recog 2.3.6 → 2.3.7
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.gitignore +10 -5
- data/README.md +22 -19
- data/lib/recog/version.rb +1 -1
- data/xml/dns_versionbind.xml +36 -0
- data/xml/html_title.xml +1011 -4
- data/xml/http_cookies.xml +9 -1
- data/xml/http_servers.xml +16 -1
- data/xml/rtsp_servers.xml +76 -0
- data/xml/sip_banners.xml +197 -17
- data/xml/smtp_banners.xml +19 -0
- data/xml/snmp_sysdescr.xml +92 -75
- data/xml/telnet_banners.xml +53 -1
- data/xml/x509_issuers.xml +2 -2
- data/xml/x509_subjects.xml +20 -9
- metadata +4 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 8bce6ea617950159feebc525962a70eb2d04340cef05c75e522897c9c5bf780e
|
|
4
|
+
data.tar.gz: d3fa168beab209826c82a45147d149c939e8a37bc0f2cf9fad31a35a0d2ec2df
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 4b051ce5e7bb403b9367851befcc365052812d45a9d1702759241e01ccd34ea1fffaf077f5ab30e14bcb5b8dae4612df5e1c2d1b0e270e0d0a04d8ecb8368801
|
|
7
|
+
data.tar.gz: d85bf09c0fa22d54ef00c66710794cfb5bebe3eca569f07236de6d11e9bf0f08373e8f2da8f21aeb12c213373f7c49e94c55470b0ab900d6cc06621db8100f0f
|
data/.gitignore
CHANGED
|
@@ -1,11 +1,16 @@
|
|
|
1
|
+
# Ruby and tooling specific
|
|
2
|
+
.ruby-version
|
|
3
|
+
.ruby-gemset
|
|
1
4
|
.yardoc
|
|
2
5
|
coverage/
|
|
3
6
|
doc/
|
|
4
7
|
pkg/
|
|
5
|
-
|
|
6
|
-
.vscode/
|
|
8
|
+
|
|
7
9
|
/Gemfile.lock
|
|
8
10
|
|
|
9
|
-
#
|
|
10
|
-
.
|
|
11
|
-
.
|
|
11
|
+
# IDE specific
|
|
12
|
+
.vscode/
|
|
13
|
+
.idea
|
|
14
|
+
|
|
15
|
+
# Misc
|
|
16
|
+
**/.DS_Store
|
data/README.md
CHANGED
|
@@ -1,18 +1,21 @@
|
|
|
1
|
-
Recog: A Recognition Framework
|
|
2
|
-
=====
|
|
3
|
-
|
|
4
|
-
Recog is a framework for identifying products, services, operating systems, and hardware by matching fingerprints against data returned from various network probes. Recog makes it simple to extract useful information from web server banners, snmp system description fields, and a whole lot more. Recog is open source, please see the [LICENSE](https://raw.githubusercontent.com/rapid7/recog/master/LICENSE) file for more information.
|
|
5
|
-
|
|
1
|
+
# Recog: A Recognition Framework
|
|
6
2
|
[](http://badge.fury.io/rb/recog)
|
|
7
3
|
[](https://travis-ci.org/rapid7/recog)
|
|
8
4
|
|
|
5
|
+
|
|
6
|
+
Recog is a framework for identifying products, services, operating systems, and hardware by matching fingerprints against data returned from various network probes. Recog makes it simple to extract useful information from web server banners, snmp system description fields, and a whole lot more.
|
|
7
|
+
|
|
8
|
+
Recog is open source, please see the [LICENSE](https://raw.githubusercontent.com/rapid7/recog/master/LICENSE) file for more information.
|
|
9
|
+
|
|
9
10
|
## Installation
|
|
10
11
|
|
|
11
|
-
Recog consists of both XML fingerprint files and an assortment of code, mostly in Ruby, that makes it easy to develop, test, and use the contained fingerprints. In order to use the included ruby code, a recent version of Ruby (2.
|
|
12
|
+
Recog consists of both XML fingerprint files and an assortment of code, mostly in Ruby, that makes it easy to develop, test, and use the contained fingerprints. In order to use the included ruby code, a recent version of Ruby (2.31+) is required, along with Rubygems and the `bundler` gem. Once these dependencies are in place, use the following commands to grab the latest source code and install any additional dependencies.
|
|
12
13
|
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
14
|
+
```shell
|
|
15
|
+
$ git clone git@github.com:rapid7/recog.git
|
|
16
|
+
$ cd recog
|
|
17
|
+
$ bundle install
|
|
18
|
+
```
|
|
16
19
|
|
|
17
20
|
## Maturity
|
|
18
21
|
|
|
@@ -24,7 +27,7 @@ The fingerprints within Recog are stored in XML files, each of which is designed
|
|
|
24
27
|
|
|
25
28
|
A fingerprint file consists of an XML document like the following:
|
|
26
29
|
|
|
27
|
-
```
|
|
30
|
+
```xml
|
|
28
31
|
<fingerprints matches="ssh.banner">
|
|
29
32
|
<fingerprint pattern="^RomSShell_([\d\.]+)$">
|
|
30
33
|
<description>Allegro RomSShell SSH</description>
|
|
@@ -36,15 +39,15 @@ A fingerprint file consists of an XML document like the following:
|
|
|
36
39
|
</fingerprints>
|
|
37
40
|
```
|
|
38
41
|
|
|
39
|
-
The first line should always consist of the XML version declaration. The first element should always be a `
|
|
42
|
+
The first line should always consist of the XML version declaration. The first element should always be a `fingerprints` block with a `matches` attribute indicating what data this fingerprint file is supposed to match. The `matches` attribute is normally in the form of `protocol.field`.
|
|
40
43
|
|
|
41
44
|
Inside of the `fingerprints` element there should be one or more `fingerprint` elements. Every `fingerprint` must contain a `pattern` attribute, which contains the regular expression to be used to match against the data. An optional `flags` attribute can be specified to control how the regular expression is to be interpreted. See [the Recog documentation for `FLAG_MAP`](http://www.rubydoc.info/gems/recog/Recog/Fingerprint/RegexpFactory#FLAG_MAP-constant) for more information.
|
|
42
45
|
|
|
43
46
|
Inside of the fingerprint, a `description` element should contain a human-readable string describing this fingerprint.
|
|
44
47
|
|
|
45
|
-
At least one `example` element should be present, however multiple `example` elements are preferred. These elements are used as part of the test coverage present in rspec which validates that the provided data matches the specified regular expression. Additionally, if the fingerprint is using the `param` elements to extract field values from the data (described next), you can add these expected extractions as attributes for the `example` elements. In the example above, this:
|
|
48
|
+
At least one `example` element should be present, however multiple `example` elements are preferred. These elements are used as part of the test coverage present in `rspec` which validates that the provided data matches the specified regular expression. Additionally, if the fingerprint is using the `param` elements to extract field values from the data (described next), you can add these expected extractions as attributes for the `example` elements. In the example above, this:
|
|
46
49
|
|
|
47
|
-
```
|
|
50
|
+
```xml
|
|
48
51
|
<example service.version="4.62">RomSShell_4.62</example>
|
|
49
52
|
```
|
|
50
53
|
|
|
@@ -54,7 +57,7 @@ The `param` elements contain a `pos` attribute, which indicates what capture fie
|
|
|
54
57
|
|
|
55
58
|
The `example` string can be base64 encoded to permit the use of unprintable characters. To signal this to Recog an `_encoding` attribute with the value of `base64` is added to the `example` element. Based64 encoded text that is longer than 80 characters may be wrapped with newlines as shown below to aid in readability.
|
|
56
59
|
|
|
57
|
-
````
|
|
60
|
+
````xml
|
|
58
61
|
<example _encoding="base64">
|
|
59
62
|
dGllczGEAAAAlQQWMS4yLjg0MC4xMTM1NTYuMS40LjgwMAQuZGF0YS5yZW1vdmVkLjCEAAAAK
|
|
60
63
|
AQdZG9tYWluQ29udHJvbGxlckZ1bmN0aW9uYWxpdHkxhAAAAAMEATc=
|
|
@@ -65,15 +68,15 @@ The `example` string can be base64 encoded to permit the use of unprintable char
|
|
|
65
68
|
|
|
66
69
|
Once a fingerprint has been added, the `example` entries can be tested by executing `bin/recog_verify` against the fingerprint file:
|
|
67
70
|
|
|
68
|
-
```
|
|
69
|
-
|
|
71
|
+
```shell
|
|
72
|
+
$ bin/recog_verify xml/ssh_banners.xml
|
|
70
73
|
```
|
|
71
74
|
|
|
72
75
|
Matches can be tested on the command-line in a similar fashion:
|
|
73
76
|
|
|
74
|
-
```
|
|
75
|
-
|
|
76
|
-
|
|
77
|
+
```shell
|
|
78
|
+
$ echo 'OpenSSH_6.6p1 Ubuntu-2ubuntu1' | bin/recog_match xml/ssh_banners.xml -
|
|
79
|
+
MATCH: {"matched"=>"OpenSSH running on Ubuntu 14.04", "service.version"=>"6.6p1", "openssh.comment"=>"Ubuntu-2ubuntu1", "service.vendor"=>"OpenBSD", "service.family"=>"OpenSSH", "service.product"=>"OpenSSH", "os.vendor"=>"Ubuntu", "os.device"=>"General", "os.family"=>"Linux", "os.product"=>"Linux", "os.version"=>"14.04", "service.protocol"=>"ssh", "fingerprint_db"=>"ssh.banner", "data"=>"OpenSSH_6.6p1 Ubuntu-2ubuntu1"}
|
|
77
80
|
```
|
|
78
81
|
|
|
79
82
|
### Best Practices
|
data/lib/recog/version.rb
CHANGED
data/xml/dns_versionbind.xml
CHANGED
|
@@ -722,4 +722,40 @@
|
|
|
722
722
|
<param pos="1" name="service.version"/>
|
|
723
723
|
<param pos="2" name="service.version.version"/>
|
|
724
724
|
</fingerprint>
|
|
725
|
+
<fingerprint pattern="^CleanBrowsing v([^ ]+) - (.*)">
|
|
726
|
+
<description>CleanBrowsing DNS Server</description>
|
|
727
|
+
<example service.vendor="CleanBrowsing" service.family="CleanBrowsing" service.version="1.5a" service.node="dns-edge-usa-west-sunnyvale-p">CleanBrowsing v1.5a - dns-edge-usa-west-sunnyvale-p</example>
|
|
728
|
+
<example service.vendor="CleanBrowsing" service.family="CleanBrowsing" service.version="1.4a" service.node="dns-edge-usa-west-sunnyvale.cleanbrowsing.org">CleanBrowsing v1.4a - dns-edge-usa-west-sunnyvale.cleanbrowsing.org</example>
|
|
729
|
+
<param pos="0" name="service.vendor" value="CleanBrowsing"/>
|
|
730
|
+
<param pos="0" name="service.family" value="CleanBrowsing"/>
|
|
731
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
732
|
+
<param pos="1" name="service.version"/>
|
|
733
|
+
<param pos="2" name="service.node"/>
|
|
734
|
+
</fingerprint>
|
|
735
|
+
<fingerprint pattern="^dnsmasq-pi-hole-(.*)$">
|
|
736
|
+
<description>dnsmasq: pi-hole</description>
|
|
737
|
+
<example os.vendor="Pi-hole" service.vendor="Thekelleys" service.family="Dnsmasq" service.product="Dnsmasq" os.version="2.80" os.cpe23="cpe:/a:pi-hole:pi-hole:2.80" service.cpe23="cpe:/a:thekelleys:dnsmasq:-">dnsmasq-pi-hole-2.80</example>
|
|
738
|
+
<param pos="0" name="os.vendor" value="Pi-hole"/>
|
|
739
|
+
<param pos="0" name="service.vendor" value="Thekelleys"/>
|
|
740
|
+
<param pos="0" name="service.family" value="Dnsmasq"/>
|
|
741
|
+
<param pos="0" name="service.product" value="Dnsmasq"/>
|
|
742
|
+
<param pos="1" name="os.version"/>
|
|
743
|
+
<param pos="0" name="os.cpe23" value="cpe:/a:pi-hole:pi-hole:{os.version}"/>
|
|
744
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:thekelleys:dnsmasq:-"/>
|
|
745
|
+
</fingerprint>
|
|
746
|
+
<fingerprint pattern="^Q9-[^\-]-(.*)$">
|
|
747
|
+
<description>Quad9 Resolver</description>
|
|
748
|
+
<example service.vendor="IBM" service.family="Quad9" service.product="DNS" service.version="6.0">Q9-P-6.0</example>
|
|
749
|
+
<param pos="0" name="service.vendor" value="IBM"/>
|
|
750
|
+
<param pos="0" name="service.family" value="Quad9"/>
|
|
751
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
752
|
+
<param pos="1" name="service.version"/>
|
|
753
|
+
</fingerprint>
|
|
754
|
+
<fingerprint pattern="^keweonDNS v\.(.*)$">
|
|
755
|
+
<description>Keweon DNS</description>
|
|
756
|
+
<example service.vendor="Keweon" service.product="DNS" service.version="9.63.7201">keweonDNS v.9.63.7201</example>
|
|
757
|
+
<param pos="0" name="service.vendor" value="Keweon"/>
|
|
758
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
759
|
+
<param pos="1" name="service.version"/>
|
|
760
|
+
</fingerprint>
|
|
725
761
|
</fingerprints>
|
data/xml/html_title.xml
CHANGED
|
@@ -1,6 +1,8 @@
|
|
|
1
1
|
<?xml version="1.0" encoding="UTF-8"?>
|
|
2
2
|
<fingerprints matches="html_title" database_type="service" preference="0.90">
|
|
3
|
+
|
|
3
4
|
<!-- HTML Title elements found in HTTP response bodies are matched against these patterns to fingerprint HTTP servers. -->
|
|
5
|
+
|
|
4
6
|
<fingerprint pattern="^Index of /">
|
|
5
7
|
<description>Apache HTTPD indexes</description>
|
|
6
8
|
<example>Index of /</example>
|
|
@@ -9,6 +11,7 @@
|
|
|
9
11
|
<param pos="0" name="service.family" value="Apache"/>
|
|
10
12
|
<param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
|
|
11
13
|
</fingerprint>
|
|
14
|
+
|
|
12
15
|
<fingerprint pattern="^Test Page for the Nginx HTTP Server on (?:the )?Amazon Linux(?: AMI)?$">
|
|
13
16
|
<description>Apache HTTPD default installation on Amazon Linux</description>
|
|
14
17
|
<example>Test Page for the Nginx HTTP Server on the Amazon Linux AMI</example>
|
|
@@ -21,6 +24,7 @@
|
|
|
21
24
|
<param pos="0" name="os.family" value="Linux"/>
|
|
22
25
|
<param pos="0" name="os.product" value="Linux AMI"/>
|
|
23
26
|
</fingerprint>
|
|
27
|
+
|
|
24
28
|
<fingerprint pattern="^Apache HTTP Server Test Page powered by CentOS$">
|
|
25
29
|
<description>Apache HTTPD default installation on CentOS</description>
|
|
26
30
|
<example>Apache HTTP Server Test Page powered by CentOS</example>
|
|
@@ -33,6 +37,7 @@
|
|
|
33
37
|
<param pos="0" name="os.product" value="Linux"/>
|
|
34
38
|
<param pos="0" name="os.cpe23" value="cpe:/o:centos:centos:-"/>
|
|
35
39
|
</fingerprint>
|
|
40
|
+
|
|
36
41
|
<fingerprint pattern="^Apache2 Debian Default Page: It works$">
|
|
37
42
|
<description>Apache HTTPD default installation on Debian</description>
|
|
38
43
|
<example>Apache2 Debian Default Page: It works</example>
|
|
@@ -44,6 +49,7 @@
|
|
|
44
49
|
<param pos="0" name="os.product" value="Linux"/>
|
|
45
50
|
<param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
|
|
46
51
|
</fingerprint>
|
|
52
|
+
|
|
47
53
|
<fingerprint pattern="^Apache2 Ubuntu Default Page: It works$">
|
|
48
54
|
<description>Apache HTTPD default installation on Ubuntu</description>
|
|
49
55
|
<example>Apache2 Ubuntu Default Page: It works</example>
|
|
@@ -55,6 +61,7 @@
|
|
|
55
61
|
<param pos="0" name="os.product" value="Linux"/>
|
|
56
62
|
<param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
|
|
57
63
|
</fingerprint>
|
|
64
|
+
|
|
58
65
|
<fingerprint pattern="^Apache Tomcat$">
|
|
59
66
|
<description>Apache Tomcat with no version</description>
|
|
60
67
|
<example>Apache Tomcat</example>
|
|
@@ -63,6 +70,7 @@
|
|
|
63
70
|
<param pos="0" name="service.family" value="Tomcat"/>
|
|
64
71
|
<param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:-"/>
|
|
65
72
|
</fingerprint>
|
|
73
|
+
|
|
66
74
|
<fingerprint pattern="^Apache Tomcat/(\S+)$">
|
|
67
75
|
<description>Apache tomcat with minimal version information</description>
|
|
68
76
|
<example service.version="8.0.32">Apache Tomcat/8.0.32</example>
|
|
@@ -72,12 +80,14 @@
|
|
|
72
80
|
<param pos="1" name="service.version"/>
|
|
73
81
|
<param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
|
|
74
82
|
</fingerprint>
|
|
83
|
+
|
|
75
84
|
<fingerprint pattern="^AiCloud">
|
|
76
85
|
<description>ASUS AiCloud</description>
|
|
77
86
|
<example>AiCloud</example>
|
|
78
87
|
<param pos="0" name="hw.vendor" value="Asus"/>
|
|
79
88
|
<param pos="0" name="hw.device" value="WAP"/>
|
|
80
89
|
</fingerprint>
|
|
90
|
+
|
|
81
91
|
<!-- HiSilicon is OEMd by a number of DVR manufacturers -->
|
|
82
92
|
<fingerprint pattern="^DVR Components Download$">
|
|
83
93
|
<description>Web server found on DVR and webcam servers sourced from HiSilicon</description>
|
|
@@ -88,6 +98,7 @@
|
|
|
88
98
|
<param pos="0" name="os.device" value="DVR"/>
|
|
89
99
|
<param pos="0" name="hw.device" value="DVR"/>
|
|
90
100
|
</fingerprint>
|
|
101
|
+
|
|
91
102
|
<fingerprint pattern="^FRITZ!Box$">
|
|
92
103
|
<description>AVM FRITZ!Box</description>
|
|
93
104
|
<example>FRITZ!Box</example>
|
|
@@ -95,18 +106,48 @@
|
|
|
95
106
|
<param pos="0" name="hw.device" value="WAP"/>
|
|
96
107
|
<param pos="0" name="hw.family" value="FRITZ!Box"/>
|
|
97
108
|
</fingerprint>
|
|
109
|
+
|
|
110
|
+
<fingerprint pattern="^FRITZ!Powerline$">
|
|
111
|
+
<description>AVM FRITZ!Powerline</description>
|
|
112
|
+
<example>FRITZ!Powerline</example>
|
|
113
|
+
<param pos="0" name="hw.vendor" value="AVM"/>
|
|
114
|
+
<param pos="0" name="hw.device" value="Powerline"/>
|
|
115
|
+
<param pos="0" name="hw.family" value="FRITZ!Powerline"/>
|
|
116
|
+
</fingerprint>
|
|
117
|
+
|
|
118
|
+
<fingerprint pattern="^FRITZ!WLAN Repeater$">
|
|
119
|
+
<description>FRITZ!WLAN Repeater</description>
|
|
120
|
+
<example>FRITZ!WLAN Repeater</example>
|
|
121
|
+
<param pos="0" name="hw.vendor" value="AVM"/>
|
|
122
|
+
<param pos="0" name="hw.device" value="WLAN Repeater"/>
|
|
123
|
+
<param pos="0" name="hw.family" value="FRITZ!WLAN Repeater"/>
|
|
124
|
+
</fingerprint>
|
|
125
|
+
|
|
98
126
|
<fingerprint pattern="^cPanel Login$">
|
|
99
127
|
<description>cPanel</description>
|
|
100
128
|
<example>cPanel Login</example>
|
|
101
129
|
<param pos="0" name="service.vendor" value="cPanel"/>
|
|
102
130
|
<param pos="0" name="service.product" value="cPanel"/>
|
|
131
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:cpanel:cpanel:-"/>
|
|
103
132
|
</fingerprint>
|
|
133
|
+
|
|
104
134
|
<fingerprint pattern="^WHM Login$">
|
|
105
135
|
<description>cPanel Web Host Manager</description>
|
|
106
136
|
<example>WHM Login</example>
|
|
107
137
|
<param pos="0" name="service.vendor" value="cPanel"/>
|
|
108
138
|
<param pos="0" name="service.product" value="WHM"/>
|
|
139
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:cpanel:whm:-"/>
|
|
109
140
|
</fingerprint>
|
|
141
|
+
|
|
142
|
+
<fingerprint pattern="^Windows CE$">
|
|
143
|
+
<description>Windows CE</description>
|
|
144
|
+
<example>Windows CE</example>
|
|
145
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
146
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
147
|
+
<param pos="0" name="os.product" value="Windows CE"/>
|
|
148
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows-ce:-"/>
|
|
149
|
+
</fingerprint>
|
|
150
|
+
|
|
110
151
|
<fingerprint pattern="^IIS7$">
|
|
111
152
|
<description>Default IIS 7</description>
|
|
112
153
|
<example>IIS7</example>
|
|
@@ -120,6 +161,7 @@
|
|
|
120
161
|
<param pos="0" name="os.product" value="Windows"/>
|
|
121
162
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
|
122
163
|
</fingerprint>
|
|
164
|
+
|
|
123
165
|
<fingerprint pattern="^Microsoft Internet Information Services 8">
|
|
124
166
|
<description>Default IIS 8</description>
|
|
125
167
|
<example>Microsoft Internet Information Services 8</example>
|
|
@@ -133,6 +175,23 @@
|
|
|
133
175
|
<param pos="0" name="os.product" value="Windows"/>
|
|
134
176
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
|
135
177
|
</fingerprint>
|
|
178
|
+
|
|
179
|
+
<fingerprint pattern="^IIS (\d\.\d) Detailed Error">
|
|
180
|
+
<description>IIS Detailed Error</description>
|
|
181
|
+
<example service.version="7.0">IIS 7.0 Detailed Error - 401.2 - Unauthorized</example>
|
|
182
|
+
<example service.version="8.0">IIS 8.0 Detailed Error - 403.14 - Forbidden</example>
|
|
183
|
+
<example service.version="8.5">IIS 8.5 Detailed Error - 403.14 - Forbidden</example>
|
|
184
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
|
185
|
+
<param pos="0" name="service.product" value="IIS"/>
|
|
186
|
+
<param pos="0" name="service.family" value="IIS"/>
|
|
187
|
+
<param pos="1" name="service.version"/>
|
|
188
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
|
|
189
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
190
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
191
|
+
<param pos="0" name="os.product" value="Windows"/>
|
|
192
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
|
193
|
+
</fingerprint>
|
|
194
|
+
|
|
136
195
|
<fingerprint pattern="^IIS Windows(?: Server)?$">
|
|
137
196
|
<description>Default IIS</description>
|
|
138
197
|
<example>IIS Windows</example>
|
|
@@ -145,6 +204,7 @@
|
|
|
145
204
|
<param pos="0" name="os.product" value="Windows"/>
|
|
146
205
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
|
147
206
|
</fingerprint>
|
|
207
|
+
|
|
148
208
|
<fingerprint pattern="^(?:NETIASPOT Management Console|Konsola zarzdzania NETIASPOT)$">
|
|
149
209
|
<description>Netia Spot wireless router</description>
|
|
150
210
|
<example>Konsola zarzdzania NETIASPOT</example>
|
|
@@ -153,6 +213,7 @@
|
|
|
153
213
|
<param pos="0" name="hw.product" value="Spot"/>
|
|
154
214
|
<param pos="0" name="hw.product" value="WAP"/>
|
|
155
215
|
</fingerprint>
|
|
216
|
+
|
|
156
217
|
<fingerprint pattern="^hue personal wireless lighting$">
|
|
157
218
|
<description>Philips Hue Personal Wireless Lighting</description>
|
|
158
219
|
<example>hue personal wireless lighting</example>
|
|
@@ -160,6 +221,15 @@
|
|
|
160
221
|
<param pos="0" name="hw.product" value="Hue"/>
|
|
161
222
|
<param pos="0" name="hw.device" value="Light Bulb"/>
|
|
162
223
|
</fingerprint>
|
|
224
|
+
|
|
225
|
+
<fingerprint pattern="LANDesk\(R\) Management Agent$">
|
|
226
|
+
<description>LANDesk Management Agent</description>
|
|
227
|
+
<param pos="0" name="service.vendor" value="LANDesk"/>
|
|
228
|
+
<param pos="0" name="service.product" value="Management Agent"/>
|
|
229
|
+
<param pos="0" name="service.family" value="Management Agent"/>
|
|
230
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:landesk:management_agent:-"/>
|
|
231
|
+
</fingerprint>
|
|
232
|
+
|
|
163
233
|
<fingerprint pattern="^(?:Parallels )?Plesk (?:(?:Onyx|Panel) )?([\d\.]+)$">
|
|
164
234
|
<description>Plesk web hosting platform with a version</description>
|
|
165
235
|
<example service.version="12.0.18">Plesk 12.0.18</example>
|
|
@@ -169,19 +239,23 @@
|
|
|
169
239
|
<param pos="0" name="service.vendor" value="Plesk"/>
|
|
170
240
|
<param pos="0" name="service.product" value="Plesk"/>
|
|
171
241
|
<param pos="1" name="service.version"/>
|
|
242
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:plesk:plesk:{service.version}"/>
|
|
172
243
|
</fingerprint>
|
|
244
|
+
|
|
173
245
|
<fingerprint pattern="^(?:Parallels )?Plesk (?:(?:Onyx|Panel) )?([\d\.]+) for Microsoft Windows$">
|
|
174
246
|
<description>Plesk web hosting platform with a version on Windows</description>
|
|
175
|
-
<example>Plesk 12.5.30 for Microsoft Windows</example>
|
|
176
|
-
<example>Parallels Plesk Panel 11.5.30 for Microsoft Windows</example>
|
|
247
|
+
<example service.version="12.5.30">Plesk 12.5.30 for Microsoft Windows</example>
|
|
248
|
+
<example service.version="11.5.30">Parallels Plesk Panel 11.5.30 for Microsoft Windows</example>
|
|
177
249
|
<param pos="0" name="service.vendor" value="Plesk"/>
|
|
178
250
|
<param pos="0" name="service.product" value="Plesk"/>
|
|
179
251
|
<param pos="1" name="service.version"/>
|
|
252
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:plesk:plesk:{service.version}"/>
|
|
180
253
|
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
181
254
|
<param pos="0" name="os.family" value="Windows"/>
|
|
182
255
|
<param pos="0" name="os.product" value="Windows"/>
|
|
183
256
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
|
184
257
|
</fingerprint>
|
|
258
|
+
|
|
185
259
|
<fingerprint pattern="^(?i)Default (?:Parallels )?Plesk (?:Panel )?Page$">
|
|
186
260
|
<description>Plesk web hosting platform with no version</description>
|
|
187
261
|
<example>Default Parallels Plesk Panel Page</example>
|
|
@@ -189,13 +263,16 @@
|
|
|
189
263
|
<example>Default PLESK Page</example>
|
|
190
264
|
<param pos="0" name="service.vendor" value="Plesk"/>
|
|
191
265
|
<param pos="0" name="service.product" value="Plesk"/>
|
|
266
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:plesk:plesk:-"/>
|
|
192
267
|
</fingerprint>
|
|
268
|
+
|
|
193
269
|
<fingerprint pattern="^Web Viewer for Samsung DVR$">
|
|
194
270
|
<description>Samsung DVRs</description>
|
|
195
271
|
<example>Web Viewer for Samsung DVR</example>
|
|
196
272
|
<param pos="0" name="hw.vendor" value="Samsung"/>
|
|
197
273
|
<param pos="0" name="hw.device" value="DVR"/>
|
|
198
274
|
</fingerprint>
|
|
275
|
+
|
|
199
276
|
<fingerprint pattern="^(?i)(?:Dell )?Sonicwall - Authentication$">
|
|
200
277
|
<description>Sonicwall firewalls</description>
|
|
201
278
|
<example>SonicWall - Authentication</example>
|
|
@@ -203,7 +280,8 @@
|
|
|
203
280
|
<param pos="0" name="os.device" value="Firewall"/>
|
|
204
281
|
<param pos="0" name="os.family" value="SonicOS"/>
|
|
205
282
|
</fingerprint>
|
|
206
|
-
|
|
283
|
+
|
|
284
|
+
<fingerprint pattern="^(.*).nbsp;-.nbsp;Synology.nbsp;DiskStation$">
|
|
207
285
|
<description>Synology DiskStation</description>
|
|
208
286
|
<example host.name="DiskStation">DiskStation&nbsp;-&nbsp;Synology&nbsp;DiskStation</example>
|
|
209
287
|
<example host.name="DS218">DS218&nbsp;-&nbsp;Synology&nbsp;DiskStation</example>
|
|
@@ -216,6 +294,7 @@
|
|
|
216
294
|
<param pos="0" name="os.vendor" value="Synology"/>
|
|
217
295
|
<param pos="1" name="host.name"/>
|
|
218
296
|
</fingerprint>
|
|
297
|
+
|
|
219
298
|
<fingerprint pattern="Synology Web Station!$">
|
|
220
299
|
<description>Synology with WebStation web hosting</description>
|
|
221
300
|
<example>Hello! Welcome to Synology Web Station!</example>
|
|
@@ -228,6 +307,7 @@
|
|
|
228
307
|
<param pos="0" name="os.product" value="DSM"/>
|
|
229
308
|
<param pos="0" name="os.vendor" value="Synology"/>
|
|
230
309
|
</fingerprint>
|
|
310
|
+
|
|
231
311
|
<fingerprint pattern="^Web Filter Block Override$">
|
|
232
312
|
<description>Fortinet FortiGate/Fortiguard Web Filter</description>
|
|
233
313
|
<example>Web Filter Block Override</example>
|
|
@@ -240,23 +320,27 @@
|
|
|
240
320
|
<param pos="0" name="hw.family" value="FortiGate"/>
|
|
241
321
|
<param pos="0" name="hw.device" value="Firewall"/>
|
|
242
322
|
</fingerprint>
|
|
323
|
+
|
|
243
324
|
<!-- Various products by Ubiquiti networks -->
|
|
244
325
|
<fingerprint pattern="^Ubiquiti Networks$">
|
|
245
326
|
<description>Generic products by Ubiquiti Networks</description>
|
|
246
327
|
<example>Ubiquiti Networks</example>
|
|
247
328
|
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
|
248
329
|
</fingerprint>
|
|
330
|
+
|
|
249
331
|
<fingerprint pattern="^EdgeOS$">
|
|
250
332
|
<description>Ubiquiti EdgeRouter/EdgeSwitch/etc</description>
|
|
251
333
|
<example>EdgeOS</example>
|
|
252
334
|
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
|
253
335
|
</fingerprint>
|
|
336
|
+
|
|
254
337
|
<fingerprint pattern="^CloudKey$">
|
|
255
338
|
<description>Ubiquiti UniFi Cloud Key</description>
|
|
256
339
|
<example>CloudKey</example>
|
|
257
340
|
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
|
258
341
|
<param pos="0" name="hw.product" value="UniFi Cloud Key"/>
|
|
259
342
|
</fingerprint>
|
|
343
|
+
|
|
260
344
|
<fingerprint pattern="^airCube$">
|
|
261
345
|
<description>Ubiquiti airCube WAP</description>
|
|
262
346
|
<example>airCube</example>
|
|
@@ -264,13 +348,15 @@
|
|
|
264
348
|
<param pos="0" name="hw.product" value="airCube"/>
|
|
265
349
|
<param pos="0" name="hw.device" value="WAP"/>
|
|
266
350
|
</fingerprint>
|
|
351
|
+
|
|
267
352
|
<fingerprint pattern="^UniFi Video$">
|
|
268
353
|
<description>Various UniFi Video products by Ubiquiti Networks</description>
|
|
269
354
|
<example>UniFi Video</example>
|
|
270
355
|
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
|
271
356
|
<param pos="0" name="hw.family" value="UniFi"/>
|
|
272
|
-
<param pos="0" name="hw.device" value="Web
|
|
357
|
+
<param pos="0" name="hw.device" value="Web Cam"/>
|
|
273
358
|
</fingerprint>
|
|
359
|
+
|
|
274
360
|
<fingerprint pattern="^UniFi NVR: Software Portal$">
|
|
275
361
|
<description>UniFi NVR for recording from UniFi video cameras</description>
|
|
276
362
|
<example>UniFi NVR: Software Portal</example>
|
|
@@ -279,6 +365,7 @@
|
|
|
279
365
|
<param pos="0" name="hw.family" value="UniFi NVR"/>
|
|
280
366
|
<param pos="0" name="hw.device" value="DVR"/>
|
|
281
367
|
</fingerprint>
|
|
368
|
+
|
|
282
369
|
<fingerprint pattern="^RomPager Embedded Web Server Toolkit$">
|
|
283
370
|
<description>Embedded HTTP server used by many vendors and device
|
|
284
371
|
types, including APC, 3Com, Andover Controls, Cisco VoIP, D-Link,
|
|
@@ -289,6 +376,7 @@
|
|
|
289
376
|
<param pos="0" name="service.vendor" value="Allegro Software"/>
|
|
290
377
|
<param pos="0" name="service.product" value="RomPager"/>
|
|
291
378
|
</fingerprint>
|
|
379
|
+
|
|
292
380
|
<fingerprint pattern="^RouterOS router configuration page$">
|
|
293
381
|
<description>MikroTik RouterOS router configuration page</description>
|
|
294
382
|
<example>RouterOS router configuration page</example>
|
|
@@ -299,6 +387,7 @@
|
|
|
299
387
|
<param pos="0" name="hw.vendor" value="MikroTik"/>
|
|
300
388
|
<param pos="0" name="hw.device" value="Router"/>
|
|
301
389
|
</fingerprint>
|
|
390
|
+
|
|
302
391
|
<fingerprint pattern="^(?:Welcome to nginx!|Test Page for the Nginx HTTP Server)$">
|
|
303
392
|
<description>Default OS-agnostic nginx</description>
|
|
304
393
|
<example>Welcome to nginx!</example>
|
|
@@ -308,6 +397,7 @@
|
|
|
308
397
|
<param pos="0" name="service.vendor" value="nginx"/>
|
|
309
398
|
<param pos="0" name="service.cpe23" value="cpe:/a:nginx:nginx:-"/>
|
|
310
399
|
</fingerprint>
|
|
400
|
+
|
|
311
401
|
<fingerprint pattern="^Test Page for the Nginx HTTP Server on (?:Fedora|EPEL)$">
|
|
312
402
|
<description>Default nginx on Fedora</description>
|
|
313
403
|
<example>Test Page for the Nginx HTTP Server on Fedora</example>
|
|
@@ -320,6 +410,7 @@
|
|
|
320
410
|
<param pos="0" name="os.product" value="Fedora Core Linux"/>
|
|
321
411
|
<param pos="0" name="os.cpe23" value="cpe:/o:redhat:fedora_core:-"/>
|
|
322
412
|
</fingerprint>
|
|
413
|
+
|
|
323
414
|
<fingerprint pattern="^Welcome to nginx on Debian!$">
|
|
324
415
|
<description>Default nginx on Debian</description>
|
|
325
416
|
<example>Welcome to nginx on Debian!</example>
|
|
@@ -331,4 +422,920 @@
|
|
|
331
422
|
<param pos="0" name="os.product" value="Linux"/>
|
|
332
423
|
<param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
|
|
333
424
|
</fingerprint>
|
|
425
|
+
|
|
426
|
+
<fingerprint pattern="^Eagle Eye Networks ">
|
|
427
|
+
<description>Eagle Eye Networks to manage IoT cameras home webpage</description>
|
|
428
|
+
<example>Eagle Eye Networks (Local)</example>
|
|
429
|
+
<param pos="0" name="hw.product" value="Bridge"/>
|
|
430
|
+
<param pos="0" name="hw.vendor" value="Eagle Eye Networks"/>
|
|
431
|
+
</fingerprint>
|
|
432
|
+
<fingerprint pattern="^Web Local Display Unauthorized$">
|
|
433
|
+
<description>Eagle Eye Networks to manage IoT cameras unauthorized webpage</description>
|
|
434
|
+
<example>Web Local Display Unauthorized</example>
|
|
435
|
+
<param pos="0" name="hw.product" value=" Bridge"/>
|
|
436
|
+
<param pos="0" name="hw.vendor" value="Eagle Eye Networks"/>
|
|
437
|
+
</fingerprint>
|
|
438
|
+
|
|
439
|
+
<!-- Netgear Products -->
|
|
440
|
+
<fingerprint pattern="^(?:NETGEAR|NetGear) ([a-zA-Z0-9\-\+]+)$">
|
|
441
|
+
<description>Netgear Switches</description>
|
|
442
|
+
<example hw.product="GS108T">NETGEAR GS108T</example>
|
|
443
|
+
<example hw.product="M4100-24G-POE+">NETGEAR M4100-24G-POE+</example>
|
|
444
|
+
<example hw.product="GS748T">NetGear GS748T</example>
|
|
445
|
+
<param pos="0" name="hw.vendor" value="Netgear"/>
|
|
446
|
+
<param pos="0" name="hw.device" value="Switch"/>
|
|
447
|
+
<param pos="1" name="hw.product"/>
|
|
448
|
+
</fingerprint>
|
|
449
|
+
|
|
450
|
+
<fingerprint pattern="^(?:NETGEAR|NetGear) Router ([a-zA-Z0-9\-\+]+)$">
|
|
451
|
+
<description>Netgear Routers</description>
|
|
452
|
+
<example hw.product="WNR2000v4">NETGEAR Router WNR2000v4</example>
|
|
453
|
+
<example hw.product="R6100">NETGEAR Router R6100</example>
|
|
454
|
+
<param pos="0" name="hw.vendor" value="Netgear"/>
|
|
455
|
+
<param pos="0" name="hw.device" value="Router"/>
|
|
456
|
+
<param pos="1" name="hw.product"/>
|
|
457
|
+
</fingerprint>
|
|
458
|
+
|
|
459
|
+
<fingerprint pattern="^Netgear Prosafe Plus Switch$">
|
|
460
|
+
<description>Netgear Prosafe Plus Switch</description>
|
|
461
|
+
<example>Netgear Prosafe Plus Switch</example>
|
|
462
|
+
<param pos="0" name="hw.vendor" value="Netgear"/>
|
|
463
|
+
<param pos="0" name="hw.device" value="Switch"/>
|
|
464
|
+
<param pos="0" name="hw.product" value="Prosafe Plus"/>
|
|
465
|
+
</fingerprint>
|
|
466
|
+
|
|
467
|
+
<fingerprint pattern="^(.*).nbsp;Configuration and Management$">
|
|
468
|
+
<description>Digi Terminal Servers</description>
|
|
469
|
+
<example hw.product="Digi One SP">Digi One SP&nbsp;Configuration and Management</example>
|
|
470
|
+
<example hw.product="PortServer TS 4">PortServer TS 4&nbsp;Configuration and Management</example>
|
|
471
|
+
<example hw.product="PortServer TS 4 H MEI">PortServer TS 4 H MEI&nbsp;Configuration and Management</example>
|
|
472
|
+
<param pos="0" name="hw.vendor" value="Digi"/>
|
|
473
|
+
<param pos="0" name="hw.device" value="Device Server"/>
|
|
474
|
+
<param pos="1" name="hw.product"/>
|
|
475
|
+
<param pos="0" name="os.vendor" value="Digi"/>
|
|
476
|
+
<param pos="0" name="os.device" value="Device Server"/>
|
|
477
|
+
<param pos="0" name="os.product" value="NET+OS"/>
|
|
478
|
+
</fingerprint>
|
|
479
|
+
|
|
480
|
+
<fingerprint pattern="^NPort Web Console$">
|
|
481
|
+
<description>Moxa NPort Terminal Servers</description>
|
|
482
|
+
<example>NPort Web Console</example>
|
|
483
|
+
<param pos="0" name="hw.vendor" value="Moxa"/>
|
|
484
|
+
<param pos="0" name="hw.device" value="Device Server"/>
|
|
485
|
+
<param pos="0" name="hw.product" value="NPort"/>
|
|
486
|
+
</fingerprint>
|
|
487
|
+
|
|
488
|
+
<fingerprint pattern="^Lantronix (SL[BC].*)$">
|
|
489
|
+
<description>Lantronix terminal server</description>
|
|
490
|
+
<example hw.product="SLB882/8824">Lantronix SLB882/8824</example>
|
|
491
|
+
<example hw.product="SLB">Lantronix SLB</example>
|
|
492
|
+
<example hw.product="SLC 8048">Lantronix SLC 8048</example>
|
|
493
|
+
<param pos="0" name="hw.vendor" value="Lantronix"/>
|
|
494
|
+
<param pos="0" name="hw.device" value="Device Server"/>
|
|
495
|
+
<param pos="1" name="hw.product"/>
|
|
496
|
+
</fingerprint>
|
|
497
|
+
|
|
498
|
+
<fingerprint pattern="^(KN\S+) - Cover$">
|
|
499
|
+
<description>ATEN KVM over IP</description>
|
|
500
|
+
<example hw.product="KN4140v">KN4140v - Cover</example>
|
|
501
|
+
<example hw.product="KN4132">KN4132 - Cover</example>
|
|
502
|
+
<param pos="0" name="hw.vendor" value="ATEN"/>
|
|
503
|
+
<param pos="0" name="hw.device" value="KVM"/>
|
|
504
|
+
<param pos="1" name="hw.product"/>
|
|
505
|
+
</fingerprint>
|
|
506
|
+
|
|
507
|
+
<fingerprint pattern="^Ethernet Relay Module$">
|
|
508
|
+
<description>AVT.pl Ethernet Relay Module</description>
|
|
509
|
+
<example>Ethernet Relay Module</example>
|
|
510
|
+
<param pos="0" name="hw.vendor" value="AVT"/>
|
|
511
|
+
<param pos="0" name="hw.device" value="Power Relay"/>
|
|
512
|
+
<param pos="0" name="hw.product" value="Ethernet Relay Module"/>
|
|
513
|
+
</fingerprint>
|
|
514
|
+
|
|
515
|
+
<fingerprint pattern="^Inveo Lantick Ethernet Relay Controller$">
|
|
516
|
+
<description>Inveo Lantick Ethernet Relay Controller</description>
|
|
517
|
+
<example>Inveo Lantick Ethernet Relay Controller</example>
|
|
518
|
+
<param pos="0" name="hw.vendor" value="Inveo"/>
|
|
519
|
+
<param pos="0" name="hw.device" value="Power Relay"/>
|
|
520
|
+
<param pos="0" name="hw.product" value="Lantick Ethernet Relay Controller"/>
|
|
521
|
+
</fingerprint>
|
|
522
|
+
|
|
523
|
+
<fingerprint pattern="^(myUTN(?:-[a-zA-Z0-9]+)?) Control Center$">
|
|
524
|
+
<description>myUTN Device Server</description>
|
|
525
|
+
<example hw.product="myUTN-50a">myUTN-50a Control Center</example>
|
|
526
|
+
<example hw.product="myUTN">myUTN Control Center</example>
|
|
527
|
+
<param pos="0" name="hw.vendor" value="SEH Technology"/>
|
|
528
|
+
<param pos="0" name="hw.device" value="Device Server"/>
|
|
529
|
+
<param pos="1" name="hw.product"/>
|
|
530
|
+
</fingerprint>
|
|
531
|
+
|
|
532
|
+
<fingerprint pattern="^iCOM Control Board$">
|
|
533
|
+
<description>Liebert iCOM Cooling Unit Control Board</description>
|
|
534
|
+
<example>iCOM Control Board</example>
|
|
535
|
+
<param pos="0" name="hw.vendor" value="Liebert"/>
|
|
536
|
+
<param pos="0" name="hw.device" value="Environment Control"/>
|
|
537
|
+
<param pos="0" name="hw.product" value="iCOM Control Panel"/>
|
|
538
|
+
</fingerprint>
|
|
539
|
+
|
|
540
|
+
<fingerprint pattern="^Sigma Control 2$">
|
|
541
|
+
<description>Sigma Control 2 Air Compressor Controls</description>
|
|
542
|
+
<example>Sigma Control 2</example>
|
|
543
|
+
<param pos="0" name="hw.vendor" value="Kaeser Compressors"/>
|
|
544
|
+
<param pos="0" name="hw.device" value="Environment Control"/>
|
|
545
|
+
<param pos="0" name="hw.product" value="Sigma Control 2"/>
|
|
546
|
+
</fingerprint>
|
|
547
|
+
|
|
548
|
+
|
|
549
|
+
|
|
550
|
+
|
|
551
|
+
<fingerprint pattern="^WebPower$">
|
|
552
|
+
<description>Eltek Power Controller</description>
|
|
553
|
+
<example>WebPower</example>
|
|
554
|
+
<param pos="0" name="hw.vendor" value="Eltek"/>
|
|
555
|
+
<param pos="0" name="hw.device" value="Power Device"/>
|
|
556
|
+
</fingerprint>
|
|
557
|
+
|
|
558
|
+
<fingerprint pattern="(Expert Power Control NET \d+x\d+) - (.*)$">
|
|
559
|
+
<description>Gude Expert Power Control</description>
|
|
560
|
+
<example host.name="Rack42" hw.product="Expert Power Control NET 2x6">Expert Power Control NET 2x6 - Rack42</example>
|
|
561
|
+
<param pos="0" name="hw.vendor" value="Gude"/>
|
|
562
|
+
<param pos="0" name="hw.device" value="Power Device"/>
|
|
563
|
+
<param pos="1" name="hw.product"/>
|
|
564
|
+
<param pos="2" name="host.name"/>
|
|
565
|
+
</fingerprint>
|
|
566
|
+
|
|
567
|
+
<fingerprint pattern="^Sentry Switched CDU$">
|
|
568
|
+
<description>Sentry Switched CDU</description>
|
|
569
|
+
<example>Sentry Switched CDU</example>
|
|
570
|
+
<param pos="0" name="hw.vendor" value="ServerTech"/>
|
|
571
|
+
<param pos="0" name="hw.device" value="Power Device"/>
|
|
572
|
+
<param pos="0" name="hw.product" value="Sentry Switched CDU"/>
|
|
573
|
+
</fingerprint>
|
|
574
|
+
|
|
575
|
+
<fingerprint pattern="^Emerson Network Power Rack PDU Card$">
|
|
576
|
+
<description>Emerson Network Power Rack PDU Card</description>
|
|
577
|
+
<example>Emerson Network Power Rack PDU Card</example>
|
|
578
|
+
<param pos="0" name="hw.vendor" value="Emerson"/>
|
|
579
|
+
<param pos="0" name="hw.device" value="Power Device"/>
|
|
580
|
+
<param pos="0" name="hw.product" value="Rack PDU Card"/>
|
|
581
|
+
</fingerprint>
|
|
582
|
+
|
|
583
|
+
<fingerprint pattern="^(.*) IntelliSlot Web(?:/\d+)? Card?$">
|
|
584
|
+
<description>Emerson Network Power IntelliSlot Web Card and rebrands</description>
|
|
585
|
+
<example hw.vendor="Emerson Network Power">Emerson Network Power IntelliSlot Web Card</example>
|
|
586
|
+
<example hw.vendor="Emerson Network Power">Emerson Network Power IntelliSlot Web/485 Card</example>
|
|
587
|
+
<example hw.vendor="Vertiv">Vertiv IntelliSlot Web Card</example>
|
|
588
|
+
<example hw.vendor="Liebert">Liebert IntelliSlot Web Card</example>
|
|
589
|
+
<param pos="1" name="hw.vendor"/>
|
|
590
|
+
<param pos="0" name="hw.device" value="Power Device"/>
|
|
591
|
+
<param pos="0" name="hw.product" value="IntelliSlot Web Card"/>
|
|
592
|
+
</fingerprint>
|
|
593
|
+
|
|
594
|
+
<fingerprint pattern="^ConnectUPS Web/SNMP Card$">
|
|
595
|
+
<description>ConnectUPS Web/SNMP Card</description>
|
|
596
|
+
<example>ConnectUPS Web/SNMP Card</example>
|
|
597
|
+
<param pos="0" name="hw.vendor" value="APC"/>
|
|
598
|
+
<param pos="0" name="hw.device" value="Power Device"/>
|
|
599
|
+
<param pos="0" name="hw.product" value="ConnectUPS Web Card"/>
|
|
600
|
+
</fingerprint>
|
|
601
|
+
|
|
602
|
+
<fingerprint pattern="^Calient Technologies Inc\.$">
|
|
603
|
+
<description>Calient Photonic Switch</description>
|
|
604
|
+
<example>Calient Technologies Inc.</example>
|
|
605
|
+
<param pos="0" name="hw.vendor" value="Calient"/>
|
|
606
|
+
<param pos="0" name="hw.device" value="Switch"/>
|
|
607
|
+
<param pos="0" name="hw.product" value="Photonic Switch"/>
|
|
608
|
+
<param pos="0" name="os.vendor" value="Calient"/>
|
|
609
|
+
<param pos="0" name="os.device" value="Switch"/>
|
|
610
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
611
|
+
</fingerprint>
|
|
612
|
+
|
|
613
|
+
<fingerprint pattern="^Google Fiber Network Box Diagnostics$">
|
|
614
|
+
<description>Google Fiber Router</description>
|
|
615
|
+
<example>Google Fiber Network Box Diagnostics</example>
|
|
616
|
+
<param pos="0" name="hw.vendor" value="Google"/>
|
|
617
|
+
<param pos="0" name="hw.device" value="Router"/>
|
|
618
|
+
<param pos="0" name="hw.product" value="Fiber Network Box"/>
|
|
619
|
+
</fingerprint>
|
|
620
|
+
|
|
621
|
+
<fingerprint pattern="ServerView.* (iRMC S\d+) Web Server">
|
|
622
|
+
<description>Fujitsu iRMC BMC</description>
|
|
623
|
+
<example hw.product="iRMC S3" os.product="iRMC S3">ServerView Remote Management iRMC S3 Web Server</example>
|
|
624
|
+
<example hw.product="iRMC S4" os.product="iRMC S4">ServerView&reg;&nbsp;Remote Management iRMC S4 Web Server Redirecting ...</example>
|
|
625
|
+
<example hw.product="iRMC S2" os.product="iRMC S2">ServerView Remote Management iRMC S2 Web Server</example>
|
|
626
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
|
627
|
+
<param pos="0" name="hw.vendor" value="Fujitsu"/>
|
|
628
|
+
<param pos="1" name="hw.product"/>
|
|
629
|
+
<param pos="0" name="os.vendor" value="Fujitsu"/>
|
|
630
|
+
<param pos="1" name="os.product"/>
|
|
631
|
+
</fingerprint>
|
|
632
|
+
|
|
633
|
+
<fingerprint pattern="^Cisco UCS KVM Direct$">
|
|
634
|
+
<description>Cisco UCS KVM Direct</description>
|
|
635
|
+
<example>Cisco UCS KVM Direct</example>
|
|
636
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
637
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
|
638
|
+
<param pos="0" name="hw.product" value="UCS Manager"/>
|
|
639
|
+
<param pos="0" name="os.vendor" value="Cisco"/>
|
|
640
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
641
|
+
<param pos="0" name="os.product" value="NX-OS"/>
|
|
642
|
+
<param pos="0" name="os.certainty" value="0.8"/>
|
|
643
|
+
</fingerprint>
|
|
644
|
+
|
|
645
|
+
<fingerprint pattern="^Cisco UCS Manager$">
|
|
646
|
+
<description>Cisco UCS Manager</description>
|
|
647
|
+
<example>Cisco UCS Manager</example>
|
|
648
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
|
649
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
650
|
+
<param pos="0" name="hw.product" value="UCS Manager"/>
|
|
651
|
+
<param pos="0" name="os.vendor" value="Cisco"/>
|
|
652
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
653
|
+
<param pos="0" name="os.product" value="NX-OS"/>
|
|
654
|
+
<param pos="0" name="os.certainty" value="0.8"/>
|
|
655
|
+
</fingerprint>
|
|
656
|
+
|
|
657
|
+
<fingerprint pattern="^HPE Virtual Connect Manager$">
|
|
658
|
+
<description>HPE Virtual Connect Manager</description>
|
|
659
|
+
<example>HPE Virtual Connect Manager</example>
|
|
660
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
|
661
|
+
<param pos="0" name="hw.vendor" value="HPE"/>
|
|
662
|
+
<param pos="0" name="hw.product" value="Virtual Connect Manager"/>
|
|
663
|
+
<param pos="0" name="os.vendor" value="HPE"/>
|
|
664
|
+
<param pos="0" name="os.device" value="Lights Out Management"/>
|
|
665
|
+
<param pos="0" name="os.product" value="iLO"/>
|
|
666
|
+
</fingerprint>
|
|
667
|
+
|
|
668
|
+
<fingerprint pattern="^HPE BladeSystem Onboard Administrator$">
|
|
669
|
+
<description>HPE BladeSystem Onboard Administrator</description>
|
|
670
|
+
<example>HPE BladeSystem Onboard Administrator</example>
|
|
671
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
|
672
|
+
<param pos="0" name="hw.vendor" value="HPE"/>
|
|
673
|
+
<param pos="0" name="hw.product" value="BladeSystem Onboard Administrator"/>
|
|
674
|
+
</fingerprint>
|
|
675
|
+
|
|
676
|
+
<fingerprint pattern="^HPE System Management Homepage$">
|
|
677
|
+
<description>HPE System Management Homepage</description>
|
|
678
|
+
<example>HPE System Management Homepage</example>
|
|
679
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
|
680
|
+
<param pos="0" name="hw.vendor" value="HPE"/>
|
|
681
|
+
<param pos="0" name="hw.product" value="System Management"/>
|
|
682
|
+
<param pos="0" name="os.vendor" value="HPE"/>
|
|
683
|
+
<param pos="0" name="os.device" value="Lights Out Management"/>
|
|
684
|
+
<param pos="0" name="os.product" value="iLO"/>
|
|
685
|
+
</fingerprint>
|
|
686
|
+
|
|
687
|
+
<fingerprint pattern="^HP Integrated Lights-Out$">
|
|
688
|
+
<description>HP Integrated Lights-Out</description>
|
|
689
|
+
<example>HP Integrated Lights-Out</example>
|
|
690
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
|
691
|
+
<param pos="0" name="hw.vendor" value="HP"/>
|
|
692
|
+
<param pos="0" name="hw.product" value="iLO"/>
|
|
693
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
|
694
|
+
<param pos="0" name="os.device" value="Lights Out Management"/>
|
|
695
|
+
<param pos="0" name="os.family" value="iLO"/>
|
|
696
|
+
<param pos="0" name="os.product" value="iLO"/>
|
|
697
|
+
</fingerprint>
|
|
698
|
+
|
|
699
|
+
<fingerprint pattern="^HP Integrated Lights-Out 2$">
|
|
700
|
+
<description>HP Integrated Lights-Out 2</description>
|
|
701
|
+
<example>HP Integrated Lights-Out 2</example>
|
|
702
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
|
703
|
+
<param pos="0" name="hw.vendor" value="HP"/>
|
|
704
|
+
<param pos="0" name="hw.product" value="iLO"/>
|
|
705
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
|
706
|
+
<param pos="0" name="os.device" value="Lights Out Management"/>
|
|
707
|
+
<param pos="0" name="os.family" value="iLO"/>
|
|
708
|
+
<param pos="0" name="os.product" value="iLO 2"/>
|
|
709
|
+
</fingerprint>
|
|
710
|
+
|
|
711
|
+
<fingerprint pattern="^(iLO \d+)$">
|
|
712
|
+
<description>HP Integrated Lights-Out 3+</description>
|
|
713
|
+
<example hw.product="iLO 3" os.product="iLO 3">iLO 3</example>
|
|
714
|
+
<example hw.product="iLO 4" os.product="iLO 4">iLO 4</example>
|
|
715
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
|
716
|
+
<param pos="0" name="hw.vendor" value="HP"/>
|
|
717
|
+
<param pos="1" name="hw.product"/>
|
|
718
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
|
719
|
+
<param pos="0" name="os.device" value="Lights Out Management"/>
|
|
720
|
+
<param pos="0" name="os.family" value="iLO"/>
|
|
721
|
+
<param pos="1" name="os.product"/>
|
|
722
|
+
</fingerprint>
|
|
723
|
+
|
|
724
|
+
<fingerprint pattern="^HPE SimpliVity OmniStack$">
|
|
725
|
+
<description>HPE SimpliVity OmniStack</description>
|
|
726
|
+
<example>HPE SimpliVity OmniStack</example>
|
|
727
|
+
<param pos="0" name="hw.device" value="NAS"/>
|
|
728
|
+
<param pos="0" name="hw.vendor" value="HPE"/>
|
|
729
|
+
<param pos="0" name="hw.product" value="SimpliVity OmniStack"/>
|
|
730
|
+
</fingerprint>
|
|
731
|
+
|
|
732
|
+
<fingerprint pattern="^HPE (StoreEver \S+)$">
|
|
733
|
+
<description>HPE StoreEver</description>
|
|
734
|
+
<example hw.product="StoreEver MSL3040">HPE StoreEver MSL3040</example>
|
|
735
|
+
<param pos="0" name="hw.device" value="Tape Library"/>
|
|
736
|
+
<param pos="0" name="hw.vendor" value="HPE"/>
|
|
737
|
+
<param pos="1" name="hw.product"/>
|
|
738
|
+
</fingerprint>
|
|
739
|
+
|
|
740
|
+
<fingerprint pattern="^Dell OpenManage Switch Administrator$">
|
|
741
|
+
<description>Dell OpenManage Switch Administrator</description>
|
|
742
|
+
<example>Dell OpenManage Switch Administrator</example>
|
|
743
|
+
<param pos="0" name="hw.vendor" value="Dell"/>
|
|
744
|
+
<param pos="0" name="hw.device" value="Switch"/>
|
|
745
|
+
<param pos="0" name="hw.product" value="OpenManage Switch"/>
|
|
746
|
+
</fingerprint>
|
|
747
|
+
|
|
748
|
+
<fingerprint pattern="^(\S+)\s+-\s+ProCurve Switch (\S+) \((.*)\)$">
|
|
749
|
+
<description>HPE ProCurve Switch w/Hostname</description>
|
|
750
|
+
<example host.name="SW1" hw.product="4204vl" procurve.model="J8770A">SW1 - ProCurve Switch 4204vl (J8770A)</example>
|
|
751
|
+
<param pos="0" name="hw.vendor" value="HPE"/>
|
|
752
|
+
<param pos="0" name="hw.device" value="Switch"/>
|
|
753
|
+
<param pos="2" name="hw.product"/>
|
|
754
|
+
<param pos="1" name="host.name"/>
|
|
755
|
+
<param pos="3" name="procurve.model"/>
|
|
756
|
+
</fingerprint>
|
|
757
|
+
|
|
758
|
+
<fingerprint pattern="^ProCurve Switch (\S+) \((.*)\)$">
|
|
759
|
+
<description>HPE ProCurve Switch w/o Hostname</description>
|
|
760
|
+
<example hw.product="2610-24/12PWR" procurve.model="J9086A">ProCurve Switch 2610-24/12PWR (J9086A)</example>
|
|
761
|
+
<param pos="0" name="hw.vendor" value="HPE"/>
|
|
762
|
+
<param pos="0" name="hw.device" value="Switch"/>
|
|
763
|
+
<param pos="1" name="hw.product"/>
|
|
764
|
+
<param pos="2" name="procurve.model"/>
|
|
765
|
+
</fingerprint>
|
|
766
|
+
|
|
767
|
+
<fingerprint pattern="^FlexiPacket Hub$">
|
|
768
|
+
<description>Nokia Siemens FlexiPacket Hub</description>
|
|
769
|
+
<example>FlexiPacket Hub</example>
|
|
770
|
+
<param pos="0" name="hw.vendor" value="Nokia-Siemens"/>
|
|
771
|
+
<param pos="0" name="hw.device" value="Switch"/>
|
|
772
|
+
<param pos="0" name="hw.product" value="FlexiPacket Hub"/>
|
|
773
|
+
</fingerprint>
|
|
774
|
+
|
|
775
|
+
<fingerprint pattern="^R&S Instrument VNC desktop$">
|
|
776
|
+
<description>Rohde and Schwarz Remote Instrument (vnc)</description>
|
|
777
|
+
<example>R&S Instrument VNC desktop</example>
|
|
778
|
+
<param pos="0" name="hw.device" value="Test Instrument"/>
|
|
779
|
+
<param pos="0" name="hw.vendor" value="Rohde & Schwarz"/>
|
|
780
|
+
<param pos="0" name="os.device" value="Test Instrument"/>
|
|
781
|
+
<param pos="0" name="os.vendor" value="Rohde & Schwarz"/>
|
|
782
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
783
|
+
</fingerprint>
|
|
784
|
+
|
|
785
|
+
<fingerprint pattern="^Rohde & Schwarz remote instrument$">
|
|
786
|
+
<description>Rohde and Schwarz Remote Instrument (web admin)</description>
|
|
787
|
+
<example>Rohde & Schwarz remote instrument</example>
|
|
788
|
+
<param pos="0" name="hw.device" value="Test Instrument"/>
|
|
789
|
+
<param pos="0" name="hw.vendor" value="Rohde & Schwarz"/>
|
|
790
|
+
</fingerprint>
|
|
791
|
+
|
|
792
|
+
<fingerprint pattern="^EXA$">
|
|
793
|
+
<description>Keysight EXA Signal Analyzer</description>
|
|
794
|
+
<example>EXA</example>
|
|
795
|
+
<param pos="0" name="hw.vendor" value="Keysight"/>
|
|
796
|
+
<param pos="0" name="hw.device" value="Test Instrument"/>
|
|
797
|
+
<param pos="0" name="hw.product" value="EXA Signal Analyzer"/>
|
|
798
|
+
<param pos="0" name="os.device" value="Test Instrument"/>
|
|
799
|
+
</fingerprint>
|
|
800
|
+
|
|
801
|
+
<fingerprint pattern="^MXA$">
|
|
802
|
+
<description>Keysight MXA Signal Analyzer</description>
|
|
803
|
+
<example>MXA</example>
|
|
804
|
+
<param pos="0" name="hw.vendor" value="Keysight"/>
|
|
805
|
+
<param pos="0" name="hw.device" value="Test Instrument"/>
|
|
806
|
+
<param pos="0" name="hw.product" value="MXA Signal Analyzer"/>
|
|
807
|
+
<param pos="0" name="os.device" value="Test Instrument"/>
|
|
808
|
+
</fingerprint>
|
|
809
|
+
|
|
810
|
+
<fingerprint pattern="^Paragon-100G$">
|
|
811
|
+
<description>Calnex Paragon-100G</description>
|
|
812
|
+
<example>Paragon-100G</example>
|
|
813
|
+
<param pos="0" name="hw.vendor" value="Calnex"/>
|
|
814
|
+
<param pos="0" name="hw.device" value="Test Instrument"/>
|
|
815
|
+
<param pos="0" name="hw.product" value="Paragon-100G"/>
|
|
816
|
+
</fingerprint>
|
|
817
|
+
|
|
818
|
+
<fingerprint pattern="^33521A$">
|
|
819
|
+
<description>Keysight 33521A Waveform Generator</description>
|
|
820
|
+
<example>33521A</example>
|
|
821
|
+
<param pos="0" name="hw.vendor" value="Keysight"/>
|
|
822
|
+
<param pos="0" name="hw.device" value="Test Instrument"/>
|
|
823
|
+
<param pos="0" name="hw.product" value="33521A Waveform Generator"/>
|
|
824
|
+
</fingerprint>
|
|
825
|
+
|
|
826
|
+
<fingerprint pattern="^34972A$">
|
|
827
|
+
<description>Keysight 34972A Data Logger</description>
|
|
828
|
+
<example>34972A</example>
|
|
829
|
+
<param pos="0" name="hw.vendor" value="Keysight"/>
|
|
830
|
+
<param pos="0" name="hw.device" value="Test Instrument"/>
|
|
831
|
+
<param pos="0" name="hw.product" value="34972A Data Logger"/>
|
|
832
|
+
</fingerprint>
|
|
833
|
+
|
|
834
|
+
<fingerprint pattern="^53230A$">
|
|
835
|
+
<description>Agilent 53230A Frequency Counter</description>
|
|
836
|
+
<example>53230A</example>
|
|
837
|
+
<param pos="0" name="hw.vendor" value="Agilent"/>
|
|
838
|
+
<param pos="0" name="hw.device" value="Test Instrument"/>
|
|
839
|
+
<param pos="0" name="hw.product" value="53230A Frequency Counter"/>
|
|
840
|
+
</fingerprint>
|
|
841
|
+
|
|
842
|
+
<fingerprint pattern="^Agilent 33220A \((.*)\)$">
|
|
843
|
+
<description>Agilent 33220A</description>
|
|
844
|
+
<example agilent.serial="MY44041111">Agilent 33220A (MY44041111)</example>
|
|
845
|
+
<param pos="0" name="hw.vendor" value="Agilent"/>
|
|
846
|
+
<param pos="0" name="hw.device" value="Test Instrument"/>
|
|
847
|
+
<param pos="0" name="hw.product" value="33220A Waveform Generator"/>
|
|
848
|
+
<param pos="1" name="agilent.serial"/>
|
|
849
|
+
</fingerprint>
|
|
850
|
+
|
|
851
|
+
<fingerprint pattern="^Agilent N5172B (?:EXG )?(MY\S+)$">
|
|
852
|
+
<description>Agilent N5172B</description>
|
|
853
|
+
<example agilent.serial="MY44041111">Agilent N5172B EXG MY44041111</example>
|
|
854
|
+
<param pos="0" name="hw.vendor" value="Agilent"/>
|
|
855
|
+
<param pos="0" name="hw.device" value="Test Instrument"/>
|
|
856
|
+
<param pos="0" name="hw.product" value="N5172B Signal Generator"/>
|
|
857
|
+
<param pos="1" name="agilent.serial"/>
|
|
858
|
+
</fingerprint>
|
|
859
|
+
|
|
860
|
+
<fingerprint pattern="^Polycom - Configuration Utility$">
|
|
861
|
+
<description>Polycom IP Phone</description>
|
|
862
|
+
<example>Polycom - Configuration Utility</example>
|
|
863
|
+
<param pos="0" name="hw.vendor" value="Polycom"/>
|
|
864
|
+
<param pos="0" name="hw.family" value="SoundPoint"/>
|
|
865
|
+
<param pos="0" name="hw.device" value="VoIP"/>
|
|
866
|
+
<param pos="0" name="os.vendor" value="Polycom"/>
|
|
867
|
+
<param pos="0" name="os.product" value="Polycom"/>
|
|
868
|
+
</fingerprint>
|
|
869
|
+
|
|
870
|
+
|
|
871
|
+
<fingerprint pattern="^Digium Phone Settings$">
|
|
872
|
+
<description>Digium Phone Settings</description>
|
|
873
|
+
<example>Digium Phone Settings</example>
|
|
874
|
+
<param pos="0" name="hw.vendor" value="Digium"/>
|
|
875
|
+
<param pos="0" name="hw.device" value="VoIP"/>
|
|
876
|
+
</fingerprint>
|
|
877
|
+
|
|
878
|
+
<fingerprint pattern="^(SPA\S+) Configuration Utility$">
|
|
879
|
+
<description>Cisco IP Phone - SPA504G Configuration Utility</description>
|
|
880
|
+
<example hw.product="SPA504G">SPA504G Configuration Utility</example>
|
|
881
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
882
|
+
<param pos="0" name="hw.device" value="VoIP"/>
|
|
883
|
+
<param pos="1" name="hw.product"/>
|
|
884
|
+
</fingerprint>
|
|
885
|
+
|
|
886
|
+
<fingerprint pattern="^Cisco (?:SPA Configuration|IP Phone)$">
|
|
887
|
+
<description>Cisco IP Phone </description>
|
|
888
|
+
<example>Cisco SPA Configuration</example>
|
|
889
|
+
<example>Cisco IP Phone</example>
|
|
890
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
891
|
+
<param pos="0" name="hw.device" value="VoIP"/>
|
|
892
|
+
</fingerprint>
|
|
893
|
+
|
|
894
|
+
<fingerprint pattern="^Cisco IP Camera$">
|
|
895
|
+
<description>Cisco IP Camera</description>
|
|
896
|
+
<example>Cisco IP Camera</example>
|
|
897
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
898
|
+
<param pos="0" name="hw.device" value="Web Cam"/>
|
|
899
|
+
</fingerprint>
|
|
900
|
+
|
|
901
|
+
<fingerprint pattern="^Cisco TelePresence MCU">
|
|
902
|
+
<description>Cisco TelePresence MCU - Home page</description>
|
|
903
|
+
<example>Cisco TelePresence MCU - Home page</example>
|
|
904
|
+
<example>Cisco TelePresence MCU MSE - Home page</example>
|
|
905
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
906
|
+
<param pos="0" name="hw.device" value="Video Conferencing"/>
|
|
907
|
+
<param pos="0" name="hw.product" value="TelePresence MCU"/>
|
|
908
|
+
</fingerprint>
|
|
909
|
+
|
|
910
|
+
<fingerprint pattern="^Cisco (Nexus \d+\S+)$">
|
|
911
|
+
<description>Cisco Nexus Virtual Switch</description>
|
|
912
|
+
<example hw.product="Nexus 1000V">Cisco Nexus 1000V</example>
|
|
913
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
914
|
+
<param pos="0" name="hw.device" value="Switch"/>
|
|
915
|
+
<param pos="1" name="hw.product"/>
|
|
916
|
+
</fingerprint>
|
|
917
|
+
|
|
918
|
+
<fingerprint pattern="^Cisco Catalyst Switch - Home$">
|
|
919
|
+
<description>Cisco Catalyst Switch</description>
|
|
920
|
+
<example>Cisco Catalyst Switch - Home</example>
|
|
921
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
922
|
+
<param pos="0" name="hw.device" value="Switch"/>
|
|
923
|
+
<param pos="0" name="hw.product" value="Catalyst"/>
|
|
924
|
+
<param pos="0" name="os.vendor" value="Cisco"/>
|
|
925
|
+
<param pos="0" name="os.product" value="CatOS"/>
|
|
926
|
+
</fingerprint>
|
|
927
|
+
|
|
928
|
+
<fingerprint pattern="^Cisco MDS 9000(?: and Nexus 5000)? Management Modules (\d+\.\d+\S+)$">
|
|
929
|
+
<description>Cisco MDS 9000/Nexus 5000</description>
|
|
930
|
+
<example os.version="7.3(1)D1(1)">Cisco MDS 9000 and Nexus 5000 Management Modules 7.3(1)D1(1)</example>
|
|
931
|
+
<example os.version="6.2(13a)">Cisco MDS 9000 and Nexus 5000 Management Modules 6.2(13a)</example>
|
|
932
|
+
<example os.version="3.3(2)">Cisco MDS 9000 Management Modules 3.3(2)</example>
|
|
933
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
934
|
+
<param pos="0" name="hw.device" value="Switch"/>
|
|
935
|
+
<param pos="0" name="hw.product" value="MDS 9000"/>
|
|
936
|
+
<param pos="0" name="os.vendor" value="Cisco"/>
|
|
937
|
+
<param pos="0" name="os.device" value="Switch"/>
|
|
938
|
+
<param pos="0" name="os.product" value="MDS 9000"/>
|
|
939
|
+
<param pos="1" name="os.version"/>
|
|
940
|
+
</fingerprint>
|
|
941
|
+
|
|
942
|
+
<fingerprint pattern="^(LinxVII-\S+) Remote Access$">
|
|
943
|
+
<description>LinxVII-5S Data Terminal</description>
|
|
944
|
+
<example hw.product="LinxVII-5S">LinxVII-5S Remote Access</example>
|
|
945
|
+
<param pos="0" name="hw.vendor" value="LINX"/>
|
|
946
|
+
<param pos="0" name="hw.device" value="Data Terminal"/>
|
|
947
|
+
<param pos="1" name="hw.product"/>
|
|
948
|
+
</fingerprint>
|
|
949
|
+
|
|
950
|
+
<fingerprint pattern="^Datalogic Mobile Portable$">
|
|
951
|
+
<description>Datalogic Mobile Portable</description>
|
|
952
|
+
<example>Datalogic Mobile Portable</example>
|
|
953
|
+
<param pos="0" name="hw.vendor" value="Datalogic Mobile"/>
|
|
954
|
+
<param pos="0" name="hw.device" value="Handheld Scanner"/>
|
|
955
|
+
</fingerprint>
|
|
956
|
+
|
|
957
|
+
<fingerprint pattern="^AXIS$">
|
|
958
|
+
<description>Axis Communications Web Cam</description>
|
|
959
|
+
<example>AXIS</example>
|
|
960
|
+
<param pos="0" name="hw.vendor" value="AXIS"/>
|
|
961
|
+
<param pos="0" name="hw.device" value="Web Cam"/>
|
|
962
|
+
<param pos="0" name="os.vendor" value="AXIS"/>
|
|
963
|
+
<param pos="0" name="os.device" value="Web Cam"/>
|
|
964
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
965
|
+
</fingerprint>
|
|
966
|
+
|
|
967
|
+
<fingerprint pattern="^Hanwha Techwin$">
|
|
968
|
+
<description>Hanwha Techwin IP Camera</description>
|
|
969
|
+
<example>Hanwha Techwin</example>
|
|
970
|
+
<param pos="0" name="hw.vendor" value="Hanwha Techwin"/>
|
|
971
|
+
<param pos="0" name="hw.device" value="Web Cam"/>
|
|
972
|
+
<param pos="0" name="os.vendor" value="Hanwha Techwin"/>
|
|
973
|
+
<param pos="0" name="os.device" value="Web Cam"/>
|
|
974
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
975
|
+
</fingerprint>
|
|
976
|
+
|
|
977
|
+
<fingerprint pattern="^(WV-NS\S+) Network Camera$">
|
|
978
|
+
<description>WV-NS202A Network Camera</description>
|
|
979
|
+
<example hw.product="WV-NS202A">WV-NS202A Network Camera</example>
|
|
980
|
+
<example hw.product="WV-NS954">WV-NS954 Network Camera</example>
|
|
981
|
+
<param pos="0" name="hw.vendor" value="Panasonic"/>
|
|
982
|
+
<param pos="0" name="hw.device" value="Web Cam"/>
|
|
983
|
+
<param pos="1" name="hw.product"/>
|
|
984
|
+
<param pos="0" name="os.vendor" value="Panasonic"/>
|
|
985
|
+
<param pos="0" name="os.device" value="Web Cam"/>
|
|
986
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
987
|
+
</fingerprint>
|
|
988
|
+
|
|
989
|
+
<fingerprint pattern="^KACE Systems Management Appliance">
|
|
990
|
+
<description>KACE Systems Management Appliances</description>
|
|
991
|
+
<example>KACE Systems Management Appliance Service Center</example>
|
|
992
|
+
<example>KACE Systems Management Appliance Administrator Console</example>
|
|
993
|
+
<param pos="0" name="hw.vendor" value="KACE"/>
|
|
994
|
+
<param pos="0" name="hw.device" value="Support Appliance"/>
|
|
995
|
+
<param pos="0" name="os.vendor" value="KACE"/>
|
|
996
|
+
<param pos="0" name="os.family" value="FreeBSD"/>
|
|
997
|
+
</fingerprint>
|
|
998
|
+
|
|
999
|
+
<fingerprint pattern="Portal.*Powered by BOMGAR$">
|
|
1000
|
+
<description>Bomgar Appliances</description>
|
|
1001
|
+
<example>Remote Support Portal | Powered by BOMGAR</example>
|
|
1002
|
+
<example>Customer Support Portal Powered by BOMGAR</example>
|
|
1003
|
+
<param pos="0" name="hw.vendor" value="Bomgar"/>
|
|
1004
|
+
<param pos="0" name="hw.device" value="Support Appliance"/>
|
|
1005
|
+
<param pos="0" name="os.vendor" value="Bomgar"/>
|
|
1006
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
1007
|
+
</fingerprint>
|
|
1008
|
+
|
|
1009
|
+
<fingerprint pattern="^XRoads Network Appliance Administration$">
|
|
1010
|
+
<description>XRoads SD-WAN Network Appliance </description>
|
|
1011
|
+
<example>XRoads Network Appliance Administration</example>
|
|
1012
|
+
<param pos="0" name="hw.vendor" value="XRoads"/>
|
|
1013
|
+
<param pos="0" name="hw.device" value="SD-WAN Appliance"/>
|
|
1014
|
+
<param pos="0" name="os.vendor" value="XRoads"/>
|
|
1015
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
1016
|
+
</fingerprint>
|
|
1017
|
+
|
|
1018
|
+
<!-- An OEM of the Quantum Corporation SuperLoader 3 -->
|
|
1019
|
+
<fingerprint pattern="^On Board Remote Management$">
|
|
1020
|
+
<description>PowerVault 124T Tape Library</description>
|
|
1021
|
+
<example>On Board Remote Management</example>
|
|
1022
|
+
<param pos="0" name="hw.vendor" value="Dell"/>
|
|
1023
|
+
<param pos="0" name="hw.device" value="Tape Library"/>
|
|
1024
|
+
<param pos="0" name="hw.product" value="PowerVault 124T"/>
|
|
1025
|
+
<param pos="0" name="os.vendor" value="Dell"/>
|
|
1026
|
+
</fingerprint>
|
|
1027
|
+
|
|
1028
|
+
<fingerprint pattern="^(HD-RX-\S+)$">
|
|
1029
|
+
<description>Crestron Multiformat Receivers</description>
|
|
1030
|
+
<example hw.product="HD-RX-201-C-E">HD-RX-201-C-E</example>
|
|
1031
|
+
<param pos="0" name="hw.vendor" value="Crestron"/>
|
|
1032
|
+
<param pos="0" name="hw.device" value="Media Receiver"/>
|
|
1033
|
+
<param pos="1" name="hw.product"/>
|
|
1034
|
+
<param pos="0" name="os.vendor" value="Crestron"/>
|
|
1035
|
+
</fingerprint>
|
|
1036
|
+
|
|
1037
|
+
<fingerprint pattern="^Lencore Sound Manager 2$">
|
|
1038
|
+
<description>Lencore Sound Manager 2</description>
|
|
1039
|
+
<example>Lencore Sound Manager 2</example>
|
|
1040
|
+
<param pos="0" name="hw.vendor" value="Lencore"/>
|
|
1041
|
+
<param pos="0" name="hw.device" value="Media Receiver"/>
|
|
1042
|
+
<param pos="0" name="hw.product" value="Lencore Sound Manager 2"/>
|
|
1043
|
+
<param pos="0" name="os.vendor" value="i.LON"/>
|
|
1044
|
+
<param pos="0" name="os.product" value="SmartServer"/>
|
|
1045
|
+
</fingerprint>
|
|
1046
|
+
|
|
1047
|
+
<!-- Various ICS/OT -->
|
|
1048
|
+
|
|
1049
|
+
<fingerprint pattern="^CTI (25\S+) Main Menu$">
|
|
1050
|
+
<description>Siemens 257x Ethernet Adapter (CTI Branded)</description>
|
|
1051
|
+
<example hw.product="2572-A">CTI 2572-A Main Menu</example>
|
|
1052
|
+
<param pos="0" name="hw.vendor" value="Siemens"/>
|
|
1053
|
+
<param pos="0" name="hw.device" value="Ethernet Adapter"/>
|
|
1054
|
+
<param pos="1" name="hw.product"/>
|
|
1055
|
+
<param pos="0" name="os.vendor" value="Siemens"/>
|
|
1056
|
+
</fingerprint>
|
|
1057
|
+
|
|
1058
|
+
<fingerprint pattern="^(25\S+) Ethernet TCP/IP Module$">
|
|
1059
|
+
<description>Siemens 257x Ethernet Adapter</description>
|
|
1060
|
+
<example hw.product="2572-B">2572-B Ethernet TCP/IP Module</example>
|
|
1061
|
+
<param pos="0" name="hw.vendor" value="Siemens"/>
|
|
1062
|
+
<param pos="0" name="hw.device" value="Ethernet Adapter"/>
|
|
1063
|
+
<param pos="1" name="hw.product"/>
|
|
1064
|
+
<param pos="0" name="os.vendor" value="Siemens"/>
|
|
1065
|
+
</fingerprint>
|
|
1066
|
+
|
|
1067
|
+
<fingerprint pattern="^ECOM100 Main$">
|
|
1068
|
+
<description>DirectLOGIC DL205 communication module</description>
|
|
1069
|
+
<example>ECOM100 Main</example>
|
|
1070
|
+
<param pos="0" name="hw.vendor" value="DirectLOGIC"/>
|
|
1071
|
+
<param pos="0" name="hw.device" value="Ethernet Adapter"/>
|
|
1072
|
+
<param pos="0" name="hw.product" value="ECOM100"/>
|
|
1073
|
+
<param pos="0" name="os.vendor" value="DirectLOGIC"/>
|
|
1074
|
+
</fingerprint>
|
|
1075
|
+
|
|
1076
|
+
<fingerprint pattern="^(1794-\S+) FLEX Ethernet Adapter$">
|
|
1077
|
+
<description>Allen-Bradley 1794-AENTR FLEX Ethernet Adapter</description>
|
|
1078
|
+
<example hw.product="1794-AENTR">1794-AENTR FLEX Ethernet Adapter</example>
|
|
1079
|
+
<param pos="0" name="hw.vendor" value="Allen-Bradley"/>
|
|
1080
|
+
<param pos="0" name="hw.device" value="Ethernet Adapter"/>
|
|
1081
|
+
<param pos="1" name="hw.product"/>
|
|
1082
|
+
<param pos="0" name="os.vendor" value="Allen-Bradley"/>
|
|
1083
|
+
</fingerprint>
|
|
1084
|
+
|
|
1085
|
+
<fingerprint pattern="^Anybus-CC EtherNet/IP$">
|
|
1086
|
+
<description>Anybus-CC EtherNet/IP</description>
|
|
1087
|
+
<example>Anybus-CC EtherNet/IP</example>
|
|
1088
|
+
<param pos="0" name="hw.vendor" value="AnyBus"/>
|
|
1089
|
+
<param pos="0" name="hw.device" value="Ethernet Adapter"/>
|
|
1090
|
+
<param pos="0" name="hw.product" value="CC EtherNet/IP"/>
|
|
1091
|
+
<param pos="0" name="os.vendor" value="AnyBus"/>
|
|
1092
|
+
</fingerprint>
|
|
1093
|
+
|
|
1094
|
+
<fingerprint pattern="^Symmetry 2DBC">
|
|
1095
|
+
<description>AMAG Technology Symmetry EN-2DBC Access Controller</description>
|
|
1096
|
+
<example>Symmetry 2DBC STD APP (EN2DBC_00_EF_4F)</example>
|
|
1097
|
+
<param pos="0" name="hw.vendor" value="AMAG Technology"/>
|
|
1098
|
+
<param pos="0" name="hw.device" value="Access Control"/>
|
|
1099
|
+
<param pos="0" name="hw.product" value="Symmetry EN-2DBC"/>
|
|
1100
|
+
<param pos="0" name="os.vendor" value="AMAG Technology"/>
|
|
1101
|
+
</fingerprint>
|
|
1102
|
+
|
|
1103
|
+
<fingerprint pattern="^(1747-\S+) Home Page$">
|
|
1104
|
+
<description>Allen-Bradley 1747-LXXX SLC 5/05 Controller</description>
|
|
1105
|
+
<example hw.product="1747-L551">1747-L551 Home Page</example>
|
|
1106
|
+
<example hw.product="1747-L551/C">1747-L551/C Home Page</example>
|
|
1107
|
+
<example hw.product="1747-L552/C">1747-L552/C Home Page</example>
|
|
1108
|
+
<param pos="0" name="hw.vendor" value="Allen-Bradley"/>
|
|
1109
|
+
<param pos="0" name="hw.device" value="HMI Controller"/>
|
|
1110
|
+
<param pos="1" name="hw.product"/>
|
|
1111
|
+
<param pos="0" name="os.vendor" value="Allen-Bradley"/>
|
|
1112
|
+
</fingerprint>
|
|
1113
|
+
|
|
1114
|
+
<fingerprint pattern="^(1766-\S+) (B/\S+)$">
|
|
1115
|
+
<description>Allen-Bradley 1766-L32BXB PLC</description>
|
|
1116
|
+
<example hw.product="1766-L32BXB" os.product="1766-L32BXB" os.version="B/11.00">1766-L32BXB B/11.00</example>
|
|
1117
|
+
<param pos="0" name="hw.vendor" value="Allen-Bradley"/>
|
|
1118
|
+
<param pos="0" name="hw.device" value="PLC"/>
|
|
1119
|
+
<param pos="1" name="hw.product"/>
|
|
1120
|
+
<param pos="0" name="os.vendor" value="Allen-Bradley"/>
|
|
1121
|
+
<param pos="0" name="os.device" value="PLC"/>
|
|
1122
|
+
<param pos="1" name="os.product"/>
|
|
1123
|
+
<param pos="2" name="os.version"/>
|
|
1124
|
+
</fingerprint>
|
|
1125
|
+
|
|
1126
|
+
<fingerprint pattern="^PLC-5 Ethernet Base Page$">
|
|
1127
|
+
<description>PLC-5 Ethernet Interface Module</description>
|
|
1128
|
+
<example>PLC-5 Ethernet Base Page</example>
|
|
1129
|
+
<param pos="0" name="hw.vendor" value="Rockwell Automation"/>
|
|
1130
|
+
<param pos="0" name="hw.device" value="PLC"/>
|
|
1131
|
+
<param pos="0" name="hw.product" value="PLC-5"/>
|
|
1132
|
+
<param pos="0" name="os.vendor" value="Rockwell Automation"/>
|
|
1133
|
+
<param pos="0" name="os.device" value="PLC"/>
|
|
1134
|
+
<param pos="0" name="os.product" value="PLC-5"/>
|
|
1135
|
+
</fingerprint>
|
|
1136
|
+
|
|
1137
|
+
<fingerprint pattern="^(1761-NET-\S+)$">
|
|
1138
|
+
<description>Allen-Bradley Ethernet Module</description>
|
|
1139
|
+
<example hw.product="1761-NET-EN">1761-NET-EN</example>
|
|
1140
|
+
<example hw.product="1761-NET-ENIW">1761-NET-ENIW</example>
|
|
1141
|
+
<param pos="0" name="hw.vendor" value="Allen-Bradley"/>
|
|
1142
|
+
<param pos="0" name="hw.device" value="Ethernet Adapter"/>
|
|
1143
|
+
<param pos="1" name="hw.product"/>
|
|
1144
|
+
<param pos="0" name="os.vendor" value="Allen-Bradley"/>
|
|
1145
|
+
</fingerprint>
|
|
1146
|
+
|
|
1147
|
+
<fingerprint pattern="^(1785-\S+) Ethernet Base Page$">
|
|
1148
|
+
<description>Allen-Bradley 1785 Ethernet Module</description>
|
|
1149
|
+
<example hw.product="1785-ENET">1785-ENET Ethernet Base Page</example>
|
|
1150
|
+
<param pos="0" name="hw.vendor" value="Allen-Bradley"/>
|
|
1151
|
+
<param pos="0" name="hw.device" value="Ethernet Adapter"/>
|
|
1152
|
+
<param pos="1" name="hw.product"/>
|
|
1153
|
+
<param pos="0" name="os.vendor" value="Allen-Bradley"/>
|
|
1154
|
+
</fingerprint>
|
|
1155
|
+
|
|
1156
|
+
<fingerprint pattern="^NFT S7 - DALI-Gateway\(Ethernet\)$">
|
|
1157
|
+
<description>NFT DALI S7 Ethernet Module</description>
|
|
1158
|
+
<example>NFT S7 - DALI-Gateway(Ethernet)</example>
|
|
1159
|
+
<param pos="0" name="hw.vendor" value="NFT"/>
|
|
1160
|
+
<param pos="0" name="hw.device" value="Ethernet Adapter"/>
|
|
1161
|
+
<param pos="0" name="hw.product" value="S7 DALI Gateway"/>
|
|
1162
|
+
<param pos="0" name="os.vendor" value="NFT"/>
|
|
1163
|
+
</fingerprint>
|
|
1164
|
+
|
|
1165
|
+
<fingerprint pattern="^IBHLink S7\+\+$">
|
|
1166
|
+
<description>IBHsofte IBHLink S7++</description>
|
|
1167
|
+
<example>IBHLink S7++</example>
|
|
1168
|
+
<param pos="0" name="hw.vendor" value="IBHsofte"/>
|
|
1169
|
+
<param pos="0" name="hw.device" value="Ethernet Adapter"/>
|
|
1170
|
+
<param pos="0" name="hw.product" value="IBHLink S7++"/>
|
|
1171
|
+
<param pos="0" name="os.vendor" value="IBHsofte"/>
|
|
1172
|
+
</fingerprint>
|
|
1173
|
+
|
|
1174
|
+
|
|
1175
|
+
<!-- Software and Appliances -->
|
|
1176
|
+
|
|
1177
|
+
<fingerprint pattern="^S7/S5 OPC Server$">
|
|
1178
|
+
<description>Softing Industrial S7/S5 OPC Server</description>
|
|
1179
|
+
<example>S7/S5 OPC Server</example>
|
|
1180
|
+
<param pos="0" name="service.vendor" value="Softing"/>
|
|
1181
|
+
<param pos="0" name="service.product" value="S7/S5 OPC Server"/>
|
|
1182
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:softing:s7-s5-opc-server:-"/>
|
|
1183
|
+
</fingerprint>
|
|
1184
|
+
|
|
1185
|
+
<fingerprint pattern="^Nessus$">
|
|
1186
|
+
<description>Nessus</description>
|
|
1187
|
+
<example>Nessus</example>
|
|
1188
|
+
<param pos="0" name="service.vendor" value="Tenable"/>
|
|
1189
|
+
<param pos="0" name="service.product" value="Nessus"/>
|
|
1190
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:tenable:nessus:-"/>
|
|
1191
|
+
</fingerprint>
|
|
1192
|
+
|
|
1193
|
+
<fingerprint pattern="^Tenable Appliance$">
|
|
1194
|
+
<description>Tenable Appliance</description>
|
|
1195
|
+
<example>Tenable Appliance</example>
|
|
1196
|
+
<param pos="0" name="hw.vendor" value="Tenable"/>
|
|
1197
|
+
<param pos="0" name="hw.device" value="Security Appliance"/>
|
|
1198
|
+
<param pos="0" name="hw.product" value="Tenable Appliance"/>
|
|
1199
|
+
</fingerprint>
|
|
1200
|
+
|
|
1201
|
+
<fingerprint pattern="^(?:Welcome to Citrix )?XenServer ([0-9\.]+)$">
|
|
1202
|
+
<description>XenServer</description>
|
|
1203
|
+
<example service.version="7.2.0">Welcome to Citrix XenServer 7.2.0</example>
|
|
1204
|
+
<example service.version="6.2.5">XenServer 6.2.5</example>
|
|
1205
|
+
<param pos="0" name="service.vendor" value="Citrix"/>
|
|
1206
|
+
<param pos="0" name="service.product" value="XenServer"/>
|
|
1207
|
+
<param pos="1" name="service.version"/>
|
|
1208
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:citrix:xenserver:{service.version}"/>
|
|
1209
|
+
</fingerprint>
|
|
1210
|
+
|
|
1211
|
+
<fingerprint pattern="^RabbitMQ Management$">
|
|
1212
|
+
<description>RabbitMQ Management</description>
|
|
1213
|
+
<example>RabbitMQ Management</example>
|
|
1214
|
+
<param pos="0" name="service.vendor" value="RabbitMQ"/>
|
|
1215
|
+
<param pos="0" name="service.product" value="Management Server"/>
|
|
1216
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:rabbitmq:rabbitmq-manager:-"/>
|
|
1217
|
+
</fingerprint>
|
|
1218
|
+
|
|
1219
|
+
<fingerprint pattern="^Statistics Report for HAProxy$">
|
|
1220
|
+
<description>HAProxy Stats Server</description>
|
|
1221
|
+
<example>Statistics Report for HAProxy</example>
|
|
1222
|
+
<param pos="0" name="service.vendor" value="HAProxy"/>
|
|
1223
|
+
<param pos="0" name="service.product" value="HAProxy Stats Server"/>
|
|
1224
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:haproxy:stats-server:-"/>
|
|
1225
|
+
</fingerprint>
|
|
1226
|
+
|
|
1227
|
+
<fingerprint pattern="^Open Manage&trade;$">
|
|
1228
|
+
<description>Dell Open Manage Admin</description>
|
|
1229
|
+
<example>Open Manage&trade;</example>
|
|
1230
|
+
<param pos="0" name="service.vendor" value="Dell"/>
|
|
1231
|
+
<param pos="0" name="service.product" value="Open Manage"/>
|
|
1232
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:dell:openmanage:-"/>
|
|
1233
|
+
</fingerprint>
|
|
1234
|
+
|
|
1235
|
+
<fingerprint pattern="^TightVNC desktop \[(.*)\]$">
|
|
1236
|
+
<description>TightVNC Web Server</description>
|
|
1237
|
+
<example host.name="teller01">TightVNC desktop [teller01]</example>
|
|
1238
|
+
<param pos="0" name="service.vendor" value="TightVNC"/>
|
|
1239
|
+
<param pos="0" name="service.product" value="Desktop"/>
|
|
1240
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:tightvnc:desktop:-"/>
|
|
1241
|
+
<param pos="1" name="host.name"/>
|
|
1242
|
+
</fingerprint>
|
|
1243
|
+
|
|
1244
|
+
<fingerprint pattern="^noVNC$">
|
|
1245
|
+
<description>noVNC Web Server</description>
|
|
1246
|
+
<example>noVNC</example>
|
|
1247
|
+
<param pos="0" name="service.vendor" value="noVNC"/>
|
|
1248
|
+
<param pos="0" name="service.product" value="noVNC"/>
|
|
1249
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:novnc:novnc:-"/>
|
|
1250
|
+
</fingerprint>
|
|
1251
|
+
|
|
1252
|
+
<fingerprint pattern="^.* \[Jenkins\]$">
|
|
1253
|
+
<description>Jenkins Customized Dashboard</description>
|
|
1254
|
+
<example>Continuous Integrations [Jenkins]</example>
|
|
1255
|
+
<example>Dashboard [Jenkins]</example>
|
|
1256
|
+
<param pos="0" name="service.vendor" value="Jenkins"/>
|
|
1257
|
+
<param pos="0" name="service.product" value="Jenkins"/>
|
|
1258
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:jenkins:jenkins:-"/>
|
|
1259
|
+
</fingerprint>
|
|
1260
|
+
|
|
1261
|
+
<fingerprint pattern="^Shell In A Box$">
|
|
1262
|
+
<description>Shell In A Box (OSS Project)</description>
|
|
1263
|
+
<example>Shell In A Box</example>
|
|
1264
|
+
<param pos="0" name="service.vendor" value="ShellInABox"/>
|
|
1265
|
+
<param pos="0" name="service.product" value="ShellInABox"/>
|
|
1266
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:shellinabox:shellinabox:-"/>
|
|
1267
|
+
</fingerprint>
|
|
1268
|
+
|
|
1269
|
+
<fingerprint pattern="^AgilentLicenseManagerService Service$">
|
|
1270
|
+
<description>Agilent License Manager Service</description>
|
|
1271
|
+
<example>AgilentLicenseManagerService Service</example>
|
|
1272
|
+
<param pos="0" name="service.vendor" value="Agilent"/>
|
|
1273
|
+
<param pos="0" name="service.product" value="License Manager"/>
|
|
1274
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:agilent:license-manager-"/>
|
|
1275
|
+
</fingerprint>
|
|
1276
|
+
|
|
1277
|
+
<fingerprint pattern="^Red Hat OpenStack Platform Director$">
|
|
1278
|
+
<description>Red Hat OpenStack Platform Director</description>
|
|
1279
|
+
<example>Red Hat OpenStack Platform Director</example>
|
|
1280
|
+
<param pos="0" name="service.vendor" value="Red Hat"/>
|
|
1281
|
+
<param pos="0" name="service.product" value="Open Stack Platform Director"/>
|
|
1282
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:openstack:platform-director:-"/>
|
|
1283
|
+
</fingerprint>
|
|
1284
|
+
|
|
1285
|
+
<fingerprint pattern="^splunkd$">
|
|
1286
|
+
<description>Splunk HTTP server used in the web interface, forwarders, indexers and more</description>
|
|
1287
|
+
<example>splunkd</example>
|
|
1288
|
+
<param pos="0" name="service.vendor" value="Splunk"/>
|
|
1289
|
+
<param pos="0" name="service.product" value="Splunkd"/>
|
|
1290
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:splunk:splunkd:-"/>
|
|
1291
|
+
</fingerprint>
|
|
1292
|
+
|
|
1293
|
+
<fingerprint pattern="^VMware Horizon$">
|
|
1294
|
+
<description>VMware Horizon</description>
|
|
1295
|
+
<example>VMware Horizon</example>
|
|
1296
|
+
<param pos="0" name="service.vendor" value="VMWare"/>
|
|
1297
|
+
<param pos="0" name="service.product" value="Horizon"/>
|
|
1298
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:vmware:horizon:-"/>
|
|
1299
|
+
</fingerprint>
|
|
1300
|
+
|
|
1301
|
+
<fingerprint pattern="^Graylog Web Interface$">
|
|
1302
|
+
<description>Graylog Web Interface</description>
|
|
1303
|
+
<example>Graylog Web Interface</example>
|
|
1304
|
+
<param pos="0" name="service.vendor" value="Graylog"/>
|
|
1305
|
+
<param pos="0" name="service.product" value="Graylog"/>
|
|
1306
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:graylog:graylog:-"/>
|
|
1307
|
+
</fingerprint>
|
|
1308
|
+
|
|
1309
|
+
<fingerprint pattern="^Symantec Endpoint Protection Manager$">
|
|
1310
|
+
<description>Symantec Endpoint Protection Manager</description>
|
|
1311
|
+
<example>Symantec Endpoint Protection Manager</example>
|
|
1312
|
+
<param pos="0" name="service.vendor" value="Symantec"/>
|
|
1313
|
+
<param pos="0" name="service.product" value="Endpoint Protection Manager"/>
|
|
1314
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:symantec:endpoint-protection-manager:-"/>
|
|
1315
|
+
</fingerprint>
|
|
1316
|
+
|
|
1317
|
+
<fingerprint pattern="^Login Gateway - Kiwi Syslog Web Access$">
|
|
1318
|
+
<description>Kiwi Syslog Web Access</description>
|
|
1319
|
+
<example>Login Gateway - Kiwi Syslog Web Access</example>
|
|
1320
|
+
<param pos="0" name="service.vendor" value="Solarwinds"/>
|
|
1321
|
+
<param pos="0" name="service.product" value="Kiwi Syslog Web Access"/>
|
|
1322
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:solarwinds:kiwi-syslog-web:-"/>
|
|
1323
|
+
</fingerprint>
|
|
1324
|
+
|
|
1325
|
+
<fingerprint pattern="^Hadoop Administration$">
|
|
1326
|
+
<description>Hadoop Administration Web Service</description>
|
|
1327
|
+
<example>Hadoop Administration</example>
|
|
1328
|
+
<param pos="0" name="service.vendor" value="Hadoop"/>
|
|
1329
|
+
<param pos="0" name="service.product" value="Hadoop Web Admin"/>
|
|
1330
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:hadoop:web-admin:-"/>
|
|
1331
|
+
</fingerprint>
|
|
1332
|
+
|
|
1333
|
+
<fingerprint pattern="^ManageEngine OpManager$">
|
|
1334
|
+
<description>ManageEngine OpManager</description>
|
|
1335
|
+
<example>ManageEngine OpManager</example>
|
|
1336
|
+
<param pos="0" name="service.vendor" value="ManageEngine"/>
|
|
1337
|
+
<param pos="0" name="service.product" value="OpManager"/>
|
|
1338
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:manageengine:opmanager:-"/>
|
|
1339
|
+
</fingerprint>
|
|
1340
|
+
|
|
334
1341
|
</fingerprints>
|