.\d+\.\d+|\d+\.\d+)">
@@ -2944,6 +2980,7 @@
     <param pos="0" name="service.product" value="Intel(R) Standard Manageability"/>
     <param pos="0" name="service.family" value="Intel(R) Active Management Technology"/>
     <param pos="1" name="service.version"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:intel:standard_manageability:{service.version}"/>
   </fingerprint>
 
   <fingerprint pattern="^Sunny WebBox$">
@@ -2955,7 +2992,7 @@
     <param pos="0" name="hw.vendor" value="SMA"/>
     <param pos="0" name="hw.family" value="Sunny"/>
     <param pos="0" name="hw.product" value="Sunny WebBox"/>
-    <param pos="0" name="hw.device" value="Power device"/>
+    <param pos="0" name="hw.device" value="Power Device"/>
     <param pos="0" name="hw.cpe23" value="cpe:/h:sma:sunny_webbox:-"/>
     <param pos="0" name="os.vendor" value="Microsoft"/>
     <param pos="0" name="os.family" value="Windows"/>
@@ -2968,7 +3005,7 @@
     <example>EnergyICT RTU 101-F25CE1-1524</example>
     <param pos="0" name="hw.family" value="Honeywell"/>
     <param pos="0" name="hw.product" value="RTU"/>
-    <param pos="0" name="hw.device" value="Power device"/>
+    <param pos="0" name="hw.device" value="Power Device"/>
   </fingerprint>
 
   <fingerprint pattern="^AV-TECH AV787 Video Web Server$">
@@ -3121,7 +3158,7 @@
     <description>Huawei Echolife / Home Gateway (and possibly other) devices with UPnP</description>
     <example>Linux UPnP/1.0 Huawei-ATP-IGD</example>
     <param pos="0" name="hw.vendor" value="Huawei"/>
-    <param pos="0" name="hw.device" value="Broadband router"/>
+    <param pos="0" name="hw.device" value="Broadband Router"/>
   </fingerprint>
 
   <fingerprint pattern="(?i)^OpenWRT/kamikaze UPnP/\S+ MiniUPnPd/([\d.]+)$">
@@ -3708,7 +3745,7 @@
     <description>Steinsvik Orbit IP Camera (Truen TCAM Rebrand)</description>
     <example>Linux/2.6.28.9-Mozart-8G, UPnP/1.0, Portable SDK for UPnP devices/1.6.6</example>
     <param pos="0" name="hw.vendor" value="Steinsvik"/>
-    <param pos="0" name="hw.device" value="Web cam"/>
+    <param pos="0" name="hw.device" value="IP Camera"/>
     <param pos="0" name="hw.product" value="Orbit IP Camera"/>
     <param pos="0" name="os.vendor" value="Steinsvik"/>
     <param pos="0" name="os.family" value="Linux"/>
@@ -3738,9 +3775,9 @@
     <description>Axis Network Camera</description>
     <example>Linux/4.9.94-axis5, UPnP/1.0, Portable SDK for UPnP devices/1.6.22</example>
     <param pos="0" name="hw.vendor" value="AXIS"/>
-    <param pos="0" name="hw.device" value="Web cam"/>
+    <param pos="0" name="hw.device" value="IP Camera"/>
     <param pos="0" name="os.vendor" value="AXIS"/>
-    <param pos="0" name="os.device" value="Web cam"/>
+    <param pos="0" name="os.device" value="IP Camera"/>
     <param pos="0" name="os.family" value="Linux"/>
     <param pos="0" name="os.product" value="Linux"/>
     <param pos="1" name="os.version"/>
@@ -3987,7 +4024,7 @@
     <description>ANNKE IP Camera</description>
     <example>MWS 0.01</example>
     <param pos="0" name="hw.vendor" value="ANNKE"/>
-    <param pos="0" name="hw.device" value="Web cam"/>
+    <param pos="0" name="hw.device" value="IP Camera"/>
     <param pos="0" name="hw.product" value="IP Camera"/>
   </fingerprint>
 
@@ -4077,7 +4114,7 @@
     <example>Xfinity Broadband Router Server</example>
     <param pos="0" name="hw.vendor" value="Comcast"/>
     <param pos="0" name="hw.product" value="Xfinity Broadband Router"/>
-    <param pos="0" name="hw.device" value="Broadband router"/>
+    <param pos="0" name="hw.device" value="Broadband Router"/>
   </fingerprint>
 
   <fingerprint pattern="^IX Series IX21\d\d \(magellan-sec\) Software, Version ([^, ]+), (?:MAINTENANCE )?RELEASE SOFTWARE$">
@@ -4164,6 +4201,66 @@
     <param pos="2" name="python.version"/>
   </fingerprint>
 
+  <fingerprint pattern="^pve-api-daemon/[\d.]+">
+    <description>Proxmox api daemon</description>
+    <example>pve-api-daemon/3.0</example>
+    <param pos="0" name="service.vendor" value="Proxmox"/>
+    <param pos="0" name="service.product" value="Proxmox"/>
+    <param pos="0" name="os.vendor" value="Proxmox"/>
+    <param pos="0" name="os.family" value="Linux"/>
+    <param pos="0" name="os.product" value="Proxmox"/>
+  </fingerprint>
+
+  <fingerprint pattern="^Cherokee/([\d.]+) \(Debian\)$">
+    <description>Cherokee Web Server - Debian variant</description>
+    <example service.version="1.2.104">Cherokee/1.2.104 (Debian)</example>
+    <param pos="0" name="service.vendor" value="Cherokee Project"/>
+    <param pos="0" name="service.product" value="Cherokee"/>
+    <param pos="1" name="service.version"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:cherokee-project:cherokee:{service.version}"/>
+    <param pos="0" name="os.vendor" value="Debian"/>
+    <param pos="0" name="os.product" value="Linux"/>
+    <param pos="0" name="os.certainty" value="0.5"/>
+    <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^Cherokee/([\d.]+) \(Ubuntu\)$">
+    <description>Cherokee Web Server - Ubuntu variant</description>
+    <example service.version="1.2.104">Cherokee/1.2.104 (Ubuntu)</example>
+    <param pos="0" name="service.vendor" value="Cherokee Project"/>
+    <param pos="0" name="service.product" value="Cherokee"/>
+    <param pos="1" name="service.version"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:cherokee-project:cherokee:{service.version}"/>
+    <param pos="0" name="os.vendor" value="Ubuntu"/>
+    <param pos="0" name="os.product" value="Linux"/>
+    <param pos="0" name="os.certainty" value="0.5"/>
+    <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^Cherokee/([\d.]+) \(Gentoo Linux\)$">
+    <description>Cherokee Web Server - Gentoo variant</description>
+    <example service.version="1.2.104">Cherokee/1.2.104 (Gentoo Linux)</example>
+    <param pos="0" name="service.vendor" value="Cherokee Project"/>
+    <param pos="0" name="service.product" value="Cherokee"/>
+    <param pos="1" name="service.version"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:cherokee-project:cherokee:{service.version}"/>
+    <param pos="0" name="os.vendor" value="Gentoo"/>
+    <param pos="0" name="os.product" value="Linux"/>
+    <param pos="0" name="os.certainty" value="0.5"/>
+    <param pos="0" name="os.cpe23" value="cpe:/o:gentoo:linux:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^Cherokee(?:/([\d.]+))?(?: \(UNIX\))?$">
+    <description>Cherokee Web Server</description>
+    <example>Cherokee</example>
+    <example service.version="0.2.7">Cherokee/0.2.7</example>
+    <example service.version="1.2.101">Cherokee/1.2.101 (UNIX)</example>
+    <param pos="0" name="service.vendor" value="Cherokee Project"/>
+    <param pos="0" name="service.product" value="Cherokee"/>
+    <param pos="1" name="service.version"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:cherokee-project:cherokee:{service.version}"/>
+  </fingerprint>
+
   <!-- This is a version of ACME mini_httpd where the value 'mini_httpd' has been
       replaced with a UUID in the Server header AND body of the response. It
       is likely vendor or product specific.
@@ -4179,4 +4276,33 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:acme:mini_httpd:-"/>
   </fingerprint>
 
+  <fingerprint pattern="^Unspecified, UPnP/[\d\.]+, Unspecified$">
+    <description>UPNP server</description>
+    <example>Unspecified, UPnP/1.0, Unspecified</example>
+    <param pos="0" name="service.family" value="UPnP"/>
+  </fingerprint>
+
+  <fingerprint pattern="^WNR2000v([0-9]) UPnP/[\d\.]+ miniupnpd/([\d\.]+)$">
+    <description>Netgear WNR2000v5 Router UPnP</description>
+    <example hw.version="5" service.version="1.0">WNR2000v5 UPnP/1.0 miniupnpd/1.0</example>
+    <param pos="1" name="hw.version"/>
+    <param pos="2" name="service.version"/>
+    <param pos="0" name="service.vendor" value="Netgear"/>
+    <param pos="0" name="service.family" value="UPnP"/>
+    <param pos="0" name="service.product" value="MiniUPnP"/>
+    <param pos="0" name="hw.vendor" value="Netgear"/>
+    <param pos="0" name="hw.product" value="WNR2000"/>
+    <param pos="0" name="hw.device" value="Router"/>
+    <param pos="0" name="hw.cpe23" value="cpe:/h:netgear:wnr2000:{hw.version}"/>
+  </fingerprint>
+
+  <fingerprint pattern="^ev-compat$">
+    <description>PELCO CAMERA DEVICE</description>
+    <example>ev-compat</example>
+    <param pos="0" name="service.vendor" value="Pelco"/>
+    <param pos="0" name="service.family" value="UPnP"/>
+    <param pos="0" name="hw.vendor" value="Pelco"/>
+    <param pos="0" name="hw.device" value="IP Camera"/>
+  </fingerprint>
+
 </fingerprints>