recog 2.3.18 → 2.3.22
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.github/dependabot.yml +8 -0
- data/.github/workflows/ci.yml +26 -0
- data/.github/workflows/verify.yml +89 -0
- data/CONTRIBUTING.md +6 -0
- data/README.md +17 -0
- data/bin/recog_standardize +33 -12
- data/bin/recog_verify +1 -2
- data/cpe-remap.yaml +355 -200
- data/features/verify.feature +14 -14
- data/identifiers/README.md +24 -10
- data/identifiers/fields.txt +105 -0
- data/identifiers/hw_device.txt +8 -0
- data/identifiers/hw_family.txt +19 -0
- data/identifiers/hw_product.txt +122 -0
- data/identifiers/os_device.txt +2 -1
- data/identifiers/os_family.txt +3 -0
- data/identifiers/os_product.txt +46 -8
- data/identifiers/service_family.txt +10 -1
- data/identifiers/service_product.txt +90 -2
- data/identifiers/vendor.txt +104 -0
- data/lib/recog/db.rb +2 -1
- data/lib/recog/fingerprint.rb +18 -5
- data/lib/recog/nizer.rb +1 -82
- data/lib/recog/verifier.rb +5 -5
- data/lib/recog/verifier_factory.rb +3 -3
- data/lib/recog/verify_reporter.rb +14 -4
- data/lib/recog/version.rb +1 -1
- data/requirements.txt +1 -1
- data/spec/lib/fingerprint_self_test_spec.rb +1 -0
- data/spec/lib/recog/verify_reporter_spec.rb +69 -0
- data/tools/dev/hooks/pre-commit +21 -0
- data/update_cpes.py +19 -6
- data/xml/apache_modules.xml +60 -0
- data/xml/apache_os.xml +38 -38
- data/xml/dhcp_vendor_class.xml +206 -0
- data/xml/dns_versionbind.xml +11 -1
- data/xml/favicons.xml +270 -45
- data/xml/ftp_banners.xml +89 -64
- data/xml/h323_callresp.xml +99 -99
- data/xml/hp_pjl_id.xml +3 -3
- data/xml/html_title.xml +1051 -62
- data/xml/http_cookies.xml +294 -85
- data/xml/http_servers.xml +551 -122
- data/xml/http_wwwauth.xml +139 -43
- data/xml/imap_banners.xml +8 -8
- data/xml/ldap_searchresult.xml +1 -0
- data/xml/mdns_device-info_txt.xml +720 -27
- data/xml/mysql_banners.xml +3 -2
- data/xml/nntp_banners.xml +4 -4
- data/xml/ntp_banners.xml +79 -65
- data/xml/operating_system.xml +6 -6
- data/xml/pop_banners.xml +11 -11
- data/xml/rsh_resp.xml +3 -3
- data/xml/rtsp_servers.xml +7 -0
- data/xml/sip_banners.xml +374 -9
- data/xml/sip_user_agents.xml +377 -5
- data/xml/smb_native_lm.xml +32 -1
- data/xml/smb_native_os.xml +160 -33
- data/xml/smtp_banners.xml +168 -129
- data/xml/smtp_ehlo.xml +1 -1
- data/xml/smtp_expn.xml +1 -0
- data/xml/smtp_help.xml +10 -10
- data/xml/smtp_noop.xml +2 -2
- data/xml/smtp_vrfy.xml +1 -0
- data/xml/snmp_sysdescr.xml +508 -214
- data/xml/snmp_sysobjid.xml +25 -25
- data/xml/ssh_banners.xml +145 -29
- data/xml/telnet_banners.xml +240 -61
- data/xml/tls_jarm.xml +162 -0
- data/xml/x509_issuers.xml +237 -2
- data/xml/x509_subjects.xml +369 -49
- metadata +10 -3
data/xml/html_title.xml
CHANGED
@@ -1,25 +1,80 @@
|
|
1
1
|
<?xml version='1.0' encoding='UTF-8'?>
|
2
|
-
<fingerprints matches="html_title" database_type="service" preference="0.90">
|
2
|
+
<fingerprints matches="html_title" protocol="http" database_type="service" preference="0.90">
|
3
3
|
<!-- HTML Title elements found in HTTP response bodies are matched against these patterns to fingerprint HTTP servers. -->
|
4
4
|
|
5
5
|
<fingerprint pattern="^301 Moved Permanently$">
|
6
6
|
<description>301 Moved Permanently - generic -- assert nothing.</description>
|
7
7
|
<example>301 Moved Permanently</example>
|
8
|
+
<param pos="0" name="hw.certainty" value="0.0"/>
|
9
|
+
<param pos="0" name="os.certainty" value="0.0"/>
|
10
|
+
<param pos="0" name="service.certainty" value="0.0"/>
|
11
|
+
</fingerprint>
|
12
|
+
|
13
|
+
<fingerprint pattern="^302 Found$">
|
14
|
+
<description>302 Found - generic -- assert nothing.</description>
|
15
|
+
<example>302 Found</example>
|
16
|
+
<param pos="0" name="hw.certainty" value="0.0"/>
|
17
|
+
<param pos="0" name="os.certainty" value="0.0"/>
|
18
|
+
<param pos="0" name="service.certainty" value="0.0"/>
|
8
19
|
</fingerprint>
|
9
20
|
|
10
21
|
<fingerprint pattern="^400 Bad Request$">
|
11
22
|
<description>400 Bad Request - generic -- assert nothing.</description>
|
12
23
|
<example>400 Bad Request</example>
|
24
|
+
<param pos="0" name="hw.certainty" value="0.0"/>
|
25
|
+
<param pos="0" name="os.certainty" value="0.0"/>
|
26
|
+
<param pos="0" name="service.certainty" value="0.0"/>
|
13
27
|
</fingerprint>
|
14
28
|
|
15
29
|
<fingerprint pattern="^401 Unauthorized$">
|
16
30
|
<description>401 Unauthorized - generic -- assert nothing.</description>
|
17
31
|
<example>401 Unauthorized</example>
|
32
|
+
<param pos="0" name="hw.certainty" value="0.0"/>
|
33
|
+
<param pos="0" name="os.certainty" value="0.0"/>
|
34
|
+
<param pos="0" name="service.certainty" value="0.0"/>
|
35
|
+
</fingerprint>
|
36
|
+
|
37
|
+
<fingerprint pattern="^403 Forbidden$">
|
38
|
+
<description>403 Forbidden - generic -- assert nothing.</description>
|
39
|
+
<example>403 Forbidden</example>
|
40
|
+
<param pos="0" name="hw.certainty" value="0.0"/>
|
41
|
+
<param pos="0" name="os.certainty" value="0.0"/>
|
42
|
+
<param pos="0" name="service.certainty" value="0.0"/>
|
18
43
|
</fingerprint>
|
19
44
|
|
20
|
-
<fingerprint pattern="^404 Not Found$">
|
45
|
+
<fingerprint pattern="^(?:404 )?Not Found$">
|
21
46
|
<description>404 Not Found - generic -- assert nothing.</description>
|
22
47
|
<example>404 Not Found</example>
|
48
|
+
<example>Not Found</example>
|
49
|
+
<param pos="0" name="hw.certainty" value="0.0"/>
|
50
|
+
<param pos="0" name="os.certainty" value="0.0"/>
|
51
|
+
<param pos="0" name="service.certainty" value="0.0"/>
|
52
|
+
</fingerprint>
|
53
|
+
|
54
|
+
<fingerprint pattern="^Invalid URL$">
|
55
|
+
<description>Invalid URL - generic -- assert nothing.</description>
|
56
|
+
<example>Invalid URL</example>
|
57
|
+
<param pos="0" name="hw.certainty" value="0.0"/>
|
58
|
+
<param pos="0" name="os.certainty" value="0.0"/>
|
59
|
+
<param pos="0" name="service.certainty" value="0.0"/>
|
60
|
+
</fingerprint>
|
61
|
+
|
62
|
+
<fingerprint pattern="^ERROR: The request could not be satisfied$">
|
63
|
+
<description>Amazon CloudFront web load balancer endpoint</description>
|
64
|
+
<example>ERROR: The request could not be satisfied</example>
|
65
|
+
<param pos="0" name="service.vendor" value="Amazon"/>
|
66
|
+
<param pos="0" name="service.family" value="CloudFront"/>
|
67
|
+
<param pos="0" name="service.product" value="CloudFront Load Balancer"/>
|
68
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:amazon:amazon_cloudfront:-"/>
|
69
|
+
</fingerprint>
|
70
|
+
|
71
|
+
<fingerprint pattern="^Microsoft Azure Web App - Error 404$">
|
72
|
+
<description>Microsoft Azure Web App - Error 404</description>
|
73
|
+
<example>Microsoft Azure Web App - Error 404</example>
|
74
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
75
|
+
<param pos="0" name="service.family" value="Azure"/>
|
76
|
+
<param pos="0" name="service.product" value="Azure App Service on Azure Stack"/>
|
77
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:microsoft:azure_app_service_on_azure_stack:-"/>
|
23
78
|
</fingerprint>
|
24
79
|
|
25
80
|
<fingerprint pattern="^Index of /">
|
@@ -103,9 +158,10 @@
|
|
103
158
|
<param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:-"/>
|
104
159
|
</fingerprint>
|
105
160
|
|
106
|
-
<fingerprint pattern="^Apache Tomcat/(\S+)
|
161
|
+
<fingerprint pattern="^Apache Tomcat/(\S+)(?: - Error report)?$">
|
107
162
|
<description>Apache tomcat with minimal version information</description>
|
108
163
|
<example service.version="8.0.32">Apache Tomcat/8.0.32</example>
|
164
|
+
<example service.version="5.5.29">Apache Tomcat/5.5.29 - Error report</example>
|
109
165
|
<param pos="0" name="service.vendor" value="Apache"/>
|
110
166
|
<param pos="0" name="service.product" value="Tomcat"/>
|
111
167
|
<param pos="0" name="service.family" value="Tomcat"/>
|
@@ -113,6 +169,32 @@
|
|
113
169
|
<param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
|
114
170
|
</fingerprint>
|
115
171
|
|
172
|
+
<fingerprint pattern="^Apache Tomcat/(\S+) \(Ubuntu\) - Error report$">
|
173
|
+
<description>Apache Tomcat - Error report on Ubuntu</description>
|
174
|
+
<example service.version="8.0.32">Apache Tomcat/8.0.32 (Ubuntu) - Error report</example>
|
175
|
+
<param pos="0" name="service.vendor" value="Apache"/>
|
176
|
+
<param pos="0" name="service.product" value="Tomcat"/>
|
177
|
+
<param pos="0" name="service.family" value="Tomcat"/>
|
178
|
+
<param pos="1" name="service.version"/>
|
179
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
|
180
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
181
|
+
<param pos="0" name="os.product" value="Linux"/>
|
182
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
|
183
|
+
</fingerprint>
|
184
|
+
|
185
|
+
<fingerprint pattern="^Apache Tomcat/(\S+) \(Debian\) - Error report$">
|
186
|
+
<description>Apache Tomcat - Error report on Debian</description>
|
187
|
+
<example service.version="7.0.56">Apache Tomcat/7.0.56 (Debian) - Error report</example>
|
188
|
+
<param pos="0" name="service.vendor" value="Apache"/>
|
189
|
+
<param pos="0" name="service.product" value="Tomcat"/>
|
190
|
+
<param pos="0" name="service.family" value="Tomcat"/>
|
191
|
+
<param pos="1" name="service.version"/>
|
192
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
|
193
|
+
<param pos="0" name="os.vendor" value="Debian"/>
|
194
|
+
<param pos="0" name="os.product" value="Linux"/>
|
195
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
|
196
|
+
</fingerprint>
|
197
|
+
|
116
198
|
<fingerprint pattern="^AiCloud">
|
117
199
|
<description>ASUS AiCloud</description>
|
118
200
|
<example>AiCloud</example>
|
@@ -240,7 +322,7 @@
|
|
240
322
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
241
323
|
</fingerprint>
|
242
324
|
|
243
|
-
<fingerprint pattern="^
|
325
|
+
<fingerprint pattern="^NETIASPOT Management Console|Konsola zarzdzania NETIASPOT$">
|
244
326
|
<description>Netia Spot wireless router</description>
|
245
327
|
<example>Konsola zarzdzania NETIASPOT</example>
|
246
328
|
<example>NETIASPOT Management Console</example>
|
@@ -255,6 +337,7 @@
|
|
255
337
|
<param pos="0" name="hw.vendor" value="Philips"/>
|
256
338
|
<param pos="0" name="hw.product" value="Hue"/>
|
257
339
|
<param pos="0" name="hw.device" value="Light Bulb"/>
|
340
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:philips:hue:-"/>
|
258
341
|
</fingerprint>
|
259
342
|
|
260
343
|
<fingerprint pattern="LANDesk\(R\) Management Agent$">
|
@@ -291,7 +374,7 @@
|
|
291
374
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
292
375
|
</fingerprint>
|
293
376
|
|
294
|
-
<fingerprint pattern="
|
377
|
+
<fingerprint pattern="(?i)^Default (?:Parallels )?Plesk (?:Panel )?Page$">
|
295
378
|
<description>Plesk web hosting platform with no version</description>
|
296
379
|
<example>Default Parallels Plesk Panel Page</example>
|
297
380
|
<example>Default Parallels Plesk Page</example>
|
@@ -301,6 +384,14 @@
|
|
301
384
|
<param pos="0" name="service.cpe23" value="cpe:/a:parallels:parallels_plesk_panel:-"/>
|
302
385
|
</fingerprint>
|
303
386
|
|
387
|
+
<fingerprint pattern="^Sage X3$">
|
388
|
+
<description>Sage X3 Syracuse Web Server</description>
|
389
|
+
<example>Sage X3</example>
|
390
|
+
<param pos="0" name="service.vendor" value="Sage"/>
|
391
|
+
<param pos="0" name="service.family" value="Sage X3 Syracuse Web Server"/>
|
392
|
+
<param pos="0" name="service.product" value="Sage X3 Syracuse Web Server"/>
|
393
|
+
</fingerprint>
|
394
|
+
|
304
395
|
<fingerprint pattern="^Web Viewer for Samsung DVR$">
|
305
396
|
<description>Samsung DVRs</description>
|
306
397
|
<example>Web Viewer for Samsung DVR</example>
|
@@ -308,15 +399,41 @@
|
|
308
399
|
<param pos="0" name="hw.device" value="DVR"/>
|
309
400
|
</fingerprint>
|
310
401
|
|
311
|
-
<fingerprint pattern="
|
402
|
+
<fingerprint pattern="(?i)^(?:Dell )?Sonicwall - Authentication$">
|
312
403
|
<description>Sonicwall firewalls</description>
|
313
404
|
<example>SonicWall - Authentication</example>
|
314
405
|
<param pos="0" name="os.vendor" value="SonicWall"/>
|
315
406
|
<param pos="0" name="os.device" value="Firewall"/>
|
316
407
|
<param pos="0" name="os.family" value="SonicOS"/>
|
408
|
+
<param pos="0" name="os.product" value="SonicOS"/>
|
409
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:sonicwall:sonicos:-"/>
|
410
|
+
</fingerprint>
|
411
|
+
|
412
|
+
<fingerprint pattern="^SonicWall Universal Management Suite v(\d+\.\d+)$">
|
413
|
+
<description>SonicWall Universal Management Appliance - with version</description>
|
414
|
+
<example service.version="8.7">SonicWall Universal Management Suite v8.7</example>
|
415
|
+
<param pos="0" name="service.vendor" value="SonicWall"/>
|
416
|
+
<param pos="0" name="service.product" value="Universal Management Appliance"/>
|
417
|
+
<param pos="1" name="service.version"/>
|
418
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sonicwall:universal_management_appliance:{service.version}"/>
|
419
|
+
<param pos="0" name="os.vendor" value="SonicWall"/>
|
420
|
+
<param pos="0" name="os.family" value="SonicOS"/>
|
421
|
+
<param pos="0" name="os.product" value="SonicOS"/>
|
422
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:sonicwall:sonicos:-"/>
|
423
|
+
</fingerprint>
|
424
|
+
|
425
|
+
<fingerprint pattern="^Fireware XTM User Authentication$">
|
426
|
+
<description>WatchGuard Fireware XTM login page</description>
|
427
|
+
<example>Fireware XTM User Authentication</example>
|
428
|
+
<param pos="0" name="service.vendor" value="WatchGuard"/>
|
429
|
+
<param pos="0" name="service.product" value="Fireware XTM"/>
|
430
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:watchguard:fireware_xtm:-"/>
|
431
|
+
<param pos="0" name="os.vendor" value="WatchGuard"/>
|
432
|
+
<param pos="0" name="os.product" value="Fireware"/>
|
433
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:watchguard:fireware:-"/>
|
317
434
|
</fingerprint>
|
318
435
|
|
319
|
-
<fingerprint pattern="^(
|
436
|
+
<fingerprint pattern="^(.{0,512}).nbsp;-.nbsp;Synology.nbsp;DiskStation$">
|
320
437
|
<description>Synology DiskStation</description>
|
321
438
|
<example host.name="DiskStation">DiskStation&nbsp;-&nbsp;Synology&nbsp;DiskStation</example>
|
322
439
|
<example host.name="DS218">DS218&nbsp;-&nbsp;Synology&nbsp;DiskStation</example>
|
@@ -334,6 +451,10 @@
|
|
334
451
|
<description>Synology with WebStation web hosting</description>
|
335
452
|
<example>Hello! Welcome to Synology Web Station!</example>
|
336
453
|
<example>Hallo! Herzlich Willkommen bei Synology Web Station!</example>
|
454
|
+
<param pos="0" name="service.vendor" value="Synology"/>
|
455
|
+
<param pos="0" name="service.family" value="Diskstation"/>
|
456
|
+
<param pos="0" name="service.product" value="Web Station"/>
|
457
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:synology:web_station:-"/>
|
337
458
|
<param pos="0" name="hw.vendor" value="Synology"/>
|
338
459
|
<param pos="0" name="hw.family" value="DiskStation"/>
|
339
460
|
<param pos="0" name="hw.device" value="NAS"/>
|
@@ -343,6 +464,14 @@
|
|
343
464
|
<param pos="0" name="os.vendor" value="Synology"/>
|
344
465
|
</fingerprint>
|
345
466
|
|
467
|
+
<fingerprint pattern="^Synology.nbsp;Router.nbsp;-.nbsp;synology$">
|
468
|
+
<description>Synology Router</description>
|
469
|
+
<example>Synology&nbsp;Router&nbsp;-&nbsp;synology</example>
|
470
|
+
<param pos="0" name="hw.vendor" value="Synology"/>
|
471
|
+
<param pos="0" name="hw.device" value="Router"/>
|
472
|
+
<param pos="0" name="hw.certainty" value="0.7"/>
|
473
|
+
</fingerprint>
|
474
|
+
|
346
475
|
<fingerprint pattern="^Web Filter Block Override$">
|
347
476
|
<description>Fortinet FortiGate/Fortiguard Web Filter</description>
|
348
477
|
<example>Web Filter Block Override</example>
|
@@ -356,6 +485,19 @@
|
|
356
485
|
<param pos="0" name="hw.device" value="Firewall"/>
|
357
486
|
</fingerprint>
|
358
487
|
|
488
|
+
<fingerprint pattern="^FortiGate$">
|
489
|
+
<description>Fortinet FortiGate Network Firewall</description>
|
490
|
+
<example>FortiGate</example>
|
491
|
+
<param pos="0" name="os.vendor" value="Fortinet"/>
|
492
|
+
<param pos="0" name="os.family" value="FortiOS"/>
|
493
|
+
<param pos="0" name="os.product" value="FortiOS"/>
|
494
|
+
<param pos="0" name="os.device" value="Firewall"/>
|
495
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
|
496
|
+
<param pos="0" name="hw.vendor" value="Fortinet"/>
|
497
|
+
<param pos="0" name="hw.family" value="FortiGate"/>
|
498
|
+
<param pos="0" name="hw.device" value="Firewall"/>
|
499
|
+
</fingerprint>
|
500
|
+
|
359
501
|
<!-- Various products by Ubiquiti networks -->
|
360
502
|
|
361
503
|
<fingerprint pattern="^Ubiquiti Networks$">
|
@@ -418,7 +560,7 @@
|
|
418
560
|
<param pos="0" name="service.cpe23" value="cpe:/a:ui:unifi_video:-"/>
|
419
561
|
</fingerprint>
|
420
562
|
|
421
|
-
<fingerprint pattern="^
|
563
|
+
<fingerprint pattern="^UniFi NVR: Software Portal|airVision: \[NVR\] - Software Portal$">
|
422
564
|
<description>UniFi NVR for recording from UniFi video cameras</description>
|
423
565
|
<example>UniFi NVR: Software Portal</example>
|
424
566
|
<example>airVision: [NVR] - Software Portal</example>
|
@@ -428,6 +570,58 @@
|
|
428
570
|
<param pos="0" name="hw.device" value="DVR"/>
|
429
571
|
</fingerprint>
|
430
572
|
|
573
|
+
<fingerprint pattern="^Welcome to AmpliFi$">
|
574
|
+
<description>Ubiquiti AmpliFi Router</description>
|
575
|
+
<example>Welcome to AmpliFi</example>
|
576
|
+
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
577
|
+
<param pos="0" name="hw.product" value="AmpliFi"/>
|
578
|
+
<param pos="0" name="hw.device" value="Router"/>
|
579
|
+
</fingerprint>
|
580
|
+
|
581
|
+
<!-- Various products by Zyxel -->
|
582
|
+
|
583
|
+
<fingerprint pattern="^USG60$">
|
584
|
+
<description>Zyxel USG60 Unified Security Gateway</description>
|
585
|
+
<example>USG60</example>
|
586
|
+
<param pos="0" name="os.vendor" value="Zyxel"/>
|
587
|
+
<param pos="0" name="os.product" value="USG60 firmware"/>
|
588
|
+
<param pos="0" name="os.device" value="Firewall"/>
|
589
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:zyxel:usg60_firmware:-"/>
|
590
|
+
<param pos="0" name="hw.vendor" value="Zyxel"/>
|
591
|
+
<param pos="0" name="hw.family" value="Unified Security Gateway"/>
|
592
|
+
<param pos="0" name="hw.product" value="USG60"/>
|
593
|
+
<param pos="0" name="hw.device" value="Firewall"/>
|
594
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:zyxel:usg60:-"/>
|
595
|
+
</fingerprint>
|
596
|
+
|
597
|
+
<fingerprint pattern="^USG40$">
|
598
|
+
<description>Zyxel USG40 Unified Security Gateway</description>
|
599
|
+
<example>USG40</example>
|
600
|
+
<param pos="0" name="os.vendor" value="Zyxel"/>
|
601
|
+
<param pos="0" name="os.product" value="USG40 firmware"/>
|
602
|
+
<param pos="0" name="os.device" value="Firewall"/>
|
603
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:zyxel:usg40_firmware:-"/>
|
604
|
+
<param pos="0" name="hw.vendor" value="Zyxel"/>
|
605
|
+
<param pos="0" name="hw.family" value="Unified Security Gateway"/>
|
606
|
+
<param pos="0" name="hw.product" value="USG40"/>
|
607
|
+
<param pos="0" name="hw.device" value="Firewall"/>
|
608
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:zyxel:usg40:-"/>
|
609
|
+
</fingerprint>
|
610
|
+
|
611
|
+
<fingerprint pattern="^USG20-VPN$">
|
612
|
+
<description>Zyxel USG20-VPN Unified Security Gateway</description>
|
613
|
+
<example>USG20-VPN</example>
|
614
|
+
<param pos="0" name="os.vendor" value="Zyxel"/>
|
615
|
+
<param pos="0" name="os.product" value="USG20-VPN firmware"/>
|
616
|
+
<param pos="0" name="os.device" value="Firewall"/>
|
617
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:zyxel:usg20-vpn_firmware:-"/>
|
618
|
+
<param pos="0" name="hw.vendor" value="Zyxel"/>
|
619
|
+
<param pos="0" name="hw.family" value="Unified Security Gateway"/>
|
620
|
+
<param pos="0" name="hw.product" value="USG20-VPN"/>
|
621
|
+
<param pos="0" name="hw.device" value="Firewall"/>
|
622
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:zyxel:usg20-vpn:-"/>
|
623
|
+
</fingerprint>
|
624
|
+
|
431
625
|
<fingerprint pattern="^RomPager Embedded Web Server Toolkit$">
|
432
626
|
<description>Embedded HTTP server used by many vendors and device
|
433
627
|
types, including APC, 3Com, Andover Controls, Cisco VoIP, D-Link,
|
@@ -439,6 +633,18 @@
|
|
439
633
|
<param pos="0" name="service.product" value="RomPager"/>
|
440
634
|
</fingerprint>
|
441
635
|
|
636
|
+
<fingerprint pattern="^Wowza Streaming Engine 4 (Subscription|Perpetual Pro) Edition (\d\.[\w.]+) build(\d+)$">
|
637
|
+
<description>Wowza Streaming Engine</description>
|
638
|
+
<example service.version="4.7.7.01" service.version.version="20190222144406">Wowza Streaming Engine 4 Subscription Edition 4.7.7.01 build20190222144406</example>
|
639
|
+
<example service.edition="Perpetual Pro">Wowza Streaming Engine 4 Perpetual Pro Edition 4.8.8.01 build20201216140014</example>
|
640
|
+
<param pos="0" name="service.vendor" value="Wowza"/>
|
641
|
+
<param pos="0" name="service.product" value="Streaming Engine"/>
|
642
|
+
<param pos="1" name="service.edition"/>
|
643
|
+
<param pos="2" name="service.version"/>
|
644
|
+
<param pos="3" name="service.version.version"/>
|
645
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:wowza:streaming_engine:{service.version}"/>
|
646
|
+
</fingerprint>
|
647
|
+
|
442
648
|
<fingerprint pattern="^RouterOS router configuration page$">
|
443
649
|
<description>MikroTik RouterOS router configuration page</description>
|
444
650
|
<example>RouterOS router configuration page</example>
|
@@ -450,7 +656,17 @@
|
|
450
656
|
<param pos="0" name="hw.device" value="Router"/>
|
451
657
|
</fingerprint>
|
452
658
|
|
453
|
-
<fingerprint pattern="^
|
659
|
+
<fingerprint pattern="^MikroTik SwOS$">
|
660
|
+
<description>MikroTik SwOS switch configuration page</description>
|
661
|
+
<example>MikroTik SwOS</example>
|
662
|
+
<param pos="0" name="os.vendor" value="MikroTik"/>
|
663
|
+
<param pos="0" name="os.device" value="Switch"/>
|
664
|
+
<param pos="0" name="os.product" value="SwOS"/>
|
665
|
+
<param pos="0" name="hw.vendor" value="MikroTik"/>
|
666
|
+
<param pos="0" name="hw.device" value="Switch"/>
|
667
|
+
</fingerprint>
|
668
|
+
|
669
|
+
<fingerprint pattern="^Welcome to nginx!|Test Page for the Nginx HTTP Server$">
|
454
670
|
<description>Default OS-agnostic nginx</description>
|
455
671
|
<example>Welcome to nginx!</example>
|
456
672
|
<example>Test Page for the Nginx HTTP Server</example>
|
@@ -531,15 +747,20 @@
|
|
531
747
|
<param pos="1" name="hw.product"/>
|
532
748
|
</fingerprint>
|
533
749
|
|
534
|
-
<fingerprint pattern="^Netgear Prosafe Plus Switch$">
|
750
|
+
<fingerprint pattern="(?i)^Netgear Prosafe Plus Switch$">
|
535
751
|
<description>Netgear Prosafe Plus Switch</description>
|
536
752
|
<example>Netgear Prosafe Plus Switch</example>
|
753
|
+
<example>NETGEAR ProSAFE Plus Switch</example>
|
754
|
+
<param pos="0" name="os.vendor" value="Netgear"/>
|
755
|
+
<param pos="0" name="os.device" value="Switch"/>
|
756
|
+
<param pos="0" name="os.product" value="Prosafe Firmware"/>
|
757
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:netgear:prosafe_firmware:-"/>
|
537
758
|
<param pos="0" name="hw.vendor" value="Netgear"/>
|
538
759
|
<param pos="0" name="hw.device" value="Switch"/>
|
539
760
|
<param pos="0" name="hw.product" value="Prosafe Plus"/>
|
540
761
|
</fingerprint>
|
541
762
|
|
542
|
-
<fingerprint pattern="^(
|
763
|
+
<fingerprint pattern="^(.{0,256}).nbsp;Configuration and Management$">
|
543
764
|
<description>Digi Terminal Servers</description>
|
544
765
|
<example hw.product="Digi One SP">Digi One SP&nbsp;Configuration and Management</example>
|
545
766
|
<example hw.product="PortServer TS 4">PortServer TS 4&nbsp;Configuration and Management</example>
|
@@ -552,6 +773,37 @@
|
|
552
773
|
<param pos="0" name="os.product" value="NET+OS"/>
|
553
774
|
</fingerprint>
|
554
775
|
|
776
|
+
<fingerprint pattern="^(?:TransPort )?(WR\S+) \(SN: (\d+)\) Configuration and Management$">
|
777
|
+
<description>Digi Cellular Routers</description>
|
778
|
+
<example hw.product="WR44v2" hw.serial_number="888111" digi.serial_number="888111">WR44v2 (SN: 888111) Configuration and Management</example>
|
779
|
+
<example hw.product="WR21" hw.serial_number="888111" digi.serial_number="888111">WR21 (SN: 888111) Configuration and Management</example>
|
780
|
+
<example hw.product="WR44v2" hw.serial_number="888111" digi.serial_number="888111">TransPort WR44v2 (SN: 888111) Configuration and Management</example>
|
781
|
+
<example hw.product="WR44RR" hw.serial_number="888111" digi.serial_number="888111">TransPort WR44RR (SN: 888111) Configuration and Management</example>
|
782
|
+
<example hw.product="WR44" hw.serial_number="888111" digi.serial_number="888111">TransPort WR44 (SN: 888111) Configuration and Management</example>
|
783
|
+
<param pos="0" name="hw.vendor" value="Digi"/>
|
784
|
+
<param pos="0" name="hw.device" value="Router"/>
|
785
|
+
<param pos="1" name="hw.product"/>
|
786
|
+
<param pos="2" name="digi.serial_number"/>
|
787
|
+
<param pos="2" name="hw.serial_number"/>
|
788
|
+
</fingerprint>
|
789
|
+
|
790
|
+
<fingerprint pattern="^Digi (\S+) - ([a-fA-F0-9]{12})">
|
791
|
+
<description>Digi TX Cellular Routers</description>
|
792
|
+
<example hw.product="TX54-Dual-Cellular" host.mac="0040FF100000">Digi TX54-Dual-Cellular - 0040FF100000</example>
|
793
|
+
<param pos="0" name="hw.vendor" value="Digi"/>
|
794
|
+
<param pos="0" name="hw.device" value="Router"/>
|
795
|
+
<param pos="1" name="hw.product"/>
|
796
|
+
<param pos="2" name="host.mac"/>
|
797
|
+
</fingerprint>
|
798
|
+
|
799
|
+
<fingerprint pattern="^Digi Configuration and Management$">
|
800
|
+
<description>Digi Cellular Routers (Generic)</description>
|
801
|
+
<example>Digi Configuration and Management</example>
|
802
|
+
<param pos="0" name="hw.vendor" value="Digi"/>
|
803
|
+
<param pos="0" name="hw.device" value="Router"/>
|
804
|
+
<param pos="0" name="hw.certainty" value="0.25"/>
|
805
|
+
</fingerprint>
|
806
|
+
|
555
807
|
<fingerprint pattern="^NPort Web Console$">
|
556
808
|
<description>Moxa NPort Terminal Servers</description>
|
557
809
|
<example>NPort Web Console</example>
|
@@ -570,6 +822,14 @@
|
|
570
822
|
<param pos="1" name="hw.product"/>
|
571
823
|
</fingerprint>
|
572
824
|
|
825
|
+
<fingerprint pattern="^Lantronix WEB-Manager$">
|
826
|
+
<description>Lantronix UDS terminal server</description>
|
827
|
+
<example>Lantronix WEB-Manager</example>
|
828
|
+
<param pos="0" name="hw.vendor" value="Lantronix"/>
|
829
|
+
<param pos="0" name="hw.device" value="Device Server"/>
|
830
|
+
<param pos="0" name="hw.product" value="UDS"/>
|
831
|
+
</fingerprint>
|
832
|
+
|
573
833
|
<fingerprint pattern="^(KN\S+) - Cover$">
|
574
834
|
<description>ATEN KVM over IP</description>
|
575
835
|
<example hw.product="KN4140v">KN4140v - Cover</example>
|
@@ -595,6 +855,14 @@
|
|
595
855
|
<param pos="0" name="hw.product" value="Lantick Ethernet Relay Controller"/>
|
596
856
|
</fingerprint>
|
597
857
|
|
858
|
+
<fingerprint pattern="^XYTRONIX Relay$">
|
859
|
+
<description>Xytronix Relay</description>
|
860
|
+
<example>XYTRONIX Relay</example>
|
861
|
+
<param pos="0" name="hw.vendor" value="Xytronix"/>
|
862
|
+
<param pos="0" name="hw.device" value="Relay Controller"/>
|
863
|
+
<param pos="0" name="hw.product" value="Ethernet Relay Controller"/>
|
864
|
+
</fingerprint>
|
865
|
+
|
598
866
|
<fingerprint pattern="^(myUTN(?:-[a-zA-Z0-9]+)?) Control Center$">
|
599
867
|
<description>myUTN Device Server</description>
|
600
868
|
<example hw.product="myUTN-50a">myUTN-50a Control Center</example>
|
@@ -652,7 +920,7 @@
|
|
652
920
|
<param pos="0" name="hw.product" value="Rack PDU Card"/>
|
653
921
|
</fingerprint>
|
654
922
|
|
655
|
-
<fingerprint pattern="^(
|
923
|
+
<fingerprint pattern="^(.{0,256}) IntelliSlot Web(?:/\d+)? Card?$">
|
656
924
|
<description>Emerson Network Power IntelliSlot Web Card and rebrands</description>
|
657
925
|
<example hw.vendor="Emerson Network Power">Emerson Network Power IntelliSlot Web Card</example>
|
658
926
|
<example hw.vendor="Emerson Network Power">Emerson Network Power IntelliSlot Web/485 Card</example>
|
@@ -798,11 +1066,12 @@
|
|
798
1066
|
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
799
1067
|
<param pos="0" name="hw.vendor" value="HP"/>
|
800
1068
|
<param pos="0" name="hw.product" value="iLO"/>
|
801
|
-
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:
|
1069
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights-out:-"/>
|
802
1070
|
<param pos="0" name="os.vendor" value="HP"/>
|
803
1071
|
<param pos="0" name="os.device" value="Lights Out Management"/>
|
804
1072
|
<param pos="0" name="os.family" value="iLO"/>
|
805
1073
|
<param pos="0" name="os.product" value="iLO"/>
|
1074
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_firmware:-"/>
|
806
1075
|
</fingerprint>
|
807
1076
|
|
808
1077
|
<fingerprint pattern="^HP Integrated Lights-Out 2$">
|
@@ -811,24 +1080,38 @@
|
|
811
1080
|
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
812
1081
|
<param pos="0" name="hw.vendor" value="HP"/>
|
813
1082
|
<param pos="0" name="hw.product" value="iLO"/>
|
814
|
-
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:
|
1083
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights-out:-"/>
|
815
1084
|
<param pos="0" name="os.vendor" value="HP"/>
|
816
1085
|
<param pos="0" name="os.device" value="Lights Out Management"/>
|
817
1086
|
<param pos="0" name="os.family" value="iLO"/>
|
818
1087
|
<param pos="0" name="os.product" value="iLO 2"/>
|
1088
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_2_firmware:-"/>
|
819
1089
|
</fingerprint>
|
820
1090
|
|
821
|
-
<fingerprint pattern="^
|
822
|
-
<description>HP Integrated Lights-Out 3
|
823
|
-
<example
|
824
|
-
<example hw.product="iLO 4" os.product="iLO 4">iLO 4</example>
|
1091
|
+
<fingerprint pattern="^iLO 3$">
|
1092
|
+
<description>HP Integrated Lights-Out 3</description>
|
1093
|
+
<example>iLO 3</example>
|
825
1094
|
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
826
1095
|
<param pos="0" name="hw.vendor" value="HP"/>
|
827
|
-
<param pos="
|
1096
|
+
<param pos="0" name="hw.product" value="iLO 3"/>
|
828
1097
|
<param pos="0" name="os.vendor" value="HP"/>
|
829
1098
|
<param pos="0" name="os.device" value="Lights Out Management"/>
|
830
1099
|
<param pos="0" name="os.family" value="iLO"/>
|
831
|
-
<param pos="
|
1100
|
+
<param pos="0" name="os.product" value="iLO 3"/>
|
1101
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_3_firmware:-"/>
|
1102
|
+
</fingerprint>
|
1103
|
+
|
1104
|
+
<fingerprint pattern="^iLO 4$">
|
1105
|
+
<description>HP Integrated Lights-Out 4</description>
|
1106
|
+
<example>iLO 4</example>
|
1107
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
1108
|
+
<param pos="0" name="hw.vendor" value="HP"/>
|
1109
|
+
<param pos="0" name="hw.product" value="iLO 4"/>
|
1110
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
1111
|
+
<param pos="0" name="os.device" value="Lights Out Management"/>
|
1112
|
+
<param pos="0" name="os.family" value="iLO"/>
|
1113
|
+
<param pos="0" name="os.product" value="iLO 4"/>
|
1114
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_4_firmware:-"/>
|
832
1115
|
</fingerprint>
|
833
1116
|
|
834
1117
|
<fingerprint pattern="^HPE SimpliVity OmniStack$">
|
@@ -855,7 +1138,7 @@
|
|
855
1138
|
<param pos="0" name="hw.product" value="OpenManage Switch"/>
|
856
1139
|
</fingerprint>
|
857
1140
|
|
858
|
-
<fingerprint pattern="^(\S
|
1141
|
+
<fingerprint pattern="^(\S{1,512})\s{1,8}-\s{1,8}ProCurve Switch (\S+) \((.*)\)$">
|
859
1142
|
<description>HPE ProCurve Switch w/Hostname</description>
|
860
1143
|
<example host.name="SW1" hw.product="4204vl" procurve.model="J8770A">SW1 - ProCurve Switch 4204vl (J8770A)</example>
|
861
1144
|
<param pos="0" name="hw.vendor" value="HPE"/>
|
@@ -951,20 +1234,39 @@
|
|
951
1234
|
|
952
1235
|
<fingerprint pattern="^Agilent 33220A \((.*)\)$">
|
953
1236
|
<description>Agilent 33220A</description>
|
954
|
-
<example agilent.serial="MY44041111">Agilent 33220A (MY44041111)</example>
|
1237
|
+
<example agilent.serial="MY44041111" hw.serial_number="MY44041111">Agilent 33220A (MY44041111)</example>
|
955
1238
|
<param pos="0" name="hw.vendor" value="Agilent"/>
|
956
1239
|
<param pos="0" name="hw.device" value="Test Instrument"/>
|
957
1240
|
<param pos="0" name="hw.product" value="33220A Waveform Generator"/>
|
958
1241
|
<param pos="1" name="agilent.serial"/>
|
1242
|
+
<param pos="1" name="hw.serial_number"/>
|
959
1243
|
</fingerprint>
|
960
1244
|
|
961
1245
|
<fingerprint pattern="^Agilent N5172B (?:EXG )?(MY\S+)$">
|
962
1246
|
<description>Agilent N5172B</description>
|
963
|
-
<example agilent.serial="MY44041111">Agilent N5172B EXG MY44041111</example>
|
1247
|
+
<example agilent.serial="MY44041111" hw.serial_number="MY44041111">Agilent N5172B EXG MY44041111</example>
|
964
1248
|
<param pos="0" name="hw.vendor" value="Agilent"/>
|
965
1249
|
<param pos="0" name="hw.device" value="Test Instrument"/>
|
966
1250
|
<param pos="0" name="hw.product" value="N5172B Signal Generator"/>
|
967
1251
|
<param pos="1" name="agilent.serial"/>
|
1252
|
+
<param pos="1" name="hw.serial_number"/>
|
1253
|
+
</fingerprint>
|
1254
|
+
|
1255
|
+
<fingerprint pattern="^Agilent E5810 \(([a-fA-F0-9-]{17})\)$">
|
1256
|
+
<description>Agilent E5810 Instrument Gateway Device</description>
|
1257
|
+
<example host.mac="00-30-D3-01-01-01">Agilent E5810 (00-30-D3-01-01-01)</example>
|
1258
|
+
<param pos="0" name="hw.vendor" value="Agilent"/>
|
1259
|
+
<param pos="0" name="hw.device" value="Test Instrument"/>
|
1260
|
+
<param pos="0" name="hw.product" value="E5810 Gateway Device"/>
|
1261
|
+
<param pos="1" name="host.mac"/>
|
1262
|
+
</fingerprint>
|
1263
|
+
|
1264
|
+
<fingerprint pattern="^LXI - Agilent Technologies - N1913A - EPM Series Power Meter$">
|
1265
|
+
<description>Agilent N1913A EPM Series Power Meter</description>
|
1266
|
+
<example>LXI - Agilent Technologies - N1913A - EPM Series Power Meter</example>
|
1267
|
+
<param pos="0" name="hw.vendor" value="Agilent"/>
|
1268
|
+
<param pos="0" name="hw.device" value="Test Instrument"/>
|
1269
|
+
<param pos="0" name="hw.product" value="N1913A Power Meter"/>
|
968
1270
|
</fingerprint>
|
969
1271
|
|
970
1272
|
<fingerprint pattern="^Polycom - Configuration Utility$">
|
@@ -984,6 +1286,14 @@
|
|
984
1286
|
<param pos="0" name="hw.device" value="VoIP"/>
|
985
1287
|
</fingerprint>
|
986
1288
|
|
1289
|
+
<fingerprint pattern="^3CX Phone System Management Console$">
|
1290
|
+
<description>3CX Phone System Management Console</description>
|
1291
|
+
<example>3CX Phone System Management Console</example>
|
1292
|
+
<param pos="0" name="service.vendor" value="3CX"/>
|
1293
|
+
<param pos="0" name="service.product" value="3CX Web Server"/>
|
1294
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:3cx:3cx_web_server:-"/>
|
1295
|
+
</fingerprint>
|
1296
|
+
|
987
1297
|
<fingerprint pattern="^(SPA\S+) Configuration Utility$">
|
988
1298
|
<description>Cisco IP Phone - SPA504G Configuration Utility</description>
|
989
1299
|
<example hw.product="SPA504G">SPA504G Configuration Utility</example>
|
@@ -992,6 +1302,15 @@
|
|
992
1302
|
<param pos="1" name="hw.product"/>
|
993
1303
|
</fingerprint>
|
994
1304
|
|
1305
|
+
<fingerprint pattern="^(SPA\S+) Device Information \(SEP(\S+)\)$">
|
1306
|
+
<description>Cisco IP Phone - SPA504G</description>
|
1307
|
+
<example hw.product="SPA504G" host.mac="0123456789ab">SPA504G Device Information (SEP0123456789ab)</example>
|
1308
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
1309
|
+
<param pos="0" name="hw.device" value="VoIP"/>
|
1310
|
+
<param pos="1" name="hw.product"/>
|
1311
|
+
<param pos="2" name="host.mac"/>
|
1312
|
+
</fingerprint>
|
1313
|
+
|
995
1314
|
<fingerprint pattern="^Cisco (?:SPA Configuration|IP Phone)$">
|
996
1315
|
<description>Cisco IP Phone </description>
|
997
1316
|
<example>Cisco SPA Configuration</example>
|
@@ -1048,7 +1367,6 @@
|
|
1048
1367
|
<param pos="0" name="os.device" value="Switch"/>
|
1049
1368
|
<param pos="0" name="os.product" value="MDS 9000"/>
|
1050
1369
|
<param pos="1" name="os.version"/>
|
1051
|
-
<param pos="0" name="os.cpe23" value="cpe:/o:cisco:mds_9000:{os.version}"/>
|
1052
1370
|
</fingerprint>
|
1053
1371
|
|
1054
1372
|
<fingerprint pattern="^Stealthwatch Management Console$">
|
@@ -1102,13 +1420,21 @@
|
|
1102
1420
|
<param pos="0" name="os.vendor" value="Cisco"/>
|
1103
1421
|
<param pos="0" name="os.device" value="Wireless Controller"/>
|
1104
1422
|
<param pos="0" name="os.product" value="Wireless LAN Controller"/>
|
1105
|
-
<param pos="0" name="os.cpe23" value="cpe:/o:cisco:
|
1423
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller_software:-"/>
|
1106
1424
|
<param pos="0" name="hw.vendor" value="Cisco"/>
|
1107
1425
|
<param pos="0" name="hw.device" value="Wireless Controller"/>
|
1108
1426
|
<param pos="0" name="hw.product" value="Wireless LAN Controller"/>
|
1109
1427
|
<param pos="0" name="hw.cpe23" value="cpe:/h:cisco:wireless_lan_controller:-"/>
|
1110
1428
|
</fingerprint>
|
1111
1429
|
|
1430
|
+
<fingerprint pattern="^Cisco ASDM (\S+)$">
|
1431
|
+
<description>Cisco Adaptive Security Device Manager Application</description>
|
1432
|
+
<example service.version="6.4(7)">Cisco ASDM 6.4(7)</example>
|
1433
|
+
<param pos="0" name="service.vendor" value="Cisco"/>
|
1434
|
+
<param pos="0" name="service.product" value="ASDM"/>
|
1435
|
+
<param pos="1" name="service.version"/>
|
1436
|
+
</fingerprint>
|
1437
|
+
|
1112
1438
|
<fingerprint pattern="^Duo Access Gateway$">
|
1113
1439
|
<description>Duo Access Gateway</description>
|
1114
1440
|
<example>Duo Access Gateway</example>
|
@@ -1207,6 +1533,7 @@
|
|
1207
1533
|
<param pos="0" name="hw.vendor" value="KACE"/>
|
1208
1534
|
<param pos="0" name="hw.device" value="Support Appliance"/>
|
1209
1535
|
<param pos="0" name="hw.product" value="K1000"/>
|
1536
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:dell:kace_k1000_systems_management_appliance:-"/>
|
1210
1537
|
<param pos="0" name="os.vendor" value="KACE"/>
|
1211
1538
|
<param pos="0" name="os.family" value="FreeBSD"/>
|
1212
1539
|
</fingerprint>
|
@@ -1260,6 +1587,36 @@
|
|
1260
1587
|
<param pos="0" name="os.product" value="SmartServer"/>
|
1261
1588
|
</fingerprint>
|
1262
1589
|
|
1590
|
+
<!-- Various products by Avocent -->
|
1591
|
+
|
1592
|
+
<fingerprint pattern="^Avocent AutoView ([^/$]+)">
|
1593
|
+
<description>Avocent AutoView KVM</description>
|
1594
|
+
<example hw.model="3100">Avocent AutoView 3100/3200</example>
|
1595
|
+
<example hw.model="3050">Avocent AutoView 3050</example>
|
1596
|
+
<param pos="0" name="hw.vendor" value="Avocent"/>
|
1597
|
+
<param pos="0" name="hw.device" value="KVM"/>
|
1598
|
+
<param pos="1" name="hw.model"/>
|
1599
|
+
<param pos="0" name="hw.product" value="AutoView {hw.model}"/>
|
1600
|
+
</fingerprint>
|
1601
|
+
|
1602
|
+
<!-- Various products by Aerohive -->
|
1603
|
+
|
1604
|
+
<fingerprint pattern="^Aerohive HiveUI$">
|
1605
|
+
<description>Aerohive Access Point</description>
|
1606
|
+
<example>Aerohive HiveUI</example>
|
1607
|
+
<param pos="0" name="hw.vendor" value="Aerohive"/>
|
1608
|
+
<param pos="0" name="hw.device" value="WAP"/>
|
1609
|
+
</fingerprint>
|
1610
|
+
|
1611
|
+
<!-- Various products by Ruckus -->
|
1612
|
+
|
1613
|
+
<fingerprint pattern="^Ruckus Wireless Admin$">
|
1614
|
+
<description>Ruckus Wireless Access Point</description>
|
1615
|
+
<example>Ruckus Wireless Admin</example>
|
1616
|
+
<param pos="0" name="hw.vendor" value="Ruckus"/>
|
1617
|
+
<param pos="0" name="hw.device" value="WAP"/>
|
1618
|
+
</fingerprint>
|
1619
|
+
|
1263
1620
|
<!-- Various ICS/OT -->
|
1264
1621
|
|
1265
1622
|
<fingerprint pattern="^CTI (25\S+) Main Menu$">
|
@@ -1419,7 +1776,26 @@
|
|
1419
1776
|
<param pos="0" name="service.vendor" value="Citrix"/>
|
1420
1777
|
<param pos="0" name="service.product" value="XenServer"/>
|
1421
1778
|
<param pos="1" name="service.version"/>
|
1779
|
+
<param pos="0" name="service.device" value="Hypervisor"/>
|
1422
1780
|
<param pos="0" name="service.cpe23" value="cpe:/a:citrix:xenserver:{service.version}"/>
|
1781
|
+
<param pos="0" name="os.vendor" value="Citrix"/>
|
1782
|
+
<param pos="0" name="os.product" value="XenServer"/>
|
1783
|
+
<param pos="0" name="os.device" value="Hypervisor"/>
|
1784
|
+
<param pos="0" name="hw.device" value="Hypervisor"/>
|
1785
|
+
</fingerprint>
|
1786
|
+
|
1787
|
+
<fingerprint pattern="^Welcome to Citrix Hypervisor ([0-9\.]+)$">
|
1788
|
+
<description>XenServer - Hypervisor variant</description>
|
1789
|
+
<example service.version="8.2.0">Welcome to Citrix Hypervisor 8.2.0</example>
|
1790
|
+
<param pos="0" name="service.vendor" value="Citrix"/>
|
1791
|
+
<param pos="0" name="service.product" value="XenServer"/>
|
1792
|
+
<param pos="1" name="service.version"/>
|
1793
|
+
<param pos="0" name="service.device" value="Hypervisor"/>
|
1794
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:citrix:xenserver:{service.version}"/>
|
1795
|
+
<param pos="0" name="os.vendor" value="Citrix"/>
|
1796
|
+
<param pos="0" name="os.product" value="XenServer"/>
|
1797
|
+
<param pos="0" name="os.device" value="Hypervisor"/>
|
1798
|
+
<param pos="0" name="hw.device" value="Hypervisor"/>
|
1423
1799
|
</fingerprint>
|
1424
1800
|
|
1425
1801
|
<fingerprint pattern="^RabbitMQ Management$">
|
@@ -1469,7 +1845,7 @@
|
|
1469
1845
|
<param pos="0" name="service.cpe23" value="cpe:/a:realvnc:realvnc:-"/>
|
1470
1846
|
</fingerprint>
|
1471
1847
|
|
1472
|
-
<fingerprint pattern="
|
1848
|
+
<fingerprint pattern="^.{0,1000} \[Jenkins\]$">
|
1473
1849
|
<description>Jenkins Customized Dashboard</description>
|
1474
1850
|
<example>Continuous Integrations [Jenkins]</example>
|
1475
1851
|
<example>Dashboard [Jenkins]</example>
|
@@ -1501,10 +1877,11 @@
|
|
1501
1877
|
</fingerprint>
|
1502
1878
|
|
1503
1879
|
<fingerprint pattern="^Login - OpenStack Dashboard$">
|
1504
|
-
<description>OpenStack Dashboard</description>
|
1880
|
+
<description>OpenStack Horizon Dashboard</description>
|
1505
1881
|
<example>Login - OpenStack Dashboard</example>
|
1506
1882
|
<param pos="0" name="service.vendor" value="OpenStack"/>
|
1507
|
-
<param pos="0" name="service.product" value="
|
1883
|
+
<param pos="0" name="service.product" value="Horizon"/>
|
1884
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:openstack:horizon:-"/>
|
1508
1885
|
</fingerprint>
|
1509
1886
|
|
1510
1887
|
<fingerprint pattern="^splunkd$">
|
@@ -1538,6 +1915,34 @@
|
|
1538
1915
|
<param pos="0" name="service.product" value="Site Recovery Manager"/>
|
1539
1916
|
</fingerprint>
|
1540
1917
|
|
1918
|
+
<fingerprint pattern="^" \+ ID_VC_Welcome \+ "$">
|
1919
|
+
<description>VMware vCenter</description>
|
1920
|
+
<example>" + ID_VC_Welcome + "</example>
|
1921
|
+
<param pos="0" name="service.vendor" value="VMware"/>
|
1922
|
+
<param pos="0" name="service.product" value="vCenter"/>
|
1923
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:vmware:vcenter_server:-"/>
|
1924
|
+
</fingerprint>
|
1925
|
+
|
1926
|
+
<fingerprint pattern="^" \+ ID_EESX_Welcome \+ "$">
|
1927
|
+
<description>VMware ESXi</description>
|
1928
|
+
<example>" + ID_EESX_Welcome + "</example>
|
1929
|
+
<param pos="0" name="service.vendor" value="VMware"/>
|
1930
|
+
<param pos="0" name="os.vendor" value="VMware"/>
|
1931
|
+
<param pos="0" name="os.family" value="VMware ESX/ESXi"/>
|
1932
|
+
<param pos="0" name="os.product" value="VMware ESXi Server"/>
|
1933
|
+
<param pos="0" name="os.device" value="Hypervisor"/>
|
1934
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:vmware:esxi:-"/>
|
1935
|
+
<param pos="0" name="hw.device" value="Hypervisor"/>
|
1936
|
+
</fingerprint>
|
1937
|
+
|
1938
|
+
<fingerprint pattern="^" \+ ID_Converter_Welcome \+ "$">
|
1939
|
+
<description>VMware Converter</description>
|
1940
|
+
<example>" + ID_Converter_Welcome + "</example>
|
1941
|
+
<param pos="0" name="service.vendor" value="VMware"/>
|
1942
|
+
<param pos="0" name="service.product" value="vCenter Converter"/>
|
1943
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:vmware:vcenter_converter:-"/>
|
1944
|
+
</fingerprint>
|
1945
|
+
|
1541
1946
|
<fingerprint pattern="^Graylog Web Interface$">
|
1542
1947
|
<description>Graylog Web Interface</description>
|
1543
1948
|
<example>Graylog Web Interface</example>
|
@@ -1593,7 +1998,15 @@
|
|
1593
1998
|
<example>ManageEngine OpManager</example>
|
1594
1999
|
<param pos="0" name="service.vendor" value="ManageEngine"/>
|
1595
2000
|
<param pos="0" name="service.product" value="OpManager"/>
|
1596
|
-
<param pos="0" name="service.cpe23" value="cpe:/a:
|
2001
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_opmanager:-"/>
|
2002
|
+
</fingerprint>
|
2003
|
+
|
2004
|
+
<fingerprint pattern="^ManageEngine Desktop Central 9$">
|
2005
|
+
<description>ManageEngine Desktop Central 9</description>
|
2006
|
+
<example>ManageEngine Desktop Central 9</example>
|
2007
|
+
<param pos="0" name="service.vendor" value="ManageEngine"/>
|
2008
|
+
<param pos="0" name="service.product" value="Desktop Central"/>
|
2009
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:manageengine:desktop_central:-"/>
|
1597
2010
|
</fingerprint>
|
1598
2011
|
|
1599
2012
|
<fingerprint pattern="^ManageEngine ADAudit Plus$">
|
@@ -1601,6 +2014,7 @@
|
|
1601
2014
|
<example>ManageEngine ADAudit Plus</example>
|
1602
2015
|
<param pos="0" name="service.vendor" value="ManageEngine"/>
|
1603
2016
|
<param pos="0" name="service.product" value="ADAudit Plus"/>
|
2017
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_adaudit_plus:-"/>
|
1604
2018
|
</fingerprint>
|
1605
2019
|
|
1606
2020
|
<fingerprint pattern="^(ScanFront \d.+)Web Menu$">
|
@@ -1659,11 +2073,17 @@
|
|
1659
2073
|
<param pos="0" name="os.family" value="NetScaler"/>
|
1660
2074
|
<param pos="0" name="os.device" value="Network Management Device"/>
|
1661
2075
|
<param pos="0" name="os.product" value="NetScaler"/>
|
2076
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:citrix:netscaler_firmware:-"/>
|
1662
2077
|
<param pos="0" name="service.vendor" value="Citrix"/>
|
1663
2078
|
<param pos="0" name="service.family" value="NetScaler"/>
|
1664
2079
|
<param pos="0" name="service.device" value="Network Management Device"/>
|
1665
2080
|
<param pos="0" name="service.product" value="NetScaler"/>
|
1666
2081
|
<param pos="0" name="service.cpe23" value="cpe:/a:citrix:netscaler:-"/>
|
2082
|
+
<param pos="0" name="hw.vendor" value="Citrix"/>
|
2083
|
+
<param pos="0" name="hw.family" value="NetScaler"/>
|
2084
|
+
<param pos="0" name="hw.device" value="Network Management Device"/>
|
2085
|
+
<param pos="0" name="hw.product" value="NetScaler Gateway"/>
|
2086
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:citrix:netscaler_gateway:-"/>
|
1667
2087
|
</fingerprint>
|
1668
2088
|
|
1669
2089
|
<fingerprint pattern="^Netscaler Gateway$">
|
@@ -1673,10 +2093,17 @@
|
|
1673
2093
|
<param pos="0" name="os.family" value="NetScaler"/>
|
1674
2094
|
<param pos="0" name="os.device" value="Network Management Device"/>
|
1675
2095
|
<param pos="0" name="os.product" value="NetScaler Gateway"/>
|
2096
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:citrix:netscaler_gateway_firmware:-"/>
|
1676
2097
|
<param pos="0" name="service.vendor" value="Citrix"/>
|
1677
2098
|
<param pos="0" name="service.family" value="NetScaler"/>
|
1678
2099
|
<param pos="0" name="service.device" value="Network Management Device"/>
|
1679
2100
|
<param pos="0" name="service.product" value="NetScaler Gateway"/>
|
2101
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:citrix:netscaler_gateway:-"/>
|
2102
|
+
<param pos="0" name="hw.vendor" value="Citrix"/>
|
2103
|
+
<param pos="0" name="hw.family" value="NetScaler"/>
|
2104
|
+
<param pos="0" name="hw.device" value="Network Management Device"/>
|
2105
|
+
<param pos="0" name="hw.product" value="NetScaler Gateway"/>
|
2106
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:citrix:netscaler_gateway:-"/>
|
1680
2107
|
</fingerprint>
|
1681
2108
|
|
1682
2109
|
<fingerprint pattern="^Citrix (?:NetScaler SDX|ADC SDX)$">
|
@@ -1691,6 +2118,11 @@
|
|
1691
2118
|
<param pos="0" name="service.family" value="NetScaler"/>
|
1692
2119
|
<param pos="0" name="service.device" value="Network Management Device"/>
|
1693
2120
|
<param pos="0" name="service.product" value="NetScaler SDX Gateway"/>
|
2121
|
+
<param pos="0" name="hw.vendor" value="Citrix"/>
|
2122
|
+
<param pos="0" name="hw.family" value="NetScaler"/>
|
2123
|
+
<param pos="0" name="hw.device" value="Network Management Device"/>
|
2124
|
+
<param pos="0" name="hw.product" value="NetScaler SDX Gateway"/>
|
2125
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:citrix:netscaler_sdx:-"/>
|
1694
2126
|
</fingerprint>
|
1695
2127
|
|
1696
2128
|
<fingerprint pattern="^Citrix NetScaler Insight Center$">
|
@@ -1755,7 +2187,7 @@
|
|
1755
2187
|
<description>Pure Storage Appliance</description>
|
1756
2188
|
<example>Pure Storage Login</example>
|
1757
2189
|
<param pos="0" name="hw.vendor" value="Pure Storage"/>
|
1758
|
-
<param pos="0" name="hw.device" value="
|
2190
|
+
<param pos="0" name="hw.device" value="Storage Appliance"/>
|
1759
2191
|
<param pos="0" name="hw.product" value="Appliance"/>
|
1760
2192
|
</fingerprint>
|
1761
2193
|
|
@@ -1804,22 +2236,22 @@
|
|
1804
2236
|
|
1805
2237
|
<fingerprint pattern="^AVTECH Software, Inc\. - Room Alert(?:&reg;)?\s+([a-zA-Z0-9/]+) - Advanced">
|
1806
2238
|
<description>AVTECH RoomAlert</description>
|
1807
|
-
<example hw.product="Room Alert 11E" hw.
|
1808
|
-
<example hw.product="Room Alert 32E/W" hw.
|
1809
|
-
<example hw.product="Room Alert 32E/W" hw.
|
2239
|
+
<example hw.product="Room Alert 11E" hw.model="11E">AVTECH Software, Inc. - Room Alert 11E - Advanced Computer Room Environment Monitoring, Alerting &amp; Automatic Corrective Action</example>
|
2240
|
+
<example hw.product="Room Alert 32E/W" hw.model="32E/W">AVTECH Software, Inc. - Room Alert 32E/W - Advanced Computer Room Environment Monitoring, Alerting &amp; Automatic Corrective Action</example>
|
2241
|
+
<example hw.product="Room Alert 32E/W" hw.model="32E/W">AVTECH Software, Inc. - Room Alert&reg; 32E/W - Advanced Computer Room Monitoring, Alerting &amp; Automatic Corrective Action</example>
|
1810
2242
|
<param pos="0" name="hw.vendor" value="AVTECH"/>
|
1811
2243
|
<param pos="0" name="hw.device" value="Monitoring"/>
|
1812
|
-
<param pos="1" name="hw.
|
1813
|
-
<param pos="0" name="hw.product" value="Room Alert {hw.
|
2244
|
+
<param pos="1" name="hw.model"/>
|
2245
|
+
<param pos="0" name="hw.product" value="Room Alert {hw.model}"/>
|
1814
2246
|
</fingerprint>
|
1815
2247
|
|
1816
2248
|
<fingerprint pattern="^AVTECH Software, Inc\. - TemPageR\s+([a-zA-Z0-9/]+) - Real-Time">
|
1817
2249
|
<description>AVTECH TepPageR</description>
|
1818
|
-
<example hw.product="TemPageR 3E" hw.
|
2250
|
+
<example hw.product="TemPageR 3E" hw.model="3E">AVTECH Software, Inc. - TemPageR 3E - Real-Time Temperature Monitor For IT &amp; Facilities Environment Monitoring</example>
|
1819
2251
|
<param pos="0" name="hw.vendor" value="AVTECH"/>
|
1820
2252
|
<param pos="0" name="hw.device" value="Monitoring"/>
|
1821
|
-
<param pos="1" name="hw.
|
1822
|
-
<param pos="0" name="hw.product" value="TemPageR {hw.
|
2253
|
+
<param pos="1" name="hw.model"/>
|
2254
|
+
<param pos="0" name="hw.product" value="TemPageR {hw.model}"/>
|
1823
2255
|
</fingerprint>
|
1824
2256
|
|
1825
2257
|
<fingerprint pattern="^AppDynamics$">
|
@@ -1938,7 +2370,7 @@
|
|
1938
2370
|
<param pos="0" name="hw.product" value="Network Node"/>
|
1939
2371
|
</fingerprint>
|
1940
2372
|
|
1941
|
-
<fingerprint pattern="^
|
2373
|
+
<fingerprint pattern="^S2 Netbox Login|Home - NetBox$">
|
1942
2374
|
<description>S2 Netbox Appliance</description>
|
1943
2375
|
<example>S2 Netbox Login</example>
|
1944
2376
|
<example>Home - NetBox</example>
|
@@ -1990,7 +2422,7 @@
|
|
1990
2422
|
<param pos="0" name="service.cpe23" value="cpe:/a:ibm:tivoli_storage_flashcopy_manager:-"/>
|
1991
2423
|
</fingerprint>
|
1992
2424
|
|
1993
|
-
<fingerprint pattern="^
|
2425
|
+
<fingerprint pattern="^Jupyter Notebook|JupyterLab|Home Page - Select or create a notebook$">
|
1994
2426
|
<description>Jupyter Notebook Server</description>
|
1995
2427
|
<example>Jupyter Notebook</example>
|
1996
2428
|
<example>JupyterLab</example>
|
@@ -2035,7 +2467,7 @@
|
|
2035
2467
|
<param pos="0" name="service.product" value="Network Monitor"/>
|
2036
2468
|
</fingerprint>
|
2037
2469
|
|
2038
|
-
<fingerprint pattern="^
|
2470
|
+
<fingerprint pattern="^BrightSign&reg;|BrightSign Applications|Diagnostics Web Server$">
|
2039
2471
|
<description>BrightSign Controller</description>
|
2040
2472
|
<example>BrightSign&reg;</example>
|
2041
2473
|
<example>BrightSign Applications</example>
|
@@ -2056,7 +2488,7 @@
|
|
2056
2488
|
<param pos="0" name="hw.device" value="WAP"/>
|
2057
2489
|
</fingerprint>
|
2058
2490
|
|
2059
|
-
<fingerprint pattern="^
|
2491
|
+
<fingerprint pattern="^DD System Manager|System Manager$">
|
2060
2492
|
<description>Data Domain System Manager</description>
|
2061
2493
|
<example>DD System Manager</example>
|
2062
2494
|
<example>System Manager</example>
|
@@ -2076,7 +2508,7 @@
|
|
2076
2508
|
<param pos="0" name="service.product" value="SonarQube"/>
|
2077
2509
|
</fingerprint>
|
2078
2510
|
|
2079
|
-
<fingerprint pattern="^(\S
|
2511
|
+
<fingerprint pattern="^(\S{1,512}) - Opengear Management Console$">
|
2080
2512
|
<description>Opengear Management Console</description>
|
2081
2513
|
<example host.name="server01">server01 - Opengear Management Console</example>
|
2082
2514
|
<param pos="0" name="service.vendor" value="Opengear"/>
|
@@ -2109,7 +2541,7 @@
|
|
2109
2541
|
<param pos="0" name="service.cpe23" value="cpe:/a:influxdata:influxdb:2.0"/>
|
2110
2542
|
</fingerprint>
|
2111
2543
|
|
2112
|
-
<fingerprint pattern="^
|
2544
|
+
<fingerprint pattern="^Sign in . GitLab|GitLab|GitLab is not responding$">
|
2113
2545
|
<description>GitLab</description>
|
2114
2546
|
<example>Sign in · GitLab</example>
|
2115
2547
|
<example>GitLab is not responding</example>
|
@@ -2120,7 +2552,7 @@
|
|
2120
2552
|
<param pos="0" name="service.cpe23" value="cpe:/a:gitlab:gitlab:-"/>
|
2121
2553
|
</fingerprint>
|
2122
2554
|
|
2123
|
-
<fingerprint pattern="^
|
2555
|
+
<fingerprint pattern="^GitHub Enterprise|Setup GitHub Enterprise|GitHub Enterprise preflight check$">
|
2124
2556
|
<description>GitHub Enterprise</description>
|
2125
2557
|
<example>GitHub Enterprise</example>
|
2126
2558
|
<example>Setup GitHub Enterprise</example>
|
@@ -2129,7 +2561,7 @@
|
|
2129
2561
|
<param pos="0" name="service.product" value="Enterprise"/>
|
2130
2562
|
</fingerprint>
|
2131
2563
|
|
2132
|
-
<fingerprint pattern="^
|
2564
|
+
<fingerprint pattern="^SAP NetWeaver Application Server Java|SAP&#x20;NetWeaver&#x20;Portal|Loading Portal\.\.\.$">
|
2133
2565
|
<description>SAP NetWeaver Portal</description>
|
2134
2566
|
<example>SAP NetWeaver Application Server Java</example>
|
2135
2567
|
<example>SAP&#x20;NetWeaver&#x20;Portal</example>
|
@@ -2148,7 +2580,7 @@
|
|
2148
2580
|
<param pos="0" name="service.cpe23" value="cpe:/a:lansweeper:lansweeper:-"/>
|
2149
2581
|
</fingerprint>
|
2150
2582
|
|
2151
|
-
<fingerprint pattern="^
|
2583
|
+
<fingerprint pattern="^Celery Flower|Flower$">
|
2152
2584
|
<description>Celery Flower Dashboard</description>
|
2153
2585
|
<example>Celery Flower</example>
|
2154
2586
|
<example>Flower</example>
|
@@ -2181,6 +2613,14 @@
|
|
2181
2613
|
<param pos="0" name="service.product" value="Kiwi Syslog"/>
|
2182
2614
|
</fingerprint>
|
2183
2615
|
|
2616
|
+
<fingerprint pattern="^SolarWinds Orion$">
|
2617
|
+
<description>SolarWinds Orion</description>
|
2618
|
+
<example>SolarWinds Orion</example>
|
2619
|
+
<param pos="0" name="service.vendor" value="SolarWinds"/>
|
2620
|
+
<param pos="0" name="service.product" value="Orion Platform"/>
|
2621
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:solarwinds:orion_platform:-"/>
|
2622
|
+
</fingerprint>
|
2623
|
+
|
2184
2624
|
<fingerprint pattern="^ClickShare Configurator$">
|
2185
2625
|
<description>ClickShare Wireless Presenter</description>
|
2186
2626
|
<example>ClickShare Configurator</example>
|
@@ -2201,6 +2641,47 @@
|
|
2201
2641
|
<param pos="1" name="hw.product"/>
|
2202
2642
|
</fingerprint>
|
2203
2643
|
|
2644
|
+
<fingerprint pattern="^Welcome to Oracle Fusion Middleware$">
|
2645
|
+
<description>Oracle Fusion Middleware</description>
|
2646
|
+
<example>Welcome to Oracle Fusion Middleware</example>
|
2647
|
+
<param pos="0" name="service.vendor" value="Oracle"/>
|
2648
|
+
<param pos="0" name="service.product" value="Fusion Middleware"/>
|
2649
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:oracle:fusion_middleware:-"/>
|
2650
|
+
</fingerprint>
|
2651
|
+
|
2652
|
+
<fingerprint pattern="^Oracle Secure Global Desktop(?: Redirect Page)?$">
|
2653
|
+
<description>Oracle Secure Global Desktop</description>
|
2654
|
+
<example>Oracle Secure Global Desktop</example>
|
2655
|
+
<example>Oracle Secure Global Desktop Redirect Page</example>
|
2656
|
+
<param pos="0" name="service.vendor" value="Oracle"/>
|
2657
|
+
<param pos="0" name="service.product" value="Secure Global Desktop"/>
|
2658
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:oracle:secure_global_desktop:-"/>
|
2659
|
+
</fingerprint>
|
2660
|
+
|
2661
|
+
<fingerprint pattern="^OTM - Oracle Transportation Management$">
|
2662
|
+
<description>Oracle Transportation Management</description>
|
2663
|
+
<example>OTM - Oracle Transportation Management</example>
|
2664
|
+
<param pos="0" name="service.vendor" value="Oracle"/>
|
2665
|
+
<param pos="0" name="service.product" value="Transportation Management"/>
|
2666
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:oracle:transportation_management:-"/>
|
2667
|
+
</fingerprint>
|
2668
|
+
|
2669
|
+
<fingerprint pattern="^Bad Oracle Access Manager Request$">
|
2670
|
+
<description>Oracle Access Manager - Bad Request</description>
|
2671
|
+
<example>Bad Oracle Access Manager Request</example>
|
2672
|
+
<param pos="0" name="service.vendor" value="Oracle"/>
|
2673
|
+
<param pos="0" name="service.product" value="Access Manager"/>
|
2674
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:oracle:access_manager:-"/>
|
2675
|
+
</fingerprint>
|
2676
|
+
|
2677
|
+
<fingerprint pattern="^Oracle Access Manager Operation Error$">
|
2678
|
+
<description>Oracle Access Manager - Operation Error</description>
|
2679
|
+
<example>Oracle Access Manager Operation Error</example>
|
2680
|
+
<param pos="0" name="service.vendor" value="Oracle"/>
|
2681
|
+
<param pos="0" name="service.product" value="Access Manager"/>
|
2682
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:oracle:access_manager:-"/>
|
2683
|
+
</fingerprint>
|
2684
|
+
|
2204
2685
|
<fingerprint pattern="^(?:Oracle\(R\) )?Integrated Lights Out Manager$">
|
2205
2686
|
<description>Oracle iLOM</description>
|
2206
2687
|
<example>Oracle(R) Integrated Lights Out Manager</example>
|
@@ -2213,6 +2694,7 @@
|
|
2213
2694
|
<param pos="0" name="os.vendor" value="Oracle"/>
|
2214
2695
|
<param pos="0" name="os.family" value="ILOM"/>
|
2215
2696
|
<param pos="0" name="os.product" value="ILOM"/>
|
2697
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:oracle:integrated_lights_out_manager_firmware:-"/>
|
2216
2698
|
</fingerprint>
|
2217
2699
|
|
2218
2700
|
<fingerprint pattern="^Genetec - SHARPV\S+$">
|
@@ -2238,7 +2720,7 @@
|
|
2238
2720
|
<param pos="0" name="service.cpe23" value="cpe:/a:apache:flink:-"/>
|
2239
2721
|
</fingerprint>
|
2240
2722
|
|
2241
|
-
<fingerprint pattern="^
|
2723
|
+
<fingerprint pattern="^Twonky|Twonky Server|TwonkyMedia|TwonkyMedia server media browser$">
|
2242
2724
|
<description>Twonky Server</description>
|
2243
2725
|
<example>Twonky</example>
|
2244
2726
|
<example>Twonky Server</example>
|
@@ -2283,7 +2765,7 @@
|
|
2283
2765
|
<param pos="0" name="service.cpe23" value="cpe:/a:sabnzbd:sabnzbd:-"/>
|
2284
2766
|
</fingerprint>
|
2285
2767
|
|
2286
|
-
<fingerprint pattern="^
|
2768
|
+
<fingerprint pattern="^Zabbix|.*: Zabbix$">
|
2287
2769
|
<description>Zabbix</description>
|
2288
2770
|
<example>Zabbix</example>
|
2289
2771
|
<example>appliance: Zabbix</example>
|
@@ -2292,7 +2774,7 @@
|
|
2292
2774
|
<param pos="0" name="service.cpe23" value="cpe:/a:zabbix:zabbix:-"/>
|
2293
2775
|
</fingerprint>
|
2294
2776
|
|
2295
|
-
<fingerprint pattern="^(\S
|
2777
|
+
<fingerprint pattern="^(\S{1,512}) \(build (\S+)\) - Info$">
|
2296
2778
|
<description>DD-WRT</description>
|
2297
2779
|
<example host.name="SubTerraVia-NUC" os.version="36104" os.build="36104">SubTerraVia-NUC (build 36104) - Info</example>
|
2298
2780
|
<example host.name="DD-WRT" os.version="35030M" os.build="35030M">DD-WRT (build 35030M) - Info</example>
|
@@ -2305,7 +2787,7 @@
|
|
2305
2787
|
<param pos="0" name="os.cpe23" value="cpe:/o:dd-wrt:dd-wrt:{os.version}"/>
|
2306
2788
|
</fingerprint>
|
2307
2789
|
|
2308
|
-
<fingerprint pattern="^
|
2790
|
+
<fingerprint pattern="^Apache Druid|Druid Console|Legacy Coordinator Console$">
|
2309
2791
|
<description>Apache Druid</description>
|
2310
2792
|
<example>Apache Druid</example>
|
2311
2793
|
<example>Legacy Coordinator Console</example>
|
@@ -2316,10 +2798,11 @@
|
|
2316
2798
|
</fingerprint>
|
2317
2799
|
|
2318
2800
|
<fingerprint pattern="^Gerrit Code Review$">
|
2319
|
-
<description>Gerrit Code Review</description>
|
2801
|
+
<description>Google's Gerrit Code Review</description>
|
2320
2802
|
<example>Gerrit Code Review</example>
|
2321
|
-
<param pos="0" name="service.vendor" value="
|
2322
|
-
<param pos="0" name="service.product" value="
|
2803
|
+
<param pos="0" name="service.vendor" value="Google"/>
|
2804
|
+
<param pos="0" name="service.product" value="Gerrit"/>
|
2805
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:google:gerrit:-"/>
|
2323
2806
|
</fingerprint>
|
2324
2807
|
|
2325
2808
|
<fingerprint pattern=" - Ignition Gateway$">
|
@@ -2391,7 +2874,7 @@
|
|
2391
2874
|
<example>Rundeck - Login</example>
|
2392
2875
|
<param pos="0" name="service.vendor" value="Rundeck"/>
|
2393
2876
|
<param pos="0" name="service.product" value="Rundeck"/>
|
2394
|
-
<param pos="0" name="service.cpe23" value="cpe:/a:
|
2877
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:pagerduty:rundeck:-"/>
|
2395
2878
|
</fingerprint>
|
2396
2879
|
|
2397
2880
|
<fingerprint pattern="^CrushFTP WebInterface$">
|
@@ -2511,9 +2994,10 @@
|
|
2511
2994
|
<example>SolarWinds Virtualization Manager</example>
|
2512
2995
|
<param pos="0" name="service.vendor" value="SolarWinds"/>
|
2513
2996
|
<param pos="0" name="service.product" value="Virtualization Manager"/>
|
2997
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:solarwinds:virtualization_manager:-"/>
|
2514
2998
|
</fingerprint>
|
2515
2999
|
|
2516
|
-
<fingerprint pattern="^
|
3000
|
+
<fingerprint pattern="^Gitea: .*|LocalRepo|TurnKey Gitea$">
|
2517
3001
|
<description>Gitea</description>
|
2518
3002
|
<example>Gitea: Git with a cup of tea</example>
|
2519
3003
|
<example>TurnKey Gitea</example>
|
@@ -2568,9 +3052,10 @@
|
|
2568
3052
|
<param pos="0" name="service.certainty" value="0.5"/>
|
2569
3053
|
</fingerprint>
|
2570
3054
|
|
2571
|
-
<fingerprint pattern="^
|
3055
|
+
<fingerprint pattern="^[oO]wn[cC]loud$">
|
2572
3056
|
<description>ownCloud</description>
|
2573
3057
|
<example>ownCloud</example>
|
3058
|
+
<example>Owncloud</example>
|
2574
3059
|
<param pos="0" name="service.vendor" value="ownCloud"/>
|
2575
3060
|
<param pos="0" name="service.product" value="ownCloud Server"/>
|
2576
3061
|
<param pos="0" name="service.certainty" value="0.5"/>
|
@@ -2597,9 +3082,10 @@
|
|
2597
3082
|
<example>RStudio Sign In</example>
|
2598
3083
|
<param pos="0" name="service.vendor" value="RStudio"/>
|
2599
3084
|
<param pos="0" name="service.product" value="Connect"/>
|
3085
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:rstudio:connect:-"/>
|
2600
3086
|
</fingerprint>
|
2601
3087
|
|
2602
|
-
<fingerprint pattern="^
|
3088
|
+
<fingerprint pattern="^TurnKey Moodle|New Site$">
|
2603
3089
|
<description>Moodle</description>
|
2604
3090
|
<example>TurnKey Moodle</example>
|
2605
3091
|
<example>New Site</example>
|
@@ -2638,7 +3124,7 @@
|
|
2638
3124
|
<param pos="0" name="service.cpe23" value="cpe:/a:atlassian:jira:-"/>
|
2639
3125
|
</fingerprint>
|
2640
3126
|
|
2641
|
-
<fingerprint pattern="^
|
3127
|
+
<fingerprint pattern="^Welcome to XAMPP|XAMPP for Linux">
|
2642
3128
|
<description>XAMPP Server</description>
|
2643
3129
|
<example>Welcome to XAMPP</example>
|
2644
3130
|
<example>XAMPP for Linux</example>
|
@@ -2654,15 +3140,16 @@
|
|
2654
3140
|
<param pos="0" name="service.product" value="Security Scanner"/>
|
2655
3141
|
</fingerprint>
|
2656
3142
|
|
2657
|
-
<fingerprint pattern="^Kodi
|
3143
|
+
<fingerprint pattern="^(?:Chorus 2 - )?Kodi(?: web interface)?$">
|
2658
3144
|
<description>Kodi Media Server</description>
|
2659
3145
|
<example>Kodi</example>
|
3146
|
+
<example>Chorus 2 - Kodi web interface</example>
|
2660
3147
|
<param pos="0" name="service.vendor" value="Kodi"/>
|
2661
3148
|
<param pos="0" name="service.product" value="Media Server"/>
|
2662
3149
|
<param pos="0" name="service.cpe23" value="cpe:/a:kodi:kodi:-"/>
|
2663
3150
|
</fingerprint>
|
2664
3151
|
|
2665
|
-
<fingerprint pattern="^
|
3152
|
+
<fingerprint pattern="^Drupal|TurnKey Drupal\d+|Select an installation profile$">
|
2666
3153
|
<description>Drupal CMS</description>
|
2667
3154
|
<example>Drupal</example>
|
2668
3155
|
<example>TurnKey Drupal8</example>
|
@@ -2720,7 +3207,7 @@
|
|
2720
3207
|
<param pos="0" name="hw.certainty" value="0.75"/>
|
2721
3208
|
<param pos="0" name="os.vendor" value="Dell"/>
|
2722
3209
|
<param pos="0" name="os.product" value="iDRAC Linux"/>
|
2723
|
-
<param pos="0" name="os
|
3210
|
+
<param pos="0" name="os.certainty" value="0.75"/>
|
2724
3211
|
</fingerprint>
|
2725
3212
|
|
2726
3213
|
<fingerprint pattern="^Pulse Connect Secure - SSL">
|
@@ -2735,4 +3222,506 @@
|
|
2735
3222
|
<param pos="0" name="os.product" value="Pulse Connect Secure"/>
|
2736
3223
|
</fingerprint>
|
2737
3224
|
|
3225
|
+
<fingerprint pattern="^Jellyfin$">
|
3226
|
+
<description>Jellyfin media server</description>
|
3227
|
+
<example>Jellyfin</example>
|
3228
|
+
<param pos="0" name="service.vendor" value="Jellyfin"/>
|
3229
|
+
<param pos="0" name="service.product" value="Media Server"/>
|
3230
|
+
</fingerprint>
|
3231
|
+
|
3232
|
+
<fingerprint pattern="^.{1,256} - Proxmox Virtual Environment$">
|
3233
|
+
<description>Proxmox open-source virtualization platform</description>
|
3234
|
+
<example>hypervisor - Proxmox Virtual Environment</example>
|
3235
|
+
<param pos="0" name="service.vendor" value="Proxmox"/>
|
3236
|
+
<param pos="0" name="service.product" value="Virtual Environment"/>
|
3237
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:proxmox:virtual_environment:-"/>
|
3238
|
+
<param pos="0" name="os.vendor" value="Proxmox"/>
|
3239
|
+
<param pos="0" name="os.family" value="Linux"/>
|
3240
|
+
<param pos="0" name="os.product" value="Proxmox"/>
|
3241
|
+
</fingerprint>
|
3242
|
+
|
3243
|
+
<fingerprint pattern="^Sony Network Camera$">
|
3244
|
+
<description>Sony Network Camera</description>
|
3245
|
+
<example>Sony Network Camera</example>
|
3246
|
+
<param pos="0" name="hw.vendor" value="Sony"/>
|
3247
|
+
<param pos="0" name="hw.device" value="IP Camera"/>
|
3248
|
+
<param pos="0" name="hw.product" value="Network Camera"/>
|
3249
|
+
</fingerprint>
|
3250
|
+
|
3251
|
+
<fingerprint pattern="Lifesize&reg;$">
|
3252
|
+
<description>Lifesize TelePresence</description>
|
3253
|
+
<example>Lifesize&reg;</example>
|
3254
|
+
<example>400 - Bad Request Lifesize&reg;</example>
|
3255
|
+
<param pos="0" name="hw.vendor" value="Lifesize"/>
|
3256
|
+
<param pos="0" name="hw.device" value="Video Conferencing"/>
|
3257
|
+
<param pos="0" name="hw.product" value="TelePresence"/>
|
3258
|
+
<param pos="0" name="os.vendor" value="Lifesize"/>
|
3259
|
+
<param pos="0" name="os.family" value="Linux"/>
|
3260
|
+
<param pos="0" name="os.product" value="TelePresence"/>
|
3261
|
+
<param pos="0" name="os.device" value="Video Conferencing"/>
|
3262
|
+
</fingerprint>
|
3263
|
+
|
3264
|
+
<fingerprint pattern="^AT&amp;T VPN Gateway$">
|
3265
|
+
<description>ATT VPN Gateway</description>
|
3266
|
+
<example>AT&amp;T VPN Gateway</example>
|
3267
|
+
<param pos="0" name="hw.vendor" value="ATT"/>
|
3268
|
+
<param pos="0" name="hw.device" value="VPN"/>
|
3269
|
+
<param pos="0" name="hw.product" value="VPN Gateway"/>
|
3270
|
+
</fingerprint>
|
3271
|
+
|
3272
|
+
<fingerprint pattern="^AT&amp;T U\d+: '([^']+)'$">
|
3273
|
+
<description>ATT VPN Gateway w Hostname</description>
|
3274
|
+
<example host.name="Austin-Boston">AT&amp;T U115: 'Austin-Boston'</example>
|
3275
|
+
<param pos="0" name="hw.vendor" value="ATT"/>
|
3276
|
+
<param pos="0" name="hw.device" value="VPN"/>
|
3277
|
+
<param pos="0" name="hw.product" value="VPN Gateway"/>
|
3278
|
+
<param pos="1" name="host.name"/>
|
3279
|
+
</fingerprint>
|
3280
|
+
|
3281
|
+
<fingerprint pattern="^(?:Symantec Encryption Verified Directory|Symantec Encryption Server.*)$">
|
3282
|
+
<description>Symantec PGP Key Management Server</description>
|
3283
|
+
<example>Symantec Encryption Verified Directory</example>
|
3284
|
+
<example>Symantec Encryption Server - Page Not Found</example>
|
3285
|
+
<example>Symantec Encryption Server - Login</example>
|
3286
|
+
<param pos="0" name="hw.vendor" value="Symantec"/>
|
3287
|
+
<param pos="0" name="hw.device" value="Security Appliance"/>
|
3288
|
+
<param pos="0" name="hw.product" value="Key Management Server"/>
|
3289
|
+
</fingerprint>
|
3290
|
+
|
3291
|
+
<fingerprint pattern="^Riverbed Technology, Inc\.$">
|
3292
|
+
<description>Riverbed Steelhead Appliance</description>
|
3293
|
+
<example>Riverbed Technology, Inc.</example>
|
3294
|
+
<param pos="0" name="hw.vendor" value="Riverbed"/>
|
3295
|
+
<param pos="0" name="hw.device" value="Security Appliance"/>
|
3296
|
+
<param pos="0" name="hw.product" value="Steelhead"/>
|
3297
|
+
<param pos="0" name="os.product" value="RiOS"/>
|
3298
|
+
<param pos="0" name="os.vendor" value="Riverbed"/>
|
3299
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:riverbed:rios:-"/>
|
3300
|
+
</fingerprint>
|
3301
|
+
|
3302
|
+
<fingerprint pattern="^ClearPass - Aruba Networks$">
|
3303
|
+
<description>ClearPass Policy Manager Appliance</description>
|
3304
|
+
<example>ClearPass - Aruba Networks</example>
|
3305
|
+
<param pos="0" name="hw.vendor" value="Aruba Networks"/>
|
3306
|
+
<param pos="0" name="hw.device" value="Network Appliance"/>
|
3307
|
+
<param pos="0" name="hw.product" value="ClearPass Policy Manager"/>
|
3308
|
+
<param pos="0" name="service.vendor" value="Aruba Networks"/>
|
3309
|
+
<param pos="0" name="service.device" value="Network Appliance"/>
|
3310
|
+
<param pos="0" name="service.product" value="ClearPass Policy Manager"/>
|
3311
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:arubanetworks:clearpass_policy_manager:-"/>
|
3312
|
+
</fingerprint>
|
3313
|
+
|
3314
|
+
<fingerprint pattern="^MSTR Collab Server$">
|
3315
|
+
<description>MicroStrategy Collaboration Server</description>
|
3316
|
+
<example>MSTR Collab Server</example>
|
3317
|
+
<param pos="0" name="service.vendor" value="MicroStrategy"/>
|
3318
|
+
<param pos="0" name="service.product" value="Collaboration Server"/>
|
3319
|
+
<param pos="0" name="service.certainty" value="0.5"/>
|
3320
|
+
</fingerprint>
|
3321
|
+
|
3322
|
+
<fingerprint pattern="^Openfire Admin Console$">
|
3323
|
+
<description>Openfire Admin Console</description>
|
3324
|
+
<example>Openfire Admin Console</example>
|
3325
|
+
<param pos="0" name="service.vendor" value="Ignite Realtime"/>
|
3326
|
+
<param pos="0" name="service.product" value="OpenFire"/>
|
3327
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:igniterealtime:openfire:-"/>
|
3328
|
+
</fingerprint>
|
3329
|
+
|
3330
|
+
<fingerprint pattern="^:: PBX in a Flash">
|
3331
|
+
<description>PBX in a Flash</description>
|
3332
|
+
<example>:: PBX in a Flash, Welcome!</example>
|
3333
|
+
<param pos="0" name="hw.vendor" value="PIAF"/>
|
3334
|
+
<param pos="0" name="hw.device" value="SIP Gateway"/>
|
3335
|
+
<param pos="0" name="hw.product" value="PIAF Virtual Appliance"/>
|
3336
|
+
</fingerprint>
|
3337
|
+
|
3338
|
+
<fingerprint pattern="^Hak5 Cloud C">
|
3339
|
+
<description>Hak5 Cloud c2</description>
|
3340
|
+
<example>Hak5 Cloud C²</example>
|
3341
|
+
<param pos="0" name="service.vendor" value="Hak5"/>
|
3342
|
+
<param pos="0" name="service.product" value="Cloud C2"/>
|
3343
|
+
</fingerprint>
|
3344
|
+
|
3345
|
+
<fingerprint pattern="^Metabase$">
|
3346
|
+
<description>Metabase</description>
|
3347
|
+
<example>Metabase</example>
|
3348
|
+
<param pos="0" name="service.vendor" value="Metabase"/>
|
3349
|
+
<param pos="0" name="service.product" value="Metabase"/>
|
3350
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:metabase:metabase:-"/>
|
3351
|
+
</fingerprint>
|
3352
|
+
|
3353
|
+
<fingerprint pattern="Nextcloud">
|
3354
|
+
<description>Nextcloud</description>
|
3355
|
+
<example>Nextcloud</example>
|
3356
|
+
<param pos="0" name="service.vendor" value="Nextcloud"/>
|
3357
|
+
<param pos="0" name="service.product" value="Nextcloud Server"/>
|
3358
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:nextcloud:nextcloud_server:-"/>
|
3359
|
+
</fingerprint>
|
3360
|
+
|
3361
|
+
<fingerprint pattern="^Observium">
|
3362
|
+
<description>Observium</description>
|
3363
|
+
<example>Observium : - Test infra</example>
|
3364
|
+
<param pos="0" name="service.vendor" value="Observium"/>
|
3365
|
+
<param pos="0" name="service.product" value="Observium"/>
|
3366
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:observium:observium:-"/>
|
3367
|
+
</fingerprint>
|
3368
|
+
|
3369
|
+
<fingerprint pattern="^Login to Webmin$">
|
3370
|
+
<description>Webmin</description>
|
3371
|
+
<example>Login to Webmin</example>
|
3372
|
+
<param pos="0" name="service.vendor" value="Webmin"/>
|
3373
|
+
<param pos="0" name="service.product" value="Webmin"/>
|
3374
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:webmin:webmin:-"/>
|
3375
|
+
</fingerprint>
|
3376
|
+
|
3377
|
+
<fingerprint pattern="^Login to Usermin$">
|
3378
|
+
<description>Usermin</description>
|
3379
|
+
<example>Login to Usermin</example>
|
3380
|
+
<param pos="0" name="service.vendor" value="Webmin"/>
|
3381
|
+
<param pos="0" name="service.product" value="Usermin"/>
|
3382
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:webmin:usermin:-"/>
|
3383
|
+
</fingerprint>
|
3384
|
+
|
3385
|
+
<fingerprint pattern="^MoinMoinWiki">
|
3386
|
+
<description>Moinmoin wiki</description>
|
3387
|
+
<example>MoinMoinWiki - MoinMoin</example>
|
3388
|
+
<param pos="0" name="service.vendor" value="MoinMoin"/>
|
3389
|
+
<param pos="0" name="service.product" value="MoinMoin"/>
|
3390
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:moinmo:moinmoin:-"/>
|
3391
|
+
</fingerprint>
|
3392
|
+
|
3393
|
+
<fingerprint pattern="^(\w+) - BlackBox Management Console$">
|
3394
|
+
<description>BlackBox Management Console</description>
|
3395
|
+
<example host.name="ABC123">ABC123 - BlackBox Management Console</example>
|
3396
|
+
<param pos="0" name="hw.vendor" value="BlackBox"/>
|
3397
|
+
<param pos="0" name="hw.device" value="Device Server"/>
|
3398
|
+
<param pos="0" name="hw.product" value="BlackBox"/>
|
3399
|
+
<param pos="1" name="host.name"/>
|
3400
|
+
</fingerprint>
|
3401
|
+
|
3402
|
+
<fingerprint pattern="^Shelly Color Bulb$">
|
3403
|
+
<description>Shelly Smart Bulb</description>
|
3404
|
+
<example>Shelly Color Bulb</example>
|
3405
|
+
<param pos="0" name="os.vendor" value="Cesanta"/>
|
3406
|
+
<param pos="0" name="os.product" value="Mongoose OS"/>
|
3407
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:cesanta:mongoose_os:-"/>
|
3408
|
+
<param pos="0" name="hw.vendor" value="Shelly"/>
|
3409
|
+
<param pos="0" name="hw.device" value="Light Bulb"/>
|
3410
|
+
<param pos="0" name="hw.product" value="Color Bulb"/>
|
3411
|
+
</fingerprint>
|
3412
|
+
|
3413
|
+
<fingerprint pattern="^Shelly (Plug|Dimmer(?: 2)?|Switch)$">
|
3414
|
+
<description>Shelly Plug/Dimmer/Switch Devices</description>
|
3415
|
+
<example hw.product="Plug">Shelly Plug</example>
|
3416
|
+
<example hw.product="Dimmer">Shelly Dimmer</example>
|
3417
|
+
<example hw.product="Dimmer 2">Shelly Dimmer 2</example>
|
3418
|
+
<example hw.product="Switch">Shelly Switch</example>
|
3419
|
+
<param pos="0" name="os.vendor" value="Cesanta"/>
|
3420
|
+
<param pos="0" name="os.product" value="Mongoose OS"/>
|
3421
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:cesanta:mongoose_os:-"/>
|
3422
|
+
<param pos="0" name="hw.vendor" value="Shelly"/>
|
3423
|
+
<param pos="0" name="hw.device" value="Device"/>
|
3424
|
+
<param pos="1" name="hw.product"/>
|
3425
|
+
</fingerprint>
|
3426
|
+
|
3427
|
+
<fingerprint pattern="^Shelly[ ]?(RGBW2|1L)$">
|
3428
|
+
<description>Shelly Lighting Controller</description>
|
3429
|
+
<example hw.product="RGBW2">Shelly RGBW2</example>
|
3430
|
+
<example hw.product="1L">Shelly1L</example>
|
3431
|
+
<param pos="0" name="os.vendor" value="Cesanta"/>
|
3432
|
+
<param pos="0" name="os.product" value="Mongoose OS"/>
|
3433
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:cesanta:mongoose_os:-"/>
|
3434
|
+
<param pos="0" name="hw.vendor" value="Shelly"/>
|
3435
|
+
<param pos="0" name="hw.device" value="Device"/>
|
3436
|
+
<param pos="1" name="hw.product"/>
|
3437
|
+
</fingerprint>
|
3438
|
+
|
3439
|
+
<fingerprint pattern="^TinyGS Configuration$">
|
3440
|
+
<description>TinyGS LoRa Ground Station Software</description>
|
3441
|
+
<example>TinyGS Configuration</example>
|
3442
|
+
<param pos="0" name="service.product" value="TinyGS"/>
|
3443
|
+
</fingerprint>
|
3444
|
+
|
3445
|
+
<fingerprint pattern="^WLED$">
|
3446
|
+
<description>WLED Controlled Device</description>
|
3447
|
+
<example>WLED</example>
|
3448
|
+
<param pos="0" name="service.vendor" value="Aircookie"/>
|
3449
|
+
<param pos="0" name="service.product" value="WLED"/>
|
3450
|
+
<param pos="0" name="service.device" value="Device"/>
|
3451
|
+
</fingerprint>
|
3452
|
+
|
3453
|
+
<fingerprint pattern="^Freebox OS (?:.*)$">
|
3454
|
+
<description>Freebox OS on Freebox Set-top Box Devices</description>
|
3455
|
+
<example>Freebox OS :: Identification</example>
|
3456
|
+
<param pos="0" name="os.vendor" value="Freebox"/>
|
3457
|
+
<param pos="0" name="os.product" value="Freebox OS"/>
|
3458
|
+
<param pos="0" name="hw.vendor" value="Freebox"/>
|
3459
|
+
<param pos="0" name="hw.device" value="Device"/>
|
3460
|
+
</fingerprint>
|
3461
|
+
|
3462
|
+
<fingerprint pattern="^HP UPS Network Module$">
|
3463
|
+
<description>HP RT3000 G2 UPS</description>
|
3464
|
+
<example>HP UPS Network Module</example>
|
3465
|
+
<param pos="0" name="hw.vendor" value="HP"/>
|
3466
|
+
<param pos="0" name="hw.device" value="UPS"/>
|
3467
|
+
</fingerprint>
|
3468
|
+
|
3469
|
+
<fingerprint pattern="^UniFi Network$">
|
3470
|
+
<description>Ubiquiti UniFi Network Application</description>
|
3471
|
+
<example>UniFi Network</example>
|
3472
|
+
<param pos="0" name="service.vendor" value="Ubiquiti"/>
|
3473
|
+
<param pos="0" name="service.product" value="UniFi"/>
|
3474
|
+
<param pos="0" name="service.device" value="Device"/>
|
3475
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:ui:unifi:-"/>
|
3476
|
+
</fingerprint>
|
3477
|
+
|
3478
|
+
<fingerprint pattern="^Login to AdminDroid Office 365 Reporter$">
|
3479
|
+
<description>AdminDroid Office 365 Reporter Application</description>
|
3480
|
+
<example>Login to AdminDroid Office 365 Reporter</example>
|
3481
|
+
<param pos="0" name="service.vendor" value="AdminDroid"/>
|
3482
|
+
<param pos="0" name="service.product" value="Office 365 Reporter"/>
|
3483
|
+
</fingerprint>
|
3484
|
+
|
3485
|
+
<fingerprint pattern="^Nanoleaf Firmware Upload$">
|
3486
|
+
<description>Nanoleaf LED Lighting</description>
|
3487
|
+
<example>Nanoleaf Firmware Upload</example>
|
3488
|
+
<param pos="0" name="hw.vendor" value="Nanoleaf"/>
|
3489
|
+
<param pos="0" name="hw.device" value="Device"/>
|
3490
|
+
</fingerprint>
|
3491
|
+
|
3492
|
+
<fingerprint pattern="^GoGogate - LAN$">
|
3493
|
+
<description>GoGogate Garage Door Opener</description>
|
3494
|
+
<example>GoGogate - LAN</example>
|
3495
|
+
<param pos="0" name="hw.vendor" value="GoGogate"/>
|
3496
|
+
<param pos="0" name="hw.device" value="Device"/>
|
3497
|
+
</fingerprint>
|
3498
|
+
|
3499
|
+
<fingerprint pattern="^ASUS Login$">
|
3500
|
+
<description>ASUS Router/Network Device</description>
|
3501
|
+
<example>ASUS Login</example>
|
3502
|
+
<param pos="0" name="hw.vendor" value="Asus"/>
|
3503
|
+
<param pos="0" name="hw.device" value="Device"/>
|
3504
|
+
</fingerprint>
|
3505
|
+
|
3506
|
+
<fingerprint pattern="^GigaBlue Quad Plus - OpenWebif$">
|
3507
|
+
<description>GigaBlue Quad Plus Satellite TV Receiver</description>
|
3508
|
+
<example>GigaBlue Quad Plus - OpenWebif</example>
|
3509
|
+
<param pos="0" name="hw.vendor" value="GigaBlue"/>
|
3510
|
+
<param pos="0" name="hw.device" value="Device"/>
|
3511
|
+
<param pos="0" name="hw.product" value="Quad Plus Receiver"/>
|
3512
|
+
</fingerprint>
|
3513
|
+
|
3514
|
+
<fingerprint pattern="^Barix Instreamer Instreamer$">
|
3515
|
+
<description>Barix Instreamer</description>
|
3516
|
+
<example>Barix Instreamer Instreamer</example>
|
3517
|
+
<param pos="0" name="hw.vendor" value="Barix"/>
|
3518
|
+
<param pos="0" name="hw.device" value="Audio Encoder"/>
|
3519
|
+
<param pos="0" name="hw.product" value="Instreamer"/>
|
3520
|
+
</fingerprint>
|
3521
|
+
|
3522
|
+
<fingerprint pattern="^Tracker Display$">
|
3523
|
+
<description>SpotterRF</description>
|
3524
|
+
<example>Tracker Display</example>
|
3525
|
+
<param pos="0" name="os.vendor" value="SpotterRF"/>
|
3526
|
+
<param pos="0" name="os.family" value="Linux"/>
|
3527
|
+
<param pos="0" name="os.certainty" value="0.90"/>
|
3528
|
+
<param pos="0" name="hw.vendor" value="SpotterRF"/>
|
3529
|
+
<param pos="0" name="hw.device" value="Sensor"/>
|
3530
|
+
<param pos="0" name="hw.product" value="Drone Detector"/>
|
3531
|
+
</fingerprint>
|
3532
|
+
|
3533
|
+
<fingerprint pattern="^Polycom (DMA \d+)$">
|
3534
|
+
<description>Polycom DMA 7000</description>
|
3535
|
+
<example hw.product="DMA 7000">Polycom DMA 7000</example>
|
3536
|
+
<param pos="0" name="hw.vendor" value="Polycom"/>
|
3537
|
+
<param pos="0" name="hw.device" value="VoIP"/>
|
3538
|
+
<param pos="1" name="hw.product"/>
|
3539
|
+
</fingerprint>
|
3540
|
+
|
3541
|
+
<fingerprint pattern="^VVX(\d{3})$">
|
3542
|
+
<description>Polycom VVX VoIP Phones</description>
|
3543
|
+
<example hw.model="250">VVX250</example>
|
3544
|
+
<param pos="0" name="hw.vendor" value="Polycom"/>
|
3545
|
+
<param pos="0" name="hw.device" value="VoIP"/>
|
3546
|
+
<param pos="1" name="hw.model"/>
|
3547
|
+
<param pos="0" name="hw.product" value="VVX {hw.model}"/>
|
3548
|
+
</fingerprint>
|
3549
|
+
|
3550
|
+
<fingerprint pattern="^(OBi[23]\d{2})">
|
3551
|
+
<description>Poly OBI Analog Telephone Adapter</description>
|
3552
|
+
<example hw.product="OBi200">OBi200</example>
|
3553
|
+
<param pos="0" name="hw.vendor" value="Poly"/>
|
3554
|
+
<param pos="0" name="hw.device" value="VoIP"/>
|
3555
|
+
<param pos="1" name="hw.product"/>
|
3556
|
+
</fingerprint>
|
3557
|
+
|
3558
|
+
<fingerprint pattern="^Alpha Technologies$">
|
3559
|
+
<description>Alpha Technologies Novus UPS</description>
|
3560
|
+
<example>Alpha Technologies</example>
|
3561
|
+
<param pos="0" name="hw.vendor" value="Alpha Technologies"/>
|
3562
|
+
<param pos="0" name="hw.device" value="Power Device"/>
|
3563
|
+
<param pos="0" name="hw.product" value="Novus UPS"/>
|
3564
|
+
</fingerprint>
|
3565
|
+
|
3566
|
+
<fingerprint pattern="^Network Management Card$">
|
3567
|
+
<description>Eaton UPS Network Card</description>
|
3568
|
+
<example>Network Management Card</example>
|
3569
|
+
<param pos="0" name="hw.vendor" value="Eaton"/>
|
3570
|
+
<param pos="0" name="hw.device" value="Power Device"/>
|
3571
|
+
<param pos="0" name="hw.product" value="UPS"/>
|
3572
|
+
<param pos="0" name="hw.certainty" value="0.5"/>
|
3573
|
+
</fingerprint>
|
3574
|
+
|
3575
|
+
<fingerprint pattern="^UPS Properties$">
|
3576
|
+
<description>APC UPS Network Card</description>
|
3577
|
+
<example>UPS Properties</example>
|
3578
|
+
<param pos="0" name="hw.vendor" value="APC"/>
|
3579
|
+
<param pos="0" name="hw.device" value="Power Device"/>
|
3580
|
+
<param pos="0" name="hw.product" value="UPS"/>
|
3581
|
+
<param pos="0" name="hw.certainty" value="0.5"/>
|
3582
|
+
</fingerprint>
|
3583
|
+
|
3584
|
+
<fingerprint pattern="^HP ([\w ]+) PostScript">
|
3585
|
+
<description>HP Printer</description>
|
3586
|
+
<example hw.product="Designjet T1200">HP Designjet T1200 PostScript - Supplies</example>
|
3587
|
+
<param pos="0" name="hw.vendor" value="HP"/>
|
3588
|
+
<param pos="0" name="hw.family" value="JetDirect"/>
|
3589
|
+
<param pos="0" name="hw.device" value="Printer"/>
|
3590
|
+
<param pos="1" name="hw.product"/>
|
3591
|
+
</fingerprint>
|
3592
|
+
|
3593
|
+
<fingerprint pattern="^Radio Configuration/Diagnostic Utility$">
|
3594
|
+
<description>ProSoft RadioLinx</description>
|
3595
|
+
<example>Radio Configuration/Diagnostic Utility</example>
|
3596
|
+
<param pos="0" name="hw.vendor" value="ProSoft Technology"/>
|
3597
|
+
<param pos="0" name="hw.device" value="WAP"/>
|
3598
|
+
<param pos="0" name="hw.product" value="RadioLinx"/>
|
3599
|
+
<param pos="0" name="hw.certainty" value="0.5"/>
|
3600
|
+
</fingerprint>
|
3601
|
+
|
3602
|
+
<fingerprint pattern="^Welcome to ntopng$">
|
3603
|
+
<description>ntopng Network Analysis Application</description>
|
3604
|
+
<example>Welcome to ntopng</example>
|
3605
|
+
<param pos="0" name="service.vendor" value="ntop"/>
|
3606
|
+
<param pos="0" name="service.product" value="ntopng"/>
|
3607
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:ntop:ntopng:-"/>
|
3608
|
+
</fingerprint>
|
3609
|
+
|
3610
|
+
<fingerprint pattern="^FreeNAS$">
|
3611
|
+
<description>iXsystems FreeNAS</description>
|
3612
|
+
<example>FreeNAS</example>
|
3613
|
+
<param pos="0" name="service.vendor" value="iXsystems"/>
|
3614
|
+
<param pos="0" name="service.product" value="FreeNAS"/>
|
3615
|
+
<param pos="0" name="os.vendor" value="iXsystems"/>
|
3616
|
+
<param pos="0" name="os.family" value="FreeBSD"/>
|
3617
|
+
<param pos="0" name="os.product" value="FreeNAS Firmware"/>
|
3618
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:ixsystems:freenas_firmware:-"/>
|
3619
|
+
</fingerprint>
|
3620
|
+
|
3621
|
+
<fingerprint pattern="^Xerox (.{1,1000}) - \d+\.\d+\.\d+\.\d+$">
|
3622
|
+
<description>Xerox Color Printer</description>
|
3623
|
+
<example hw.product="Color 570">Xerox Color 570 - 100.100.100.101</example>
|
3624
|
+
<param pos="0" name="hw.vendor" value="Xerox"/>
|
3625
|
+
<param pos="0" name="hw.device" value="Printer"/>
|
3626
|
+
<param pos="1" name="hw.product"/>
|
3627
|
+
</fingerprint>
|
3628
|
+
|
3629
|
+
<fingerprint pattern="^Web Smart Switch$">
|
3630
|
+
<description>3Com Switch</description>
|
3631
|
+
<example>Web Smart Switch</example>
|
3632
|
+
<param pos="0" name="hw.vendor" value="3Com"/>
|
3633
|
+
<param pos="0" name="hw.device" value="Switch"/>
|
3634
|
+
</fingerprint>
|
3635
|
+
|
3636
|
+
<fingerprint pattern="^(Quantum) - (Scalar i\d+) Login Screen$">
|
3637
|
+
<description>Quantum Scalar Tape Library</description>
|
3638
|
+
<example hw.vendor="Quantum" hw.product="Scalar i80">Quantum - Scalar i80 Login Screen</example>
|
3639
|
+
<param pos="0" name="hw.device" value="Tape Library"/>
|
3640
|
+
<param pos="1" name="hw.vendor"/>
|
3641
|
+
<param pos="2" name="hw.product"/>
|
3642
|
+
</fingerprint>
|
3643
|
+
|
3644
|
+
<fingerprint pattern="^Printer Administration$">
|
3645
|
+
<description>Weidmüller Printer</description>
|
3646
|
+
<example>Printer Administration</example>
|
3647
|
+
<param pos="0" name="hw.vendor" value="Weidmüller"/>
|
3648
|
+
<param pos="0" name="hw.device" value="Printer"/>
|
3649
|
+
</fingerprint>
|
3650
|
+
|
3651
|
+
<fingerprint pattern="^Machine Identification - (MX-\S+)$">
|
3652
|
+
<description>Sharp MX Printer</description>
|
3653
|
+
<example hw.product="MX-3071">Machine Identification - MX-3071</example>
|
3654
|
+
<param pos="0" name="hw.vendor" value="Sharp"/>
|
3655
|
+
<param pos="0" name="hw.device" value="Printer"/>
|
3656
|
+
<param pos="1" name="hw.product"/>
|
3657
|
+
</fingerprint>
|
3658
|
+
|
3659
|
+
<fingerprint pattern="^Remote UI: Login: (MF\S+):">
|
3660
|
+
<description>Canon MF Printer</description>
|
3661
|
+
<example hw.product="MF632C/634C">Remote UI: Login: MF632C/634C: MF632C/634C</example>
|
3662
|
+
<param pos="0" name="hw.vendor" value="Canon"/>
|
3663
|
+
<param pos="0" name="hw.device" value="Printer"/>
|
3664
|
+
<param pos="1" name="hw.product"/>
|
3665
|
+
<param pos="0" name="hw.certainty" value="0.8"/>
|
3666
|
+
</fingerprint>
|
3667
|
+
|
3668
|
+
<fingerprint pattern="^Network Video Recorder Login$">
|
3669
|
+
<description>Nuuo NVR</description>
|
3670
|
+
<example>Network Video Recorder Login</example>
|
3671
|
+
<param pos="0" name="hw.vendor" value="Nuuo"/>
|
3672
|
+
<param pos="0" name="hw.device" value="DVR"/>
|
3673
|
+
</fingerprint>
|
3674
|
+
|
3675
|
+
<fingerprint pattern="^Evolis Printer$">
|
3676
|
+
<description>Evolis Printer</description>
|
3677
|
+
<example>Evolis Printer</example>
|
3678
|
+
<param pos="0" name="hw.vendor" value="Evolis"/>
|
3679
|
+
<param pos="0" name="hw.device" value="Printer"/>
|
3680
|
+
</fingerprint>
|
3681
|
+
|
3682
|
+
<fingerprint pattern="^WyzeOutdoorPlug - ">
|
3683
|
+
<description>Wyze Plug Outdoor</description>
|
3684
|
+
<example>WyzeOutdoorPlug - Main Menu</example>
|
3685
|
+
<param pos="0" name="hw.vendor" value="Wyze"/>
|
3686
|
+
<param pos="0" name="hw.device" value="Device"/>
|
3687
|
+
<param pos="0" name="hw.product" value="Plug Outdoor"/>
|
3688
|
+
</fingerprint>
|
3689
|
+
|
3690
|
+
<fingerprint pattern="^Aptinex IOT Relay Module - (\d+ Channel) (Rev\S+)?">
|
3691
|
+
<description>Aptinex Relay Controller</description>
|
3692
|
+
<example aptinex.model="4 Channel" os.version="Rev1.1">Aptinex IOT Relay Module - 4 Channel Rev1.1</example>
|
3693
|
+
<param pos="0" name="os.vendor" value="Aptinex"/>
|
3694
|
+
<param pos="0" name="hw.vendor" value="Aptinex"/>
|
3695
|
+
<param pos="0" name="hw.device" value="Relay Controller"/>
|
3696
|
+
<param pos="0" name="hw.product" value="{aptinex.model} Relay Controller"/>
|
3697
|
+
<param pos="1" name="aptinex.model"/>
|
3698
|
+
<param pos="2" name="os.version"/>
|
3699
|
+
</fingerprint>
|
3700
|
+
|
3701
|
+
<fingerprint pattern="^Diagnoser - Bobcatminer Diagnostic Dashboard$">
|
3702
|
+
<description>Bobcat Helium Miner</description>
|
3703
|
+
<example>Diagnoser - Bobcatminer Diagnostic Dashboard</example>
|
3704
|
+
<param pos="0" name="hw.vendor" value="Bobcat"/>
|
3705
|
+
<param pos="0" name="hw.device" value="Device"/>
|
3706
|
+
<param pos="0" name="hw.product" value="Helium Miner"/>
|
3707
|
+
</fingerprint>
|
3708
|
+
|
3709
|
+
<fingerprint pattern="^LORIX Manager$">
|
3710
|
+
<description>Wifx LORIX One</description>
|
3711
|
+
<example>LORIX Manager</example>
|
3712
|
+
<param pos="0" name="os.vendor" value="Wifx"/>
|
3713
|
+
<param pos="0" name="os.product" value="LORIX OS"/>
|
3714
|
+
<param pos="0" name="hw.vendor" value="Wifx"/>
|
3715
|
+
<param pos="0" name="hw.device" value="Device"/>
|
3716
|
+
<param pos="0" name="hw.product" value="LORIX ONE"/>
|
3717
|
+
</fingerprint>
|
3718
|
+
|
3719
|
+
<fingerprint pattern="^ETERNUS$">
|
3720
|
+
<description>Fujitsu ETERNUS Storage Appliance</description>
|
3721
|
+
<example>ETERNUS</example>
|
3722
|
+
<param pos="0" name="hw.vendor" value="Fujitsu"/>
|
3723
|
+
<param pos="0" name="hw.device" value="Storage Appliance"/>
|
3724
|
+
<param pos="0" name="hw.product" value="Eternus"/>
|
3725
|
+
</fingerprint>
|
3726
|
+
|
2738
3727
|
</fingerprints>
|