recog 2.3.21 → 3.0.1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (120) hide show
  1. checksums.yaml +4 -4
  2. data/LICENSE +1 -1
  3. data/README.md +42 -16
  4. data/Rakefile +2 -9
  5. data/lib/recog/db.rb +2 -1
  6. data/lib/recog/db_manager.rb +1 -1
  7. data/lib/recog/fingerprint.rb +33 -6
  8. data/lib/recog/fingerprint_parse_error.rb +10 -0
  9. data/lib/recog/verifier.rb +9 -9
  10. data/lib/recog/verify_reporter.rb +17 -6
  11. data/lib/recog/version.rb +1 -1
  12. data/{bin → recog/bin}/recog_match +0 -1
  13. data/{xml → recog/xml}/apache_modules.xml +0 -0
  14. data/{xml → recog/xml}/apache_os.xml +98 -56
  15. data/{xml → recog/xml}/architecture.xml +15 -1
  16. data/recog/xml/dhcp_vendor_class.xml +206 -0
  17. data/{xml → recog/xml}/dns_versionbind.xml +16 -13
  18. data/{xml → recog/xml}/favicons.xml +297 -47
  19. data/{xml → recog/xml}/fingerprints.xsd +9 -1
  20. data/{xml → recog/xml}/ftp_banners.xml +160 -156
  21. data/{xml → recog/xml}/h323_callresp.xml +101 -101
  22. data/{xml → recog/xml}/hp_pjl_id.xml +84 -84
  23. data/{xml → recog/xml}/html_title.xml +727 -34
  24. data/{xml → recog/xml}/http_cookies.xml +160 -77
  25. data/{xml → recog/xml}/http_servers.xml +556 -283
  26. data/{xml → recog/xml}/http_wwwauth.xml +190 -75
  27. data/{xml → recog/xml}/imap_banners.xml +5 -5
  28. data/{xml → recog/xml}/ldap_searchresult.xml +0 -0
  29. data/{xml → recog/xml}/mdns_device-info_txt.xml +389 -26
  30. data/{xml → recog/xml}/mdns_workstation_txt.xml +0 -0
  31. data/{xml → recog/xml}/mysql_banners.xml +1 -1
  32. data/{xml → recog/xml}/mysql_error.xml +0 -0
  33. data/{xml → recog/xml}/nntp_banners.xml +11 -8
  34. data/{xml → recog/xml}/ntp_banners.xml +97 -97
  35. data/{xml → recog/xml}/operating_system.xml +95 -80
  36. data/{xml → recog/xml}/pop_banners.xml +23 -23
  37. data/{xml → recog/xml}/rsh_resp.xml +3 -3
  38. data/{xml → recog/xml}/rtsp_servers.xml +0 -0
  39. data/{xml → recog/xml}/sip_banners.xml +43 -5
  40. data/{xml → recog/xml}/sip_user_agents.xml +175 -27
  41. data/{xml → recog/xml}/smb_native_lm.xml +5 -5
  42. data/{xml → recog/xml}/smb_native_os.xml +25 -25
  43. data/{xml → recog/xml}/smtp_banners.xml +147 -146
  44. data/{xml → recog/xml}/smtp_debug.xml +0 -0
  45. data/{xml → recog/xml}/smtp_ehlo.xml +1 -1
  46. data/{xml → recog/xml}/smtp_expn.xml +0 -0
  47. data/{xml → recog/xml}/smtp_help.xml +11 -11
  48. data/{xml → recog/xml}/smtp_mailfrom.xml +0 -0
  49. data/{xml → recog/xml}/smtp_noop.xml +2 -2
  50. data/{xml → recog/xml}/smtp_quit.xml +0 -0
  51. data/{xml → recog/xml}/smtp_rcptto.xml +0 -0
  52. data/{xml → recog/xml}/smtp_rset.xml +0 -0
  53. data/{xml → recog/xml}/smtp_turn.xml +0 -0
  54. data/{xml → recog/xml}/smtp_vrfy.xml +0 -0
  55. data/{xml → recog/xml}/snmp_sysdescr.xml +1570 -1430
  56. data/{xml → recog/xml}/snmp_sysobjid.xml +38 -27
  57. data/{xml → recog/xml}/ssh_banners.xml +16 -10
  58. data/{xml → recog/xml}/telnet_banners.xml +238 -21
  59. data/{xml → recog/xml}/tls_jarm.xml +56 -6
  60. data/{xml → recog/xml}/x11_banners.xml +3 -3
  61. data/{xml → recog/xml}/x509_issuers.xml +49 -1
  62. data/{xml → recog/xml}/x509_subjects.xml +139 -38
  63. data/recog.gemspec +9 -5
  64. data/spec/data/external_example_fingerprint/hp_printer_ex_01.txt +1 -0
  65. data/spec/data/external_example_fingerprint/hp_printer_ex_02.txt +1 -0
  66. data/spec/data/external_example_fingerprint.xml +8 -0
  67. data/spec/data/external_example_illegal_path_fingerprint.xml +7 -0
  68. data/spec/lib/recog/db_spec.rb +84 -61
  69. data/spec/lib/recog/fingerprint_spec.rb +4 -4
  70. data/spec/lib/recog/verify_reporter_spec.rb +73 -4
  71. data/spec/spec_helper.rb +4 -0
  72. metadata +65 -134
  73. data/.github/ISSUE_TEMPLATE/bug_report.md +0 -37
  74. data/.github/ISSUE_TEMPLATE/feature_request.md +0 -17
  75. data/.github/ISSUE_TEMPLATE/fingerprint_request.md +0 -27
  76. data/.github/PULL_REQUEST_TEMPLATE +0 -24
  77. data/.github/SECURITY.md +0 -35
  78. data/.github/workflows/ci.yml +0 -26
  79. data/.gitignore +0 -23
  80. data/.rspec +0 -3
  81. data/.ruby-gemset +0 -1
  82. data/.ruby-version +0 -1
  83. data/.snyk +0 -10
  84. data/.travis.yml +0 -25
  85. data/CONTRIBUTING.md +0 -270
  86. data/bin/recog_cleanup +0 -16
  87. data/bin/recog_export +0 -81
  88. data/bin/recog_standardize +0 -148
  89. data/bin/recog_verify +0 -64
  90. data/cpe-remap.yaml +0 -343
  91. data/features/data/failing_banners_fingerprints.xml +0 -20
  92. data/features/data/matching_banners_fingerprints.xml +0 -23
  93. data/features/data/multiple_banners_fingerprints.xml +0 -32
  94. data/features/data/no_tests.xml +0 -3
  95. data/features/data/sample_banner.txt +0 -2
  96. data/features/data/successful_tests.xml +0 -18
  97. data/features/data/tests_with_failures.xml +0 -20
  98. data/features/data/tests_with_warnings.xml +0 -17
  99. data/features/match.feature +0 -36
  100. data/features/support/aruba.rb +0 -3
  101. data/features/support/env.rb +0 -6
  102. data/features/verify.feature +0 -48
  103. data/identifiers/README.md +0 -70
  104. data/identifiers/fields.txt +0 -104
  105. data/identifiers/hw_device.txt +0 -78
  106. data/identifiers/hw_family.txt +0 -113
  107. data/identifiers/hw_product.txt +0 -410
  108. data/identifiers/os_architecture.txt +0 -10
  109. data/identifiers/os_device.txt +0 -75
  110. data/identifiers/os_family.txt +0 -233
  111. data/identifiers/os_product.txt +0 -340
  112. data/identifiers/service_family.txt +0 -249
  113. data/identifiers/service_product.txt +0 -752
  114. data/identifiers/vendor.txt +0 -798
  115. data/lib/recog/verifier_factory.rb +0 -13
  116. data/misc/convert_mysql_err +0 -61
  117. data/misc/order.xsl +0 -17
  118. data/requirements.txt +0 -2
  119. data/spec/lib/fingerprint_self_test_spec.rb +0 -174
  120. data/update_cpes.py +0 -250
data/{xml → recog/xml}/html_title.xml RENAMED
@@ -214,6 +214,17 @@
214
214
  <param pos="0" name="hw.device" value="DVR"/>
215
215
  </fingerprint>
216
216
 
217
+ <!-- Xiongmai Technology is rebranded by a number of DVR and IP Camera manufacturers -->
218
+
219
+ <fingerprint pattern="^NETSurveillance WEB$">
220
+ <description>NetSurveillance web interface on DVR and IP Camera devices sourced from Xiongmai Technology</description>
221
+ <example>NETSurveillance WEB</example>
222
+ <param pos="0" name="service.vendor" value="Xiongmai Technology"/>
223
+ <param pos="0" name="service.product" value="uc-httpd"/>
224
+ <param pos="0" name="service.cpe23" value="cpe:/a:xiongmaitech:uc-httpd:-"/>
225
+ <param pos="0" name="os.vendor" value="Xiongmai Technology"/>
226
+ </fingerprint>
227
+
217
228
  <fingerprint pattern="^FRITZ!Box$">
218
229
  <description>AVM FRITZ!Box</description>
219
230
  <example>FRITZ!Box</example>
@@ -322,7 +333,7 @@
322
333
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
323
334
  </fingerprint>
324
335
 
325
- <fingerprint pattern="^(?:NETIASPOT Management Console|Konsola zarzdzania NETIASPOT)$">
336
+ <fingerprint pattern="^NETIASPOT Management Console|Konsola zarzdzania NETIASPOT$">
326
337
  <description>Netia Spot wireless router</description>
327
338
  <example>Konsola zarzdzania NETIASPOT</example>
328
339
  <example>NETIASPOT Management Console</example>
@@ -427,9 +438,14 @@
427
438
  <example>Fireware XTM User Authentication</example>
428
439
  <param pos="0" name="service.vendor" value="WatchGuard"/>
429
440
  <param pos="0" name="service.product" value="Fireware XTM"/>
441
+ <param pos="0" name="service.device" value="Firewall"/>
430
442
  <param pos="0" name="service.cpe23" value="cpe:/a:watchguard:fireware_xtm:-"/>
443
+ <param pos="0" name="service.component.vendor" value="nginx"/>
444
+ <param pos="0" name="service.component.product" value="nginx"/>
445
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:f5:nginx:-"/>
431
446
  <param pos="0" name="os.vendor" value="WatchGuard"/>
432
447
  <param pos="0" name="os.product" value="Fireware"/>
448
+ <param pos="0" name="os.device" value="Firewall"/>
433
449
  <param pos="0" name="os.cpe23" value="cpe:/o:watchguard:fireware:-"/>
434
450
  </fingerprint>
435
451
 
@@ -464,6 +480,14 @@
464
480
  <param pos="0" name="os.vendor" value="Synology"/>
465
481
  </fingerprint>
466
482
 
483
+ <fingerprint pattern="^Synology.nbsp;Router.nbsp;-.nbsp;synology$">
484
+ <description>Synology Router</description>
485
+ <example>Synology&amp;nbsp;Router&amp;nbsp;-&amp;nbsp;synology</example>
486
+ <param pos="0" name="hw.vendor" value="Synology"/>
487
+ <param pos="0" name="hw.device" value="Router"/>
488
+ <param pos="0" name="hw.certainty" value="0.7"/>
489
+ </fingerprint>
490
+
467
491
  <fingerprint pattern="^Web Filter Block Override$">
468
492
  <description>Fortinet FortiGate/Fortiguard Web Filter</description>
469
493
  <example>Web Filter Block Override</example>
@@ -477,6 +501,19 @@
477
501
  <param pos="0" name="hw.device" value="Firewall"/>
478
502
  </fingerprint>
479
503
 
504
+ <fingerprint pattern="^FortiGate$">
505
+ <description>Fortinet FortiGate Network Firewall</description>
506
+ <example>FortiGate</example>
507
+ <param pos="0" name="os.vendor" value="Fortinet"/>
508
+ <param pos="0" name="os.family" value="FortiOS"/>
509
+ <param pos="0" name="os.product" value="FortiOS"/>
510
+ <param pos="0" name="os.device" value="Firewall"/>
511
+ <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
512
+ <param pos="0" name="hw.vendor" value="Fortinet"/>
513
+ <param pos="0" name="hw.family" value="FortiGate"/>
514
+ <param pos="0" name="hw.device" value="Firewall"/>
515
+ </fingerprint>
516
+
480
517
  <!-- Various products by Ubiquiti networks -->
481
518
 
482
519
  <fingerprint pattern="^Ubiquiti Networks$">
@@ -539,7 +576,7 @@
539
576
  <param pos="0" name="service.cpe23" value="cpe:/a:ui:unifi_video:-"/>
540
577
  </fingerprint>
541
578
 
542
- <fingerprint pattern="^(?:UniFi NVR: Software Portal|airVision: \[NVR\] - Software Portal)$">
579
+ <fingerprint pattern="^UniFi NVR: Software Portal|airVision: \[NVR\] - Software Portal$">
543
580
  <description>UniFi NVR for recording from UniFi video cameras</description>
544
581
  <example>UniFi NVR: Software Portal</example>
545
582
  <example>airVision: [NVR] - Software Portal</example>
@@ -549,6 +586,14 @@
549
586
  <param pos="0" name="hw.device" value="DVR"/>
550
587
  </fingerprint>
551
588
 
589
+ <fingerprint pattern="^Welcome to AmpliFi$">
590
+ <description>Ubiquiti AmpliFi Router</description>
591
+ <example>Welcome to AmpliFi</example>
592
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
593
+ <param pos="0" name="hw.product" value="AmpliFi"/>
594
+ <param pos="0" name="hw.device" value="Router"/>
595
+ </fingerprint>
596
+
552
597
  <!-- Various products by Zyxel -->
553
598
 
554
599
  <fingerprint pattern="^USG60$">
@@ -606,8 +651,8 @@
606
651
 
607
652
  <fingerprint pattern="^Wowza Streaming Engine 4 (Subscription|Perpetual Pro) Edition (\d\.[\w.]+) build(\d+)$">
608
653
  <description>Wowza Streaming Engine</description>
609
- <example service.version="4.7.7.01" service.version.version="20190222144406">Wowza Streaming Engine 4 Subscription Edition 4.7.7.01 build20190222144406</example>
610
- <example service.edition="Perpetual Pro">Wowza Streaming Engine 4 Perpetual Pro Edition 4.8.8.01 build20201216140014</example>
654
+ <example service.version="4.7.7.01" service.version.version="20190222144406" service.edition="Subscription">Wowza Streaming Engine 4 Subscription Edition 4.7.7.01 build20190222144406</example>
655
+ <example service.edition="Perpetual Pro" service.version="4.8.8.01" service.version.version="20201216140014">Wowza Streaming Engine 4 Perpetual Pro Edition 4.8.8.01 build20201216140014</example>
611
656
  <param pos="0" name="service.vendor" value="Wowza"/>
612
657
  <param pos="0" name="service.product" value="Streaming Engine"/>
613
658
  <param pos="1" name="service.edition"/>
@@ -627,14 +672,24 @@
627
672
  <param pos="0" name="hw.device" value="Router"/>
628
673
  </fingerprint>
629
674
 
630
- <fingerprint pattern="^(?:Welcome to nginx!|Test Page for the Nginx HTTP Server)$">
675
+ <fingerprint pattern="^MikroTik SwOS$">
676
+ <description>MikroTik SwOS switch configuration page</description>
677
+ <example>MikroTik SwOS</example>
678
+ <param pos="0" name="os.vendor" value="MikroTik"/>
679
+ <param pos="0" name="os.device" value="Switch"/>
680
+ <param pos="0" name="os.product" value="SwOS"/>
681
+ <param pos="0" name="hw.vendor" value="MikroTik"/>
682
+ <param pos="0" name="hw.device" value="Switch"/>
683
+ </fingerprint>
684
+
685
+ <fingerprint pattern="^Welcome to nginx!|Test Page for the Nginx HTTP Server$">
631
686
  <description>Default OS-agnostic nginx</description>
632
687
  <example>Welcome to nginx!</example>
633
688
  <example>Test Page for the Nginx HTTP Server</example>
634
689
  <param pos="0" name="service.product" value="nginx"/>
635
690
  <param pos="0" name="service.family" value="nginx"/>
636
691
  <param pos="0" name="service.vendor" value="nginx"/>
637
- <param pos="0" name="service.cpe23" value="cpe:/a:nginx:nginx:-"/>
692
+ <param pos="0" name="service.cpe23" value="cpe:/a:f5:nginx:-"/>
638
693
  </fingerprint>
639
694
 
640
695
  <fingerprint pattern="^Test Page for the Nginx HTTP Server on (?:Fedora|EPEL)$">
@@ -643,11 +698,11 @@
643
698
  <param pos="0" name="service.product" value="nginx"/>
644
699
  <param pos="0" name="service.family" value="nginx"/>
645
700
  <param pos="0" name="service.vendor" value="nginx"/>
646
- <param pos="0" name="service.cpe23" value="cpe:/a:nginx:nginx:-"/>
701
+ <param pos="0" name="service.cpe23" value="cpe:/a:f5:nginx:-"/>
647
702
  <param pos="0" name="os.family" value="Linux"/>
648
- <param pos="0" name="os.vendor" value="Red Hat"/>
649
- <param pos="0" name="os.product" value="Fedora Core Linux"/>
650
- <param pos="0" name="os.cpe23" value="cpe:/o:redhat:fedora_core:-"/>
703
+ <param pos="0" name="os.vendor" value="Fedora Project"/>
704
+ <param pos="0" name="os.product" value="Fedora Core"/>
705
+ <param pos="0" name="os.cpe23" value="cpe:/o:fedoraproject:fedora_core:-"/>
651
706
  </fingerprint>
652
707
 
653
708
  <fingerprint pattern="^Welcome to nginx on Debian!$">
@@ -656,7 +711,7 @@
656
711
  <param pos="0" name="service.product" value="nginx"/>
657
712
  <param pos="0" name="service.family" value="nginx"/>
658
713
  <param pos="0" name="service.vendor" value="nginx"/>
659
- <param pos="0" name="service.cpe23" value="cpe:/a:nginx:nginx:-"/>
714
+ <param pos="0" name="service.cpe23" value="cpe:/a:f5:nginx:-"/>
660
715
  <param pos="0" name="os.vendor" value="Debian"/>
661
716
  <param pos="0" name="os.product" value="Linux"/>
662
717
  <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
@@ -708,9 +763,10 @@
708
763
  <param pos="1" name="hw.product"/>
709
764
  </fingerprint>
710
765
 
711
- <fingerprint pattern="^Netgear Prosafe Plus Switch$">
766
+ <fingerprint pattern="(?i)^Netgear Prosafe Plus Switch$">
712
767
  <description>Netgear Prosafe Plus Switch</description>
713
768
  <example>Netgear Prosafe Plus Switch</example>
769
+ <example>NETGEAR ProSAFE Plus Switch</example>
714
770
  <param pos="0" name="os.vendor" value="Netgear"/>
715
771
  <param pos="0" name="os.device" value="Switch"/>
716
772
  <param pos="0" name="os.product" value="Prosafe Firmware"/>
@@ -733,6 +789,37 @@
733
789
  <param pos="0" name="os.product" value="NET+OS"/>
734
790
  </fingerprint>
735
791
 
792
+ <fingerprint pattern="^(?:TransPort )?(WR\S+) \(SN: (\d+)\) Configuration and Management$">
793
+ <description>Digi Cellular Routers</description>
794
+ <example hw.product="WR44v2" hw.serial_number="888111" digi.serial_number="888111">WR44v2 (SN: 888111) Configuration and Management</example>
795
+ <example hw.product="WR21" hw.serial_number="888111" digi.serial_number="888111">WR21 (SN: 888111) Configuration and Management</example>
796
+ <example hw.product="WR44v2" hw.serial_number="888111" digi.serial_number="888111">TransPort WR44v2 (SN: 888111) Configuration and Management</example>
797
+ <example hw.product="WR44RR" hw.serial_number="888111" digi.serial_number="888111">TransPort WR44RR (SN: 888111) Configuration and Management</example>
798
+ <example hw.product="WR44" hw.serial_number="888111" digi.serial_number="888111">TransPort WR44 (SN: 888111) Configuration and Management</example>
799
+ <param pos="0" name="hw.vendor" value="Digi"/>
800
+ <param pos="0" name="hw.device" value="Router"/>
801
+ <param pos="1" name="hw.product"/>
802
+ <param pos="2" name="digi.serial_number"/>
803
+ <param pos="2" name="hw.serial_number"/>
804
+ </fingerprint>
805
+
806
+ <fingerprint pattern="^Digi (\S+) - ([a-fA-F0-9]{12})">
807
+ <description>Digi TX Cellular Routers</description>
808
+ <example hw.product="TX54-Dual-Cellular" host.mac="0040FF100000">Digi TX54-Dual-Cellular - 0040FF100000</example>
809
+ <param pos="0" name="hw.vendor" value="Digi"/>
810
+ <param pos="0" name="hw.device" value="Router"/>
811
+ <param pos="1" name="hw.product"/>
812
+ <param pos="2" name="host.mac"/>
813
+ </fingerprint>
814
+
815
+ <fingerprint pattern="^Digi Configuration and Management$">
816
+ <description>Digi Cellular Routers (Generic)</description>
817
+ <example>Digi Configuration and Management</example>
818
+ <param pos="0" name="hw.vendor" value="Digi"/>
819
+ <param pos="0" name="hw.device" value="Router"/>
820
+ <param pos="0" name="hw.certainty" value="0.25"/>
821
+ </fingerprint>
822
+
736
823
  <fingerprint pattern="^NPort Web Console$">
737
824
  <description>Moxa NPort Terminal Servers</description>
738
825
  <example>NPort Web Console</example>
@@ -751,6 +838,14 @@
751
838
  <param pos="1" name="hw.product"/>
752
839
  </fingerprint>
753
840
 
841
+ <fingerprint pattern="^Lantronix WEB-Manager$">
842
+ <description>Lantronix UDS terminal server</description>
843
+ <example>Lantronix WEB-Manager</example>
844
+ <param pos="0" name="hw.vendor" value="Lantronix"/>
845
+ <param pos="0" name="hw.device" value="Device Server"/>
846
+ <param pos="0" name="hw.product" value="UDS"/>
847
+ </fingerprint>
848
+
754
849
  <fingerprint pattern="^(KN\S+) - Cover$">
755
850
  <description>ATEN KVM over IP</description>
756
851
  <example hw.product="KN4140v">KN4140v - Cover</example>
@@ -1173,6 +1268,23 @@
1173
1268
  <param pos="1" name="hw.serial_number"/>
1174
1269
  </fingerprint>
1175
1270
 
1271
+ <fingerprint pattern="^Agilent E5810 \(([a-fA-F0-9-]{17})\)$">
1272
+ <description>Agilent E5810 Instrument Gateway Device</description>
1273
+ <example host.mac="00-30-D3-01-01-01">Agilent E5810 (00-30-D3-01-01-01)</example>
1274
+ <param pos="0" name="hw.vendor" value="Agilent"/>
1275
+ <param pos="0" name="hw.device" value="Test Instrument"/>
1276
+ <param pos="0" name="hw.product" value="E5810 Gateway Device"/>
1277
+ <param pos="1" name="host.mac"/>
1278
+ </fingerprint>
1279
+
1280
+ <fingerprint pattern="^LXI - Agilent Technologies - N1913A - EPM Series Power Meter$">
1281
+ <description>Agilent N1913A EPM Series Power Meter</description>
1282
+ <example>LXI - Agilent Technologies - N1913A - EPM Series Power Meter</example>
1283
+ <param pos="0" name="hw.vendor" value="Agilent"/>
1284
+ <param pos="0" name="hw.device" value="Test Instrument"/>
1285
+ <param pos="0" name="hw.product" value="N1913A Power Meter"/>
1286
+ </fingerprint>
1287
+
1176
1288
  <fingerprint pattern="^Polycom - Configuration Utility$">
1177
1289
  <description>Polycom IP Phone</description>
1178
1290
  <example>Polycom - Configuration Utility</example>
@@ -1206,6 +1318,15 @@
1206
1318
  <param pos="1" name="hw.product"/>
1207
1319
  </fingerprint>
1208
1320
 
1321
+ <fingerprint pattern="^(SPA\S+) Device Information \(SEP(\S+)\)$">
1322
+ <description>Cisco IP Phone - SPA504G</description>
1323
+ <example hw.product="SPA504G" host.mac="0123456789ab">SPA504G Device Information (SEP0123456789ab)</example>
1324
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1325
+ <param pos="0" name="hw.device" value="VoIP"/>
1326
+ <param pos="1" name="hw.product"/>
1327
+ <param pos="2" name="host.mac"/>
1328
+ </fingerprint>
1329
+
1209
1330
  <fingerprint pattern="^Cisco (?:SPA Configuration|IP Phone)$">
1210
1331
  <description>Cisco IP Phone </description>
1211
1332
  <example>Cisco SPA Configuration</example>
@@ -1262,6 +1383,7 @@
1262
1383
  <param pos="0" name="os.device" value="Switch"/>
1263
1384
  <param pos="0" name="os.product" value="MDS 9000"/>
1264
1385
  <param pos="1" name="os.version"/>
1386
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:mds_9000_san-os:{os.version}"/>
1265
1387
  </fingerprint>
1266
1388
 
1267
1389
  <fingerprint pattern="^Stealthwatch Management Console$">
@@ -1322,6 +1444,14 @@
1322
1444
  <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:wireless_lan_controller:-"/>
1323
1445
  </fingerprint>
1324
1446
 
1447
+ <fingerprint pattern="^Cisco ASDM (\S+)$">
1448
+ <description>Cisco Adaptive Security Device Manager Application</description>
1449
+ <example service.version="6.4(7)">Cisco ASDM 6.4(7)</example>
1450
+ <param pos="0" name="service.vendor" value="Cisco"/>
1451
+ <param pos="0" name="service.product" value="ASDM"/>
1452
+ <param pos="1" name="service.version"/>
1453
+ </fingerprint>
1454
+
1325
1455
  <fingerprint pattern="^Duo Access Gateway$">
1326
1456
  <description>Duo Access Gateway</description>
1327
1457
  <example>Duo Access Gateway</example>
@@ -1474,6 +1604,36 @@
1474
1604
  <param pos="0" name="os.product" value="SmartServer"/>
1475
1605
  </fingerprint>
1476
1606
 
1607
+ <!-- Various products by Avocent -->
1608
+
1609
+ <fingerprint pattern="^Avocent AutoView ([^/$]+)">
1610
+ <description>Avocent AutoView KVM</description>
1611
+ <example hw.model="3100">Avocent AutoView 3100/3200</example>
1612
+ <example hw.model="3050">Avocent AutoView 3050</example>
1613
+ <param pos="0" name="hw.vendor" value="Avocent"/>
1614
+ <param pos="0" name="hw.device" value="KVM"/>
1615
+ <param pos="1" name="hw.model"/>
1616
+ <param pos="0" name="hw.product" value="AutoView {hw.model}"/>
1617
+ </fingerprint>
1618
+
1619
+ <!-- Various products by Aerohive -->
1620
+
1621
+ <fingerprint pattern="^Aerohive HiveUI$">
1622
+ <description>Aerohive Access Point</description>
1623
+ <example>Aerohive HiveUI</example>
1624
+ <param pos="0" name="hw.vendor" value="Aerohive"/>
1625
+ <param pos="0" name="hw.device" value="WAP"/>
1626
+ </fingerprint>
1627
+
1628
+ <!-- Various products by Ruckus -->
1629
+
1630
+ <fingerprint pattern="^Ruckus Wireless Admin$">
1631
+ <description>Ruckus Wireless Access Point</description>
1632
+ <example>Ruckus Wireless Admin</example>
1633
+ <param pos="0" name="hw.vendor" value="Ruckus"/>
1634
+ <param pos="0" name="hw.device" value="WAP"/>
1635
+ </fingerprint>
1636
+
1477
1637
  <!-- Various ICS/OT -->
1478
1638
 
1479
1639
  <fingerprint pattern="^CTI (25\S+) Main Menu$">
@@ -1702,7 +1862,7 @@
1702
1862
  <param pos="0" name="service.cpe23" value="cpe:/a:realvnc:realvnc:-"/>
1703
1863
  </fingerprint>
1704
1864
 
1705
- <fingerprint pattern="^.{0,1024} \[Jenkins\]$">
1865
+ <fingerprint pattern="^.{0,1000} \[Jenkins\]$">
1706
1866
  <description>Jenkins Customized Dashboard</description>
1707
1867
  <example>Continuous Integrations [Jenkins]</example>
1708
1868
  <example>Dashboard [Jenkins]</example>
@@ -2044,7 +2204,7 @@
2044
2204
  <description>Pure Storage Appliance</description>
2045
2205
  <example>Pure Storage Login</example>
2046
2206
  <param pos="0" name="hw.vendor" value="Pure Storage"/>
2047
- <param pos="0" name="hw.device" value="NAS"/>
2207
+ <param pos="0" name="hw.device" value="Storage Appliance"/>
2048
2208
  <param pos="0" name="hw.product" value="Appliance"/>
2049
2209
  </fingerprint>
2050
2210
 
@@ -2227,7 +2387,7 @@
2227
2387
  <param pos="0" name="hw.product" value="Network Node"/>
2228
2388
  </fingerprint>
2229
2389
 
2230
- <fingerprint pattern="^(?:S2 Netbox Login|Home - NetBox)$">
2390
+ <fingerprint pattern="^S2 Netbox Login|Home - NetBox$">
2231
2391
  <description>S2 Netbox Appliance</description>
2232
2392
  <example>S2 Netbox Login</example>
2233
2393
  <example>Home - NetBox</example>
@@ -2279,7 +2439,7 @@
2279
2439
  <param pos="0" name="service.cpe23" value="cpe:/a:ibm:tivoli_storage_flashcopy_manager:-"/>
2280
2440
  </fingerprint>
2281
2441
 
2282
- <fingerprint pattern="^(?:Jupyter Notebook|JupyterLab|Home Page - Select or create a notebook)$">
2442
+ <fingerprint pattern="^Jupyter Notebook|JupyterLab|Home Page - Select or create a notebook$">
2283
2443
  <description>Jupyter Notebook Server</description>
2284
2444
  <example>Jupyter Notebook</example>
2285
2445
  <example>JupyterLab</example>
@@ -2324,7 +2484,7 @@
2324
2484
  <param pos="0" name="service.product" value="Network Monitor"/>
2325
2485
  </fingerprint>
2326
2486
 
2327
- <fingerprint pattern="^(?:BrightSign&amp;reg;|BrightSign Applications|Diagnostics Web Server)$">
2487
+ <fingerprint pattern="^BrightSign&amp;reg;|BrightSign Applications|Diagnostics Web Server$">
2328
2488
  <description>BrightSign Controller</description>
2329
2489
  <example>BrightSign&amp;reg;</example>
2330
2490
  <example>BrightSign Applications</example>
@@ -2345,7 +2505,7 @@
2345
2505
  <param pos="0" name="hw.device" value="WAP"/>
2346
2506
  </fingerprint>
2347
2507
 
2348
- <fingerprint pattern="^(?:DD System Manager|System Manager)$">
2508
+ <fingerprint pattern="^DD System Manager|System Manager$">
2349
2509
  <description>Data Domain System Manager</description>
2350
2510
  <example>DD System Manager</example>
2351
2511
  <example>System Manager</example>
@@ -2398,7 +2558,7 @@
2398
2558
  <param pos="0" name="service.cpe23" value="cpe:/a:influxdata:influxdb:2.0"/>
2399
2559
  </fingerprint>
2400
2560
 
2401
- <fingerprint pattern="^(?:Sign in . GitLab|GitLab|GitLab is not responding)$">
2561
+ <fingerprint pattern="^Sign in . GitLab|GitLab|GitLab is not responding$">
2402
2562
  <description>GitLab</description>
2403
2563
  <example>Sign in · GitLab</example>
2404
2564
  <example>GitLab is not responding</example>
@@ -2409,7 +2569,7 @@
2409
2569
  <param pos="0" name="service.cpe23" value="cpe:/a:gitlab:gitlab:-"/>
2410
2570
  </fingerprint>
2411
2571
 
2412
- <fingerprint pattern="^(?:GitHub Enterprise|Setup GitHub Enterprise|GitHub Enterprise preflight check)$">
2572
+ <fingerprint pattern="^GitHub Enterprise|Setup GitHub Enterprise|GitHub Enterprise preflight check$">
2413
2573
  <description>GitHub Enterprise</description>
2414
2574
  <example>GitHub Enterprise</example>
2415
2575
  <example>Setup GitHub Enterprise</example>
@@ -2418,7 +2578,7 @@
2418
2578
  <param pos="0" name="service.product" value="Enterprise"/>
2419
2579
  </fingerprint>
2420
2580
 
2421
- <fingerprint pattern="^(?:SAP NetWeaver Application Server Java|SAP&amp;#x20;NetWeaver&amp;#x20;Portal|Loading Portal\.\.\.)$">
2581
+ <fingerprint pattern="^SAP NetWeaver Application Server Java|SAP&amp;#x20;NetWeaver&amp;#x20;Portal|Loading Portal\.\.\.$">
2422
2582
  <description>SAP NetWeaver Portal</description>
2423
2583
  <example>SAP NetWeaver Application Server Java</example>
2424
2584
  <example>SAP&amp;#x20;NetWeaver&amp;#x20;Portal</example>
@@ -2437,7 +2597,7 @@
2437
2597
  <param pos="0" name="service.cpe23" value="cpe:/a:lansweeper:lansweeper:-"/>
2438
2598
  </fingerprint>
2439
2599
 
2440
- <fingerprint pattern="^(?:Celery Flower|Flower)$">
2600
+ <fingerprint pattern="^Celery Flower|Flower$">
2441
2601
  <description>Celery Flower Dashboard</description>
2442
2602
  <example>Celery Flower</example>
2443
2603
  <example>Flower</example>
@@ -2577,7 +2737,7 @@
2577
2737
  <param pos="0" name="service.cpe23" value="cpe:/a:apache:flink:-"/>
2578
2738
  </fingerprint>
2579
2739
 
2580
- <fingerprint pattern="^(?:Twonky|Twonky Server|TwonkyMedia|TwonkyMedia server media browser)$">
2740
+ <fingerprint pattern="^Twonky|Twonky Server|TwonkyMedia|TwonkyMedia server media browser$">
2581
2741
  <description>Twonky Server</description>
2582
2742
  <example>Twonky</example>
2583
2743
  <example>Twonky Server</example>
@@ -2622,7 +2782,7 @@
2622
2782
  <param pos="0" name="service.cpe23" value="cpe:/a:sabnzbd:sabnzbd:-"/>
2623
2783
  </fingerprint>
2624
2784
 
2625
- <fingerprint pattern="^(?:Zabbix|.*: Zabbix)$">
2785
+ <fingerprint pattern="^Zabbix|.*: Zabbix$">
2626
2786
  <description>Zabbix</description>
2627
2787
  <example>Zabbix</example>
2628
2788
  <example>appliance: Zabbix</example>
@@ -2644,7 +2804,7 @@
2644
2804
  <param pos="0" name="os.cpe23" value="cpe:/o:dd-wrt:dd-wrt:{os.version}"/>
2645
2805
  </fingerprint>
2646
2806
 
2647
- <fingerprint pattern="^(?:Apache Druid|Druid Console|Legacy Coordinator Console)$">
2807
+ <fingerprint pattern="^Apache Druid|Druid Console|Legacy Coordinator Console$">
2648
2808
  <description>Apache Druid</description>
2649
2809
  <example>Apache Druid</example>
2650
2810
  <example>Legacy Coordinator Console</example>
@@ -2731,7 +2891,7 @@
2731
2891
  <example>Rundeck - Login</example>
2732
2892
  <param pos="0" name="service.vendor" value="Rundeck"/>
2733
2893
  <param pos="0" name="service.product" value="Rundeck"/>
2734
- <param pos="0" name="service.cpe23" value="cpe:/a:rundeck:rundeck:-"/>
2894
+ <param pos="0" name="service.cpe23" value="cpe:/a:pagerduty:rundeck:-"/>
2735
2895
  </fingerprint>
2736
2896
 
2737
2897
  <fingerprint pattern="^CrushFTP WebInterface$">
@@ -2854,7 +3014,7 @@
2854
3014
  <param pos="0" name="service.cpe23" value="cpe:/a:solarwinds:virtualization_manager:-"/>
2855
3015
  </fingerprint>
2856
3016
 
2857
- <fingerprint pattern="^(?:Gitea: .*|LocalRepo|TurnKey Gitea)$">
3017
+ <fingerprint pattern="^Gitea: .*|LocalRepo|TurnKey Gitea$">
2858
3018
  <description>Gitea</description>
2859
3019
  <example>Gitea: Git with a cup of tea</example>
2860
3020
  <example>TurnKey Gitea</example>
@@ -2942,7 +3102,7 @@
2942
3102
  <param pos="0" name="service.cpe23" value="cpe:/a:rstudio:connect:-"/>
2943
3103
  </fingerprint>
2944
3104
 
2945
- <fingerprint pattern="^(?:TurnKey Moodle|New Site)$">
3105
+ <fingerprint pattern="^TurnKey Moodle|New Site$">
2946
3106
  <description>Moodle</description>
2947
3107
  <example>TurnKey Moodle</example>
2948
3108
  <example>New Site</example>
@@ -2969,7 +3129,7 @@
2969
3129
  <example>Log In - Confluence</example>
2970
3130
  <param pos="0" name="service.vendor" value="Atlassian"/>
2971
3131
  <param pos="0" name="service.product" value="Confluence"/>
2972
- <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:confluence:-"/>
3132
+ <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:confluence_server:-"/>
2973
3133
  </fingerprint>
2974
3134
 
2975
3135
  <fingerprint pattern="^System Dashboard - ">
@@ -2981,7 +3141,7 @@
2981
3141
  <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:jira:-"/>
2982
3142
  </fingerprint>
2983
3143
 
2984
- <fingerprint pattern="^(?:Welcome to XAMPP|XAMPP for Linux)">
3144
+ <fingerprint pattern="^Welcome to XAMPP|XAMPP for Linux">
2985
3145
  <description>XAMPP Server</description>
2986
3146
  <example>Welcome to XAMPP</example>
2987
3147
  <example>XAMPP for Linux</example>
@@ -3006,7 +3166,7 @@
3006
3166
  <param pos="0" name="service.cpe23" value="cpe:/a:kodi:kodi:-"/>
3007
3167
  </fingerprint>
3008
3168
 
3009
- <fingerprint pattern="^(?:Drupal|TurnKey Drupal\d+|Select an installation profile)$">
3169
+ <fingerprint pattern="^Drupal|TurnKey Drupal\d+|Select an installation profile$">
3010
3170
  <description>Drupal CMS</description>
3011
3171
  <example>Drupal</example>
3012
3172
  <example>TurnKey Drupal8</example>
@@ -3086,9 +3246,9 @@
3086
3246
  <param pos="0" name="service.product" value="Media Server"/>
3087
3247
  </fingerprint>
3088
3248
 
3089
- <fingerprint pattern="^proxmox - Proxmox Virtual Environment$">
3249
+ <fingerprint pattern="^.{1,256} - Proxmox Virtual Environment$">
3090
3250
  <description>Proxmox open-source virtualization platform</description>
3091
- <example>proxmox - Proxmox Virtual Environment</example>
3251
+ <example>hypervisor - Proxmox Virtual Environment</example>
3092
3252
  <param pos="0" name="service.vendor" value="Proxmox"/>
3093
3253
  <param pos="0" name="service.product" value="Virtual Environment"/>
3094
3254
  <param pos="0" name="service.cpe23" value="cpe:/a:proxmox:virtual_environment:-"/>
@@ -3108,7 +3268,7 @@
3108
3268
  <fingerprint pattern="Lifesize&amp;reg;$">
3109
3269
  <description>Lifesize TelePresence</description>
3110
3270
  <example>Lifesize&amp;reg;</example>
3111
- <example>400 - Bad Request Lifesize&amp;reg;</example>
3271
+ <example>400 - Bad Request Lifesize&amp;reg;</example>
3112
3272
  <param pos="0" name="hw.vendor" value="Lifesize"/>
3113
3273
  <param pos="0" name="hw.device" value="Video Conferencing"/>
3114
3274
  <param pos="0" name="hw.product" value="TelePresence"/>
@@ -3247,4 +3407,537 @@
3247
3407
  <param pos="0" name="service.cpe23" value="cpe:/a:moinmo:moinmoin:-"/>
3248
3408
  </fingerprint>
3249
3409
 
3410
+ <fingerprint pattern="^(\w+) - BlackBox Management Console$">
3411
+ <description>BlackBox Management Console</description>
3412
+ <example host.name="ABC123">ABC123 - BlackBox Management Console</example>
3413
+ <param pos="0" name="hw.vendor" value="BlackBox"/>
3414
+ <param pos="0" name="hw.device" value="Device Server"/>
3415
+ <param pos="0" name="hw.product" value="BlackBox"/>
3416
+ <param pos="1" name="host.name"/>
3417
+ </fingerprint>
3418
+
3419
+ <fingerprint pattern="^Shelly Color Bulb$">
3420
+ <description>Shelly Smart Bulb</description>
3421
+ <example>Shelly Color Bulb</example>
3422
+ <param pos="0" name="os.vendor" value="Cesanta"/>
3423
+ <param pos="0" name="os.product" value="Mongoose OS"/>
3424
+ <param pos="0" name="os.cpe23" value="cpe:/o:cesanta:mongoose_os:-"/>
3425
+ <param pos="0" name="hw.vendor" value="Shelly"/>
3426
+ <param pos="0" name="hw.device" value="Light Bulb"/>
3427
+ <param pos="0" name="hw.product" value="Color Bulb"/>
3428
+ </fingerprint>
3429
+
3430
+ <fingerprint pattern="^Shelly (Plug|Dimmer(?: 2)?|Switch)$">
3431
+ <description>Shelly Plug/Dimmer/Switch Devices</description>
3432
+ <example hw.product="Plug">Shelly Plug</example>
3433
+ <example hw.product="Dimmer">Shelly Dimmer</example>
3434
+ <example hw.product="Dimmer 2">Shelly Dimmer 2</example>
3435
+ <example hw.product="Switch">Shelly Switch</example>
3436
+ <param pos="0" name="os.vendor" value="Cesanta"/>
3437
+ <param pos="0" name="os.product" value="Mongoose OS"/>
3438
+ <param pos="0" name="os.cpe23" value="cpe:/o:cesanta:mongoose_os:-"/>
3439
+ <param pos="0" name="hw.vendor" value="Shelly"/>
3440
+ <param pos="0" name="hw.device" value="Device"/>
3441
+ <param pos="1" name="hw.product"/>
3442
+ </fingerprint>
3443
+
3444
+ <fingerprint pattern="^Shelly[ ]?(RGBW2|1L)$">
3445
+ <description>Shelly Lighting Controller</description>
3446
+ <example hw.product="RGBW2">Shelly RGBW2</example>
3447
+ <example hw.product="1L">Shelly1L</example>
3448
+ <param pos="0" name="os.vendor" value="Cesanta"/>
3449
+ <param pos="0" name="os.product" value="Mongoose OS"/>
3450
+ <param pos="0" name="os.cpe23" value="cpe:/o:cesanta:mongoose_os:-"/>
3451
+ <param pos="0" name="hw.vendor" value="Shelly"/>
3452
+ <param pos="0" name="hw.device" value="Device"/>
3453
+ <param pos="1" name="hw.product"/>
3454
+ </fingerprint>
3455
+
3456
+ <fingerprint pattern="^TinyGS Configuration$">
3457
+ <description>TinyGS LoRa Ground Station Software</description>
3458
+ <example>TinyGS Configuration</example>
3459
+ <param pos="0" name="service.product" value="TinyGS"/>
3460
+ </fingerprint>
3461
+
3462
+ <fingerprint pattern="^WLED$">
3463
+ <description>WLED Controlled Device</description>
3464
+ <example>WLED</example>
3465
+ <param pos="0" name="service.vendor" value="Aircookie"/>
3466
+ <param pos="0" name="service.product" value="WLED"/>
3467
+ <param pos="0" name="service.device" value="Device"/>
3468
+ </fingerprint>
3469
+
3470
+ <fingerprint pattern="^Freebox OS (?:.*)$">
3471
+ <description>Freebox OS on Freebox Set-top Box Devices</description>
3472
+ <example>Freebox OS :: Identification</example>
3473
+ <param pos="0" name="os.vendor" value="Freebox"/>
3474
+ <param pos="0" name="os.product" value="Freebox OS"/>
3475
+ <param pos="0" name="hw.vendor" value="Freebox"/>
3476
+ <param pos="0" name="hw.device" value="Device"/>
3477
+ </fingerprint>
3478
+
3479
+ <fingerprint pattern="^HP UPS Network Module$">
3480
+ <description>HP RT3000 G2 UPS</description>
3481
+ <example>HP UPS Network Module</example>
3482
+ <param pos="0" name="hw.vendor" value="HP"/>
3483
+ <param pos="0" name="hw.device" value="UPS"/>
3484
+ </fingerprint>
3485
+
3486
+ <fingerprint pattern="^UniFi Network$">
3487
+ <description>Ubiquiti UniFi Network Application</description>
3488
+ <example>UniFi Network</example>
3489
+ <param pos="0" name="service.vendor" value="Ubiquiti"/>
3490
+ <param pos="0" name="service.product" value="UniFi"/>
3491
+ <param pos="0" name="service.device" value="Device"/>
3492
+ <param pos="0" name="service.cpe23" value="cpe:/a:ui:unifi:-"/>
3493
+ </fingerprint>
3494
+
3495
+ <fingerprint pattern="^Login to AdminDroid Office 365 Reporter$">
3496
+ <description>AdminDroid Office 365 Reporter Application</description>
3497
+ <example>Login to AdminDroid Office 365 Reporter</example>
3498
+ <param pos="0" name="service.vendor" value="AdminDroid"/>
3499
+ <param pos="0" name="service.product" value="Office 365 Reporter"/>
3500
+ </fingerprint>
3501
+
3502
+ <fingerprint pattern="^Nanoleaf Firmware Upload$">
3503
+ <description>Nanoleaf LED Lighting</description>
3504
+ <example>Nanoleaf Firmware Upload</example>
3505
+ <param pos="0" name="hw.vendor" value="Nanoleaf"/>
3506
+ <param pos="0" name="hw.device" value="Device"/>
3507
+ </fingerprint>
3508
+
3509
+ <fingerprint pattern="^GoGogate - LAN$">
3510
+ <description>GoGogate Garage Door Opener</description>
3511
+ <example>GoGogate - LAN</example>
3512
+ <param pos="0" name="hw.vendor" value="GoGogate"/>
3513
+ <param pos="0" name="hw.device" value="Device"/>
3514
+ </fingerprint>
3515
+
3516
+ <fingerprint pattern="^ASUS Login$">
3517
+ <description>ASUS Router/Network Device</description>
3518
+ <example>ASUS Login</example>
3519
+ <param pos="0" name="hw.vendor" value="Asus"/>
3520
+ <param pos="0" name="hw.device" value="Device"/>
3521
+ </fingerprint>
3522
+
3523
+ <fingerprint pattern="^GigaBlue Quad Plus - OpenWebif$">
3524
+ <description>GigaBlue Quad Plus Satellite TV Receiver</description>
3525
+ <example>GigaBlue Quad Plus - OpenWebif</example>
3526
+ <param pos="0" name="hw.vendor" value="GigaBlue"/>
3527
+ <param pos="0" name="hw.device" value="Device"/>
3528
+ <param pos="0" name="hw.product" value="Quad Plus Receiver"/>
3529
+ </fingerprint>
3530
+
3531
+ <fingerprint pattern="^Barix Instreamer Instreamer$">
3532
+ <description>Barix Instreamer</description>
3533
+ <example>Barix Instreamer Instreamer</example>
3534
+ <param pos="0" name="hw.vendor" value="Barix"/>
3535
+ <param pos="0" name="hw.device" value="Audio Encoder"/>
3536
+ <param pos="0" name="hw.product" value="Instreamer"/>
3537
+ </fingerprint>
3538
+
3539
+ <fingerprint pattern="^Tracker Display$">
3540
+ <description>SpotterRF</description>
3541
+ <example>Tracker Display</example>
3542
+ <param pos="0" name="os.vendor" value="SpotterRF"/>
3543
+ <param pos="0" name="os.family" value="Linux"/>
3544
+ <param pos="0" name="os.certainty" value="0.90"/>
3545
+ <param pos="0" name="hw.vendor" value="SpotterRF"/>
3546
+ <param pos="0" name="hw.device" value="Sensor"/>
3547
+ <param pos="0" name="hw.product" value="Drone Detector"/>
3548
+ </fingerprint>
3549
+
3550
+ <fingerprint pattern="^Polycom (DMA \d+)$">
3551
+ <description>Polycom DMA 7000</description>
3552
+ <example hw.product="DMA 7000">Polycom DMA 7000</example>
3553
+ <param pos="0" name="hw.vendor" value="Polycom"/>
3554
+ <param pos="0" name="hw.device" value="VoIP"/>
3555
+ <param pos="1" name="hw.product"/>
3556
+ </fingerprint>
3557
+
3558
+ <fingerprint pattern="^VVX(\d{3})$">
3559
+ <description>Polycom VVX VoIP Phones</description>
3560
+ <example hw.model="250">VVX250</example>
3561
+ <param pos="0" name="hw.vendor" value="Polycom"/>
3562
+ <param pos="0" name="hw.device" value="VoIP"/>
3563
+ <param pos="1" name="hw.model"/>
3564
+ <param pos="0" name="hw.product" value="VVX {hw.model}"/>
3565
+ </fingerprint>
3566
+
3567
+ <fingerprint pattern="^(OBi[23]\d{2})">
3568
+ <description>Poly OBI Analog Telephone Adapter</description>
3569
+ <example hw.product="OBi200">OBi200</example>
3570
+ <param pos="0" name="hw.vendor" value="Poly"/>
3571
+ <param pos="0" name="hw.device" value="VoIP"/>
3572
+ <param pos="1" name="hw.product"/>
3573
+ </fingerprint>
3574
+
3575
+ <fingerprint pattern="^Alpha Technologies$">
3576
+ <description>Alpha Technologies Novus UPS</description>
3577
+ <example>Alpha Technologies</example>
3578
+ <param pos="0" name="hw.vendor" value="Alpha Technologies"/>
3579
+ <param pos="0" name="hw.device" value="Power Device"/>
3580
+ <param pos="0" name="hw.product" value="Novus UPS"/>
3581
+ </fingerprint>
3582
+
3583
+ <fingerprint pattern="^Network Management Card$">
3584
+ <description>Eaton UPS Network Card</description>
3585
+ <example>Network Management Card</example>
3586
+ <param pos="0" name="hw.vendor" value="Eaton"/>
3587
+ <param pos="0" name="hw.device" value="Power Device"/>
3588
+ <param pos="0" name="hw.product" value="UPS"/>
3589
+ <param pos="0" name="hw.certainty" value="0.5"/>
3590
+ </fingerprint>
3591
+
3592
+ <fingerprint pattern="^UPS Properties$">
3593
+ <description>APC UPS Network Card</description>
3594
+ <example>UPS Properties</example>
3595
+ <param pos="0" name="hw.vendor" value="APC"/>
3596
+ <param pos="0" name="hw.device" value="Power Device"/>
3597
+ <param pos="0" name="hw.product" value="UPS"/>
3598
+ <param pos="0" name="hw.certainty" value="0.5"/>
3599
+ </fingerprint>
3600
+
3601
+ <fingerprint pattern="^HP ([\w ]+) PostScript">
3602
+ <description>HP Printer</description>
3603
+ <example hw.product="Designjet T1200">HP Designjet T1200 PostScript - Supplies</example>
3604
+ <param pos="0" name="hw.vendor" value="HP"/>
3605
+ <param pos="0" name="hw.family" value="JetDirect"/>
3606
+ <param pos="0" name="hw.device" value="Printer"/>
3607
+ <param pos="1" name="hw.product"/>
3608
+ </fingerprint>
3609
+
3610
+ <fingerprint pattern="^Radio Configuration/Diagnostic Utility$">
3611
+ <description>ProSoft RadioLinx</description>
3612
+ <example>Radio Configuration/Diagnostic Utility</example>
3613
+ <param pos="0" name="hw.vendor" value="ProSoft Technology"/>
3614
+ <param pos="0" name="hw.device" value="WAP"/>
3615
+ <param pos="0" name="hw.product" value="RadioLinx"/>
3616
+ <param pos="0" name="hw.certainty" value="0.5"/>
3617
+ </fingerprint>
3618
+
3619
+ <fingerprint pattern="^Welcome to ntopng$">
3620
+ <description>ntopng Network Analysis Application</description>
3621
+ <example>Welcome to ntopng</example>
3622
+ <param pos="0" name="service.vendor" value="ntop"/>
3623
+ <param pos="0" name="service.product" value="ntopng"/>
3624
+ <param pos="0" name="service.cpe23" value="cpe:/a:ntop:ntopng:-"/>
3625
+ </fingerprint>
3626
+
3627
+ <fingerprint pattern="^FreeNAS$">
3628
+ <description>iXsystems FreeNAS</description>
3629
+ <example>FreeNAS</example>
3630
+ <param pos="0" name="service.vendor" value="iXsystems"/>
3631
+ <param pos="0" name="service.product" value="FreeNAS"/>
3632
+ <param pos="0" name="os.vendor" value="iXsystems"/>
3633
+ <param pos="0" name="os.family" value="FreeBSD"/>
3634
+ <param pos="0" name="os.product" value="FreeNAS Firmware"/>
3635
+ <param pos="0" name="os.cpe23" value="cpe:/o:ixsystems:freenas_firmware:-"/>
3636
+ </fingerprint>
3637
+
3638
+ <fingerprint pattern="^Xerox (.{1,1000}) - \d+\.\d+\.\d+\.\d+$">
3639
+ <description>Xerox Color Printer</description>
3640
+ <example hw.product="Color 570">Xerox Color 570 - 100.100.100.101</example>
3641
+ <param pos="0" name="hw.vendor" value="Xerox"/>
3642
+ <param pos="0" name="hw.device" value="Printer"/>
3643
+ <param pos="1" name="hw.product"/>
3644
+ </fingerprint>
3645
+
3646
+ <fingerprint pattern="^Web Smart Switch$">
3647
+ <description>3Com Switch</description>
3648
+ <example>Web Smart Switch</example>
3649
+ <param pos="0" name="hw.vendor" value="3Com"/>
3650
+ <param pos="0" name="hw.device" value="Switch"/>
3651
+ </fingerprint>
3652
+
3653
+ <fingerprint pattern="^(Quantum) - (Scalar i\d+) Login Screen$">
3654
+ <description>Quantum Scalar Tape Library</description>
3655
+ <example hw.vendor="Quantum" hw.product="Scalar i80">Quantum - Scalar i80 Login Screen</example>
3656
+ <param pos="0" name="hw.device" value="Tape Library"/>
3657
+ <param pos="1" name="hw.vendor"/>
3658
+ <param pos="2" name="hw.product"/>
3659
+ </fingerprint>
3660
+
3661
+ <fingerprint pattern="^Printer Administration$">
3662
+ <description>Weidmüller Printer</description>
3663
+ <example>Printer Administration</example>
3664
+ <param pos="0" name="hw.vendor" value="Weidmüller"/>
3665
+ <param pos="0" name="hw.device" value="Printer"/>
3666
+ </fingerprint>
3667
+
3668
+ <fingerprint pattern="^Machine Identification - (MX-\S+)$">
3669
+ <description>Sharp MX Printer</description>
3670
+ <example hw.product="MX-3071">Machine Identification - MX-3071</example>
3671
+ <param pos="0" name="hw.vendor" value="Sharp"/>
3672
+ <param pos="0" name="hw.device" value="Printer"/>
3673
+ <param pos="1" name="hw.product"/>
3674
+ </fingerprint>
3675
+
3676
+ <fingerprint pattern="^Remote UI: Login: (MF\S+):">
3677
+ <description>Canon MF Printer</description>
3678
+ <example hw.product="MF632C/634C">Remote UI: Login: MF632C/634C: MF632C/634C</example>
3679
+ <param pos="0" name="hw.vendor" value="Canon"/>
3680
+ <param pos="0" name="hw.device" value="Printer"/>
3681
+ <param pos="1" name="hw.product"/>
3682
+ <param pos="0" name="hw.certainty" value="0.8"/>
3683
+ </fingerprint>
3684
+
3685
+ <fingerprint pattern="^Network Video Recorder Login$">
3686
+ <description>Nuuo NVR</description>
3687
+ <example>Network Video Recorder Login</example>
3688
+ <param pos="0" name="hw.vendor" value="Nuuo"/>
3689
+ <param pos="0" name="hw.device" value="DVR"/>
3690
+ </fingerprint>
3691
+
3692
+ <fingerprint pattern="^Evolis Printer$">
3693
+ <description>Evolis Printer</description>
3694
+ <example>Evolis Printer</example>
3695
+ <param pos="0" name="hw.vendor" value="Evolis"/>
3696
+ <param pos="0" name="hw.device" value="Printer"/>
3697
+ </fingerprint>
3698
+
3699
+ <fingerprint pattern="^WyzeOutdoorPlug - ">
3700
+ <description>Wyze Plug Outdoor</description>
3701
+ <example>WyzeOutdoorPlug - Main Menu</example>
3702
+ <param pos="0" name="hw.vendor" value="Wyze"/>
3703
+ <param pos="0" name="hw.device" value="Device"/>
3704
+ <param pos="0" name="hw.product" value="Plug Outdoor"/>
3705
+ </fingerprint>
3706
+
3707
+ <fingerprint pattern="^Aptinex IOT Relay Module - (\d+ Channel) (Rev\S+)?">
3708
+ <description>Aptinex Relay Controller</description>
3709
+ <example aptinex.model="4 Channel" os.version="Rev1.1">Aptinex IOT Relay Module - 4 Channel Rev1.1</example>
3710
+ <param pos="0" name="os.vendor" value="Aptinex"/>
3711
+ <param pos="0" name="hw.vendor" value="Aptinex"/>
3712
+ <param pos="0" name="hw.device" value="Relay Controller"/>
3713
+ <param pos="0" name="hw.product" value="{aptinex.model} Relay Controller"/>
3714
+ <param pos="1" name="aptinex.model"/>
3715
+ <param pos="2" name="os.version"/>
3716
+ </fingerprint>
3717
+
3718
+ <fingerprint pattern="^Diagnoser - Bobcatminer Diagnostic Dashboard$">
3719
+ <description>Bobcat Helium Miner</description>
3720
+ <example>Diagnoser - Bobcatminer Diagnostic Dashboard</example>
3721
+ <param pos="0" name="hw.vendor" value="Bobcat"/>
3722
+ <param pos="0" name="hw.device" value="Device"/>
3723
+ <param pos="0" name="hw.product" value="Helium Miner"/>
3724
+ </fingerprint>
3725
+
3726
+ <fingerprint pattern="^LORIX Manager$">
3727
+ <description>Wifx LORIX One</description>
3728
+ <example>LORIX Manager</example>
3729
+ <param pos="0" name="os.vendor" value="Wifx"/>
3730
+ <param pos="0" name="os.product" value="LORIX OS"/>
3731
+ <param pos="0" name="hw.vendor" value="Wifx"/>
3732
+ <param pos="0" name="hw.device" value="Device"/>
3733
+ <param pos="0" name="hw.product" value="LORIX ONE"/>
3734
+ </fingerprint>
3735
+
3736
+ <fingerprint pattern="^ETERNUS$">
3737
+ <description>Fujitsu ETERNUS Storage Appliance</description>
3738
+ <example>ETERNUS</example>
3739
+ <param pos="0" name="hw.vendor" value="Fujitsu"/>
3740
+ <param pos="0" name="hw.device" value="Storage Appliance"/>
3741
+ <param pos="0" name="hw.product" value="Eternus"/>
3742
+ </fingerprint>
3743
+
3744
+ <fingerprint pattern="^Covenant - Login$">
3745
+ <description>Covenant .NET C2 framework</description>
3746
+ <example>Covenant - Login</example>
3747
+ <param pos="0" name="service.product" value="Covenant"/>
3748
+ </fingerprint>
3749
+
3750
+ <fingerprint pattern="^Login \| CALDERA$">
3751
+ <description>MITRE CALDERA C2 framework</description>
3752
+ <example>Login | CALDERA</example>
3753
+ <param pos="0" name="service.vendor" value="MITRE"/>
3754
+ <param pos="0" name="service.product" value="CALDERA"/>
3755
+ <param pos="0" name="service.cpe23" value="cpe:/a:mitre:caldera:-"/>
3756
+ </fingerprint>
3757
+
3758
+ <fingerprint pattern="(?:(\S{1,512}):\d{1,5} / \S{1,512} \| )?phpMyAdmin(?: ([\d.]+(?:-[a-zA-Z0-9]+)?(?:\+\d{8}\.[a-f0-9]{4,40})?))?">
3759
+ <description>phpMyAdmin web interface for MySQL and MariaDB</description>
3760
+ <example>phpMyAdmin</example>
3761
+ <example service.version="2.10.0.2">phpMyAdmin 2.10.0.2</example>
3762
+ <example service.version="5.0.0-rc1">phpMyAdmin 5.0.0-rc1</example>
3763
+ <example service.version="5.3.0-dev">phpMyAdmin 5.3.0-dev</example>
3764
+ <example host.name="10.10.10.10" service.version="5.0.4">10.10.10.10:8080 / db.foo.bar | phpMyAdmin 5.0.4</example>
3765
+ <example host.name="localhost" service.version="5.3.0-dev+20220208.47252f9cf8">localhost:8080 / mysql-server | phpMyAdmin 5.3.0-dev+20220208.47252f9cf8</example>
3766
+ <example host.name="[::ffff:10.10.10.10]" service.version="5.3.0-dev+20220208.47252f9cf8">[::ffff:10.10.10.10]:8080 / mysql-server | phpMyAdmin 5.3.0-dev+20220208.47252f9cf8</example>
3767
+ <param pos="0" name="service.vendor" value="phpMyAdmin"/>
3768
+ <param pos="0" name="service.product" value="phpMyAdmin"/>
3769
+ <param pos="1" name="host.name"/>
3770
+ <param pos="2" name="service.version"/>
3771
+ <param pos="0" name="service.cpe23" value="cpe:/a:phpmyadmin:phpmyadmin:{service.version}"/>
3772
+ </fingerprint>
3773
+
3774
+ <fingerprint pattern="^Login - Adminer$">
3775
+ <description>Adminer database management tool</description>
3776
+ <example>Login - Adminer</example>
3777
+ <param pos="0" name="service.vendor" value="Adminer"/>
3778
+ <param pos="0" name="service.product" value="Adminer"/>
3779
+ <param pos="0" name="service.cpe23" value="cpe:/a:adminer:adminer:-"/>
3780
+ </fingerprint>
3781
+
3782
+ <fingerprint pattern="^Home - Mongo Express$">
3783
+ <description>mongo-express web-based MongoDB admin interface</description>
3784
+ <example>Home - Mongo Express</example>
3785
+ <param pos="0" name="service.vendor" value="mongo-express Project"/>
3786
+ <param pos="0" name="service.product" value="mongo-express"/>
3787
+ <param pos="0" name="service.cpe23" value="cpe:/a:mongo-express_project:mongo-express:-"/>
3788
+ </fingerprint>
3789
+
3790
+ <fingerprint pattern="^Solr Admin$">
3791
+ <description>Apache Solr</description>
3792
+ <example>Solr Admin</example>
3793
+ <param pos="0" name="service.vendor" value="Apache"/>
3794
+ <param pos="0" name="service.product" value="Solr"/>
3795
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:solr:-"/>
3796
+ </fingerprint>
3797
+
3798
+ <fingerprint pattern="^Spark (?:Master|Worker) at (?:spark:\/\/)?(\S{1,512}):\d{1,5}$">
3799
+ <description>Apache Spark</description>
3800
+ <example host.name="spark-master-0.foo.bar">Spark Master at spark://spark-master-0.foo.bar:7077</example>
3801
+ <example host.name="10.10.10.10">Spark Master at spark://10.10.10.10:7077</example>
3802
+ <example host.name="10.10.10.10">Spark Worker at 10.10.10.10:45339</example>
3803
+ <param pos="0" name="service.vendor" value="Apache"/>
3804
+ <param pos="0" name="service.product" value="Spark"/>
3805
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:spark:-"/>
3806
+ <param pos="1" name="host.name"/>
3807
+ </fingerprint>
3808
+
3809
+ <fingerprint pattern="^pfSense - Login$">
3810
+ <description>pfSense Firewall</description>
3811
+ <example>pfSense - Login</example>
3812
+ <param pos="0" name="service.vendor" value="pfSense"/>
3813
+ <param pos="0" name="service.product" value="pfSense"/>
3814
+ <param pos="0" name="service.device" value="Firewall"/>
3815
+ <param pos="0" name="service.cpe23" value="cpe:/a:pfsense:pfsense:-"/>
3816
+ <param pos="0" name="service.component.vendor" value="nginx"/>
3817
+ <param pos="0" name="service.component.product" value="nginx"/>
3818
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:f5:nginx:-"/>
3819
+ <param pos="0" name="os.vendor" value="pfSense"/>
3820
+ <param pos="0" name="os.product" value="FreeBSD"/>
3821
+ </fingerprint>
3822
+
3823
+ <fingerprint pattern="^Netgate pfSense Plus - Login$">
3824
+ <description>pfSense Plus Firewall</description>
3825
+ <example>Netgate pfSense Plus - Login</example>
3826
+ <param pos="0" name="service.vendor" value="Netgate"/>
3827
+ <param pos="0" name="service.product" value="pfSense"/>
3828
+ <param pos="0" name="service.device" value="Firewall"/>
3829
+ <param pos="0" name="service.cpe23" value="cpe:/a:netgate:pfsense:-"/>
3830
+ <param pos="0" name="service.component.vendor" value="nginx"/>
3831
+ <param pos="0" name="service.component.product" value="nginx"/>
3832
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:f5:nginx:-"/>
3833
+ <param pos="0" name="os.vendor" value="pfSense"/>
3834
+ <param pos="0" name="os.product" value="FreeBSD"/>
3835
+ </fingerprint>
3836
+
3837
+ <fingerprint pattern="^Vigor Login Page$">
3838
+ <description>DrayTek Vigor network equipment - without model or version</description>
3839
+ <example>Vigor Login Page</example>
3840
+ <param pos="0" name="os.vendor" value="DrayTek"/>
3841
+ <param pos="0" name="os.family" value="Vigor"/>
3842
+ <param pos="0" name="hw.vendor" value="DrayTek"/>
3843
+ <param pos="0" name="hw.family" value="Vigor"/>
3844
+ </fingerprint>
3845
+
3846
+ <fingerprint pattern="^WSO2 API Manager|\[Publisher Portal\]WSO2 APIM$">
3847
+ <description>WSO2 API Manager</description>
3848
+ <example>WSO2 API Manager</example>
3849
+ <example>[Publisher Portal]WSO2 APIM</example>
3850
+ <param pos="0" name="service.vendor" value="WSO2"/>
3851
+ <param pos="0" name="service.product" value="API Manager"/>
3852
+ <param pos="0" name="service.cpe23" value="cpe:/a:wso2:api_manager:-"/>
3853
+ <param pos="0" name="service.component.vendor" value="WSO2"/>
3854
+ <param pos="0" name="service.component.product" value="Carbon"/>
3855
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:wso2:carbon:-"/>
3856
+ </fingerprint>
3857
+
3858
+ <fingerprint pattern="^WSO2 Management Console$">
3859
+ <description>WSO2 Identity Server</description>
3860
+ <example>WSO2 Management Console</example>
3861
+ <param pos="0" name="service.vendor" value="WSO2"/>
3862
+ <param pos="0" name="service.product" value="Identity Server"/>
3863
+ <param pos="0" name="service.cpe23" value="cpe:/a:wso2:identity_server:-"/>
3864
+ <param pos="0" name="service.component.vendor" value="WSO2"/>
3865
+ <param pos="0" name="service.component.product" value="Carbon"/>
3866
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:wso2:carbon:-"/>
3867
+ </fingerprint>
3868
+
3869
+ <fingerprint pattern="^WSO2 Enterprise Integrator \(WSO2 EI\)$">
3870
+ <description>WSO2 Enterprise Integrator</description>
3871
+ <example>WSO2 Enterprise Integrator (WSO2 EI)</example>
3872
+ <param pos="0" name="service.vendor" value="WSO2"/>
3873
+ <param pos="0" name="service.product" value="Enterprise Integrator"/>
3874
+ <param pos="0" name="service.cpe23" value="cpe:/a:wso2:enterprise_integrator:-"/>
3875
+ <param pos="0" name="service.component.vendor" value="WSO2"/>
3876
+ <param pos="0" name="service.component.product" value="Carbon"/>
3877
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:wso2:carbon:-"/>
3878
+ </fingerprint>
3879
+
3880
+ <fingerprint pattern="^dotCMS Content Management Platform$">
3881
+ <description>dotCMS Content Management Platform</description>
3882
+ <example>dotCMS Content Management Platform</example>
3883
+ <param pos="0" name="service.vendor" value="dotCMS"/>
3884
+ <param pos="0" name="service.product" value="dotCMS"/>
3885
+ <param pos="0" name="service.cpe23" value="cpe:/a:dotcms:dotcms:-"/>
3886
+ </fingerprint>
3887
+
3888
+ <!-- Specific Eltex fingerprints to enable CPE generation -->
3889
+
3890
+ <fingerprint pattern="^Eltex - NTP-RG-1402G$">
3891
+ <description>Eltex - NTP-RG-1402G broadband router</description>
3892
+ <example>Eltex - NTP-RG-1402G</example>
3893
+ <param pos="0" name="os.vendor" value="Eltex"/>
3894
+ <param pos="0" name="os.product" value="NTP-RG-1402G Firmware"/>
3895
+ <param pos="0" name="os.device" value="Broadband Router"/>
3896
+ <param pos="0" name="os.cpe23" value="cpe:/o:eltex-co:ntp-rg-1402g_firmware:-"/>
3897
+ <param pos="0" name="hw.vendor" value="Eltex"/>
3898
+ <param pos="0" name="hw.product" value="NTP-RG-1402G"/>
3899
+ <param pos="0" name="hw.device" value="Broadband Router"/>
3900
+ <param pos="0" name="hw.cpe23" value="cpe:/h:eltex-co:ntp-rg-1402g:-"/>
3901
+ </fingerprint>
3902
+
3903
+ <fingerprint pattern="^Eltex - NTP-2$">
3904
+ <description>Eltex - NTP-2 broadband router</description>
3905
+ <example>Eltex - NTP-2</example>
3906
+ <param pos="0" name="os.vendor" value="Eltex"/>
3907
+ <param pos="0" name="os.product" value="NTP-2 Firmware"/>
3908
+ <param pos="0" name="os.device" value="Broadband Router"/>
3909
+ <param pos="0" name="os.cpe23" value="cpe:/o:eltex-co:ntp-2_firmware:-"/>
3910
+ <param pos="0" name="hw.vendor" value="Eltex"/>
3911
+ <param pos="0" name="hw.product" value="NTP-2"/>
3912
+ <param pos="0" name="hw.device" value="Broadband Router"/>
3913
+ <param pos="0" name="hw.cpe23" value="cpe:/h:eltex-co:ntp-2:-"/>
3914
+ </fingerprint>
3915
+
3916
+ <!-- General Eltex fingerprints -->
3917
+
3918
+ <fingerprint pattern="^Eltex - (NT[PU]-RG-\d[\w-]+):?(:?rev\.\w\w?)?$">
3919
+ <description>Eltex RG model ONT class broadband router</description>
3920
+ <example hw.product="NTU-RG-1402G-W">Eltex - NTU-RG-1402G-W</example>
3921
+ <example hw.product="NTU-RG-1421G-Wac" hw.version="rev.A1">Eltex - NTU-RG-1421G-Wac:rev.A1</example>
3922
+ <example hw.product="NTP-RG-1402G-W" hw.version="rev.C">Eltex - NTP-RG-1402G-W:rev.C</example>
3923
+ <param pos="0" name="os.vendor" value="Eltex"/>
3924
+ <param pos="0" name="os.device" value="Broadband Router"/>
3925
+ <param pos="0" name="hw.vendor" value="Eltex"/>
3926
+ <param pos="1" name="hw.product"/>
3927
+ <param pos="2" name="hw.version"/>
3928
+ <param pos="0" name="hw.device" value="Broadband Router"/>
3929
+ </fingerprint>
3930
+
3931
+ <fingerprint pattern="^Eltex - (NT[PU]-2\w\w?)$">
3932
+ <description>Eltex - NTP / NTU model broadband router</description>
3933
+ <example hw.product="NTU-2V">Eltex - NTU-2V</example>
3934
+ <example hw.product="NTU-2VC">Eltex - NTU-2VC</example>
3935
+ <example hw.product="NTP-2C">Eltex - NTP-2C</example>
3936
+ <param pos="0" name="os.vendor" value="Eltex"/>
3937
+ <param pos="0" name="os.device" value="Broadband Router"/>
3938
+ <param pos="0" name="hw.vendor" value="Eltex"/>
3939
+ <param pos="1" name="hw.product"/>
3940
+ <param pos="0" name="hw.device" value="Broadband Router"/>
3941
+ </fingerprint>
3942
+
3250
3943
  </fingerprints>