recog 2.3.15 → 2.3.20
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.github/workflows/ci.yml +26 -0
- data/.snyk +10 -0
- data/LICENSE +1 -1
- data/bin/recog_standardize +8 -2
- data/cpe-remap.yaml +314 -170
- data/identifiers/README.md +24 -10
- data/identifiers/fields.txt +104 -0
- data/identifiers/hw_device.txt +5 -4
- data/identifiers/hw_family.txt +17 -0
- data/identifiers/hw_product.txt +87 -6
- data/identifiers/os_architecture.txt +0 -10
- data/identifiers/os_device.txt +12 -31
- data/identifiers/os_family.txt +2 -94
- data/identifiers/os_product.txt +45 -124
- data/identifiers/service_family.txt +14 -37
- data/identifiers/service_product.txt +283 -88
- data/identifiers/vendor.txt +99 -192
- data/lib/recog/version.rb +1 -1
- data/requirements.txt +1 -1
- data/update_cpes.py +110 -49
- data/xml/apache_modules.xml +60 -0
- data/xml/dns_versionbind.xml +40 -17
- data/xml/favicons.xml +163 -20
- data/xml/ftp_banners.xml +25 -25
- data/xml/hp_pjl_id.xml +1 -1
- data/xml/html_title.xml +561 -51
- data/xml/http_cookies.xml +266 -61
- data/xml/http_servers.xml +472 -96
- data/xml/http_wwwauth.xml +53 -26
- data/xml/ldap_searchresult.xml +10 -6
- data/xml/mdns_device-info_txt.xml +308 -10
- data/xml/ntp_banners.xml +15 -1
- data/xml/operating_system.xml +1 -0
- data/xml/rtsp_servers.xml +7 -0
- data/xml/sip_banners.xml +346 -8
- data/xml/sip_user_agents.xml +321 -7
- data/xml/smb_native_lm.xml +32 -1
- data/xml/smb_native_os.xml +158 -33
- data/xml/smtp_banners.xml +48 -7
- data/xml/smtp_expn.xml +1 -0
- data/xml/smtp_help.xml +2 -0
- data/xml/smtp_vrfy.xml +3 -1
- data/xml/snmp_sysdescr.xml +211 -42
- data/xml/ssh_banners.xml +127 -14
- data/xml/telnet_banners.xml +44 -14
- data/xml/tls_jarm.xml +140 -0
- data/xml/x509_issuers.xml +179 -7
- data/xml/x509_subjects.xml +252 -35
- metadata +6 -5
- data/identifiers/software_class.txt +0 -26
- data/identifiers/software_family.txt +0 -91
- data/identifiers/software_product.txt +0 -333
data/xml/sip_user_agents.xml
CHANGED
|
@@ -4,13 +4,97 @@
|
|
|
4
4
|
SIP User Agent header values are matched against these patterns to fingerprint SIP devices.
|
|
5
5
|
-->
|
|
6
6
|
|
|
7
|
+
<!-- Generic high volume matches -->
|
|
8
|
+
|
|
9
|
+
<fingerprint pattern="^SIP/2.0$">
|
|
10
|
+
<description>Generic SIP/2.0 response -- assert nothing.</description>
|
|
11
|
+
<example>SIP/2.0</example>
|
|
12
|
+
</fingerprint>
|
|
13
|
+
|
|
14
|
+
<fingerprint pattern="^TP-Link SIP Stack V1.0.0$">
|
|
15
|
+
<description>TP-Link SIP enabled device</description>
|
|
16
|
+
<example>TP-Link SIP Stack V1.0.0</example>
|
|
17
|
+
<param pos="0" name="hw.vendor" value="TP-LINK"/>
|
|
18
|
+
</fingerprint>
|
|
19
|
+
|
|
20
|
+
<fingerprint pattern="^DLink VoIP Stack$">
|
|
21
|
+
<description>DLink SIP enabled device</description>
|
|
22
|
+
<example>DLink VoIP Stack</example>
|
|
23
|
+
<param pos="0" name="hw.vendor" value="D-Link"/>
|
|
24
|
+
</fingerprint>
|
|
25
|
+
|
|
26
|
+
<fingerprint pattern="^Home&Life HUB/([\d.]+)$">
|
|
27
|
+
<description>Zyxel home routers</description>
|
|
28
|
+
<example>Home&Life HUB/1.1.26.00</example>
|
|
29
|
+
<param pos="0" name="os.vendor" value="Zyxel"/>
|
|
30
|
+
<param pos="1" name="os.version"/>
|
|
31
|
+
<param pos="0" name="os.device" value="Router"/>
|
|
32
|
+
<param pos="0" name="hw.vendor" value="Zyxel"/>
|
|
33
|
+
<param pos="0" name="hw.device" value="Router"/>
|
|
34
|
+
</fingerprint>
|
|
35
|
+
|
|
36
|
+
<!-- Technicolor devices -->
|
|
37
|
+
|
|
38
|
+
<fingerprint pattern="^Technicolor / VANT-6 / AGTOT_([\d.]+) / AGTOT_[\d.]+$">
|
|
39
|
+
<description>Technicolor TG789vac Router</description>
|
|
40
|
+
<example os.version="2.1.4">Technicolor / VANT-6 / AGTOT_2.1.4 / AGTOT_2.1.4</example>
|
|
41
|
+
<param pos="0" name="os.vendor" value="Technicolor"/>
|
|
42
|
+
<param pos="0" name="os.device" value="Router"/>
|
|
43
|
+
<param pos="1" name="os.version"/>
|
|
44
|
+
<param pos="0" name="hw.vendor" value="Technicolor"/>
|
|
45
|
+
<param pos="0" name="hw.product" value="TG789vac"/>
|
|
46
|
+
<param pos="0" name="hw.device" value="Router"/>
|
|
47
|
+
</fingerprint>
|
|
48
|
+
|
|
49
|
+
<fingerprint pattern="^Technicolor / VANT-6$">
|
|
50
|
+
<description>Technicolor TG789vac Router w/o version string</description>
|
|
51
|
+
<example>Technicolor / VANT-6</example>
|
|
52
|
+
<param pos="0" name="os.vendor" value="Technicolor"/>
|
|
53
|
+
<param pos="0" name="os.device" value="Router"/>
|
|
54
|
+
<param pos="0" name="hw.vendor" value="Technicolor"/>
|
|
55
|
+
<param pos="0" name="hw.product" value="TG789vac"/>
|
|
56
|
+
<param pos="0" name="hw.device" value="Router"/>
|
|
57
|
+
</fingerprint>
|
|
58
|
+
|
|
59
|
+
<fingerprint pattern="^(?:Technicolor|MediaAccess) (TG[\w]+) (?:v\d )?Build (\d+\.[\w.-]+)(?: CP\w+)?$">
|
|
60
|
+
<description>Technicolor TGxxx Router with build info</description>
|
|
61
|
+
<example hw.product="TG784n" os.version="10.2.1.O">Technicolor TG784n v3 Build 10.2.1.O</example>
|
|
62
|
+
<example hw.product="TG789vn" os.version="10.5.2.Z.EC">Technicolor TG789vn v3 Build 10.5.2.Z.EC</example>
|
|
63
|
+
<example>MediaAccess TG789vac v2 Build 10.5.8.Y.GX CP1916SAQHD</example>
|
|
64
|
+
<example hw.product="TG799vn" os.version="10.5.2.T.JF">Technicolor TG799vn v2 Build 10.5.2.T.JF</example>
|
|
65
|
+
<example hw.product="TG788vn" os.version="10.5.2.S.GD">MediaAccess TG788vn v2 Build 10.5.2.S.GD</example>
|
|
66
|
+
<example hw.product="TG799vac" os.version="17.2.0405-1021">MediaAccess TG799vac Build 17.2.0405-1021</example>
|
|
67
|
+
<example hw.product="TG389">MediaAccess TG389 Build 10.5.2.T.AQ</example>
|
|
68
|
+
<param pos="0" name="os.vendor" value="Technicolor"/>
|
|
69
|
+
<param pos="0" name="os.device" value="Router"/>
|
|
70
|
+
<param pos="2" name="os.version"/>
|
|
71
|
+
<param pos="0" name="hw.vendor" value="Technicolor"/>
|
|
72
|
+
<param pos="1" name="hw.product"/>
|
|
73
|
+
<param pos="0" name="hw.device" value="Router"/>
|
|
74
|
+
</fingerprint>
|
|
75
|
+
|
|
76
|
+
<!-- Thomson was an older name for Technicolor-->
|
|
77
|
+
|
|
78
|
+
<fingerprint pattern="^Thomson (TG[\w]+) (?:v\d )?Build (\d+\.[\w.-]+)(?: CP\w+)?$">
|
|
79
|
+
<description>Thomson TGxxx Router with build info</description>
|
|
80
|
+
<example hw.product="TG784" os.version="8.4.2.Q">Thomson TG784 Build 8.4.2.Q</example>
|
|
81
|
+
<example hw.product="TG784n" os.version="8.4.H.F">Thomson TG784n Build 8.4.H.F</example>
|
|
82
|
+
<example hw.product="TG797n" os.version="8.C.D.9">Thomson TG797n v2 Build 8.C.D.9</example>
|
|
83
|
+
<param pos="0" name="os.vendor" value="Thomson"/>
|
|
84
|
+
<param pos="0" name="os.device" value="Router"/>
|
|
85
|
+
<param pos="2" name="os.version"/>
|
|
86
|
+
<param pos="0" name="hw.vendor" value="Thomson"/>
|
|
87
|
+
<param pos="1" name="hw.product"/>
|
|
88
|
+
<param pos="0" name="hw.device" value="Router"/>
|
|
89
|
+
</fingerprint>
|
|
90
|
+
|
|
7
91
|
<!-- Axis devices -->
|
|
8
92
|
|
|
9
93
|
<fingerprint pattern="(?i)^AXIS (\S+) Network Video Door Station$">
|
|
10
94
|
<description>Axis Network Video Door stations, which have voice</description>
|
|
11
95
|
<example hw.product="A8105-E">AXIS A8105-E Network Video Door Station</example>
|
|
12
96
|
<param pos="0" name="hw.vendor" value="Axis"/>
|
|
13
|
-
<param pos="0" name="hw.device" value="
|
|
97
|
+
<param pos="0" name="hw.device" value="IP Camera"/>
|
|
14
98
|
<param pos="0" name="hw.family" value="Network Video Door Station"/>
|
|
15
99
|
<param pos="1" name="hw.product"/>
|
|
16
100
|
<param pos="0" name="os.vendor" value="AXIS"/>
|
|
@@ -43,10 +127,12 @@
|
|
|
43
127
|
<!-- AVM.DE Devices -->
|
|
44
128
|
|
|
45
129
|
<fingerprint pattern="^FRITZ!OS$">
|
|
46
|
-
<description>AVM
|
|
130
|
+
<description>AVM Fritz!OS Device</description>
|
|
47
131
|
<example>FRITZ!OS</example>
|
|
48
132
|
<param pos="0" name="os.vendor" value="AVM"/>
|
|
49
|
-
<param pos="0" name="os.product" value="FRITZ!
|
|
133
|
+
<param pos="0" name="os.product" value="FRITZ!OS"/>
|
|
134
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:avm:fritz\!os:-"/>
|
|
135
|
+
<param pos="0" name="hw.vendor" value="AVM"/>
|
|
50
136
|
</fingerprint>
|
|
51
137
|
|
|
52
138
|
<fingerprint pattern="^(?:AVM )?(FRITZ!Box .*) +(\d+\.\d+\.\d+)">
|
|
@@ -67,6 +153,8 @@
|
|
|
67
153
|
<param pos="0" name="os.family" value="FRITZ!Box"/>
|
|
68
154
|
<param pos="1" name="os.product"/>
|
|
69
155
|
<param pos="2" name="os.version"/>
|
|
156
|
+
<param pos="0" name="hw.vendor" value="AVM"/>
|
|
157
|
+
<param pos="0" name="hw.family" value="FRITZ!Box"/>
|
|
70
158
|
</fingerprint>
|
|
71
159
|
|
|
72
160
|
<fingerprint pattern="^(?:AVM )?(FRITZ!Fon .*) +(\d+\.\d+\.\d+)">
|
|
@@ -77,15 +165,19 @@
|
|
|
77
165
|
<param pos="0" name="os.family" value="FRITZ!Fon"/>
|
|
78
166
|
<param pos="1" name="os.product"/>
|
|
79
167
|
<param pos="2" name="os.version"/>
|
|
168
|
+
<param pos="0" name="hw.vendor" value="AVM"/>
|
|
169
|
+
<param pos="0" name="hw.family" value="FRITZ!Fon"/>
|
|
80
170
|
</fingerprint>
|
|
81
171
|
|
|
82
172
|
<fingerprint pattern="^(?:AVM )?(Multibox .*) +(\d+\.\d+\.\d+)">
|
|
83
|
-
<description>AVM Multibox</description>
|
|
173
|
+
<description>AVM Multibox - Generic</description>
|
|
84
174
|
<example>AVM Multibox 7390 NGN 84.05.09 (Jan 13 2012)</example>
|
|
85
175
|
<param pos="0" name="os.vendor" value="AVM"/>
|
|
86
176
|
<param pos="0" name="os.family" value="Multibox"/>
|
|
87
177
|
<param pos="1" name="os.product"/>
|
|
88
178
|
<param pos="2" name="os.version"/>
|
|
179
|
+
<param pos="0" name="hw.vendor" value="AVM"/>
|
|
180
|
+
<param pos="1" name="hw.product"/>
|
|
89
181
|
</fingerprint>
|
|
90
182
|
|
|
91
183
|
<!-- Huawei devices -->
|
|
@@ -100,7 +192,7 @@
|
|
|
100
192
|
<description>Huawei Home Gateway</description>
|
|
101
193
|
<example>Huawei-HomeGateway/V100R001</example>
|
|
102
194
|
<param pos="0" name="hw.vendor" value="Huawei"/>
|
|
103
|
-
<param pos="0" name="hw.device" value="Broadband
|
|
195
|
+
<param pos="0" name="hw.device" value="Broadband Router"/>
|
|
104
196
|
<param pos="0" name="hw.product" value="Home Gateway"/>
|
|
105
197
|
</fingerprint>
|
|
106
198
|
|
|
@@ -108,7 +200,7 @@
|
|
|
108
200
|
<description>Huawei EchoLife Home Gateway</description>
|
|
109
201
|
<example hw.model="HG8121H">HUAWEI-EchoLife HG8121H/V3R018C00S110</example>
|
|
110
202
|
<param pos="0" name="hw.vendor" value="Huawei"/>
|
|
111
|
-
<param pos="0" name="hw.device" value="Broadband
|
|
203
|
+
<param pos="0" name="hw.device" value="Broadband Router"/>
|
|
112
204
|
<param pos="0" name="hw.product" value="EchoLife Home Gateway"/>
|
|
113
205
|
<param pos="1" name="hw.model"/>
|
|
114
206
|
</fingerprint>
|
|
@@ -196,7 +288,7 @@
|
|
|
196
288
|
<param pos="2" name="hw.version"/>
|
|
197
289
|
</fingerprint>
|
|
198
290
|
|
|
199
|
-
<fingerprint pattern="^Nero SIPPS IP Phone Version ([\d\.]+)
|
|
291
|
+
<fingerprint pattern="^Nero SIPPS IP Phone Version ([\d\.]+)$">
|
|
200
292
|
<description>Nero SIPPS IP Phone</description>
|
|
201
293
|
<example service.version="2.0.51.16">Nero SIPPS IP Phone Version 2.0.51.16</example>
|
|
202
294
|
<param pos="0" name="service.vendor" value="Nero"/>
|
|
@@ -245,4 +337,226 @@
|
|
|
245
337
|
<param pos="1" name="hw.product"/>
|
|
246
338
|
</fingerprint>
|
|
247
339
|
|
|
340
|
+
<!-- Grandstream -->
|
|
341
|
+
|
|
342
|
+
<!-- The next few fingerprints could be merged but are split to enable CPEs -->
|
|
343
|
+
|
|
344
|
+
<fingerprint pattern="^Grandstream HT818 ([\d.]+)$">
|
|
345
|
+
<description>Grandstream Handy Tone HT818</description>
|
|
346
|
+
<example os.version="1.0.8.7">Grandstream HT818 1.0.8.7</example>
|
|
347
|
+
<param pos="0" name="os.vendor" value="Grandstream"/>
|
|
348
|
+
<param pos="0" name="os.product" value="HT818 Firmware"/>
|
|
349
|
+
<param pos="1" name="os.version"/>
|
|
350
|
+
<param pos="0" name="os.device" value="SIP Gateway"/>
|
|
351
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:grandstream:ht818_firmware:{os.version}"/>
|
|
352
|
+
<param pos="0" name="hw.vendor" value="Grandstream"/>
|
|
353
|
+
<param pos="0" name="hw.product" value="HT818"/>
|
|
354
|
+
<param pos="0" name="hw.device" value="SIP Gateway"/>
|
|
355
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:grandstream:ht818:-"/>
|
|
356
|
+
</fingerprint>
|
|
357
|
+
|
|
358
|
+
<fingerprint pattern="^Grandstream HT814 ([\d.]+)$">
|
|
359
|
+
<description>Grandstream Handy Tone HT814</description>
|
|
360
|
+
<example os.version="1.0.9.3">Grandstream HT814 1.0.9.3</example>
|
|
361
|
+
<param pos="0" name="os.vendor" value="Grandstream"/>
|
|
362
|
+
<param pos="0" name="os.product" value="HT814 Firmware"/>
|
|
363
|
+
<param pos="1" name="os.version"/>
|
|
364
|
+
<param pos="0" name="os.device" value="SIP Gateway"/>
|
|
365
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:grandstream:ht814_firmware:{os.version}"/>
|
|
366
|
+
<param pos="0" name="hw.vendor" value="Grandstream"/>
|
|
367
|
+
<param pos="0" name="hw.product" value="HT814"/>
|
|
368
|
+
<param pos="0" name="hw.device" value="SIP Gateway"/>
|
|
369
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:grandstream:ht814:-"/>
|
|
370
|
+
</fingerprint>
|
|
371
|
+
|
|
372
|
+
<fingerprint pattern="^Grandstream HT813 ([\d.]+)$">
|
|
373
|
+
<description>Grandstream Handy Tone HT813</description>
|
|
374
|
+
<example os.version="1.0.1.2">Grandstream HT813 1.0.1.2</example>
|
|
375
|
+
<param pos="0" name="os.vendor" value="Grandstream"/>
|
|
376
|
+
<param pos="0" name="os.product" value="HT813 Firmware"/>
|
|
377
|
+
<param pos="1" name="os.version"/>
|
|
378
|
+
<param pos="0" name="os.device" value="SIP Gateway"/>
|
|
379
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:grandstream:ht813_firmware:{os.version}"/>
|
|
380
|
+
<param pos="0" name="hw.vendor" value="Grandstream"/>
|
|
381
|
+
<param pos="0" name="hw.product" value="HT813"/>
|
|
382
|
+
<param pos="0" name="hw.device" value="SIP Gateway"/>
|
|
383
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:grandstream:ht813:-"/>
|
|
384
|
+
</fingerprint>
|
|
385
|
+
|
|
386
|
+
<fingerprint pattern="^Grandstream HT812 ([\d.]+)$">
|
|
387
|
+
<description>Grandstream Handy Tone HT812</description>
|
|
388
|
+
<example os.version="1.0.3.5">Grandstream HT812 1.0.3.5</example>
|
|
389
|
+
<param pos="0" name="os.vendor" value="Grandstream"/>
|
|
390
|
+
<param pos="0" name="os.product" value="HT812 Firmware"/>
|
|
391
|
+
<param pos="1" name="os.version"/>
|
|
392
|
+
<param pos="0" name="os.device" value="SIP Gateway"/>
|
|
393
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:grandstream:ht812_firmware:{os.version}"/>
|
|
394
|
+
<param pos="0" name="hw.vendor" value="Grandstream"/>
|
|
395
|
+
<param pos="0" name="hw.product" value="HT812"/>
|
|
396
|
+
<param pos="0" name="hw.device" value="SIP Gateway"/>
|
|
397
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:grandstream:ht812:-"/>
|
|
398
|
+
</fingerprint>
|
|
399
|
+
|
|
400
|
+
<fingerprint pattern="^Grandstream HT802 ([\d.]+)$">
|
|
401
|
+
<description>Grandstream Handy Tone HT802</description>
|
|
402
|
+
<example os.version="1.0.3.2">Grandstream HT802 1.0.3.2</example>
|
|
403
|
+
<param pos="0" name="os.vendor" value="Grandstream"/>
|
|
404
|
+
<param pos="0" name="os.product" value="HT802 Firmware"/>
|
|
405
|
+
<param pos="1" name="os.version"/>
|
|
406
|
+
<param pos="0" name="os.device" value="SIP Gateway"/>
|
|
407
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:grandstream:ht802_firmware:{os.version}"/>
|
|
408
|
+
<param pos="0" name="hw.vendor" value="Grandstream"/>
|
|
409
|
+
<param pos="0" name="hw.product" value="HT802"/>
|
|
410
|
+
<param pos="0" name="hw.device" value="SIP Gateway"/>
|
|
411
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:grandstream:ht802:-"/>
|
|
412
|
+
</fingerprint>
|
|
413
|
+
|
|
414
|
+
<fingerprint pattern="^Grandstream HT801 ([\d.]+)$">
|
|
415
|
+
<description>Grandstream Handy Tone HT801</description>
|
|
416
|
+
<example os.version="1.0.3.2">Grandstream HT801 1.0.3.2</example>
|
|
417
|
+
<param pos="0" name="os.vendor" value="Grandstream"/>
|
|
418
|
+
<param pos="0" name="os.product" value="HT801 Firmware"/>
|
|
419
|
+
<param pos="1" name="os.version"/>
|
|
420
|
+
<param pos="0" name="os.device" value="SIP Gateway"/>
|
|
421
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:grandstream:ht801_firmware:{os.version}"/>
|
|
422
|
+
<param pos="0" name="hw.vendor" value="Grandstream"/>
|
|
423
|
+
<param pos="0" name="hw.product" value="HT801"/>
|
|
424
|
+
<param pos="0" name="hw.device" value="SIP Gateway"/>
|
|
425
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:grandstream:ht801:-"/>
|
|
426
|
+
</fingerprint>
|
|
427
|
+
|
|
428
|
+
<!-- Grandstream Handy Tone catchall for when CPEs aren't required for vuln mapping-->
|
|
429
|
+
|
|
430
|
+
<fingerprint pattern="^Grandstream (HT7\d\d) ([\d.]+)$">
|
|
431
|
+
<description>Grandstream Handy Tone HT7xx</description>
|
|
432
|
+
<example hw.product="HT701" os.version="1.0.8.2">Grandstream HT701 1.0.8.2</example>
|
|
433
|
+
<param pos="0" name="os.vendor" value="Grandstream"/>
|
|
434
|
+
<param pos="0" name="os.product" value="{hw.product} Firmware"/>
|
|
435
|
+
<param pos="2" name="os.version"/>
|
|
436
|
+
<param pos="0" name="os.device" value="SIP Gateway"/>
|
|
437
|
+
<param pos="0" name="hw.vendor" value="Grandstream"/>
|
|
438
|
+
<param pos="1" name="hw.product"/>
|
|
439
|
+
<param pos="0" name="hw.device" value="SIP Gateway"/>
|
|
440
|
+
</fingerprint>
|
|
441
|
+
|
|
442
|
+
<!-- The next few fingerprints could be merged but are split to enable CPEs -->
|
|
443
|
+
|
|
444
|
+
<fingerprint pattern="^Grandstream GXP2200 ([\d.]+)$">
|
|
445
|
+
<description>Grandstream GXP SIP Phone GXP2200</description>
|
|
446
|
+
<example os.version="1.0.3.27">Grandstream GXP2200 1.0.3.27</example>
|
|
447
|
+
<param pos="0" name="os.vendor" value="Grandstream"/>
|
|
448
|
+
<param pos="0" name="os.product" value="GXP2200 Firmware"/>
|
|
449
|
+
<param pos="1" name="os.version"/>
|
|
450
|
+
<param pos="0" name="os.device" value="SIP Device"/>
|
|
451
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:grandstream:gxp2200_firmware:{os.version}"/>
|
|
452
|
+
<param pos="0" name="hw.vendor" value="Grandstream"/>
|
|
453
|
+
<param pos="0" name="hw.product" value="GXP2200"/>
|
|
454
|
+
<param pos="0" name="hw.device" value="SIP Device"/>
|
|
455
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:grandstream:gxp2200:-"/>
|
|
456
|
+
</fingerprint>
|
|
457
|
+
|
|
458
|
+
<fingerprint pattern="^Grandstream GXP1628 ([\d.]+)$">
|
|
459
|
+
<description>Grandstream GXP SIP Phone GXP1628</description>
|
|
460
|
+
<example os.version="1.0.7.6">Grandstream GXP1628 1.0.7.6</example>
|
|
461
|
+
<param pos="0" name="os.vendor" value="Grandstream"/>
|
|
462
|
+
<param pos="0" name="os.product" value="GXP1628 Firmware"/>
|
|
463
|
+
<param pos="1" name="os.version"/>
|
|
464
|
+
<param pos="0" name="os.device" value="SIP Device"/>
|
|
465
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:grandstream:gxp1628_firmware:{os.version}"/>
|
|
466
|
+
<param pos="0" name="hw.vendor" value="Grandstream"/>
|
|
467
|
+
<param pos="0" name="hw.product" value="GXP1628"/>
|
|
468
|
+
<param pos="0" name="hw.device" value="SIP Device"/>
|
|
469
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:grandstream:gxp1628:-"/>
|
|
470
|
+
</fingerprint>
|
|
471
|
+
|
|
472
|
+
<fingerprint pattern="^Grandstream GXP1625 ([\d.]+)$">
|
|
473
|
+
<description>Grandstream GXP SIP Phone GXP1625</description>
|
|
474
|
+
<example os.version="1.0.4.128">Grandstream GXP1625 1.0.4.128</example>
|
|
475
|
+
<param pos="0" name="os.vendor" value="Grandstream"/>
|
|
476
|
+
<param pos="0" name="os.product" value="GXP1625 Firmware"/>
|
|
477
|
+
<param pos="1" name="os.version"/>
|
|
478
|
+
<param pos="0" name="os.device" value="SIP Device"/>
|
|
479
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:grandstream:gxp1625_firmware:{os.version}"/>
|
|
480
|
+
<param pos="0" name="hw.vendor" value="Grandstream"/>
|
|
481
|
+
<param pos="0" name="hw.product" value="GXP1625"/>
|
|
482
|
+
<param pos="0" name="hw.device" value="SIP Device"/>
|
|
483
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:grandstream:gxp1625:-"/>
|
|
484
|
+
</fingerprint>
|
|
485
|
+
|
|
486
|
+
<fingerprint pattern="^Grandstream GXP1615 ([\d.]+)$">
|
|
487
|
+
<description>Grandstream GXP SIP Phone GXP1615</description>
|
|
488
|
+
<example os.version="1.0.4.128">Grandstream GXP1615 1.0.4.128</example>
|
|
489
|
+
<param pos="0" name="os.vendor" value="Grandstream"/>
|
|
490
|
+
<param pos="0" name="os.product" value="GXP1615 Firmware"/>
|
|
491
|
+
<param pos="1" name="os.version"/>
|
|
492
|
+
<param pos="0" name="os.device" value="SIP Device"/>
|
|
493
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:grandstream:gxp1615_firmware:{os.version}"/>
|
|
494
|
+
<param pos="0" name="hw.vendor" value="Grandstream"/>
|
|
495
|
+
<param pos="0" name="hw.product" value="GXP1615"/>
|
|
496
|
+
<param pos="0" name="hw.device" value="SIP Device"/>
|
|
497
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:grandstream:gxp1615:-"/>
|
|
498
|
+
</fingerprint>
|
|
499
|
+
|
|
500
|
+
<fingerprint pattern="^Grandstream GXP1610 ([\d.]+)$">
|
|
501
|
+
<description>Grandstream GXP SIP Phone GXP1610</description>
|
|
502
|
+
<example os.version="1.0.4.138">Grandstream GXP1610 1.0.4.138</example>
|
|
503
|
+
<param pos="0" name="os.vendor" value="Grandstream"/>
|
|
504
|
+
<param pos="0" name="os.product" value="GXP1610 Firmware"/>
|
|
505
|
+
<param pos="1" name="os.version"/>
|
|
506
|
+
<param pos="0" name="os.device" value="SIP Device"/>
|
|
507
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:grandstream:gxp1610_firmware:{os.version}"/>
|
|
508
|
+
<param pos="0" name="hw.vendor" value="Grandstream"/>
|
|
509
|
+
<param pos="0" name="hw.product" value="GXP1610"/>
|
|
510
|
+
<param pos="0" name="hw.device" value="SIP Device"/>
|
|
511
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:grandstream:gxp1610:-"/>
|
|
512
|
+
</fingerprint>
|
|
513
|
+
|
|
514
|
+
<!-- Grandstream GXP catchall for when CPEs aren't required for vuln mapping-->
|
|
515
|
+
|
|
516
|
+
<fingerprint pattern="^Grandstream (GXP\d\d\d\d) ([\d.]+)$">
|
|
517
|
+
<description>Grandstream GXP SIP Phone</description>
|
|
518
|
+
<example hw.product="GXP2135" os.version="1.0.9.108">Grandstream GXP2135 1.0.9.108</example>
|
|
519
|
+
<param pos="0" name="os.vendor" value="Grandstream"/>
|
|
520
|
+
<param pos="0" name="os.product" value="{hw.product} Firmware"/>
|
|
521
|
+
<param pos="2" name="os.version"/>
|
|
522
|
+
<param pos="0" name="os.device" value="SIP Device"/>
|
|
523
|
+
<param pos="0" name="hw.vendor" value="Grandstream"/>
|
|
524
|
+
<param pos="1" name="hw.product"/>
|
|
525
|
+
<param pos="0" name="hw.device" value="SIP Device"/>
|
|
526
|
+
</fingerprint>
|
|
527
|
+
|
|
528
|
+
<fingerprint pattern="^FortiVoice/([\w.-]+)$">
|
|
529
|
+
<description>Fortinet FortiVoice</description>
|
|
530
|
+
<example service.version="7.31b00">FortiVoice/7.31b00</example>
|
|
531
|
+
<example service.version="5.2.95-5">FortiVoice/5.2.95-5</example>
|
|
532
|
+
<param pos="0" name="service.vendor" value="Fortinet"/>
|
|
533
|
+
<param pos="0" name="service.product" value="FortiVoice"/>
|
|
534
|
+
<param pos="0" name="service.device" value="SIP Gateway"/>
|
|
535
|
+
<param pos="1" name="service.version"/>
|
|
536
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:fortinet:fortivoice:{service.version}"/>
|
|
537
|
+
<param pos="0" name="hw.vendor" value="Fortinet"/>
|
|
538
|
+
<param pos="0" name="hw.family" value="FortiVoice"/>
|
|
539
|
+
<param pos="0" name="hw.device" value="SIP Gateway"/>
|
|
540
|
+
</fingerprint>
|
|
541
|
+
|
|
542
|
+
<fingerprint pattern="^FreeSWITCH$">
|
|
543
|
+
<description>FreeSWITCH FreeSWITCH without version</description>
|
|
544
|
+
<example>FreeSWITCH</example>
|
|
545
|
+
<param pos="0" name="service.vendor" value="FreeSWITCH"/>
|
|
546
|
+
<param pos="0" name="service.product" value="FreeSWITCH"/>
|
|
547
|
+
<param pos="0" name="service.device" value="SIP Gateway"/>
|
|
548
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:freeswitch:freeswitch:-"/>
|
|
549
|
+
</fingerprint>
|
|
550
|
+
|
|
551
|
+
<fingerprint pattern="^FreeSWITCH-mod_sofia/([\d.]+)">
|
|
552
|
+
<description>FreeSWITCH FreeSWITCH with version, mod_sofia</description>
|
|
553
|
+
<example service.version="1.10.4">FreeSWITCH-mod_sofia/1.10.4-release+git~20200805T110119Z~133fc2c870~64bit</example>
|
|
554
|
+
<example service.version="1.6.20">FreeSWITCH-mod_sofia/1.6.20~64bit</example>
|
|
555
|
+
<param pos="0" name="service.vendor" value="FreeSWITCH"/>
|
|
556
|
+
<param pos="0" name="service.product" value="FreeSWITCH"/>
|
|
557
|
+
<param pos="1" name="service.version"/>
|
|
558
|
+
<param pos="0" name="service.device" value="SIP Gateway"/>
|
|
559
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:freeswitch:freeswitch:{service.version}"/>
|
|
560
|
+
</fingerprint>
|
|
561
|
+
|
|
248
562
|
</fingerprints>
|
data/xml/smb_native_lm.xml
CHANGED
|
@@ -40,7 +40,7 @@
|
|
|
40
40
|
<fingerprint pattern="^Samba (\d\.\d+.\d+\w*)">
|
|
41
41
|
<description>Samba</description>
|
|
42
42
|
<example>Samba 3.0.24</example>
|
|
43
|
-
<example>Samba 3.0.28a</example>
|
|
43
|
+
<example service.version="3.0.28a">Samba 3.0.28a</example>
|
|
44
44
|
<example>Samba 3.0.32-0.2-2210-SUSE-SL10.3</example>
|
|
45
45
|
<example>Samba 3.6.3</example>
|
|
46
46
|
<example>Samba 3.6.6</example>
|
|
@@ -51,6 +51,20 @@
|
|
|
51
51
|
<param pos="0" name="service.cpe23" value="cpe:/a:samba:samba:{service.version}"/>
|
|
52
52
|
</fingerprint>
|
|
53
53
|
|
|
54
|
+
<fingerprint pattern="^Samba (?:Samba )?for GuardianOS v\.?(\d\.[\d.]+)$">
|
|
55
|
+
<description>Samba on a SnapServer appliance</description>
|
|
56
|
+
<example os.version="4.3.007.200609131215">Samba Samba for GuardianOS v4.3.007.200609131215</example>
|
|
57
|
+
<example os.version="5.0.133.200807301131">Samba Samba for GuardianOS v5.0.133.200807301131</example>
|
|
58
|
+
<example os.version="7.7.220">Samba for GuardianOS v.7.7.220</example>
|
|
59
|
+
<param pos="0" name="service.vendor" value="Samba"/>
|
|
60
|
+
<param pos="0" name="service.product" value="Samba"/>
|
|
61
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:samba:samba:-"/>
|
|
62
|
+
<param pos="0" name="os.vendor" value="SnapServer"/>
|
|
63
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
64
|
+
<param pos="0" name="os.product" value="GuardianOS"/>
|
|
65
|
+
<param pos="1" name="os.version"/>
|
|
66
|
+
</fingerprint>
|
|
67
|
+
|
|
54
68
|
<fingerprint pattern="^Netreon LANMAN 1.0$">
|
|
55
69
|
<description>Netreon SAN software</description>
|
|
56
70
|
<example>Netreon LANMAN 1.0</example>
|
|
@@ -67,4 +81,21 @@
|
|
|
67
81
|
<param pos="0" name="os.cpe23" value="cpe:/o:mikrotik:routeros:-"/>
|
|
68
82
|
</fingerprint>
|
|
69
83
|
|
|
84
|
+
<fingerprint pattern="^NQ (\d\.\d+)$">
|
|
85
|
+
<description>Visuality Systems NQ Enterprise Storage SMB stack</description>
|
|
86
|
+
<example service.version="7.3">NQ 7.3</example>
|
|
87
|
+
<example service.version="4.32">NQ 4.32</example>
|
|
88
|
+
<param pos="0" name="service.vendor" value="Visuality Systems"/>
|
|
89
|
+
<param pos="0" name="service.product" value="NQ"/>
|
|
90
|
+
<param pos="1" name="service.version"/>
|
|
91
|
+
</fingerprint>
|
|
92
|
+
|
|
93
|
+
<fingerprint pattern="^YNQ (\d\.[\d.]+)$">
|
|
94
|
+
<description>Visuality Systems YNQ Storage SMB stack</description>
|
|
95
|
+
<example service.version="1.2.1">YNQ 1.2.1</example>
|
|
96
|
+
<param pos="0" name="service.vendor" value="Visuality Systems"/>
|
|
97
|
+
<param pos="0" name="service.product" value="YNQ"/>
|
|
98
|
+
<param pos="1" name="service.version"/>
|
|
99
|
+
</fingerprint>
|
|
100
|
+
|
|
70
101
|
</fingerprints>
|
data/xml/smb_native_os.xml
CHANGED
|
@@ -2,6 +2,9 @@
|
|
|
2
2
|
<fingerprints matches="smb.native_os" protocol="smb" database_type="util.os">
|
|
3
3
|
<!--
|
|
4
4
|
SMB fingerprints obtained from the Native OS field of SMB negotations
|
|
5
|
+
NOTE: os.version is used to capture Service Pack for Microsoft Windows.
|
|
6
|
+
This is inconsistent with other OSs and CPE generation and should
|
|
7
|
+
be reviewed for correction.
|
|
5
8
|
-->
|
|
6
9
|
|
|
7
10
|
<fingerprint pattern="^(Windows NT \d\.\d+)$">
|
|
@@ -39,6 +42,11 @@
|
|
|
39
42
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_xp:-"/>
|
|
40
43
|
</fingerprint>
|
|
41
44
|
|
|
45
|
+
<fingerprint pattern="^Windows 6.1$">
|
|
46
|
+
<description>Spoofed value often used by Samba -- assert nothing.</description>
|
|
47
|
+
<example>Windows 6.1</example>
|
|
48
|
+
</fingerprint>
|
|
49
|
+
|
|
42
50
|
<fingerprint pattern="^Windows XP (\d+) (Service Pack \d+)$">
|
|
43
51
|
<description>Windows XP with Service Pack</description>
|
|
44
52
|
<example os.build="2600" os.version="Service Pack 1">Windows XP 2600 Service Pack 1</example>
|
|
@@ -195,7 +203,7 @@
|
|
|
195
203
|
<!-- TODO: Need an example string -->
|
|
196
204
|
|
|
197
205
|
<fingerprint pattern="^Windows \(R\) Storage Server 2008 (?:\w+|\w+ \w+|\w+ \w+ \w+) (\d+)$">
|
|
198
|
-
<description>Windows
|
|
206
|
+
<description>Windows Server 2008 Storage</description>
|
|
199
207
|
<param pos="0" name="os.certainty" value="1.0"/>
|
|
200
208
|
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
201
209
|
<param pos="0" name="os.product" value="Windows Server 2008"/>
|
|
@@ -216,8 +224,6 @@
|
|
|
216
224
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:{os.version}"/>
|
|
217
225
|
</fingerprint>
|
|
218
226
|
|
|
219
|
-
<!-- TODO: Need an example string -->
|
|
220
|
-
|
|
221
227
|
<fingerprint pattern="^Windows Server 2008 HPC Edition (\d+)$">
|
|
222
228
|
<description>Windows Web Server 2008 HPC</description>
|
|
223
229
|
<example>Windows Server 2008 HPC Edition 7600</example>
|
|
@@ -257,30 +263,6 @@
|
|
|
257
263
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
|
|
258
264
|
</fingerprint>
|
|
259
265
|
|
|
260
|
-
<fingerprint pattern="^Windows Server 2016(?: Technical Preview \d+)? (\w+|\w+ \w+|\w+ \w+ \w+)(?: Evaluation)? (\d+)$">
|
|
261
|
-
<description>Windows Server 2016 with a build, without service pack</description>
|
|
262
|
-
<example os.edition="Datacenter" os.build="14393">Windows Server 2016 Datacenter 14393</example>
|
|
263
|
-
<example os.edition="Standard" os.build="14393">Windows Server 2016 Standard Evaluation 14393</example>
|
|
264
|
-
<example os.edition="Essentials" os.build="10586">Windows Server 2016 Technical Preview 4 Essentials 10586</example>
|
|
265
|
-
<param pos="0" name="os.certainty" value="1.0"/>
|
|
266
|
-
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
267
|
-
<param pos="0" name="os.product" value="Windows Server 2016"/>
|
|
268
|
-
<param pos="1" name="os.edition"/>
|
|
269
|
-
<param pos="2" name="os.build"/>
|
|
270
|
-
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2016:-"/>
|
|
271
|
-
</fingerprint>
|
|
272
|
-
|
|
273
|
-
<fingerprint pattern="^Windows Storage Server 2016 (?:\w+|\w+ \w+|\w+ \w+ \w+) (\d+)$">
|
|
274
|
-
<description>Windows Server 2016 Storage</description>
|
|
275
|
-
<example os.build="14393">Windows Storage Server 2016 Standard 14393</example>
|
|
276
|
-
<param pos="0" name="os.certainty" value="1.0"/>
|
|
277
|
-
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
278
|
-
<param pos="0" name="os.product" value="Windows Server 2016"/>
|
|
279
|
-
<param pos="0" name="os.edition" value="Storage"/>
|
|
280
|
-
<param pos="1" name="os.build"/>
|
|
281
|
-
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2016:-"/>
|
|
282
|
-
</fingerprint>
|
|
283
|
-
|
|
284
266
|
<fingerprint pattern="^Windows Web Server 2008 R2 (\d+) (Service Pack \d+)$">
|
|
285
267
|
<description>Windows Server 2008 R2 Web</description>
|
|
286
268
|
<example os.version="Service Pack 1">Windows Web Server 2008 R2 7601 Service Pack 1</example>
|
|
@@ -316,6 +298,81 @@
|
|
|
316
298
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:{os.version}"/>
|
|
317
299
|
</fingerprint>
|
|
318
300
|
|
|
301
|
+
<fingerprint pattern="^Hyper-V Server 7601 Service Pack 1$">
|
|
302
|
+
<description>Windows Server 2008 R2 Hyper-V</description>
|
|
303
|
+
<example>Hyper-V Server 7601 Service Pack 1</example>
|
|
304
|
+
<param pos="0" name="os.certainty" value="1.0"/>
|
|
305
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
306
|
+
<param pos="0" name="os.product" value="Windows Server 2008 R2"/>
|
|
307
|
+
<param pos="0" name="os.edition" value="Hyper-V"/>
|
|
308
|
+
<param pos="0" name="os.build" value="7601"/>
|
|
309
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
|
|
310
|
+
</fingerprint>
|
|
311
|
+
|
|
312
|
+
<!-- Windows 2019 -->
|
|
313
|
+
|
|
314
|
+
<fingerprint pattern="^Windows Server 2019 (\w+|\w+ \w+|\w+ \w+ \w+)(?: Evaluation)? (\d+)$">
|
|
315
|
+
<description>Windows Server 2019 with a build, without service pack</description>
|
|
316
|
+
<example os.build="17763" os.edition="Standard">Windows Server 2019 Standard 17763</example>
|
|
317
|
+
<example os.build="17763" os.edition="Standard">Windows Server 2019 Standard Evaluation 17763</example>
|
|
318
|
+
<example os.build="17763" os.edition="Datacenter">Windows Server 2019 Datacenter 17763</example>
|
|
319
|
+
<example os.build="17763" os.edition="Essentials">Windows Server 2019 Essentials 17763</example>
|
|
320
|
+
<param pos="0" name="os.certainty" value="1.0"/>
|
|
321
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
322
|
+
<param pos="0" name="os.product" value="Windows Server 2019"/>
|
|
323
|
+
<param pos="1" name="os.edition"/>
|
|
324
|
+
<param pos="2" name="os.build"/>
|
|
325
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2019:-"/>
|
|
326
|
+
</fingerprint>
|
|
327
|
+
|
|
328
|
+
<fingerprint pattern="^Hyper-V Server 2019 (\d+)$">
|
|
329
|
+
<description>Windows Server 2019 Hyper-V</description>
|
|
330
|
+
<example os.build="17763">Hyper-V Server 2019 17763</example>
|
|
331
|
+
<param pos="0" name="os.certainty" value="1.0"/>
|
|
332
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
333
|
+
<param pos="0" name="os.product" value="Windows Server 2019"/>
|
|
334
|
+
<param pos="0" name="os.edition" value="Hyper-V"/>
|
|
335
|
+
<param pos="1" name="os.build"/>
|
|
336
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2019:-"/>
|
|
337
|
+
</fingerprint>
|
|
338
|
+
|
|
339
|
+
<!-- Windows 2016 -->
|
|
340
|
+
|
|
341
|
+
<fingerprint pattern="^Windows Server 2016(?: Technical Preview \d+)? (\w+|\w+ \w+|\w+ \w+ \w+)(?: Evaluation)? (\d+)$">
|
|
342
|
+
<description>Windows Server 2016 with a build, without service pack</description>
|
|
343
|
+
<example os.edition="Datacenter" os.build="14393">Windows Server 2016 Datacenter 14393</example>
|
|
344
|
+
<example os.edition="Standard" os.build="14393">Windows Server 2016 Standard Evaluation 14393</example>
|
|
345
|
+
<example os.edition="Essentials" os.build="10586">Windows Server 2016 Technical Preview 4 Essentials 10586</example>
|
|
346
|
+
<param pos="0" name="os.certainty" value="1.0"/>
|
|
347
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
348
|
+
<param pos="0" name="os.product" value="Windows Server 2016"/>
|
|
349
|
+
<param pos="1" name="os.edition"/>
|
|
350
|
+
<param pos="2" name="os.build"/>
|
|
351
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2016:-"/>
|
|
352
|
+
</fingerprint>
|
|
353
|
+
|
|
354
|
+
<fingerprint pattern="^Windows Storage Server 2016 (?:\w+|\w+ \w+|\w+ \w+ \w+) (\d+)$">
|
|
355
|
+
<description>Windows Server 2016 Storage</description>
|
|
356
|
+
<example os.build="14393">Windows Storage Server 2016 Standard 14393</example>
|
|
357
|
+
<param pos="0" name="os.certainty" value="1.0"/>
|
|
358
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
359
|
+
<param pos="0" name="os.product" value="Windows Server 2016"/>
|
|
360
|
+
<param pos="0" name="os.edition" value="Storage"/>
|
|
361
|
+
<param pos="1" name="os.build"/>
|
|
362
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2016:-"/>
|
|
363
|
+
</fingerprint>
|
|
364
|
+
|
|
365
|
+
<fingerprint pattern="^Hyper-V Server 2016 (\d+)$">
|
|
366
|
+
<description>Windows Server 2016 Hyper-V</description>
|
|
367
|
+
<example os.build="14393">Hyper-V Server 2016 14393</example>
|
|
368
|
+
<param pos="0" name="os.certainty" value="1.0"/>
|
|
369
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
370
|
+
<param pos="0" name="os.product" value="Windows Server 2016"/>
|
|
371
|
+
<param pos="0" name="os.edition" value="Hyper-V"/>
|
|
372
|
+
<param pos="1" name="os.build"/>
|
|
373
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2016:-"/>
|
|
374
|
+
</fingerprint>
|
|
375
|
+
|
|
319
376
|
<fingerprint pattern="^Windows Vista \(TM\) (\w+|\w+ \w+|\w+ \w+ \w+) (\d+) (Service Pack \d+)$">
|
|
320
377
|
<description>Windows Vista (SP)</description>
|
|
321
378
|
<example os.edition="Home Premium" os.version="Service Pack 2">Windows Vista (TM) Home Premium 6002 Service Pack 2</example>
|
|
@@ -385,10 +442,9 @@
|
|
|
385
442
|
|
|
386
443
|
<!-- Windows 2012 R2 matches go first to simplify the regular expressions -->
|
|
387
444
|
|
|
388
|
-
<!-- TODO: Need an example string -->
|
|
389
|
-
|
|
390
445
|
<fingerprint pattern="^Windows Server 2012 R2 (\w+|\w+ \w+|\w+ \w+ \w+) (\d+) (Service Pack \d+)$">
|
|
391
446
|
<description>Windows Server 2012 R2 (SP)</description>
|
|
447
|
+
<example os.build="9600" os.edition="Standard" os.version="Service Pack 1">Windows Server 2012 R2 Standard 9600 Service Pack 1</example>
|
|
392
448
|
<param pos="0" name="os.certainty" value="1.0"/>
|
|
393
449
|
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
394
450
|
<param pos="0" name="os.product" value="Windows Server 2012 R2"/>
|
|
@@ -400,7 +456,7 @@
|
|
|
400
456
|
|
|
401
457
|
<fingerprint pattern="^Windows Server 2012 R2 (\w+|\w+ \w+|\w+ \w+ \w+) (\d+)$">
|
|
402
458
|
<description>Windows Server 2012 R2</description>
|
|
403
|
-
<example os.edition="Standard">Windows Server 2012 R2 Standard 9600</example>
|
|
459
|
+
<example os.build="9600" os.edition="Standard">Windows Server 2012 R2 Standard 9600</example>
|
|
404
460
|
<param pos="0" name="os.certainty" value="1.0"/>
|
|
405
461
|
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
406
462
|
<param pos="0" name="os.product" value="Windows Server 2012 R2"/>
|
|
@@ -409,10 +465,35 @@
|
|
|
409
465
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
|
|
410
466
|
</fingerprint>
|
|
411
467
|
|
|
412
|
-
|
|
468
|
+
<fingerprint pattern="^Windows Storage Server 2012 R2 (\w+|\w+ \w+|\w+ \w+ \w+) (\d+)$">
|
|
469
|
+
<description>Windows Server 2012 R2 Storage</description>
|
|
470
|
+
<example os.build="9600" os.edition="Standard">Windows Storage Server 2012 R2 Standard 9600</example>
|
|
471
|
+
<example os.build="9600" os.edition="Workgroup">Windows Storage Server 2012 R2 Workgroup 9600</example>
|
|
472
|
+
<example os.build="9600" os.edition="Essentials">Windows Storage Server 2012 R2 Essentials 9600</example>
|
|
473
|
+
<param pos="0" name="os.certainty" value="1.0"/>
|
|
474
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
475
|
+
<param pos="0" name="os.product" value="Windows Server 2012 R2"/>
|
|
476
|
+
<param pos="1" name="os.edition"/>
|
|
477
|
+
<param pos="2" name="os.build"/>
|
|
478
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
|
|
479
|
+
</fingerprint>
|
|
480
|
+
|
|
481
|
+
<fingerprint pattern="^Hyper-V Server 2012 R2 (\d+)$">
|
|
482
|
+
<description>Windows Server 2012 R2 Hyper-V</description>
|
|
483
|
+
<example os.build="9600">Hyper-V Server 2012 R2 9600</example>
|
|
484
|
+
<param pos="0" name="os.certainty" value="1.0"/>
|
|
485
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
486
|
+
<param pos="0" name="os.product" value="Windows Server 2012 R2"/>
|
|
487
|
+
<param pos="0" name="os.edition" value="Hyper-V"/>
|
|
488
|
+
<param pos="1" name="os.build"/>
|
|
489
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
|
|
490
|
+
</fingerprint>
|
|
491
|
+
|
|
492
|
+
<!-- Windows 2012 -->
|
|
413
493
|
|
|
414
494
|
<fingerprint pattern="^Windows Server 2012 (\w+|\w+ \w+|\w+ \w+ \w+) (\d+) (Service Pack \d+)$">
|
|
415
495
|
<description>Windows Server 2012 (SP)</description>
|
|
496
|
+
<example os.build="9200" os.edition="Standard" os.version="Service Pack 1">Windows Server 2012 Standard 9200 Service Pack 1</example>
|
|
416
497
|
<param pos="0" name="os.certainty" value="1.0"/>
|
|
417
498
|
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
418
499
|
<param pos="0" name="os.product" value="Windows Server 2012"/>
|
|
@@ -433,6 +514,29 @@
|
|
|
433
514
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
|
|
434
515
|
</fingerprint>
|
|
435
516
|
|
|
517
|
+
<fingerprint pattern="^Windows Storage Server 2012 (\w+|\w+ \w+|\w+ \w+ \w+) (\d+)$">
|
|
518
|
+
<description>Windows Server 2012 Storage</description>
|
|
519
|
+
<example os.build="9200" os.edition="Standard">Windows Storage Server 2012 Standard 9200</example>
|
|
520
|
+
<example os.build="9200" os.edition="Workgroup">Windows Storage Server 2012 Workgroup 9200</example>
|
|
521
|
+
<param pos="0" name="os.certainty" value="1.0"/>
|
|
522
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
523
|
+
<param pos="0" name="os.product" value="Windows Server 2012"/>
|
|
524
|
+
<param pos="1" name="os.edition"/>
|
|
525
|
+
<param pos="2" name="os.build"/>
|
|
526
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
|
|
527
|
+
</fingerprint>
|
|
528
|
+
|
|
529
|
+
<fingerprint pattern="^Hyper-V Server 2012 (\d+)$">
|
|
530
|
+
<description>Windows Server 2012 Hyper-V</description>
|
|
531
|
+
<example os.build="9200">Hyper-V Server 2012 9200</example>
|
|
532
|
+
<param pos="0" name="os.certainty" value="1.0"/>
|
|
533
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
534
|
+
<param pos="0" name="os.product" value="Windows Server 2012"/>
|
|
535
|
+
<param pos="0" name="os.edition" value="Hyper-V"/>
|
|
536
|
+
<param pos="1" name="os.build"/>
|
|
537
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
|
|
538
|
+
</fingerprint>
|
|
539
|
+
|
|
436
540
|
<fingerprint pattern="^Windows MultiPoint Server 2012 (?:\w+|\w+ \w+|\w+ \w+ \w+) (\d+) (Service Pack \d+)$">
|
|
437
541
|
<description>Windows MultiPoint Server 2012 (SP)</description>
|
|
438
542
|
<example os.build="9201" os.version="Service Pack 1">Windows MultiPoint Server 2012 Premium 9201 Service Pack 1</example>
|
|
@@ -487,7 +591,7 @@
|
|
|
487
591
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_10:-"/>
|
|
488
592
|
</fingerprint>
|
|
489
593
|
|
|
490
|
-
<fingerprint pattern="^VxWorks">
|
|
594
|
+
<fingerprint pattern="^VxWorks$">
|
|
491
595
|
<description>VxWorks</description>
|
|
492
596
|
<example>VxWorks</example>
|
|
493
597
|
<param pos="0" name="os.certainty" value="0.5"/>
|
|
@@ -498,9 +602,10 @@
|
|
|
498
602
|
<param pos="0" name="service.product" value="VxWorks CIFS"/>
|
|
499
603
|
</fingerprint>
|
|
500
604
|
|
|
501
|
-
<fingerprint pattern="^OS
|
|
605
|
+
<fingerprint pattern="^OS/?400 \D(\d+)\D(\d+)\D(\d+)$">
|
|
502
606
|
<description>OS/400</description>
|
|
503
607
|
<example os.version="4" os.version.version="5" os.version.version.version="0">OS/400 V4R5M0</example>
|
|
608
|
+
<example os.version="5" os.version.version="4" os.version.version.version="5">OS400 V5R4M5</example>
|
|
504
609
|
<param pos="0" name="os.vendor" value="IBM"/>
|
|
505
610
|
<param pos="0" name="os.product" value="OS/400"/>
|
|
506
611
|
<param pos="1" name="os.version"/>
|
|
@@ -509,6 +614,17 @@
|
|
|
509
614
|
<param pos="0" name="os.cpe23" value="cpe:/o:ibm:os_400:{os.version}"/>
|
|
510
615
|
</fingerprint>
|
|
511
616
|
|
|
617
|
+
<fingerprint pattern="^I5OS \D(\d+)\D(\d+)\D(\d+)$">
|
|
618
|
+
<description>IBM i5/OS</description>
|
|
619
|
+
<example os.version="6" os.version.version="1" os.version.version.version="1">I5OS V6R1M1</example>
|
|
620
|
+
<param pos="0" name="os.vendor" value="IBM"/>
|
|
621
|
+
<param pos="0" name="os.product" value="i5/OS"/>
|
|
622
|
+
<param pos="1" name="os.version"/>
|
|
623
|
+
<param pos="2" name="os.version.version"/>
|
|
624
|
+
<param pos="3" name="os.version.version.version"/>
|
|
625
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:ibm:i5os:{os.version}"/>
|
|
626
|
+
</fingerprint>
|
|
627
|
+
|
|
512
628
|
<fingerprint pattern="^Apple Base Station$">
|
|
513
629
|
<description>SMB exposed via SMB shared USB disks on Apple devices</description>
|
|
514
630
|
<example>Apple Base Station</example>
|
|
@@ -529,6 +645,7 @@
|
|
|
529
645
|
<param pos="0" name="hw.vendor" value="EMC"/>
|
|
530
646
|
<param pos="0" name="hw.device" value="Storage"/>
|
|
531
647
|
<param pos="0" name="hw.product" value="Celerra"/>
|
|
648
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:emc:celerra_network_attached_storage:-"/>
|
|
532
649
|
</fingerprint>
|
|
533
650
|
|
|
534
651
|
<fingerprint pattern="^Netreon OS 1.0$">
|
|
@@ -537,6 +654,14 @@
|
|
|
537
654
|
<param pos="0" name="service.vendor" value="Netreon"/>
|
|
538
655
|
</fingerprint>
|
|
539
656
|
|
|
657
|
+
<fingerprint pattern="^QTS$">
|
|
658
|
+
<description>QNAP QTS</description>
|
|
659
|
+
<example>QTS</example>
|
|
660
|
+
<param pos="0" name="os.vendor" value="QNAP"/>
|
|
661
|
+
<param pos="0" name="os.product" value="QTS"/>
|
|
662
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:qnap:qts:-"/>
|
|
663
|
+
</fingerprint>
|
|
664
|
+
|
|
540
665
|
<!-- VisionFS -->
|
|
541
666
|
|
|
542
667
|
<fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)ai(\d{4})">
|