recog 2.3.15 → 2.3.20
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.github/workflows/ci.yml +26 -0
- data/.snyk +10 -0
- data/LICENSE +1 -1
- data/bin/recog_standardize +8 -2
- data/cpe-remap.yaml +314 -170
- data/identifiers/README.md +24 -10
- data/identifiers/fields.txt +104 -0
- data/identifiers/hw_device.txt +5 -4
- data/identifiers/hw_family.txt +17 -0
- data/identifiers/hw_product.txt +87 -6
- data/identifiers/os_architecture.txt +0 -10
- data/identifiers/os_device.txt +12 -31
- data/identifiers/os_family.txt +2 -94
- data/identifiers/os_product.txt +45 -124
- data/identifiers/service_family.txt +14 -37
- data/identifiers/service_product.txt +283 -88
- data/identifiers/vendor.txt +99 -192
- data/lib/recog/version.rb +1 -1
- data/requirements.txt +1 -1
- data/update_cpes.py +110 -49
- data/xml/apache_modules.xml +60 -0
- data/xml/dns_versionbind.xml +40 -17
- data/xml/favicons.xml +163 -20
- data/xml/ftp_banners.xml +25 -25
- data/xml/hp_pjl_id.xml +1 -1
- data/xml/html_title.xml +561 -51
- data/xml/http_cookies.xml +266 -61
- data/xml/http_servers.xml +472 -96
- data/xml/http_wwwauth.xml +53 -26
- data/xml/ldap_searchresult.xml +10 -6
- data/xml/mdns_device-info_txt.xml +308 -10
- data/xml/ntp_banners.xml +15 -1
- data/xml/operating_system.xml +1 -0
- data/xml/rtsp_servers.xml +7 -0
- data/xml/sip_banners.xml +346 -8
- data/xml/sip_user_agents.xml +321 -7
- data/xml/smb_native_lm.xml +32 -1
- data/xml/smb_native_os.xml +158 -33
- data/xml/smtp_banners.xml +48 -7
- data/xml/smtp_expn.xml +1 -0
- data/xml/smtp_help.xml +2 -0
- data/xml/smtp_vrfy.xml +3 -1
- data/xml/snmp_sysdescr.xml +211 -42
- data/xml/ssh_banners.xml +127 -14
- data/xml/telnet_banners.xml +44 -14
- data/xml/tls_jarm.xml +140 -0
- data/xml/x509_issuers.xml +179 -7
- data/xml/x509_subjects.xml +252 -35
- metadata +6 -5
- data/identifiers/software_class.txt +0 -26
- data/identifiers/software_family.txt +0 -91
- data/identifiers/software_product.txt +0 -333
data/xml/tls_jarm.xml
ADDED
|
@@ -0,0 +1,140 @@
|
|
|
1
|
+
<?xml version='1.0' encoding='UTF-8'?>
|
|
2
|
+
<fingerprints matches="tls.jarm" protocol="tls" database_type="service">
|
|
3
|
+
<!--
|
|
4
|
+
Fingerprint based on https://github.com/salesforce/jarm
|
|
5
|
+
-->
|
|
6
|
+
|
|
7
|
+
<fingerprint pattern="^2ad2ad16d2ad2ad00042d42d000000332dc9cd7d90589195193c8bb05d84fa|2ad2ad16d2ad2ad22c2ad2ad2ad2adce2e4c8c53174ecbf5529ce7584d5518$|2ad2ad16d2ad2ad22c42d42d000000d342d5966a57139eeaff9f8bc4841b25$">
|
|
8
|
+
<description>Tor relay</description>
|
|
9
|
+
<example>2ad2ad16d2ad2ad00042d42d000000332dc9cd7d90589195193c8bb05d84fa</example>
|
|
10
|
+
<example>2ad2ad16d2ad2ad22c2ad2ad2ad2adce2e4c8c53174ecbf5529ce7584d5518</example>
|
|
11
|
+
<example>2ad2ad16d2ad2ad22c42d42d000000d342d5966a57139eeaff9f8bc4841b25</example>
|
|
12
|
+
<param pos="0" name="service.product" value="Tor"/>
|
|
13
|
+
<param pos="0" name="service.vendor" value="Tor Project"/>
|
|
14
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:torproject:tor:-"/>
|
|
15
|
+
</fingerprint>
|
|
16
|
+
|
|
17
|
+
<fingerprint pattern="^2ad2ad0002ad2ad0002ad2ad2ad2ada9e96d3ba9f7903758a731e0fa01453d$">
|
|
18
|
+
<description>Synology NAS</description>
|
|
19
|
+
<example>2ad2ad0002ad2ad0002ad2ad2ad2ada9e96d3ba9f7903758a731e0fa01453d</example>
|
|
20
|
+
<param pos="0" name="os.device" value="NAS"/>
|
|
21
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
22
|
+
<param pos="0" name="os.product" value="DSM"/>
|
|
23
|
+
<param pos="0" name="os.vendor" value="Synology"/>
|
|
24
|
+
<param pos="0" name="hw.vendor" value="Synology"/>
|
|
25
|
+
<param pos="0" name="hw.device" value="NAS"/>
|
|
26
|
+
</fingerprint>
|
|
27
|
+
|
|
28
|
+
<fingerprint pattern="^2ad2ad16d2ad2ad22c2ad2ad2ad2ad7e5e7dc6f569c9c16238278a408347ef$">
|
|
29
|
+
<description>Ubiquiti EdgeRouter</description>
|
|
30
|
+
<example>2ad2ad16d2ad2ad22c2ad2ad2ad2ad7e5e7dc6f569c9c16238278a408347ef</example>
|
|
31
|
+
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
|
32
|
+
<param pos="0" name="hw.device" value="Router"/>
|
|
33
|
+
<param pos="0" name="hw.product" value="EdgeRouter X"/>
|
|
34
|
+
<param pos="0" name="os.vendor" value="Ubiquiti"/>
|
|
35
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
36
|
+
<param pos="0" name="os.device" value="Router"/>
|
|
37
|
+
</fingerprint>
|
|
38
|
+
|
|
39
|
+
<fingerprint pattern="^07d14d16d21d21d00042d43d000000aa99ce74e2c6d013c745aa52b5cc042d$">
|
|
40
|
+
<description>Metasploit listener</description>
|
|
41
|
+
<example>07d14d16d21d21d00042d43d000000aa99ce74e2c6d013c745aa52b5cc042d</example>
|
|
42
|
+
<param pos="0" name="service.vendor" value="Rapid7"/>
|
|
43
|
+
<param pos="0" name="service.product" value="Metasploit"/>
|
|
44
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:rapid7:metasploit:-"/>
|
|
45
|
+
</fingerprint>
|
|
46
|
+
|
|
47
|
+
<!-- This fingerprint matches Java's TLS stack,
|
|
48
|
+
see https://blog.cobaltstrike.com/2020/12/08/a-red-teamer-plays-with-jarm/ for details -->
|
|
49
|
+
|
|
50
|
+
<fingerprint pattern="^07d14d16d21d21d07c42d41d00041d24a458a375eef0c576d23a7bab9a9fb1$">
|
|
51
|
+
<description>Cobalt Strike listener</description>
|
|
52
|
+
<example>07d14d16d21d21d07c42d41d00041d24a458a375eef0c576d23a7bab9a9fb1</example>
|
|
53
|
+
<param pos="0" name="service.vendor" value="Strategic Cyber LLC"/>
|
|
54
|
+
<param pos="0" name="service.product" value="Cobalt Strike Listener"/>
|
|
55
|
+
<param pos="0" name="service.certainty" value="0.3"/>
|
|
56
|
+
</fingerprint>
|
|
57
|
+
|
|
58
|
+
<fingerprint pattern="^04b02b00004b04b04b04b02b04b04b9674c6b4e623ae36cc2d998e99e2262e$">
|
|
59
|
+
<description>Ligowave WiFi access point</description>
|
|
60
|
+
<example>04b02b00004b04b04b04b02b04b04b9674c6b4e623ae36cc2d998e99e2262e</example>
|
|
61
|
+
<param pos="0" name="hw.vendor" value="Ligowave"/>
|
|
62
|
+
<param pos="0" name="hw.product" value="Infinity Controler"/>
|
|
63
|
+
</fingerprint>
|
|
64
|
+
|
|
65
|
+
<fingerprint pattern="^06d06d07d06d06d06c06d06d06d06d7991b0b1ad2cbf06082e3b1a9dcaaa8d$">
|
|
66
|
+
<description>D-Link DCS-825L WiFi baby camera</description>
|
|
67
|
+
<example>06d06d07d06d06d06c06d06d06d06d7991b0b1ad2cbf06082e3b1a9dcaaa8d</example>
|
|
68
|
+
<param pos="0" name="hw.vendor" value="D-Link"/>
|
|
69
|
+
<param pos="0" name="hw.product" value="DCS-825L"/>
|
|
70
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:d-link:dcs-825l:-"/>
|
|
71
|
+
</fingerprint>
|
|
72
|
+
|
|
73
|
+
<fingerprint pattern="^0ed3dd16d25d00000042d43d000000e9435856b7ee99e87c06831602602f2d$">
|
|
74
|
+
<description>LANCOM Systems - 883 VoIP</description>
|
|
75
|
+
<example>0ed3dd16d25d00000042d43d000000e9435856b7ee99e87c06831602602f2d</example>
|
|
76
|
+
<param pos="0" name="hw.vendor" value="LANCOM Systems"/>
|
|
77
|
+
<param pos="0" name="hw.product" value="883 VoIP"/>
|
|
78
|
+
</fingerprint>
|
|
79
|
+
|
|
80
|
+
<fingerprint pattern="^21d14d00021d21d21c42d43d00041d320c989d4ed06a7e9d3133ba36bb2752$">
|
|
81
|
+
<description>Apple CUPS - web interface</description>
|
|
82
|
+
<example>21d14d00021d21d21c42d43d00041d320c989d4ed06a7e9d3133ba36bb2752</example>
|
|
83
|
+
<param pos="0" name="service.vendor" value="Apple"/>
|
|
84
|
+
<param pos="0" name="service.product" value="CUPS"/>
|
|
85
|
+
<param pos="0" name="service.family" value="CUPS"/>
|
|
86
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:apple:cups:-"/>
|
|
87
|
+
</fingerprint>
|
|
88
|
+
|
|
89
|
+
<fingerprint pattern="^0bd14d0000bd0bd0000bd14d0bd0bd6b64279c20472e17718ddea38ab610fa$">
|
|
90
|
+
<description>Netgear R Series</description>
|
|
91
|
+
<example>0bd14d0000bd0bd0000bd14d0bd0bd6b64279c20472e17718ddea38ab610fa</example>
|
|
92
|
+
<param pos="0" name="hw.vendor" value="Netgear"/>
|
|
93
|
+
<param pos="0" name="hw.product" value="R Series"/>
|
|
94
|
+
</fingerprint>
|
|
95
|
+
|
|
96
|
+
<fingerprint pattern="^2ad2ad16d2ad2ad07c2ad2ad2ad2ad4271ee10d978b0aecbc22f1de60ab611$">
|
|
97
|
+
<description>Netgear Orbi-micro</description>
|
|
98
|
+
<example>2ad2ad16d2ad2ad07c2ad2ad2ad2ad4271ee10d978b0aecbc22f1de60ab611</example>
|
|
99
|
+
<param pos="0" name="hw.vendor" value="Netgear"/>
|
|
100
|
+
<param pos="0" name="hw.product" value="Orbi micro"/>
|
|
101
|
+
<param pos="0" name="hw.device" value="WAP"/>
|
|
102
|
+
<param pos="0" name="hw.family" value="Orbi"/>
|
|
103
|
+
</fingerprint>
|
|
104
|
+
|
|
105
|
+
<fingerprint pattern="^04d02d00004d04d04c04d02d04d04d9674c6b4e623ae36cc2d998e99e2262e$">
|
|
106
|
+
<description>Netgear D Series</description>
|
|
107
|
+
<example>04d02d00004d04d04c04d02d04d04d9674c6b4e623ae36cc2d998e99e2262e</example>
|
|
108
|
+
<param pos="0" name="hw.vendor" value="Netgear"/>
|
|
109
|
+
<param pos="0" name="hw.product" value="D Series"/>
|
|
110
|
+
</fingerprint>
|
|
111
|
+
|
|
112
|
+
<fingerprint pattern="^21d3fd00021d21d21c21d3fd21d21d89188428dae58757cf803176e9701156$">
|
|
113
|
+
<description>Chromecast</description>
|
|
114
|
+
<example>21d3fd00021d21d21c21d3fd21d21d89188428dae58757cf803176e9701156</example>
|
|
115
|
+
<param pos="0" name="os.vendor" value="Google"/>
|
|
116
|
+
<param pos="0" name="os.product" value="Chrome OS"/>
|
|
117
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:google:chrome_os:-"/>
|
|
118
|
+
<param pos="0" name="hw.device" value="Media Server"/>
|
|
119
|
+
<param pos="0" name="hw.vendor" value="Google"/>
|
|
120
|
+
<param pos="0" name="hw.product" value="Chromecast"/>
|
|
121
|
+
</fingerprint>
|
|
122
|
+
|
|
123
|
+
<fingerprint pattern="^21d14d00021d21d21c21d14d21d21d3e9a0dda94718e521eb7d1409c9e3601$">
|
|
124
|
+
<description>VMWare ESXi</description>
|
|
125
|
+
<example>21d14d00021d21d21c21d14d21d21d3e9a0dda94718e521eb7d1409c9e3601</example>
|
|
126
|
+
<param pos="0" name="os.vendor" value="VMware"/>
|
|
127
|
+
<param pos="0" name="os.family" value="VMware ESX/ESXi"/>
|
|
128
|
+
<param pos="0" name="os.product" value="VMware ESXi Server"/>
|
|
129
|
+
<param pos="0" name="os.device" value="Hypervisor"/>
|
|
130
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:vmware:esxi:-"/>
|
|
131
|
+
<param pos="0" name="hw.device" value="Hypervisor"/>
|
|
132
|
+
</fingerprint>
|
|
133
|
+
|
|
134
|
+
<fingerprint pattern="^29d21b20d29d29d21c41d21b21b41d494e0df9532e75299f15ba73156cee38$">
|
|
135
|
+
<description>Merlin C2</description>
|
|
136
|
+
<example>29d21b20d29d29d21c41d21b21b41d494e0df9532e75299f15ba73156cee38</example>
|
|
137
|
+
<param pos="0" name="service.product" value="Merlin"/>
|
|
138
|
+
</fingerprint>
|
|
139
|
+
|
|
140
|
+
</fingerprints>
|
data/xml/x509_issuers.xml
CHANGED
|
@@ -8,16 +8,74 @@
|
|
|
8
8
|
a specific order. Please see the comments in x509_subjects.xml for details.
|
|
9
9
|
-->
|
|
10
10
|
|
|
11
|
+
<!-- The following group has been included for performance reasons -->
|
|
12
|
+
|
|
13
|
+
<fingerprint pattern="^CN=R3,O=Let's Encrypt,C=US$">
|
|
14
|
+
<description>Lets Encrypt R3 - generic -- assert nothing.</description>
|
|
15
|
+
<example>CN=R3,O=Let's Encrypt,C=US</example>
|
|
16
|
+
</fingerprint>
|
|
17
|
+
|
|
18
|
+
<fingerprint pattern="^CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US$">
|
|
19
|
+
<description>Lets Encrypt X3 - generic -- assert nothing.</description>
|
|
20
|
+
<example>CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US</example>
|
|
21
|
+
</fingerprint>
|
|
22
|
+
|
|
23
|
+
<fingerprint pattern="^CN=Amazon,OU=Server CA 1B,O=Amazon,C=US$">
|
|
24
|
+
<description>Amazon AWS Server CA 1B - generic -- assert nothing.</description>
|
|
25
|
+
<example>CN=Amazon,OU=Server CA 1B,O=Amazon,C=US</example>
|
|
26
|
+
</fingerprint>
|
|
27
|
+
|
|
28
|
+
<fingerprint pattern="^CN=DigiCert SHA2 Secure Server CA,O=DigiCert Inc,C=US$">
|
|
29
|
+
<description>DigiCert SHA2 - generic -- assert nothing.</description>
|
|
30
|
+
<example>CN=DigiCert SHA2 Secure Server CA,O=DigiCert Inc,C=US</example>
|
|
31
|
+
</fingerprint>
|
|
32
|
+
|
|
33
|
+
<fingerprint pattern="^CN=DigiCert TLS (?:RSA SHA256|Hybrid ECC SHA384) 2020 CA1,O=DigiCert Inc,C=US$">
|
|
34
|
+
<description>DigiCert SHA256 2020 CA1 - generic -- assert nothing.</description>
|
|
35
|
+
<example>CN=DigiCert TLS RSA SHA256 2020 CA1,O=DigiCert Inc,C=US</example>
|
|
36
|
+
<example>CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1,O=DigiCert Inc,C=US</example>
|
|
37
|
+
</fingerprint>
|
|
38
|
+
|
|
39
|
+
<fingerprint pattern="^CN=DigiCert Secure Site ECC CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US$">
|
|
40
|
+
<description>DigiCert ECC CA-1 - generic -- assert nothing.</description>
|
|
41
|
+
<example>CN=DigiCert Secure Site ECC CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US</example>
|
|
42
|
+
</fingerprint>
|
|
43
|
+
|
|
44
|
+
<fingerprint pattern="^CN=DigiCert SHA2 (?:Extended Validation|High Assurance) Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US$">
|
|
45
|
+
<description>DigiCert SHA2 EV - generic -- assert nothing.</description>
|
|
46
|
+
<example>CN=DigiCert SHA2 Extended Validation Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US</example>
|
|
47
|
+
<example>CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US</example>
|
|
48
|
+
</fingerprint>
|
|
49
|
+
|
|
50
|
+
<fingerprint pattern="^CN=Sectigo RSA (?:Domain|Organization) Validation Secure Server CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB$">
|
|
51
|
+
<description>Sectigo RSA - generic -- assert nothing.</description>
|
|
52
|
+
<example>CN=Sectigo RSA Domain Validation Secure Server CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB</example>
|
|
53
|
+
<example>CN=Sectigo RSA Organization Validation Secure Server CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB</example>
|
|
54
|
+
</fingerprint>
|
|
55
|
+
|
|
56
|
+
<fingerprint pattern="^CN=GeoTrust RSA CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US$">
|
|
57
|
+
<description>GeoTrust RSA CA 2018 - generic -- assert nothing.</description>
|
|
58
|
+
<example>CN=GeoTrust RSA CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US</example>
|
|
59
|
+
</fingerprint>
|
|
60
|
+
|
|
61
|
+
<fingerprint pattern="^CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs\.godaddy\.com/repository/,O=GoDaddy.com\\, Inc\.,L=Scottsdale,ST=Arizona,C=US$">
|
|
62
|
+
<description>Go Daddy G2 - generic -- assert nothing.</description>
|
|
63
|
+
<example>CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US</example>
|
|
64
|
+
</fingerprint>
|
|
65
|
+
|
|
11
66
|
<!-- Chromecast and various devices that support the Cast protocol -->
|
|
12
67
|
|
|
13
68
|
<fingerprint pattern="^CN=Eureka Gen1 ICA,OU=Google TV,O=Google Inc,L=Mountain View,ST=California,C=US$">
|
|
14
69
|
<description>Google Chromecast Gen 1</description>
|
|
15
70
|
<example>CN=Eureka Gen1 ICA,OU=Google TV,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
|
16
71
|
<param pos="0" name="os.vendor" value="Google"/>
|
|
17
|
-
<param pos="0" name="os.product" value="
|
|
72
|
+
<param pos="0" name="os.product" value="Chrome OS"/>
|
|
73
|
+
<param pos="0" name="os.certainty" value="0.5"/>
|
|
74
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:google:chrome_os:-"/>
|
|
18
75
|
<param pos="0" name="hw.device" value="Media Server"/>
|
|
19
76
|
<param pos="0" name="hw.vendor" value="Google"/>
|
|
20
77
|
<param pos="0" name="hw.product" value="Chromecast"/>
|
|
78
|
+
<param pos="0" name="hw.certainty" value="0.5"/>
|
|
21
79
|
<param pos="0" name="chromecast.generation" value="1"/>
|
|
22
80
|
</fingerprint>
|
|
23
81
|
|
|
@@ -32,10 +90,13 @@
|
|
|
32
90
|
<example chromecast.generation="11" chromecast.capabilities="Video Assist">CN=Chromecast ICA 11 (Video Assist),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
|
33
91
|
<example chromecast.generation="12">CN=Chromecast ICA 12,OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
|
34
92
|
<param pos="0" name="os.vendor" value="Google"/>
|
|
35
|
-
<param pos="0" name="os.product" value="
|
|
93
|
+
<param pos="0" name="os.product" value="Chrome OS"/>
|
|
94
|
+
<param pos="0" name="os.certainty" value="0.5"/>
|
|
95
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:google:chrome_os:-"/>
|
|
36
96
|
<param pos="0" name="hw.device" value="Media Server"/>
|
|
37
97
|
<param pos="0" name="hw.vendor" value="Google"/>
|
|
38
98
|
<param pos="0" name="hw.product" value="Chromecast"/>
|
|
99
|
+
<param pos="0" name="hw.certainty" value="0.5"/>
|
|
39
100
|
<param pos="1" name="chromecast.generation"/>
|
|
40
101
|
<param pos="2" name="chromecast.capabilities"/>
|
|
41
102
|
</fingerprint>
|
|
@@ -113,10 +174,24 @@
|
|
|
113
174
|
<fingerprint pattern="^CN=[a-zA-Z0-9]+,OU=Internally Generated Certificate,O=American Power Conversion Corp,L=Default Locality,ST=Default State,C=US$">
|
|
114
175
|
<description>APC UPS</description>
|
|
115
176
|
<example>CN=ZA1117619249,OU=Internally Generated Certificate,O=American Power Conversion Corp,L=Default Locality,ST=Default State,C=US</example>
|
|
116
|
-
<param pos="0" name="hw.device" value="Power
|
|
177
|
+
<param pos="0" name="hw.device" value="Power Device"/>
|
|
117
178
|
<param pos="0" name="hw.vendor" value="APC"/>
|
|
118
179
|
</fingerprint>
|
|
119
180
|
|
|
181
|
+
<fingerprint pattern="^CN=ASA Temporary Self Signed Certificate$">
|
|
182
|
+
<description>Cisco ASA Temp Cert</description>
|
|
183
|
+
<example>CN=ASA Temporary Self Signed Certificate</example>
|
|
184
|
+
<param pos="0" name="os.vendor" value="Cisco"/>
|
|
185
|
+
<param pos="0" name="os.family" value="Adaptive Security Appliance"/>
|
|
186
|
+
<param pos="0" name="os.product" value="Adaptive Security Appliance"/>
|
|
187
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:cisco:adaptive_security_appliance_software:-"/>
|
|
188
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
189
|
+
<param pos="0" name="hw.family" value="Adaptive Security Appliance"/>
|
|
190
|
+
<param pos="0" name="hw.product" value="Adaptive Security Appliance"/>
|
|
191
|
+
<param pos="0" name="hw.device" value="Firewall"/>
|
|
192
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:cisco:adaptive_security_appliance:-"/>
|
|
193
|
+
</fingerprint>
|
|
194
|
+
|
|
120
195
|
<fingerprint pattern="^CN=Temporary CA [a-fA-F0-9]{8}\-[a-fA-F0-9]{4}\-[a-fA-F0-9]{4}\-[a-fA-F0-9]{4}\-[a-fA-F0-9]{12},OU=Temporary CA">
|
|
121
196
|
<description>Cisco Video Communication Server</description>
|
|
122
197
|
<example>CN=Temporary CA 218131fe-8af4-11e7-aa6e-9950d6bbaf74,OU=Temporary CA 218131fe-8af4-11e7-aa6e-9950d6bbaf74,O=Temporary CA 218131fe-8af4-11e7-aa6e-9950d6bbaf74</example>
|
|
@@ -126,19 +201,22 @@
|
|
|
126
201
|
</fingerprint>
|
|
127
202
|
|
|
128
203
|
<fingerprint pattern="^O=VMware Installer$">
|
|
129
|
-
<description>
|
|
204
|
+
<description>VMware ESXi w/Installer</description>
|
|
130
205
|
<example>O=VMware Installer</example>
|
|
131
206
|
<param pos="0" name="os.vendor" value="VMware"/>
|
|
132
|
-
<param pos="0" name="os.
|
|
207
|
+
<param pos="0" name="os.family" value="VMware ESX/ESXi"/>
|
|
208
|
+
<param pos="0" name="os.product" value="VMware ESXi Server"/>
|
|
133
209
|
<param pos="0" name="os.device" value="Hypervisor"/>
|
|
134
210
|
<param pos="0" name="os.cpe23" value="cpe:/o:vmware:esxi:-"/>
|
|
211
|
+
<param pos="0" name="hw.device" value="Hypervisor"/>
|
|
135
212
|
</fingerprint>
|
|
136
213
|
|
|
137
214
|
<fingerprint pattern="^CN=CA,OU=VMware Engineering,O=vCenter,ST=California,C=US$">
|
|
138
|
-
<description>
|
|
215
|
+
<description>VMware vCenter</description>
|
|
139
216
|
<example>CN=CA,OU=VMware Engineering,O=vCenter,ST=California,C=US</example>
|
|
140
217
|
<param pos="0" name="service.vendor" value="VMware"/>
|
|
141
218
|
<param pos="0" name="service.product" value="vCenter"/>
|
|
219
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:vmware:vcenter_server:-"/>
|
|
142
220
|
</fingerprint>
|
|
143
221
|
|
|
144
222
|
<fingerprint pattern="^CN=Default Issuer \(Do not trust\),OU=ISS,O=Hewlett Packard Enterprise,L=Houston,ST=Texas,C=US$">
|
|
@@ -148,11 +226,105 @@
|
|
|
148
226
|
<param pos="0" name="hw.vendor" value="HP"/>
|
|
149
227
|
<param pos="0" name="hw.family" value="iLO"/>
|
|
150
228
|
<param pos="0" name="hw.product" value="iLO"/>
|
|
151
|
-
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:
|
|
229
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights-out:-"/>
|
|
152
230
|
<param pos="0" name="os.device" value="Lights Out Management"/>
|
|
153
231
|
<param pos="0" name="os.vendor" value="HP"/>
|
|
154
232
|
<param pos="0" name="os.family" value="iLO"/>
|
|
155
233
|
<param pos="0" name="os.product" value="iLO"/>
|
|
234
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_firmware:-"/>
|
|
235
|
+
</fingerprint>
|
|
236
|
+
|
|
237
|
+
<fingerprint pattern="^CN=synology.com,O=Synology Inc.,L=Taipei,C=TW$">
|
|
238
|
+
<description>Synology</description>
|
|
239
|
+
<example>CN=synology.com,O=Synology Inc.,L=Taipei,C=TW</example>
|
|
240
|
+
<param pos="0" name="os.device" value="NAS"/>
|
|
241
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
242
|
+
<param pos="0" name="os.product" value="DSM"/>
|
|
243
|
+
<param pos="0" name="os.vendor" value="Synology"/>
|
|
244
|
+
<param pos="0" name="hw.vendor" value="Synology"/>
|
|
245
|
+
<param pos="0" name="hw.device" value="NAS"/>
|
|
246
|
+
</fingerprint>
|
|
247
|
+
|
|
248
|
+
<fingerprint pattern="^CN=default(?: [A-Z]+)?,OU=NS Internal,O=Citrix ANG,L=San Jose,ST=California,C=US$">
|
|
249
|
+
<description>Citrix Netscaler (later renamed to Citrix ADC)</description>
|
|
250
|
+
<example>CN=default,OU=NS Internal,O=Citrix ANG,L=San Jose,ST=California,C=US</example>
|
|
251
|
+
<example>CN=default UYENMB,OU=NS Internal,O=Citrix ANG,L=San Jose,ST=California,C=US</example>
|
|
252
|
+
<param pos="0" name="service.vendor" value="Citrix"/>
|
|
253
|
+
<param pos="0" name="service.family" value="Netscaler"/>
|
|
254
|
+
<param pos="0" name="service.product" value="Netscaler"/>
|
|
255
|
+
<param pos="0" name="service.device" value="Network Management Device"/>
|
|
256
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:citrix:netscaler:-"/>
|
|
257
|
+
<param pos="0" name="os.vendor" value="Citrix"/>
|
|
258
|
+
<param pos="0" name="os.family" value="Netscaler"/>
|
|
259
|
+
<param pos="0" name="os.product" value="Netscaler Gateway Firmware"/>
|
|
260
|
+
<param pos="0" name="os.device" value="Network Management Device"/>
|
|
261
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:citrix:netscaler_gateway_firmware:-"/>
|
|
262
|
+
<param pos="0" name="hw.vendor" value="Citrix"/>
|
|
263
|
+
<param pos="0" name="hw.family" value="Netscaler"/>
|
|
264
|
+
<param pos="0" name="hw.product" value="Netscaler Gateway"/>
|
|
265
|
+
<param pos="0" name="hw.device" value="Network Management Device"/>
|
|
266
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:citrix:netscaler_gateway:-"/>
|
|
267
|
+
</fingerprint>
|
|
268
|
+
|
|
269
|
+
<fingerprint pattern="^O=Technicolor,L=Edegem,ST=Antwerp,C=BE$">
|
|
270
|
+
<description>Technicolor Router - without model or version</description>
|
|
271
|
+
<example>O=Technicolor,L=Edegem,ST=Antwerp,C=BE</example>
|
|
272
|
+
<param pos="0" name="os.vendor" value="Technicolor"/>
|
|
273
|
+
<param pos="0" name="os.device" value="Router"/>
|
|
274
|
+
<param pos="0" name="os.certainty" value="0.5"/>
|
|
275
|
+
<param pos="0" name="hw.vendor" value="Technicolor"/>
|
|
276
|
+
<param pos="0" name="hw.device" value="Router"/>
|
|
277
|
+
<param pos="0" name="hw.certainty" value="0.5"/>
|
|
278
|
+
</fingerprint>
|
|
279
|
+
|
|
280
|
+
<fingerprint pattern="^CN=Vigor Router,OU=DrayTek Support,O=DrayTek Corp.,L=HuKou,ST=HsinChu,C=TW$">
|
|
281
|
+
<description>DrayTek Vigor Router - without model or version</description>
|
|
282
|
+
<example>CN=Vigor Router,OU=DrayTek Support,O=DrayTek Corp.,L=HuKou,ST=HsinChu,C=TW</example>
|
|
283
|
+
<param pos="0" name="os.vendor" value="DrayTek"/>
|
|
284
|
+
<param pos="0" name="os.device" value="Router"/>
|
|
285
|
+
<param pos="0" name="os.certainty" value="0.5"/>
|
|
286
|
+
<param pos="0" name="hw.vendor" value="DrayTek"/>
|
|
287
|
+
<param pos="0" name="hw.family" value="Vigor"/>
|
|
288
|
+
<param pos="0" name="hw.device" value="Router"/>
|
|
289
|
+
<param pos="0" name="hw.certainty" value="0.5"/>
|
|
290
|
+
</fingerprint>
|
|
291
|
+
|
|
292
|
+
<fingerprint pattern="^CN=Kubernetes Ingress Controller Fake Certificate,O=Acme Co$">
|
|
293
|
+
<description>Kubernetes NGINX Ingress Controller with default cert</description>
|
|
294
|
+
<example>CN=Kubernetes Ingress Controller Fake Certificate,O=Acme Co</example>
|
|
295
|
+
<param pos="0" name="service.vendor" value="Kubernetes"/>
|
|
296
|
+
<param pos="0" name="service.family" value="Kubernetes"/>
|
|
297
|
+
<param pos="0" name="service.product" value="NGINX Ingress Controller"/>
|
|
298
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:kubernetes:nginx_ingress_controller:-"/>
|
|
299
|
+
</fingerprint>
|
|
300
|
+
|
|
301
|
+
<fingerprint pattern="^CN=TRAEFIK DEFAULT CERT$">
|
|
302
|
+
<description>Traefik Proxy default certificate</description>
|
|
303
|
+
<example>CN=TRAEFIK DEFAULT CERT</example>
|
|
304
|
+
<param pos="0" name="service.vendor" value="Traefik Labs"/>
|
|
305
|
+
<param pos="0" name="service.family" value="Traefik"/>
|
|
306
|
+
<param pos="0" name="service.product" value="Traefik Proxy"/>
|
|
307
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:containous:traefik:-"/>
|
|
308
|
+
</fingerprint>
|
|
309
|
+
|
|
310
|
+
<fingerprint pattern="^(?i)CN=Fireware web CA,OU=Fireware,O=WatchGuard(?: CA)?$">
|
|
311
|
+
<description>WatchGuard Fireware</description>
|
|
312
|
+
<example>CN=Fireware web ca,OU=Fireware,O=WatchGuard</example>
|
|
313
|
+
<example>CN=Fireware web CA,OU=Fireware,O=Watchguard CA</example>
|
|
314
|
+
<param pos="0" name="service.vendor" value="WatchGuard"/>
|
|
315
|
+
<param pos="0" name="service.product" value="Fireware XTM"/>
|
|
316
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:watchguard:fireware_xtm:-"/>
|
|
317
|
+
<param pos="0" name="os.vendor" value="WatchGuard"/>
|
|
318
|
+
<param pos="0" name="os.product" value="Fireware"/>
|
|
319
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:watchguard:fireware:-"/>
|
|
320
|
+
</fingerprint>
|
|
321
|
+
|
|
322
|
+
<fingerprint pattern="^O=Caddy Self-Signed$">
|
|
323
|
+
<description>CaddyServer Caddy - golang based httpd</description>
|
|
324
|
+
<example>O=Caddy Self-Signed</example>
|
|
325
|
+
<param pos="0" name="service.vendor" value="CaddyServer"/>
|
|
326
|
+
<param pos="0" name="service.product" value="Caddy"/>
|
|
327
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:caddyserver:caddy:-"/>
|
|
156
328
|
</fingerprint>
|
|
157
329
|
|
|
158
330
|
</fingerprints>
|
data/xml/x509_subjects.xml
CHANGED
|
@@ -51,7 +51,7 @@
|
|
|
51
51
|
<fingerprint pattern="^CN=([a-fA-F0-9:]+),OU=([^,]+),O=Cisco-Linksys\\, LLC">
|
|
52
52
|
<description>Cisco / Linksys Router</description>
|
|
53
53
|
<example host.mac="00:22:6b:ef:1e:d0" hw.product="RV042">CN=00:22:6b:ef:1e:d0,OU=RV042,O=Cisco-Linksys\, LLC,L=Irvine,C=US</example>
|
|
54
|
-
<param pos="0" name="hw.device" value="Broadband
|
|
54
|
+
<param pos="0" name="hw.device" value="Broadband Router"/>
|
|
55
55
|
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
56
56
|
<param pos="2" name="hw.product"/>
|
|
57
57
|
<param pos="1" name="host.mac"/>
|
|
@@ -61,7 +61,7 @@
|
|
|
61
61
|
<description>Cisco Post-Linksys Router</description>
|
|
62
62
|
<example host.mac="74:a2:e6:5c:99:21" hw.product="RV042G">CN=74:a2:e6:5c:99:21,OU=RV042G,O=Cisco Systems\, Inc.,L=Irvine,C=US</example>
|
|
63
63
|
<example host.mac="4C4E315901D0" hw.product="RV180">CN=4C4E315901D0,OU=RV180,O=Cisco Systems\, Inc.,C=US</example>
|
|
64
|
-
<param pos="0" name="hw.device" value="Broadband
|
|
64
|
+
<param pos="0" name="hw.device" value="Broadband Router"/>
|
|
65
65
|
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
66
66
|
<param pos="2" name="hw.product"/>
|
|
67
67
|
<param pos="1" name="host.mac"/>
|
|
@@ -103,6 +103,29 @@
|
|
|
103
103
|
<param pos="1" name="hw.product"/>
|
|
104
104
|
</fingerprint>
|
|
105
105
|
|
|
106
|
+
<fingerprint pattern="^O=Technicolor,L=Edegem,ST=Antwerp,C=BE$">
|
|
107
|
+
<description>Technicolor Router - without model or version</description>
|
|
108
|
+
<example>O=Technicolor,L=Edegem,ST=Antwerp,C=BE</example>
|
|
109
|
+
<param pos="0" name="os.vendor" value="Technicolor"/>
|
|
110
|
+
<param pos="0" name="os.device" value="Router"/>
|
|
111
|
+
<param pos="0" name="os.certainty" value="0.5"/>
|
|
112
|
+
<param pos="0" name="hw.vendor" value="Technicolor"/>
|
|
113
|
+
<param pos="0" name="hw.device" value="Router"/>
|
|
114
|
+
<param pos="0" name="hw.certainty" value="0.5"/>
|
|
115
|
+
</fingerprint>
|
|
116
|
+
|
|
117
|
+
<fingerprint pattern="^CN=Vigor Router,OU=DrayTek Support,O=DrayTek Corp.,L=HuKou,ST=HsinChu,C=TW$">
|
|
118
|
+
<description>DrayTek Vigor Router - without model or version</description>
|
|
119
|
+
<example>CN=Vigor Router,OU=DrayTek Support,O=DrayTek Corp.,L=HuKou,ST=HsinChu,C=TW</example>
|
|
120
|
+
<param pos="0" name="os.vendor" value="DrayTek"/>
|
|
121
|
+
<param pos="0" name="os.device" value="Router"/>
|
|
122
|
+
<param pos="0" name="os.certainty" value="0.5"/>
|
|
123
|
+
<param pos="0" name="hw.vendor" value="DrayTek"/>
|
|
124
|
+
<param pos="0" name="hw.family" value="Vigor"/>
|
|
125
|
+
<param pos="0" name="hw.device" value="Router"/>
|
|
126
|
+
<param pos="0" name="hw.certainty" value="0.5"/>
|
|
127
|
+
</fingerprint>
|
|
128
|
+
|
|
106
129
|
<fingerprint pattern="^CN=Nepenthes Development Team,OU=anv,O=dionaea\.carnivore\.it,C=DE$">
|
|
107
130
|
<description>Nepenthes honeypot</description>
|
|
108
131
|
<example>CN=Nepenthes Development Team,OU=anv,O=dionaea.carnivore.it,C=DE</example>
|
|
@@ -198,11 +221,12 @@
|
|
|
198
221
|
<param pos="0" name="hw.vendor" value="HP"/>
|
|
199
222
|
<param pos="0" name="hw.family" value="iLO"/>
|
|
200
223
|
<param pos="0" name="hw.product" value="iLO"/>
|
|
201
|
-
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:
|
|
224
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights-out:-"/>
|
|
202
225
|
<param pos="0" name="os.device" value="Lights Out Management"/>
|
|
203
226
|
<param pos="0" name="os.vendor" value="HP"/>
|
|
204
227
|
<param pos="0" name="os.family" value="iLO"/>
|
|
205
228
|
<param pos="0" name="os.product" value="iLO"/>
|
|
229
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_firmware:-"/>
|
|
206
230
|
<param pos="1" name="host.name"/>
|
|
207
231
|
</fingerprint>
|
|
208
232
|
|
|
@@ -213,11 +237,12 @@
|
|
|
213
237
|
<param pos="0" name="hw.vendor" value="HP"/>
|
|
214
238
|
<param pos="0" name="hw.family" value="iLO"/>
|
|
215
239
|
<param pos="0" name="hw.product" value="iLO"/>
|
|
216
|
-
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:
|
|
240
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights-out:-"/>
|
|
217
241
|
<param pos="0" name="os.device" value="Lights Out Management"/>
|
|
218
242
|
<param pos="0" name="os.vendor" value="HP"/>
|
|
219
243
|
<param pos="0" name="os.family" value="iLO"/>
|
|
220
244
|
<param pos="0" name="os.product" value="iLO"/>
|
|
245
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_firmware:-"/>
|
|
221
246
|
</fingerprint>
|
|
222
247
|
|
|
223
248
|
<fingerprint pattern="^CN=OA\-([a-fA-F0-9]+),OU=Onboard Administrator,">
|
|
@@ -228,11 +253,12 @@
|
|
|
228
253
|
<param pos="0" name="hw.vendor" value="HP"/>
|
|
229
254
|
<param pos="0" name="hw.family" value="iLO"/>
|
|
230
255
|
<param pos="0" name="hw.product" value="iLO"/>
|
|
231
|
-
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:
|
|
256
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights-out:-"/>
|
|
232
257
|
<param pos="0" name="os.device" value="Lights Out Management"/>
|
|
233
258
|
<param pos="0" name="os.vendor" value="HP"/>
|
|
234
259
|
<param pos="0" name="os.family" value="iLO"/>
|
|
235
260
|
<param pos="0" name="os.product" value="iLO"/>
|
|
261
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_firmware:-"/>
|
|
236
262
|
<param pos="1" name="host.mac"/>
|
|
237
263
|
</fingerprint>
|
|
238
264
|
|
|
@@ -243,11 +269,12 @@
|
|
|
243
269
|
<param pos="0" name="hw.vendor" value="HP"/>
|
|
244
270
|
<param pos="0" name="hw.family" value="iLO"/>
|
|
245
271
|
<param pos="0" name="hw.product" value="iLO"/>
|
|
246
|
-
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:
|
|
272
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights-out:-"/>
|
|
247
273
|
<param pos="0" name="os.device" value="Lights Out Management"/>
|
|
248
274
|
<param pos="0" name="os.vendor" value="HP"/>
|
|
249
275
|
<param pos="0" name="os.family" value="iLO"/>
|
|
250
276
|
<param pos="0" name="os.product" value="iLO"/>
|
|
277
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_firmware:-"/>
|
|
251
278
|
<param pos="1" name="host.name"/>
|
|
252
279
|
</fingerprint>
|
|
253
280
|
|
|
@@ -370,7 +397,7 @@
|
|
|
370
397
|
<param pos="0" name="os.vendor" value="Cisco"/>
|
|
371
398
|
<param pos="0" name="os.family" value="Adaptive Security Appliance"/>
|
|
372
399
|
<param pos="0" name="os.product" value="Adaptive Security Appliance"/>
|
|
373
|
-
<param pos="0" name="os.cpe23" value="cpe:/o:cisco:
|
|
400
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:cisco:adaptive_security_appliance_software:-"/>
|
|
374
401
|
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
375
402
|
<param pos="0" name="hw.family" value="Adaptive Security Appliance"/>
|
|
376
403
|
<param pos="0" name="hw.product" value="Adaptive Security Appliance"/>
|
|
@@ -384,7 +411,7 @@
|
|
|
384
411
|
<param pos="0" name="os.vendor" value="Cisco"/>
|
|
385
412
|
<param pos="0" name="os.device" value="Wireless Controller"/>
|
|
386
413
|
<param pos="0" name="os.product" value="Wireless LAN Controller"/>
|
|
387
|
-
<param pos="0" name="os.cpe23" value="cpe:/o:cisco:
|
|
414
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller_software:-"/>
|
|
388
415
|
<param pos="1" name="cisco.serial_number"/>
|
|
389
416
|
</fingerprint>
|
|
390
417
|
|
|
@@ -394,7 +421,7 @@
|
|
|
394
421
|
<param pos="0" name="os.vendor" value="Cisco"/>
|
|
395
422
|
<param pos="0" name="os.device" value="Wireless Controller"/>
|
|
396
423
|
<param pos="0" name="os.product" value="Wireless LAN Controller"/>
|
|
397
|
-
<param pos="0" name="os.cpe23" value="cpe:/o:cisco:
|
|
424
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller_software:-"/>
|
|
398
425
|
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
399
426
|
<param pos="0" name="hw.device" value="Wireless Controller"/>
|
|
400
427
|
<param pos="0" name="hw.product" value="Wireless LAN Controller"/>
|
|
@@ -468,24 +495,27 @@
|
|
|
468
495
|
</fingerprint>
|
|
469
496
|
|
|
470
497
|
<fingerprint pattern="^CN=VMware,OU=VMware,L=Palo Alto,C=US$">
|
|
471
|
-
<description>
|
|
498
|
+
<description>VMware Authentication Daemon</description>
|
|
472
499
|
<example>CN=VMware,OU=VMware,L=Palo Alto,C=US</example>
|
|
473
500
|
<param pos="0" name="service.vendor" value="VMware"/>
|
|
474
501
|
<param pos="0" name="service.product" value="vmauthd"/>
|
|
475
502
|
</fingerprint>
|
|
476
503
|
|
|
477
504
|
<fingerprint pattern="^CN=([a-zA-Z0-9\.\-\_]+),OU=VMware ESX Server Default Certificate,O=VMware\\, Inc,L=Palo Alto,ST=California,C=US$">
|
|
478
|
-
<description>
|
|
505
|
+
<description>VMware ESX</description>
|
|
479
506
|
<example>CN=server99.,OU=VMware ESX Server Default Certificate,O=VMware\, Inc,L=Palo Alto,ST=California,C=US</example>
|
|
507
|
+
<param pos="0" name="service.vendor" value="VMware"/>
|
|
480
508
|
<param pos="0" name="os.vendor" value="VMware"/>
|
|
481
|
-
<param pos="0" name="os.
|
|
509
|
+
<param pos="0" name="os.family" value="VMware ESX/ESXi"/>
|
|
510
|
+
<param pos="0" name="os.product" value="VMware ESX Server"/>
|
|
482
511
|
<param pos="0" name="os.device" value="Hypervisor"/>
|
|
483
512
|
<param pos="0" name="os.cpe23" value="cpe:/o:vmware:esx:-"/>
|
|
484
513
|
<param pos="1" name="host.name"/>
|
|
514
|
+
<param pos="0" name="hw.device" value="Hypervisor"/>
|
|
485
515
|
</fingerprint>
|
|
486
516
|
|
|
487
517
|
<fingerprint pattern="^CN.*,OU=SRM,O=VMware\\, Inc\.,L=Palo Alto,ST=California,C=US$">
|
|
488
|
-
<description>
|
|
518
|
+
<description>VMware SRM</description>
|
|
489
519
|
<example>CN=SRM01,OU=SRM,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US</example>
|
|
490
520
|
<param pos="0" name="os.vendor" value="VMware"/>
|
|
491
521
|
<param pos="0" name="os.product" value="Linux"/>
|
|
@@ -496,6 +526,24 @@
|
|
|
496
526
|
<param pos="0" name="service.product" value="Site Recovery Manager"/>
|
|
497
527
|
</fingerprint>
|
|
498
528
|
|
|
529
|
+
<fingerprint pattern="^CN=([^,=]{1,256}),OU=VMware Horizon View default certificate,O=VMware\\, Inc.$">
|
|
530
|
+
<description>VMware Horizon (formerly View)</description>
|
|
531
|
+
<example host.name="horizon.foo.bar">CN=horizon.foo.bar,OU=VMware Horizon View default certificate,O=VMware\, Inc.</example>
|
|
532
|
+
<param pos="0" name="service.vendor" value="VMware"/>
|
|
533
|
+
<param pos="0" name="service.product" value="Horizon"/>
|
|
534
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:vmware:horizon:-"/>
|
|
535
|
+
<param pos="1" name="host.name"/>
|
|
536
|
+
</fingerprint>
|
|
537
|
+
|
|
538
|
+
<fingerprint pattern="^CN=([^,=]{1,256}),OU=VMware View default certificate,O=VMware\\, Inc.$">
|
|
539
|
+
<description>VMware View</description>
|
|
540
|
+
<example host.name="horizon.foo.bar">CN=horizon.foo.bar,OU=VMware View default certificate,O=VMware\, Inc.</example>
|
|
541
|
+
<param pos="0" name="service.vendor" value="VMware"/>
|
|
542
|
+
<param pos="0" name="service.product" value="View"/>
|
|
543
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:vmware:view:-"/>
|
|
544
|
+
<param pos="1" name="host.name"/>
|
|
545
|
+
</fingerprint>
|
|
546
|
+
|
|
499
547
|
<fingerprint pattern="^CN=IOS-Self-Signed-Certificate-">
|
|
500
548
|
<description>Cisco IOS Default Certificate</description>
|
|
501
549
|
<example>CN=IOS-Self-Signed-Certificate-4163115936</example>
|
|
@@ -507,15 +555,75 @@
|
|
|
507
555
|
<param pos="0" name="hw.device" value="Router"/>
|
|
508
556
|
</fingerprint>
|
|
509
557
|
|
|
558
|
+
<fingerprint pattern="^CN=kube-apiserver$">
|
|
559
|
+
<description>Kubernetes api-server default certificate</description>
|
|
560
|
+
<example>CN=kube-apiserver</example>
|
|
561
|
+
<param pos="0" name="service.vendor" value="Kubernetes"/>
|
|
562
|
+
<param pos="0" name="service.family" value="Kubernetes"/>
|
|
563
|
+
<param pos="0" name="service.product" value="Kubernetes"/>
|
|
564
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:kubernetes:kubernetes:-"/>
|
|
565
|
+
</fingerprint>
|
|
566
|
+
|
|
567
|
+
<fingerprint pattern="^CN=kubernetes-master$">
|
|
568
|
+
<description>Kubernetes Control Plane (formerly master) default certificate</description>
|
|
569
|
+
<example>CN=kubernetes-master</example>
|
|
570
|
+
<param pos="0" name="service.vendor" value="Kubernetes"/>
|
|
571
|
+
<param pos="0" name="service.family" value="Kubernetes"/>
|
|
572
|
+
<param pos="0" name="service.product" value="Kubernetes"/>
|
|
573
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:kubernetes:kubernetes:-"/>
|
|
574
|
+
</fingerprint>
|
|
575
|
+
|
|
576
|
+
<fingerprint pattern="^CN=Kubernetes Ingress Controller Fake Certificate,O=Acme Co$">
|
|
577
|
+
<description>Kubernetes NGINX Ingress Controller with default cert</description>
|
|
578
|
+
<example>CN=Kubernetes Ingress Controller Fake Certificate,O=Acme Co</example>
|
|
579
|
+
<param pos="0" name="service.vendor" value="Kubernetes"/>
|
|
580
|
+
<param pos="0" name="service.family" value="Kubernetes"/>
|
|
581
|
+
<param pos="0" name="service.product" value="NGINX Ingress Controller"/>
|
|
582
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:kubernetes:nginx_ingress_controller:-"/>
|
|
583
|
+
</fingerprint>
|
|
584
|
+
|
|
585
|
+
<fingerprint pattern="^CN=TRAEFIK DEFAULT CERT$">
|
|
586
|
+
<description>Traefik Proxy default certificate</description>
|
|
587
|
+
<example>CN=TRAEFIK DEFAULT CERT</example>
|
|
588
|
+
<param pos="0" name="service.vendor" value="Traefik Labs"/>
|
|
589
|
+
<param pos="0" name="service.family" value="Traefik"/>
|
|
590
|
+
<param pos="0" name="service.product" value="Traefik Proxy"/>
|
|
591
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:containous:traefik:-"/>
|
|
592
|
+
</fingerprint>
|
|
593
|
+
|
|
594
|
+
<fingerprint pattern="^CN=default(?: [A-Z]+)?,OU=NS Internal,O=Citrix ANG,L=San Jose,ST=California,C=US$">
|
|
595
|
+
<description>Citrix Netscaler (later renamed to Citrix ADC)</description>
|
|
596
|
+
<example>CN=default,OU=NS Internal,O=Citrix ANG,L=San Jose,ST=California,C=US</example>
|
|
597
|
+
<example>CN=default UYENMB,OU=NS Internal,O=Citrix ANG,L=San Jose,ST=California,C=US</example>
|
|
598
|
+
<param pos="0" name="service.vendor" value="Citrix"/>
|
|
599
|
+
<param pos="0" name="service.family" value="Netscaler"/>
|
|
600
|
+
<param pos="0" name="service.product" value="Netscaler"/>
|
|
601
|
+
<param pos="0" name="service.device" value="Network Management Device"/>
|
|
602
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:citrix:netscaler:-"/>
|
|
603
|
+
<param pos="0" name="os.vendor" value="Citrix"/>
|
|
604
|
+
<param pos="0" name="os.family" value="Netscaler"/>
|
|
605
|
+
<param pos="0" name="os.product" value="Netscaler Gateway Firmware"/>
|
|
606
|
+
<param pos="0" name="os.device" value="Network Management Device"/>
|
|
607
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:citrix:netscaler_gateway_firmware:-"/>
|
|
608
|
+
<param pos="0" name="hw.vendor" value="Citrix"/>
|
|
609
|
+
<param pos="0" name="hw.family" value="Netscaler"/>
|
|
610
|
+
<param pos="0" name="hw.product" value="Netscaler Gateway"/>
|
|
611
|
+
<param pos="0" name="hw.device" value="Network Management Device"/>
|
|
612
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:citrix:netscaler_gateway:-"/>
|
|
613
|
+
</fingerprint>
|
|
614
|
+
|
|
510
615
|
<fingerprint pattern="^CN=([a-zA-Z0-9]{5,12}) ([a-zA-Z0-9]{12}),OU=(?:Cast|Google TV),O=Google Inc,L=Mountain View,ST=California,C=US$">
|
|
511
616
|
<description>Google Chromecast</description>
|
|
512
617
|
<example chromecast.serial_number="LVDZG5" host.mac_local="FA8FCA67413D">CN=LVDZG5 FA8FCA67413D,OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
|
513
618
|
<example chromecast.serial_number="YRBLE" host.mac_local="FA8FCA7DE87D">CN=YRBLE FA8FCA7DE87D,OU=Google TV,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
|
514
619
|
<param pos="0" name="os.vendor" value="Google"/>
|
|
515
|
-
<param pos="0" name="os.product" value="
|
|
620
|
+
<param pos="0" name="os.product" value="Chrome OS"/>
|
|
621
|
+
<param pos="0" name="os.certainty" value="0.5"/>
|
|
622
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:google:chrome_os:-"/>
|
|
516
623
|
<param pos="0" name="hw.device" value="Media Server"/>
|
|
517
624
|
<param pos="0" name="hw.vendor" value="Google"/>
|
|
518
625
|
<param pos="0" name="hw.product" value="Chromecast"/>
|
|
626
|
+
<param pos="0" name="hw.certainty" value="0.5"/>
|
|
519
627
|
<param pos="1" name="chromecast.serial_number"/>
|
|
520
628
|
<!-- This is the hotspot-mode MAC address (clear bit 2) -->
|
|
521
629
|
|
|
@@ -561,6 +669,30 @@
|
|
|
561
669
|
<param pos="0" name="os.device" value="Video Conferencing"/>
|
|
562
670
|
</fingerprint>
|
|
563
671
|
|
|
672
|
+
<fingerprint pattern="^CN=a_lifesize_system,OU=lifesize,O=lifesize,L=Austin,ST=Texas,C=US$">
|
|
673
|
+
<description>Lifesize TelePresence (a_lifesize variant 1)</description>
|
|
674
|
+
<example>CN=a_lifesize_system,OU=lifesize,O=lifesize,L=Austin,ST=Texas,C=US</example>
|
|
675
|
+
<param pos="0" name="hw.vendor" value="Lifesize"/>
|
|
676
|
+
<param pos="0" name="hw.device" value="Video Conferencing"/>
|
|
677
|
+
<param pos="0" name="hw.product" value="TelePresence"/>
|
|
678
|
+
<param pos="0" name="os.vendor" value="Lifesize"/>
|
|
679
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
680
|
+
<param pos="0" name="os.product" value="TelePresence"/>
|
|
681
|
+
<param pos="0" name="os.device" value="Video Conferencing"/>
|
|
682
|
+
</fingerprint>
|
|
683
|
+
|
|
684
|
+
<fingerprint pattern="^CN=A_LifeSize_System,OU=IT,O=LifeSize Communications\\, Inc\.,ST=Texas,C=US$">
|
|
685
|
+
<description>Lifesize TelePresence (a_lifesize variant 2)</description>
|
|
686
|
+
<example>CN=A_LifeSize_System,OU=IT,O=LifeSize Communications\, Inc.,ST=Texas,C=US</example>
|
|
687
|
+
<param pos="0" name="hw.vendor" value="Lifesize"/>
|
|
688
|
+
<param pos="0" name="hw.device" value="Video Conferencing"/>
|
|
689
|
+
<param pos="0" name="hw.product" value="TelePresence"/>
|
|
690
|
+
<param pos="0" name="os.vendor" value="Lifesize"/>
|
|
691
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
692
|
+
<param pos="0" name="os.product" value="TelePresence"/>
|
|
693
|
+
<param pos="0" name="os.device" value="Video Conferencing"/>
|
|
694
|
+
</fingerprint>
|
|
695
|
+
|
|
564
696
|
<fingerprint pattern="^CN=MERCURY-([a-fA-F0-9]{12}),OU=Engineering,O=Crestron">
|
|
565
697
|
<description>Crestron Mercury</description>
|
|
566
698
|
<example host.mac="00107F1ABAA0">CN=MERCURY-00107F1ABAA0,OU=Engineering,O=Crestron Electronics\, Inc.,L=Rockleigh,ST=NJ,C=US</example>
|
|
@@ -657,6 +789,9 @@
|
|
|
657
789
|
<fingerprint pattern="^CN=VMM APIC,OU=VMM\d+,O=Cisco,L=San Jose,ST=CA,C=US$">
|
|
658
790
|
<description>Cisco APIC</description>
|
|
659
791
|
<example>CN=VMM APIC,OU=VMM15,O=Cisco,L=San Jose,ST=CA,C=US</example>
|
|
792
|
+
<param pos="0" name="service.vendor" value="Cisco"/>
|
|
793
|
+
<param pos="0" name="service.product" value="APIC"/>
|
|
794
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:cisco:application_policy_infrastructure_controller:-"/>
|
|
660
795
|
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
661
796
|
<param pos="0" name="hw.product" value="APIC"/>
|
|
662
797
|
<param pos="0" name="hw.device" value="Network Appliance"/>
|
|
@@ -665,6 +800,9 @@
|
|
|
665
800
|
<fingerprint pattern="^CN=APIC$">
|
|
666
801
|
<description>Cisco APIC - bare CN</description>
|
|
667
802
|
<example>CN=APIC</example>
|
|
803
|
+
<param pos="0" name="service.vendor" value="Cisco"/>
|
|
804
|
+
<param pos="0" name="service.product" value="APIC"/>
|
|
805
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:cisco:application_policy_infrastructure_controller:-"/>
|
|
668
806
|
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
669
807
|
<param pos="0" name="hw.product" value="APIC"/>
|
|
670
808
|
<param pos="0" name="hw.device" value="Network Appliance"/>
|
|
@@ -840,18 +978,18 @@
|
|
|
840
978
|
<param pos="0" name="os.family" value="Linux"/>
|
|
841
979
|
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
|
842
980
|
<param pos="0" name="hw.family" value="UniFi"/>
|
|
843
|
-
<param pos="0" name="hw.device" value="
|
|
981
|
+
<param pos="0" name="hw.device" value="IP Camera"/>
|
|
844
982
|
</fingerprint>
|
|
845
983
|
|
|
846
984
|
<fingerprint pattern="^CN=camera\.ubnt\.dev,">
|
|
847
985
|
<description>UniFi Video Camera</description>
|
|
848
986
|
<example>CN=camera.ubnt.dev,OU=devint,O=Ubiquiti Networks Inc.,L=Taipei,C=TW</example>
|
|
849
987
|
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
|
850
|
-
<param pos="0" name="hw.device" value="
|
|
988
|
+
<param pos="0" name="hw.device" value="IP Camera"/>
|
|
851
989
|
<param pos="0" name="hw.product" value="Camera"/>
|
|
852
990
|
<param pos="0" name="os.vendor" value="Ubiquiti"/>
|
|
853
991
|
<param pos="0" name="os.family" value="Linux"/>
|
|
854
|
-
<param pos="0" name="os.device" value="
|
|
992
|
+
<param pos="0" name="os.device" value="IP Camera"/>
|
|
855
993
|
</fingerprint>
|
|
856
994
|
|
|
857
995
|
<fingerprint pattern="^CN=UBNT,OU=Technical Support,O=Ubiquiti Networks Inc\.,L=San Jose,ST=CA,C=US$">
|
|
@@ -886,6 +1024,16 @@
|
|
|
886
1024
|
<param pos="0" name="os.device" value="Router"/>
|
|
887
1025
|
</fingerprint>
|
|
888
1026
|
|
|
1027
|
+
<fingerprint pattern="^CN=UbiquitiRouterUI,O=Ubiquiti Inc.,L=New York,ST=New York,C=US">
|
|
1028
|
+
<description>Ubiquiti Router UI</description>
|
|
1029
|
+
<example>CN=UbiquitiRouterUI,O=Ubiquiti Inc.,L=New York,ST=New York,C=US</example>
|
|
1030
|
+
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
|
1031
|
+
<param pos="0" name="hw.device" value="Router"/>
|
|
1032
|
+
<param pos="0" name="os.vendor" value="Ubiquiti"/>
|
|
1033
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
1034
|
+
<param pos="0" name="os.device" value="Router"/>
|
|
1035
|
+
</fingerprint>
|
|
1036
|
+
|
|
889
1037
|
<fingerprint pattern="^CN=UniFi-Video Controller,OU=R&D,O=Ubiquiti Networks,L=New York,ST=NY,C=US$">
|
|
890
1038
|
<description>Ubiquiti Video Controller</description>
|
|
891
1039
|
<example>CN=UniFi-Video Controller,OU=R&D,O=Ubiquiti Networks,L=New York,ST=NY,C=US</example>
|
|
@@ -901,7 +1049,7 @@
|
|
|
901
1049
|
<description>Verizon / Greenwave FIOS Router</description>
|
|
902
1050
|
<example>CN=GreenWave Systems,OU=PKI,O=GreenWave Systems,L=Irvine,ST=California,C=US</example>
|
|
903
1051
|
<param pos="0" name="hw.vendor" value="Greenwave Systems"/>
|
|
904
|
-
<param pos="0" name="hw.device" value="Broadband
|
|
1052
|
+
<param pos="0" name="hw.device" value="Broadband Router"/>
|
|
905
1053
|
<param pos="0" name="hw.product" value="Verizon FiOS Router"/>
|
|
906
1054
|
</fingerprint>
|
|
907
1055
|
|
|
@@ -1020,13 +1168,30 @@
|
|
|
1020
1168
|
</fingerprint>
|
|
1021
1169
|
|
|
1022
1170
|
<fingerprint pattern="^CN=[0-9\.]+,OU=SSL-VPN,O=SonicWALL\\, Inc\.,L=Sunnyvale,ST=CA,C=US$">
|
|
1023
|
-
<description>SonicWALL
|
|
1171
|
+
<description>SonicWALL SSL-VPN</description>
|
|
1024
1172
|
<example>CN=192.168.200.1,OU=SSL-VPN,O=SonicWALL\, Inc.,L=Sunnyvale,ST=CA,C=US</example>
|
|
1173
|
+
<param pos="0" name="service.vendor" value="SonicWall"/>
|
|
1174
|
+
<param pos="0" name="service.family" value="SSL-VPN"/>
|
|
1025
1175
|
<param pos="0" name="hw.vendor" value="SonicWall"/>
|
|
1026
1176
|
<param pos="0" name="hw.device" value="VPN"/>
|
|
1027
1177
|
<param pos="0" name="os.vendor" value="SonicWall"/>
|
|
1028
|
-
<param pos="0" name="os.
|
|
1029
|
-
<param pos="0" name="os.
|
|
1178
|
+
<param pos="0" name="os.family" value="SonicOS"/>
|
|
1179
|
+
<param pos="0" name="os.product" value="SonicOS"/>
|
|
1180
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:sonicwall:sonicos:-"/>
|
|
1181
|
+
</fingerprint>
|
|
1182
|
+
|
|
1183
|
+
<fingerprint pattern="^CN=[0-9\.]+,OU=HTTPS Management Certificate for SonicWALL \(self-signed\),O=HTTPS Management Certificate for SonicWALL \(self-signed\),L=Sunnyvale,ST=California,C=US$">
|
|
1184
|
+
<description>SonicWALL Network Security Appliance firewall</description>
|
|
1185
|
+
<example>CN=192.168.168.168,OU=HTTPS Management Certificate for SonicWALL (self-signed),O=HTTPS Management Certificate for SonicWALL (self-signed),L=Sunnyvale,ST=California,C=US</example>
|
|
1186
|
+
<param pos="0" name="hw.vendor" value="SonicWall"/>
|
|
1187
|
+
<param pos="0" name="hw.product" value="Network Security Appliance"/>
|
|
1188
|
+
<param pos="0" name="hw.family" value="Network Security Appliance"/>
|
|
1189
|
+
<param pos="0" name="hw.device" value="Firewall"/>
|
|
1190
|
+
<param pos="0" name="os.vendor" value="SonicWall"/>
|
|
1191
|
+
<param pos="0" name="os.family" value="SonicOS"/>
|
|
1192
|
+
<param pos="0" name="os.product" value="SonicOS"/>
|
|
1193
|
+
<param pos="0" name="os.device" value="Firewall"/>
|
|
1194
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:sonicwall:sonicos:-"/>
|
|
1030
1195
|
</fingerprint>
|
|
1031
1196
|
|
|
1032
1197
|
<fingerprint pattern="^CN=.*\.akamai\.net,O=Akamai Technologies\\, Inc\.,L=Cambridge,ST=Massachusetts,C=US$">
|
|
@@ -1034,8 +1199,17 @@
|
|
|
1034
1199
|
<example>CN=a248.e.akamai.net,O=Akamai Technologies\, Inc.,L=Cambridge,ST=Massachusetts,C=US</example>
|
|
1035
1200
|
<param pos="0" name="service.vendor" value="Akamai"/>
|
|
1036
1201
|
<param pos="0" name="service.product" value="GHost"/>
|
|
1202
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:akamai:akamaighost:-"/>
|
|
1037
1203
|
<param pos="0" name="os.vendor" value="Akamai"/>
|
|
1038
|
-
<param pos="0" name="os.device" value="Web
|
|
1204
|
+
<param pos="0" name="os.device" value="Web Proxy"/>
|
|
1205
|
+
</fingerprint>
|
|
1206
|
+
|
|
1207
|
+
<fingerprint pattern="^O=Caddy Self-Signed$">
|
|
1208
|
+
<description>CaddyServer Caddy - golang based httpd</description>
|
|
1209
|
+
<example>O=Caddy Self-Signed</example>
|
|
1210
|
+
<param pos="0" name="service.vendor" value="CaddyServer"/>
|
|
1211
|
+
<param pos="0" name="service.product" value="Caddy"/>
|
|
1212
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:caddyserver:caddy:-"/>
|
|
1039
1213
|
</fingerprint>
|
|
1040
1214
|
|
|
1041
1215
|
<fingerprint pattern="^CN=HP_3PAR_">
|
|
@@ -1190,15 +1364,12 @@
|
|
|
1190
1364
|
<param pos="0" name="hw.vendor" value="Palo Alto Networks"/>
|
|
1191
1365
|
<param pos="0" name="hw.device" value="Firewall"/>
|
|
1192
1366
|
<param pos="0" name="os.vendor" value="Palo Alto Networks"/>
|
|
1193
|
-
<param pos="0" name="os.product" value="
|
|
1367
|
+
<param pos="0" name="os.product" value="PAN-OS"/>
|
|
1368
|
+
<param pos="0" name="os.family" value="PAN-OS"/>
|
|
1194
1369
|
<param pos="0" name="os.device" value="Firewall"/>
|
|
1195
|
-
|
|
1196
|
-
|
|
1197
|
-
|
|
1198
|
-
<description>VMWare vCenter</description>
|
|
1199
|
-
<example>CN=VMware default certificate,OU=vCenterServer_2013.09.26_220623,O=VMware\, Inc.</example>
|
|
1200
|
-
<param pos="0" name="service.vendor" value="VMware"/>
|
|
1201
|
-
<param pos="0" name="service.product" value="vCenter"/>
|
|
1370
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:paloaltonetworks:pan-os:-"/>
|
|
1371
|
+
<param pos="0" name="service.vendor" value="Palo Alto Networks"/>
|
|
1372
|
+
<param pos="0" name="service.device" value="Firewall"/>
|
|
1202
1373
|
</fingerprint>
|
|
1203
1374
|
|
|
1204
1375
|
<fingerprint pattern="^CN=selfappliance,OU=Engineering,O=Symplified,L=Boulder,ST=Colorado,C=US$">
|
|
@@ -1220,9 +1391,9 @@
|
|
|
1220
1391
|
<description>Axis Communications Web Cam</description>
|
|
1221
1392
|
<example host.mac="accc8ea31abf">CN=axis-accc8ea31abf,O=Axis Communications AB</example>
|
|
1222
1393
|
<param pos="0" name="hw.vendor" value="AXIS"/>
|
|
1223
|
-
<param pos="0" name="hw.device" value="
|
|
1394
|
+
<param pos="0" name="hw.device" value="IP Camera"/>
|
|
1224
1395
|
<param pos="0" name="os.vendor" value="AXIS"/>
|
|
1225
|
-
<param pos="0" name="os.device" value="
|
|
1396
|
+
<param pos="0" name="os.device" value="IP Camera"/>
|
|
1226
1397
|
<param pos="0" name="os.family" value="Linux"/>
|
|
1227
1398
|
<param pos="1" name="host.mac"/>
|
|
1228
1399
|
</fingerprint>
|
|
@@ -1231,10 +1402,10 @@
|
|
|
1231
1402
|
<description>ELAN Web Cam</description>
|
|
1232
1403
|
<example host.name="ServerRoom">CN=ServerRoom,OU=Nortek,O=ELAN,L=StuddardMD,ST=10000,C=US</example>
|
|
1233
1404
|
<param pos="0" name="hw.vendor" value="ELAN"/>
|
|
1234
|
-
<param pos="0" name="hw.device" value="
|
|
1405
|
+
<param pos="0" name="hw.device" value="IP Camera"/>
|
|
1235
1406
|
<param pos="0" name="hw.product" value="HDIPCam"/>
|
|
1236
1407
|
<param pos="0" name="os.vendor" value="ELAN"/>
|
|
1237
|
-
<param pos="0" name="os.device" value="
|
|
1408
|
+
<param pos="0" name="os.device" value="IP Camera"/>
|
|
1238
1409
|
<param pos="0" name="os.family" value="Linux"/>
|
|
1239
1410
|
<param pos="1" name="host.name"/>
|
|
1240
1411
|
</fingerprint>
|
|
@@ -1305,7 +1476,7 @@
|
|
|
1305
1476
|
<example hw.product="usg20w" host.mac="5067F0BC1D3C">CN=usg20w_5067F0BC1D3C</example>
|
|
1306
1477
|
<example hw.product="usg20" host.mac="107BEF0AD201">CN=usg20_107BEF0AD201</example>
|
|
1307
1478
|
<param pos="0" name="hw.vendor" value="Zyxel"/>
|
|
1308
|
-
<param pos="0" name="hw.device" value="Broadband
|
|
1479
|
+
<param pos="0" name="hw.device" value="Broadband Router"/>
|
|
1309
1480
|
<param pos="1" name="hw.product"/>
|
|
1310
1481
|
<param pos="2" name="host.mac"/>
|
|
1311
1482
|
</fingerprint>
|
|
@@ -1316,6 +1487,7 @@
|
|
|
1316
1487
|
<param pos="0" name="hw.vendor" value="Philips"/>
|
|
1317
1488
|
<param pos="0" name="hw.product" value="Hue"/>
|
|
1318
1489
|
<param pos="0" name="hw.device" value="Light Bulb"/>
|
|
1490
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:philips:hue:-"/>
|
|
1319
1491
|
<param pos="1" name="host.mac_eui64"/>
|
|
1320
1492
|
</fingerprint>
|
|
1321
1493
|
|
|
@@ -1427,4 +1599,49 @@
|
|
|
1427
1599
|
<param pos="0" name="os.product" value="Linux"/>
|
|
1428
1600
|
</fingerprint>
|
|
1429
1601
|
|
|
1602
|
+
<fingerprint pattern="^CN=(RFS\d+)-([0-9a-fA-F]{2}-[0-9a-fA-F]{2}-[0-9a-fA-F]{2}-[0-9a-fA-F]{2}-[0-9a-fA-F]{2}-[0-9a-fA-F]{2})$">
|
|
1603
|
+
<description>Motorola RFS Wireless Controllers</description>
|
|
1604
|
+
<example host.mac="B1-C1-11-11-11-11" hw.product="RFS6000">CN=RFS6000-B1-C1-11-11-11-11</example>
|
|
1605
|
+
<param pos="0" name="hw.device" value="Wireless Controller"/>
|
|
1606
|
+
<param pos="0" name="hw.vendor" value="Motorola"/>
|
|
1607
|
+
<param pos="1" name="hw.product"/>
|
|
1608
|
+
<param pos="2" name="host.mac"/>
|
|
1609
|
+
</fingerprint>
|
|
1610
|
+
|
|
1611
|
+
<fingerprint pattern="^CN=(AP\d+)-([0-9a-fA-F]{2}-[0-9a-fA-F]{2}-[0-9a-fA-F]{2}-[0-9a-fA-F]{2}-[0-9a-fA-F]{2}-[0-9a-fA-F]{2})$">
|
|
1612
|
+
<description>Motorola Wireless Access Points</description>
|
|
1613
|
+
<example host.mac="F1-11-11-11-11-11" hw.product="AP6532">CN=AP6532-F1-11-11-11-11-11</example>
|
|
1614
|
+
<param pos="0" name="hw.device" value="WAP"/>
|
|
1615
|
+
<param pos="0" name="hw.vendor" value="Motorola"/>
|
|
1616
|
+
<param pos="1" name="hw.product"/>
|
|
1617
|
+
<param pos="2" name="host.mac"/>
|
|
1618
|
+
</fingerprint>
|
|
1619
|
+
|
|
1620
|
+
<fingerprint pattern="^CN=attvpngateway\.att\.com,O=AT&T,L=Tampa,ST=FL,C=US$">
|
|
1621
|
+
<description>ATT VPN Gateway</description>
|
|
1622
|
+
<example>CN=attvpngateway.att.com,O=AT&T,L=Tampa,ST=FL,C=US</example>
|
|
1623
|
+
<param pos="0" name="hw.vendor" value="ATT"/>
|
|
1624
|
+
<param pos="0" name="hw.device" value="VPN"/>
|
|
1625
|
+
<param pos="0" name="hw.product" value="VPN Gateway"/>
|
|
1626
|
+
</fingerprint>
|
|
1627
|
+
|
|
1628
|
+
<fingerprint pattern="^CN=silver-peak,OU=Networking Appliance">
|
|
1629
|
+
<description>Silver Peak Appliance</description>
|
|
1630
|
+
<example>CN=silver-peak,OU=Networking Appliance,O=Silver Peak Systems Inc,L=Mountain View,ST=California,C=--</example>
|
|
1631
|
+
<param pos="0" name="hw.vendor" value="Silver Peak"/>
|
|
1632
|
+
<param pos="0" name="hw.device" value="Network Appliance"/>
|
|
1633
|
+
<param pos="0" name="hw.product" value="SD-WAN"/>
|
|
1634
|
+
</fingerprint>
|
|
1635
|
+
|
|
1636
|
+
<fingerprint pattern="^CN=Windows Media Player Network Sharing Service \(([A-Z-]{1,15})\)$">
|
|
1637
|
+
<description>Windows Media Player Network Sharing Service</description>
|
|
1638
|
+
<example host.name="LIVING-ROOM">CN=Windows Media Player Network Sharing Service (LIVING-ROOM)</example>
|
|
1639
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
|
1640
|
+
<param pos="0" name="service.product" value="Windows Media Player"/>
|
|
1641
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:microsoft:windows_media_player:-"/>
|
|
1642
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
1643
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
1644
|
+
<param pos="1" name="host.name"/>
|
|
1645
|
+
</fingerprint>
|
|
1646
|
+
|
|
1430
1647
|
</fingerprints>
|