recog 2.3.6 → 2.3.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (81) hide show
  1. checksums.yaml +4 -4
  2. data/.gitignore +17 -5
  3. data/.ruby-gemset +1 -0
  4. data/.ruby-version +1 -0
  5. data/.travis.yml +2 -4
  6. data/CONTRIBUTING.md +136 -37
  7. data/Gemfile +2 -5
  8. data/README.md +34 -29
  9. data/bin/recog_cleanup +16 -0
  10. data/bin/recog_standardize +142 -0
  11. data/cpe-remap.yaml +20 -0
  12. data/features/match.feature +4 -0
  13. data/features/support/aruba.rb +3 -0
  14. data/features/verify.feature +5 -0
  15. data/identifiers/README.md +56 -0
  16. data/identifiers/hw_device.txt +77 -0
  17. data/identifiers/hw_family.txt +96 -0
  18. data/identifiers/hw_product.txt +328 -0
  19. data/identifiers/os_architecture.txt +20 -0
  20. data/identifiers/os_device.txt +94 -0
  21. data/identifiers/os_family.txt +325 -0
  22. data/identifiers/os_product.txt +420 -0
  23. data/identifiers/service_family.txt +272 -0
  24. data/identifiers/service_product.txt +557 -0
  25. data/identifiers/software_class.txt +26 -0
  26. data/identifiers/software_family.txt +91 -0
  27. data/identifiers/software_product.txt +333 -0
  28. data/identifiers/vendor.txt +891 -0
  29. data/lib/recog/version.rb +1 -1
  30. data/requirements.txt +1 -1
  31. data/spec/lib/fingerprint_self_test_spec.rb +1 -1
  32. data/spec/lib/recog/fingerprint/regexp_factory_spec.rb +1 -1
  33. data/update_cpes.py +4 -1
  34. data/xml/apache_modules.xml +292 -5
  35. data/xml/apache_os.xml +50 -2
  36. data/xml/architecture.xml +19 -7
  37. data/xml/dns_versionbind.xml +215 -11
  38. data/xml/favicons.xml +1701 -0
  39. data/xml/ftp_banners.xml +225 -12
  40. data/xml/h323_callresp.xml +112 -12
  41. data/xml/hp_pjl_id.xml +47 -5
  42. data/xml/html_title.xml +2371 -17
  43. data/xml/http_cookies.xml +82 -7
  44. data/xml/http_servers.xml +863 -43
  45. data/xml/http_wwwauth.xml +154 -27
  46. data/xml/imap_banners.xml +19 -13
  47. data/xml/ldap_searchresult.xml +81 -9
  48. data/xml/mdns_device-info_txt.xml +194 -17
  49. data/xml/mdns_workstation_txt.xml +4 -2
  50. data/xml/mysql_banners.xml +554 -45
  51. data/xml/mysql_error.xml +113 -6
  52. data/xml/nntp_banners.xml +10 -2
  53. data/xml/ntp_banners.xml +95 -11
  54. data/xml/operating_system.xml +90 -3
  55. data/xml/pop_banners.xml +30 -31
  56. data/xml/rsh_resp.xml +11 -2
  57. data/xml/rtsp_servers.xml +96 -0
  58. data/xml/sip_banners.xml +192 -17
  59. data/xml/sip_user_agents.xml +69 -3
  60. data/xml/smb_native_lm.xml +10 -2
  61. data/xml/smb_native_os.xml +80 -2
  62. data/xml/smtp_banners.xml +166 -9
  63. data/xml/smtp_debug.xml +6 -4
  64. data/xml/smtp_ehlo.xml +7 -5
  65. data/xml/smtp_expn.xml +13 -4
  66. data/xml/smtp_help.xml +23 -4
  67. data/xml/smtp_mailfrom.xml +5 -2
  68. data/xml/smtp_noop.xml +6 -5
  69. data/xml/smtp_quit.xml +5 -4
  70. data/xml/smtp_rcptto.xml +5 -2
  71. data/xml/smtp_rset.xml +4 -4
  72. data/xml/smtp_turn.xml +4 -4
  73. data/xml/smtp_vrfy.xml +14 -4
  74. data/xml/snmp_sysdescr.xml +863 -122
  75. data/xml/snmp_sysobjid.xml +47 -2
  76. data/xml/ssh_banners.xml +253 -78
  77. data/xml/telnet_banners.xml +419 -14
  78. data/xml/x11_banners.xml +27 -4
  79. data/xml/x509_issuers.xml +39 -15
  80. data/xml/x509_subjects.xml +545 -64
  81. metadata +30 -6
data/xml/snmp_sysobjid.xml CHANGED
@@ -1,15 +1,18 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
1
+ <?xml version='1.0' encoding='UTF-8'?>
2
2
  <fingerprints matches="snmp.sys_object_id" protocol="snmp" database_type="service">
3
3
  <!--
4
4
  SNMP fingerprint definitions for SysObjectIDs. These are matched against the value of the
5
5
  'sysObjectID' (OID 1.3.6.1.2.1.1.2) variable.
6
6
  -->
7
+
7
8
  <!--======================================================================
8
9
  MICROSOFT
9
10
  =======================================================================-->
11
+
10
12
  <!--
11
13
  These are baseline patterns that map to sysObjectID with their associated sysDescr.
12
14
  -->
15
+
13
16
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.[23] Hardware: x86.*Software: Windows NT Version 4\.0.*$">
14
17
  <description>Windows NT 4 on x86</description>
15
18
  <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: x86 Family 6 Model 8 Stepping 3 AT/AT COMPATIBLE - Software: Windows NT Version 4.0 (Build Number: 1381 Uniprocessor Free )</example>
@@ -21,6 +24,7 @@
21
24
  <param pos="0" name="os.arch" value="x86"/>
22
25
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_nt:4.0"/>
23
26
  </fingerprint>
27
+
24
28
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows 2000 Version 5\.0.*$">
25
29
  <description>Windows 2000 on x86</description>
26
30
  <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: x86 Family 15 Model 4 Stepping 8 AT/AT COMPATIBLE - Software: Windows 2000 Version 5.0 (Build 2195 Uniprocessor Free)</example>
@@ -30,6 +34,7 @@
30
34
  <param pos="0" name="os.arch" value="x86"/>
31
35
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_2000:-"/>
32
36
  </fingerprint>
37
+
33
38
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows 2000 Version 5\.0.*$">
34
39
  <description>Windows 2000 Datacenter on x86</description>
35
40
  <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: x86 Family 15 Model 4 Stepping 8 AT/AT COMPATIBLE - Software: Windows 2000 Version 5.0 (Build 2195 Uniprocessor Free)</example>
@@ -39,6 +44,7 @@
39
44
  <param pos="0" name="os.arch" value="x86"/>
40
45
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_2000:-"/>
41
46
  </fingerprint>
47
+
42
48
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 5\.2.*$">
43
49
  <description>Windows Server 2003 on x86</description>
44
50
  <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: x86 Family 15 Model 4 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 5.2 (Build 3790 Multiprocessor Free)</example>
@@ -48,6 +54,7 @@
48
54
  <param pos="0" name="os.arch" value="x86"/>
49
55
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
50
56
  </fingerprint>
57
+
51
58
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 5\.2.*$">
52
59
  <description>Windows Server 2003 Datacenter on x86</description>
53
60
  <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: x86 Family 15 Model 4 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 5.2 (Build 3790 Multiprocessor Free)</example>
@@ -57,6 +64,7 @@
57
64
  <param pos="0" name="os.arch" value="x86"/>
58
65
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
59
66
  </fingerprint>
67
+
60
68
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 5\.2.*$">
61
69
  <description>Windows Server 2003 on x86_64</description>
62
70
  <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: AMD64 Family 15 Model 4 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 5.2 (Build 3790 Multiprocessor Free)</example>
@@ -67,6 +75,7 @@
67
75
  <param pos="0" name="os.arch" value="x86_64"/>
68
76
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
69
77
  </fingerprint>
78
+
70
79
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 5\.2.*$">
71
80
  <description>Windows Server 2003 Datacenter on x86_64</description>
72
81
  <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: AMD64 Family 15 Model 4 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 5.2 (Build 3790 Multiprocessor Free)</example>
@@ -77,6 +86,7 @@
77
86
  <param pos="0" name="os.arch" value="x86_64"/>
78
87
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
79
88
  </fingerprint>
89
+
80
90
  <fingerprint pattern="^Microsoft Windows CE Version ([\d.]+).*$">
81
91
  <description>Windows CE</description>
82
92
  <example>Microsoft Windows CE Version 4.20 (Build 0)</example>
@@ -87,6 +97,7 @@
87
97
  <param pos="1" name="os.version"/>
88
98
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_ce:{os.version}"/>
89
99
  </fingerprint>
100
+
90
101
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 6\.0 \(Build 6001.*$">
91
102
  <description>Windows Server 2008 on x86</description>
92
103
  <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: x86 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6001 Multiprocessor Free)</example>
@@ -96,6 +107,7 @@
96
107
  <param pos="0" name="os.arch" value="x86"/>
97
108
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
98
109
  </fingerprint>
110
+
99
111
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 6\.0 \(Build 6001.*$">
100
112
  <description>Windows Server 2008 Datacenter on x86</description>
101
113
  <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: x86 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6001 Multiprocessor Free)</example>
@@ -105,6 +117,7 @@
105
117
  <param pos="0" name="os.arch" value="x86"/>
106
118
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
107
119
  </fingerprint>
120
+
108
121
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.0 \(Build 6001.*$">
109
122
  <description>Windows Server 2008 on x86_64</description>
110
123
  <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6001 Multiprocessor Free)</example>
@@ -115,6 +128,7 @@
115
128
  <param pos="0" name="os.arch" value="x86_64"/>
116
129
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
117
130
  </fingerprint>
131
+
118
132
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 6\.0 \(Build 6001.*$">
119
133
  <description>Windows Server 2008 Datacenter on x86_64</description>
120
134
  <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6001 Multiprocessor Free)</example>
@@ -125,6 +139,7 @@
125
139
  <param pos="0" name="os.arch" value="x86_64"/>
126
140
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
127
141
  </fingerprint>
142
+
128
143
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 6\.0 \(Build 6002.*$">
129
144
  <description>Windows Server 2008 SP2 on x86</description>
130
145
  <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: x86 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6002 Multiprocessor Free)</example>
@@ -135,6 +150,7 @@
135
150
  <param pos="0" name="os.arch" value="x86"/>
136
151
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP2"/>
137
152
  </fingerprint>
153
+
138
154
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 6\.0 \(Build 6002.*$">
139
155
  <description>Windows Server 2008 Datacenter SP2 on x86</description>
140
156
  <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: x86 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6002 Multiprocessor Free)</example>
@@ -145,6 +161,7 @@
145
161
  <param pos="0" name="os.arch" value="x86"/>
146
162
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP2"/>
147
163
  </fingerprint>
164
+
148
165
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.0 \(Build 6002.*$">
149
166
  <description>Windows Server 2008 SP2 on x86_64</description>
150
167
  <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6002 Multiprocessor Free)</example>
@@ -156,6 +173,7 @@
156
173
  <param pos="0" name="os.arch" value="x86_64"/>
157
174
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP2"/>
158
175
  </fingerprint>
176
+
159
177
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 6\.0 \(Build 6002.*$">
160
178
  <description>Windows Server 2008 Datacenter SP2 on x86_64</description>
161
179
  <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6002 Multiprocessor Free)</example>
@@ -167,6 +185,7 @@
167
185
  <param pos="0" name="os.arch" value="x86_64"/>
168
186
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP2"/>
169
187
  </fingerprint>
188
+
170
189
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 6\.1 \(Build 7600.*$">
171
190
  <description>Windows Server 2008 R2 on x86</description>
172
191
  <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: x86 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7600 Multiprocessor Free)</example>
@@ -176,6 +195,7 @@
176
195
  <param pos="0" name="os.arch" value="x86"/>
177
196
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
178
197
  </fingerprint>
198
+
179
199
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 6\.1 \(Build 7600.*$">
180
200
  <description>Windows Server 2008 Datacenter R2 on x86</description>
181
201
  <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: x86 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7600 Multiprocessor Free)</example>
@@ -185,6 +205,7 @@
185
205
  <param pos="0" name="os.arch" value="x86"/>
186
206
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
187
207
  </fingerprint>
208
+
188
209
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.1 \(Build 7600.*$">
189
210
  <description>Windows Server 2008 R2 on x86_64</description>
190
211
  <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7600 Multiprocessor Free)</example>
@@ -195,6 +216,7 @@
195
216
  <param pos="0" name="os.arch" value="x86_64"/>
196
217
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
197
218
  </fingerprint>
219
+
198
220
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 6\.1 \(Build 7600.*$">
199
221
  <description>Windows Server 2008 Datacenter R2 on x86_64</description>
200
222
  <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7600 Multiprocessor Free)</example>
@@ -205,6 +227,7 @@
205
227
  <param pos="0" name="os.arch" value="x86_64"/>
206
228
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
207
229
  </fingerprint>
230
+
208
231
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: x86.*Software: Windows Version 6\.1 \(Build 7601.*$">
209
232
  <description>Windows Server 2008 R2 SP1 on x86</description>
210
233
  <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: x86 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7601 Multiprocessor Free)</example>
@@ -215,6 +238,7 @@
215
238
  <param pos="0" name="os.arch" value="x86"/>
216
239
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP1"/>
217
240
  </fingerprint>
241
+
218
242
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: x86.*Software: Windows Version 6\.1 \(Build 7601.*$">
219
243
  <description>Windows Server 2008 Datacenter R2 SP1 on x86</description>
220
244
  <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: x86 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7601 Multiprocessor Free)</example>
@@ -225,6 +249,7 @@
225
249
  <param pos="0" name="os.arch" value="x86"/>
226
250
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP1"/>
227
251
  </fingerprint>
252
+
228
253
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.1 \(Build 7601.*$">
229
254
  <description>Windows Server 2008 R2 SP1 on x86_64</description>
230
255
  <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7601 Multiprocessor Free)</example>
@@ -236,6 +261,7 @@
236
261
  <param pos="0" name="os.arch" value="x86_64"/>
237
262
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP1"/>
238
263
  </fingerprint>
264
+
239
265
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.3 Hardware: \S+64.*Software: Windows Version 6\.1 \(Build 7601.*$">
240
266
  <description>Windows Server 2008 Datacenter R2 SP1 on x86_64</description>
241
267
  <example>1.3.6.1.4.1.311.1.1.3.1.3 Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7601 Multiprocessor Free)</example>
@@ -247,6 +273,7 @@
247
273
  <param pos="0" name="os.arch" value="x86_64"/>
248
274
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:SP1"/>
249
275
  </fingerprint>
276
+
250
277
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.311\.1\.1\.3\.1\.2 Hardware: \S+64.*Software: Windows Version 6\.2 \(Build 9200.*$">
251
278
  <description>Windows Server 2012 on x86_64</description>
252
279
  <example>1.3.6.1.4.1.311.1.1.3.1.2 Hardware: Intel64 Family 6 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.2 (Build 9200 Multiprocessor Free)</example>
@@ -256,7 +283,9 @@
256
283
  <param pos="0" name="os.arch" value="x86_64"/>
257
284
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
258
285
  </fingerprint>
286
+
259
287
  <!-- Various OIDs for Net-SNMP agents which are OS specific -->
288
+
260
289
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.1$">
261
290
  <description>Net-SNMP on hpux9</description>
262
291
  <example>1.3.6.1.4.1.8072.3.2.1</example>
@@ -269,6 +298,7 @@
269
298
  <param pos="0" name="service.product" value="SNMP Agent"/>
270
299
  <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
271
300
  </fingerprint>
301
+
272
302
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.2$">
273
303
  <description>Net-SNMP on sunos4</description>
274
304
  <example>1.3.6.1.4.1.8072.3.2.2</example>
@@ -280,6 +310,7 @@
280
310
  <param pos="0" name="service.product" value="SNMP Agent"/>
281
311
  <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
282
312
  </fingerprint>
313
+
283
314
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.3$">
284
315
  <description>Net-SNMP on solaris</description>
285
316
  <example>1.3.6.1.4.1.8072.3.2.3</example>
@@ -291,6 +322,7 @@
291
322
  <param pos="0" name="service.product" value="SNMP Agent"/>
292
323
  <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
293
324
  </fingerprint>
325
+
294
326
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.4$">
295
327
  <description>Net-SNMP on osf</description>
296
328
  <example>1.3.6.1.4.1.8072.3.2.4</example>
@@ -300,6 +332,7 @@
300
332
  <param pos="0" name="service.product" value="SNMP Agent"/>
301
333
  <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
302
334
  </fingerprint>
335
+
303
336
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.5$">
304
337
  <description>Net-SNMP on ultrix</description>
305
338
  <example>1.3.6.1.4.1.8072.3.2.5</example>
@@ -309,6 +342,7 @@
309
342
  <param pos="0" name="service.product" value="SNMP Agent"/>
310
343
  <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
311
344
  </fingerprint>
345
+
312
346
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.6$">
313
347
  <description>Net-SNMP on hpux10</description>
314
348
  <example>1.3.6.1.4.1.8072.3.2.6</example>
@@ -321,6 +355,7 @@
321
355
  <param pos="0" name="service.product" value="SNMP Agent"/>
322
356
  <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
323
357
  </fingerprint>
358
+
324
359
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.7$">
325
360
  <description>Net-SNMP on netbsd</description>
326
361
  <example>1.3.6.1.4.1.8072.3.2.7</example>
@@ -332,6 +367,7 @@
332
367
  <param pos="0" name="service.product" value="SNMP Agent"/>
333
368
  <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
334
369
  </fingerprint>
370
+
335
371
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.8$">
336
372
  <description>Net-SNMP on freebsd</description>
337
373
  <example>1.3.6.1.4.1.8072.3.2.8</example>
@@ -343,6 +379,7 @@
343
379
  <param pos="0" name="service.product" value="SNMP Agent"/>
344
380
  <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
345
381
  </fingerprint>
382
+
346
383
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.9$">
347
384
  <description>Net-SNMP on irix</description>
348
385
  <example>1.3.6.1.4.1.8072.3.2.9</example>
@@ -354,6 +391,7 @@
354
391
  <param pos="0" name="service.product" value="SNMP Agent"/>
355
392
  <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
356
393
  </fingerprint>
394
+
357
395
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.10$">
358
396
  <description>Net-SNMP on linux</description>
359
397
  <example>1.3.6.1.4.1.8072.3.2.10</example>
@@ -363,6 +401,7 @@
363
401
  <param pos="0" name="service.product" value="SNMP Agent"/>
364
402
  <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
365
403
  </fingerprint>
404
+
366
405
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.11$">
367
406
  <description>Net-SNMP on bsdi</description>
368
407
  <example>1.3.6.1.4.1.8072.3.2.11</example>
@@ -372,6 +411,7 @@
372
411
  <param pos="0" name="service.product" value="SNMP Agent"/>
373
412
  <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
374
413
  </fingerprint>
414
+
375
415
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.12$">
376
416
  <description>Net-SNMP on openbsd</description>
377
417
  <example>1.3.6.1.4.1.8072.3.2.12</example>
@@ -383,6 +423,7 @@
383
423
  <param pos="0" name="service.product" value="SNMP Agent"/>
384
424
  <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
385
425
  </fingerprint>
426
+
386
427
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.13$">
387
428
  <description>Net-SNMP on win32</description>
388
429
  <example>1.3.6.1.4.1.8072.3.2.13</example>
@@ -394,6 +435,7 @@
394
435
  <param pos="0" name="service.product" value="SNMP Agent"/>
395
436
  <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
396
437
  </fingerprint>
438
+
397
439
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.14$">
398
440
  <description>Net-SNMP on hpux11</description>
399
441
  <example>1.3.6.1.4.1.8072.3.2.14</example>
@@ -406,6 +448,7 @@
406
448
  <param pos="0" name="service.product" value="SNMP Agent"/>
407
449
  <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
408
450
  </fingerprint>
451
+
409
452
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.15$">
410
453
  <description>Net-SNMP on aix</description>
411
454
  <example>1.3.6.1.4.1.8072.3.2.15</example>
@@ -417,6 +460,7 @@
417
460
  <param pos="0" name="service.product" value="SNMP Agent"/>
418
461
  <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
419
462
  </fingerprint>
463
+
420
464
  <fingerprint pattern="^1\.3\.6\.1\.4\.1\.8072\.3\.2\.16$">
421
465
  <description>Net-SNMP on macosx</description>
422
466
  <example>1.3.6.1.4.1.8072.3.2.16</example>
@@ -427,4 +471,5 @@
427
471
  <param pos="0" name="service.product" value="SNMP Agent"/>
428
472
  <param pos="0" name="service.cpe23" value="cpe:/a:net-snmp:net-snmp:-"/>
429
473
  </fingerprint>
430
- </fingerprints>
474
+
475
+ </fingerprints>
data/xml/ssh_banners.xml CHANGED
@@ -1,15 +1,17 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
1
+ <?xml version='1.0' encoding='UTF-8'?>
2
2
  <fingerprints matches="ssh.banner" protocol="ssh" database_type="service" preference="0.90">
3
3
  <!--
4
4
  SSH "software revision and comment" strings (official RFC nomenclature for the part of
5
5
  the identification string after "SSH-x.x-") are matched against these patterns to
6
6
  fingerprint SSH servers.
7
7
  -->
8
+
8
9
  <fingerprint pattern="^ArrayOS$">
9
10
  <description>Array Networks device</description>
10
11
  <example>ArrayOS</example>
11
12
  <param pos="0" name="service.vendor" value="Array Networks"/>
12
13
  </fingerprint>
14
+
13
15
  <fingerprint pattern="^RomSShell_([\d\.]+)$">
14
16
  <description>Allegro RomSShell SSH</description>
15
17
  <example service.version="4.62">RomSShell_4.62</example>
@@ -17,11 +19,13 @@
17
19
  <param pos="0" name="service.product" value="RomSShell"/>
18
20
  <param pos="1" name="service.version"/>
19
21
  </fingerprint>
22
+
20
23
  <fingerprint pattern="(?i)^DraySSH_\S+$">
21
24
  <description>DrayTek generic</description>
22
25
  <example>DraySSH_2.0</example>
23
26
  <param pos="0" name="hw.vendor" value="DrayTek"/>
24
27
  </fingerprint>
28
+
25
29
  <fingerprint pattern="^mpSSH_([\d\.]+)$">
26
30
  <description>HP Integrated Lights Out (iLO) usually bundled with HP servers</description>
27
31
  <example service.version="0.0.1">mpSSH_0.0.1</example>
@@ -36,6 +40,7 @@
36
40
  <param pos="0" name="os.family" value="iLO"/>
37
41
  <param pos="0" name="os.device" value="Lights Out Management"/>
38
42
  </fingerprint>
43
+
39
44
  <fingerprint pattern="^Serv-U_([\d\.]+)$">
40
45
  <description>Serv-U SSH</description>
41
46
  <example service.version="7.4.0.1">Serv-U_7.4.0.1</example>
@@ -43,6 +48,7 @@
43
48
  <param pos="0" name="service.product" value="Serv-U"/>
44
49
  <param pos="1" name="service.version"/>
45
50
  </fingerprint>
51
+
46
52
  <fingerprint pattern="WS_FTP-SSH_([\d\.]+)$">
47
53
  <description>WS_FTP Server with SSH</description>
48
54
  <example service.version="6.1.1">WS_FTP-SSH_6.1.1</example>
@@ -52,6 +58,7 @@
52
58
  <param pos="1" name="service.version"/>
53
59
  <param pos="0" name="service.cpe23" value="cpe:/a:ipswitch:ws_ftp:{service.version}"/>
54
60
  </fingerprint>
61
+
55
62
  <fingerprint pattern="IPSSH[-_]([\d\.p]+).*$">
56
63
  <description>VxWorks with version information</description>
57
64
  <example os.version="6.9.0">IPSSH-6.9.0</example>
@@ -60,7 +67,9 @@
60
67
  <param pos="1" name="os.version"/>
61
68
  <param pos="0" name="os.cpe23" value="cpe:/o:windriver:vxworks:{os.version}"/>
62
69
  </fingerprint>
70
+
63
71
  <!-- FreeBSD -->
72
+
64
73
  <fingerprint pattern="^OpenSSH_(2\.3\.0) (green@FreeBSD.org 20010321)$">
65
74
  <description>OpenSSH running on FreeBSD 4.3</description>
66
75
  <example service.version="2.3.0" openssh.comment="green@FreeBSD.org 20010321">OpenSSH_2.3.0 green@FreeBSD.org 20010321</example>
@@ -74,8 +83,9 @@
74
83
  <param pos="0" name="os.family" value="FreeBSD"/>
75
84
  <param pos="0" name="os.product" value="FreeBSD"/>
76
85
  <param pos="0" name="os.version" value="4.3"/>
77
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
86
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:4.3"/>
78
87
  </fingerprint>
88
+
79
89
  <fingerprint pattern="^OpenSSH_(2\.3\.0) (FreeBSD localisations 20010713)$">
80
90
  <description>OpenSSH running on FreeBSD 4.4</description>
81
91
  <example service.version="2.3.0" openssh.comment="FreeBSD localisations 20010713">OpenSSH_2.3.0 FreeBSD localisations 20010713</example>
@@ -89,8 +99,9 @@
89
99
  <param pos="0" name="os.family" value="FreeBSD"/>
90
100
  <param pos="0" name="os.product" value="FreeBSD"/>
91
101
  <param pos="0" name="os.version" value="4.4"/>
92
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
102
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:4.4"/>
93
103
  </fingerprint>
104
+
94
105
  <fingerprint pattern="^OpenSSH_(2\.9) (FreeBSD localisations 20011202)$">
95
106
  <description>OpenSSH running on FreeBSD 4.5</description>
96
107
  <example service.version="2.9" openssh.comment="FreeBSD localisations 20011202">OpenSSH_2.9 FreeBSD localisations 20011202</example>
@@ -104,8 +115,9 @@
104
115
  <param pos="0" name="os.family" value="FreeBSD"/>
105
116
  <param pos="0" name="os.product" value="FreeBSD"/>
106
117
  <param pos="0" name="os.version" value="4.5"/>
107
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
118
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:4.5"/>
108
119
  </fingerprint>
120
+
109
121
  <fingerprint pattern="^OpenSSH_(3\.4p1) (FreeBSD 20020702)$">
110
122
  <description>OpenSSH running on FreeBSD 4.6.2</description>
111
123
  <example service.version="3.4p1" openssh.comment="FreeBSD 20020702">OpenSSH_3.4p1 FreeBSD 20020702</example>
@@ -119,8 +131,9 @@
119
131
  <param pos="0" name="os.family" value="FreeBSD"/>
120
132
  <param pos="0" name="os.product" value="FreeBSD"/>
121
133
  <param pos="0" name="os.version" value="4.6.2"/>
122
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
134
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:4.6.2"/>
123
135
  </fingerprint>
136
+
124
137
  <fingerprint pattern="^OpenSSH_(2\.9) (FreeBSD localisations 20020307)$">
125
138
  <description>OpenSSH running on FreeBSD 4.6</description>
126
139
  <example service.version="2.9" openssh.comment="FreeBSD localisations 20020307">OpenSSH_2.9 FreeBSD localisations 20020307</example>
@@ -134,8 +147,9 @@
134
147
  <param pos="0" name="os.family" value="FreeBSD"/>
135
148
  <param pos="0" name="os.product" value="FreeBSD"/>
136
149
  <param pos="0" name="os.version" value="4.6"/>
137
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
150
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:4.6"/>
138
151
  </fingerprint>
152
+
139
153
  <fingerprint pattern="^OpenSSH_(3\.4p1) (FreeBSD-20020702)$">
140
154
  <description>OpenSSH running on FreeBSD 4.7</description>
141
155
  <example service.version="3.4p1" openssh.comment="FreeBSD-20020702">OpenSSH_3.4p1 FreeBSD-20020702</example>
@@ -149,8 +163,9 @@
149
163
  <param pos="0" name="os.family" value="FreeBSD"/>
150
164
  <param pos="0" name="os.product" value="FreeBSD"/>
151
165
  <param pos="0" name="os.version" value="4.7"/>
152
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
166
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:4.7"/>
153
167
  </fingerprint>
168
+
154
169
  <fingerprint pattern="^OpenSSH_(3\.5p1) (FreeBSD-20030201)$">
155
170
  <description>OpenSSH running on FreeBSD 4.8</description>
156
171
  <example service.version="3.5p1" openssh.comment="FreeBSD-20030201">OpenSSH_3.5p1 FreeBSD-20030201</example>
@@ -164,9 +179,11 @@
164
179
  <param pos="0" name="os.family" value="FreeBSD"/>
165
180
  <param pos="0" name="os.product" value="FreeBSD"/>
166
181
  <param pos="0" name="os.version" value="4.8"/>
167
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
182
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:4.8"/>
168
183
  </fingerprint>
184
+
169
185
  <!-- Multiple minor version match, assert the oldest version -->
186
+
170
187
  <fingerprint pattern="^OpenSSH_(3\.5p1) (FreeBSD-20030924)$">
171
188
  <description>OpenSSH running on FreeBSD 4.9/4.10 (sometimes 4.11)</description>
172
189
  <example service.version="3.5p1" openssh.comment="FreeBSD-20030924">OpenSSH_3.5p1 FreeBSD-20030924</example>
@@ -180,8 +197,9 @@
180
197
  <param pos="0" name="os.family" value="FreeBSD"/>
181
198
  <param pos="0" name="os.product" value="FreeBSD"/>
182
199
  <param pos="0" name="os.version" value="4.9"/>
183
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
200
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:4.9"/>
184
201
  </fingerprint>
202
+
185
203
  <fingerprint pattern="^OpenSSH_(3\.5p1) (FreeBSD-20060930)$">
186
204
  <description>OpenSSH running on FreeBSD 4.11</description>
187
205
  <example service.version="3.5p1" openssh.comment="FreeBSD-20060930">OpenSSH_3.5p1 FreeBSD-20060930</example>
@@ -195,8 +213,9 @@
195
213
  <param pos="0" name="os.family" value="FreeBSD"/>
196
214
  <param pos="0" name="os.product" value="FreeBSD"/>
197
215
  <param pos="0" name="os.version" value="4.11"/>
198
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
216
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:4.11"/>
199
217
  </fingerprint>
218
+
200
219
  <fingerprint pattern="^OpenSSH_(3\.5p1) (FreeBSD-20021029)$">
201
220
  <description>OpenSSH running on FreeBSD 5.0</description>
202
221
  <example service.version="3.5p1" openssh.comment="FreeBSD-20021029">OpenSSH_3.5p1 FreeBSD-20021029</example>
@@ -210,8 +229,9 @@
210
229
  <param pos="0" name="os.family" value="FreeBSD"/>
211
230
  <param pos="0" name="os.product" value="FreeBSD"/>
212
231
  <param pos="0" name="os.version" value="5.0"/>
213
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
232
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:5.0"/>
214
233
  </fingerprint>
234
+
215
235
  <fingerprint pattern="^OpenSSH_(3\.6\.1p1) (FreeBSD-20030423)$">
216
236
  <description>OpenSSH running on FreeBSD 5.1</description>
217
237
  <example service.version="3.6.1p1" openssh.comment="FreeBSD-20030423">OpenSSH_3.6.1p1 FreeBSD-20030423</example>
@@ -225,8 +245,9 @@
225
245
  <param pos="0" name="os.family" value="FreeBSD"/>
226
246
  <param pos="0" name="os.product" value="FreeBSD"/>
227
247
  <param pos="0" name="os.version" value="5.1"/>
228
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
248
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:5.1"/>
229
249
  </fingerprint>
250
+
230
251
  <fingerprint pattern="^OpenSSH_(3\.6\.1p1) (FreeBSD-20030924)$">
231
252
  <description>OpenSSH running on FreeBSD 5.2</description>
232
253
  <example service.version="3.6.1p1" openssh.comment="FreeBSD-20030924">OpenSSH_3.6.1p1 FreeBSD-20030924</example>
@@ -240,9 +261,11 @@
240
261
  <param pos="0" name="os.family" value="FreeBSD"/>
241
262
  <param pos="0" name="os.product" value="FreeBSD"/>
242
263
  <param pos="0" name="os.version" value="5.2"/>
243
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
264
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:5.2"/>
244
265
  </fingerprint>
266
+
245
267
  <!-- Multiple minor version match, assert the oldest version -->
268
+
246
269
  <fingerprint pattern="^OpenSSH_(3\.8\.1p1) (FreeBSD-20040419)$">
247
270
  <description>OpenSSH running on FreeBSD 5.3/5.4</description>
248
271
  <example service.version="3.8.1p1" openssh.comment="FreeBSD-20040419">OpenSSH_3.8.1p1 FreeBSD-20040419</example>
@@ -256,8 +279,9 @@
256
279
  <param pos="0" name="os.family" value="FreeBSD"/>
257
280
  <param pos="0" name="os.product" value="FreeBSD"/>
258
281
  <param pos="0" name="os.version" value="5.3"/>
259
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
282
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:5.3"/>
260
283
  </fingerprint>
284
+
261
285
  <fingerprint pattern="^OpenSSH_(3\.8\.1p1) (FreeBSD-20060123)$">
262
286
  <description>OpenSSH running on FreeBSD 5.5</description>
263
287
  <example service.version="3.8.1p1" openssh.comment="FreeBSD-20060123">OpenSSH_3.8.1p1 FreeBSD-20060123</example>
@@ -271,9 +295,11 @@
271
295
  <param pos="0" name="os.family" value="FreeBSD"/>
272
296
  <param pos="0" name="os.product" value="FreeBSD"/>
273
297
  <param pos="0" name="os.version" value="5.5"/>
274
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
298
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:5.5"/>
275
299
  </fingerprint>
300
+
276
301
  <!-- Multiple minor version match, assert the oldest version -->
302
+
277
303
  <fingerprint pattern="^OpenSSH_(4\.2p1) (FreeBSD-20050903)$">
278
304
  <description>OpenSSH running on FreeBSD 6.0/6.1</description>
279
305
  <example service.version="4.2p1" openssh.comment="FreeBSD-20050903">OpenSSH_4.2p1 FreeBSD-20050903</example>
@@ -287,9 +313,11 @@
287
313
  <param pos="0" name="os.family" value="FreeBSD"/>
288
314
  <param pos="0" name="os.product" value="FreeBSD"/>
289
315
  <param pos="0" name="os.version" value="6.0"/>
290
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
316
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:6.0"/>
291
317
  </fingerprint>
318
+
292
319
  <!-- Spans major versions, do not assert a version number -->
320
+
293
321
  <fingerprint pattern="^OpenSSH_(4\.5p1) (FreeBSD-20061110)$">
294
322
  <description>OpenSSH running on FreeBSD 6.2/6.3/6.4/7.0</description>
295
323
  <example service.version="4.5p1" openssh.comment="FreeBSD-20061110">OpenSSH_4.5p1 FreeBSD-20061110</example>
@@ -304,7 +332,9 @@
304
332
  <param pos="0" name="os.product" value="FreeBSD"/>
305
333
  <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:-"/>
306
334
  </fingerprint>
335
+
307
336
  <!-- Multiple minor version match, assert the oldest version -->
337
+
308
338
  <fingerprint pattern="^OpenSSH_(5\.1p1) (FreeBSD-20080901)$">
309
339
  <description>OpenSSH running on FreeBSD 7.1/7.2/7.3/7.4</description>
310
340
  <example service.version="5.1p1" openssh.comment="FreeBSD-20080901">OpenSSH_5.1p1 FreeBSD-20080901</example>
@@ -318,8 +348,9 @@
318
348
  <param pos="0" name="os.family" value="FreeBSD"/>
319
349
  <param pos="0" name="os.product" value="FreeBSD"/>
320
350
  <param pos="0" name="os.version" value="7.1"/>
321
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
351
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:7.1"/>
322
352
  </fingerprint>
353
+
323
354
  <fingerprint pattern="^OpenSSH_(5\.2p1) (FreeBSD-20090522)$">
324
355
  <description>OpenSSH running on FreeBSD 8.0</description>
325
356
  <example service.version="5.2p1" openssh.comment="FreeBSD-20090522">OpenSSH_5.2p1 FreeBSD-20090522</example>
@@ -333,9 +364,11 @@
333
364
  <param pos="0" name="os.family" value="FreeBSD"/>
334
365
  <param pos="0" name="os.product" value="FreeBSD"/>
335
366
  <param pos="0" name="os.version" value="8.0"/>
336
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
367
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:8.0"/>
337
368
  </fingerprint>
369
+
338
370
  <!-- Multiple minor version match, assert the oldest version -->
371
+
339
372
  <fingerprint pattern="^OpenSSH_(5\.4p1) (FreeBSD-20100308)$">
340
373
  <description>OpenSSH running on FreeBSD 8.1/8.2</description>
341
374
  <example service.version="5.4p1" openssh.comment="FreeBSD-20100308">OpenSSH_5.4p1 FreeBSD-20100308</example>
@@ -349,8 +382,9 @@
349
382
  <param pos="0" name="os.family" value="FreeBSD"/>
350
383
  <param pos="0" name="os.product" value="FreeBSD"/>
351
384
  <param pos="0" name="os.version" value="8.1"/>
352
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
385
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:8.1"/>
353
386
  </fingerprint>
387
+
354
388
  <fingerprint pattern="^OpenSSH_(5\.4p1_hpn13v11) (FreeBSD-20100308)$">
355
389
  <description>OpenSSH running on FreeBSD 8.3</description>
356
390
  <example service.version="5.4p1_hpn13v11" openssh.comment="FreeBSD-20100308">OpenSSH_5.4p1_hpn13v11 FreeBSD-20100308</example>
@@ -364,8 +398,9 @@
364
398
  <param pos="0" name="os.family" value="FreeBSD"/>
365
399
  <param pos="0" name="os.product" value="FreeBSD"/>
366
400
  <param pos="0" name="os.version" value="8.3"/>
367
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
401
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:8.3"/>
368
402
  </fingerprint>
403
+
369
404
  <fingerprint pattern="^OpenSSH_(6\.1_hpn13v11) (FreeBSD-20120901)$">
370
405
  <description>OpenSSH running on FreeBSD 8.4</description>
371
406
  <example service.version="6.1_hpn13v11" openssh.comment="FreeBSD-20120901">OpenSSH_6.1_hpn13v11 FreeBSD-20120901</example>
@@ -379,9 +414,11 @@
379
414
  <param pos="0" name="os.family" value="FreeBSD"/>
380
415
  <param pos="0" name="os.product" value="FreeBSD"/>
381
416
  <param pos="0" name="os.version" value="8.4"/>
382
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
417
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:8.4"/>
383
418
  </fingerprint>
419
+
384
420
  <!-- Multiple minor version match, assert the oldest version -->
421
+
385
422
  <fingerprint pattern="^OpenSSH_(5\.8p2_hpn13v11) (FreeBSD-20110503)$">
386
423
  <description>OpenSSH running on FreeBSD 9.0/9.1</description>
387
424
  <example service.version="5.8p2_hpn13v11" openssh.comment="FreeBSD-20110503">OpenSSH_5.8p2_hpn13v11 FreeBSD-20110503</example>
@@ -395,8 +432,9 @@
395
432
  <param pos="0" name="os.family" value="FreeBSD"/>
396
433
  <param pos="0" name="os.product" value="FreeBSD"/>
397
434
  <param pos="0" name="os.version" value="9.0"/>
398
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
435
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:9.0"/>
399
436
  </fingerprint>
437
+
400
438
  <fingerprint pattern="^OpenSSH_(6\.2_hpn13v11) (FreeBSD-20130515)$">
401
439
  <description>OpenSSH running on FreeBSD 9.2</description>
402
440
  <example service.version="6.2_hpn13v11" openssh.comment="FreeBSD-20130515">OpenSSH_6.2_hpn13v11 FreeBSD-20130515</example>
@@ -410,9 +448,11 @@
410
448
  <param pos="0" name="os.family" value="FreeBSD"/>
411
449
  <param pos="0" name="os.product" value="FreeBSD"/>
412
450
  <param pos="0" name="os.version" value="9.2"/>
413
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
451
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:9.2"/>
414
452
  </fingerprint>
453
+
415
454
  <!-- Spans major versions, do not assert a version number -->
455
+
416
456
  <fingerprint pattern="^OpenSSH_(6\.6\.1_hpn13v11) (FreeBSD-20140420)$">
417
457
  <description>OpenSSH running on FreeBSD 9.3/10.1/10.2</description>
418
458
  <example service.version="6.6.1_hpn13v11" openssh.comment="FreeBSD-20140420">OpenSSH_6.6.1_hpn13v11 FreeBSD-20140420</example>
@@ -427,6 +467,7 @@
427
467
  <param pos="0" name="os.product" value="FreeBSD"/>
428
468
  <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:-"/>
429
469
  </fingerprint>
470
+
430
471
  <fingerprint pattern="^OpenSSH_(6\.4_hpn13v11) (FreeBSD-20131111)$">
431
472
  <description>OpenSSH running on FreeBSD 10.0</description>
432
473
  <example service.version="6.4_hpn13v11" openssh.comment="FreeBSD-20131111">OpenSSH_6.4_hpn13v11 FreeBSD-20131111</example>
@@ -440,9 +481,11 @@
440
481
  <param pos="0" name="os.family" value="FreeBSD"/>
441
482
  <param pos="0" name="os.product" value="FreeBSD"/>
442
483
  <param pos="0" name="os.version" value="10.0"/>
443
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
484
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:10.0"/>
444
485
  </fingerprint>
486
+
445
487
  <!-- Spans major versions, do not assert a version number -->
488
+
446
489
  <fingerprint pattern="^OpenSSH_(7\.2) (FreeBSD-20160310)$">
447
490
  <description>OpenSSH running on FreeBSD 10.3/11.0</description>
448
491
  <example service.version="7.2" openssh.comment="FreeBSD-20160310">OpenSSH_7.2 FreeBSD-20160310</example>
@@ -457,6 +500,7 @@
457
500
  <param pos="0" name="os.product" value="FreeBSD"/>
458
501
  <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:-"/>
459
502
  </fingerprint>
503
+
460
504
  <fingerprint pattern="^OpenSSH_(7\.3) (FreeBSD-20170902)$">
461
505
  <description>OpenSSH running on FreeBSD 10.4</description>
462
506
  <example service.version="7.3" openssh.comment="FreeBSD-20170902">OpenSSH_7.3 FreeBSD-20170902</example>
@@ -470,8 +514,9 @@
470
514
  <param pos="0" name="os.family" value="FreeBSD"/>
471
515
  <param pos="0" name="os.product" value="FreeBSD"/>
472
516
  <param pos="0" name="os.version" value="10.4"/>
473
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
517
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:10.4"/>
474
518
  </fingerprint>
519
+
475
520
  <fingerprint pattern="^OpenSSH_(7\.2) (FreeBSD-20161230)$">
476
521
  <description>OpenSSH running on FreeBSD 11.1</description>
477
522
  <example service.version="7.2" openssh.comment="FreeBSD-20161230">OpenSSH_7.2 FreeBSD-20161230</example>
@@ -485,9 +530,11 @@
485
530
  <param pos="0" name="os.family" value="FreeBSD"/>
486
531
  <param pos="0" name="os.product" value="FreeBSD"/>
487
532
  <param pos="0" name="os.version" value="11.1"/>
488
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
533
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:11.1"/>
489
534
  </fingerprint>
535
+
490
536
  <!-- Multiple minor version match, assert the oldest version -->
537
+
491
538
  <fingerprint pattern="^OpenSSH_(7\.5) (FreeBSD-20170903)$">
492
539
  <description>OpenSSH running on FreeBSD 11.2/11.3</description>
493
540
  <example service.version="7.5" openssh.comment="FreeBSD-20170903">OpenSSH_7.5 FreeBSD-20170903</example>
@@ -501,8 +548,9 @@
501
548
  <param pos="0" name="os.family" value="FreeBSD"/>
502
549
  <param pos="0" name="os.product" value="FreeBSD"/>
503
550
  <param pos="0" name="os.version" value="11.2"/>
504
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
551
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:11.2"/>
505
552
  </fingerprint>
553
+
506
554
  <fingerprint pattern="^OpenSSH_(7\.8) (FreeBSD-20180909)$">
507
555
  <description>OpenSSH running on FreeBSD 12.0</description>
508
556
  <example service.version="7.8" openssh.comment="FreeBSD-20180909">OpenSSH_7.8 FreeBSD-20180909</example>
@@ -516,8 +564,9 @@
516
564
  <param pos="0" name="os.family" value="FreeBSD"/>
517
565
  <param pos="0" name="os.product" value="FreeBSD"/>
518
566
  <param pos="0" name="os.version" value="12.0"/>
519
- <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
567
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:12.0"/>
520
568
  </fingerprint>
569
+
521
570
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(FreeBSD[ -].*)$">
522
571
  <description>OpenSSH running on FreeBSD</description>
523
572
  <example service.version="7.2" openssh.comment="FreeBSD-20160311">OpenSSH_7.2 FreeBSD-20160311</example>
@@ -532,7 +581,9 @@
532
581
  <param pos="0" name="os.product" value="FreeBSD"/>
533
582
  <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:-"/>
534
583
  </fingerprint>
584
+
535
585
  <!-- NetBSD -->
586
+
536
587
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(NetBSD(?:_Secure_Shell)?[ -].*)$">
537
588
  <description>OpenSSH running on NetBSD</description>
538
589
  <example service.version="7.2" openssh.comment="NetBSD-20100308">OpenSSH_7.2 NetBSD-20100308</example>
@@ -548,7 +599,9 @@
548
599
  <param pos="0" name="os.product" value="NetBSD"/>
549
600
  <param pos="0" name="os.cpe23" value="cpe:/o:netbsd:netbsd:-"/>
550
601
  </fingerprint>
602
+
551
603
  <!-- Ubuntu -->
604
+
552
605
  <fingerprint pattern="^OpenSSH_(3\.8\.1p1) (Debian-11ubuntu\d+(?:\.\d+)?)$">
553
606
  <description>OpenSSH running on Ubuntu 4.10</description>
554
607
  <example service.version="3.8.1p1" openssh.comment="Debian-11ubuntu3">OpenSSH_3.8.1p1 Debian-11ubuntu3</example>
@@ -562,8 +615,9 @@
562
615
  <param pos="0" name="os.family" value="Linux"/>
563
616
  <param pos="0" name="os.product" value="Linux"/>
564
617
  <param pos="0" name="os.version" value="4.10"/>
565
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
618
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:4.10"/>
566
619
  </fingerprint>
620
+
567
621
  <fingerprint pattern="^OpenSSH_(3\.9p1) (Debian-1ubuntu\d+(?:\.\d+)?)$">
568
622
  <description>OpenSSH running on Ubuntu 5.04</description>
569
623
  <example service.version="3.9p1" openssh.comment="Debian-1ubuntu2">OpenSSH_3.9p1 Debian-1ubuntu2</example>
@@ -577,8 +631,9 @@
577
631
  <param pos="0" name="os.family" value="Linux"/>
578
632
  <param pos="0" name="os.product" value="Linux"/>
579
633
  <param pos="0" name="os.version" value="5.04"/>
580
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
634
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:5.04"/>
581
635
  </fingerprint>
636
+
582
637
  <fingerprint pattern="^OpenSSH_(4\.1p1) (Debian-7ubuntu\d+(?:\.\d+)?)$">
583
638
  <description>OpenSSH running on Ubuntu 5.10</description>
584
639
  <example service.version="4.1p1" openssh.comment="Debian-7ubuntu4">OpenSSH_4.1p1 Debian-7ubuntu4</example>
@@ -592,8 +647,9 @@
592
647
  <param pos="0" name="os.family" value="Linux"/>
593
648
  <param pos="0" name="os.product" value="Linux"/>
594
649
  <param pos="0" name="os.version" value="5.10"/>
595
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
650
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:5.10"/>
596
651
  </fingerprint>
652
+
597
653
  <fingerprint pattern="^OpenSSH_(4\.2p1) (Debian-7ubuntu\d+(?:\.\d+)?)$">
598
654
  <description>OpenSSH running on Ubuntu 6.04</description>
599
655
  <example service.version="4.2p1" openssh.comment="Debian-7ubuntu3.1">OpenSSH_4.2p1 Debian-7ubuntu3.1</example>
@@ -608,8 +664,9 @@
608
664
  <param pos="0" name="os.family" value="Linux"/>
609
665
  <param pos="0" name="os.product" value="Linux"/>
610
666
  <param pos="0" name="os.version" value="6.04"/>
611
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
667
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:6.04"/>
612
668
  </fingerprint>
669
+
613
670
  <fingerprint pattern="^OpenSSH_(4\.3p2) (Debian-8ubuntu\d+(?:\.\d+)?)$">
614
671
  <description>OpenSSH running on Ubuntu 7.04</description>
615
672
  <example service.version="4.3p2" openssh.comment="Debian-8ubuntu1.4">OpenSSH_4.3p2 Debian-8ubuntu1.4</example>
@@ -623,8 +680,9 @@
623
680
  <param pos="0" name="os.family" value="Linux"/>
624
681
  <param pos="0" name="os.product" value="Linux"/>
625
682
  <param pos="0" name="os.version" value="7.04"/>
626
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
683
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:7.04"/>
627
684
  </fingerprint>
685
+
628
686
  <fingerprint pattern="^OpenSSH_(4\.6p1) (Debian-5ubuntu\d+(?:\.\d+)?)$">
629
687
  <description>OpenSSH running on Ubuntu 7.10</description>
630
688
  <example service.version="4.6p1" openssh.comment="Debian-5ubuntu0.2">OpenSSH_4.6p1 Debian-5ubuntu0.2</example>
@@ -641,8 +699,9 @@
641
699
  <param pos="0" name="os.family" value="Linux"/>
642
700
  <param pos="0" name="os.product" value="Linux"/>
643
701
  <param pos="0" name="os.version" value="7.10"/>
644
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
702
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:7.10"/>
645
703
  </fingerprint>
704
+
646
705
  <fingerprint pattern="^OpenSSH_(4\.7p1) (Debian-8ubuntu\d+(?:\.\d+)?)$">
647
706
  <description>OpenSSH running on Ubuntu 8.04</description>
648
707
  <example service.version="4.7p1" openssh.comment="Debian-8ubuntu1.2">OpenSSH_4.7p1 Debian-8ubuntu1.2</example>
@@ -657,8 +716,9 @@
657
716
  <param pos="0" name="os.family" value="Linux"/>
658
717
  <param pos="0" name="os.product" value="Linux"/>
659
718
  <param pos="0" name="os.version" value="8.04"/>
660
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
719
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:8.04"/>
661
720
  </fingerprint>
721
+
662
722
  <fingerprint pattern="^OpenSSH_(5\.1p1) (Debian-3ubuntu\d+(?:\.\d+)?)$">
663
723
  <description>OpenSSH running on Ubuntu 8.10</description>
664
724
  <example service.version="5.1p1" openssh.comment="Debian-3ubuntu1">OpenSSH_5.1p1 Debian-3ubuntu1</example>
@@ -672,8 +732,9 @@
672
732
  <param pos="0" name="os.family" value="Linux"/>
673
733
  <param pos="0" name="os.product" value="Linux"/>
674
734
  <param pos="0" name="os.version" value="8.10"/>
675
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
735
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:8.10"/>
676
736
  </fingerprint>
737
+
677
738
  <fingerprint pattern="^OpenSSH_(5\.1p1) (Debian-5ubuntu\d+(?:\.\d+)?)$">
678
739
  <description>OpenSSH running on Ubuntu 9.04</description>
679
740
  <example service.version="5.1p1" openssh.comment="Debian-5ubuntu1">OpenSSH_5.1p1 Debian-5ubuntu1</example>
@@ -687,8 +748,9 @@
687
748
  <param pos="0" name="os.family" value="Linux"/>
688
749
  <param pos="0" name="os.product" value="Linux"/>
689
750
  <param pos="0" name="os.version" value="9.04"/>
690
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
751
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:9.04"/>
691
752
  </fingerprint>
753
+
692
754
  <fingerprint pattern="^OpenSSH_(5\.1p1) (Debian-6ubuntu\d+(?:\.\d+)?)$">
693
755
  <description>OpenSSH running on Ubuntu 9.10</description>
694
756
  <example service.version="5.1p1" openssh.comment="Debian-6ubuntu2">OpenSSH_5.1p1 Debian-6ubuntu2</example>
@@ -702,8 +764,9 @@
702
764
  <param pos="0" name="os.family" value="Linux"/>
703
765
  <param pos="0" name="os.product" value="Linux"/>
704
766
  <param pos="0" name="os.version" value="9.10"/>
705
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
767
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:9.10"/>
706
768
  </fingerprint>
769
+
707
770
  <fingerprint pattern="^OpenSSH_(5\.3p1) (Debian-3ubuntu\d+(?:\.\d+)?)$">
708
771
  <description>OpenSSH running on Ubuntu 10.04 (lucid)</description>
709
772
  <example service.version="5.3p1" openssh.comment="Debian-3ubuntu3">OpenSSH_5.3p1 Debian-3ubuntu3</example>
@@ -722,8 +785,9 @@
722
785
  <param pos="0" name="os.family" value="Linux"/>
723
786
  <param pos="0" name="os.product" value="Linux"/>
724
787
  <param pos="0" name="os.version" value="10.04"/>
725
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
788
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:10.04"/>
726
789
  </fingerprint>
790
+
727
791
  <fingerprint pattern="^OpenSSH_(5\.5p1) (Debian-4ubuntu\d+(?:\.\d+)?)$">
728
792
  <description>OpenSSH running on Ubuntu 10.10</description>
729
793
  <example service.version="5.5p1" openssh.comment="Debian-4ubuntu4">OpenSSH_5.5p1 Debian-4ubuntu4</example>
@@ -739,8 +803,9 @@
739
803
  <param pos="0" name="os.family" value="Linux"/>
740
804
  <param pos="0" name="os.product" value="Linux"/>
741
805
  <param pos="0" name="os.version" value="10.10"/>
742
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
806
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:10.10"/>
743
807
  </fingerprint>
808
+
744
809
  <fingerprint pattern="^OpenSSH_(5\.8p1) (Debian-1ubuntu\d(?:\.\d)?)$">
745
810
  <description>OpenSSH running on Ubuntu 11.04</description>
746
811
  <example service.version="5.8p1" openssh.comment="Debian-1ubuntu3">OpenSSH_5.8p1 Debian-1ubuntu3</example>
@@ -754,8 +819,9 @@
754
819
  <param pos="0" name="os.family" value="Linux"/>
755
820
  <param pos="0" name="os.product" value="Linux"/>
756
821
  <param pos="0" name="os.version" value="11.04"/>
757
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
822
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:11.04"/>
758
823
  </fingerprint>
824
+
759
825
  <fingerprint pattern="^OpenSSH_(5\.8p1) (Debian-7ubuntu\d(?:\.\d)?)$">
760
826
  <description>OpenSSH running on Ubuntu 11.10</description>
761
827
  <example service.version="5.8p1" openssh.comment="Debian-7ubuntu1">OpenSSH_5.8p1 Debian-7ubuntu1</example>
@@ -769,8 +835,9 @@
769
835
  <param pos="0" name="os.family" value="Linux"/>
770
836
  <param pos="0" name="os.product" value="Linux"/>
771
837
  <param pos="0" name="os.version" value="11.10"/>
772
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
838
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:11.10"/>
773
839
  </fingerprint>
840
+
774
841
  <fingerprint pattern="^OpenSSH_(5\.9p1) (Debian-5ubuntu\d(?:\.\d)?)$">
775
842
  <description>OpenSSH running on Ubuntu 12.04</description>
776
843
  <example service.version="5.9p1" openssh.comment="Debian-5ubuntu1">OpenSSH_5.9p1 Debian-5ubuntu1</example>
@@ -785,8 +852,9 @@
785
852
  <param pos="0" name="os.family" value="Linux"/>
786
853
  <param pos="0" name="os.product" value="Linux"/>
787
854
  <param pos="0" name="os.version" value="12.04"/>
788
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
855
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:12.04"/>
789
856
  </fingerprint>
857
+
790
858
  <fingerprint pattern="^OpenSSH_(6\.0p1) (Debian-3ubuntu\d(?:\.\d)?)$">
791
859
  <description>OpenSSH running on Ubuntu 12.10</description>
792
860
  <example service.version="6.0p1" openssh.comment="Debian-3ubuntu1">OpenSSH_6.0p1 Debian-3ubuntu1</example>
@@ -801,8 +869,9 @@
801
869
  <param pos="0" name="os.family" value="Linux"/>
802
870
  <param pos="0" name="os.product" value="Linux"/>
803
871
  <param pos="0" name="os.version" value="12.10"/>
804
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
872
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:12.10"/>
805
873
  </fingerprint>
874
+
806
875
  <fingerprint pattern="^OpenSSH_(6\.1p1) (Debian-4)$">
807
876
  <description>OpenSSH running on Ubuntu 13.04</description>
808
877
  <example service.version="6.1p1" openssh.comment="Debian-4">OpenSSH_6.1p1 Debian-4</example>
@@ -816,8 +885,9 @@
816
885
  <param pos="0" name="os.family" value="Linux"/>
817
886
  <param pos="0" name="os.product" value="Linux"/>
818
887
  <param pos="0" name="os.version" value="13.04"/>
819
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
888
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:13.04"/>
820
889
  </fingerprint>
890
+
821
891
  <fingerprint pattern="^OpenSSH_(6\.2p2) (Ubuntu-6unbuntu\d(?:\.\d)?)$">
822
892
  <description>OpenSSH running on Ubuntu 13.10</description>
823
893
  <example service.version="6.2p2" openssh.comment="Ubuntu-6unbuntu0.4">OpenSSH_6.2p2 Ubuntu-6unbuntu0.4</example>
@@ -831,8 +901,9 @@
831
901
  <param pos="0" name="os.family" value="Linux"/>
832
902
  <param pos="0" name="os.product" value="Linux"/>
833
903
  <param pos="0" name="os.version" value="13.10"/>
834
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
904
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:13.10"/>
835
905
  </fingerprint>
906
+
836
907
  <fingerprint pattern="^OpenSSH_(\d+\.\d+(?:\.\d+)?(?:p\d+)?)[_|-](hpn\d+v\d+)$">
837
908
  <description>OpenSSH with HPN patches</description>
838
909
  <example service.version="6.1" openssh.comment="hpn13v11">OpenSSH_6.1_hpn13v11</example>
@@ -845,6 +916,7 @@
845
916
  <param pos="0" name="service.product" value="OpenSSH"/>
846
917
  <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
847
918
  </fingerprint>
919
+
848
920
  <fingerprint pattern="^OpenSSH_(6\.6(?:\.\d)?p1) (Ubuntu-2ubuntu\d+(?:\.\d+)?)$">
849
921
  <description>OpenSSH running on Ubuntu 14.04</description>
850
922
  <example service.version="6.6p1" openssh.comment="Ubuntu-2ubuntu1">OpenSSH_6.6p1 Ubuntu-2ubuntu1</example>
@@ -859,8 +931,9 @@
859
931
  <param pos="0" name="os.family" value="Linux"/>
860
932
  <param pos="0" name="os.product" value="Linux"/>
861
933
  <param pos="0" name="os.version" value="14.04"/>
862
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
934
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:14.04"/>
863
935
  </fingerprint>
936
+
864
937
  <fingerprint pattern="^OpenSSH_(6\.6\.1p1) (Ubuntu-8)$">
865
938
  <description>OpenSSH running on Ubuntu 14.10</description>
866
939
  <example service.version="6.6.1p1" openssh.comment="Ubuntu-8">OpenSSH_6.6.1p1 Ubuntu-8</example>
@@ -874,8 +947,9 @@
874
947
  <param pos="0" name="os.family" value="Linux"/>
875
948
  <param pos="0" name="os.product" value="Linux"/>
876
949
  <param pos="0" name="os.version" value="14.10"/>
877
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
950
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:14.10"/>
878
951
  </fingerprint>
952
+
879
953
  <fingerprint pattern="^OpenSSH_(6\.7p1) (Ubuntu-5ubuntu\d(?:\.\d)?)$">
880
954
  <description>OpenSSH running on Ubuntu 15.04 (vivid)</description>
881
955
  <example service.version="6.7p1" openssh.comment="Ubuntu-5ubuntu1">OpenSSH_6.7p1 Ubuntu-5ubuntu1</example>
@@ -889,8 +963,9 @@
889
963
  <param pos="0" name="os.family" value="Linux"/>
890
964
  <param pos="0" name="os.product" value="Linux"/>
891
965
  <param pos="0" name="os.version" value="15.04"/>
892
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
966
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:15.04"/>
893
967
  </fingerprint>
968
+
894
969
  <fingerprint pattern="^OpenSSH_(6\.9p1) (Ubuntu-2)$">
895
970
  <description>OpenSSH running on Ubuntu 15.10</description>
896
971
  <example service.version="6.9p1" openssh.comment="Ubuntu-2">OpenSSH_6.9p1 Ubuntu-2</example>
@@ -904,8 +979,9 @@
904
979
  <param pos="0" name="os.family" value="Linux"/>
905
980
  <param pos="0" name="os.product" value="Linux"/>
906
981
  <param pos="0" name="os.version" value="15.10"/>
907
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
982
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:15.10"/>
908
983
  </fingerprint>
984
+
909
985
  <fingerprint pattern="^OpenSSH_(7\.2p2) (Ubuntu-4ubuntu\d(?:\.\d)?)$">
910
986
  <description>OpenSSH running on Ubuntu 16.04 (vivid)</description>
911
987
  <example service.version="7.2p2" openssh.comment="Ubuntu-4ubuntu2.7">OpenSSH_7.2p2 Ubuntu-4ubuntu2.7</example>
@@ -919,8 +995,9 @@
919
995
  <param pos="0" name="os.family" value="Linux"/>
920
996
  <param pos="0" name="os.product" value="Linux"/>
921
997
  <param pos="0" name="os.version" value="16.04"/>
922
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
998
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:16.04"/>
923
999
  </fingerprint>
1000
+
924
1001
  <fingerprint pattern="^OpenSSH_(7\.3p1) (Ubuntu-1)$">
925
1002
  <description>OpenSSH running on Ubuntu 16.10</description>
926
1003
  <example service.version="7.3p1" openssh.comment="Ubuntu-1">OpenSSH_7.3p1 Ubuntu-1</example>
@@ -934,8 +1011,9 @@
934
1011
  <param pos="0" name="os.family" value="Linux"/>
935
1012
  <param pos="0" name="os.product" value="Linux"/>
936
1013
  <param pos="0" name="os.version" value="16.10"/>
937
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
1014
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:16.10"/>
938
1015
  </fingerprint>
1016
+
939
1017
  <fingerprint pattern="^OpenSSH_(7\.4p1) (Ubuntu-10)$">
940
1018
  <description>OpenSSH running on Ubuntu 17.04</description>
941
1019
  <example service.version="7.4p1" openssh.comment="Ubuntu-10">OpenSSH_7.4p1 Ubuntu-10</example>
@@ -949,8 +1027,9 @@
949
1027
  <param pos="0" name="os.family" value="Linux"/>
950
1028
  <param pos="0" name="os.product" value="Linux"/>
951
1029
  <param pos="0" name="os.version" value="17.04"/>
952
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
1030
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:17.04"/>
953
1031
  </fingerprint>
1032
+
954
1033
  <fingerprint pattern="^OpenSSH_(7\.5p1) (Ubuntu-10ubuntu\d(?:\.\d)?)$">
955
1034
  <description>OpenSSH running on Ubuntu 17.10</description>
956
1035
  <example service.version="7.5p1" openssh.comment="Ubuntu-10ubuntu0.1">OpenSSH_7.5p1 Ubuntu-10ubuntu0.1</example>
@@ -964,8 +1043,9 @@
964
1043
  <param pos="0" name="os.family" value="Linux"/>
965
1044
  <param pos="0" name="os.product" value="Linux"/>
966
1045
  <param pos="0" name="os.version" value="17.10"/>
967
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
1046
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:17.10"/>
968
1047
  </fingerprint>
1048
+
969
1049
  <fingerprint pattern="^OpenSSH_(7\.6p1) (Ubuntu-4ubuntu\d(?:\.\d)?)$">
970
1050
  <description>OpenSSH running on Ubuntu 18.04</description>
971
1051
  <example service.version="7.6p1" openssh.comment="Ubuntu-4ubuntu0.3">OpenSSH_7.6p1 Ubuntu-4ubuntu0.3</example>
@@ -979,8 +1059,9 @@
979
1059
  <param pos="0" name="os.family" value="Linux"/>
980
1060
  <param pos="0" name="os.product" value="Linux"/>
981
1061
  <param pos="0" name="os.version" value="18.04"/>
982
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
1062
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:18.04"/>
983
1063
  </fingerprint>
1064
+
984
1065
  <fingerprint pattern="^OpenSSH_(7\.7p1) (Ubuntu-4)$">
985
1066
  <description>OpenSSH running on Ubuntu 18.10</description>
986
1067
  <example service.version="7.7p1" openssh.comment="Ubuntu-4">OpenSSH_7.7p1 Ubuntu-4</example>
@@ -994,8 +1075,9 @@
994
1075
  <param pos="0" name="os.family" value="Linux"/>
995
1076
  <param pos="0" name="os.product" value="Linux"/>
996
1077
  <param pos="0" name="os.version" value="18.10"/>
997
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
1078
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:18.10"/>
998
1079
  </fingerprint>
1080
+
999
1081
  <fingerprint pattern="^OpenSSH_(7\.9p1) (Ubuntu-10)$">
1000
1082
  <description>OpenSSH running on Ubuntu 19.04</description>
1001
1083
  <example service.version="7.9p1" openssh.comment="Ubuntu-10">OpenSSH_7.9p1 Ubuntu-10</example>
@@ -1009,8 +1091,9 @@
1009
1091
  <param pos="0" name="os.family" value="Linux"/>
1010
1092
  <param pos="0" name="os.product" value="Linux"/>
1011
1093
  <param pos="0" name="os.version" value="19.04"/>
1012
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
1094
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:19.04"/>
1013
1095
  </fingerprint>
1096
+
1014
1097
  <fingerprint pattern="^OpenSSH_(8\.0p1) (Ubuntu-6build1)$">
1015
1098
  <description>OpenSSH running on Ubuntu 19.10</description>
1016
1099
  <example service.version="8.0p1" openssh.comment="Ubuntu-6build1">OpenSSH_8.0p1 Ubuntu-6build1</example>
@@ -1024,8 +1107,9 @@
1024
1107
  <param pos="0" name="os.family" value="Linux"/>
1025
1108
  <param pos="0" name="os.product" value="Linux"/>
1026
1109
  <param pos="0" name="os.version" value="19.10"/>
1027
- <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:{os.version}"/>
1110
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:19.10"/>
1028
1111
  </fingerprint>
1112
+
1029
1113
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Ubuntu-\d\d?)$">
1030
1114
  <description>OpenSSH running on Ubuntu (unknown release)</description>
1031
1115
  <example service.version="7.6p1" openssh.comment="Ubuntu-2">OpenSSH_7.6p1 Ubuntu-2</example>
@@ -1040,6 +1124,7 @@
1040
1124
  <param pos="0" name="os.product" value="Linux"/>
1041
1125
  <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
1042
1126
  </fingerprint>
1127
+
1043
1128
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+((?:Debian|Ubuntu).+ubuntu.*)$">
1044
1129
  <description>OpenSSH running on Ubuntu</description>
1045
1130
  <example service.version="7.2p3" openssh.comment="Ubuntu-4ubuntu2.2">OpenSSH_7.2p3 Ubuntu-4ubuntu2.2</example>
@@ -1055,7 +1140,9 @@
1055
1140
  <param pos="0" name="os.certainty" value="0.75"/>
1056
1141
  <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
1057
1142
  </fingerprint>
1143
+
1058
1144
  <!-- Debian -->
1145
+
1059
1146
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian.+woody.*)$">
1060
1147
  <description>OpenSSH running on Debian 3.0 (woody)</description>
1061
1148
  <example service.version="3.4p1" openssh.comment="Debian 1:3.4p1-1.woody.3">OpenSSH_3.4p1 Debian 1:3.4p1-1.woody.3</example>
@@ -1069,8 +1156,9 @@
1069
1156
  <param pos="0" name="os.family" value="Linux"/>
1070
1157
  <param pos="0" name="os.product" value="Linux"/>
1071
1158
  <param pos="0" name="os.version" value="3.0"/>
1072
- <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1159
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:3.0"/>
1073
1160
  </fingerprint>
1161
+
1074
1162
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian.+sarge.*)$">
1075
1163
  <description>OpenSSH running on Debian 3.1 (sarge)</description>
1076
1164
  <example service.version="3.8.1p1" openssh.comment="Debian-8.sarge.4">OpenSSH_3.8.1p1 Debian-8.sarge.4</example>
@@ -1084,8 +1172,9 @@
1084
1172
  <param pos="0" name="os.family" value="Linux"/>
1085
1173
  <param pos="0" name="os.product" value="Linux"/>
1086
1174
  <param pos="0" name="os.version" value="3.1"/>
1087
- <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1175
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:3.1"/>
1088
1176
  </fingerprint>
1177
+
1089
1178
  <fingerprint pattern="^OpenSSH_(4\.3p2) (Debian-9.*)$">
1090
1179
  <description>OpenSSH running on Debian 4.0 (etch)</description>
1091
1180
  <example service.version="4.3p2" openssh.comment="Debian-9">OpenSSH_4.3p2 Debian-9</example>
@@ -1100,8 +1189,9 @@
1100
1189
  <param pos="0" name="os.family" value="Linux"/>
1101
1190
  <param pos="0" name="os.product" value="Linux"/>
1102
1191
  <param pos="0" name="os.version" value="4.0"/>
1103
- <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1192
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:4.0"/>
1104
1193
  </fingerprint>
1194
+
1105
1195
  <fingerprint pattern="^OpenSSH_(5\.1p1) (Debian-5)$">
1106
1196
  <description>OpenSSH running on Debian 5.0 (also 5.10)</description>
1107
1197
  <example service.version="5.1p1" openssh.comment="Debian-5">OpenSSH_5.1p1 Debian-5</example>
@@ -1115,8 +1205,9 @@
1115
1205
  <param pos="0" name="os.family" value="Linux"/>
1116
1206
  <param pos="0" name="os.product" value="Linux"/>
1117
1207
  <param pos="0" name="os.version" value="5.0"/>
1118
- <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1208
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:5.0"/>
1119
1209
  </fingerprint>
1210
+
1120
1211
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-\d+[+~]squeeze.*)$">
1121
1212
  <description>OpenSSH running on Debian 6.0 (squeeze)</description>
1122
1213
  <example service.version="5.5p1" openssh.comment="Debian-6+squeeze4">OpenSSH_5.5p1 Debian-6+squeeze4</example>
@@ -1132,8 +1223,9 @@
1132
1223
  <param pos="0" name="os.family" value="Linux"/>
1133
1224
  <param pos="0" name="os.product" value="Linux"/>
1134
1225
  <param pos="0" name="os.version" value="6.0"/>
1135
- <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1226
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:6.0"/>
1136
1227
  </fingerprint>
1228
+
1137
1229
  <fingerprint pattern="^OpenSSH_(5\.5p1) (Debian-6)$">
1138
1230
  <description>OpenSSH running on Debian 6.0 (w/o squeeze in banner)</description>
1139
1231
  <example service.version="5.5p1" openssh.comment="Debian-6">OpenSSH_5.5p1 Debian-6</example>
@@ -1147,9 +1239,11 @@
1147
1239
  <param pos="0" name="os.family" value="Linux"/>
1148
1240
  <param pos="0" name="os.product" value="Linux"/>
1149
1241
  <param pos="0" name="os.version" value="6.0"/>
1150
- <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1242
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:6.0"/>
1151
1243
  </fingerprint>
1244
+
1152
1245
  <!-- More specific than and should preceed the 7.0 match -->
1246
+
1153
1247
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-4\+deb7u2)$">
1154
1248
  <description>OpenSSH running on Debian 7.8 (wheezy)</description>
1155
1249
  <example service.version="6.0p1" openssh.comment="Debian-4+deb7u2">OpenSSH_6.0p1 Debian-4+deb7u2</example>
@@ -1163,8 +1257,9 @@
1163
1257
  <param pos="0" name="os.family" value="Linux"/>
1164
1258
  <param pos="0" name="os.product" value="Linux"/>
1165
1259
  <param pos="0" name="os.version" value="7.8"/>
1166
- <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1260
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:7.8"/>
1167
1261
  </fingerprint>
1262
+
1168
1263
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-4(?:\+deb7u\d+)?)$">
1169
1264
  <description>OpenSSH running on Debian 7.x (wheezy)</description>
1170
1265
  <example service.version="6.0p1" openssh.comment="Debian-4">OpenSSH_6.0p1 Debian-4</example>
@@ -1179,8 +1274,9 @@
1179
1274
  <param pos="0" name="os.family" value="Linux"/>
1180
1275
  <param pos="0" name="os.product" value="Linux"/>
1181
1276
  <param pos="0" name="os.version" value="7.0"/>
1182
- <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1277
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:7.0"/>
1183
1278
  </fingerprint>
1279
+
1184
1280
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-\d~bpo7\d?\+\d+)$">
1185
1281
  <description>OpenSSH backport running on Debian 7.x (wheezy)</description>
1186
1282
  <example service.version="6.6.1p1" openssh.comment="Debian-4~bpo70+1">OpenSSH_6.6.1p1 Debian-4~bpo70+1</example>
@@ -1195,8 +1291,9 @@
1195
1291
  <param pos="0" name="os.family" value="Linux"/>
1196
1292
  <param pos="0" name="os.product" value="Linux"/>
1197
1293
  <param pos="0" name="os.version" value="7.0"/>
1198
- <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1294
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:7.0"/>
1199
1295
  </fingerprint>
1296
+
1200
1297
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-5\+deb8u\d+.*)$">
1201
1298
  <description>OpenSSH running on Debian 8.x (jessie)</description>
1202
1299
  <example service.version="6.7p1" openssh.comment="Debian-5+deb8u2">OpenSSH_6.7p1 Debian-5+deb8u2</example>
@@ -1212,8 +1309,9 @@
1212
1309
  <param pos="0" name="os.family" value="Linux"/>
1213
1310
  <param pos="0" name="os.product" value="Linux"/>
1214
1311
  <param pos="0" name="os.version" value="8.0"/>
1215
- <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1312
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:8.0"/>
1216
1313
  </fingerprint>
1314
+
1217
1315
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-\d\d?\+deb9u\d+)$">
1218
1316
  <description>OpenSSH running on Debian 9.x (stretch)</description>
1219
1317
  <example service.version="7.4p1" openssh.comment="Debian-10+deb9u1">OpenSSH_7.4p1 Debian-10+deb9u1</example>
@@ -1228,8 +1326,9 @@
1228
1326
  <param pos="0" name="os.family" value="Linux"/>
1229
1327
  <param pos="0" name="os.product" value="Linux"/>
1230
1328
  <param pos="0" name="os.version" value="9.0"/>
1231
- <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1329
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:9.0"/>
1232
1330
  </fingerprint>
1331
+
1233
1332
  <fingerprint pattern="^OpenSSH_(7\.9p1) (Debian-10|Debian-\d\d?\+deb10u\d+)$">
1234
1333
  <description>OpenSSH running on Debian 10.x (buster)</description>
1235
1334
  <example service.version="7.9p1" openssh.comment="Debian-10">OpenSSH_7.9p1 Debian-10</example>
@@ -1244,8 +1343,9 @@
1244
1343
  <param pos="0" name="os.family" value="Linux"/>
1245
1344
  <param pos="0" name="os.product" value="Linux"/>
1246
1345
  <param pos="0" name="os.version" value="10.0"/>
1247
- <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1346
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:10.0"/>
1248
1347
  </fingerprint>
1348
+
1249
1349
  <fingerprint pattern="^OpenSSH_(8\.1p1) (Debian-1|Debian-\d\d?\+deb11u\d+)$">
1250
1350
  <description>OpenSSH running on Debian 11.x (bullseye)</description>
1251
1351
  <example service.version="8.1p1" openssh.comment="Debian-1">OpenSSH_8.1p1 Debian-1</example>
@@ -1260,8 +1360,9 @@
1260
1360
  <param pos="0" name="os.family" value="Linux"/>
1261
1361
  <param pos="0" name="os.product" value="Linux"/>
1262
1362
  <param pos="0" name="os.version" value="11.0"/>
1263
- <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
1363
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:11.0"/>
1264
1364
  </fingerprint>
1365
+
1265
1366
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Debian-\d+(?:[~]?bpo[.]?\d+)?)$">
1266
1367
  <description>OpenSSH running on Debian (unknown release)</description>
1267
1368
  <example service.version="4.3p2" openssh.comment="Debian-5~bpo.1">OpenSSH_4.3p2 Debian-5~bpo.1</example>
@@ -1278,7 +1379,9 @@
1278
1379
  <param pos="0" name="os.product" value="Linux"/>
1279
1380
  <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
1280
1381
  </fingerprint>
1382
+
1281
1383
  <!-- Raspbian -->
1384
+
1282
1385
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Raspbian-5\+deb8u\d+)$">
1283
1386
  <description>OpenSSH running on Raspbian (Debian 8 "Jessie" based)</description>
1284
1387
  <example service.version="6.7p1" openssh.comment="Raspbian-5+deb8u1">OpenSSH_6.7p1 Raspbian-5+deb8u1</example>
@@ -1293,7 +1396,9 @@
1293
1396
  <param pos="0" name="os.family" value="Linux"/>
1294
1397
  <param pos="0" name="os.product" value="Linux"/>
1295
1398
  <param pos="0" name="os.version" value="8.0"/>
1399
+ <param pos="0" name="hw.product" value="Raspberry Pi"/>
1296
1400
  </fingerprint>
1401
+
1297
1402
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Raspbian-\d\d?\+deb9u\d+)$">
1298
1403
  <description>OpenSSH running on Raspbian (Debian 9 "Stretch" based)</description>
1299
1404
  <example service.version="7.4p1" openssh.comment="Raspbian-10+deb9u1">OpenSSH_7.4p1 Raspbian-10+deb9u1</example>
@@ -1308,7 +1413,9 @@
1308
1413
  <param pos="0" name="os.family" value="Linux"/>
1309
1414
  <param pos="0" name="os.product" value="Linux"/>
1310
1415
  <param pos="0" name="os.version" value="9.0"/>
1416
+ <param pos="0" name="hw.product" value="Raspberry Pi"/>
1311
1417
  </fingerprint>
1418
+
1312
1419
  <fingerprint pattern="^OpenSSH_(7\.9p1)\s+(Raspbian-(?:10|\d\d?\+deb10u\d+))$">
1313
1420
  <description>OpenSSH running on Raspbian (Debian 10 "Buster" based)</description>
1314
1421
  <example service.version="7.9p1" openssh.comment="Raspbian-10">OpenSSH_7.9p1 Raspbian-10</example>
@@ -1323,7 +1430,9 @@
1323
1430
  <param pos="0" name="os.family" value="Linux"/>
1324
1431
  <param pos="0" name="os.product" value="Linux"/>
1325
1432
  <param pos="0" name="os.version" value="10.0"/>
1433
+ <param pos="0" name="hw.product" value="Raspberry Pi"/>
1326
1434
  </fingerprint>
1435
+
1327
1436
  <fingerprint pattern="^OpenSSH_(8\.1p1)\s+(Raspbian-(?:1|\d\d?\+deb11u\d+))$">
1328
1437
  <description>OpenSSH running on Raspbian (Debian 11 "Bullseye" based)</description>
1329
1438
  <example service.version="8.1p1" openssh.comment="Raspbian-1">OpenSSH_8.1p1 Raspbian-1</example>
@@ -1338,7 +1447,9 @@
1338
1447
  <param pos="0" name="os.family" value="Linux"/>
1339
1448
  <param pos="0" name="os.product" value="Linux"/>
1340
1449
  <param pos="0" name="os.version" value="11.0"/>
1450
+ <param pos="0" name="hw.product" value="Raspberry Pi"/>
1341
1451
  </fingerprint>
1452
+
1342
1453
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(Raspbian-\d\d?)$">
1343
1454
  <description>OpenSSH running on Raspbian (Debian, unknown release)</description>
1344
1455
  <example service.version="7.5p1" openssh.comment="Raspbian-10">OpenSSH_7.5p1 Raspbian-10</example>
@@ -1352,8 +1463,11 @@
1352
1463
  <param pos="0" name="os.vendor" value="Raspbian"/>
1353
1464
  <param pos="0" name="os.family" value="Linux"/>
1354
1465
  <param pos="0" name="os.product" value="Linux"/>
1466
+ <param pos="0" name="hw.product" value="Raspberry Pi"/>
1355
1467
  </fingerprint>
1468
+
1356
1469
  <!-- Miscellaneous -->
1470
+
1357
1471
  <fingerprint pattern="^OpenSSH_(.*)\+(CAN-[0-9]{4}-[0-9]{4})$">
1358
1472
  <description>OpenSSH with CVE patch, as seen in Mac OS X</description>
1359
1473
  <example service.version="3.4p1" openssh.cvepatch="CAN-2004-0175">OpenSSH_3.4p1+CAN-2004-0175</example>
@@ -1368,6 +1482,7 @@
1368
1482
  <param pos="0" name="os.product" value="Mac OS X"/>
1369
1483
  <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:-"/>
1370
1484
  </fingerprint>
1485
+
1371
1486
  <fingerprint pattern="^OpenSSH_(.*)_Mikrotik_v(.*)$">
1372
1487
  <description>OpenSSH on MikroTik</description>
1373
1488
  <example service.version="2.3.0" os.version="2.9">OpenSSH_2.3.0_Mikrotik_v2.9</example>
@@ -1383,6 +1498,7 @@
1383
1498
  <param pos="0" name="os.product" value="RouterOS"/>
1384
1499
  <param pos="0" name="os.cpe23" value="cpe:/o:mikrotik:routeros:{os.version}"/>
1385
1500
  </fingerprint>
1501
+
1386
1502
  <fingerprint pattern="^OpenSSH_(.*)-HipServ$">
1387
1503
  <description>OpenSSH on HipServ</description>
1388
1504
  <example service.version="4.3">OpenSSH_4.3-HipServ</example>
@@ -1396,6 +1512,7 @@
1396
1512
  <param pos="0" name="os.family" value="Linux"/>
1397
1513
  <param pos="0" name="os.product" value="HipServ"/>
1398
1514
  </fingerprint>
1515
+
1399
1516
  <fingerprint pattern="^OpenSSH_for_Windows_([\d.]+)$">
1400
1517
  <description>OpenSSH running on Windows</description>
1401
1518
  <example service.version="7.7">OpenSSH_for_Windows_7.7</example>
@@ -1407,7 +1524,9 @@
1407
1524
  <param pos="0" name="os.vendor" value="Microsoft"/>
1408
1525
  <param pos="0" name="os.family" value="Windows"/>
1409
1526
  <param pos="0" name="os.product" value="Windows"/>
1527
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1410
1528
  </fingerprint>
1529
+
1411
1530
  <fingerprint pattern="^OpenSSH_(.*) in DesktopAuthority (?:.*)$">
1412
1531
  <description>DesktopAuthority SSH</description>
1413
1532
  <example service.version="3.8">OpenSSH_3.8 in DesktopAuthority 7.1.091</example>
@@ -1421,6 +1540,7 @@
1421
1540
  <param pos="0" name="os.product" value="Windows"/>
1422
1541
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1423
1542
  </fingerprint>
1543
+
1424
1544
  <fingerprint pattern="^OpenSSH_(\d+\.\d+(?:\.\d+)?(?:p\d+)?) ((?:PKIX\s+)?FIPS)$">
1425
1545
  <description>OpenSSH with a version and FIPS mode enabled</description>
1426
1546
  <example service.version="5.9" openssh.comment="FIPS">OpenSSH_5.9 FIPS</example>
@@ -1433,6 +1553,7 @@
1433
1553
  <param pos="0" name="service.product" value="OpenSSH"/>
1434
1554
  <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1435
1555
  </fingerprint>
1556
+
1436
1557
  <fingerprint pattern="^OpenSSH_(\d+\.\d+(?:\.\d+)?(?:p\d+)?) *$">
1437
1558
  <description>OpenSSH with just a version, no comment by vendor</description>
1438
1559
  <example service.version="5.9p1">OpenSSH_5.9p1</example>
@@ -1445,6 +1566,7 @@
1445
1566
  <param pos="0" name="service.product" value="OpenSSH"/>
1446
1567
  <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:{service.version}"/>
1447
1568
  </fingerprint>
1569
+
1448
1570
  <fingerprint pattern="^OpenSSH$">
1449
1571
  <description>OpenSSH w/o version or comment</description>
1450
1572
  <example>OpenSSH</example>
@@ -1453,7 +1575,9 @@
1453
1575
  <param pos="0" name="service.product" value="OpenSSH"/>
1454
1576
  <param pos="0" name="service.cpe23" value="cpe:/a:openbsd:openssh:-"/>
1455
1577
  </fingerprint>
1578
+
1456
1579
  <!-- SSH-1.99-OpenSSH_4.3p2-4.cern-hpn-CERN-4.3p2-4.cern -->
1580
+
1457
1581
  <!--<fingerprint pattern="^OpenSSH_?([^\s]*)\s*(.*)$">
1458
1582
  <description>Catch all for OpenSSH based SSH servers
1459
1583
  ******************** NOTE ********************
@@ -1466,8 +1590,12 @@
1466
1590
  <param pos="0" name="service.vendor" value="OpenBSD"/>
1467
1591
  <param pos="0" name="service.family" value="OpenSSH"/>
1468
1592
  <param pos="0" name="service.product" value="OpenSSH"/>
1469
- </fingerprint>-->
1593
+ </fingerprint>
1594
+
1595
+ -->
1596
+
1470
1597
  <!-- TODO: Handle "vpn3" banners for Cisco 3000 VPN Concentrators (need example banners first) -->
1598
+
1471
1599
  <fingerprint pattern="^Cisco-(.*)$">
1472
1600
  <description>Cisco SSH banner (could be IOS or PIX), The version always seems to be 1.25</description>
1473
1601
  <example service.version="1.25">Cisco-1.25</example>
@@ -1479,8 +1607,9 @@
1479
1607
  <param pos="0" name="os.certainty" value="0.8"/>
1480
1608
  <param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:-"/>
1481
1609
  </fingerprint>
1610
+
1482
1611
  <fingerprint pattern="^CISCO_WLC$">
1483
- <description>SSH banner from a Cisco Wireless LAN Controller (WLC)</description>
1612
+ <description>SSH banner from a Cisco WLC (WLC)</description>
1484
1613
  <example>CISCO_WLC</example>
1485
1614
  <param pos="0" name="service.vendor" value="Cisco"/>
1486
1615
  <param pos="0" name="service.product" value="SSH"/>
@@ -1488,6 +1617,7 @@
1488
1617
  <param pos="0" name="os.product" value="Wireless LAN Controller"/>
1489
1618
  <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller:-"/>
1490
1619
  </fingerprint>
1620
+
1491
1621
  <fingerprint pattern="(?i)^Cleo (\S+)/(\S+) SSH FTP server$">
1492
1622
  <description>Cleo networks Harmony, VLProxy, VLTrader, others</description>
1493
1623
  <example service.product="Harmony" service.version="5.5.0.3">Cleo Harmony/5.5.0.3 SSH FTP server</example>
@@ -1496,6 +1626,7 @@
1496
1626
  <param pos="1" name="service.product"/>
1497
1627
  <param pos="2" name="service.version"/>
1498
1628
  </fingerprint>
1629
+
1499
1630
  <fingerprint pattern="^Sun_SSH_(.*)$">
1500
1631
  <description>Sun SSH banner</description>
1501
1632
  <example service.version="1.1">Sun_SSH_1.1</example>
@@ -1507,6 +1638,7 @@
1507
1638
  <param pos="0" name="os.product" value="Solaris"/>
1508
1639
  <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:-"/>
1509
1640
  </fingerprint>
1641
+
1510
1642
  <fingerprint pattern="^SSH Protocol Compatible Server SCS (.*)$">
1511
1643
  <description>Netscreen with version</description>
1512
1644
  <param pos="1" name="service.version"/>
@@ -1519,6 +1651,7 @@
1519
1651
  <param pos="0" name="os.product" value="ScreenOS"/>
1520
1652
  <param pos="0" name="os.cpe23" value="cpe:/o:juniper:screenos:-"/>
1521
1653
  </fingerprint>
1654
+
1522
1655
  <fingerprint pattern="^NetScreen$">
1523
1656
  <description>Netscreen generic</description>
1524
1657
  <example>NetScreen</example>
@@ -1531,11 +1664,13 @@
1531
1664
  <param pos="0" name="os.product" value="ScreenOS"/>
1532
1665
  <param pos="0" name="os.cpe23" value="cpe:/o:juniper:screenos:-"/>
1533
1666
  </fingerprint>
1667
+
1534
1668
  <fingerprint pattern="^HUAWEI-(?:[\d\.]+)$">
1535
1669
  <description>Huawei generic</description>
1536
1670
  <example>HUAWEI-1.5</example>
1537
1671
  <param pos="0" name="hw.vendor" value="Huawei"/>
1538
1672
  </fingerprint>
1673
+
1539
1674
  <fingerprint pattern="^HUAWEI-UMG(\d+)">
1540
1675
  <description>Huawei Universal Media Gateway</description>
1541
1676
  <example hw.model="8900">HUAWEI-UMG8900</example>
@@ -1544,6 +1679,7 @@
1544
1679
  <param pos="0" name="hw.device" value="Telecom"/>
1545
1680
  <param pos="1" name="hw.model"/>
1546
1681
  </fingerprint>
1682
+
1547
1683
  <fingerprint pattern="^HUAWEI.VRP.([\d\.]+)$">
1548
1684
  <description>Huawei Versatile Routing Platform (VRP)</description>
1549
1685
  <example os.version="3.10" service.version="3.10">HUAWEI-VRP-3.10</example>
@@ -1558,6 +1694,7 @@
1558
1694
  <param pos="0" name="os.product" value="VRP"/>
1559
1695
  <param pos="1" name="os.version"/>
1560
1696
  </fingerprint>
1697
+
1561
1698
  <fingerprint pattern="^([\d.]+)[ _]sshlib:? (?i:GlobalScape)$">
1562
1699
  <description>GlobalScape SSH (which uses Bitvise sshlib)</description>
1563
1700
  <example service.component.version="1.36">1.36_sshlib GlobalSCAPE</example>
@@ -1575,6 +1712,7 @@
1575
1712
  <param pos="0" name="os.product" value="Windows"/>
1576
1713
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1577
1714
  </fingerprint>
1715
+
1578
1716
  <fingerprint pattern="^([^\s]+) sshlib: WinSSHD (.*)$">
1579
1717
  <description>Bitvise WinSSHD (which uses Bitvise sshlib)</description>
1580
1718
  <example service.component.version="1.78" service.version="4.15a">1.78 sshlib: WinSSHD 4.15a</example>
@@ -1591,6 +1729,7 @@
1591
1729
  <param pos="0" name="os.product" value="Windows"/>
1592
1730
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1593
1731
  </fingerprint>
1732
+
1594
1733
  <fingerprint pattern="^([^\s]+) FlowSsh: (?:Bitvise SSH Server \(WinSSHD\)|WinSSHD) ([\d\.]+):?.*$">
1595
1734
  <description>Bitvise WinSSHD (which uses Bitvise flowssh) with version</description>
1596
1735
  <example service.version="5.09" service.component.version="1.03">1.03 FlowSsh: WinSSHD 5.09</example>
@@ -1609,6 +1748,7 @@
1609
1748
  <param pos="0" name="os.product" value="Windows"/>
1610
1749
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1611
1750
  </fingerprint>
1751
+
1612
1752
  <fingerprint pattern="^([^\s]+) FlowSsh: (?:Bitvise SSH Server \(WinSSHD\)|WinSSHD)(?: :.*)?$">
1613
1753
  <description>Bitvise WinSSHD (which uses Bitvise flowssh) without version</description>
1614
1754
  <example service.component.version="9.99">9.99 FlowSsh: Bitvise SSH Server (WinSSHD)</example>
@@ -1625,6 +1765,7 @@
1625
1765
  <param pos="0" name="os.product" value="Windows"/>
1626
1766
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1627
1767
  </fingerprint>
1768
+
1628
1769
  <fingerprint pattern="^([^\s]+) sshlib: MOVEit DMZ SSH (.*)$">
1629
1770
  <description>MOVEit DMZ (which uses Bitvise sshlib)</description>
1630
1771
  <param pos="1" name="service.component.version"/>
@@ -1640,6 +1781,7 @@
1640
1781
  <param pos="0" name="os.product" value="Windows"/>
1641
1782
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1642
1783
  </fingerprint>
1784
+
1643
1785
  <fingerprint pattern="^paramiko_([\d\.]+).*$">
1644
1786
  <description>Paramiko</description>
1645
1787
  <example service.version="2.1.3">paramiko_2.1.3 501 command not implemented ERROR</example>
@@ -1647,7 +1789,9 @@
1647
1789
  <param pos="0" name="service.vendor" value="Paramiko"/>
1648
1790
  <param pos="0" name="service.product" value="Paramiko"/>
1649
1791
  <param pos="1" name="service.version"/>
1792
+ <param pos="0" name="service.cpe23" value="cpe:/a:paramiko:paramiko:{service.version}"/>
1650
1793
  </fingerprint>
1794
+
1651
1795
  <fingerprint pattern="^Pragma SecureShell\s*(.*)$">
1652
1796
  <description>Pragma SecureShell</description>
1653
1797
  <param pos="1" name="service.version"/>
@@ -1659,6 +1803,7 @@
1659
1803
  <param pos="0" name="os.product" value="Windows"/>
1660
1804
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1661
1805
  </fingerprint>
1806
+
1662
1807
  <fingerprint pattern="^Pragma FortressSSH\s+([\d.]+)(?:\s+\[([\d.:]+)\])?$">
1663
1808
  <description>Pragma FortressSSH</description>
1664
1809
  <example service.version="5.0.9.2031">Pragma FortressSSH 5.0.9.2031</example>
@@ -1673,6 +1818,7 @@
1673
1818
  <param pos="0" name="os.product" value="Windows"/>
1674
1819
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1675
1820
  </fingerprint>
1821
+
1676
1822
  <fingerprint pattern="^RebexSSH_([\d\.]+)$">
1677
1823
  <description>Rbex SSH</description>
1678
1824
  <example service.version="1.0.5.25508">RebexSSH_1.0.5.25508</example>
@@ -1680,12 +1826,14 @@
1680
1826
  <param pos="0" name="service.product" value="SSH"/>
1681
1827
  <param pos="1" name="service.version"/>
1682
1828
  </fingerprint>
1829
+
1683
1830
  <fingerprint pattern="^RGOS_\S+$">
1684
1831
  <description>Ruijie Networks SSH</description>
1685
1832
  <example>RGOS_SSH_1.0</example>
1686
1833
  <example>RGOS_PK3223</example>
1687
1834
  <param pos="0" name="hw.vendor" value="Ruijie"/>
1688
1835
  </fingerprint>
1836
+
1689
1837
  <fingerprint pattern="^VShell_(?:Special_Edition_)?(\d+)_(\d+)_(\d+)_(\d+) VShell$">
1690
1838
  <description>VanDyke VShell - detailed variant</description>
1691
1839
  <example service.version="3" service.version.version="6" service.version.version.version="2" service.version.version.version.version="446">VShell_3_6_2_446 VShell</example>
@@ -1699,6 +1847,7 @@
1699
1847
  <param pos="0" name="service.product" value="VShell"/>
1700
1848
  <param pos="0" name="service.cpe23" value="cpe:/a:vandyke:vshell:{service.version}"/>
1701
1849
  </fingerprint>
1850
+
1702
1851
  <fingerprint pattern="^([\s]*)\s*VShell$">
1703
1852
  <description>VanDyke VShell</description>
1704
1853
  <param pos="1" name="service.version"/>
@@ -1707,6 +1856,7 @@
1707
1856
  <param pos="0" name="service.product" value="VShell"/>
1708
1857
  <param pos="0" name="service.cpe23" value="cpe:/a:vandyke:vshell:{service.version}"/>
1709
1858
  </fingerprint>
1859
+
1710
1860
  <fingerprint pattern="^WRQReflection(?i:F)orSecureIT_(.*)$">
1711
1861
  <description>Attachmate Reflection (formerly WRQ Reflection for Secure IT)</description>
1712
1862
  <example service.version="6.1 Build 21">WRQReflectionForSecureIT_6.1 Build 21</example>
@@ -1716,6 +1866,7 @@
1716
1866
  <param pos="0" name="service.family" value="Reflection"/>
1717
1867
  <param pos="0" name="service.product" value="Reflection"/>
1718
1868
  </fingerprint>
1869
+
1719
1870
  <fingerprint pattern="^([^\s]*)\s*F-Secure SSH\s*(?:.*)$">
1720
1871
  <description>Attachmate Reflection (formerly F-Secure SSH)</description>
1721
1872
  <example service.version="3.2.3">3.2.3 F-Secure SSH Windows NT Server</example>
@@ -1724,6 +1875,7 @@
1724
1875
  <param pos="0" name="service.family" value="Reflection"/>
1725
1876
  <param pos="0" name="service.product" value="Reflection"/>
1726
1877
  </fingerprint>
1878
+
1727
1879
  <fingerprint pattern="^([^\s]*)\s*SSH Tectia Server$">
1728
1880
  <description>SSH Communications Security Tectia Server - branded</description>
1729
1881
  <example service.version="6.4.12.353">6.4.12.353 SSH Tectia Server</example>
@@ -1732,6 +1884,7 @@
1732
1884
  <param pos="0" name="service.family" value="SSH Tectia Server"/>
1733
1885
  <param pos="0" name="service.product" value="SSH Tectia Server"/>
1734
1886
  </fingerprint>
1887
+
1735
1888
  <fingerprint pattern="^([0-9\.]+) SSH Secure Shell(?: \(non-commercial\))?$">
1736
1889
  <description>SSH Communications Security Tectia Server</description>
1737
1890
  <example service.version="3.2.9.1">3.2.9.1 SSH Secure Shell (non-commercial)</example>
@@ -1742,6 +1895,7 @@
1742
1895
  <param pos="0" name="service.family" value="SSH Tectia Server"/>
1743
1896
  <param pos="0" name="service.product" value="SSH Tectia Server"/>
1744
1897
  </fingerprint>
1898
+
1745
1899
  <fingerprint pattern="^([0-9\.]+) SSH Secure Shell Windows NT Server$">
1746
1900
  <description>Unknown Windows SSH server</description>
1747
1901
  <example service.version="4.0.3">4.0.3 SSH Secure Shell Windows NT Server</example>
@@ -1754,6 +1908,7 @@
1754
1908
  <param pos="0" name="service.family" value="SSH Tectia Server"/>
1755
1909
  <param pos="0" name="service.product" value="SSH Tectia Server"/>
1756
1910
  </fingerprint>
1911
+
1757
1912
  <fingerprint pattern="^ARRIS_(.*)$">
1758
1913
  <description>ARRIS device (though not clear which) - www.arrisi.com</description>
1759
1914
  <example service.version="0.50">ARRIS_0.50</example>
@@ -1762,6 +1917,7 @@
1762
1917
  <param pos="0" name="service.product" value="ARRIS"/>
1763
1918
  <param pos="0" name="os.vendor" value="ARRIS"/>
1764
1919
  </fingerprint>
1920
+
1765
1921
  <fingerprint pattern="^Mocana SSH\s?(?:([\d.]+))?$">
1766
1922
  <description>Mocana Embedded SSH</description>
1767
1923
  <example service.version="5.3.1">Mocana SSH 5.3.1</example>
@@ -1771,6 +1927,7 @@
1771
1927
  <param pos="0" name="service.family" value="Embedded SSH Server"/>
1772
1928
  <param pos="0" name="service.product" value="Embedded SSH Server"/>
1773
1929
  </fingerprint>
1930
+
1774
1931
  <fingerprint pattern="^FreSSH\.(.*)$">
1775
1932
  <description>FreSSH</description>
1776
1933
  <example service.version="0.8">FreSSH.0.8</example>
@@ -1778,6 +1935,7 @@
1778
1935
  <param pos="0" name="service.family" value="FreSSH"/>
1779
1936
  <param pos="0" name="service.product" value="FreSSH"/>
1780
1937
  </fingerprint>
1938
+
1781
1939
  <fingerprint pattern="^RomCliSecure_(.*)$">
1782
1940
  <description>RomCliSecure appears to be the Adtran NetVanta products</description>
1783
1941
  <example service.version="4.12">RomCliSecure_4.12</example>
@@ -1789,6 +1947,7 @@
1789
1947
  <param pos="0" name="os.family" value="NetVanta"/>
1790
1948
  <param pos="0" name="os.product" value="NetVanta"/>
1791
1949
  </fingerprint>
1950
+
1792
1951
  <fingerprint pattern="^.*MultiNet.*$">
1793
1952
  <description>Process Software MultiNet is a suite of network apps for OpenVMS</description>
1794
1953
  <param pos="0" name="service.vendor" value="Process Software"/>
@@ -1799,12 +1958,14 @@
1799
1958
  <param pos="0" name="os.product" value="OpenVMS"/>
1800
1959
  <param pos="0" name="os.cpe23" value="cpe:/o:hp:openvms:-"/>
1801
1960
  </fingerprint>
1961
+
1802
1962
  <fingerprint pattern="^dropbear$">
1803
1963
  <description>Dropbear w/o version - http://matt.ucc.asn.au/dropbear/dropbear.html</description>
1804
1964
  <example>dropbear</example>
1805
1965
  <param pos="0" name="service.family" value="Dropbear"/>
1806
1966
  <param pos="0" name="service.product" value="Dropbear"/>
1807
1967
  </fingerprint>
1968
+
1808
1969
  <fingerprint pattern="^dropbear_(.*)$">
1809
1970
  <description>Dropbear - http://matt.ucc.asn.au/dropbear/dropbear.html</description>
1810
1971
  <example service.version="2015.67">dropbear_2015.67</example>
@@ -1813,6 +1974,7 @@
1813
1974
  <param pos="0" name="service.family" value="Dropbear"/>
1814
1975
  <param pos="0" name="service.product" value="Dropbear"/>
1815
1976
  </fingerprint>
1977
+
1816
1978
  <fingerprint pattern="^lancom$">
1817
1979
  <description>LANCOM Systems - http://www.lancom-systems.de/</description>
1818
1980
  <example>lancom</example>
@@ -1821,6 +1983,7 @@
1821
1983
  <param pos="0" name="service.product" value="SSH"/>
1822
1984
  <param pos="0" name="os.vendor" value="LANCOM Systems"/>
1823
1985
  </fingerprint>
1986
+
1824
1987
  <fingerprint pattern="^0$">
1825
1988
  <description>MOVEit DMZ</description>
1826
1989
  <example>0</example>
@@ -1832,6 +1995,7 @@
1832
1995
  <param pos="0" name="os.product" value="Windows"/>
1833
1996
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1834
1997
  </fingerprint>
1998
+
1835
1999
  <fingerprint pattern="^Comware-(\d+\.?\d*\.?\d*)$">
1836
2000
  <description>SSH on H3C Comware</description>
1837
2001
  <example os.version="5.20.105">Comware-5.20.105</example>
@@ -1844,6 +2008,7 @@
1844
2008
  <param pos="0" name="os.family" value="Comware"/>
1845
2009
  <param pos="1" name="os.version"/>
1846
2010
  </fingerprint>
2011
+
1847
2012
  <fingerprint pattern="^Data ONTAP SSH [\d\.]+$">
1848
2013
  <description>SSH NetApp appliances</description>
1849
2014
  <example>Data ONTAP SSH 1.0</example>
@@ -1852,12 +2017,13 @@
1852
2017
  <param pos="0" name="os.product" value="Data ONTAP"/>
1853
2018
  <param pos="0" name="os.cpe23" value="cpe:/o:netapp:data_ontap:-"/>
1854
2019
  </fingerprint>
2020
+
1855
2021
  <fingerprint pattern="^(\d\.\d+\.\d+) SSH Secure Shell OpenVMS V\d+\.\d+$">
1856
2022
  <description>SSH for OpenVMS</description>
1857
2023
  <example service.component.version="3.2.0">3.2.0 SSH Secure Shell OpenVMS V5.5</example>
1858
2024
  <example service.component.version="2.4.1">2.4.1 SSH Secure Shell OpenVMS V1.0</example>
1859
2025
  <param pos="1" name="service.component.version"/>
1860
- <param pos="0" name="service.component.vendor" value="SSH Communication Security"/>
2026
+ <param pos="0" name="service.component.vendor" value="SSH Communications Security"/>
1861
2027
  <param pos="0" name="service.component.family" value="SSH Secure Shell"/>
1862
2028
  <param pos="0" name="service.component.product" value="SSH Secure Shell"/>
1863
2029
  <param pos="0" name="service.vendor" value="HP"/>
@@ -1869,12 +2035,13 @@
1869
2035
  <param pos="0" name="os.certainty" value="0.75"/>
1870
2036
  <param pos="0" name="os.cpe23" value="cpe:/o:hp:openvms:-"/>
1871
2037
  </fingerprint>
2038
+
1872
2039
  <fingerprint pattern="^(\d\.\d+\.\d+) SSH (?:Secure Shell )?OpenVMS V\d\.\d VMS_sftp_version (\d)$">
1873
2040
  <description>SSH for OpenVMS sftp</description>
1874
2041
  <example service.component.version="3.2.0" service.version="3">3.2.0 SSH Secure Shell OpenVMS V5.5 VMS_sftp_version 3</example>
1875
2042
  <example service.component.version="3.2.0" service.version="3">3.2.0 SSH OpenVMS V5.5 VMS_sftp_version 3</example>
1876
2043
  <param pos="1" name="service.component.version"/>
1877
- <param pos="0" name="service.component.vendor" value="SSH Communication Security"/>
2044
+ <param pos="0" name="service.component.vendor" value="SSH Communications Security"/>
1878
2045
  <param pos="0" name="service.component.family" value="SSH Secure Shell"/>
1879
2046
  <param pos="0" name="service.component.product" value="SSH Secure Shell"/>
1880
2047
  <param pos="0" name="service.vendor" value="HP"/>
@@ -1885,6 +2052,7 @@
1885
2052
  <param pos="0" name="os.family" value="OpenVMS"/>
1886
2053
  <param pos="0" name="os.certainty" value="0.75"/>
1887
2054
  </fingerprint>
2055
+
1888
2056
  <fingerprint pattern="^\S+ SSH Secure Shell Tru64 UNIX$">
1889
2057
  <description>Digital/Compaq/HP Tru64 Unix</description>
1890
2058
  <example>3.2.0 SSH Secure Shell Tru64 UNIX</example>
@@ -1893,6 +2061,7 @@
1893
2061
  <param pos="0" name="os.product" value="Tru64 Unix"/>
1894
2062
  <param pos="0" name="os.cpe23" value="cpe:/o:hp:tru64:-"/>
1895
2063
  </fingerprint>
2064
+
1896
2065
  <fingerprint pattern="^ROSSSH$">
1897
2066
  <description>MikroTik RouterOS sshd</description>
1898
2067
  <example>ROSSSH</example>
@@ -1902,9 +2071,11 @@
1902
2071
  <param pos="0" name="os.product" value="RouterOS"/>
1903
2072
  <param pos="0" name="os.cpe23" value="cpe:/o:mikrotik:routeros:-"/>
1904
2073
  </fingerprint>
2074
+
1905
2075
  <!-- xlightftpd is an ftp server that also supports SFTP. The SFTP
1906
2076
  server appears in ssh studies, thus this banner is here, and
1907
2077
  not in ftp_banners.xml-->
2078
+
1908
2079
  <fingerprint pattern="^xlightftpd_release_([\d.]+)$">
1909
2080
  <description>Xlight FTP Server</description>
1910
2081
  <example service.version="3.8.3.6.1">xlightftpd_release_3.8.3.6.1</example>
@@ -1917,6 +2088,7 @@
1917
2088
  <param pos="0" name="os.product" value="Windows"/>
1918
2089
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
1919
2090
  </fingerprint>
2091
+
1920
2092
  <fingerprint pattern="^libssh[-_]([\d.]+)$">
1921
2093
  <description>SSH server utilising libssh</description>
1922
2094
  <example service.version="0.6.0">libssh-0.6.0</example>
@@ -1927,6 +2099,7 @@
1927
2099
  <param pos="0" name="service.vendor" value="libssh"/>
1928
2100
  <param pos="0" name="service.cpe23" value="cpe:/a:libssh:libssh:{service.version}"/>
1929
2101
  </fingerprint>
2102
+
1930
2103
  <fingerprint pattern="^WeOnlyDo ([\d.]+)$">
1931
2104
  <description>WeOnlyDo with version</description>
1932
2105
  <example service.version="1.2.7">WeOnlyDo 1.2.7</example>
@@ -1936,8 +2109,8 @@
1936
2109
  <param pos="0" name="service.family" value="WeOnlyDo"/>
1937
2110
  <param pos="0" name="service.vendor" value="WeOnlyDo"/>
1938
2111
  <param pos="0" name="service.product" value="WeOnlyDo SSH Server"/>
1939
- <param pos="0" name="service.cpe23" value="cpe:/a:weonlydo:weonlydo:{service.version}"/>
1940
2112
  </fingerprint>
2113
+
1941
2114
  <fingerprint pattern="^WeOnlyDo ([\d.]+) \(FIPS\)$">
1942
2115
  <description>WeOnlyDo with version with FIPS mode enabled</description>
1943
2116
  <example service.version="2.2.9">WeOnlyDo 2.2.9 (FIPS)</example>
@@ -1946,8 +2119,8 @@
1946
2119
  <param pos="0" name="service.family" value="WeOnlyDo"/>
1947
2120
  <param pos="0" name="service.vendor" value="WeOnlyDo"/>
1948
2121
  <param pos="0" name="service.product" value="WeOnlyDo SSH Server"/>
1949
- <param pos="0" name="service.cpe23" value="cpe:/a:weonlydo:weonlydo:{service.version}"/>
1950
2122
  </fingerprint>
2123
+
1951
2124
  <!--
1952
2125
  1.2.22j4rad
1953
2126
  2.40
@@ -1956,8 +2129,10 @@ Server-VII
1956
2129
  9.9.1
1957
2130
  IPSSH-1.10.0
1958
2131
  -->
2132
+
1959
2133
  <!--
1960
2134
  Possibly Nortel Passport
1961
2135
  SSH_2.1.1
1962
2136
  -->
1963
- </fingerprints>
2137
+
2138
+ </fingerprints>