recog 2.3.17 → 2.3.21

Sign up to get free protection for your applications and to get access to all the features.
Files changed (51) hide show
  1. checksums.yaml +4 -4
  2. data/.github/workflows/ci.yml +26 -0
  3. data/bin/recog_standardize +6 -0
  4. data/cpe-remap.yaml +342 -200
  5. data/identifiers/README.md +24 -10
  6. data/identifiers/fields.txt +104 -0
  7. data/identifiers/hw_device.txt +2 -0
  8. data/identifiers/hw_family.txt +11 -0
  9. data/identifiers/hw_product.txt +71 -0
  10. data/identifiers/os_device.txt +2 -1
  11. data/identifiers/os_family.txt +2 -0
  12. data/identifiers/os_product.txt +36 -8
  13. data/identifiers/service_family.txt +10 -1
  14. data/identifiers/service_product.txt +78 -2
  15. data/identifiers/vendor.txt +55 -0
  16. data/lib/recog/nizer.rb +1 -82
  17. data/lib/recog/version.rb +1 -1
  18. data/requirements.txt +1 -1
  19. data/update_cpes.py +18 -5
  20. data/xml/apache_modules.xml +60 -0
  21. data/xml/apache_os.xml +1 -1
  22. data/xml/dns_versionbind.xml +11 -1
  23. data/xml/favicons.xml +122 -3
  24. data/xml/ftp_banners.xml +62 -51
  25. data/xml/html_title.xml +553 -41
  26. data/xml/http_cookies.xml +262 -61
  27. data/xml/http_servers.xml +478 -108
  28. data/xml/http_wwwauth.xml +36 -9
  29. data/xml/imap_banners.xml +5 -5
  30. data/xml/ldap_searchresult.xml +1 -0
  31. data/xml/mdns_device-info_txt.xml +340 -10
  32. data/xml/mysql_banners.xml +2 -1
  33. data/xml/nntp_banners.xml +1 -1
  34. data/xml/ntp_banners.xml +16 -2
  35. data/xml/operating_system.xml +4 -4
  36. data/xml/pop_banners.xml +4 -4
  37. data/xml/rtsp_servers.xml +7 -0
  38. data/xml/sip_banners.xml +347 -9
  39. data/xml/sip_user_agents.xml +323 -4
  40. data/xml/smb_native_lm.xml +32 -1
  41. data/xml/smb_native_os.xml +160 -33
  42. data/xml/smtp_banners.xml +167 -128
  43. data/xml/smtp_expn.xml +1 -0
  44. data/xml/smtp_vrfy.xml +1 -0
  45. data/xml/snmp_sysdescr.xml +205 -36
  46. data/xml/ssh_banners.xml +139 -25
  47. data/xml/telnet_banners.xml +92 -48
  48. data/xml/tls_jarm.xml +140 -0
  49. data/xml/x509_issuers.xml +201 -2
  50. data/xml/x509_subjects.xml +251 -32
  51. metadata +5 -2
data/xml/html_title.xml CHANGED
@@ -1,25 +1,80 @@
1
1
  <?xml version='1.0' encoding='UTF-8'?>
2
- <fingerprints matches="html_title" database_type="service" preference="0.90">
2
+ <fingerprints matches="html_title" protocol="http" database_type="service" preference="0.90">
3
3
  <!-- HTML Title elements found in HTTP response bodies are matched against these patterns to fingerprint HTTP servers. -->
4
4
 
5
5
  <fingerprint pattern="^301 Moved Permanently$">
6
6
  <description>301 Moved Permanently - generic -- assert nothing.</description>
7
7
  <example>301 Moved Permanently</example>
8
+ <param pos="0" name="hw.certainty" value="0.0"/>
9
+ <param pos="0" name="os.certainty" value="0.0"/>
10
+ <param pos="0" name="service.certainty" value="0.0"/>
11
+ </fingerprint>
12
+
13
+ <fingerprint pattern="^302 Found$">
14
+ <description>302 Found - generic -- assert nothing.</description>
15
+ <example>302 Found</example>
16
+ <param pos="0" name="hw.certainty" value="0.0"/>
17
+ <param pos="0" name="os.certainty" value="0.0"/>
18
+ <param pos="0" name="service.certainty" value="0.0"/>
8
19
  </fingerprint>
9
20
 
10
21
  <fingerprint pattern="^400 Bad Request$">
11
22
  <description>400 Bad Request - generic -- assert nothing.</description>
12
23
  <example>400 Bad Request</example>
24
+ <param pos="0" name="hw.certainty" value="0.0"/>
25
+ <param pos="0" name="os.certainty" value="0.0"/>
26
+ <param pos="0" name="service.certainty" value="0.0"/>
13
27
  </fingerprint>
14
28
 
15
29
  <fingerprint pattern="^401 Unauthorized$">
16
30
  <description>401 Unauthorized - generic -- assert nothing.</description>
17
31
  <example>401 Unauthorized</example>
32
+ <param pos="0" name="hw.certainty" value="0.0"/>
33
+ <param pos="0" name="os.certainty" value="0.0"/>
34
+ <param pos="0" name="service.certainty" value="0.0"/>
18
35
  </fingerprint>
19
36
 
20
- <fingerprint pattern="^404 Not Found$">
37
+ <fingerprint pattern="^403 Forbidden$">
38
+ <description>403 Forbidden - generic -- assert nothing.</description>
39
+ <example>403 Forbidden</example>
40
+ <param pos="0" name="hw.certainty" value="0.0"/>
41
+ <param pos="0" name="os.certainty" value="0.0"/>
42
+ <param pos="0" name="service.certainty" value="0.0"/>
43
+ </fingerprint>
44
+
45
+ <fingerprint pattern="^(?:404 )?Not Found$">
21
46
  <description>404 Not Found - generic -- assert nothing.</description>
22
47
  <example>404 Not Found</example>
48
+ <example>Not Found</example>
49
+ <param pos="0" name="hw.certainty" value="0.0"/>
50
+ <param pos="0" name="os.certainty" value="0.0"/>
51
+ <param pos="0" name="service.certainty" value="0.0"/>
52
+ </fingerprint>
53
+
54
+ <fingerprint pattern="^Invalid URL$">
55
+ <description>Invalid URL - generic -- assert nothing.</description>
56
+ <example>Invalid URL</example>
57
+ <param pos="0" name="hw.certainty" value="0.0"/>
58
+ <param pos="0" name="os.certainty" value="0.0"/>
59
+ <param pos="0" name="service.certainty" value="0.0"/>
60
+ </fingerprint>
61
+
62
+ <fingerprint pattern="^ERROR: The request could not be satisfied$">
63
+ <description>Amazon CloudFront web load balancer endpoint</description>
64
+ <example>ERROR: The request could not be satisfied</example>
65
+ <param pos="0" name="service.vendor" value="Amazon"/>
66
+ <param pos="0" name="service.family" value="CloudFront"/>
67
+ <param pos="0" name="service.product" value="CloudFront Load Balancer"/>
68
+ <param pos="0" name="service.cpe23" value="cpe:/a:amazon:amazon_cloudfront:-"/>
69
+ </fingerprint>
70
+
71
+ <fingerprint pattern="^Microsoft Azure Web App - Error 404$">
72
+ <description>Microsoft Azure Web App - Error 404</description>
73
+ <example>Microsoft Azure Web App - Error 404</example>
74
+ <param pos="0" name="service.vendor" value="Microsoft"/>
75
+ <param pos="0" name="service.family" value="Azure"/>
76
+ <param pos="0" name="service.product" value="Azure App Service on Azure Stack"/>
77
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:azure_app_service_on_azure_stack:-"/>
23
78
  </fingerprint>
24
79
 
25
80
  <fingerprint pattern="^Index of /">
@@ -103,9 +158,10 @@
103
158
  <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:-"/>
104
159
  </fingerprint>
105
160
 
106
- <fingerprint pattern="^Apache Tomcat/(\S+)$">
161
+ <fingerprint pattern="^Apache Tomcat/(\S+)(?: - Error report)?$">
107
162
  <description>Apache tomcat with minimal version information</description>
108
163
  <example service.version="8.0.32">Apache Tomcat/8.0.32</example>
164
+ <example service.version="5.5.29">Apache Tomcat/5.5.29 - Error report</example>
109
165
  <param pos="0" name="service.vendor" value="Apache"/>
110
166
  <param pos="0" name="service.product" value="Tomcat"/>
111
167
  <param pos="0" name="service.family" value="Tomcat"/>
@@ -113,6 +169,32 @@
113
169
  <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
114
170
  </fingerprint>
115
171
 
172
+ <fingerprint pattern="^Apache Tomcat/(\S+) \(Ubuntu\) - Error report$">
173
+ <description>Apache Tomcat - Error report on Ubuntu</description>
174
+ <example service.version="8.0.32">Apache Tomcat/8.0.32 (Ubuntu) - Error report</example>
175
+ <param pos="0" name="service.vendor" value="Apache"/>
176
+ <param pos="0" name="service.product" value="Tomcat"/>
177
+ <param pos="0" name="service.family" value="Tomcat"/>
178
+ <param pos="1" name="service.version"/>
179
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
180
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
181
+ <param pos="0" name="os.product" value="Linux"/>
182
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
183
+ </fingerprint>
184
+
185
+ <fingerprint pattern="^Apache Tomcat/(\S+) \(Debian\) - Error report$">
186
+ <description>Apache Tomcat - Error report on Debian</description>
187
+ <example service.version="7.0.56">Apache Tomcat/7.0.56 (Debian) - Error report</example>
188
+ <param pos="0" name="service.vendor" value="Apache"/>
189
+ <param pos="0" name="service.product" value="Tomcat"/>
190
+ <param pos="0" name="service.family" value="Tomcat"/>
191
+ <param pos="1" name="service.version"/>
192
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
193
+ <param pos="0" name="os.vendor" value="Debian"/>
194
+ <param pos="0" name="os.product" value="Linux"/>
195
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
196
+ </fingerprint>
197
+
116
198
  <fingerprint pattern="^AiCloud">
117
199
  <description>ASUS AiCloud</description>
118
200
  <example>AiCloud</example>
@@ -255,6 +337,7 @@
255
337
  <param pos="0" name="hw.vendor" value="Philips"/>
256
338
  <param pos="0" name="hw.product" value="Hue"/>
257
339
  <param pos="0" name="hw.device" value="Light Bulb"/>
340
+ <param pos="0" name="hw.cpe23" value="cpe:/h:philips:hue:-"/>
258
341
  </fingerprint>
259
342
 
260
343
  <fingerprint pattern="LANDesk\(R\) Management Agent$">
@@ -291,7 +374,7 @@
291
374
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
292
375
  </fingerprint>
293
376
 
294
- <fingerprint pattern="^(?i)Default (?:Parallels )?Plesk (?:Panel )?Page$">
377
+ <fingerprint pattern="(?i)^Default (?:Parallels )?Plesk (?:Panel )?Page$">
295
378
  <description>Plesk web hosting platform with no version</description>
296
379
  <example>Default Parallels Plesk Panel Page</example>
297
380
  <example>Default Parallels Plesk Page</example>
@@ -301,6 +384,14 @@
301
384
  <param pos="0" name="service.cpe23" value="cpe:/a:parallels:parallels_plesk_panel:-"/>
302
385
  </fingerprint>
303
386
 
387
+ <fingerprint pattern="^Sage X3$">
388
+ <description>Sage X3 Syracuse Web Server</description>
389
+ <example>Sage X3</example>
390
+ <param pos="0" name="service.vendor" value="Sage"/>
391
+ <param pos="0" name="service.family" value="Sage X3 Syracuse Web Server"/>
392
+ <param pos="0" name="service.product" value="Sage X3 Syracuse Web Server"/>
393
+ </fingerprint>
394
+
304
395
  <fingerprint pattern="^Web Viewer for Samsung DVR$">
305
396
  <description>Samsung DVRs</description>
306
397
  <example>Web Viewer for Samsung DVR</example>
@@ -308,15 +399,41 @@
308
399
  <param pos="0" name="hw.device" value="DVR"/>
309
400
  </fingerprint>
310
401
 
311
- <fingerprint pattern="^(?i)(?:Dell )?Sonicwall - Authentication$">
402
+ <fingerprint pattern="(?i)^(?:Dell )?Sonicwall - Authentication$">
312
403
  <description>Sonicwall firewalls</description>
313
404
  <example>SonicWall - Authentication</example>
314
405
  <param pos="0" name="os.vendor" value="SonicWall"/>
315
406
  <param pos="0" name="os.device" value="Firewall"/>
316
407
  <param pos="0" name="os.family" value="SonicOS"/>
408
+ <param pos="0" name="os.product" value="SonicOS"/>
409
+ <param pos="0" name="os.cpe23" value="cpe:/o:sonicwall:sonicos:-"/>
410
+ </fingerprint>
411
+
412
+ <fingerprint pattern="^SonicWall Universal Management Suite v(\d+\.\d+)$">
413
+ <description>SonicWall Universal Management Appliance - with version</description>
414
+ <example service.version="8.7">SonicWall Universal Management Suite v8.7</example>
415
+ <param pos="0" name="service.vendor" value="SonicWall"/>
416
+ <param pos="0" name="service.product" value="Universal Management Appliance"/>
417
+ <param pos="1" name="service.version"/>
418
+ <param pos="0" name="service.cpe23" value="cpe:/a:sonicwall:universal_management_appliance:{service.version}"/>
419
+ <param pos="0" name="os.vendor" value="SonicWall"/>
420
+ <param pos="0" name="os.family" value="SonicOS"/>
421
+ <param pos="0" name="os.product" value="SonicOS"/>
422
+ <param pos="0" name="os.cpe23" value="cpe:/o:sonicwall:sonicos:-"/>
423
+ </fingerprint>
424
+
425
+ <fingerprint pattern="^Fireware XTM User Authentication$">
426
+ <description>WatchGuard Fireware XTM login page</description>
427
+ <example>Fireware XTM User Authentication</example>
428
+ <param pos="0" name="service.vendor" value="WatchGuard"/>
429
+ <param pos="0" name="service.product" value="Fireware XTM"/>
430
+ <param pos="0" name="service.cpe23" value="cpe:/a:watchguard:fireware_xtm:-"/>
431
+ <param pos="0" name="os.vendor" value="WatchGuard"/>
432
+ <param pos="0" name="os.product" value="Fireware"/>
433
+ <param pos="0" name="os.cpe23" value="cpe:/o:watchguard:fireware:-"/>
317
434
  </fingerprint>
318
435
 
319
- <fingerprint pattern="^(.*).nbsp;-.nbsp;Synology.nbsp;DiskStation$">
436
+ <fingerprint pattern="^(.{0,512}).nbsp;-.nbsp;Synology.nbsp;DiskStation$">
320
437
  <description>Synology DiskStation</description>
321
438
  <example host.name="DiskStation">DiskStation&amp;nbsp;-&amp;nbsp;Synology&amp;nbsp;DiskStation</example>
322
439
  <example host.name="DS218">DS218&amp;nbsp;-&amp;nbsp;Synology&amp;nbsp;DiskStation</example>
@@ -334,6 +451,10 @@
334
451
  <description>Synology with WebStation web hosting</description>
335
452
  <example>Hello! Welcome to Synology Web Station!</example>
336
453
  <example>Hallo! Herzlich Willkommen bei Synology Web Station!</example>
454
+ <param pos="0" name="service.vendor" value="Synology"/>
455
+ <param pos="0" name="service.family" value="Diskstation"/>
456
+ <param pos="0" name="service.product" value="Web Station"/>
457
+ <param pos="0" name="service.cpe23" value="cpe:/a:synology:web_station:-"/>
337
458
  <param pos="0" name="hw.vendor" value="Synology"/>
338
459
  <param pos="0" name="hw.family" value="DiskStation"/>
339
460
  <param pos="0" name="hw.device" value="NAS"/>
@@ -428,6 +549,50 @@
428
549
  <param pos="0" name="hw.device" value="DVR"/>
429
550
  </fingerprint>
430
551
 
552
+ <!-- Various products by Zyxel -->
553
+
554
+ <fingerprint pattern="^USG60$">
555
+ <description>Zyxel USG60 Unified Security Gateway</description>
556
+ <example>USG60</example>
557
+ <param pos="0" name="os.vendor" value="Zyxel"/>
558
+ <param pos="0" name="os.product" value="USG60 firmware"/>
559
+ <param pos="0" name="os.device" value="Firewall"/>
560
+ <param pos="0" name="os.cpe23" value="cpe:/o:zyxel:usg60_firmware:-"/>
561
+ <param pos="0" name="hw.vendor" value="Zyxel"/>
562
+ <param pos="0" name="hw.family" value="Unified Security Gateway"/>
563
+ <param pos="0" name="hw.product" value="USG60"/>
564
+ <param pos="0" name="hw.device" value="Firewall"/>
565
+ <param pos="0" name="hw.cpe23" value="cpe:/h:zyxel:usg60:-"/>
566
+ </fingerprint>
567
+
568
+ <fingerprint pattern="^USG40$">
569
+ <description>Zyxel USG40 Unified Security Gateway</description>
570
+ <example>USG40</example>
571
+ <param pos="0" name="os.vendor" value="Zyxel"/>
572
+ <param pos="0" name="os.product" value="USG40 firmware"/>
573
+ <param pos="0" name="os.device" value="Firewall"/>
574
+ <param pos="0" name="os.cpe23" value="cpe:/o:zyxel:usg40_firmware:-"/>
575
+ <param pos="0" name="hw.vendor" value="Zyxel"/>
576
+ <param pos="0" name="hw.family" value="Unified Security Gateway"/>
577
+ <param pos="0" name="hw.product" value="USG40"/>
578
+ <param pos="0" name="hw.device" value="Firewall"/>
579
+ <param pos="0" name="hw.cpe23" value="cpe:/h:zyxel:usg40:-"/>
580
+ </fingerprint>
581
+
582
+ <fingerprint pattern="^USG20-VPN$">
583
+ <description>Zyxel USG20-VPN Unified Security Gateway</description>
584
+ <example>USG20-VPN</example>
585
+ <param pos="0" name="os.vendor" value="Zyxel"/>
586
+ <param pos="0" name="os.product" value="USG20-VPN firmware"/>
587
+ <param pos="0" name="os.device" value="Firewall"/>
588
+ <param pos="0" name="os.cpe23" value="cpe:/o:zyxel:usg20-vpn_firmware:-"/>
589
+ <param pos="0" name="hw.vendor" value="Zyxel"/>
590
+ <param pos="0" name="hw.family" value="Unified Security Gateway"/>
591
+ <param pos="0" name="hw.product" value="USG20-VPN"/>
592
+ <param pos="0" name="hw.device" value="Firewall"/>
593
+ <param pos="0" name="hw.cpe23" value="cpe:/h:zyxel:usg20-vpn:-"/>
594
+ </fingerprint>
595
+
431
596
  <fingerprint pattern="^RomPager Embedded Web Server Toolkit$">
432
597
  <description>Embedded HTTP server used by many vendors and device
433
598
  types, including APC, 3Com, Andover Controls, Cisco VoIP, D-Link,
@@ -439,6 +604,18 @@
439
604
  <param pos="0" name="service.product" value="RomPager"/>
440
605
  </fingerprint>
441
606
 
607
+ <fingerprint pattern="^Wowza Streaming Engine 4 (Subscription|Perpetual Pro) Edition (\d\.[\w.]+) build(\d+)$">
608
+ <description>Wowza Streaming Engine</description>
609
+ <example service.version="4.7.7.01" service.version.version="20190222144406">Wowza Streaming Engine 4 Subscription Edition 4.7.7.01 build20190222144406</example>
610
+ <example service.edition="Perpetual Pro">Wowza Streaming Engine 4 Perpetual Pro Edition 4.8.8.01 build20201216140014</example>
611
+ <param pos="0" name="service.vendor" value="Wowza"/>
612
+ <param pos="0" name="service.product" value="Streaming Engine"/>
613
+ <param pos="1" name="service.edition"/>
614
+ <param pos="2" name="service.version"/>
615
+ <param pos="3" name="service.version.version"/>
616
+ <param pos="0" name="service.cpe23" value="cpe:/a:wowza:streaming_engine:{service.version}"/>
617
+ </fingerprint>
618
+
442
619
  <fingerprint pattern="^RouterOS router configuration page$">
443
620
  <description>MikroTik RouterOS router configuration page</description>
444
621
  <example>RouterOS router configuration page</example>
@@ -534,12 +711,16 @@
534
711
  <fingerprint pattern="^Netgear Prosafe Plus Switch$">
535
712
  <description>Netgear Prosafe Plus Switch</description>
536
713
  <example>Netgear Prosafe Plus Switch</example>
714
+ <param pos="0" name="os.vendor" value="Netgear"/>
715
+ <param pos="0" name="os.device" value="Switch"/>
716
+ <param pos="0" name="os.product" value="Prosafe Firmware"/>
717
+ <param pos="0" name="os.cpe23" value="cpe:/o:netgear:prosafe_firmware:-"/>
537
718
  <param pos="0" name="hw.vendor" value="Netgear"/>
538
719
  <param pos="0" name="hw.device" value="Switch"/>
539
720
  <param pos="0" name="hw.product" value="Prosafe Plus"/>
540
721
  </fingerprint>
541
722
 
542
- <fingerprint pattern="^(.*).nbsp;Configuration and Management$">
723
+ <fingerprint pattern="^(.{0,256}).nbsp;Configuration and Management$">
543
724
  <description>Digi Terminal Servers</description>
544
725
  <example hw.product="Digi One SP">Digi One SP&amp;nbsp;Configuration and Management</example>
545
726
  <example hw.product="PortServer TS 4">PortServer TS 4&amp;nbsp;Configuration and Management</example>
@@ -595,6 +776,14 @@
595
776
  <param pos="0" name="hw.product" value="Lantick Ethernet Relay Controller"/>
596
777
  </fingerprint>
597
778
 
779
+ <fingerprint pattern="^XYTRONIX Relay$">
780
+ <description>Xytronix Relay</description>
781
+ <example>XYTRONIX Relay</example>
782
+ <param pos="0" name="hw.vendor" value="Xytronix"/>
783
+ <param pos="0" name="hw.device" value="Relay Controller"/>
784
+ <param pos="0" name="hw.product" value="Ethernet Relay Controller"/>
785
+ </fingerprint>
786
+
598
787
  <fingerprint pattern="^(myUTN(?:-[a-zA-Z0-9]+)?) Control Center$">
599
788
  <description>myUTN Device Server</description>
600
789
  <example hw.product="myUTN-50a">myUTN-50a Control Center</example>
@@ -652,7 +841,7 @@
652
841
  <param pos="0" name="hw.product" value="Rack PDU Card"/>
653
842
  </fingerprint>
654
843
 
655
- <fingerprint pattern="^(.*) IntelliSlot Web(?:/\d+)? Card?$">
844
+ <fingerprint pattern="^(.{0,256}) IntelliSlot Web(?:/\d+)? Card?$">
656
845
  <description>Emerson Network Power IntelliSlot Web Card and rebrands</description>
657
846
  <example hw.vendor="Emerson Network Power">Emerson Network Power IntelliSlot Web Card</example>
658
847
  <example hw.vendor="Emerson Network Power">Emerson Network Power IntelliSlot Web/485 Card</example>
@@ -798,11 +987,12 @@
798
987
  <param pos="0" name="hw.device" value="Lights Out Management"/>
799
988
  <param pos="0" name="hw.vendor" value="HP"/>
800
989
  <param pos="0" name="hw.product" value="iLO"/>
801
- <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
990
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights-out:-"/>
802
991
  <param pos="0" name="os.vendor" value="HP"/>
803
992
  <param pos="0" name="os.device" value="Lights Out Management"/>
804
993
  <param pos="0" name="os.family" value="iLO"/>
805
994
  <param pos="0" name="os.product" value="iLO"/>
995
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_firmware:-"/>
806
996
  </fingerprint>
807
997
 
808
998
  <fingerprint pattern="^HP Integrated Lights-Out 2$">
@@ -811,24 +1001,38 @@
811
1001
  <param pos="0" name="hw.device" value="Lights Out Management"/>
812
1002
  <param pos="0" name="hw.vendor" value="HP"/>
813
1003
  <param pos="0" name="hw.product" value="iLO"/>
814
- <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
1004
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights-out:-"/>
815
1005
  <param pos="0" name="os.vendor" value="HP"/>
816
1006
  <param pos="0" name="os.device" value="Lights Out Management"/>
817
1007
  <param pos="0" name="os.family" value="iLO"/>
818
1008
  <param pos="0" name="os.product" value="iLO 2"/>
1009
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_2_firmware:-"/>
819
1010
  </fingerprint>
820
1011
 
821
- <fingerprint pattern="^(iLO \d+)$">
822
- <description>HP Integrated Lights-Out 3+</description>
823
- <example hw.product="iLO 3" os.product="iLO 3">iLO 3</example>
824
- <example hw.product="iLO 4" os.product="iLO 4">iLO 4</example>
1012
+ <fingerprint pattern="^iLO 3$">
1013
+ <description>HP Integrated Lights-Out 3</description>
1014
+ <example>iLO 3</example>
825
1015
  <param pos="0" name="hw.device" value="Lights Out Management"/>
826
1016
  <param pos="0" name="hw.vendor" value="HP"/>
827
- <param pos="1" name="hw.product"/>
1017
+ <param pos="0" name="hw.product" value="iLO 3"/>
828
1018
  <param pos="0" name="os.vendor" value="HP"/>
829
1019
  <param pos="0" name="os.device" value="Lights Out Management"/>
830
1020
  <param pos="0" name="os.family" value="iLO"/>
831
- <param pos="1" name="os.product"/>
1021
+ <param pos="0" name="os.product" value="iLO 3"/>
1022
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_3_firmware:-"/>
1023
+ </fingerprint>
1024
+
1025
+ <fingerprint pattern="^iLO 4$">
1026
+ <description>HP Integrated Lights-Out 4</description>
1027
+ <example>iLO 4</example>
1028
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
1029
+ <param pos="0" name="hw.vendor" value="HP"/>
1030
+ <param pos="0" name="hw.product" value="iLO 4"/>
1031
+ <param pos="0" name="os.vendor" value="HP"/>
1032
+ <param pos="0" name="os.device" value="Lights Out Management"/>
1033
+ <param pos="0" name="os.family" value="iLO"/>
1034
+ <param pos="0" name="os.product" value="iLO 4"/>
1035
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_4_firmware:-"/>
832
1036
  </fingerprint>
833
1037
 
834
1038
  <fingerprint pattern="^HPE SimpliVity OmniStack$">
@@ -855,7 +1059,7 @@
855
1059
  <param pos="0" name="hw.product" value="OpenManage Switch"/>
856
1060
  </fingerprint>
857
1061
 
858
- <fingerprint pattern="^(\S+)\s+-\s+ProCurve Switch (\S+) \((.*)\)$">
1062
+ <fingerprint pattern="^(\S{1,512})\s{1,8}-\s{1,8}ProCurve Switch (\S+) \((.*)\)$">
859
1063
  <description>HPE ProCurve Switch w/Hostname</description>
860
1064
  <example host.name="SW1" hw.product="4204vl" procurve.model="J8770A">SW1 - ProCurve Switch 4204vl (J8770A)</example>
861
1065
  <param pos="0" name="hw.vendor" value="HPE"/>
@@ -951,20 +1155,22 @@
951
1155
 
952
1156
  <fingerprint pattern="^Agilent 33220A \((.*)\)$">
953
1157
  <description>Agilent 33220A</description>
954
- <example agilent.serial="MY44041111">Agilent 33220A (MY44041111)</example>
1158
+ <example agilent.serial="MY44041111" hw.serial_number="MY44041111">Agilent 33220A (MY44041111)</example>
955
1159
  <param pos="0" name="hw.vendor" value="Agilent"/>
956
1160
  <param pos="0" name="hw.device" value="Test Instrument"/>
957
1161
  <param pos="0" name="hw.product" value="33220A Waveform Generator"/>
958
1162
  <param pos="1" name="agilent.serial"/>
1163
+ <param pos="1" name="hw.serial_number"/>
959
1164
  </fingerprint>
960
1165
 
961
1166
  <fingerprint pattern="^Agilent N5172B (?:EXG )?(MY\S+)$">
962
1167
  <description>Agilent N5172B</description>
963
- <example agilent.serial="MY44041111">Agilent N5172B EXG MY44041111</example>
1168
+ <example agilent.serial="MY44041111" hw.serial_number="MY44041111">Agilent N5172B EXG MY44041111</example>
964
1169
  <param pos="0" name="hw.vendor" value="Agilent"/>
965
1170
  <param pos="0" name="hw.device" value="Test Instrument"/>
966
1171
  <param pos="0" name="hw.product" value="N5172B Signal Generator"/>
967
1172
  <param pos="1" name="agilent.serial"/>
1173
+ <param pos="1" name="hw.serial_number"/>
968
1174
  </fingerprint>
969
1175
 
970
1176
  <fingerprint pattern="^Polycom - Configuration Utility$">
@@ -984,6 +1190,14 @@
984
1190
  <param pos="0" name="hw.device" value="VoIP"/>
985
1191
  </fingerprint>
986
1192
 
1193
+ <fingerprint pattern="^3CX Phone System Management Console$">
1194
+ <description>3CX Phone System Management Console</description>
1195
+ <example>3CX Phone System Management Console</example>
1196
+ <param pos="0" name="service.vendor" value="3CX"/>
1197
+ <param pos="0" name="service.product" value="3CX Web Server"/>
1198
+ <param pos="0" name="service.cpe23" value="cpe:/a:3cx:3cx_web_server:-"/>
1199
+ </fingerprint>
1200
+
987
1201
  <fingerprint pattern="^(SPA\S+) Configuration Utility$">
988
1202
  <description>Cisco IP Phone - SPA504G Configuration Utility</description>
989
1203
  <example hw.product="SPA504G">SPA504G Configuration Utility</example>
@@ -1048,7 +1262,6 @@
1048
1262
  <param pos="0" name="os.device" value="Switch"/>
1049
1263
  <param pos="0" name="os.product" value="MDS 9000"/>
1050
1264
  <param pos="1" name="os.version"/>
1051
- <param pos="0" name="os.cpe23" value="cpe:/o:cisco:mds_9000:{os.version}"/>
1052
1265
  </fingerprint>
1053
1266
 
1054
1267
  <fingerprint pattern="^Stealthwatch Management Console$">
@@ -1102,7 +1315,7 @@
1102
1315
  <param pos="0" name="os.vendor" value="Cisco"/>
1103
1316
  <param pos="0" name="os.device" value="Wireless Controller"/>
1104
1317
  <param pos="0" name="os.product" value="Wireless LAN Controller"/>
1105
- <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller:-"/>
1318
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller_software:-"/>
1106
1319
  <param pos="0" name="hw.vendor" value="Cisco"/>
1107
1320
  <param pos="0" name="hw.device" value="Wireless Controller"/>
1108
1321
  <param pos="0" name="hw.product" value="Wireless LAN Controller"/>
@@ -1207,6 +1420,7 @@
1207
1420
  <param pos="0" name="hw.vendor" value="KACE"/>
1208
1421
  <param pos="0" name="hw.device" value="Support Appliance"/>
1209
1422
  <param pos="0" name="hw.product" value="K1000"/>
1423
+ <param pos="0" name="hw.cpe23" value="cpe:/h:dell:kace_k1000_systems_management_appliance:-"/>
1210
1424
  <param pos="0" name="os.vendor" value="KACE"/>
1211
1425
  <param pos="0" name="os.family" value="FreeBSD"/>
1212
1426
  </fingerprint>
@@ -1419,7 +1633,26 @@
1419
1633
  <param pos="0" name="service.vendor" value="Citrix"/>
1420
1634
  <param pos="0" name="service.product" value="XenServer"/>
1421
1635
  <param pos="1" name="service.version"/>
1636
+ <param pos="0" name="service.device" value="Hypervisor"/>
1422
1637
  <param pos="0" name="service.cpe23" value="cpe:/a:citrix:xenserver:{service.version}"/>
1638
+ <param pos="0" name="os.vendor" value="Citrix"/>
1639
+ <param pos="0" name="os.product" value="XenServer"/>
1640
+ <param pos="0" name="os.device" value="Hypervisor"/>
1641
+ <param pos="0" name="hw.device" value="Hypervisor"/>
1642
+ </fingerprint>
1643
+
1644
+ <fingerprint pattern="^Welcome to Citrix Hypervisor ([0-9\.]+)$">
1645
+ <description>XenServer - Hypervisor variant</description>
1646
+ <example service.version="8.2.0">Welcome to Citrix Hypervisor 8.2.0</example>
1647
+ <param pos="0" name="service.vendor" value="Citrix"/>
1648
+ <param pos="0" name="service.product" value="XenServer"/>
1649
+ <param pos="1" name="service.version"/>
1650
+ <param pos="0" name="service.device" value="Hypervisor"/>
1651
+ <param pos="0" name="service.cpe23" value="cpe:/a:citrix:xenserver:{service.version}"/>
1652
+ <param pos="0" name="os.vendor" value="Citrix"/>
1653
+ <param pos="0" name="os.product" value="XenServer"/>
1654
+ <param pos="0" name="os.device" value="Hypervisor"/>
1655
+ <param pos="0" name="hw.device" value="Hypervisor"/>
1423
1656
  </fingerprint>
1424
1657
 
1425
1658
  <fingerprint pattern="^RabbitMQ Management$">
@@ -1469,7 +1702,7 @@
1469
1702
  <param pos="0" name="service.cpe23" value="cpe:/a:realvnc:realvnc:-"/>
1470
1703
  </fingerprint>
1471
1704
 
1472
- <fingerprint pattern="^.* \[Jenkins\]$">
1705
+ <fingerprint pattern="^.{0,1024} \[Jenkins\]$">
1473
1706
  <description>Jenkins Customized Dashboard</description>
1474
1707
  <example>Continuous Integrations [Jenkins]</example>
1475
1708
  <example>Dashboard [Jenkins]</example>
@@ -1501,10 +1734,11 @@
1501
1734
  </fingerprint>
1502
1735
 
1503
1736
  <fingerprint pattern="^Login - OpenStack Dashboard$">
1504
- <description>OpenStack Dashboard</description>
1737
+ <description>OpenStack Horizon Dashboard</description>
1505
1738
  <example>Login - OpenStack Dashboard</example>
1506
1739
  <param pos="0" name="service.vendor" value="OpenStack"/>
1507
- <param pos="0" name="service.product" value="Dashboard"/>
1740
+ <param pos="0" name="service.product" value="Horizon"/>
1741
+ <param pos="0" name="service.cpe23" value="cpe:/a:openstack:horizon:-"/>
1508
1742
  </fingerprint>
1509
1743
 
1510
1744
  <fingerprint pattern="^splunkd$">
@@ -1538,6 +1772,34 @@
1538
1772
  <param pos="0" name="service.product" value="Site Recovery Manager"/>
1539
1773
  </fingerprint>
1540
1774
 
1775
+ <fingerprint pattern="^&quot; \+ ID_VC_Welcome \+ &quot;$">
1776
+ <description>VMware vCenter</description>
1777
+ <example>" + ID_VC_Welcome + "</example>
1778
+ <param pos="0" name="service.vendor" value="VMware"/>
1779
+ <param pos="0" name="service.product" value="vCenter"/>
1780
+ <param pos="0" name="service.cpe23" value="cpe:/a:vmware:vcenter_server:-"/>
1781
+ </fingerprint>
1782
+
1783
+ <fingerprint pattern="^&quot; \+ ID_EESX_Welcome \+ &quot;$">
1784
+ <description>VMware ESXi</description>
1785
+ <example>" + ID_EESX_Welcome + "</example>
1786
+ <param pos="0" name="service.vendor" value="VMware"/>
1787
+ <param pos="0" name="os.vendor" value="VMware"/>
1788
+ <param pos="0" name="os.family" value="VMware ESX/ESXi"/>
1789
+ <param pos="0" name="os.product" value="VMware ESXi Server"/>
1790
+ <param pos="0" name="os.device" value="Hypervisor"/>
1791
+ <param pos="0" name="os.cpe23" value="cpe:/o:vmware:esxi:-"/>
1792
+ <param pos="0" name="hw.device" value="Hypervisor"/>
1793
+ </fingerprint>
1794
+
1795
+ <fingerprint pattern="^&quot; \+ ID_Converter_Welcome \+ &quot;$">
1796
+ <description>VMware Converter</description>
1797
+ <example>" + ID_Converter_Welcome + "</example>
1798
+ <param pos="0" name="service.vendor" value="VMware"/>
1799
+ <param pos="0" name="service.product" value="vCenter Converter"/>
1800
+ <param pos="0" name="service.cpe23" value="cpe:/a:vmware:vcenter_converter:-"/>
1801
+ </fingerprint>
1802
+
1541
1803
  <fingerprint pattern="^Graylog Web Interface$">
1542
1804
  <description>Graylog Web Interface</description>
1543
1805
  <example>Graylog Web Interface</example>
@@ -1593,7 +1855,15 @@
1593
1855
  <example>ManageEngine OpManager</example>
1594
1856
  <param pos="0" name="service.vendor" value="ManageEngine"/>
1595
1857
  <param pos="0" name="service.product" value="OpManager"/>
1596
- <param pos="0" name="service.cpe23" value="cpe:/a:manageengine:opmanager:-"/>
1858
+ <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_opmanager:-"/>
1859
+ </fingerprint>
1860
+
1861
+ <fingerprint pattern="^ManageEngine Desktop Central 9$">
1862
+ <description>ManageEngine Desktop Central 9</description>
1863
+ <example>ManageEngine Desktop Central 9</example>
1864
+ <param pos="0" name="service.vendor" value="ManageEngine"/>
1865
+ <param pos="0" name="service.product" value="Desktop Central"/>
1866
+ <param pos="0" name="service.cpe23" value="cpe:/a:manageengine:desktop_central:-"/>
1597
1867
  </fingerprint>
1598
1868
 
1599
1869
  <fingerprint pattern="^ManageEngine ADAudit Plus$">
@@ -1601,6 +1871,7 @@
1601
1871
  <example>ManageEngine ADAudit Plus</example>
1602
1872
  <param pos="0" name="service.vendor" value="ManageEngine"/>
1603
1873
  <param pos="0" name="service.product" value="ADAudit Plus"/>
1874
+ <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_adaudit_plus:-"/>
1604
1875
  </fingerprint>
1605
1876
 
1606
1877
  <fingerprint pattern="^(ScanFront \d.+)Web Menu$">
@@ -1659,11 +1930,17 @@
1659
1930
  <param pos="0" name="os.family" value="NetScaler"/>
1660
1931
  <param pos="0" name="os.device" value="Network Management Device"/>
1661
1932
  <param pos="0" name="os.product" value="NetScaler"/>
1933
+ <param pos="0" name="os.cpe23" value="cpe:/o:citrix:netscaler_firmware:-"/>
1662
1934
  <param pos="0" name="service.vendor" value="Citrix"/>
1663
1935
  <param pos="0" name="service.family" value="NetScaler"/>
1664
1936
  <param pos="0" name="service.device" value="Network Management Device"/>
1665
1937
  <param pos="0" name="service.product" value="NetScaler"/>
1666
1938
  <param pos="0" name="service.cpe23" value="cpe:/a:citrix:netscaler:-"/>
1939
+ <param pos="0" name="hw.vendor" value="Citrix"/>
1940
+ <param pos="0" name="hw.family" value="NetScaler"/>
1941
+ <param pos="0" name="hw.device" value="Network Management Device"/>
1942
+ <param pos="0" name="hw.product" value="NetScaler Gateway"/>
1943
+ <param pos="0" name="hw.cpe23" value="cpe:/h:citrix:netscaler_gateway:-"/>
1667
1944
  </fingerprint>
1668
1945
 
1669
1946
  <fingerprint pattern="^Netscaler Gateway$">
@@ -1673,10 +1950,17 @@
1673
1950
  <param pos="0" name="os.family" value="NetScaler"/>
1674
1951
  <param pos="0" name="os.device" value="Network Management Device"/>
1675
1952
  <param pos="0" name="os.product" value="NetScaler Gateway"/>
1953
+ <param pos="0" name="os.cpe23" value="cpe:/o:citrix:netscaler_gateway_firmware:-"/>
1676
1954
  <param pos="0" name="service.vendor" value="Citrix"/>
1677
1955
  <param pos="0" name="service.family" value="NetScaler"/>
1678
1956
  <param pos="0" name="service.device" value="Network Management Device"/>
1679
1957
  <param pos="0" name="service.product" value="NetScaler Gateway"/>
1958
+ <param pos="0" name="service.cpe23" value="cpe:/a:citrix:netscaler_gateway:-"/>
1959
+ <param pos="0" name="hw.vendor" value="Citrix"/>
1960
+ <param pos="0" name="hw.family" value="NetScaler"/>
1961
+ <param pos="0" name="hw.device" value="Network Management Device"/>
1962
+ <param pos="0" name="hw.product" value="NetScaler Gateway"/>
1963
+ <param pos="0" name="hw.cpe23" value="cpe:/h:citrix:netscaler_gateway:-"/>
1680
1964
  </fingerprint>
1681
1965
 
1682
1966
  <fingerprint pattern="^Citrix (?:NetScaler SDX|ADC SDX)$">
@@ -1691,6 +1975,11 @@
1691
1975
  <param pos="0" name="service.family" value="NetScaler"/>
1692
1976
  <param pos="0" name="service.device" value="Network Management Device"/>
1693
1977
  <param pos="0" name="service.product" value="NetScaler SDX Gateway"/>
1978
+ <param pos="0" name="hw.vendor" value="Citrix"/>
1979
+ <param pos="0" name="hw.family" value="NetScaler"/>
1980
+ <param pos="0" name="hw.device" value="Network Management Device"/>
1981
+ <param pos="0" name="hw.product" value="NetScaler SDX Gateway"/>
1982
+ <param pos="0" name="hw.cpe23" value="cpe:/h:citrix:netscaler_sdx:-"/>
1694
1983
  </fingerprint>
1695
1984
 
1696
1985
  <fingerprint pattern="^Citrix NetScaler Insight Center$">
@@ -1804,22 +2093,22 @@
1804
2093
 
1805
2094
  <fingerprint pattern="^AVTECH Software, Inc\. - Room Alert(?:&amp;reg;)?\s+([a-zA-Z0-9/]+) - Advanced">
1806
2095
  <description>AVTECH RoomAlert</description>
1807
- <example hw.product="Room Alert 11E" hw.product.model="11E">AVTECH Software, Inc. - Room Alert 11E - Advanced Computer Room Environment Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1808
- <example hw.product="Room Alert 32E/W" hw.product.model="32E/W">AVTECH Software, Inc. - Room Alert 32E/W - Advanced Computer Room Environment Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1809
- <example hw.product="Room Alert 32E/W" hw.product.model="32E/W">AVTECH Software, Inc. - Room Alert&amp;reg; 32E/W - Advanced Computer Room Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
2096
+ <example hw.product="Room Alert 11E" hw.model="11E">AVTECH Software, Inc. - Room Alert 11E - Advanced Computer Room Environment Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
2097
+ <example hw.product="Room Alert 32E/W" hw.model="32E/W">AVTECH Software, Inc. - Room Alert 32E/W - Advanced Computer Room Environment Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
2098
+ <example hw.product="Room Alert 32E/W" hw.model="32E/W">AVTECH Software, Inc. - Room Alert&amp;reg; 32E/W - Advanced Computer Room Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1810
2099
  <param pos="0" name="hw.vendor" value="AVTECH"/>
1811
2100
  <param pos="0" name="hw.device" value="Monitoring"/>
1812
- <param pos="1" name="hw.product.model"/>
1813
- <param pos="0" name="hw.product" value="Room Alert {hw.product.model}"/>
2101
+ <param pos="1" name="hw.model"/>
2102
+ <param pos="0" name="hw.product" value="Room Alert {hw.model}"/>
1814
2103
  </fingerprint>
1815
2104
 
1816
2105
  <fingerprint pattern="^AVTECH Software, Inc\. - TemPageR\s+([a-zA-Z0-9/]+) - Real-Time">
1817
2106
  <description>AVTECH TepPageR</description>
1818
- <example hw.product="TemPageR 3E" hw.product.model="3E">AVTECH Software, Inc. - TemPageR 3E - Real-Time Temperature Monitor For IT &amp;amp; Facilities Environment Monitoring</example>
2107
+ <example hw.product="TemPageR 3E" hw.model="3E">AVTECH Software, Inc. - TemPageR 3E - Real-Time Temperature Monitor For IT &amp;amp; Facilities Environment Monitoring</example>
1819
2108
  <param pos="0" name="hw.vendor" value="AVTECH"/>
1820
2109
  <param pos="0" name="hw.device" value="Monitoring"/>
1821
- <param pos="1" name="hw.product.model"/>
1822
- <param pos="0" name="hw.product" value="TemPageR {hw.product.model}"/>
2110
+ <param pos="1" name="hw.model"/>
2111
+ <param pos="0" name="hw.product" value="TemPageR {hw.model}"/>
1823
2112
  </fingerprint>
1824
2113
 
1825
2114
  <fingerprint pattern="^AppDynamics$">
@@ -2076,7 +2365,7 @@
2076
2365
  <param pos="0" name="service.product" value="SonarQube"/>
2077
2366
  </fingerprint>
2078
2367
 
2079
- <fingerprint pattern="^(\S+) - Opengear Management Console$">
2368
+ <fingerprint pattern="^(\S{1,512}) - Opengear Management Console$">
2080
2369
  <description>Opengear Management Console</description>
2081
2370
  <example host.name="server01">server01 - Opengear Management Console</example>
2082
2371
  <param pos="0" name="service.vendor" value="Opengear"/>
@@ -2181,6 +2470,14 @@
2181
2470
  <param pos="0" name="service.product" value="Kiwi Syslog"/>
2182
2471
  </fingerprint>
2183
2472
 
2473
+ <fingerprint pattern="^SolarWinds Orion$">
2474
+ <description>SolarWinds Orion</description>
2475
+ <example>SolarWinds Orion</example>
2476
+ <param pos="0" name="service.vendor" value="SolarWinds"/>
2477
+ <param pos="0" name="service.product" value="Orion Platform"/>
2478
+ <param pos="0" name="service.cpe23" value="cpe:/a:solarwinds:orion_platform:-"/>
2479
+ </fingerprint>
2480
+
2184
2481
  <fingerprint pattern="^ClickShare Configurator$">
2185
2482
  <description>ClickShare Wireless Presenter</description>
2186
2483
  <example>ClickShare Configurator</example>
@@ -2201,6 +2498,47 @@
2201
2498
  <param pos="1" name="hw.product"/>
2202
2499
  </fingerprint>
2203
2500
 
2501
+ <fingerprint pattern="^Welcome to Oracle Fusion Middleware$">
2502
+ <description>Oracle Fusion Middleware</description>
2503
+ <example>Welcome to Oracle Fusion Middleware</example>
2504
+ <param pos="0" name="service.vendor" value="Oracle"/>
2505
+ <param pos="0" name="service.product" value="Fusion Middleware"/>
2506
+ <param pos="0" name="service.cpe23" value="cpe:/a:oracle:fusion_middleware:-"/>
2507
+ </fingerprint>
2508
+
2509
+ <fingerprint pattern="^Oracle Secure Global Desktop(?: Redirect Page)?$">
2510
+ <description>Oracle Secure Global Desktop</description>
2511
+ <example>Oracle Secure Global Desktop</example>
2512
+ <example>Oracle Secure Global Desktop Redirect Page</example>
2513
+ <param pos="0" name="service.vendor" value="Oracle"/>
2514
+ <param pos="0" name="service.product" value="Secure Global Desktop"/>
2515
+ <param pos="0" name="service.cpe23" value="cpe:/a:oracle:secure_global_desktop:-"/>
2516
+ </fingerprint>
2517
+
2518
+ <fingerprint pattern="^OTM - Oracle Transportation Management$">
2519
+ <description>Oracle Transportation Management</description>
2520
+ <example>OTM - Oracle Transportation Management</example>
2521
+ <param pos="0" name="service.vendor" value="Oracle"/>
2522
+ <param pos="0" name="service.product" value="Transportation Management"/>
2523
+ <param pos="0" name="service.cpe23" value="cpe:/a:oracle:transportation_management:-"/>
2524
+ </fingerprint>
2525
+
2526
+ <fingerprint pattern="^Bad Oracle Access Manager Request$">
2527
+ <description>Oracle Access Manager - Bad Request</description>
2528
+ <example>Bad Oracle Access Manager Request</example>
2529
+ <param pos="0" name="service.vendor" value="Oracle"/>
2530
+ <param pos="0" name="service.product" value="Access Manager"/>
2531
+ <param pos="0" name="service.cpe23" value="cpe:/a:oracle:access_manager:-"/>
2532
+ </fingerprint>
2533
+
2534
+ <fingerprint pattern="^Oracle Access Manager Operation Error$">
2535
+ <description>Oracle Access Manager - Operation Error</description>
2536
+ <example>Oracle Access Manager Operation Error</example>
2537
+ <param pos="0" name="service.vendor" value="Oracle"/>
2538
+ <param pos="0" name="service.product" value="Access Manager"/>
2539
+ <param pos="0" name="service.cpe23" value="cpe:/a:oracle:access_manager:-"/>
2540
+ </fingerprint>
2541
+
2204
2542
  <fingerprint pattern="^(?:Oracle\(R\) )?Integrated Lights Out Manager$">
2205
2543
  <description>Oracle iLOM</description>
2206
2544
  <example>Oracle(R) Integrated Lights Out Manager</example>
@@ -2213,6 +2551,7 @@
2213
2551
  <param pos="0" name="os.vendor" value="Oracle"/>
2214
2552
  <param pos="0" name="os.family" value="ILOM"/>
2215
2553
  <param pos="0" name="os.product" value="ILOM"/>
2554
+ <param pos="0" name="os.cpe23" value="cpe:/o:oracle:integrated_lights_out_manager_firmware:-"/>
2216
2555
  </fingerprint>
2217
2556
 
2218
2557
  <fingerprint pattern="^Genetec - SHARPV\S+$">
@@ -2292,7 +2631,7 @@
2292
2631
  <param pos="0" name="service.cpe23" value="cpe:/a:zabbix:zabbix:-"/>
2293
2632
  </fingerprint>
2294
2633
 
2295
- <fingerprint pattern="^(\S+) \(build (\S+)\) - Info$">
2634
+ <fingerprint pattern="^(\S{1,512}) \(build (\S+)\) - Info$">
2296
2635
  <description>DD-WRT</description>
2297
2636
  <example host.name="SubTerraVia-NUC" os.version="36104" os.build="36104">SubTerraVia-NUC (build 36104) - Info</example>
2298
2637
  <example host.name="DD-WRT" os.version="35030M" os.build="35030M">DD-WRT (build 35030M) - Info</example>
@@ -2316,10 +2655,11 @@
2316
2655
  </fingerprint>
2317
2656
 
2318
2657
  <fingerprint pattern="^Gerrit Code Review$">
2319
- <description>Gerrit Code Review</description>
2658
+ <description>Google's Gerrit Code Review</description>
2320
2659
  <example>Gerrit Code Review</example>
2321
- <param pos="0" name="service.vendor" value="Gerrit"/>
2322
- <param pos="0" name="service.product" value="Code Review"/>
2660
+ <param pos="0" name="service.vendor" value="Google"/>
2661
+ <param pos="0" name="service.product" value="Gerrit"/>
2662
+ <param pos="0" name="service.cpe23" value="cpe:/a:google:gerrit:-"/>
2323
2663
  </fingerprint>
2324
2664
 
2325
2665
  <fingerprint pattern=" - Ignition Gateway$">
@@ -2511,6 +2851,7 @@
2511
2851
  <example>SolarWinds Virtualization Manager</example>
2512
2852
  <param pos="0" name="service.vendor" value="SolarWinds"/>
2513
2853
  <param pos="0" name="service.product" value="Virtualization Manager"/>
2854
+ <param pos="0" name="service.cpe23" value="cpe:/a:solarwinds:virtualization_manager:-"/>
2514
2855
  </fingerprint>
2515
2856
 
2516
2857
  <fingerprint pattern="^(?:Gitea: .*|LocalRepo|TurnKey Gitea)$">
@@ -2568,9 +2909,10 @@
2568
2909
  <param pos="0" name="service.certainty" value="0.5"/>
2569
2910
  </fingerprint>
2570
2911
 
2571
- <fingerprint pattern="^ownCloud$">
2912
+ <fingerprint pattern="^[oO]wn[cC]loud$">
2572
2913
  <description>ownCloud</description>
2573
2914
  <example>ownCloud</example>
2915
+ <example>Owncloud</example>
2574
2916
  <param pos="0" name="service.vendor" value="ownCloud"/>
2575
2917
  <param pos="0" name="service.product" value="ownCloud Server"/>
2576
2918
  <param pos="0" name="service.certainty" value="0.5"/>
@@ -2597,6 +2939,7 @@
2597
2939
  <example>RStudio Sign In</example>
2598
2940
  <param pos="0" name="service.vendor" value="RStudio"/>
2599
2941
  <param pos="0" name="service.product" value="Connect"/>
2942
+ <param pos="0" name="service.cpe23" value="cpe:/a:rstudio:connect:-"/>
2600
2943
  </fingerprint>
2601
2944
 
2602
2945
  <fingerprint pattern="^(?:TurnKey Moodle|New Site)$">
@@ -2654,9 +2997,10 @@
2654
2997
  <param pos="0" name="service.product" value="Security Scanner"/>
2655
2998
  </fingerprint>
2656
2999
 
2657
- <fingerprint pattern="^Kodi$">
3000
+ <fingerprint pattern="^(?:Chorus 2 - )?Kodi(?: web interface)?$">
2658
3001
  <description>Kodi Media Server</description>
2659
3002
  <example>Kodi</example>
3003
+ <example>Chorus 2 - Kodi web interface</example>
2660
3004
  <param pos="0" name="service.vendor" value="Kodi"/>
2661
3005
  <param pos="0" name="service.product" value="Media Server"/>
2662
3006
  <param pos="0" name="service.cpe23" value="cpe:/a:kodi:kodi:-"/>
@@ -2720,7 +3064,7 @@
2720
3064
  <param pos="0" name="hw.certainty" value="0.75"/>
2721
3065
  <param pos="0" name="os.vendor" value="Dell"/>
2722
3066
  <param pos="0" name="os.product" value="iDRAC Linux"/>
2723
- <param pos="0" name="os .certainty" value="0.75"/>
3067
+ <param pos="0" name="os.certainty" value="0.75"/>
2724
3068
  </fingerprint>
2725
3069
 
2726
3070
  <fingerprint pattern="^Pulse Connect Secure - SSL">
@@ -2735,4 +3079,172 @@
2735
3079
  <param pos="0" name="os.product" value="Pulse Connect Secure"/>
2736
3080
  </fingerprint>
2737
3081
 
3082
+ <fingerprint pattern="^Jellyfin$">
3083
+ <description>Jellyfin media server</description>
3084
+ <example>Jellyfin</example>
3085
+ <param pos="0" name="service.vendor" value="Jellyfin"/>
3086
+ <param pos="0" name="service.product" value="Media Server"/>
3087
+ </fingerprint>
3088
+
3089
+ <fingerprint pattern="^proxmox - Proxmox Virtual Environment$">
3090
+ <description>Proxmox open-source virtualization platform</description>
3091
+ <example>proxmox - Proxmox Virtual Environment</example>
3092
+ <param pos="0" name="service.vendor" value="Proxmox"/>
3093
+ <param pos="0" name="service.product" value="Virtual Environment"/>
3094
+ <param pos="0" name="service.cpe23" value="cpe:/a:proxmox:virtual_environment:-"/>
3095
+ <param pos="0" name="os.vendor" value="Proxmox"/>
3096
+ <param pos="0" name="os.family" value="Linux"/>
3097
+ <param pos="0" name="os.product" value="Proxmox"/>
3098
+ </fingerprint>
3099
+
3100
+ <fingerprint pattern="^Sony Network Camera$">
3101
+ <description>Sony Network Camera</description>
3102
+ <example>Sony Network Camera</example>
3103
+ <param pos="0" name="hw.vendor" value="Sony"/>
3104
+ <param pos="0" name="hw.device" value="IP Camera"/>
3105
+ <param pos="0" name="hw.product" value="Network Camera"/>
3106
+ </fingerprint>
3107
+
3108
+ <fingerprint pattern="Lifesize&amp;reg;$">
3109
+ <description>Lifesize TelePresence</description>
3110
+ <example>Lifesize&amp;reg;</example>
3111
+ <example>400 - Bad Request Lifesize&amp;reg;</example>
3112
+ <param pos="0" name="hw.vendor" value="Lifesize"/>
3113
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
3114
+ <param pos="0" name="hw.product" value="TelePresence"/>
3115
+ <param pos="0" name="os.vendor" value="Lifesize"/>
3116
+ <param pos="0" name="os.family" value="Linux"/>
3117
+ <param pos="0" name="os.product" value="TelePresence"/>
3118
+ <param pos="0" name="os.device" value="Video Conferencing"/>
3119
+ </fingerprint>
3120
+
3121
+ <fingerprint pattern="^AT&amp;amp;T VPN Gateway$">
3122
+ <description>ATT VPN Gateway</description>
3123
+ <example>AT&amp;amp;T VPN Gateway</example>
3124
+ <param pos="0" name="hw.vendor" value="ATT"/>
3125
+ <param pos="0" name="hw.device" value="VPN"/>
3126
+ <param pos="0" name="hw.product" value="VPN Gateway"/>
3127
+ </fingerprint>
3128
+
3129
+ <fingerprint pattern="^AT&amp;amp;T U\d+: '([^']+)'$">
3130
+ <description>ATT VPN Gateway w Hostname</description>
3131
+ <example host.name="Austin-Boston">AT&amp;amp;T U115: 'Austin-Boston'</example>
3132
+ <param pos="0" name="hw.vendor" value="ATT"/>
3133
+ <param pos="0" name="hw.device" value="VPN"/>
3134
+ <param pos="0" name="hw.product" value="VPN Gateway"/>
3135
+ <param pos="1" name="host.name"/>
3136
+ </fingerprint>
3137
+
3138
+ <fingerprint pattern="^(?:Symantec Encryption Verified Directory|Symantec Encryption Server.*)$">
3139
+ <description>Symantec PGP Key Management Server</description>
3140
+ <example>Symantec Encryption Verified Directory</example>
3141
+ <example>Symantec Encryption Server - Page Not Found</example>
3142
+ <example>Symantec Encryption Server - Login</example>
3143
+ <param pos="0" name="hw.vendor" value="Symantec"/>
3144
+ <param pos="0" name="hw.device" value="Security Appliance"/>
3145
+ <param pos="0" name="hw.product" value="Key Management Server"/>
3146
+ </fingerprint>
3147
+
3148
+ <fingerprint pattern="^Riverbed Technology, Inc\.$">
3149
+ <description>Riverbed Steelhead Appliance</description>
3150
+ <example>Riverbed Technology, Inc.</example>
3151
+ <param pos="0" name="hw.vendor" value="Riverbed"/>
3152
+ <param pos="0" name="hw.device" value="Security Appliance"/>
3153
+ <param pos="0" name="hw.product" value="Steelhead"/>
3154
+ <param pos="0" name="os.product" value="RiOS"/>
3155
+ <param pos="0" name="os.vendor" value="Riverbed"/>
3156
+ <param pos="0" name="os.cpe23" value="cpe:/o:riverbed:rios:-"/>
3157
+ </fingerprint>
3158
+
3159
+ <fingerprint pattern="^ClearPass - Aruba Networks$">
3160
+ <description>ClearPass Policy Manager Appliance</description>
3161
+ <example>ClearPass - Aruba Networks</example>
3162
+ <param pos="0" name="hw.vendor" value="Aruba Networks"/>
3163
+ <param pos="0" name="hw.device" value="Network Appliance"/>
3164
+ <param pos="0" name="hw.product" value="ClearPass Policy Manager"/>
3165
+ <param pos="0" name="service.vendor" value="Aruba Networks"/>
3166
+ <param pos="0" name="service.device" value="Network Appliance"/>
3167
+ <param pos="0" name="service.product" value="ClearPass Policy Manager"/>
3168
+ <param pos="0" name="service.cpe23" value="cpe:/a:arubanetworks:clearpass_policy_manager:-"/>
3169
+ </fingerprint>
3170
+
3171
+ <fingerprint pattern="^MSTR Collab Server$">
3172
+ <description>MicroStrategy Collaboration Server</description>
3173
+ <example>MSTR Collab Server</example>
3174
+ <param pos="0" name="service.vendor" value="MicroStrategy"/>
3175
+ <param pos="0" name="service.product" value="Collaboration Server"/>
3176
+ <param pos="0" name="service.certainty" value="0.5"/>
3177
+ </fingerprint>
3178
+
3179
+ <fingerprint pattern="^Openfire Admin Console$">
3180
+ <description>Openfire Admin Console</description>
3181
+ <example>Openfire Admin Console</example>
3182
+ <param pos="0" name="service.vendor" value="Ignite Realtime"/>
3183
+ <param pos="0" name="service.product" value="OpenFire"/>
3184
+ <param pos="0" name="service.cpe23" value="cpe:/a:igniterealtime:openfire:-"/>
3185
+ </fingerprint>
3186
+
3187
+ <fingerprint pattern="^:: PBX in a Flash">
3188
+ <description>PBX in a Flash</description>
3189
+ <example>:: PBX in a Flash, Welcome!</example>
3190
+ <param pos="0" name="hw.vendor" value="PIAF"/>
3191
+ <param pos="0" name="hw.device" value="SIP Gateway"/>
3192
+ <param pos="0" name="hw.product" value="PIAF Virtual Appliance"/>
3193
+ </fingerprint>
3194
+
3195
+ <fingerprint pattern="^Hak5 Cloud C">
3196
+ <description>Hak5 Cloud c2</description>
3197
+ <example>Hak5 Cloud C²</example>
3198
+ <param pos="0" name="service.vendor" value="Hak5"/>
3199
+ <param pos="0" name="service.product" value="Cloud C2"/>
3200
+ </fingerprint>
3201
+
3202
+ <fingerprint pattern="^Metabase$">
3203
+ <description>Metabase</description>
3204
+ <example>Metabase</example>
3205
+ <param pos="0" name="service.vendor" value="Metabase"/>
3206
+ <param pos="0" name="service.product" value="Metabase"/>
3207
+ <param pos="0" name="service.cpe23" value="cpe:/a:metabase:metabase:-"/>
3208
+ </fingerprint>
3209
+
3210
+ <fingerprint pattern="Nextcloud">
3211
+ <description>Nextcloud</description>
3212
+ <example>Nextcloud</example>
3213
+ <param pos="0" name="service.vendor" value="Nextcloud"/>
3214
+ <param pos="0" name="service.product" value="Nextcloud Server"/>
3215
+ <param pos="0" name="service.cpe23" value="cpe:/a:nextcloud:nextcloud_server:-"/>
3216
+ </fingerprint>
3217
+
3218
+ <fingerprint pattern="^Observium">
3219
+ <description>Observium</description>
3220
+ <example>Observium : - Test infra</example>
3221
+ <param pos="0" name="service.vendor" value="Observium"/>
3222
+ <param pos="0" name="service.product" value="Observium"/>
3223
+ <param pos="0" name="service.cpe23" value="cpe:/a:observium:observium:-"/>
3224
+ </fingerprint>
3225
+
3226
+ <fingerprint pattern="^Login to Webmin$">
3227
+ <description>Webmin</description>
3228
+ <example>Login to Webmin</example>
3229
+ <param pos="0" name="service.vendor" value="Webmin"/>
3230
+ <param pos="0" name="service.product" value="Webmin"/>
3231
+ <param pos="0" name="service.cpe23" value="cpe:/a:webmin:webmin:-"/>
3232
+ </fingerprint>
3233
+
3234
+ <fingerprint pattern="^Login to Usermin$">
3235
+ <description>Usermin</description>
3236
+ <example>Login to Usermin</example>
3237
+ <param pos="0" name="service.vendor" value="Webmin"/>
3238
+ <param pos="0" name="service.product" value="Usermin"/>
3239
+ <param pos="0" name="service.cpe23" value="cpe:/a:webmin:usermin:-"/>
3240
+ </fingerprint>
3241
+
3242
+ <fingerprint pattern="^MoinMoinWiki">
3243
+ <description>Moinmoin wiki</description>
3244
+ <example>MoinMoinWiki - MoinMoin</example>
3245
+ <param pos="0" name="service.vendor" value="MoinMoin"/>
3246
+ <param pos="0" name="service.product" value="MoinMoin"/>
3247
+ <param pos="0" name="service.cpe23" value="cpe:/a:moinmo:moinmoin:-"/>
3248
+ </fingerprint>
3249
+
2738
3250
  </fingerprints>