recog 2.3.7 → 2.3.12

Sign up to get free protection for your applications and to get access to all the features.
Files changed (81) hide show
  1. checksums.yaml +4 -4
  2. data/.gitignore +9 -2
  3. data/.ruby-gemset +1 -0
  4. data/.ruby-version +1 -0
  5. data/.travis.yml +2 -4
  6. data/CONTRIBUTING.md +136 -37
  7. data/Gemfile +2 -5
  8. data/README.md +18 -16
  9. data/bin/recog_cleanup +16 -0
  10. data/bin/recog_standardize +142 -0
  11. data/cpe-remap.yaml +36 -1
  12. data/features/match.feature +4 -0
  13. data/features/support/aruba.rb +3 -0
  14. data/features/verify.feature +5 -0
  15. data/identifiers/README.md +56 -0
  16. data/identifiers/hw_device.txt +77 -0
  17. data/identifiers/hw_family.txt +96 -0
  18. data/identifiers/hw_product.txt +328 -0
  19. data/identifiers/os_architecture.txt +20 -0
  20. data/identifiers/os_device.txt +94 -0
  21. data/identifiers/os_family.txt +325 -0
  22. data/identifiers/os_product.txt +420 -0
  23. data/identifiers/service_family.txt +272 -0
  24. data/identifiers/service_product.txt +557 -0
  25. data/identifiers/software_class.txt +26 -0
  26. data/identifiers/software_family.txt +91 -0
  27. data/identifiers/software_product.txt +333 -0
  28. data/identifiers/vendor.txt +891 -0
  29. data/lib/recog/version.rb +1 -1
  30. data/requirements.txt +1 -1
  31. data/spec/lib/fingerprint_self_test_spec.rb +1 -1
  32. data/spec/lib/recog/fingerprint/regexp_factory_spec.rb +1 -1
  33. data/update_cpes.py +4 -1
  34. data/xml/apache_modules.xml +292 -5
  35. data/xml/apache_os.xml +50 -2
  36. data/xml/architecture.xml +19 -7
  37. data/xml/dns_versionbind.xml +200 -26
  38. data/xml/favicons.xml +1701 -0
  39. data/xml/ftp_banners.xml +276 -16
  40. data/xml/h323_callresp.xml +112 -12
  41. data/xml/hp_pjl_id.xml +47 -5
  42. data/xml/html_title.xml +1419 -72
  43. data/xml/http_cookies.xml +77 -10
  44. data/xml/http_servers.xml +898 -47
  45. data/xml/http_wwwauth.xml +154 -27
  46. data/xml/imap_banners.xml +23 -13
  47. data/xml/ldap_searchresult.xml +81 -9
  48. data/xml/mdns_device-info_txt.xml +194 -17
  49. data/xml/mdns_workstation_txt.xml +4 -2
  50. data/xml/mysql_banners.xml +554 -45
  51. data/xml/mysql_error.xml +113 -6
  52. data/xml/nntp_banners.xml +10 -2
  53. data/xml/ntp_banners.xml +95 -11
  54. data/xml/operating_system.xml +90 -3
  55. data/xml/pop_banners.xml +32 -31
  56. data/xml/rsh_resp.xml +11 -2
  57. data/xml/rtsp_servers.xml +43 -23
  58. data/xml/sip_banners.xml +9 -14
  59. data/xml/sip_user_agents.xml +69 -3
  60. data/xml/smb_native_lm.xml +10 -2
  61. data/xml/smb_native_os.xml +80 -2
  62. data/xml/smtp_banners.xml +233 -13
  63. data/xml/smtp_debug.xml +6 -4
  64. data/xml/smtp_ehlo.xml +7 -5
  65. data/xml/smtp_expn.xml +13 -4
  66. data/xml/smtp_help.xml +23 -4
  67. data/xml/smtp_mailfrom.xml +5 -2
  68. data/xml/smtp_noop.xml +6 -5
  69. data/xml/smtp_quit.xml +5 -4
  70. data/xml/smtp_rcptto.xml +5 -2
  71. data/xml/smtp_rset.xml +4 -4
  72. data/xml/smtp_turn.xml +4 -4
  73. data/xml/smtp_vrfy.xml +14 -4
  74. data/xml/snmp_sysdescr.xml +776 -52
  75. data/xml/snmp_sysobjid.xml +47 -2
  76. data/xml/ssh_banners.xml +259 -80
  77. data/xml/telnet_banners.xml +376 -23
  78. data/xml/x11_banners.xml +27 -4
  79. data/xml/x509_issuers.xml +37 -13
  80. data/xml/x509_subjects.xml +525 -55
  81. metadata +29 -6
@@ -1,17 +1,18 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
1
+ <?xml version='1.0' encoding='UTF-8'?>
2
2
  <fingerprints protocol="pjl" database_type="service" preference="0.10">
3
3
  <!--
4
4
  For printers running the PJL protocol (usually on 9100/tcp), their type can be requested
5
5
  by the INFO ID command. The printer types (strings surrounded by double quotes) are
6
6
  matched against these patterns to fingerprint the printer.
7
-
8
7
  'preference' notes: The value has been explicitly set to 0.10 due to the very loose
9
8
  regex that is used here.
10
9
  -->
10
+
11
11
  <!--
12
12
  LaserJet and Designjet are registered trademarks of HP. Therefore matching for the keywords
13
13
  is sufficient for asserting all relevant information
14
14
  -->
15
+
15
16
  <fingerprint pattern="(?i)laserjet (.*)(?: series)?">
16
17
  <description>HP JetDirect Printer</description>
17
18
  <example>HP LaserJet 4100 Series</example>
@@ -27,6 +28,7 @@
27
28
  <param pos="0" name="os.family" value="LaserJet"/>
28
29
  <param pos="1" name="os.product"/>
29
30
  </fingerprint>
31
+
30
32
  <fingerprint pattern="(?i)(designjet \S+)">
31
33
  <description>HP Designjet printer</description>
32
34
  <example>hp designjet 110plus</example>
@@ -41,6 +43,7 @@
41
43
  <param pos="0" name="os.device" value="Printer"/>
42
44
  <param pos="1" name="os.product"/>
43
45
  </fingerprint>
46
+
44
47
  <fingerprint pattern="^Xerox ColorQube (\S+)$">
45
48
  <description>Xerox ColorQube Multifunction Printer</description>
46
49
  <example>Xerox ColorQube 8570DN</example>
@@ -51,6 +54,7 @@
51
54
  <param pos="1" name="os.product"/>
52
55
  <param pos="0" name="os.device" value="Multifunction Device"/>
53
56
  </fingerprint>
57
+
54
58
  <fingerprint pattern="^Brother (.+)$">
55
59
  <description>Brother Printer</description>
56
60
  <example>Brother HL-1660e</example>
@@ -58,7 +62,9 @@
58
62
  <param pos="0" name="os.device" value="Printer"/>
59
63
  <param pos="1" name="os.product"/>
60
64
  </fingerprint>
65
+
61
66
  <!-- Assert the product range as a product fingerprint. -->
67
+
62
68
  <fingerprint pattern="^(iR ?\S+)">
63
69
  <description>Canon iR multifunction device</description>
64
70
  <example>iR 3180C EUR</example>
@@ -69,6 +75,7 @@
69
75
  <param pos="0" name="os.device" value="Multifunction Device"/>
70
76
  <param pos="1" name="os.product"/>
71
77
  </fingerprint>
78
+
72
79
  <fingerprint pattern="^(?:Dell (?:Color Laser |Laser Printer )?|(?:Color Laser |Laser Printer ))(\d+(?:n|cn|dn|cdn))(?: Color Laser| Laser Printer)?$">
73
80
  <description>Dell Laser Printer</description>
74
81
  <example>Dell Laser Printer 1710n</example>
@@ -86,6 +93,7 @@
86
93
  <param pos="0" name="os.device" value="Printer"/>
87
94
  <param pos="1" name="os.product"/>
88
95
  </fingerprint>
96
+
89
97
  <fingerprint pattern="^Dell (\d+(?:n|cn|dn|cdn)) MFP$">
90
98
  <description>Dell Laser multifunction device</description>
91
99
  <example>Dell 2135cn MFP</example>
@@ -95,6 +103,7 @@
95
103
  <param pos="0" name="os.device" value="Multifunction Device"/>
96
104
  <param pos="1" name="os.product"/>
97
105
  </fingerprint>
106
+
98
107
  <fingerprint pattern="^HP (\S+ Digital Sender)$">
99
108
  <description>HP Digital Sender scanner</description>
100
109
  <example>HP 9250C Digital Sender</example>
@@ -103,6 +112,7 @@
103
112
  <param pos="0" name="os.family" value="Digital Sender"/>
104
113
  <param pos="1" name="os.product"/>
105
114
  </fingerprint>
115
+
106
116
  <fingerprint pattern="^(?:IBM )?Infoprint(?: Color)? (\S+)$">
107
117
  <description>IBM Infoprint Printer</description>
108
118
  <param pos="0" name="os.vendor" value="IBM"/>
@@ -110,6 +120,7 @@
110
120
  <param pos="0" name="os.device" value="Printer"/>
111
121
  <param pos="1" name="os.product"/>
112
122
  </fingerprint>
123
+
113
124
  <fingerprint pattern="^KM-(.*)$">
114
125
  <description>Konica Minolta printer</description>
115
126
  <example>KM-5050</example>
@@ -117,6 +128,7 @@
117
128
  <param pos="0" name="os.device" value="Printer"/>
118
129
  <param pos="1" name="os.product"/>
119
130
  </fingerprint>
131
+
120
132
  <fingerprint pattern="^(FS-\S+MFP\S*)$">
121
133
  <description>Kyocera Mita Multifunction device</description>
122
134
  <example>FS-C2126MFP</example>
@@ -127,6 +139,7 @@
127
139
  <param pos="0" name="os.family" value="FS"/>
128
140
  <param pos="1" name="os.product"/>
129
141
  </fingerprint>
142
+
130
143
  <fingerprint pattern="^(FS-(?:C)?\d+(?:D|DN))$">
131
144
  <description>Kyocera Mita Printer</description>
132
145
  <example>FS-C8500DN</example>
@@ -137,6 +150,7 @@
137
150
  <param pos="0" name="os.family" value="FS"/>
138
151
  <param pos="1" name="os.product"/>
139
152
  </fingerprint>
153
+
140
154
  <fingerprint pattern="^(TASKalfa \S+)$">
141
155
  <description>Kyocera Mita TASKalfa multifunction device</description>
142
156
  <example>TASKalfa 300ci</example>
@@ -147,6 +161,7 @@
147
161
  <param pos="0" name="os.family" value="TASKalfa"/>
148
162
  <param pos="1" name="os.product"/>
149
163
  </fingerprint>
164
+
150
165
  <fingerprint pattern="^Lexmark (.*)$">
151
166
  <description>Lexmark JetDirect printer</description>
152
167
  <example>Lexmark C910</example>
@@ -156,6 +171,7 @@
156
171
  <param pos="0" name="os.device" value="Printer"/>
157
172
  <param pos="1" name="os.product"/>
158
173
  </fingerprint>
174
+
159
175
  <fingerprint pattern="(?i)^Oce (fx[^\s:]+):.*$">
160
176
  <description>Oce FX series multifunction device</description>
161
177
  <example os.product="fx3000">Oce fx3000:8C5-B29:Ver.D:U0707161719:B0601271355</example>
@@ -164,6 +180,7 @@
164
180
  <param pos="0" name="os.device" value="Multifunction Device"/>
165
181
  <param pos="1" name="os.product"/>
166
182
  </fingerprint>
183
+
167
184
  <fingerprint pattern="(?i)^Oce (VL\S+):.*$">
168
185
  <description>Oce VarioLink multifunction device</description>
169
186
  <example>Oce VL3200:8C5-D92:Ver.B</example>
@@ -172,16 +189,20 @@
172
189
  <param pos="0" name="os.device" value="Multifunction Device"/>
173
190
  <param pos="1" name="os.product"/>
174
191
  </fingerprint>
192
+
175
193
  <!-- IGI is Imagistics International, which was acquired by Oce.
176
194
  I can't find MX-MBX3 or any variant online. -->
195
+
177
196
  <fingerprint pattern="(?i)^OceIGI MX-\S+">
178
197
  <description>Oce-acquired IGI printer</description>
179
198
  <example>OceIGI MX-NBX3 02-Jul-07 14:47</example>
180
199
  <param pos="0" name="os.vendor" value="Oce"/>
181
200
  <param pos="0" name="os.device" value="Printer"/>
182
201
  </fingerprint>
202
+
183
203
  <!-- im3510/4510 is actually a range of model numbers, but asserting a range
184
204
  of models as a product is preferableto asserting nothing. -->
205
+
185
206
  <fingerprint pattern="(?i)^Imagistics (im\S+) (.+)">
186
207
  <description>Oce IM series multifunction device</description>
187
208
  <example>Imagistics im3510/4510 02-Aug-04 10:56</example>
@@ -192,7 +213,9 @@
192
213
  <param pos="1" name="os.product"/>
193
214
  <param pos="2" name="system.time"/>
194
215
  </fingerprint>
216
+
195
217
  <!-- C610 is a series; there are several models with suffixes n, dn, dtn, cdn -->
218
+
196
219
  <fingerprint pattern="^OKI (C\d+)\S*$">
197
220
  <description>Okidata color printer</description>
198
221
  <example>OKI C610</example>
@@ -202,6 +225,7 @@
202
225
  <param pos="0" name="os.device" value="Printer"/>
203
226
  <param pos="1" name="os.product"/>
204
227
  </fingerprint>
228
+
205
229
  <fingerprint pattern="^OKI (MC\d+)\S*$">
206
230
  <description>Okidata multifunction device</description>
207
231
  <example>OKI MC860</example>
@@ -209,6 +233,7 @@
209
233
  <param pos="0" name="os.device" value="Multifunction Device"/>
210
234
  <param pos="1" name="os.product"/>
211
235
  </fingerprint>
236
+
212
237
  <fingerprint pattern="(?i)^RICOH ((?:Aficio|MP|SP) .*)$">
213
238
  <description>Ricoh Aficio Printer</description>
214
239
  <example>RICOH Aficio 2075</example>
@@ -220,8 +245,10 @@
220
245
  <param pos="1" name="os.product"/>
221
246
  <param pos="0" name="os.device" value="Printer"/>
222
247
  </fingerprint>
248
+
223
249
  <!-- NRG was acquired by Ricoh; classify NRG printers as such.
224
250
  Be consistent with snmp_sysdescr.xml. -->
251
+
225
252
  <fingerprint pattern="(?i)^NRG ([MS]P \S+)$">
226
253
  <description>Ricoh NRG printer</description>
227
254
  <example>NRG MP 171</example>
@@ -236,8 +263,10 @@
236
263
  <param pos="0" name="os.device" value="Printer"/>
237
264
  <param pos="1" name="os.product"/>
238
265
  </fingerprint>
266
+
239
267
  <!-- Gestetner == NRG, and was acquired by Ricoh.
240
268
  Assert the range of products as os.product. -->
269
+
241
270
  <fingerprint pattern="(?i)^Gestetner (MP\S+/DSc\S+)$">
242
271
  <description>Ricoh Gestetner multifunction device</description>
243
272
  <example>Gestetner MPC2500/DSc525</example>
@@ -245,6 +274,7 @@
245
274
  <param pos="0" name="os.device" value="Multifunction Device"/>
246
275
  <param pos="1" name="os.product"/>
247
276
  </fingerprint>
277
+
248
278
  <fingerprint pattern="(?i)^HYDRA$">
249
279
  <description>RSI Hydra printer</description>
250
280
  <example>HYDRA</example>
@@ -252,6 +282,7 @@
252
282
  <param pos="0" name="os.device" value="Printer"/>
253
283
  <param pos="0" name="os.product" value="Hydra"/>
254
284
  </fingerprint>
285
+
255
286
  <fingerprint pattern="(?i)^Savin (\S+)$">
256
287
  <description>Savin Printer</description>
257
288
  <example>SAVIN 4075</example>
@@ -259,6 +290,7 @@
259
290
  <param pos="0" name="os.device" value="Printer"/>
260
291
  <param pos="1" name="os.product"/>
261
292
  </fingerprint>
293
+
262
294
  <fingerprint pattern="(?i)^Samsung ((?:SCX|CLX)-\S+) Series$">
263
295
  <description>Samsung multifunction device</description>
264
296
  <example>Samsung SCX-5835_5935 Series</example>
@@ -267,6 +299,7 @@
267
299
  <param pos="0" name="os.device" value="Multifunction Device"/>
268
300
  <param pos="1" name="os.product"/>
269
301
  </fingerprint>
302
+
270
303
  <fingerprint pattern="(?i)^Samsung ((?:ML|CLP)-\S+) Series$">
271
304
  <description>Samsung printer</description>
272
305
  <example>Samsung CLP-680 Series</example>
@@ -275,6 +308,7 @@
275
308
  <param pos="0" name="os.device" value="Printer"/>
276
309
  <param pos="1" name="os.product"/>
277
310
  </fingerprint>
311
+
278
312
  <fingerprint pattern="(?i)^SHARP (\S+-\S+) .*$">
279
313
  <description>Sharp Printer</description>
280
314
  <example>Sharp MX-NBX3 18-Mar-08 10:22</example>
@@ -283,6 +317,7 @@
283
317
  <param pos="0" name="os.device" value="Printer"/>
284
318
  <param pos="1" name="os.product"/>
285
319
  </fingerprint>
320
+
286
321
  <fingerprint pattern="(?i)^Source Technologies (\S+)$">
287
322
  <description>Source Technologies Printer</description>
288
323
  <example>Source Technologies ST-9620</example>
@@ -290,7 +325,9 @@
290
325
  <param pos="0" name="os.device" value="Printer"/>
291
326
  <param pos="1" name="os.product"/>
292
327
  </fingerprint>
328
+
293
329
  <!-- Consistent with snmp_sysdescr.xml -->
330
+
294
331
  <fingerprint pattern="^TOSHIBA (e-STUDIO\S+)(?:\s+.*)?" certainty="0.9">
295
332
  <description>Toshiba e-STUDIO multifunction device</description>
296
333
  <example>TOSHIBA e-STUDIO350 V468Z 20061013</example>
@@ -302,16 +339,16 @@
302
339
  <param pos="0" name="os.device" value="Multifunction Device"/>
303
340
  <param pos="1" name="os.product"/>
304
341
  </fingerprint>
342
+
305
343
  <!-- TODO:
306
344
  Xerox AccXES devices are documented to return:
307
-
308
345
  "<printer name> <release #>"
309
346
  <FF>
310
-
311
347
  In the above, <printer name> is the official product name of the
312
348
  AccXES printer, and <release #> corresponds to a software release
313
349
  number.
314
350
  -->
351
+
315
352
  <fingerprint pattern="^(?:ID=)?Xerox (Phaser \S+)$" certainty="0.9">
316
353
  <description>Xerox Phaser Printer</description>
317
354
  <example>Xerox Phaser 6180MFP-D</example>
@@ -321,6 +358,7 @@
321
358
  <param pos="0" name="os.device" value="Printer"/>
322
359
  <param pos="1" name="os.product"/>
323
360
  </fingerprint>
361
+
324
362
  <fingerprint pattern="^Xerox (WorkCentre .*)$" certainty="0.9">
325
363
  <description>Xerox Workcentre Printer</description>
326
364
  <example>Xerox WorkCentre 7425</example>
@@ -331,6 +369,7 @@
331
369
  <param pos="1" name="os.product"/>
332
370
  <param pos="0" name="os.device" value="Printer"/>
333
371
  </fingerprint>
372
+
334
373
  <fingerprint pattern="^(XC\S+)$" certainty="0.9">
335
374
  <description>Xerox XC Printer</description>
336
375
  <example>XC560</example>
@@ -339,6 +378,7 @@
339
378
  <param pos="0" name="os.device" value="Printer"/>
340
379
  <param pos="1" name="os.product"/>
341
380
  </fingerprint>
381
+
342
382
  <fingerprint pattern="^(DC\S+)$" certainty="0.9">
343
383
  <description>Xerox DocuColor Printer</description>
344
384
  <example>DC250</example>
@@ -347,6 +387,7 @@
347
387
  <param pos="0" name="os.device" value="Printer"/>
348
388
  <param pos="1" name="os.product"/>
349
389
  </fingerprint>
390
+
350
391
  <fingerprint pattern="^(EX\d+-\d+)$" certainty="0.9">
351
392
  <description>Xerox EX Print Server, powered by EFI Fiery</description>
352
393
  <example>EX4112-4127</example>
@@ -355,4 +396,5 @@
355
396
  <param pos="0" name="os.device" value="Print server"/>
356
397
  <param pos="1" name="os.product"/>
357
398
  </fingerprint>
358
- </fingerprints>
399
+
400
+ </fingerprints>
@@ -1,6 +1,5 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
1
+ <?xml version='1.0' encoding='UTF-8'?>
2
2
  <fingerprints matches="html_title" database_type="service" preference="0.90">
3
-
4
3
  <!-- HTML Title elements found in HTTP response bodies are matched against these patterns to fingerprint HTTP servers. -->
5
4
 
6
5
  <fingerprint pattern="^Index of /">
@@ -62,6 +61,19 @@
62
61
  <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
63
62
  </fingerprint>
64
63
 
64
+ <fingerprint pattern="^Sample Home Page for APACHEDFT Server$">
65
+ <description>IBM iSeries Apache Default Page</description>
66
+ <example>Sample Home Page for APACHEDFT Server</example>
67
+ <param pos="0" name="os.vendor" value="IBM"/>
68
+ <param pos="0" name="os.family" value="OS/400"/>
69
+ <param pos="0" name="os.product" value="OS/400"/>
70
+ <param pos="0" name="os.cpe23" value="cpe:/o:ibm:os_400:-"/>
71
+ <param pos="0" name="service.vendor" value="Apache"/>
72
+ <param pos="0" name="service.product" value="HTTPD"/>
73
+ <param pos="0" name="service.family" value="Apache"/>
74
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
75
+ </fingerprint>
76
+
65
77
  <fingerprint pattern="^Apache Tomcat$">
66
78
  <description>Apache Tomcat with no version</description>
67
79
  <example>Apache Tomcat</example>
@@ -89,6 +101,7 @@
89
101
  </fingerprint>
90
102
 
91
103
  <!-- HiSilicon is OEMd by a number of DVR manufacturers -->
104
+
92
105
  <fingerprint pattern="^DVR Components Download$">
93
106
  <description>Web server found on DVR and webcam servers sourced from HiSilicon</description>
94
107
  <example>DVR Components Download</example>
@@ -115,9 +128,10 @@
115
128
  <param pos="0" name="hw.family" value="FRITZ!Powerline"/>
116
129
  </fingerprint>
117
130
 
118
- <fingerprint pattern="^FRITZ!WLAN Repeater$">
131
+ <fingerprint pattern="^FRITZ!(?:WLAN )?Repeater$">
119
132
  <description>FRITZ!WLAN Repeater</description>
120
133
  <example>FRITZ!WLAN Repeater</example>
134
+ <example>FRITZ!Repeater</example>
121
135
  <param pos="0" name="hw.vendor" value="AVM"/>
122
136
  <param pos="0" name="hw.device" value="WLAN Repeater"/>
123
137
  <param pos="0" name="hw.family" value="FRITZ!WLAN Repeater"/>
@@ -145,7 +159,7 @@
145
159
  <param pos="0" name="os.vendor" value="Microsoft"/>
146
160
  <param pos="0" name="os.family" value="Windows"/>
147
161
  <param pos="0" name="os.product" value="Windows CE"/>
148
- <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows-ce:-"/>
162
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_ce:-"/>
149
163
  </fingerprint>
150
164
 
151
165
  <fingerprint pattern="^IIS7$">
@@ -155,7 +169,7 @@
155
169
  <param pos="0" name="service.product" value="IIS"/>
156
170
  <param pos="0" name="service.family" value="IIS"/>
157
171
  <param pos="0" name="service.version" value="7"/>
158
- <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
172
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:7"/>
159
173
  <param pos="0" name="os.vendor" value="Microsoft"/>
160
174
  <param pos="0" name="os.family" value="Windows"/>
161
175
  <param pos="0" name="os.product" value="Windows"/>
@@ -169,7 +183,7 @@
169
183
  <param pos="0" name="service.product" value="IIS"/>
170
184
  <param pos="0" name="service.family" value="IIS"/>
171
185
  <param pos="0" name="service.version" value="8"/>
172
- <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
186
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:8"/>
173
187
  <param pos="0" name="os.vendor" value="Microsoft"/>
174
188
  <param pos="0" name="os.family" value="Windows"/>
175
189
  <param pos="0" name="os.product" value="Windows"/>
@@ -199,6 +213,7 @@
199
213
  <param pos="0" name="service.vendor" value="Microsoft"/>
200
214
  <param pos="0" name="service.product" value="IIS"/>
201
215
  <param pos="0" name="service.family" value="IIS"/>
216
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:-"/>
202
217
  <param pos="0" name="os.vendor" value="Microsoft"/>
203
218
  <param pos="0" name="os.family" value="Windows"/>
204
219
  <param pos="0" name="os.product" value="Windows"/>
@@ -211,7 +226,7 @@
211
226
  <example>NETIASPOT Management Console</example>
212
227
  <param pos="0" name="hw.vendor" value="Netia"/>
213
228
  <param pos="0" name="hw.product" value="Spot"/>
214
- <param pos="0" name="hw.product" value="WAP"/>
229
+ <param pos="0" name="hw.device" value="WAP"/>
215
230
  </fingerprint>
216
231
 
217
232
  <fingerprint pattern="^hue personal wireless lighting$">
@@ -224,10 +239,10 @@
224
239
 
225
240
  <fingerprint pattern="LANDesk\(R\) Management Agent$">
226
241
  <description>LANDesk Management Agent</description>
242
+ <example>LANDesk(R) Management Agent</example>
227
243
  <param pos="0" name="service.vendor" value="LANDesk"/>
228
244
  <param pos="0" name="service.product" value="Management Agent"/>
229
245
  <param pos="0" name="service.family" value="Management Agent"/>
230
- <param pos="0" name="service.cpe23" value="cpe:/a:landesk:management_agent:-"/>
231
246
  </fingerprint>
232
247
 
233
248
  <fingerprint pattern="^(?:Parallels )?Plesk (?:(?:Onyx|Panel) )?([\d\.]+)$">
@@ -236,20 +251,20 @@
236
251
  <example service.version="17.5.3">Plesk Onyx 17.5.3</example>
237
252
  <example service.version="12.0.1">Parallels Plesk 12.0.1</example>
238
253
  <example service.version="11.5.30">Parallels Plesk Panel 11.5.30</example>
239
- <param pos="0" name="service.vendor" value="Plesk"/>
254
+ <param pos="0" name="service.vendor" value="Parallels"/>
240
255
  <param pos="0" name="service.product" value="Plesk"/>
241
256
  <param pos="1" name="service.version"/>
242
- <param pos="0" name="service.cpe23" value="cpe:/a:plesk:plesk:{service.version}"/>
257
+ <param pos="0" name="service.cpe23" value="cpe:/a:parallels:parallels_plesk_panel:{service.version}"/>
243
258
  </fingerprint>
244
259
 
245
260
  <fingerprint pattern="^(?:Parallels )?Plesk (?:(?:Onyx|Panel) )?([\d\.]+) for Microsoft Windows$">
246
261
  <description>Plesk web hosting platform with a version on Windows</description>
247
262
  <example service.version="12.5.30">Plesk 12.5.30 for Microsoft Windows</example>
248
263
  <example service.version="11.5.30">Parallels Plesk Panel 11.5.30 for Microsoft Windows</example>
249
- <param pos="0" name="service.vendor" value="Plesk"/>
264
+ <param pos="0" name="service.vendor" value="Parallels"/>
250
265
  <param pos="0" name="service.product" value="Plesk"/>
251
266
  <param pos="1" name="service.version"/>
252
- <param pos="0" name="service.cpe23" value="cpe:/a:plesk:plesk:{service.version}"/>
267
+ <param pos="0" name="service.cpe23" value="cpe:/a:parallels:parallels_plesk_panel:{service.version}"/>
253
268
  <param pos="0" name="os.vendor" value="Microsoft"/>
254
269
  <param pos="0" name="os.family" value="Windows"/>
255
270
  <param pos="0" name="os.product" value="Windows"/>
@@ -261,9 +276,9 @@
261
276
  <example>Default Parallels Plesk Panel Page</example>
262
277
  <example>Default Parallels Plesk Page</example>
263
278
  <example>Default PLESK Page</example>
264
- <param pos="0" name="service.vendor" value="Plesk"/>
279
+ <param pos="0" name="service.vendor" value="Parallels"/>
265
280
  <param pos="0" name="service.product" value="Plesk"/>
266
- <param pos="0" name="service.cpe23" value="cpe:/a:plesk:plesk:-"/>
281
+ <param pos="0" name="service.cpe23" value="cpe:/a:parallels:parallels_plesk_panel:-"/>
267
282
  </fingerprint>
268
283
 
269
284
  <fingerprint pattern="^Web Viewer for Samsung DVR$">
@@ -322,21 +337,44 @@
322
337
  </fingerprint>
323
338
 
324
339
  <!-- Various products by Ubiquiti networks -->
340
+
325
341
  <fingerprint pattern="^Ubiquiti Networks$">
326
342
  <description>Generic products by Ubiquiti Networks</description>
327
343
  <example>Ubiquiti Networks</example>
328
344
  <param pos="0" name="hw.vendor" value="Ubiquiti"/>
329
345
  </fingerprint>
330
346
 
347
+ <fingerprint pattern="^UniFi Security Gateway$">
348
+ <description>Ubiquiti Security Gateway</description>
349
+ <example>UniFi Security Gateway</example>
350
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
351
+ <param pos="0" name="hw.device" value="Router"/>
352
+ <param pos="0" name="hw.product" value="UniFi Security Gateway"/>
353
+ </fingerprint>
354
+
355
+ <fingerprint pattern="^Ubiquiti EdgeSwitch$">
356
+ <description>Ubiquiti EdgeSwitch</description>
357
+ <example>Ubiquiti EdgeSwitch</example>
358
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
359
+ <param pos="0" name="os.family" value="Linux"/>
360
+ <param pos="0" name="os.product" value="EdgeOS"/>
361
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
362
+ <param pos="0" name="hw.product" value="EdgeSwitch"/>
363
+ </fingerprint>
364
+
331
365
  <fingerprint pattern="^EdgeOS$">
332
366
  <description>Ubiquiti EdgeRouter/EdgeSwitch/etc</description>
333
367
  <example>EdgeOS</example>
368
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
369
+ <param pos="0" name="os.family" value="Linux"/>
370
+ <param pos="0" name="os.product" value="EdgeOS"/>
334
371
  <param pos="0" name="hw.vendor" value="Ubiquiti"/>
335
372
  </fingerprint>
336
373
 
337
- <fingerprint pattern="^CloudKey$">
374
+ <fingerprint pattern="^Cloud\s*Key$">
338
375
  <description>Ubiquiti UniFi Cloud Key</description>
339
376
  <example>CloudKey</example>
377
+ <example>Cloud Key</example>
340
378
  <param pos="0" name="hw.vendor" value="Ubiquiti"/>
341
379
  <param pos="0" name="hw.product" value="UniFi Cloud Key"/>
342
380
  </fingerprint>
@@ -350,19 +388,20 @@
350
388
  </fingerprint>
351
389
 
352
390
  <fingerprint pattern="^UniFi Video$">
353
- <description>Various UniFi Video products by Ubiquiti Networks</description>
391
+ <description>Various UniFi Video web service</description>
354
392
  <example>UniFi Video</example>
355
- <param pos="0" name="hw.vendor" value="Ubiquiti"/>
356
- <param pos="0" name="hw.family" value="UniFi"/>
357
- <param pos="0" name="hw.device" value="Web Cam"/>
393
+ <param pos="0" name="service.vendor" value="Ubiquiti"/>
394
+ <param pos="0" name="service.product" value="UniFi Video"/>
395
+ <param pos="0" name="service.cpe23" value="cpe:/a:ui:unifi_video:-"/>
358
396
  </fingerprint>
359
397
 
360
- <fingerprint pattern="^UniFi NVR: Software Portal$">
398
+ <fingerprint pattern="^(?:UniFi NVR: Software Portal|airVision: \[NVR\] - Software Portal)$">
361
399
  <description>UniFi NVR for recording from UniFi video cameras</description>
362
400
  <example>UniFi NVR: Software Portal</example>
401
+ <example>airVision: [NVR] - Software Portal</example>
363
402
  <param pos="0" name="hw.vendor" value="Ubiquiti"/>
364
403
  <param pos="0" name="hw.family" value="UniFi"/>
365
- <param pos="0" name="hw.family" value="UniFi NVR"/>
404
+ <param pos="0" name="hw.product" value="UniFi NVR"/>
366
405
  <param pos="0" name="hw.device" value="DVR"/>
367
406
  </fingerprint>
368
407
 
@@ -429,14 +468,27 @@
429
468
  <param pos="0" name="hw.product" value="Bridge"/>
430
469
  <param pos="0" name="hw.vendor" value="Eagle Eye Networks"/>
431
470
  </fingerprint>
471
+
432
472
  <fingerprint pattern="^Web Local Display Unauthorized$">
433
473
  <description>Eagle Eye Networks to manage IoT cameras unauthorized webpage</description>
434
474
  <example>Web Local Display Unauthorized</example>
435
- <param pos="0" name="hw.product" value=" Bridge"/>
475
+ <param pos="0" name="hw.product" value="Bridge"/>
436
476
  <param pos="0" name="hw.vendor" value="Eagle Eye Networks"/>
437
477
  </fingerprint>
438
478
 
439
479
  <!-- Netgear Products -->
480
+
481
+ <fingerprint pattern="^NETGEAR ReadyNAS$">
482
+ <description>NETGEAR ReadyNAS</description>
483
+ <example>NETGEAR ReadyNAS</example>
484
+ <param pos="0" name="os.vendor" value="Netgear"/>
485
+ <param pos="0" name="os.product" value="Linux"/>
486
+ <param pos="0" name="hw.vendor" value="Netgear"/>
487
+ <param pos="0" name="hw.device" value="NAS"/>
488
+ <param pos="0" name="hw.family" value="ReadyNAS"/>
489
+ <param pos="0" name="hw.product" value="ReadyNAS"/>
490
+ </fingerprint>
491
+
440
492
  <fingerprint pattern="^(?:NETGEAR|NetGear) ([a-zA-Z0-9\-\+]+)$">
441
493
  <description>Netgear Switches</description>
442
494
  <example hw.product="GS108T">NETGEAR GS108T</example>
@@ -545,21 +597,18 @@
545
597
  <param pos="0" name="hw.product" value="Sigma Control 2"/>
546
598
  </fingerprint>
547
599
 
548
-
549
-
550
-
551
600
  <fingerprint pattern="^WebPower$">
552
601
  <description>Eltek Power Controller</description>
553
602
  <example>WebPower</example>
554
603
  <param pos="0" name="hw.vendor" value="Eltek"/>
555
- <param pos="0" name="hw.device" value="Power Device"/>
604
+ <param pos="0" name="hw.device" value="Power device"/>
556
605
  </fingerprint>
557
606
 
558
607
  <fingerprint pattern="(Expert Power Control NET \d+x\d+) - (.*)$">
559
608
  <description>Gude Expert Power Control</description>
560
609
  <example host.name="Rack42" hw.product="Expert Power Control NET 2x6">Expert Power Control NET 2x6 - Rack42</example>
561
610
  <param pos="0" name="hw.vendor" value="Gude"/>
562
- <param pos="0" name="hw.device" value="Power Device"/>
611
+ <param pos="0" name="hw.device" value="Power device"/>
563
612
  <param pos="1" name="hw.product"/>
564
613
  <param pos="2" name="host.name"/>
565
614
  </fingerprint>
@@ -568,7 +617,7 @@
568
617
  <description>Sentry Switched CDU</description>
569
618
  <example>Sentry Switched CDU</example>
570
619
  <param pos="0" name="hw.vendor" value="ServerTech"/>
571
- <param pos="0" name="hw.device" value="Power Device"/>
620
+ <param pos="0" name="hw.device" value="Power device"/>
572
621
  <param pos="0" name="hw.product" value="Sentry Switched CDU"/>
573
622
  </fingerprint>
574
623
 
@@ -576,7 +625,7 @@
576
625
  <description>Emerson Network Power Rack PDU Card</description>
577
626
  <example>Emerson Network Power Rack PDU Card</example>
578
627
  <param pos="0" name="hw.vendor" value="Emerson"/>
579
- <param pos="0" name="hw.device" value="Power Device"/>
628
+ <param pos="0" name="hw.device" value="Power device"/>
580
629
  <param pos="0" name="hw.product" value="Rack PDU Card"/>
581
630
  </fingerprint>
582
631
 
@@ -587,7 +636,7 @@
587
636
  <example hw.vendor="Vertiv">Vertiv IntelliSlot Web Card</example>
588
637
  <example hw.vendor="Liebert">Liebert IntelliSlot Web Card</example>
589
638
  <param pos="1" name="hw.vendor"/>
590
- <param pos="0" name="hw.device" value="Power Device"/>
639
+ <param pos="0" name="hw.device" value="Power device"/>
591
640
  <param pos="0" name="hw.product" value="IntelliSlot Web Card"/>
592
641
  </fingerprint>
593
642
 
@@ -595,7 +644,7 @@
595
644
  <description>ConnectUPS Web/SNMP Card</description>
596
645
  <example>ConnectUPS Web/SNMP Card</example>
597
646
  <param pos="0" name="hw.vendor" value="APC"/>
598
- <param pos="0" name="hw.device" value="Power Device"/>
647
+ <param pos="0" name="hw.device" value="Power device"/>
599
648
  <param pos="0" name="hw.product" value="ConnectUPS Web Card"/>
600
649
  </fingerprint>
601
650
 
@@ -630,9 +679,10 @@
630
679
  <param pos="1" name="os.product"/>
631
680
  </fingerprint>
632
681
 
633
- <fingerprint pattern="^Cisco UCS KVM Direct$">
634
- <description>Cisco UCS KVM Direct</description>
682
+ <fingerprint pattern="^Cisco (?:UCS KVM Direct|KVM)$">
683
+ <description>Cisco KVM</description>
635
684
  <example>Cisco UCS KVM Direct</example>
685
+ <example>Cisco KVM</example>
636
686
  <param pos="0" name="hw.vendor" value="Cisco"/>
637
687
  <param pos="0" name="hw.device" value="Lights Out Management"/>
638
688
  <param pos="0" name="hw.product" value="UCS Manager"/>
@@ -640,6 +690,7 @@
640
690
  <param pos="0" name="os.family" value="Linux"/>
641
691
  <param pos="0" name="os.product" value="NX-OS"/>
642
692
  <param pos="0" name="os.certainty" value="0.8"/>
693
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:nx-os:-"/>
643
694
  </fingerprint>
644
695
 
645
696
  <fingerprint pattern="^Cisco UCS Manager$">
@@ -652,6 +703,40 @@
652
703
  <param pos="0" name="os.family" value="Linux"/>
653
704
  <param pos="0" name="os.product" value="NX-OS"/>
654
705
  <param pos="0" name="os.certainty" value="0.8"/>
706
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:nx-os:-"/>
707
+ </fingerprint>
708
+
709
+ <fingerprint pattern="^Cisco (?:IMC Login|Integrated Management Controller)">
710
+ <description>Cisco Integrated Management Controller</description>
711
+ <example>Cisco Integrated Management Controller</example>
712
+ <example>Cisco Integrated Management Controller Login</example>
713
+ <example>Cisco Integrated Management Controller WebUI</example>
714
+ <example>Cisco IMC Login Page</example>
715
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
716
+ <param pos="0" name="hw.vendor" value="Cisco"/>
717
+ <param pos="0" name="hw.product" value="IMC"/>
718
+ <param pos="0" name="os.vendor" value="Cisco"/>
719
+ <param pos="0" name="os.family" value="Linux"/>
720
+ <param pos="0" name="os.product" value="IMC"/>
721
+ </fingerprint>
722
+
723
+ <fingerprint pattern="^Cisco Meeting Management$">
724
+ <description>Cisco Meeting Management Virtual Appliance</description>
725
+ <example>Cisco Meeting Management</example>
726
+ <param pos="0" name="hw.vendor" value="Cisco"/>
727
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
728
+ <param pos="0" name="hw.product" value="Meeting Management"/>
729
+ <param pos="0" name="os.vendor" value="Cisco"/>
730
+ <param pos="0" name="os.family" value="Linux"/>
731
+ <param pos="0" name="os.product" value="Meeting Management"/>
732
+ </fingerprint>
733
+
734
+ <fingerprint pattern="^Cisco SON$">
735
+ <description>Cisco Crosswork SON</description>
736
+ <example>Cisco SON</example>
737
+ <param pos="0" name="hw.vendor" value="Cisco"/>
738
+ <param pos="0" name="hw.device" value="Network Management Device"/>
739
+ <param pos="0" name="hw.product" value="Crosswork SON Appliance"/>
655
740
  </fingerprint>
656
741
 
657
742
  <fingerprint pattern="^HPE Virtual Connect Manager$">
@@ -690,6 +775,7 @@
690
775
  <param pos="0" name="hw.device" value="Lights Out Management"/>
691
776
  <param pos="0" name="hw.vendor" value="HP"/>
692
777
  <param pos="0" name="hw.product" value="iLO"/>
778
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
693
779
  <param pos="0" name="os.vendor" value="HP"/>
694
780
  <param pos="0" name="os.device" value="Lights Out Management"/>
695
781
  <param pos="0" name="os.family" value="iLO"/>
@@ -702,6 +788,7 @@
702
788
  <param pos="0" name="hw.device" value="Lights Out Management"/>
703
789
  <param pos="0" name="hw.vendor" value="HP"/>
704
790
  <param pos="0" name="hw.product" value="iLO"/>
791
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
705
792
  <param pos="0" name="os.vendor" value="HP"/>
706
793
  <param pos="0" name="os.device" value="Lights Out Management"/>
707
794
  <param pos="0" name="os.family" value="iLO"/>
@@ -867,7 +954,6 @@
867
954
  <param pos="0" name="os.product" value="Polycom"/>
868
955
  </fingerprint>
869
956
 
870
-
871
957
  <fingerprint pattern="^Digium Phone Settings$">
872
958
  <description>Digium Phone Settings</description>
873
959
  <example>Digium Phone Settings</example>
@@ -895,7 +981,7 @@
895
981
  <description>Cisco IP Camera</description>
896
982
  <example>Cisco IP Camera</example>
897
983
  <param pos="0" name="hw.vendor" value="Cisco"/>
898
- <param pos="0" name="hw.device" value="Web Cam"/>
984
+ <param pos="0" name="hw.device" value="Web cam"/>
899
985
  </fingerprint>
900
986
 
901
987
  <fingerprint pattern="^Cisco TelePresence MCU">
@@ -923,6 +1009,7 @@
923
1009
  <param pos="0" name="hw.product" value="Catalyst"/>
924
1010
  <param pos="0" name="os.vendor" value="Cisco"/>
925
1011
  <param pos="0" name="os.product" value="CatOS"/>
1012
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:catos:-"/>
926
1013
  </fingerprint>
927
1014
 
928
1015
  <fingerprint pattern="^Cisco MDS 9000(?: and Nexus 5000)? Management Modules (\d+\.\d+\S+)$">
@@ -933,10 +1020,103 @@
933
1020
  <param pos="0" name="hw.vendor" value="Cisco"/>
934
1021
  <param pos="0" name="hw.device" value="Switch"/>
935
1022
  <param pos="0" name="hw.product" value="MDS 9000"/>
1023
+ <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:mds_9000:-"/>
936
1024
  <param pos="0" name="os.vendor" value="Cisco"/>
937
1025
  <param pos="0" name="os.device" value="Switch"/>
938
1026
  <param pos="0" name="os.product" value="MDS 9000"/>
939
1027
  <param pos="1" name="os.version"/>
1028
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:mds_9000:{os.version}"/>
1029
+ </fingerprint>
1030
+
1031
+ <fingerprint pattern="^Stealthwatch Management Console$">
1032
+ <description>Stealthwatch Management Console</description>
1033
+ <example>Stealthwatch Management Console</example>
1034
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1035
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1036
+ <param pos="0" name="hw.product" value="Stealthwatch"/>
1037
+ <param pos="0" name="os.vendor" value="Cisco"/>
1038
+ <param pos="0" name="os.device" value="Security Appliance"/>
1039
+ <param pos="0" name="os.product" value="Stealthwatch"/>
1040
+ </fingerprint>
1041
+
1042
+ <fingerprint pattern="^Cisco vManage$">
1043
+ <description>Cisco vManage SD-WAN</description>
1044
+ <example>Cisco vManage</example>
1045
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1046
+ <param pos="0" name="hw.device" value="SD-WAN Appliance"/>
1047
+ <param pos="0" name="hw.product" value="vManage"/>
1048
+ <param pos="0" name="os.vendor" value="Cisco"/>
1049
+ <param pos="0" name="os.device" value="SD-WAN Appliance"/>
1050
+ <param pos="0" name="os.product" value="vManage"/>
1051
+ </fingerprint>
1052
+
1053
+ <fingerprint pattern="^Login - Cisco DNA Center$">
1054
+ <description>Cisco DNA Center Appliance</description>
1055
+ <example>Login - Cisco DNA Center</example>
1056
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1057
+ <param pos="0" name="hw.device" value="Network Management Device"/>
1058
+ <param pos="0" name="hw.product" value="DNA Center"/>
1059
+ <param pos="0" name="os.vendor" value="Cisco"/>
1060
+ <param pos="0" name="os.device" value="Network Management Device"/>
1061
+ <param pos="0" name="os.product" value="DNA Center"/>
1062
+ </fingerprint>
1063
+
1064
+ <fingerprint pattern="^Cisco (?:Enterprise )?NFVIS$">
1065
+ <description>Cisco NFVIS</description>
1066
+ <example>Cisco NFVIS</example>
1067
+ <example>Cisco Enterprise NFVIS</example>
1068
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1069
+ <param pos="0" name="hw.device" value="Network Management Device"/>
1070
+ <param pos="0" name="hw.product" value="NFVIS"/>
1071
+ <param pos="0" name="os.vendor" value="Cisco"/>
1072
+ <param pos="0" name="os.device" value="Network Management Device"/>
1073
+ <param pos="0" name="os.product" value="NFVIS"/>
1074
+ </fingerprint>
1075
+
1076
+ <fingerprint pattern="^Cisco Systems Login$">
1077
+ <description>Cisco WLC</description>
1078
+ <example>Cisco Systems Login</example>
1079
+ <param pos="0" name="os.vendor" value="Cisco"/>
1080
+ <param pos="0" name="os.device" value="Wireless Controller"/>
1081
+ <param pos="0" name="os.product" value="Wireless LAN Controller"/>
1082
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller:-"/>
1083
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1084
+ <param pos="0" name="hw.device" value="Wireless Controller"/>
1085
+ <param pos="0" name="hw.product" value="Wireless LAN Controller"/>
1086
+ <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:wireless_lan_controller:-"/>
1087
+ </fingerprint>
1088
+
1089
+ <fingerprint pattern="^Duo Access Gateway$">
1090
+ <description>Duo Access Gateway</description>
1091
+ <example>Duo Access Gateway</example>
1092
+ <param pos="0" name="hw.vendor" value="Duo"/>
1093
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1094
+ <param pos="0" name="hw.product" value="Access Gateway"/>
1095
+ <param pos="0" name="os.vendor" value="Duo"/>
1096
+ <param pos="0" name="os.device" value="Security Appliance"/>
1097
+ <param pos="0" name="os.product" value="Access Gateway"/>
1098
+ </fingerprint>
1099
+
1100
+ <fingerprint pattern="^Login - Duo Network Gateway$">
1101
+ <description>Duo Network Gateway</description>
1102
+ <example>Login - Duo Network Gateway</example>
1103
+ <param pos="0" name="hw.vendor" value="Duo"/>
1104
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1105
+ <param pos="0" name="hw.product" value="Network Gateway"/>
1106
+ <param pos="0" name="os.vendor" value="Duo"/>
1107
+ <param pos="0" name="os.device" value="Security Appliance"/>
1108
+ <param pos="0" name="os.product" value="Network Gateway"/>
1109
+ </fingerprint>
1110
+
1111
+ <fingerprint pattern="^VBrick Rev">
1112
+ <description>VBrick Rev</description>
1113
+ <example>VBrick Rev</example>
1114
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1115
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
1116
+ <param pos="0" name="hw.product" value="VBrick Rev"/>
1117
+ <param pos="0" name="os.vendor" value="Cisco"/>
1118
+ <param pos="0" name="os.device" value="Video Conferencing"/>
1119
+ <param pos="0" name="os.product" value="VBrick Rev"/>
940
1120
  </fingerprint>
941
1121
 
942
1122
  <fingerprint pattern="^(LinxVII-\S+) Remote Access$">
@@ -958,19 +1138,19 @@
958
1138
  <description>Axis Communications Web Cam</description>
959
1139
  <example>AXIS</example>
960
1140
  <param pos="0" name="hw.vendor" value="AXIS"/>
961
- <param pos="0" name="hw.device" value="Web Cam"/>
1141
+ <param pos="0" name="hw.device" value="Web cam"/>
962
1142
  <param pos="0" name="os.vendor" value="AXIS"/>
963
- <param pos="0" name="os.device" value="Web Cam"/>
964
1143
  <param pos="0" name="os.family" value="Linux"/>
1144
+ <param pos="0" name="os.device" value="Web cam"/>
965
1145
  </fingerprint>
966
1146
 
967
1147
  <fingerprint pattern="^Hanwha Techwin$">
968
1148
  <description>Hanwha Techwin IP Camera</description>
969
1149
  <example>Hanwha Techwin</example>
970
1150
  <param pos="0" name="hw.vendor" value="Hanwha Techwin"/>
971
- <param pos="0" name="hw.device" value="Web Cam"/>
1151
+ <param pos="0" name="hw.device" value="Web cam"/>
972
1152
  <param pos="0" name="os.vendor" value="Hanwha Techwin"/>
973
- <param pos="0" name="os.device" value="Web Cam"/>
1153
+ <param pos="0" name="os.device" value="Web cam"/>
974
1154
  <param pos="0" name="os.family" value="Linux"/>
975
1155
  </fingerprint>
976
1156
 
@@ -979,19 +1159,31 @@
979
1159
  <example hw.product="WV-NS202A">WV-NS202A Network Camera</example>
980
1160
  <example hw.product="WV-NS954">WV-NS954 Network Camera</example>
981
1161
  <param pos="0" name="hw.vendor" value="Panasonic"/>
982
- <param pos="0" name="hw.device" value="Web Cam"/>
1162
+ <param pos="0" name="hw.device" value="Web cam"/>
983
1163
  <param pos="1" name="hw.product"/>
984
1164
  <param pos="0" name="os.vendor" value="Panasonic"/>
985
- <param pos="0" name="os.device" value="Web Cam"/>
1165
+ <param pos="0" name="os.device" value="Web cam"/>
986
1166
  <param pos="0" name="os.family" value="Linux"/>
987
1167
  </fingerprint>
988
1168
 
989
- <fingerprint pattern="^KACE Systems Management Appliance">
1169
+ <fingerprint pattern="^KACE (?:Systems Management|Systems Deployment|Remote Site) Appliance">
990
1170
  <description>KACE Systems Management Appliances</description>
991
1171
  <example>KACE Systems Management Appliance Service Center</example>
992
1172
  <example>KACE Systems Management Appliance Administrator Console</example>
1173
+ <example>KACE Systems Deployment Appliance</example>
1174
+ <example>KACE Remote Site Appliance</example>
1175
+ <param pos="0" name="hw.vendor" value="KACE"/>
1176
+ <param pos="0" name="hw.device" value="Support Appliance"/>
1177
+ <param pos="0" name="os.vendor" value="KACE"/>
1178
+ <param pos="0" name="os.family" value="FreeBSD"/>
1179
+ </fingerprint>
1180
+
1181
+ <fingerprint pattern="^K1000 Service Center$">
1182
+ <description>Dell K1000 Systems Management Appliances (KACE)</description>
1183
+ <example>K1000 Service Center</example>
993
1184
  <param pos="0" name="hw.vendor" value="KACE"/>
994
1185
  <param pos="0" name="hw.device" value="Support Appliance"/>
1186
+ <param pos="0" name="hw.product" value="K1000"/>
995
1187
  <param pos="0" name="os.vendor" value="KACE"/>
996
1188
  <param pos="0" name="os.family" value="FreeBSD"/>
997
1189
  </fingerprint>
@@ -1016,6 +1208,7 @@
1016
1208
  </fingerprint>
1017
1209
 
1018
1210
  <!-- An OEM of the Quantum Corporation SuperLoader 3 -->
1211
+
1019
1212
  <fingerprint pattern="^On Board Remote Management$">
1020
1213
  <description>PowerVault 124T Tape Library</description>
1021
1214
  <example>On Board Remote Management</example>
@@ -1025,7 +1218,7 @@
1025
1218
  <param pos="0" name="os.vendor" value="Dell"/>
1026
1219
  </fingerprint>
1027
1220
 
1028
- <fingerprint pattern="^(HD-RX-\S+)$">
1221
+ <fingerprint pattern="^(HD-RX-\S+)$">
1029
1222
  <description>Crestron Multiformat Receivers</description>
1030
1223
  <example hw.product="HD-RX-201-C-E">HD-RX-201-C-E</example>
1031
1224
  <param pos="0" name="hw.vendor" value="Crestron"/>
@@ -1034,7 +1227,7 @@
1034
1227
  <param pos="0" name="os.vendor" value="Crestron"/>
1035
1228
  </fingerprint>
1036
1229
 
1037
- <fingerprint pattern="^Lencore Sound Manager 2$">
1230
+ <fingerprint pattern="^Lencore Sound Manager 2$">
1038
1231
  <description>Lencore Sound Manager 2</description>
1039
1232
  <example>Lencore Sound Manager 2</example>
1040
1233
  <param pos="0" name="hw.vendor" value="Lencore"/>
@@ -1044,9 +1237,9 @@
1044
1237
  <param pos="0" name="os.product" value="SmartServer"/>
1045
1238
  </fingerprint>
1046
1239
 
1047
- <!-- Various ICS/OT -->
1240
+ <!-- Various ICS/OT -->
1048
1241
 
1049
- <fingerprint pattern="^CTI (25\S+) Main Menu$">
1242
+ <fingerprint pattern="^CTI (25\S+) Main Menu$">
1050
1243
  <description>Siemens 257x Ethernet Adapter (CTI Branded)</description>
1051
1244
  <example hw.product="2572-A">CTI 2572-A Main Menu</example>
1052
1245
  <param pos="0" name="hw.vendor" value="Siemens"/>
@@ -1171,7 +1364,6 @@
1171
1364
  <param pos="0" name="os.vendor" value="IBHsofte"/>
1172
1365
  </fingerprint>
1173
1366
 
1174
-
1175
1367
  <!-- Software and Appliances -->
1176
1368
 
1177
1369
  <fingerprint pattern="^S7/S5 OPC Server$">
@@ -1179,7 +1371,6 @@
1179
1371
  <example>S7/S5 OPC Server</example>
1180
1372
  <param pos="0" name="service.vendor" value="Softing"/>
1181
1373
  <param pos="0" name="service.product" value="S7/S5 OPC Server"/>
1182
- <param pos="0" name="service.cpe23" value="cpe:/a:softing:s7-s5-opc-server:-"/>
1183
1374
  </fingerprint>
1184
1375
 
1185
1376
  <fingerprint pattern="^Nessus$">
@@ -1213,7 +1404,6 @@
1213
1404
  <example>RabbitMQ Management</example>
1214
1405
  <param pos="0" name="service.vendor" value="RabbitMQ"/>
1215
1406
  <param pos="0" name="service.product" value="Management Server"/>
1216
- <param pos="0" name="service.cpe23" value="cpe:/a:rabbitmq:rabbitmq-manager:-"/>
1217
1407
  </fingerprint>
1218
1408
 
1219
1409
  <fingerprint pattern="^Statistics Report for HAProxy$">
@@ -1221,14 +1411,13 @@
1221
1411
  <example>Statistics Report for HAProxy</example>
1222
1412
  <param pos="0" name="service.vendor" value="HAProxy"/>
1223
1413
  <param pos="0" name="service.product" value="HAProxy Stats Server"/>
1224
- <param pos="0" name="service.cpe23" value="cpe:/a:haproxy:stats-server:-"/>
1225
1414
  </fingerprint>
1226
1415
 
1227
1416
  <fingerprint pattern="^Open Manage&amp;trade;$">
1228
- <description>Dell Open Manage Admin</description>
1417
+ <description>Dell OpenManage Admin</description>
1229
1418
  <example>Open Manage&amp;trade;</example>
1230
1419
  <param pos="0" name="service.vendor" value="Dell"/>
1231
- <param pos="0" name="service.product" value="Open Manage"/>
1420
+ <param pos="0" name="service.product" value="OpenManage"/>
1232
1421
  <param pos="0" name="service.cpe23" value="cpe:/a:dell:openmanage:-"/>
1233
1422
  </fingerprint>
1234
1423
 
@@ -1237,7 +1426,7 @@
1237
1426
  <example host.name="teller01">TightVNC desktop [teller01]</example>
1238
1427
  <param pos="0" name="service.vendor" value="TightVNC"/>
1239
1428
  <param pos="0" name="service.product" value="Desktop"/>
1240
- <param pos="0" name="service.cpe23" value="cpe:/a:tightvnc:desktop:-"/>
1429
+ <param pos="0" name="service.cpe23" value="cpe:/a:tightvnc:tightvnc:-"/>
1241
1430
  <param pos="1" name="host.name"/>
1242
1431
  </fingerprint>
1243
1432
 
@@ -1263,7 +1452,6 @@
1263
1452
  <example>Shell In A Box</example>
1264
1453
  <param pos="0" name="service.vendor" value="ShellInABox"/>
1265
1454
  <param pos="0" name="service.product" value="ShellInABox"/>
1266
- <param pos="0" name="service.cpe23" value="cpe:/a:shellinabox:shellinabox:-"/>
1267
1455
  </fingerprint>
1268
1456
 
1269
1457
  <fingerprint pattern="^AgilentLicenseManagerService Service$">
@@ -1271,33 +1459,54 @@
1271
1459
  <example>AgilentLicenseManagerService Service</example>
1272
1460
  <param pos="0" name="service.vendor" value="Agilent"/>
1273
1461
  <param pos="0" name="service.product" value="License Manager"/>
1274
- <param pos="0" name="service.cpe23" value="cpe:/a:agilent:license-manager-"/>
1275
1462
  </fingerprint>
1276
1463
 
1277
- <fingerprint pattern="^Red Hat OpenStack Platform Director$">
1464
+ <fingerprint pattern="^Red Hat(?:.reg;)? OpenStack (?:Platform )?Director$">
1278
1465
  <description>Red Hat OpenStack Platform Director</description>
1279
1466
  <example>Red Hat OpenStack Platform Director</example>
1467
+ <example>Red Hat&amp;reg; OpenStack Director</example>
1280
1468
  <param pos="0" name="service.vendor" value="Red Hat"/>
1281
1469
  <param pos="0" name="service.product" value="Open Stack Platform Director"/>
1282
- <param pos="0" name="service.cpe23" value="cpe:/a:openstack:platform-director:-"/>
1470
+ </fingerprint>
1471
+
1472
+ <fingerprint pattern="^Login - OpenStack Dashboard$">
1473
+ <description>OpenStack Dashboard</description>
1474
+ <example>Login - OpenStack Dashboard</example>
1475
+ <param pos="0" name="service.vendor" value="OpenStack"/>
1476
+ <param pos="0" name="service.product" value="Dashboard"/>
1283
1477
  </fingerprint>
1284
1478
 
1285
1479
  <fingerprint pattern="^splunkd$">
1286
1480
  <description>Splunk HTTP server used in the web interface, forwarders, indexers and more</description>
1287
1481
  <example>splunkd</example>
1288
1482
  <param pos="0" name="service.vendor" value="Splunk"/>
1289
- <param pos="0" name="service.product" value="Splunkd"/>
1290
- <param pos="0" name="service.cpe23" value="cpe:/a:splunk:splunkd:-"/>
1483
+ <param pos="0" name="service.product" value="Splunk"/>
1484
+ <param pos="0" name="service.cpe23" value="cpe:/a:splunk:splunk:-"/>
1291
1485
  </fingerprint>
1292
1486
 
1293
- <fingerprint pattern="^VMware Horizon$">
1487
+ <fingerprint pattern="^VMware(?: Horizon(?: View)?|.nbsp;Horizon| View Portal)?$">
1294
1488
  <description>VMware Horizon</description>
1295
1489
  <example>VMware Horizon</example>
1296
- <param pos="0" name="service.vendor" value="VMWare"/>
1490
+ <example>VMware Horizon View</example>
1491
+ <example>VMware&amp;nbsp;Horizon</example>
1492
+ <example>VMware View Portal</example>
1493
+ <param pos="0" name="service.vendor" value="VMware"/>
1297
1494
  <param pos="0" name="service.product" value="Horizon"/>
1298
1495
  <param pos="0" name="service.cpe23" value="cpe:/a:vmware:horizon:-"/>
1299
1496
  </fingerprint>
1300
1497
 
1498
+ <fingerprint pattern="^Welcome to VMware Site Recovery Manager$">
1499
+ <description>VMware SRM</description>
1500
+ <example>Welcome to VMware Site Recovery Manager</example>
1501
+ <param pos="0" name="os.vendor" value="VMware"/>
1502
+ <param pos="0" name="os.product" value="Linux"/>
1503
+ <param pos="0" name="hw.vendor" value="VMware"/>
1504
+ <param pos="0" name="hw.device" value="Appliance"/>
1505
+ <param pos="0" name="hw.product" value="Site Recovery Manager"/>
1506
+ <param pos="0" name="service.vendor" value="VMware"/>
1507
+ <param pos="0" name="service.product" value="Site Recovery Manager"/>
1508
+ </fingerprint>
1509
+
1301
1510
  <fingerprint pattern="^Graylog Web Interface$">
1302
1511
  <description>Graylog Web Interface</description>
1303
1512
  <example>Graylog Web Interface</example>
@@ -1306,20 +1515,38 @@
1306
1515
  <param pos="0" name="service.cpe23" value="cpe:/a:graylog:graylog:-"/>
1307
1516
  </fingerprint>
1308
1517
 
1518
+ <!-- The 'vendor' here has changed over time -->
1519
+
1520
+ <fingerprint pattern="^(?:Elastic\s+)?Kibana$">
1521
+ <description>Kibana Web Interface</description>
1522
+ <example>Kibana</example>
1523
+ <example>Elastic Kibana</example>
1524
+ <param pos="0" name="service.vendor" value="Elastic"/>
1525
+ <param pos="0" name="service.product" value="Kibana"/>
1526
+ </fingerprint>
1527
+
1528
+ <fingerprint pattern="^Grafana$">
1529
+ <description>Grafana Web Interface</description>
1530
+ <example>Grafana</example>
1531
+ <param pos="0" name="service.vendor" value="Grafana"/>
1532
+ <param pos="0" name="service.product" value="Grafana"/>
1533
+ <param pos="0" name="service.cpe23" value="cpe:/a:grafana:grafana:-"/>
1534
+ </fingerprint>
1535
+
1536
+ <fingerprint pattern="^Prometheus Time Series Collection and Processing Server$">
1537
+ <description>Prometheus Web Interface</description>
1538
+ <example>Prometheus Time Series Collection and Processing Server</example>
1539
+ <param pos="0" name="service.vendor" value="Prometheus"/>
1540
+ <param pos="0" name="service.product" value="Prometheus"/>
1541
+ <param pos="0" name="service.cpe23" value="cpe:/a:prometheus:prometheus:-"/>
1542
+ </fingerprint>
1543
+
1309
1544
  <fingerprint pattern="^Symantec Endpoint Protection Manager$">
1310
1545
  <description>Symantec Endpoint Protection Manager</description>
1311
1546
  <example>Symantec Endpoint Protection Manager</example>
1312
1547
  <param pos="0" name="service.vendor" value="Symantec"/>
1313
1548
  <param pos="0" name="service.product" value="Endpoint Protection Manager"/>
1314
- <param pos="0" name="service.cpe23" value="cpe:/a:symantec:endpoint-protection-manager:-"/>
1315
- </fingerprint>
1316
-
1317
- <fingerprint pattern="^Login Gateway - Kiwi Syslog Web Access$">
1318
- <description>Kiwi Syslog Web Access</description>
1319
- <example>Login Gateway - Kiwi Syslog Web Access</example>
1320
- <param pos="0" name="service.vendor" value="Solarwinds"/>
1321
- <param pos="0" name="service.product" value="Kiwi Syslog Web Access"/>
1322
- <param pos="0" name="service.cpe23" value="cpe:/a:solarwinds:kiwi-syslog-web:-"/>
1549
+ <param pos="0" name="service.cpe23" value="cpe:/a:symantec:endpoint_protection_manager:-"/>
1323
1550
  </fingerprint>
1324
1551
 
1325
1552
  <fingerprint pattern="^Hadoop Administration$">
@@ -1327,7 +1554,6 @@
1327
1554
  <example>Hadoop Administration</example>
1328
1555
  <param pos="0" name="service.vendor" value="Hadoop"/>
1329
1556
  <param pos="0" name="service.product" value="Hadoop Web Admin"/>
1330
- <param pos="0" name="service.cpe23" value="cpe:/a:hadoop:web-admin:-"/>
1331
1557
  </fingerprint>
1332
1558
 
1333
1559
  <fingerprint pattern="^ManageEngine OpManager$">
@@ -1338,4 +1564,1125 @@
1338
1564
  <param pos="0" name="service.cpe23" value="cpe:/a:manageengine:opmanager:-"/>
1339
1565
  </fingerprint>
1340
1566
 
1341
- </fingerprints>
1567
+ <fingerprint pattern="^ManageEngine ADAudit Plus$">
1568
+ <description>ManageEngineADAudit Plus</description>
1569
+ <example>ManageEngine ADAudit Plus</example>
1570
+ <param pos="0" name="service.vendor" value="ManageEngine"/>
1571
+ <param pos="0" name="service.product" value="ADAudit Plus"/>
1572
+ </fingerprint>
1573
+
1574
+ <fingerprint pattern="^(ScanFront \d.+)Web Menu$">
1575
+ <!-- no space between the product model and "Web Menu" in the title -->
1576
+
1577
+ <description>Canon ScanFront</description>
1578
+ <example os.product="ScanFront 220" hw.product="ScanFront 220">ScanFront 220Web Menu</example>
1579
+ <param pos="0" name="hw.device" value="Scanner"/>
1580
+ <param pos="0" name="hw.vendor" value="Canon"/>
1581
+ <param pos="1" name="hw.product"/>
1582
+ <param pos="0" name="os.device" value="Scanner"/>
1583
+ <param pos="0" name="os.vendor" value="Canon"/>
1584
+ <param pos="1" name="os.product"/>
1585
+ </fingerprint>
1586
+
1587
+ <fingerprint pattern="^CDVI Update$">
1588
+ <description>CDVI Door Control System</description>
1589
+ <example>CDVI Update</example>
1590
+ <param pos="0" name="hw.vendor" value="CDVI"/>
1591
+ <param pos="0" name="hw.device" value="Access Control"/>
1592
+ </fingerprint>
1593
+
1594
+ <fingerprint pattern="^Liebert OpenComms Network Interface Card$">
1595
+ <description>Liebert UPS</description>
1596
+ <example>Liebert OpenComms Network Interface Card</example>
1597
+ <param pos="0" name="hw.device" value="Power device"/>
1598
+ <param pos="0" name="hw.vendor" value="Liebert"/>
1599
+ <param pos="0" name="os.device" value="Power device"/>
1600
+ <param pos="0" name="os.vendor" value="Liebert"/>
1601
+ </fingerprint>
1602
+
1603
+ <fingerprint pattern="^Excella Main Page$">
1604
+ <description>MagTek Excella STX Check Scanner</description>
1605
+ <example>Excella Main Page</example>
1606
+ <param pos="0" name="hw.device" value="Check Scanner"/>
1607
+ <param pos="0" name="hw.vendor" value="MagTek"/>
1608
+ <param pos="0" name="hw.product" value="Excella"/>
1609
+ <param pos="0" name="os.device" value="Check Scanner"/>
1610
+ <param pos="0" name="os.vendor" value="MagTek"/>
1611
+ <param pos="0" name="os.product" value="Excella"/>
1612
+ </fingerprint>
1613
+
1614
+ <fingerprint pattern="^B426$">
1615
+ <description>Bosch Security Systems Ethernet Module (Alarm Panel)</description>
1616
+ <example>B426</example>
1617
+ <param pos="0" name="hw.device" value="Alarm Panel"/>
1618
+ <param pos="0" name="hw.vendor" value="Bosch"/>
1619
+ <param pos="0" name="os.device" value="Alarm Panel"/>
1620
+ <param pos="0" name="os.vendor" value="Bosch"/>
1621
+ </fingerprint>
1622
+
1623
+ <fingerprint pattern="^Citrix Login$">
1624
+ <description>Citrix NetScaler</description>
1625
+ <example>Citrix Login</example>
1626
+ <param pos="0" name="os.vendor" value="Citrix"/>
1627
+ <param pos="0" name="os.family" value="NetScaler"/>
1628
+ <param pos="0" name="os.device" value="Network Management Device"/>
1629
+ <param pos="0" name="os.product" value="NetScaler"/>
1630
+ <param pos="0" name="service.vendor" value="Citrix"/>
1631
+ <param pos="0" name="service.family" value="NetScaler"/>
1632
+ <param pos="0" name="service.device" value="Network Management Device"/>
1633
+ <param pos="0" name="service.product" value="NetScaler"/>
1634
+ <param pos="0" name="service.cpe23" value="cpe:/a:citrix:netscaler:-"/>
1635
+ </fingerprint>
1636
+
1637
+ <fingerprint pattern="^Netscaler Gateway$">
1638
+ <description>Citrix Netscaler Gateway</description>
1639
+ <example>Netscaler Gateway</example>
1640
+ <param pos="0" name="os.vendor" value="Citrix"/>
1641
+ <param pos="0" name="os.family" value="NetScaler"/>
1642
+ <param pos="0" name="os.device" value="Network Management Device"/>
1643
+ <param pos="0" name="os.product" value="NetScaler Gateway"/>
1644
+ <param pos="0" name="service.vendor" value="Citrix"/>
1645
+ <param pos="0" name="service.family" value="NetScaler"/>
1646
+ <param pos="0" name="service.device" value="Network Management Device"/>
1647
+ <param pos="0" name="service.product" value="NetScaler Gateway"/>
1648
+ </fingerprint>
1649
+
1650
+ <fingerprint pattern="^Citrix (?:NetScaler SDX|ADC SDX)$">
1651
+ <description>Citrix NetScaler SDX Gateway</description>
1652
+ <example>Citrix NetScaler SDX</example>
1653
+ <example>Citrix ADC SDX</example>
1654
+ <param pos="0" name="os.vendor" value="Citrix"/>
1655
+ <param pos="0" name="os.family" value="NetScaler"/>
1656
+ <param pos="0" name="os.device" value="Network Management Device"/>
1657
+ <param pos="0" name="os.product" value="NetScaler SDX Gateway"/>
1658
+ <param pos="0" name="service.vendor" value="Citrix"/>
1659
+ <param pos="0" name="service.family" value="NetScaler"/>
1660
+ <param pos="0" name="service.device" value="Network Management Device"/>
1661
+ <param pos="0" name="service.product" value="NetScaler SDX Gateway"/>
1662
+ </fingerprint>
1663
+
1664
+ <fingerprint pattern="^Citrix NetScaler Insight Center$">
1665
+ <description>Citrix NetScaler Insight Center</description>
1666
+ <example>Citrix NetScaler Insight Center</example>
1667
+ <param pos="0" name="service.vendor" value="Citrix"/>
1668
+ <param pos="0" name="service.family" value="NetScaler"/>
1669
+ <param pos="0" name="service.product" value="NetScaler Insight Center"/>
1670
+ </fingerprint>
1671
+
1672
+ <fingerprint pattern="^Brother ([^\s]+) series$">
1673
+ <description>Brother Printers</description>
1674
+ <example hw.product="MFC-L5900DW">Brother MFC-L5900DW series</example>
1675
+ <param pos="0" name="hw.vendor" value="Brother"/>
1676
+ <param pos="0" name="hw.device" value="Printer"/>
1677
+ <param pos="1" name="hw.product"/>
1678
+ </fingerprint>
1679
+
1680
+ <fingerprint pattern="^HP (?:Color )?LaserJet ([^&amp;]+)&amp;">
1681
+ <description>HP LaserJet</description>
1682
+ <example hw.product="M1536dnf MFP">HP LaserJet M1536dnf MFP&amp;nbsp;&amp;nbsp;&amp;nbsp;1.1.1.1</example>
1683
+ <param pos="0" name="hw.vendor" value="HP"/>
1684
+ <param pos="0" name="hw.family" value="LaserJet"/>
1685
+ <param pos="0" name="hw.device" value="Printer"/>
1686
+ <param pos="1" name="hw.product"/>
1687
+ </fingerprint>
1688
+
1689
+ <fingerprint pattern="^Jamf Pro Login - Jamf Pro v(\S+)$">
1690
+ <description>Jamf Pro</description>
1691
+ <example service.version="10.14.0-t1563397490">Jamf Pro Login - Jamf Pro v10.14.0-t1563397490</example>
1692
+ <param pos="0" name="service.vendor" value="Jamf"/>
1693
+ <param pos="0" name="service.product" value="Jamf Pro"/>
1694
+ <param pos="1" name="service.version"/>
1695
+ <param pos="0" name="service.cpe23" value="cpe:/a:jamf:jamf:{service.version}"/>
1696
+ </fingerprint>
1697
+
1698
+ <fingerprint pattern="^Keyper Systems Administration - Login$">
1699
+ <description>Keyper Systems Administration - Login</description>
1700
+ <example>Keyper Systems Administration - Login</example>
1701
+ <param pos="0" name="hw.vendor" value="Keyper"/>
1702
+ <param pos="0" name="hw.device" value="Access Control"/>
1703
+ <param pos="0" name="hw.product" value="Key Management"/>
1704
+ </fingerprint>
1705
+
1706
+ <fingerprint pattern="FireEye:\s*$">
1707
+ <description>FireEye Investigation Analysis System Appliance</description>
1708
+ <example>FireEye:</example>
1709
+ <param pos="0" name="hw.vendor" value="FireEye"/>
1710
+ <param pos="0" name="hw.product" value="IA Appliance"/>
1711
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1712
+ </fingerprint>
1713
+
1714
+ <fingerprint pattern="^GigaVUE-OS$">
1715
+ <description>Gigamon GigaVUE Appliance</description>
1716
+ <example>GigaVUE-OS</example>
1717
+ <param pos="0" name="hw.vendor" value="Gigamon"/>
1718
+ <param pos="0" name="hw.device" value="Monitoring"/>
1719
+ <param pos="0" name="hw.product" value="GigaVUE"/>
1720
+ </fingerprint>
1721
+
1722
+ <fingerprint pattern="^Pure Storage Login$">
1723
+ <description>Pure Storage Appliance</description>
1724
+ <example>Pure Storage Login</example>
1725
+ <param pos="0" name="hw.vendor" value="Pure Storage"/>
1726
+ <param pos="0" name="hw.device" value="NAS"/>
1727
+ <param pos="0" name="hw.product" value="Appliance"/>
1728
+ </fingerprint>
1729
+
1730
+ <fingerprint pattern="^Axonius Cybersecurity Asset Management Platform$">
1731
+ <description>Axonius Appliance</description>
1732
+ <example>Axonius Cybersecurity Asset Management Platform</example>
1733
+ <param pos="0" name="hw.vendor" value="Axonius"/>
1734
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1735
+ <param pos="0" name="hw.product" value="Asset Management"/>
1736
+ </fingerprint>
1737
+
1738
+ <fingerprint pattern="^CRESTRON$">
1739
+ <description>Crestron Video Conferencing</description>
1740
+ <example>CRESTRON</example>
1741
+ <param pos="0" name="hw.vendor" value="Crestron"/>
1742
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
1743
+ <param pos="0" name="os.vendor" value="Crestron"/>
1744
+ <param pos="0" name="os.family" value="Linux"/>
1745
+ <param pos="0" name="os.device" value="Video Conferencing"/>
1746
+ </fingerprint>
1747
+
1748
+ <fingerprint pattern="^ELAN Viewer Installation$">
1749
+ <description>ELAN Smart Home Controller</description>
1750
+ <example>ELAN Viewer Installation</example>
1751
+ <param pos="0" name="hw.vendor" value="ELAN"/>
1752
+ <param pos="0" name="hw.device" value="Building Automation"/>
1753
+ <param pos="0" name="hw.product" value="Home Controller"/>
1754
+ <param pos="0" name="os.vendor" value="ELAN"/>
1755
+ <param pos="0" name="os.family" value="Linux"/>
1756
+ </fingerprint>
1757
+
1758
+ <fingerprint pattern="^iTach IP2IR Setup and Configuration$">
1759
+ <description>iTach IP2IR</description>
1760
+ <example>iTach IP2IR Setup and Configuration</example>
1761
+ <param pos="0" name="hw.vendor" value="iTach"/>
1762
+ <param pos="0" name="hw.device" value="Device"/>
1763
+ <param pos="0" name="hw.product" value="IP2IR"/>
1764
+ </fingerprint>
1765
+
1766
+ <fingerprint pattern="^AVTECH Device ManageR$">
1767
+ <description>AVTECH Device ManageR Software</description>
1768
+ <example>AVTECH Device ManageR</example>
1769
+ <param pos="0" name="service.vendor" value="AVTECH"/>
1770
+ <param pos="0" name="service.product" value="Device Manager"/>
1771
+ </fingerprint>
1772
+
1773
+ <fingerprint pattern="^AVTECH Software, Inc\. - Room Alert(?:&amp;reg;)?\s+([a-zA-Z0-9/]+) - Advanced">
1774
+ <description>AVTECH RoomAlert</description>
1775
+ <example hw.product="Room Alert 11E" hw.product.model="11E">AVTECH Software, Inc. - Room Alert 11E - Advanced Computer Room Environment Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1776
+ <example hw.product="Room Alert 32E/W" hw.product.model="32E/W">AVTECH Software, Inc. - Room Alert 32E/W - Advanced Computer Room Environment Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1777
+ <example hw.product="Room Alert 32E/W" hw.product.model="32E/W">AVTECH Software, Inc. - Room Alert&amp;reg; 32E/W - Advanced Computer Room Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1778
+ <param pos="0" name="hw.vendor" value="AVTECH"/>
1779
+ <param pos="0" name="hw.device" value="Monitoring"/>
1780
+ <param pos="1" name="hw.product.model"/>
1781
+ <param pos="0" name="hw.product" value="Room Alert {hw.product.model}"/>
1782
+ </fingerprint>
1783
+
1784
+ <fingerprint pattern="^AVTECH Software, Inc\. - TemPageR\s+([a-zA-Z0-9/]+) - Real-Time">
1785
+ <description>AVTECH TepPageR</description>
1786
+ <example hw.product="TemPageR 3E" hw.product.model="3E">AVTECH Software, Inc. - TemPageR 3E - Real-Time Temperature Monitor For IT &amp;amp; Facilities Environment Monitoring</example>
1787
+ <param pos="0" name="hw.vendor" value="AVTECH"/>
1788
+ <param pos="0" name="hw.device" value="Monitoring"/>
1789
+ <param pos="1" name="hw.product.model"/>
1790
+ <param pos="0" name="hw.product" value="TemPageR {hw.product.model}"/>
1791
+ </fingerprint>
1792
+
1793
+ <fingerprint pattern="^AppDynamics$">
1794
+ <description>Cisco AppDynamics Appliance</description>
1795
+ <example>AppDynamics</example>
1796
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1797
+ <param pos="0" name="hw.device" value="Network Appliance"/>
1798
+ <param pos="0" name="hw.product" value="AppDynamics"/>
1799
+ </fingerprint>
1800
+
1801
+ <fingerprint pattern="^INDECT - CarDetector Configurator$">
1802
+ <description>INDECT Parking Management Console</description>
1803
+ <example>INDECT - CarDetector Configurator</example>
1804
+ <param pos="0" name="hw.vendor" value="INDECT"/>
1805
+ <param pos="0" name="hw.device" value="Network Appliance"/>
1806
+ <param pos="0" name="hw.product" value="CarDetector"/>
1807
+ </fingerprint>
1808
+
1809
+ <fingerprint pattern="^J-Link Pro Webserver$">
1810
+ <description>Segger J-Link Pro</description>
1811
+ <example>J-Link Pro Webserver</example>
1812
+ <param pos="0" name="hw.vendor" value="Segger"/>
1813
+ <param pos="0" name="hw.device" value="JTAG Adapter"/>
1814
+ <param pos="0" name="hw.product" value="J-Link Pro"/>
1815
+ </fingerprint>
1816
+
1817
+ <fingerprint pattern="^OneFS$">
1818
+ <description>EMC Isilon OneFS</description>
1819
+ <example>OneFS</example>
1820
+ <param pos="0" name="os.family" value="FreeBSD"/>
1821
+ <param pos="0" name="os.vendor" value="EMC"/>
1822
+ <param pos="0" name="os.product" value="Isilon OneFS OS"/>
1823
+ <param pos="0" name="hw.vendor" value="EMC"/>
1824
+ <param pos="0" name="hw.device" value="NAS"/>
1825
+ <param pos="0" name="hw.product" value="Isilon OneFS"/>
1826
+ </fingerprint>
1827
+
1828
+ <fingerprint pattern="^Isilon InsightIQ$">
1829
+ <description>EMC Isilon InsightIQ</description>
1830
+ <example>Isilon InsightIQ</example>
1831
+ <param pos="0" name="os.family" value="FreeBSD"/>
1832
+ <param pos="0" name="os.vendor" value="EMC"/>
1833
+ <param pos="0" name="os.product" value="Isilon OneFS OS"/>
1834
+ <param pos="0" name="hw.vendor" value="EMC"/>
1835
+ <param pos="0" name="hw.device" value="Network Appliance"/>
1836
+ <param pos="0" name="hw.product" value="Isilon InsightIQ"/>
1837
+ </fingerprint>
1838
+
1839
+ <fingerprint pattern="^Active Intelligence Engine$">
1840
+ <description>Attivio Active Intelligence Engine</description>
1841
+ <example>Active Intelligence Engine</example>
1842
+ <param pos="0" name="service.vendor" value="Attivio"/>
1843
+ <param pos="0" name="service.product" value="Active Intelligence Engine"/>
1844
+ </fingerprint>
1845
+
1846
+ <fingerprint pattern="^Welcome to WildFly(?: Application Server)?\s+(\d+)">
1847
+ <description>WildFly with version</description>
1848
+ <example service.version="11">Welcome to WildFly 11</example>
1849
+ <example service.version="8">Welcome to WildFly 8</example>
1850
+ <example service.version="8">Welcome to WildFly Application Server 8</example>
1851
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1852
+ <param pos="0" name="service.product" value="WildFly"/>
1853
+ <param pos="1" name="service.version"/>
1854
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:wildfly:{service.version}"/>
1855
+ </fingerprint>
1856
+
1857
+ <fingerprint pattern="^Welcome to WildFly$">
1858
+ <description>WildFly with no version</description>
1859
+ <example>Welcome to WildFly</example>
1860
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1861
+ <param pos="0" name="service.product" value="WildFly"/>
1862
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:wildfly:-"/>
1863
+ </fingerprint>
1864
+
1865
+ <fingerprint pattern="^Welcome to JBoss Application Server ([\d\.]+)$">
1866
+ <description>JBoss Application Server w/ Version</description>
1867
+ <example service.version="7">Welcome to JBoss Application Server 7</example>
1868
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1869
+ <param pos="0" name="service.product" value="JBoss AS"/>
1870
+ <param pos="1" name="service.version"/>
1871
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_wildfly_application_server:{service.version}"/>
1872
+ </fingerprint>
1873
+
1874
+ <fingerprint pattern="^Welcome to JBoss(?: AS|.trade;)$">
1875
+ <description>JBoss Application Server w/o Version</description>
1876
+ <example>Welcome to JBoss AS</example>
1877
+ <example>Welcome to JBoss&amp;trade;</example>
1878
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1879
+ <param pos="0" name="service.product" value="JBoss AS"/>
1880
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_wildfly_application_server:-"/>
1881
+ </fingerprint>
1882
+
1883
+ <fingerprint pattern="^(?:JBoss )?EAP ([\d\.]+)$">
1884
+ <description>JBoss EAP w/ Version</description>
1885
+ <example service.version="7">JBoss EAP 7</example>
1886
+ <example service.version="7">EAP 7</example>
1887
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1888
+ <param pos="0" name="service.product" value="JBoss EAP"/>
1889
+ <param pos="1" name="service.version"/>
1890
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:{service.version}"/>
1891
+ </fingerprint>
1892
+
1893
+ <fingerprint pattern="^Welcome to JBoss EAP$">
1894
+ <description>JBoss EAP w/o Version</description>
1895
+ <example>Welcome to JBoss EAP</example>
1896
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1897
+ <param pos="0" name="service.product" value="JBoss EAP"/>
1898
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:-"/>
1899
+ </fingerprint>
1900
+
1901
+ <fingerprint pattern="^S2 Network Node$">
1902
+ <description>S2 Network Node Appliance</description>
1903
+ <example>S2 Network Node</example>
1904
+ <param pos="0" name="hw.vendor" value="S2"/>
1905
+ <param pos="0" name="hw.device" value="Access Control"/>
1906
+ <param pos="0" name="hw.product" value="Network Node"/>
1907
+ </fingerprint>
1908
+
1909
+ <fingerprint pattern="^(?:S2 Netbox Login|Home - NetBox)$">
1910
+ <description>S2 Netbox Appliance</description>
1911
+ <example>S2 Netbox Login</example>
1912
+ <example>Home - NetBox</example>
1913
+ <param pos="0" name="hw.vendor" value="S2"/>
1914
+ <param pos="0" name="hw.device" value="Access Control"/>
1915
+ <param pos="0" name="hw.product" value="Netbox"/>
1916
+ </fingerprint>
1917
+
1918
+ <fingerprint pattern="^S2 NetVR Login$">
1919
+ <description>S2 NetVR Appliance</description>
1920
+ <example>S2 NetVR Login</example>
1921
+ <param pos="0" name="hw.vendor" value="S2"/>
1922
+ <param pos="0" name="hw.device" value="Access Control"/>
1923
+ <param pos="0" name="hw.product" value="NetVR"/>
1924
+ </fingerprint>
1925
+
1926
+ <fingerprint pattern="^IBM HTTP Server$">
1927
+ <description>IBM HTTP Server w/o Version</description>
1928
+ <example>IBM HTTP Server</example>
1929
+ <param pos="0" name="service.vendor" value="IBM"/>
1930
+ <param pos="0" name="service.product" value="HTTPD"/>
1931
+ <param pos="0" name="service.family" value="Apache"/>
1932
+ </fingerprint>
1933
+
1934
+ <fingerprint pattern="^IBM HTTP Server ([0-9\.]+)$">
1935
+ <description>IBM HTTP Server with Version</description>
1936
+ <example service.version="8.5.5">IBM HTTP Server 8.5.5</example>
1937
+ <param pos="0" name="service.vendor" value="IBM"/>
1938
+ <param pos="0" name="service.product" value="HTTPD"/>
1939
+ <param pos="0" name="service.family" value="Apache"/>
1940
+ <param pos="1" name="service.version"/>
1941
+ </fingerprint>
1942
+
1943
+ <fingerprint pattern="^IBM Tivoli Storage Manager$">
1944
+ <description>IBM Tivoli Storage Manager</description>
1945
+ <example>IBM Tivoli Storage Manager</example>
1946
+ <param pos="0" name="service.vendor" value="IBM"/>
1947
+ <param pos="0" name="service.family" value="Tivoli"/>
1948
+ <param pos="0" name="service.product" value="Tivoli Storage Manager"/>
1949
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:tivoli_storage_manager:-"/>
1950
+ </fingerprint>
1951
+
1952
+ <fingerprint pattern="^IBM FlashCopy Manager$">
1953
+ <description>IBM FlashCopy Manager</description>
1954
+ <example>IBM FlashCopy Manager</example>
1955
+ <param pos="0" name="service.vendor" value="IBM"/>
1956
+ <param pos="0" name="service.family" value="Tivoli"/>
1957
+ <param pos="0" name="service.product" value="Tivoli Storage FlashCopy Manager"/>
1958
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:tivoli_storage_flashcopy_manager:-"/>
1959
+ </fingerprint>
1960
+
1961
+ <fingerprint pattern="^(?:Jupyter Notebook|JupyterLab|Home Page - Select or create a notebook)$">
1962
+ <description>Jupyter Notebook Server</description>
1963
+ <example>Jupyter Notebook</example>
1964
+ <example>JupyterLab</example>
1965
+ <example>Home Page - Select or create a notebook</example>
1966
+ <param pos="0" name="service.vendor" value="Jupyter"/>
1967
+ <param pos="0" name="service.product" value="Notebook"/>
1968
+ <param pos="0" name="service.cpe23" value="cpe:/a:jupyter:notebook:-"/>
1969
+ </fingerprint>
1970
+
1971
+ <fingerprint pattern="^Redirect to userimage: /control/userimage\.html$">
1972
+ <description>Mobotix Network Camera</description>
1973
+ <example>Redirect to userimage: /control/userimage.html</example>
1974
+ <param pos="0" name="hw.vendor" value="Mobotix"/>
1975
+ <param pos="0" name="hw.device" value="Web cam"/>
1976
+ <param pos="0" name="hw.product" value="IP Camera"/>
1977
+ </fingerprint>
1978
+
1979
+ <fingerprint pattern="^Apache ActiveMQ$">
1980
+ <description>Apache ActiveMQ</description>
1981
+ <example>Apache ActiveMQ</example>
1982
+ <param pos="0" name="service.vendor" value="Apache"/>
1983
+ <param pos="0" name="service.family" value="ActiveMQ"/>
1984
+ <param pos="0" name="service.product" value="ActiveMQ"/>
1985
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:activemq:-"/>
1986
+ </fingerprint>
1987
+
1988
+ <fingerprint pattern="^Google Wifi$">
1989
+ <description>Google OnHub Router</description>
1990
+ <example>Google Wifi</example>
1991
+ <param pos="0" name="os.vendor" value="Google"/>
1992
+ <param pos="0" name="os.family" value="Linux"/>
1993
+ <param pos="0" name="hw.vendor" value="Google"/>
1994
+ <param pos="0" name="hw.device" value="Router"/>
1995
+ <param pos="0" name="hw.product" value="OnHub"/>
1996
+ </fingerprint>
1997
+
1998
+ <fingerprint pattern="PRTG Network Monitor">
1999
+ <description>PRTG Network Monitor (not anchored)</description>
2000
+ <example>PRTG Network Monitor (WIN-R4C1T8HRRAA)</example>
2001
+ <example>BigCorp PRTG Network Monitor (PRTG2)</example>
2002
+ <param pos="0" name="service.vendor" value="PRTG"/>
2003
+ <param pos="0" name="service.product" value="Network Monitor"/>
2004
+ </fingerprint>
2005
+
2006
+ <fingerprint pattern="^(?:BrightSign&amp;reg;|BrightSign Applications|Diagnostics Web Server)$">
2007
+ <description>BrightSign Controller</description>
2008
+ <example>BrightSign&amp;reg;</example>
2009
+ <example>BrightSign Applications</example>
2010
+ <example>Diagnostics Web Server</example>
2011
+ <param pos="0" name="os.vendor" value="BrightSign"/>
2012
+ <param pos="0" name="os.family" value="Linux"/>
2013
+ <param pos="0" name="hw.vendor" value="BrightSign"/>
2014
+ <param pos="0" name="hw.device" value="Media Server"/>
2015
+ <param pos="0" name="hw.product" value="Digital Signage Player"/>
2016
+ </fingerprint>
2017
+
2018
+ <fingerprint pattern="^Linksys Smart Wi-Fi$">
2019
+ <description>Linksys Smart Wi-Fi</description>
2020
+ <example>Linksys Smart Wi-Fi</example>
2021
+ <param pos="0" name="os.vendor" value="Linksys"/>
2022
+ <param pos="0" name="os.family" value="Linux"/>
2023
+ <param pos="0" name="hw.vendor" value="Linksys"/>
2024
+ <param pos="0" name="hw.device" value="WAP"/>
2025
+ </fingerprint>
2026
+
2027
+ <fingerprint pattern="^(?:DD System Manager|System Manager)$">
2028
+ <description>Data Domain System Manager</description>
2029
+ <example>DD System Manager</example>
2030
+ <example>System Manager</example>
2031
+ <param pos="0" name="os.vendor" value="Data Domain"/>
2032
+ <param pos="0" name="os.product" value="DD OS"/>
2033
+ <param pos="0" name="os.device" value="Storage"/>
2034
+ <param pos="0" name="hw.vendor" value="Data Domain"/>
2035
+ <param pos="0" name="hw.product" value="DD OS"/>
2036
+ <param pos="0" name="hw.device" value="Storage"/>
2037
+ </fingerprint>
2038
+
2039
+ <fingerprint pattern="^SonarQube$">
2040
+ <description>SonarQube</description>
2041
+ <example>SonarQube</example>
2042
+ <param pos="0" name="service.vendor" value="SonarQube"/>
2043
+ <param pos="0" name="service.product" value="SonarQube"/>
2044
+ </fingerprint>
2045
+
2046
+ <fingerprint pattern="^(\S+) - Opengear Management Console$">
2047
+ <description>Opengear Management Console</description>
2048
+ <example host.name="server01">server01 - Opengear Management Console</example>
2049
+ <param pos="0" name="service.vendor" value="Opengear"/>
2050
+ <param pos="0" name="service.product" value="Management Console"/>
2051
+ <param pos="1" name="host.name"/>
2052
+ </fingerprint>
2053
+
2054
+ <fingerprint pattern="^Login \(Virtual Traffic Manager Appliance :: (\S+)\)$">
2055
+ <description>Brocade Virtual Traffic Manager Appliance</description>
2056
+ <example host.name="10.0.0.1">Login (Virtual Traffic Manager Appliance :: 10.0.0.1)</example>
2057
+ <param pos="0" name="hw.vendor" value="Brocade"/>
2058
+ <param pos="0" name="hw.device" value="Network Management Device"/>
2059
+ <param pos="0" name="hw.product" value="Virtual Traffic Manager"/>
2060
+ <param pos="1" name="host.name"/>
2061
+ </fingerprint>
2062
+
2063
+ <fingerprint pattern="^Chronograf$">
2064
+ <description>Chronograf Dashboard</description>
2065
+ <example>Chronograf</example>
2066
+ <param pos="0" name="service.vendor" value="InfluxData"/>
2067
+ <param pos="0" name="service.product" value="Chronograf"/>
2068
+ </fingerprint>
2069
+
2070
+ <fingerprint pattern="^InfluxDB 2.0$">
2071
+ <description>InfluxDB 2.0 Dashboard</description>
2072
+ <example>InfluxDB 2.0</example>
2073
+ <param pos="0" name="service.vendor" value="InfluxData"/>
2074
+ <param pos="0" name="service.product" value="InfluxDB"/>
2075
+ <param pos="0" name="service.version" value="2.0"/>
2076
+ <param pos="0" name="service.cpe23" value="cpe:/a:influxdata:influxdb:2.0"/>
2077
+ </fingerprint>
2078
+
2079
+ <fingerprint pattern="^(?:Sign in . GitLab|GitLab|GitLab is not responding)$">
2080
+ <description>GitLab</description>
2081
+ <example>Sign in · GitLab</example>
2082
+ <example>GitLab is not responding</example>
2083
+ <example>GitLab</example>
2084
+ <example>Sign in | GitLab</example>
2085
+ <param pos="0" name="service.vendor" value="GitLab"/>
2086
+ <param pos="0" name="service.product" value="GitLab"/>
2087
+ <param pos="0" name="service.cpe23" value="cpe:/a:gitlab:gitlab:-"/>
2088
+ </fingerprint>
2089
+
2090
+ <fingerprint pattern="^(?:GitHub Enterprise|Setup GitHub Enterprise|GitHub Enterprise preflight check)$">
2091
+ <description>GitHub Enterprise</description>
2092
+ <example>GitHub Enterprise</example>
2093
+ <example>Setup GitHub Enterprise</example>
2094
+ <example>GitHub Enterprise preflight check</example>
2095
+ <param pos="0" name="service.vendor" value="GitHub"/>
2096
+ <param pos="0" name="service.product" value="Enterprise"/>
2097
+ </fingerprint>
2098
+
2099
+ <fingerprint pattern="^(?:SAP NetWeaver Application Server Java|SAP&amp;#x20;NetWeaver&amp;#x20;Portal|Loading Portal\.\.\.)$">
2100
+ <description>SAP NetWeaver Portal</description>
2101
+ <example>SAP NetWeaver Application Server Java</example>
2102
+ <example>SAP&amp;#x20;NetWeaver&amp;#x20;Portal</example>
2103
+ <example>Loading Portal...</example>
2104
+ <param pos="0" name="service.vendor" value="SAP"/>
2105
+ <param pos="0" name="service.product" value="NetWeaver Web AS"/>
2106
+ <param pos="0" name="service.family" value="NetWeaver"/>
2107
+ </fingerprint>
2108
+
2109
+ <fingerprint pattern="^Lansweeper (?:- Login|First Run Wizard)$">
2110
+ <description>Lansweeper</description>
2111
+ <example>Lansweeper - Login</example>
2112
+ <example>Lansweeper First Run Wizard</example>
2113
+ <param pos="0" name="service.vendor" value="Lansweeper"/>
2114
+ <param pos="0" name="service.product" value="Lansweeper"/>
2115
+ <param pos="0" name="service.cpe23" value="cpe:/a:lansweeper:lansweeper:-"/>
2116
+ </fingerprint>
2117
+
2118
+ <fingerprint pattern="^(?:Celery Flower|Flower)$">
2119
+ <description>Celery Flower Dashboard</description>
2120
+ <example>Celery Flower</example>
2121
+ <example>Flower</example>
2122
+ <param pos="0" name="service.vendor" value="Celery"/>
2123
+ <param pos="0" name="service.product" value="Flower"/>
2124
+ </fingerprint>
2125
+
2126
+ <fingerprint pattern="^(?:Insight)?VM Security Console :: Login$">
2127
+ <description>Rapid7 InsightVM Console</description>
2128
+ <example>InsightVM Security Console :: Login</example>
2129
+ <example>VM Security Console :: Login</example>
2130
+ <param pos="0" name="service.vendor" value="Rapid7"/>
2131
+ <param pos="0" name="service.product" value="InsightVM"/>
2132
+ <param pos="0" name="service.cpe23" value="cpe:/a:rapid7:insightvm:-"/>
2133
+ </fingerprint>
2134
+
2135
+ <fingerprint pattern="^Nexpose Security Console :: Login$">
2136
+ <description>Rapid7 Nexpose Console</description>
2137
+ <example>Nexpose Security Console :: Login</example>
2138
+ <param pos="0" name="service.vendor" value="Rapid7"/>
2139
+ <param pos="0" name="service.product" value="Nexpose"/>
2140
+ <param pos="0" name="service.cpe23" value="cpe:/a:rapid7:nexpose:-"/>
2141
+ </fingerprint>
2142
+
2143
+ <fingerprint pattern="^(?:Login Gateway|Session Error) - Kiwi Syslog Web Access$">
2144
+ <description>Kiwi Syslog Web Access</description>
2145
+ <example>Login Gateway - Kiwi Syslog Web Access</example>
2146
+ <example>Session Error - Kiwi Syslog Web Access</example>
2147
+ <param pos="0" name="service.vendor" value="SolarWinds"/>
2148
+ <param pos="0" name="service.product" value="Kiwi Syslog"/>
2149
+ </fingerprint>
2150
+
2151
+ <fingerprint pattern="^ClickShare Configurator$">
2152
+ <description>ClickShare Wireless Presenter</description>
2153
+ <example>ClickShare Configurator</example>
2154
+ <param pos="0" name="hw.vendor" value="Barco"/>
2155
+ <param pos="0" name="hw.device" value="Wireless Presenter"/>
2156
+ <param pos="0" name="hw.product" value="ClickShare"/>
2157
+ <param pos="0" name="os.vendor" value="Barco"/>
2158
+ <param pos="0" name="os.family" value="ClickShareOS"/>
2159
+ <param pos="0" name="os.device" value="Wireless Presenter"/>
2160
+ </fingerprint>
2161
+
2162
+ <fingerprint pattern="^(IQ\S+) IQEYE\S+: Live Images$">
2163
+ <description>IQinVision IQeye Network Camera</description>
2164
+ <example hw.product="IQA22N">IQA22N IQEYE1A1613: Live Images</example>
2165
+ <example hw.product="IQeye703">IQeye703 IQEYE011750: Live Images</example>
2166
+ <param pos="0" name="hw.vendor" value="IQinVision"/>
2167
+ <param pos="0" name="hw.device" value="Web cam"/>
2168
+ <param pos="1" name="hw.product"/>
2169
+ </fingerprint>
2170
+
2171
+ <fingerprint pattern="^(?:Oracle\(R\) )?Integrated Lights Out Manager$">
2172
+ <description>Oracle iLOM</description>
2173
+ <example>Oracle(R) Integrated Lights Out Manager</example>
2174
+ <example>Integrated Lights Out Manager</example>
2175
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
2176
+ <param pos="0" name="hw.vendor" value="Oracle"/>
2177
+ <param pos="0" name="hw.family" value="ILOM"/>
2178
+ <param pos="0" name="hw.product" value="ILOM"/>
2179
+ <param pos="0" name="os.device" value="Lights Out Management"/>
2180
+ <param pos="0" name="os.vendor" value="Oracle"/>
2181
+ <param pos="0" name="os.family" value="ILOM"/>
2182
+ <param pos="0" name="os.product" value="ILOM"/>
2183
+ </fingerprint>
2184
+
2185
+ <fingerprint pattern="^Genetec - SHARPV\S+$">
2186
+ <description>Genetec AutoVu SharpV ALPR Camera</description>
2187
+ <example>Genetec - SHARPV01111</example>
2188
+ <param pos="0" name="hw.vendor" value="Genetec"/>
2189
+ <param pos="0" name="hw.device" value="Web cam"/>
2190
+ <param pos="0" name="hw.product" value="AutoVu SharpV"/>
2191
+ </fingerprint>
2192
+
2193
+ <fingerprint pattern="^Nexus Repository Manager$">
2194
+ <description>Nexus Repository Manager</description>
2195
+ <example>Nexus Repository Manager</example>
2196
+ <param pos="0" name="service.vendor" value="Apache"/>
2197
+ <param pos="0" name="service.product" value="Nexus Repository Manager"/>
2198
+ </fingerprint>
2199
+
2200
+ <fingerprint pattern="^Apache Flink Web Dashboard$">
2201
+ <description>Apache Flink Web Dashboard</description>
2202
+ <example>Apache Flink Web Dashboard</example>
2203
+ <param pos="0" name="service.vendor" value="Apache"/>
2204
+ <param pos="0" name="service.product" value="Flink"/>
2205
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:flink:-"/>
2206
+ </fingerprint>
2207
+
2208
+ <fingerprint pattern="^(?:Twonky|Twonky Server|TwonkyMedia|TwonkyMedia server media browser)$">
2209
+ <description>Twonky Server</description>
2210
+ <example>Twonky</example>
2211
+ <example>Twonky Server</example>
2212
+ <example>TwonkyMedia</example>
2213
+ <example>TwonkyMedia server media browser</example>
2214
+ <param pos="0" name="service.vendor" value="Lynx Technology"/>
2215
+ <param pos="0" name="service.product" value="Twonky Media Server"/>
2216
+ </fingerprint>
2217
+
2218
+ <fingerprint pattern="^Spiceworks(?: Server Busy| Help Desk)?$">
2219
+ <description>Spiceworks</description>
2220
+ <example>Spiceworks</example>
2221
+ <example>Spiceworks Help Desk</example>
2222
+ <example>Spiceworks Server Busy</example>
2223
+ <param pos="0" name="service.vendor" value="Spiceworks"/>
2224
+ <param pos="0" name="service.product" value="Help Desk Server"/>
2225
+ </fingerprint>
2226
+
2227
+ <fingerprint pattern="^Network Monitor$">
2228
+ <description>Spiceworks Network Monitor</description>
2229
+ <example>Network Monitor</example>
2230
+ <param pos="0" name="service.vendor" value="Spiceworks"/>
2231
+ <param pos="0" name="service.product" value="Network Monitor"/>
2232
+ </fingerprint>
2233
+
2234
+ <fingerprint pattern="^Spirent TestCenter IQ(?: - (?:Free )?Preview)?$">
2235
+ <description>Spirent TestCenter IQ</description>
2236
+ <example>Spirent TestCenter IQ</example>
2237
+ <example>Spirent TestCenter IQ - Free Preview</example>
2238
+ <example>Spirent TestCenter IQ - Preview</example>
2239
+ <param pos="0" name="service.vendor" value="Spirent Communications"/>
2240
+ <param pos="0" name="service.product" value="TestCenter IQ"/>
2241
+ </fingerprint>
2242
+
2243
+ <fingerprint pattern="^SABnzbd(?: - Log in)?$">
2244
+ <description>SABnzbd Newsreader</description>
2245
+ <example>SABnzbd</example>
2246
+ <example>SABnzbd - Log in</example>
2247
+ <param pos="0" name="service.vendor" value="SABnzbd"/>
2248
+ <param pos="0" name="service.product" value="SABnzbd"/>
2249
+ </fingerprint>
2250
+
2251
+ <fingerprint pattern="^(?:Zabbix|.*: Zabbix)$">
2252
+ <description>Zabbix</description>
2253
+ <example>Zabbix</example>
2254
+ <example>appliance: Zabbix</example>
2255
+ <param pos="0" name="service.vendor" value="Zabbix"/>
2256
+ <param pos="0" name="service.product" value="Zabbix"/>
2257
+ <param pos="0" name="service.cpe23" value="cpe:/a:zabbix:zabbix:-"/>
2258
+ </fingerprint>
2259
+
2260
+ <fingerprint pattern="^(\S+) \(build (\S+)\) - Info$">
2261
+ <description>DD-WRT</description>
2262
+ <example host.name="SubTerraVia-NUC" os.version="36104" os.build="36104">SubTerraVia-NUC (build 36104) - Info</example>
2263
+ <example host.name="DD-WRT" os.version="35030M" os.build="35030M">DD-WRT (build 35030M) - Info</example>
2264
+ <param pos="0" name="os.vendor" value="DD-WRT"/>
2265
+ <param pos="0" name="os.product" value="DD-WRT"/>
2266
+ <param pos="0" name="os.device" value="Router"/>
2267
+ <param pos="1" name="host.name"/>
2268
+ <param pos="2" name="os.version"/>
2269
+ <param pos="2" name="os.build"/>
2270
+ <param pos="0" name="os.cpe23" value="cpe:/o:dd-wrt:dd-wrt:{os.version}"/>
2271
+ </fingerprint>
2272
+
2273
+ <fingerprint pattern="^(?:Apache Druid|Druid Console|Legacy Coordinator Console)$">
2274
+ <description>Apache Druid</description>
2275
+ <example>Apache Druid</example>
2276
+ <example>Legacy Coordinator Console</example>
2277
+ <example>Druid Console</example>
2278
+ <param pos="0" name="service.vendor" value="Apache"/>
2279
+ <param pos="0" name="service.product" value="Druid"/>
2280
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:druid:-"/>
2281
+ </fingerprint>
2282
+
2283
+ <fingerprint pattern="^Gerrit Code Review$">
2284
+ <description>Gerrit Code Review</description>
2285
+ <example>Gerrit Code Review</example>
2286
+ <param pos="0" name="service.vendor" value="Gerrit"/>
2287
+ <param pos="0" name="service.product" value="Code Review"/>
2288
+ </fingerprint>
2289
+
2290
+ <fingerprint pattern=" - Ignition Gateway$">
2291
+ <description>Inductive Automation Ignition Gateway</description>
2292
+ <example>QA-ROBOT3 - Ignition Gateway</example>
2293
+ <example>Ignition 8.0 Demo Server - Ignition Gateway</example>
2294
+ <param pos="0" name="service.vendor" value="Inductive Automation"/>
2295
+ <param pos="0" name="service.product" value="Ignition Gateway"/>
2296
+ </fingerprint>
2297
+
2298
+ <fingerprint pattern="^Airflow(?: - (?:Login|DAGs))?$">
2299
+ <description>Apache Airflow</description>
2300
+ <example>Airflow</example>
2301
+ <example>Airflow - DAGs</example>
2302
+ <example>Airflow - Login</example>
2303
+ <param pos="0" name="service.vendor" value="Apache"/>
2304
+ <param pos="0" name="service.product" value="Airflow"/>
2305
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:airflow:-"/>
2306
+ </fingerprint>
2307
+
2308
+ <fingerprint pattern="^Cockroach Console$">
2309
+ <description>CockroachDB Console</description>
2310
+ <example>Cockroach Console</example>
2311
+ <param pos="0" name="service.vendor" value="Cockroach Labs"/>
2312
+ <param pos="0" name="service.product" value="CockroachDB"/>
2313
+ </fingerprint>
2314
+
2315
+ <fingerprint pattern="^(?:openmediavault control panel|OpenMediaVault web administration interface) - (\S+)$">
2316
+ <description>OpenMediaVault</description>
2317
+ <example host.name="raspberrypi">openmediavault control panel - raspberrypi</example>
2318
+ <example host.name="raspberrypi">OpenMediaVault web administration interface - raspberrypi</example>
2319
+ <param pos="0" name="os.vendor" value="OpenMediaVault"/>
2320
+ <param pos="0" name="os.family" value="Linux"/>
2321
+ <param pos="0" name="os.product" value="OpenMediaVault"/>
2322
+ <param pos="0" name="os.device" value="NAS"/>
2323
+ <param pos="1" name="host.name"/>
2324
+ </fingerprint>
2325
+
2326
+ <fingerprint pattern="^Log in to TeamCity .mdash; TeamCity$">
2327
+ <description>TeamCity</description>
2328
+ <example>Log in to TeamCity &amp;mdash; TeamCity</example>
2329
+ <param pos="0" name="service.vendor" value="JetBrains"/>
2330
+ <param pos="0" name="service.product" value="TeamCity"/>
2331
+ <param pos="0" name="service.cpe23" value="cpe:/a:jetbrains:teamcity:-"/>
2332
+ </fingerprint>
2333
+
2334
+ <fingerprint pattern="^Home - CUPS ([\d\.]+)$">
2335
+ <description>Apple CUPS</description>
2336
+ <example service.version="2.3.1">Home - CUPS 2.3.1</example>
2337
+ <param pos="0" name="service.vendor" value="Apple"/>
2338
+ <param pos="0" name="service.product" value="CUPS"/>
2339
+ <param pos="0" name="service.family" value="CUPS"/>
2340
+ <param pos="1" name="service.version"/>
2341
+ <param pos="0" name="service.cpe23" value="cpe:/a:apple:cups:{service.version}"/>
2342
+ </fingerprint>
2343
+
2344
+ <fingerprint pattern="^RUNDECK ENTERPRISE - Login$">
2345
+ <description>Rundeck Enterprise</description>
2346
+ <example>RUNDECK ENTERPRISE - Login</example>
2347
+ <param pos="0" name="service.vendor" value="Rundeck"/>
2348
+ <param pos="0" name="service.product" value="Rundeck Enterprise"/>
2349
+ </fingerprint>
2350
+
2351
+ <fingerprint pattern="^Rundeck - Login$">
2352
+ <description>Rundeck</description>
2353
+ <example>Rundeck - Login</example>
2354
+ <param pos="0" name="service.vendor" value="Rundeck"/>
2355
+ <param pos="0" name="service.product" value="Rundeck"/>
2356
+ <param pos="0" name="service.cpe23" value="cpe:/a:rundeck:rundeck:-"/>
2357
+ </fingerprint>
2358
+
2359
+ <fingerprint pattern="^CrushFTP WebInterface$">
2360
+ <description>CrushFTP Web</description>
2361
+ <example>CrushFTP WebInterface</example>
2362
+ <param pos="0" name="service.vendor" value="CrushFTP"/>
2363
+ <param pos="0" name="service.product" value="CrushFTP Web Interface"/>
2364
+ <param pos="0" name="service.certainty" value="0.5"/>
2365
+ </fingerprint>
2366
+
2367
+ <fingerprint pattern="^OpenEdge Explorer$">
2368
+ <description>Progress OpenEdge Explorer</description>
2369
+ <example>OpenEdge Explorer</example>
2370
+ <param pos="0" name="service.vendor" value="Progress"/>
2371
+ <param pos="0" name="service.product" value="OpenEdge Explorer"/>
2372
+ </fingerprint>
2373
+
2374
+ <fingerprint pattern="^Consul by HashiCorp$">
2375
+ <description>HashiCorp Consul</description>
2376
+ <example>Consul by HashiCorp</example>
2377
+ <param pos="0" name="service.vendor" value="HashiCorp"/>
2378
+ <param pos="0" name="service.product" value="Consul"/>
2379
+ <param pos="0" name="service.cpe23" value="cpe:/a:hashicorp:consul:-"/>
2380
+ </fingerprint>
2381
+
2382
+ <fingerprint pattern="^Redmine(?: 500 error)?$">
2383
+ <description>Redmine</description>
2384
+ <example>Redmine</example>
2385
+ <param pos="0" name="service.vendor" value="Redmine"/>
2386
+ <param pos="0" name="service.product" value="Redmine"/>
2387
+ <param pos="0" name="service.cpe23" value="cpe:/a:redmine:redmine:-"/>
2388
+ </fingerprint>
2389
+
2390
+ <fingerprint pattern="; Nagios Log Server$">
2391
+ <description>Nagios Log Server</description>
2392
+ <example>Database Offline &amp;middot; Nagios Log Server</example>
2393
+ <param pos="0" name="service.vendor" value="Nagios"/>
2394
+ <param pos="0" name="service.product" value="Nagios Log Server"/>
2395
+ </fingerprint>
2396
+
2397
+ <fingerprint pattern="; Nagios Network Analyzer$">
2398
+ <description>Nagios Network Analyzer</description>
2399
+ <example>Login &amp;bull; Nagios Network Analyzer</example>
2400
+ <example>Licensing &amp;bull; Nagios Network Analyzer</example>
2401
+ <param pos="0" name="service.vendor" value="Nagios"/>
2402
+ <param pos="0" name="service.product" value="Nagios Network Analyzer"/>
2403
+ </fingerprint>
2404
+
2405
+ <fingerprint pattern="^Zing Vision$">
2406
+ <description>Zing Vision</description>
2407
+ <example>Zing Vision</example>
2408
+ <param pos="0" name="service.vendor" value="Azul Systems"/>
2409
+ <param pos="0" name="service.product" value="Zing Vision"/>
2410
+ </fingerprint>
2411
+
2412
+ <fingerprint pattern="^Swagger (?:UI|Editor)$">
2413
+ <description>Swagger UI</description>
2414
+ <example>Swagger UI</example>
2415
+ <example>Swagger Editor</example>
2416
+ <param pos="0" name="service.vendor" value="Swagger"/>
2417
+ <param pos="0" name="service.product" value="UI"/>
2418
+ </fingerprint>
2419
+
2420
+ <fingerprint pattern="^Emby$">
2421
+ <description>Emby Media Server</description>
2422
+ <example>Emby</example>
2423
+ <param pos="0" name="service.vendor" value="Emby"/>
2424
+ <param pos="0" name="service.product" value="Web Client"/>
2425
+ <param pos="0" name="service.device" value="Media Server"/>
2426
+ </fingerprint>
2427
+
2428
+ <fingerprint pattern="^WS - Folding@home Work Server$">
2429
+ <description>Folding@home Work Server</description>
2430
+ <example>WS - Folding@home Work Server</example>
2431
+ <param pos="0" name="service.vendor" value="Folding@home"/>
2432
+ <param pos="0" name="service.product" value="Work Server"/>
2433
+ </fingerprint>
2434
+
2435
+ <fingerprint pattern="^Welcome to IBM Lotus Sametime$">
2436
+ <description>IBM Lotus Sametime</description>
2437
+ <example>Welcome to IBM Lotus Sametime</example>
2438
+ <param pos="0" name="service.vendor" value="IBM"/>
2439
+ <param pos="0" name="service.product" value="Lotus Sametime"/>
2440
+ <param pos="0" name="service.certainty" value="0.5"/>
2441
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_sametime:-"/>
2442
+ </fingerprint>
2443
+
2444
+ <fingerprint pattern="^HPE OfficeConnect Switch (.*)\s+(J\S+)$">
2445
+ <description>HPE OfficeConnect Switch</description>
2446
+ <example hw.product="1820 24G" hw.model="J9980A">HPE OfficeConnect Switch 1820 24G J9980A</example>
2447
+ <example hw.product="1820 8G" hw.model="J9979A">HPE OfficeConnect Switch 1820 8G J9979A</example>
2448
+ <example hw.product="1920S 24G 2SFP PoE+ (370W)" hw.model="JL385A">HPE OfficeConnect Switch 1920S 24G 2SFP PoE+ (370W) JL385A</example>
2449
+ <param pos="0" name="hw.vendor" value="HPE"/>
2450
+ <param pos="0" name="hw.device" value="Switch"/>
2451
+ <param pos="1" name="hw.product"/>
2452
+ <param pos="2" name="hw.model"/>
2453
+ </fingerprint>
2454
+
2455
+ <fingerprint pattern="^Device42$">
2456
+ <description>Device42 Virtual Appliance</description>
2457
+ <example>Device42</example>
2458
+ <param pos="0" name="os.vendor" value="Device42"/>
2459
+ <param pos="0" name="os.family" value="Linux"/>
2460
+ <param pos="0" name="os.product" value="Linux"/>
2461
+ <param pos="0" name="os.certainty" value="0.5"/>
2462
+ <param pos="0" name="hw.vendor" value="Device42"/>
2463
+ <param pos="0" name="hw.device" value="Network Appliance"/>
2464
+ <param pos="0" name="hw.product" value="Discovery"/>
2465
+ <param pos="0" name="hw.certainty" value="0.5"/>
2466
+ </fingerprint>
2467
+
2468
+ <fingerprint pattern="^SolarWinds Virtualization Manager$">
2469
+ <description>SolarWinds Virtualization Manager</description>
2470
+ <example>SolarWinds Virtualization Manager</example>
2471
+ <param pos="0" name="service.vendor" value="SolarWinds"/>
2472
+ <param pos="0" name="service.product" value="Virtualization Manager"/>
2473
+ </fingerprint>
2474
+
2475
+ <fingerprint pattern="^(?:Gitea: .*|LocalRepo|TurnKey Gitea)$">
2476
+ <description>Gitea</description>
2477
+ <example>Gitea: Git with a cup of tea</example>
2478
+ <example>TurnKey Gitea</example>
2479
+ <example>LocalRepo</example>
2480
+ <param pos="0" name="service.vendor" value="Gitea"/>
2481
+ <param pos="0" name="service.product" value="Gitea"/>
2482
+ <param pos="0" name="service.certainty" value="0.5"/>
2483
+ <param pos="0" name="service.cpe23" value="cpe:/a:gitea:gitea:-"/>
2484
+ </fingerprint>
2485
+
2486
+ <fingerprint pattern="^Metasploit$">
2487
+ <description>Metasploit Pro (and Community Edition Web UI)</description>
2488
+ <example>Metasploit</example>
2489
+ <param pos="0" name="service.vendor" value="Rapid7"/>
2490
+ <param pos="0" name="service.product" value="Metasploit Pro"/>
2491
+ </fingerprint>
2492
+
2493
+ <fingerprint pattern="^Makito X Decoder$">
2494
+ <description>Haivision Makito X Video Decoder</description>
2495
+ <example>Makito X Decoder</example>
2496
+ <param pos="0" name="hw.vendor" value="Haivision"/>
2497
+ <param pos="0" name="hw.device" value="Video Decoder"/>
2498
+ <param pos="0" name="hw.product" value="Makito X Decoder"/>
2499
+ </fingerprint>
2500
+
2501
+ <fingerprint pattern="^Ceph(?: Dashboard)?$">
2502
+ <description>Ceph Dashboard</description>
2503
+ <example>Ceph Dashboard</example>
2504
+ <example>Ceph</example>
2505
+ <param pos="0" name="service.vendor" value="Ceph"/>
2506
+ <param pos="0" name="service.product" value="Dashboard"/>
2507
+ </fingerprint>
2508
+
2509
+ <fingerprint pattern="^Scrutinizer$">
2510
+ <description>Plixer Scrutinizer</description>
2511
+ <example>Scrutinizer</example>
2512
+ <param pos="0" name="os.vendor" value="Plixer"/>
2513
+ <param pos="0" name="os.product" value="Linux"/>
2514
+ <param pos="0" name="os.certainty" value="0.5"/>
2515
+ <param pos="0" name="hw.vendor" value="Plixer"/>
2516
+ <param pos="0" name="hw.product" value="Scrutinizer"/>
2517
+ <param pos="0" name="hw.certainty" value="0.5"/>
2518
+ </fingerprint>
2519
+
2520
+ <fingerprint pattern="^Hortonworks SmartSense Tool is loading\.\.\.$">
2521
+ <description>Cloudera Hortonworks SmartSense Tool</description>
2522
+ <example>Hortonworks SmartSense Tool is loading...</example>
2523
+ <param pos="0" name="service.vendor" value="Cloudera"/>
2524
+ <param pos="0" name="service.product" value="SmartSense Tool"/>
2525
+ <param pos="0" name="service.certainty" value="0.5"/>
2526
+ </fingerprint>
2527
+
2528
+ <fingerprint pattern="^ownCloud$">
2529
+ <description>ownCloud</description>
2530
+ <example>ownCloud</example>
2531
+ <param pos="0" name="service.vendor" value="ownCloud"/>
2532
+ <param pos="0" name="service.product" value="ownCloud Server"/>
2533
+ <param pos="0" name="service.certainty" value="0.5"/>
2534
+ </fingerprint>
2535
+
2536
+ <fingerprint pattern="^Octopus Deploy$">
2537
+ <description>Octopus Deploy</description>
2538
+ <example>Octopus Deploy</example>
2539
+ <param pos="0" name="service.vendor" value="Octopus"/>
2540
+ <param pos="0" name="service.product" value="Deploy"/>
2541
+ <param pos="0" name="service.certainty" value="0.5"/>
2542
+ </fingerprint>
2543
+
2544
+ <fingerprint pattern="^Android Debug Database$">
2545
+ <description>Android Debug Database</description>
2546
+ <example>Android Debug Database</example>
2547
+ <param pos="0" name="service.vendor" value="Android Debug Database"/>
2548
+ <param pos="0" name="service.product" value="Android Debug Database"/>
2549
+ </fingerprint>
2550
+
2551
+ <fingerprint pattern="^RStudio Sign In$">
2552
+ <description>RStudio</description>
2553
+ <example>RStudio Sign In</example>
2554
+ <param pos="0" name="service.vendor" value="RStudio"/>
2555
+ <param pos="0" name="service.product" value="Connect"/>
2556
+ </fingerprint>
2557
+
2558
+ <fingerprint pattern="^(?:TurnKey Moodle|New Site)$">
2559
+ <description>Moodle</description>
2560
+ <example>TurnKey Moodle</example>
2561
+ <example>New Site</example>
2562
+ <param pos="0" name="service.vendor" value="Moodle"/>
2563
+ <param pos="0" name="service.product" value="Moodle CMS"/>
2564
+ <param pos="0" name="service.certainty" value="0.5"/>
2565
+ </fingerprint>
2566
+
2567
+ <fingerprint pattern="^ArchiveTeam Warrior$">
2568
+ <description>Internet Archive Warrior Appliance</description>
2569
+ <example>ArchiveTeam Warrior</example>
2570
+ <param pos="0" name="os.vendor" value="Internet Archive"/>
2571
+ <param pos="0" name="os.family" value="Linux"/>
2572
+ <param pos="0" name="os.product" value="Linux"/>
2573
+ <param pos="0" name="hw.vendor" value="Internet Archive"/>
2574
+ <param pos="0" name="hw.device" value="Storage Appliance"/>
2575
+ <param pos="0" name="hw.product" value="ArchiveTeam Warrior"/>
2576
+ </fingerprint>
2577
+
2578
+ <fingerprint pattern="^(?:Dashboard|Log In) - Confluence$">
2579
+ <description>Atlassian Confluence</description>
2580
+ <example>Dashboard - Confluence</example>
2581
+ <example>Log In - Confluence</example>
2582
+ <param pos="0" name="service.vendor" value="Atlassian"/>
2583
+ <param pos="0" name="service.product" value="Confluence"/>
2584
+ <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:confluence:-"/>
2585
+ </fingerprint>
2586
+
2587
+ <fingerprint pattern="^System Dashboard - ">
2588
+ <description>Atlassian Jira</description>
2589
+ <example>System Dashboard - Jira</example>
2590
+ <example>System Dashboard - [Dev Test JIRA]</example>
2591
+ <param pos="0" name="service.vendor" value="Atlassian"/>
2592
+ <param pos="0" name="service.product" value="Jira"/>
2593
+ <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:jira:-"/>
2594
+ </fingerprint>
2595
+
2596
+ <fingerprint pattern="^(?:Welcome to XAMPP|XAMPP for Linux)">
2597
+ <description>XAMPP Server</description>
2598
+ <example>Welcome to XAMPP</example>
2599
+ <example>XAMPP for Linux</example>
2600
+ <param pos="0" name="service.vendor" value="XAMPP"/>
2601
+ <param pos="0" name="service.product" value="XAMPP Server"/>
2602
+ </fingerprint>
2603
+
2604
+ <fingerprint pattern="^Greenbone Security (?:Assistant|Manager)">
2605
+ <description>Greenbone Security Scanner</description>
2606
+ <example>Greenbone Security Assistant</example>
2607
+ <example>Greenbone Security Manager</example>
2608
+ <param pos="0" name="service.vendor" value="Greenbone"/>
2609
+ <param pos="0" name="service.product" value="Security Scanner"/>
2610
+ </fingerprint>
2611
+
2612
+ <fingerprint pattern="^Kodi$">
2613
+ <description>Kodi Media Server</description>
2614
+ <example>Kodi</example>
2615
+ <param pos="0" name="service.vendor" value="Kodi"/>
2616
+ <param pos="0" name="service.product" value="Media Server"/>
2617
+ </fingerprint>
2618
+
2619
+ <fingerprint pattern="^(?:Drupal|TurnKey Drupal\d+|Select an installation profile)$">
2620
+ <description>Drupal CMS</description>
2621
+ <example>Drupal</example>
2622
+ <example>TurnKey Drupal8</example>
2623
+ <example>TurnKey Drupal7</example>
2624
+ <example>Select an installation profile</example>
2625
+ <param pos="0" name="service.vendor" value="Drupal"/>
2626
+ <param pos="0" name="service.product" value="CMS"/>
2627
+ </fingerprint>
2628
+
2629
+ <fingerprint pattern="^LibreNMS$">
2630
+ <description>LibreNMS</description>
2631
+ <example>LibreNMS</example>
2632
+ <param pos="0" name="service.vendor" value="LibreNMS"/>
2633
+ <param pos="0" name="service.product" value="LibreNMS"/>
2634
+ <param pos="0" name="service.cpe23" value="cpe:/a:librenms:librenms:-"/>
2635
+ </fingerprint>
2636
+
2637
+ <fingerprint pattern="^HDHomeRun Main Menu$">
2638
+ <description>HDHomeRun</description>
2639
+ <example>HDHomeRun Main Menu</example>
2640
+ <param pos="0" name="os.vendor" value="SiliconDust"/>
2641
+ <param pos="0" name="os.family" value="Linux"/>
2642
+ <param pos="0" name="os.product" value="Linux"/>
2643
+ <param pos="0" name="hw.vendor" value="SiliconDust"/>
2644
+ <param pos="0" name="hw.device" value="Media Server"/>
2645
+ <param pos="0" name="hw.product" value="HDHomeRun"/>
2646
+ </fingerprint>
2647
+
2648
+ <fingerprint pattern="^Kubernetes Dashboard$">
2649
+ <description>Kubernetes Dashboard</description>
2650
+ <example>Kubernetes Dashboard</example>
2651
+ <param pos="0" name="service.vendor" value="Kubernetes"/>
2652
+ <param pos="0" name="service.product" value="Dashboard"/>
2653
+ </fingerprint>
2654
+
2655
+ <fingerprint pattern="^SoundTouch Access Point Setup$">
2656
+ <description>Bose SoundTouch</description>
2657
+ <example>SoundTouch Access Point Setup</example>
2658
+ <param pos="0" name="hw.device" value="Network Audio"/>
2659
+ <param pos="0" name="hw.vendor" value="Bose"/>
2660
+ <param pos="0" name="hw.family" value="SoundTouch"/>
2661
+ <param pos="0" name="os.device" value="Network Audio"/>
2662
+ <param pos="0" name="os.vendor" value="Bose"/>
2663
+ <param pos="0" name="os.product" value="SoundTouch"/>
2664
+ </fingerprint>
2665
+
2666
+ <fingerprint pattern="^(?:embedded )?WS server test page$">
2667
+ <description>Dell iDRAC Websocket Endpoint</description>
2668
+ <example>WS server test page</example>
2669
+ <example>embedded WS server test page</example>
2670
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
2671
+ <param pos="0" name="hw.vendor" value="Dell"/>
2672
+ <param pos="0" name="hw.product" value="iDRAC"/>
2673
+ <param pos="0" name="hw.certainty" value="0.75"/>
2674
+ <param pos="0" name="os.vendor" value="Dell"/>
2675
+ <param pos="0" name="os.product" value="iDRAC Linux"/>
2676
+ <param pos="0" name="os .certainty" value="0.75"/>
2677
+ </fingerprint>
2678
+
2679
+ <fingerprint pattern="^Pulse Connect Secure - SSL">
2680
+ <description>Pulse Secure VPN</description>
2681
+ <example>Pulse Connect Secure - SSL</example>
2682
+ <param pos="0" name="os.vendor" value="Pulse Secure"/>
2683
+ <param pos="0" name="os.family" value="SSL-VPN"/>
2684
+ <param pos="0" name="os.device" value="SSL-VPN"/>
2685
+ <param pos="0" name="os.product" value="SSL-VPN"/>
2686
+ </fingerprint>
2687
+
2688
+ </fingerprints>