recog 2.3.8 → 2.3.13
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.gitignore +6 -0
- data/CONTRIBUTING.md +136 -37
- data/README.md +18 -16
- data/bin/recog_cleanup +16 -0
- data/bin/recog_standardize +30 -6
- data/cpe-remap.yaml +18 -2
- data/identifiers/README.md +9 -0
- data/identifiers/hw_device.txt +77 -0
- data/identifiers/hw_family.txt +96 -0
- data/identifiers/hw_product.txt +328 -0
- data/identifiers/os_architecture.txt +6 -6
- data/identifiers/os_device.txt +45 -3
- data/identifiers/os_family.txt +206 -41
- data/identifiers/os_product.txt +238 -17
- data/identifiers/service_family.txt +144 -57
- data/identifiers/service_product.txt +385 -83
- data/identifiers/vendor.txt +554 -68
- data/lib/recog/version.rb +1 -1
- data/requirements.txt +1 -1
- data/update_cpes.py +3 -0
- data/xml/apache_modules.xml +292 -5
- data/xml/apache_os.xml +41 -2
- data/xml/architecture.xml +11 -3
- data/xml/dns_versionbind.xml +191 -15
- data/xml/favicons.xml +1701 -0
- data/xml/ftp_banners.xml +250 -18
- data/xml/h323_callresp.xml +112 -12
- data/xml/hp_pjl_id.xml +47 -5
- data/xml/html_title.xml +1278 -25
- data/xml/http_cookies.xml +64 -9
- data/xml/http_servers.xml +1013 -96
- data/xml/http_wwwauth.xml +141 -26
- data/xml/imap_banners.xml +62 -13
- data/xml/ldap_searchresult.xml +81 -9
- data/xml/mdns_device-info_txt.xml +175 -2
- data/xml/mdns_workstation_txt.xml +4 -2
- data/xml/mysql_banners.xml +134 -7
- data/xml/mysql_error.xml +113 -6
- data/xml/nntp_banners.xml +10 -2
- data/xml/ntp_banners.xml +80 -4
- data/xml/operating_system.xml +89 -3
- data/xml/pop_banners.xml +87 -33
- data/xml/rsh_resp.xml +11 -2
- data/xml/rtsp_servers.xml +22 -2
- data/xml/sip_banners.xml +35 -4
- data/xml/sip_user_agents.xml +29 -2
- data/xml/smb_native_lm.xml +10 -2
- data/xml/smb_native_os.xml +79 -2
- data/xml/smtp_banners.xml +230 -9
- data/xml/smtp_debug.xml +6 -4
- data/xml/smtp_ehlo.xml +7 -5
- data/xml/smtp_expn.xml +13 -4
- data/xml/smtp_help.xml +23 -4
- data/xml/smtp_mailfrom.xml +5 -2
- data/xml/smtp_noop.xml +6 -5
- data/xml/smtp_quit.xml +5 -4
- data/xml/smtp_rcptto.xml +5 -2
- data/xml/smtp_rset.xml +4 -4
- data/xml/smtp_turn.xml +4 -4
- data/xml/smtp_vrfy.xml +14 -4
- data/xml/snmp_sysdescr.xml +733 -25
- data/xml/snmp_sysobjid.xml +47 -2
- data/xml/ssh_banners.xml +182 -8
- data/xml/telnet_banners.xml +493 -22
- data/xml/x11_banners.xml +26 -3
- data/xml/x509_issuers.xml +30 -6
- data/xml/x509_subjects.xml +200 -31
- metadata +8 -2
data/xml/hp_pjl_id.xml
CHANGED
@@ -1,17 +1,18 @@
|
|
1
|
-
<?xml version=
|
1
|
+
<?xml version='1.0' encoding='UTF-8'?>
|
2
2
|
<fingerprints protocol="pjl" database_type="service" preference="0.10">
|
3
3
|
<!--
|
4
4
|
For printers running the PJL protocol (usually on 9100/tcp), their type can be requested
|
5
5
|
by the INFO ID command. The printer types (strings surrounded by double quotes) are
|
6
6
|
matched against these patterns to fingerprint the printer.
|
7
|
-
|
8
7
|
'preference' notes: The value has been explicitly set to 0.10 due to the very loose
|
9
8
|
regex that is used here.
|
10
9
|
-->
|
10
|
+
|
11
11
|
<!--
|
12
12
|
LaserJet and Designjet are registered trademarks of HP. Therefore matching for the keywords
|
13
13
|
is sufficient for asserting all relevant information
|
14
14
|
-->
|
15
|
+
|
15
16
|
<fingerprint pattern="(?i)laserjet (.*)(?: series)?">
|
16
17
|
<description>HP JetDirect Printer</description>
|
17
18
|
<example>HP LaserJet 4100 Series</example>
|
@@ -27,6 +28,7 @@
|
|
27
28
|
<param pos="0" name="os.family" value="LaserJet"/>
|
28
29
|
<param pos="1" name="os.product"/>
|
29
30
|
</fingerprint>
|
31
|
+
|
30
32
|
<fingerprint pattern="(?i)(designjet \S+)">
|
31
33
|
<description>HP Designjet printer</description>
|
32
34
|
<example>hp designjet 110plus</example>
|
@@ -41,6 +43,7 @@
|
|
41
43
|
<param pos="0" name="os.device" value="Printer"/>
|
42
44
|
<param pos="1" name="os.product"/>
|
43
45
|
</fingerprint>
|
46
|
+
|
44
47
|
<fingerprint pattern="^Xerox ColorQube (\S+)$">
|
45
48
|
<description>Xerox ColorQube Multifunction Printer</description>
|
46
49
|
<example>Xerox ColorQube 8570DN</example>
|
@@ -51,6 +54,7 @@
|
|
51
54
|
<param pos="1" name="os.product"/>
|
52
55
|
<param pos="0" name="os.device" value="Multifunction Device"/>
|
53
56
|
</fingerprint>
|
57
|
+
|
54
58
|
<fingerprint pattern="^Brother (.+)$">
|
55
59
|
<description>Brother Printer</description>
|
56
60
|
<example>Brother HL-1660e</example>
|
@@ -58,7 +62,9 @@
|
|
58
62
|
<param pos="0" name="os.device" value="Printer"/>
|
59
63
|
<param pos="1" name="os.product"/>
|
60
64
|
</fingerprint>
|
65
|
+
|
61
66
|
<!-- Assert the product range as a product fingerprint. -->
|
67
|
+
|
62
68
|
<fingerprint pattern="^(iR ?\S+)">
|
63
69
|
<description>Canon iR multifunction device</description>
|
64
70
|
<example>iR 3180C EUR</example>
|
@@ -69,6 +75,7 @@
|
|
69
75
|
<param pos="0" name="os.device" value="Multifunction Device"/>
|
70
76
|
<param pos="1" name="os.product"/>
|
71
77
|
</fingerprint>
|
78
|
+
|
72
79
|
<fingerprint pattern="^(?:Dell (?:Color Laser |Laser Printer )?|(?:Color Laser |Laser Printer ))(\d+(?:n|cn|dn|cdn))(?: Color Laser| Laser Printer)?$">
|
73
80
|
<description>Dell Laser Printer</description>
|
74
81
|
<example>Dell Laser Printer 1710n</example>
|
@@ -86,6 +93,7 @@
|
|
86
93
|
<param pos="0" name="os.device" value="Printer"/>
|
87
94
|
<param pos="1" name="os.product"/>
|
88
95
|
</fingerprint>
|
96
|
+
|
89
97
|
<fingerprint pattern="^Dell (\d+(?:n|cn|dn|cdn)) MFP$">
|
90
98
|
<description>Dell Laser multifunction device</description>
|
91
99
|
<example>Dell 2135cn MFP</example>
|
@@ -95,6 +103,7 @@
|
|
95
103
|
<param pos="0" name="os.device" value="Multifunction Device"/>
|
96
104
|
<param pos="1" name="os.product"/>
|
97
105
|
</fingerprint>
|
106
|
+
|
98
107
|
<fingerprint pattern="^HP (\S+ Digital Sender)$">
|
99
108
|
<description>HP Digital Sender scanner</description>
|
100
109
|
<example>HP 9250C Digital Sender</example>
|
@@ -103,6 +112,7 @@
|
|
103
112
|
<param pos="0" name="os.family" value="Digital Sender"/>
|
104
113
|
<param pos="1" name="os.product"/>
|
105
114
|
</fingerprint>
|
115
|
+
|
106
116
|
<fingerprint pattern="^(?:IBM )?Infoprint(?: Color)? (\S+)$">
|
107
117
|
<description>IBM Infoprint Printer</description>
|
108
118
|
<param pos="0" name="os.vendor" value="IBM"/>
|
@@ -110,6 +120,7 @@
|
|
110
120
|
<param pos="0" name="os.device" value="Printer"/>
|
111
121
|
<param pos="1" name="os.product"/>
|
112
122
|
</fingerprint>
|
123
|
+
|
113
124
|
<fingerprint pattern="^KM-(.*)$">
|
114
125
|
<description>Konica Minolta printer</description>
|
115
126
|
<example>KM-5050</example>
|
@@ -117,6 +128,7 @@
|
|
117
128
|
<param pos="0" name="os.device" value="Printer"/>
|
118
129
|
<param pos="1" name="os.product"/>
|
119
130
|
</fingerprint>
|
131
|
+
|
120
132
|
<fingerprint pattern="^(FS-\S+MFP\S*)$">
|
121
133
|
<description>Kyocera Mita Multifunction device</description>
|
122
134
|
<example>FS-C2126MFP</example>
|
@@ -127,6 +139,7 @@
|
|
127
139
|
<param pos="0" name="os.family" value="FS"/>
|
128
140
|
<param pos="1" name="os.product"/>
|
129
141
|
</fingerprint>
|
142
|
+
|
130
143
|
<fingerprint pattern="^(FS-(?:C)?\d+(?:D|DN))$">
|
131
144
|
<description>Kyocera Mita Printer</description>
|
132
145
|
<example>FS-C8500DN</example>
|
@@ -137,6 +150,7 @@
|
|
137
150
|
<param pos="0" name="os.family" value="FS"/>
|
138
151
|
<param pos="1" name="os.product"/>
|
139
152
|
</fingerprint>
|
153
|
+
|
140
154
|
<fingerprint pattern="^(TASKalfa \S+)$">
|
141
155
|
<description>Kyocera Mita TASKalfa multifunction device</description>
|
142
156
|
<example>TASKalfa 300ci</example>
|
@@ -147,6 +161,7 @@
|
|
147
161
|
<param pos="0" name="os.family" value="TASKalfa"/>
|
148
162
|
<param pos="1" name="os.product"/>
|
149
163
|
</fingerprint>
|
164
|
+
|
150
165
|
<fingerprint pattern="^Lexmark (.*)$">
|
151
166
|
<description>Lexmark JetDirect printer</description>
|
152
167
|
<example>Lexmark C910</example>
|
@@ -156,6 +171,7 @@
|
|
156
171
|
<param pos="0" name="os.device" value="Printer"/>
|
157
172
|
<param pos="1" name="os.product"/>
|
158
173
|
</fingerprint>
|
174
|
+
|
159
175
|
<fingerprint pattern="(?i)^Oce (fx[^\s:]+):.*$">
|
160
176
|
<description>Oce FX series multifunction device</description>
|
161
177
|
<example os.product="fx3000">Oce fx3000:8C5-B29:Ver.D:U0707161719:B0601271355</example>
|
@@ -164,6 +180,7 @@
|
|
164
180
|
<param pos="0" name="os.device" value="Multifunction Device"/>
|
165
181
|
<param pos="1" name="os.product"/>
|
166
182
|
</fingerprint>
|
183
|
+
|
167
184
|
<fingerprint pattern="(?i)^Oce (VL\S+):.*$">
|
168
185
|
<description>Oce VarioLink multifunction device</description>
|
169
186
|
<example>Oce VL3200:8C5-D92:Ver.B</example>
|
@@ -172,16 +189,20 @@
|
|
172
189
|
<param pos="0" name="os.device" value="Multifunction Device"/>
|
173
190
|
<param pos="1" name="os.product"/>
|
174
191
|
</fingerprint>
|
192
|
+
|
175
193
|
<!-- IGI is Imagistics International, which was acquired by Oce.
|
176
194
|
I can't find MX-MBX3 or any variant online. -->
|
195
|
+
|
177
196
|
<fingerprint pattern="(?i)^OceIGI MX-\S+">
|
178
197
|
<description>Oce-acquired IGI printer</description>
|
179
198
|
<example>OceIGI MX-NBX3 02-Jul-07 14:47</example>
|
180
199
|
<param pos="0" name="os.vendor" value="Oce"/>
|
181
200
|
<param pos="0" name="os.device" value="Printer"/>
|
182
201
|
</fingerprint>
|
202
|
+
|
183
203
|
<!-- im3510/4510 is actually a range of model numbers, but asserting a range
|
184
204
|
of models as a product is preferableto asserting nothing. -->
|
205
|
+
|
185
206
|
<fingerprint pattern="(?i)^Imagistics (im\S+) (.+)">
|
186
207
|
<description>Oce IM series multifunction device</description>
|
187
208
|
<example>Imagistics im3510/4510 02-Aug-04 10:56</example>
|
@@ -192,7 +213,9 @@
|
|
192
213
|
<param pos="1" name="os.product"/>
|
193
214
|
<param pos="2" name="system.time"/>
|
194
215
|
</fingerprint>
|
216
|
+
|
195
217
|
<!-- C610 is a series; there are several models with suffixes n, dn, dtn, cdn -->
|
218
|
+
|
196
219
|
<fingerprint pattern="^OKI (C\d+)\S*$">
|
197
220
|
<description>Okidata color printer</description>
|
198
221
|
<example>OKI C610</example>
|
@@ -202,6 +225,7 @@
|
|
202
225
|
<param pos="0" name="os.device" value="Printer"/>
|
203
226
|
<param pos="1" name="os.product"/>
|
204
227
|
</fingerprint>
|
228
|
+
|
205
229
|
<fingerprint pattern="^OKI (MC\d+)\S*$">
|
206
230
|
<description>Okidata multifunction device</description>
|
207
231
|
<example>OKI MC860</example>
|
@@ -209,6 +233,7 @@
|
|
209
233
|
<param pos="0" name="os.device" value="Multifunction Device"/>
|
210
234
|
<param pos="1" name="os.product"/>
|
211
235
|
</fingerprint>
|
236
|
+
|
212
237
|
<fingerprint pattern="(?i)^RICOH ((?:Aficio|MP|SP) .*)$">
|
213
238
|
<description>Ricoh Aficio Printer</description>
|
214
239
|
<example>RICOH Aficio 2075</example>
|
@@ -220,8 +245,10 @@
|
|
220
245
|
<param pos="1" name="os.product"/>
|
221
246
|
<param pos="0" name="os.device" value="Printer"/>
|
222
247
|
</fingerprint>
|
248
|
+
|
223
249
|
<!-- NRG was acquired by Ricoh; classify NRG printers as such.
|
224
250
|
Be consistent with snmp_sysdescr.xml. -->
|
251
|
+
|
225
252
|
<fingerprint pattern="(?i)^NRG ([MS]P \S+)$">
|
226
253
|
<description>Ricoh NRG printer</description>
|
227
254
|
<example>NRG MP 171</example>
|
@@ -236,8 +263,10 @@
|
|
236
263
|
<param pos="0" name="os.device" value="Printer"/>
|
237
264
|
<param pos="1" name="os.product"/>
|
238
265
|
</fingerprint>
|
266
|
+
|
239
267
|
<!-- Gestetner == NRG, and was acquired by Ricoh.
|
240
268
|
Assert the range of products as os.product. -->
|
269
|
+
|
241
270
|
<fingerprint pattern="(?i)^Gestetner (MP\S+/DSc\S+)$">
|
242
271
|
<description>Ricoh Gestetner multifunction device</description>
|
243
272
|
<example>Gestetner MPC2500/DSc525</example>
|
@@ -245,6 +274,7 @@
|
|
245
274
|
<param pos="0" name="os.device" value="Multifunction Device"/>
|
246
275
|
<param pos="1" name="os.product"/>
|
247
276
|
</fingerprint>
|
277
|
+
|
248
278
|
<fingerprint pattern="(?i)^HYDRA$">
|
249
279
|
<description>RSI Hydra printer</description>
|
250
280
|
<example>HYDRA</example>
|
@@ -252,6 +282,7 @@
|
|
252
282
|
<param pos="0" name="os.device" value="Printer"/>
|
253
283
|
<param pos="0" name="os.product" value="Hydra"/>
|
254
284
|
</fingerprint>
|
285
|
+
|
255
286
|
<fingerprint pattern="(?i)^Savin (\S+)$">
|
256
287
|
<description>Savin Printer</description>
|
257
288
|
<example>SAVIN 4075</example>
|
@@ -259,6 +290,7 @@
|
|
259
290
|
<param pos="0" name="os.device" value="Printer"/>
|
260
291
|
<param pos="1" name="os.product"/>
|
261
292
|
</fingerprint>
|
293
|
+
|
262
294
|
<fingerprint pattern="(?i)^Samsung ((?:SCX|CLX)-\S+) Series$">
|
263
295
|
<description>Samsung multifunction device</description>
|
264
296
|
<example>Samsung SCX-5835_5935 Series</example>
|
@@ -267,6 +299,7 @@
|
|
267
299
|
<param pos="0" name="os.device" value="Multifunction Device"/>
|
268
300
|
<param pos="1" name="os.product"/>
|
269
301
|
</fingerprint>
|
302
|
+
|
270
303
|
<fingerprint pattern="(?i)^Samsung ((?:ML|CLP)-\S+) Series$">
|
271
304
|
<description>Samsung printer</description>
|
272
305
|
<example>Samsung CLP-680 Series</example>
|
@@ -275,6 +308,7 @@
|
|
275
308
|
<param pos="0" name="os.device" value="Printer"/>
|
276
309
|
<param pos="1" name="os.product"/>
|
277
310
|
</fingerprint>
|
311
|
+
|
278
312
|
<fingerprint pattern="(?i)^SHARP (\S+-\S+) .*$">
|
279
313
|
<description>Sharp Printer</description>
|
280
314
|
<example>Sharp MX-NBX3 18-Mar-08 10:22</example>
|
@@ -283,6 +317,7 @@
|
|
283
317
|
<param pos="0" name="os.device" value="Printer"/>
|
284
318
|
<param pos="1" name="os.product"/>
|
285
319
|
</fingerprint>
|
320
|
+
|
286
321
|
<fingerprint pattern="(?i)^Source Technologies (\S+)$">
|
287
322
|
<description>Source Technologies Printer</description>
|
288
323
|
<example>Source Technologies ST-9620</example>
|
@@ -290,7 +325,9 @@
|
|
290
325
|
<param pos="0" name="os.device" value="Printer"/>
|
291
326
|
<param pos="1" name="os.product"/>
|
292
327
|
</fingerprint>
|
328
|
+
|
293
329
|
<!-- Consistent with snmp_sysdescr.xml -->
|
330
|
+
|
294
331
|
<fingerprint pattern="^TOSHIBA (e-STUDIO\S+)(?:\s+.*)?" certainty="0.9">
|
295
332
|
<description>Toshiba e-STUDIO multifunction device</description>
|
296
333
|
<example>TOSHIBA e-STUDIO350 V468Z 20061013</example>
|
@@ -302,16 +339,16 @@
|
|
302
339
|
<param pos="0" name="os.device" value="Multifunction Device"/>
|
303
340
|
<param pos="1" name="os.product"/>
|
304
341
|
</fingerprint>
|
342
|
+
|
305
343
|
<!-- TODO:
|
306
344
|
Xerox AccXES devices are documented to return:
|
307
|
-
|
308
345
|
"<printer name> <release #>"
|
309
346
|
<FF>
|
310
|
-
|
311
347
|
In the above, <printer name> is the official product name of the
|
312
348
|
AccXES printer, and <release #> corresponds to a software release
|
313
349
|
number.
|
314
350
|
-->
|
351
|
+
|
315
352
|
<fingerprint pattern="^(?:ID=)?Xerox (Phaser \S+)$" certainty="0.9">
|
316
353
|
<description>Xerox Phaser Printer</description>
|
317
354
|
<example>Xerox Phaser 6180MFP-D</example>
|
@@ -321,6 +358,7 @@
|
|
321
358
|
<param pos="0" name="os.device" value="Printer"/>
|
322
359
|
<param pos="1" name="os.product"/>
|
323
360
|
</fingerprint>
|
361
|
+
|
324
362
|
<fingerprint pattern="^Xerox (WorkCentre .*)$" certainty="0.9">
|
325
363
|
<description>Xerox Workcentre Printer</description>
|
326
364
|
<example>Xerox WorkCentre 7425</example>
|
@@ -331,6 +369,7 @@
|
|
331
369
|
<param pos="1" name="os.product"/>
|
332
370
|
<param pos="0" name="os.device" value="Printer"/>
|
333
371
|
</fingerprint>
|
372
|
+
|
334
373
|
<fingerprint pattern="^(XC\S+)$" certainty="0.9">
|
335
374
|
<description>Xerox XC Printer</description>
|
336
375
|
<example>XC560</example>
|
@@ -339,6 +378,7 @@
|
|
339
378
|
<param pos="0" name="os.device" value="Printer"/>
|
340
379
|
<param pos="1" name="os.product"/>
|
341
380
|
</fingerprint>
|
381
|
+
|
342
382
|
<fingerprint pattern="^(DC\S+)$" certainty="0.9">
|
343
383
|
<description>Xerox DocuColor Printer</description>
|
344
384
|
<example>DC250</example>
|
@@ -347,6 +387,7 @@
|
|
347
387
|
<param pos="0" name="os.device" value="Printer"/>
|
348
388
|
<param pos="1" name="os.product"/>
|
349
389
|
</fingerprint>
|
390
|
+
|
350
391
|
<fingerprint pattern="^(EX\d+-\d+)$" certainty="0.9">
|
351
392
|
<description>Xerox EX Print Server, powered by EFI Fiery</description>
|
352
393
|
<example>EX4112-4127</example>
|
@@ -355,4 +396,5 @@
|
|
355
396
|
<param pos="0" name="os.device" value="Print server"/>
|
356
397
|
<param pos="1" name="os.product"/>
|
357
398
|
</fingerprint>
|
358
|
-
|
399
|
+
|
400
|
+
</fingerprints>
|
data/xml/html_title.xml
CHANGED
@@ -1,6 +1,27 @@
|
|
1
|
-
<?xml version=
|
1
|
+
<?xml version='1.0' encoding='UTF-8'?>
|
2
2
|
<fingerprints matches="html_title" database_type="service" preference="0.90">
|
3
3
|
<!-- HTML Title elements found in HTTP response bodies are matched against these patterns to fingerprint HTTP servers. -->
|
4
|
+
|
5
|
+
<fingerprint pattern="^301 Moved Permanently$">
|
6
|
+
<description>301 Moved Permanently - generic -- assert nothing.</description>
|
7
|
+
<example>301 Moved Permanently</example>
|
8
|
+
</fingerprint>
|
9
|
+
|
10
|
+
<fingerprint pattern="^400 Bad Request$">
|
11
|
+
<description>400 Bad Request - generic -- assert nothing.</description>
|
12
|
+
<example>400 Bad Request</example>
|
13
|
+
</fingerprint>
|
14
|
+
|
15
|
+
<fingerprint pattern="^401 Unauthorized$">
|
16
|
+
<description>401 Unauthorized - generic -- assert nothing.</description>
|
17
|
+
<example>401 Unauthorized</example>
|
18
|
+
</fingerprint>
|
19
|
+
|
20
|
+
<fingerprint pattern="^404 Not Found$">
|
21
|
+
<description>404 Not Found - generic -- assert nothing.</description>
|
22
|
+
<example>404 Not Found</example>
|
23
|
+
</fingerprint>
|
24
|
+
|
4
25
|
<fingerprint pattern="^Index of /">
|
5
26
|
<description>Apache HTTPD indexes</description>
|
6
27
|
<example>Index of /</example>
|
@@ -9,6 +30,7 @@
|
|
9
30
|
<param pos="0" name="service.family" value="Apache"/>
|
10
31
|
<param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
|
11
32
|
</fingerprint>
|
33
|
+
|
12
34
|
<fingerprint pattern="^Test Page for the Nginx HTTP Server on (?:the )?Amazon Linux(?: AMI)?$">
|
13
35
|
<description>Apache HTTPD default installation on Amazon Linux</description>
|
14
36
|
<example>Test Page for the Nginx HTTP Server on the Amazon Linux AMI</example>
|
@@ -21,6 +43,7 @@
|
|
21
43
|
<param pos="0" name="os.family" value="Linux"/>
|
22
44
|
<param pos="0" name="os.product" value="Linux AMI"/>
|
23
45
|
</fingerprint>
|
46
|
+
|
24
47
|
<fingerprint pattern="^Apache HTTP Server Test Page powered by CentOS$">
|
25
48
|
<description>Apache HTTPD default installation on CentOS</description>
|
26
49
|
<example>Apache HTTP Server Test Page powered by CentOS</example>
|
@@ -33,6 +56,7 @@
|
|
33
56
|
<param pos="0" name="os.product" value="Linux"/>
|
34
57
|
<param pos="0" name="os.cpe23" value="cpe:/o:centos:centos:-"/>
|
35
58
|
</fingerprint>
|
59
|
+
|
36
60
|
<fingerprint pattern="^Apache2 Debian Default Page: It works$">
|
37
61
|
<description>Apache HTTPD default installation on Debian</description>
|
38
62
|
<example>Apache2 Debian Default Page: It works</example>
|
@@ -44,6 +68,7 @@
|
|
44
68
|
<param pos="0" name="os.product" value="Linux"/>
|
45
69
|
<param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
|
46
70
|
</fingerprint>
|
71
|
+
|
47
72
|
<fingerprint pattern="^Apache2 Ubuntu Default Page: It works$">
|
48
73
|
<description>Apache HTTPD default installation on Ubuntu</description>
|
49
74
|
<example>Apache2 Ubuntu Default Page: It works</example>
|
@@ -55,6 +80,7 @@
|
|
55
80
|
<param pos="0" name="os.product" value="Linux"/>
|
56
81
|
<param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
|
57
82
|
</fingerprint>
|
83
|
+
|
58
84
|
<fingerprint pattern="^Sample Home Page for APACHEDFT Server$">
|
59
85
|
<description>IBM iSeries Apache Default Page</description>
|
60
86
|
<example>Sample Home Page for APACHEDFT Server</example>
|
@@ -67,6 +93,7 @@
|
|
67
93
|
<param pos="0" name="service.family" value="Apache"/>
|
68
94
|
<param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
|
69
95
|
</fingerprint>
|
96
|
+
|
70
97
|
<fingerprint pattern="^Apache Tomcat$">
|
71
98
|
<description>Apache Tomcat with no version</description>
|
72
99
|
<example>Apache Tomcat</example>
|
@@ -75,6 +102,7 @@
|
|
75
102
|
<param pos="0" name="service.family" value="Tomcat"/>
|
76
103
|
<param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:-"/>
|
77
104
|
</fingerprint>
|
105
|
+
|
78
106
|
<fingerprint pattern="^Apache Tomcat/(\S+)$">
|
79
107
|
<description>Apache tomcat with minimal version information</description>
|
80
108
|
<example service.version="8.0.32">Apache Tomcat/8.0.32</example>
|
@@ -84,13 +112,16 @@
|
|
84
112
|
<param pos="1" name="service.version"/>
|
85
113
|
<param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
|
86
114
|
</fingerprint>
|
115
|
+
|
87
116
|
<fingerprint pattern="^AiCloud">
|
88
117
|
<description>ASUS AiCloud</description>
|
89
118
|
<example>AiCloud</example>
|
90
119
|
<param pos="0" name="hw.vendor" value="Asus"/>
|
91
120
|
<param pos="0" name="hw.device" value="WAP"/>
|
92
121
|
</fingerprint>
|
122
|
+
|
93
123
|
<!-- HiSilicon is OEMd by a number of DVR manufacturers -->
|
124
|
+
|
94
125
|
<fingerprint pattern="^DVR Components Download$">
|
95
126
|
<description>Web server found on DVR and webcam servers sourced from HiSilicon</description>
|
96
127
|
<example>DVR Components Download</example>
|
@@ -100,6 +131,7 @@
|
|
100
131
|
<param pos="0" name="os.device" value="DVR"/>
|
101
132
|
<param pos="0" name="hw.device" value="DVR"/>
|
102
133
|
</fingerprint>
|
134
|
+
|
103
135
|
<fingerprint pattern="^FRITZ!Box$">
|
104
136
|
<description>AVM FRITZ!Box</description>
|
105
137
|
<example>FRITZ!Box</example>
|
@@ -107,6 +139,7 @@
|
|
107
139
|
<param pos="0" name="hw.device" value="WAP"/>
|
108
140
|
<param pos="0" name="hw.family" value="FRITZ!Box"/>
|
109
141
|
</fingerprint>
|
142
|
+
|
110
143
|
<fingerprint pattern="^FRITZ!Powerline$">
|
111
144
|
<description>AVM FRITZ!Powerline</description>
|
112
145
|
<example>FRITZ!Powerline</example>
|
@@ -114,13 +147,16 @@
|
|
114
147
|
<param pos="0" name="hw.device" value="Powerline"/>
|
115
148
|
<param pos="0" name="hw.family" value="FRITZ!Powerline"/>
|
116
149
|
</fingerprint>
|
117
|
-
|
150
|
+
|
151
|
+
<fingerprint pattern="^FRITZ!(?:WLAN )?Repeater$">
|
118
152
|
<description>FRITZ!WLAN Repeater</description>
|
119
153
|
<example>FRITZ!WLAN Repeater</example>
|
154
|
+
<example>FRITZ!Repeater</example>
|
120
155
|
<param pos="0" name="hw.vendor" value="AVM"/>
|
121
156
|
<param pos="0" name="hw.device" value="WLAN Repeater"/>
|
122
157
|
<param pos="0" name="hw.family" value="FRITZ!WLAN Repeater"/>
|
123
158
|
</fingerprint>
|
159
|
+
|
124
160
|
<fingerprint pattern="^cPanel Login$">
|
125
161
|
<description>cPanel</description>
|
126
162
|
<example>cPanel Login</example>
|
@@ -128,6 +164,7 @@
|
|
128
164
|
<param pos="0" name="service.product" value="cPanel"/>
|
129
165
|
<param pos="0" name="service.cpe23" value="cpe:/a:cpanel:cpanel:-"/>
|
130
166
|
</fingerprint>
|
167
|
+
|
131
168
|
<fingerprint pattern="^WHM Login$">
|
132
169
|
<description>cPanel Web Host Manager</description>
|
133
170
|
<example>WHM Login</example>
|
@@ -135,6 +172,7 @@
|
|
135
172
|
<param pos="0" name="service.product" value="WHM"/>
|
136
173
|
<param pos="0" name="service.cpe23" value="cpe:/a:cpanel:whm:-"/>
|
137
174
|
</fingerprint>
|
175
|
+
|
138
176
|
<fingerprint pattern="^Windows CE$">
|
139
177
|
<description>Windows CE</description>
|
140
178
|
<example>Windows CE</example>
|
@@ -143,6 +181,7 @@
|
|
143
181
|
<param pos="0" name="os.product" value="Windows CE"/>
|
144
182
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_ce:-"/>
|
145
183
|
</fingerprint>
|
184
|
+
|
146
185
|
<fingerprint pattern="^IIS7$">
|
147
186
|
<description>Default IIS 7</description>
|
148
187
|
<example>IIS7</example>
|
@@ -156,6 +195,7 @@
|
|
156
195
|
<param pos="0" name="os.product" value="Windows"/>
|
157
196
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
158
197
|
</fingerprint>
|
198
|
+
|
159
199
|
<fingerprint pattern="^Microsoft Internet Information Services 8">
|
160
200
|
<description>Default IIS 8</description>
|
161
201
|
<example>Microsoft Internet Information Services 8</example>
|
@@ -169,6 +209,7 @@
|
|
169
209
|
<param pos="0" name="os.product" value="Windows"/>
|
170
210
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
171
211
|
</fingerprint>
|
212
|
+
|
172
213
|
<fingerprint pattern="^IIS (\d\.\d) Detailed Error">
|
173
214
|
<description>IIS Detailed Error</description>
|
174
215
|
<example service.version="7.0">IIS 7.0 Detailed Error - 401.2 - Unauthorized</example>
|
@@ -184,6 +225,7 @@
|
|
184
225
|
<param pos="0" name="os.product" value="Windows"/>
|
185
226
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
186
227
|
</fingerprint>
|
228
|
+
|
187
229
|
<fingerprint pattern="^IIS Windows(?: Server)?$">
|
188
230
|
<description>Default IIS</description>
|
189
231
|
<example>IIS Windows</example>
|
@@ -197,6 +239,7 @@
|
|
197
239
|
<param pos="0" name="os.product" value="Windows"/>
|
198
240
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
199
241
|
</fingerprint>
|
242
|
+
|
200
243
|
<fingerprint pattern="^(?:NETIASPOT Management Console|Konsola zarzdzania NETIASPOT)$">
|
201
244
|
<description>Netia Spot wireless router</description>
|
202
245
|
<example>Konsola zarzdzania NETIASPOT</example>
|
@@ -205,6 +248,7 @@
|
|
205
248
|
<param pos="0" name="hw.product" value="Spot"/>
|
206
249
|
<param pos="0" name="hw.device" value="WAP"/>
|
207
250
|
</fingerprint>
|
251
|
+
|
208
252
|
<fingerprint pattern="^hue personal wireless lighting$">
|
209
253
|
<description>Philips Hue Personal Wireless Lighting</description>
|
210
254
|
<example>hue personal wireless lighting</example>
|
@@ -212,12 +256,15 @@
|
|
212
256
|
<param pos="0" name="hw.product" value="Hue"/>
|
213
257
|
<param pos="0" name="hw.device" value="Light Bulb"/>
|
214
258
|
</fingerprint>
|
259
|
+
|
215
260
|
<fingerprint pattern="LANDesk\(R\) Management Agent$">
|
216
261
|
<description>LANDesk Management Agent</description>
|
262
|
+
<example>LANDesk(R) Management Agent</example>
|
217
263
|
<param pos="0" name="service.vendor" value="LANDesk"/>
|
218
264
|
<param pos="0" name="service.product" value="Management Agent"/>
|
219
265
|
<param pos="0" name="service.family" value="Management Agent"/>
|
220
266
|
</fingerprint>
|
267
|
+
|
221
268
|
<fingerprint pattern="^(?:Parallels )?Plesk (?:(?:Onyx|Panel) )?([\d\.]+)$">
|
222
269
|
<description>Plesk web hosting platform with a version</description>
|
223
270
|
<example service.version="12.0.18">Plesk 12.0.18</example>
|
@@ -229,6 +276,7 @@
|
|
229
276
|
<param pos="1" name="service.version"/>
|
230
277
|
<param pos="0" name="service.cpe23" value="cpe:/a:parallels:parallels_plesk_panel:{service.version}"/>
|
231
278
|
</fingerprint>
|
279
|
+
|
232
280
|
<fingerprint pattern="^(?:Parallels )?Plesk (?:(?:Onyx|Panel) )?([\d\.]+) for Microsoft Windows$">
|
233
281
|
<description>Plesk web hosting platform with a version on Windows</description>
|
234
282
|
<example service.version="12.5.30">Plesk 12.5.30 for Microsoft Windows</example>
|
@@ -242,6 +290,7 @@
|
|
242
290
|
<param pos="0" name="os.product" value="Windows"/>
|
243
291
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
244
292
|
</fingerprint>
|
293
|
+
|
245
294
|
<fingerprint pattern="^(?i)Default (?:Parallels )?Plesk (?:Panel )?Page$">
|
246
295
|
<description>Plesk web hosting platform with no version</description>
|
247
296
|
<example>Default Parallels Plesk Panel Page</example>
|
@@ -251,12 +300,14 @@
|
|
251
300
|
<param pos="0" name="service.product" value="Plesk"/>
|
252
301
|
<param pos="0" name="service.cpe23" value="cpe:/a:parallels:parallels_plesk_panel:-"/>
|
253
302
|
</fingerprint>
|
303
|
+
|
254
304
|
<fingerprint pattern="^Web Viewer for Samsung DVR$">
|
255
305
|
<description>Samsung DVRs</description>
|
256
306
|
<example>Web Viewer for Samsung DVR</example>
|
257
307
|
<param pos="0" name="hw.vendor" value="Samsung"/>
|
258
308
|
<param pos="0" name="hw.device" value="DVR"/>
|
259
309
|
</fingerprint>
|
310
|
+
|
260
311
|
<fingerprint pattern="^(?i)(?:Dell )?Sonicwall - Authentication$">
|
261
312
|
<description>Sonicwall firewalls</description>
|
262
313
|
<example>SonicWall - Authentication</example>
|
@@ -264,6 +315,7 @@
|
|
264
315
|
<param pos="0" name="os.device" value="Firewall"/>
|
265
316
|
<param pos="0" name="os.family" value="SonicOS"/>
|
266
317
|
</fingerprint>
|
318
|
+
|
267
319
|
<fingerprint pattern="^(.*).nbsp;-.nbsp;Synology.nbsp;DiskStation$">
|
268
320
|
<description>Synology DiskStation</description>
|
269
321
|
<example host.name="DiskStation">DiskStation&nbsp;-&nbsp;Synology&nbsp;DiskStation</example>
|
@@ -277,6 +329,7 @@
|
|
277
329
|
<param pos="0" name="os.vendor" value="Synology"/>
|
278
330
|
<param pos="1" name="host.name"/>
|
279
331
|
</fingerprint>
|
332
|
+
|
280
333
|
<fingerprint pattern="Synology Web Station!$">
|
281
334
|
<description>Synology with WebStation web hosting</description>
|
282
335
|
<example>Hello! Welcome to Synology Web Station!</example>
|
@@ -289,6 +342,7 @@
|
|
289
342
|
<param pos="0" name="os.product" value="DSM"/>
|
290
343
|
<param pos="0" name="os.vendor" value="Synology"/>
|
291
344
|
</fingerprint>
|
345
|
+
|
292
346
|
<fingerprint pattern="^Web Filter Block Override$">
|
293
347
|
<description>Fortinet FortiGate/Fortiguard Web Filter</description>
|
294
348
|
<example>Web Filter Block Override</example>
|
@@ -301,12 +355,15 @@
|
|
301
355
|
<param pos="0" name="hw.family" value="FortiGate"/>
|
302
356
|
<param pos="0" name="hw.device" value="Firewall"/>
|
303
357
|
</fingerprint>
|
358
|
+
|
304
359
|
<!-- Various products by Ubiquiti networks -->
|
360
|
+
|
305
361
|
<fingerprint pattern="^Ubiquiti Networks$">
|
306
362
|
<description>Generic products by Ubiquiti Networks</description>
|
307
363
|
<example>Ubiquiti Networks</example>
|
308
364
|
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
309
365
|
</fingerprint>
|
366
|
+
|
310
367
|
<fingerprint pattern="^UniFi Security Gateway$">
|
311
368
|
<description>Ubiquiti Security Gateway</description>
|
312
369
|
<example>UniFi Security Gateway</example>
|
@@ -314,17 +371,34 @@
|
|
314
371
|
<param pos="0" name="hw.device" value="Router"/>
|
315
372
|
<param pos="0" name="hw.product" value="UniFi Security Gateway"/>
|
316
373
|
</fingerprint>
|
374
|
+
|
375
|
+
<fingerprint pattern="^Ubiquiti EdgeSwitch$">
|
376
|
+
<description>Ubiquiti EdgeSwitch</description>
|
377
|
+
<example>Ubiquiti EdgeSwitch</example>
|
378
|
+
<param pos="0" name="os.vendor" value="Ubiquiti"/>
|
379
|
+
<param pos="0" name="os.family" value="Linux"/>
|
380
|
+
<param pos="0" name="os.product" value="EdgeOS"/>
|
381
|
+
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
382
|
+
<param pos="0" name="hw.product" value="EdgeSwitch"/>
|
383
|
+
</fingerprint>
|
384
|
+
|
317
385
|
<fingerprint pattern="^EdgeOS$">
|
318
386
|
<description>Ubiquiti EdgeRouter/EdgeSwitch/etc</description>
|
319
387
|
<example>EdgeOS</example>
|
388
|
+
<param pos="0" name="os.vendor" value="Ubiquiti"/>
|
389
|
+
<param pos="0" name="os.family" value="Linux"/>
|
390
|
+
<param pos="0" name="os.product" value="EdgeOS"/>
|
320
391
|
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
321
392
|
</fingerprint>
|
322
|
-
|
393
|
+
|
394
|
+
<fingerprint pattern="^Cloud\s*Key$">
|
323
395
|
<description>Ubiquiti UniFi Cloud Key</description>
|
324
396
|
<example>CloudKey</example>
|
397
|
+
<example>Cloud Key</example>
|
325
398
|
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
326
399
|
<param pos="0" name="hw.product" value="UniFi Cloud Key"/>
|
327
400
|
</fingerprint>
|
401
|
+
|
328
402
|
<fingerprint pattern="^airCube$">
|
329
403
|
<description>Ubiquiti airCube WAP</description>
|
330
404
|
<example>airCube</example>
|
@@ -332,6 +406,7 @@
|
|
332
406
|
<param pos="0" name="hw.product" value="airCube"/>
|
333
407
|
<param pos="0" name="hw.device" value="WAP"/>
|
334
408
|
</fingerprint>
|
409
|
+
|
335
410
|
<fingerprint pattern="^UniFi Video$">
|
336
411
|
<description>Various UniFi Video web service</description>
|
337
412
|
<example>UniFi Video</example>
|
@@ -339,14 +414,17 @@
|
|
339
414
|
<param pos="0" name="service.product" value="UniFi Video"/>
|
340
415
|
<param pos="0" name="service.cpe23" value="cpe:/a:ui:unifi_video:-"/>
|
341
416
|
</fingerprint>
|
342
|
-
|
417
|
+
|
418
|
+
<fingerprint pattern="^(?:UniFi NVR: Software Portal|airVision: \[NVR\] - Software Portal)$">
|
343
419
|
<description>UniFi NVR for recording from UniFi video cameras</description>
|
344
420
|
<example>UniFi NVR: Software Portal</example>
|
421
|
+
<example>airVision: [NVR] - Software Portal</example>
|
345
422
|
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
346
423
|
<param pos="0" name="hw.family" value="UniFi"/>
|
347
424
|
<param pos="0" name="hw.product" value="UniFi NVR"/>
|
348
425
|
<param pos="0" name="hw.device" value="DVR"/>
|
349
426
|
</fingerprint>
|
427
|
+
|
350
428
|
<fingerprint pattern="^RomPager Embedded Web Server Toolkit$">
|
351
429
|
<description>Embedded HTTP server used by many vendors and device
|
352
430
|
types, including APC, 3Com, Andover Controls, Cisco VoIP, D-Link,
|
@@ -357,6 +435,7 @@
|
|
357
435
|
<param pos="0" name="service.vendor" value="Allegro Software"/>
|
358
436
|
<param pos="0" name="service.product" value="RomPager"/>
|
359
437
|
</fingerprint>
|
438
|
+
|
360
439
|
<fingerprint pattern="^RouterOS router configuration page$">
|
361
440
|
<description>MikroTik RouterOS router configuration page</description>
|
362
441
|
<example>RouterOS router configuration page</example>
|
@@ -367,6 +446,7 @@
|
|
367
446
|
<param pos="0" name="hw.vendor" value="MikroTik"/>
|
368
447
|
<param pos="0" name="hw.device" value="Router"/>
|
369
448
|
</fingerprint>
|
449
|
+
|
370
450
|
<fingerprint pattern="^(?:Welcome to nginx!|Test Page for the Nginx HTTP Server)$">
|
371
451
|
<description>Default OS-agnostic nginx</description>
|
372
452
|
<example>Welcome to nginx!</example>
|
@@ -376,6 +456,7 @@
|
|
376
456
|
<param pos="0" name="service.vendor" value="nginx"/>
|
377
457
|
<param pos="0" name="service.cpe23" value="cpe:/a:nginx:nginx:-"/>
|
378
458
|
</fingerprint>
|
459
|
+
|
379
460
|
<fingerprint pattern="^Test Page for the Nginx HTTP Server on (?:Fedora|EPEL)$">
|
380
461
|
<description>Default nginx on Fedora</description>
|
381
462
|
<example>Test Page for the Nginx HTTP Server on Fedora</example>
|
@@ -388,6 +469,7 @@
|
|
388
469
|
<param pos="0" name="os.product" value="Fedora Core Linux"/>
|
389
470
|
<param pos="0" name="os.cpe23" value="cpe:/o:redhat:fedora_core:-"/>
|
390
471
|
</fingerprint>
|
472
|
+
|
391
473
|
<fingerprint pattern="^Welcome to nginx on Debian!$">
|
392
474
|
<description>Default nginx on Debian</description>
|
393
475
|
<example>Welcome to nginx on Debian!</example>
|
@@ -399,19 +481,34 @@
|
|
399
481
|
<param pos="0" name="os.product" value="Linux"/>
|
400
482
|
<param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
|
401
483
|
</fingerprint>
|
484
|
+
|
402
485
|
<fingerprint pattern="^Eagle Eye Networks ">
|
403
486
|
<description>Eagle Eye Networks to manage IoT cameras home webpage</description>
|
404
487
|
<example>Eagle Eye Networks (Local)</example>
|
405
488
|
<param pos="0" name="hw.product" value="Bridge"/>
|
406
489
|
<param pos="0" name="hw.vendor" value="Eagle Eye Networks"/>
|
407
490
|
</fingerprint>
|
491
|
+
|
408
492
|
<fingerprint pattern="^Web Local Display Unauthorized$">
|
409
493
|
<description>Eagle Eye Networks to manage IoT cameras unauthorized webpage</description>
|
410
494
|
<example>Web Local Display Unauthorized</example>
|
411
|
-
<param pos="0" name="hw.product" value="
|
495
|
+
<param pos="0" name="hw.product" value="Bridge"/>
|
412
496
|
<param pos="0" name="hw.vendor" value="Eagle Eye Networks"/>
|
413
497
|
</fingerprint>
|
498
|
+
|
414
499
|
<!-- Netgear Products -->
|
500
|
+
|
501
|
+
<fingerprint pattern="^NETGEAR ReadyNAS$">
|
502
|
+
<description>NETGEAR ReadyNAS</description>
|
503
|
+
<example>NETGEAR ReadyNAS</example>
|
504
|
+
<param pos="0" name="os.vendor" value="Netgear"/>
|
505
|
+
<param pos="0" name="os.product" value="Linux"/>
|
506
|
+
<param pos="0" name="hw.vendor" value="Netgear"/>
|
507
|
+
<param pos="0" name="hw.device" value="NAS"/>
|
508
|
+
<param pos="0" name="hw.family" value="ReadyNAS"/>
|
509
|
+
<param pos="0" name="hw.product" value="ReadyNAS"/>
|
510
|
+
</fingerprint>
|
511
|
+
|
415
512
|
<fingerprint pattern="^(?:NETGEAR|NetGear) ([a-zA-Z0-9\-\+]+)$">
|
416
513
|
<description>Netgear Switches</description>
|
417
514
|
<example hw.product="GS108T">NETGEAR GS108T</example>
|
@@ -421,6 +518,7 @@
|
|
421
518
|
<param pos="0" name="hw.device" value="Switch"/>
|
422
519
|
<param pos="1" name="hw.product"/>
|
423
520
|
</fingerprint>
|
521
|
+
|
424
522
|
<fingerprint pattern="^(?:NETGEAR|NetGear) Router ([a-zA-Z0-9\-\+]+)$">
|
425
523
|
<description>Netgear Routers</description>
|
426
524
|
<example hw.product="WNR2000v4">NETGEAR Router WNR2000v4</example>
|
@@ -429,6 +527,7 @@
|
|
429
527
|
<param pos="0" name="hw.device" value="Router"/>
|
430
528
|
<param pos="1" name="hw.product"/>
|
431
529
|
</fingerprint>
|
530
|
+
|
432
531
|
<fingerprint pattern="^Netgear Prosafe Plus Switch$">
|
433
532
|
<description>Netgear Prosafe Plus Switch</description>
|
434
533
|
<example>Netgear Prosafe Plus Switch</example>
|
@@ -436,6 +535,7 @@
|
|
436
535
|
<param pos="0" name="hw.device" value="Switch"/>
|
437
536
|
<param pos="0" name="hw.product" value="Prosafe Plus"/>
|
438
537
|
</fingerprint>
|
538
|
+
|
439
539
|
<fingerprint pattern="^(.*).nbsp;Configuration and Management$">
|
440
540
|
<description>Digi Terminal Servers</description>
|
441
541
|
<example hw.product="Digi One SP">Digi One SP&nbsp;Configuration and Management</example>
|
@@ -448,6 +548,7 @@
|
|
448
548
|
<param pos="0" name="os.device" value="Device Server"/>
|
449
549
|
<param pos="0" name="os.product" value="NET+OS"/>
|
450
550
|
</fingerprint>
|
551
|
+
|
451
552
|
<fingerprint pattern="^NPort Web Console$">
|
452
553
|
<description>Moxa NPort Terminal Servers</description>
|
453
554
|
<example>NPort Web Console</example>
|
@@ -455,6 +556,7 @@
|
|
455
556
|
<param pos="0" name="hw.device" value="Device Server"/>
|
456
557
|
<param pos="0" name="hw.product" value="NPort"/>
|
457
558
|
</fingerprint>
|
559
|
+
|
458
560
|
<fingerprint pattern="^Lantronix (SL[BC].*)$">
|
459
561
|
<description>Lantronix terminal server</description>
|
460
562
|
<example hw.product="SLB882/8824">Lantronix SLB882/8824</example>
|
@@ -464,6 +566,7 @@
|
|
464
566
|
<param pos="0" name="hw.device" value="Device Server"/>
|
465
567
|
<param pos="1" name="hw.product"/>
|
466
568
|
</fingerprint>
|
569
|
+
|
467
570
|
<fingerprint pattern="^(KN\S+) - Cover$">
|
468
571
|
<description>ATEN KVM over IP</description>
|
469
572
|
<example hw.product="KN4140v">KN4140v - Cover</example>
|
@@ -472,6 +575,7 @@
|
|
472
575
|
<param pos="0" name="hw.device" value="KVM"/>
|
473
576
|
<param pos="1" name="hw.product"/>
|
474
577
|
</fingerprint>
|
578
|
+
|
475
579
|
<fingerprint pattern="^Ethernet Relay Module$">
|
476
580
|
<description>AVT.pl Ethernet Relay Module</description>
|
477
581
|
<example>Ethernet Relay Module</example>
|
@@ -479,6 +583,7 @@
|
|
479
583
|
<param pos="0" name="hw.device" value="Power Relay"/>
|
480
584
|
<param pos="0" name="hw.product" value="Ethernet Relay Module"/>
|
481
585
|
</fingerprint>
|
586
|
+
|
482
587
|
<fingerprint pattern="^Inveo Lantick Ethernet Relay Controller$">
|
483
588
|
<description>Inveo Lantick Ethernet Relay Controller</description>
|
484
589
|
<example>Inveo Lantick Ethernet Relay Controller</example>
|
@@ -486,6 +591,7 @@
|
|
486
591
|
<param pos="0" name="hw.device" value="Power Relay"/>
|
487
592
|
<param pos="0" name="hw.product" value="Lantick Ethernet Relay Controller"/>
|
488
593
|
</fingerprint>
|
594
|
+
|
489
595
|
<fingerprint pattern="^(myUTN(?:-[a-zA-Z0-9]+)?) Control Center$">
|
490
596
|
<description>myUTN Device Server</description>
|
491
597
|
<example hw.product="myUTN-50a">myUTN-50a Control Center</example>
|
@@ -494,6 +600,7 @@
|
|
494
600
|
<param pos="0" name="hw.device" value="Device Server"/>
|
495
601
|
<param pos="1" name="hw.product"/>
|
496
602
|
</fingerprint>
|
603
|
+
|
497
604
|
<fingerprint pattern="^iCOM Control Board$">
|
498
605
|
<description>Liebert iCOM Cooling Unit Control Board</description>
|
499
606
|
<example>iCOM Control Board</example>
|
@@ -501,6 +608,7 @@
|
|
501
608
|
<param pos="0" name="hw.device" value="Environment Control"/>
|
502
609
|
<param pos="0" name="hw.product" value="iCOM Control Panel"/>
|
503
610
|
</fingerprint>
|
611
|
+
|
504
612
|
<fingerprint pattern="^Sigma Control 2$">
|
505
613
|
<description>Sigma Control 2 Air Compressor Controls</description>
|
506
614
|
<example>Sigma Control 2</example>
|
@@ -508,12 +616,14 @@
|
|
508
616
|
<param pos="0" name="hw.device" value="Environment Control"/>
|
509
617
|
<param pos="0" name="hw.product" value="Sigma Control 2"/>
|
510
618
|
</fingerprint>
|
619
|
+
|
511
620
|
<fingerprint pattern="^WebPower$">
|
512
621
|
<description>Eltek Power Controller</description>
|
513
622
|
<example>WebPower</example>
|
514
623
|
<param pos="0" name="hw.vendor" value="Eltek"/>
|
515
624
|
<param pos="0" name="hw.device" value="Power device"/>
|
516
625
|
</fingerprint>
|
626
|
+
|
517
627
|
<fingerprint pattern="(Expert Power Control NET \d+x\d+) - (.*)$">
|
518
628
|
<description>Gude Expert Power Control</description>
|
519
629
|
<example host.name="Rack42" hw.product="Expert Power Control NET 2x6">Expert Power Control NET 2x6 - Rack42</example>
|
@@ -522,6 +632,7 @@
|
|
522
632
|
<param pos="1" name="hw.product"/>
|
523
633
|
<param pos="2" name="host.name"/>
|
524
634
|
</fingerprint>
|
635
|
+
|
525
636
|
<fingerprint pattern="^Sentry Switched CDU$">
|
526
637
|
<description>Sentry Switched CDU</description>
|
527
638
|
<example>Sentry Switched CDU</example>
|
@@ -529,6 +640,7 @@
|
|
529
640
|
<param pos="0" name="hw.device" value="Power device"/>
|
530
641
|
<param pos="0" name="hw.product" value="Sentry Switched CDU"/>
|
531
642
|
</fingerprint>
|
643
|
+
|
532
644
|
<fingerprint pattern="^Emerson Network Power Rack PDU Card$">
|
533
645
|
<description>Emerson Network Power Rack PDU Card</description>
|
534
646
|
<example>Emerson Network Power Rack PDU Card</example>
|
@@ -536,6 +648,7 @@
|
|
536
648
|
<param pos="0" name="hw.device" value="Power device"/>
|
537
649
|
<param pos="0" name="hw.product" value="Rack PDU Card"/>
|
538
650
|
</fingerprint>
|
651
|
+
|
539
652
|
<fingerprint pattern="^(.*) IntelliSlot Web(?:/\d+)? Card?$">
|
540
653
|
<description>Emerson Network Power IntelliSlot Web Card and rebrands</description>
|
541
654
|
<example hw.vendor="Emerson Network Power">Emerson Network Power IntelliSlot Web Card</example>
|
@@ -546,6 +659,7 @@
|
|
546
659
|
<param pos="0" name="hw.device" value="Power device"/>
|
547
660
|
<param pos="0" name="hw.product" value="IntelliSlot Web Card"/>
|
548
661
|
</fingerprint>
|
662
|
+
|
549
663
|
<fingerprint pattern="^ConnectUPS Web/SNMP Card$">
|
550
664
|
<description>ConnectUPS Web/SNMP Card</description>
|
551
665
|
<example>ConnectUPS Web/SNMP Card</example>
|
@@ -553,6 +667,7 @@
|
|
553
667
|
<param pos="0" name="hw.device" value="Power device"/>
|
554
668
|
<param pos="0" name="hw.product" value="ConnectUPS Web Card"/>
|
555
669
|
</fingerprint>
|
670
|
+
|
556
671
|
<fingerprint pattern="^Calient Technologies Inc\.$">
|
557
672
|
<description>Calient Photonic Switch</description>
|
558
673
|
<example>Calient Technologies Inc.</example>
|
@@ -563,6 +678,7 @@
|
|
563
678
|
<param pos="0" name="os.device" value="Switch"/>
|
564
679
|
<param pos="0" name="os.family" value="Linux"/>
|
565
680
|
</fingerprint>
|
681
|
+
|
566
682
|
<fingerprint pattern="^Google Fiber Network Box Diagnostics$">
|
567
683
|
<description>Google Fiber Router</description>
|
568
684
|
<example>Google Fiber Network Box Diagnostics</example>
|
@@ -570,6 +686,7 @@
|
|
570
686
|
<param pos="0" name="hw.device" value="Router"/>
|
571
687
|
<param pos="0" name="hw.product" value="Fiber Network Box"/>
|
572
688
|
</fingerprint>
|
689
|
+
|
573
690
|
<fingerprint pattern="ServerView.* (iRMC S\d+) Web Server">
|
574
691
|
<description>Fujitsu iRMC BMC</description>
|
575
692
|
<example hw.product="iRMC S3" os.product="iRMC S3">ServerView Remote Management iRMC S3 Web Server</example>
|
@@ -581,9 +698,11 @@
|
|
581
698
|
<param pos="0" name="os.vendor" value="Fujitsu"/>
|
582
699
|
<param pos="1" name="os.product"/>
|
583
700
|
</fingerprint>
|
584
|
-
|
585
|
-
|
701
|
+
|
702
|
+
<fingerprint pattern="^Cisco (?:UCS KVM Direct|KVM)$">
|
703
|
+
<description>Cisco KVM</description>
|
586
704
|
<example>Cisco UCS KVM Direct</example>
|
705
|
+
<example>Cisco KVM</example>
|
587
706
|
<param pos="0" name="hw.vendor" value="Cisco"/>
|
588
707
|
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
589
708
|
<param pos="0" name="hw.product" value="UCS Manager"/>
|
@@ -593,6 +712,7 @@
|
|
593
712
|
<param pos="0" name="os.certainty" value="0.8"/>
|
594
713
|
<param pos="0" name="os.cpe23" value="cpe:/o:cisco:nx-os:-"/>
|
595
714
|
</fingerprint>
|
715
|
+
|
596
716
|
<fingerprint pattern="^Cisco UCS Manager$">
|
597
717
|
<description>Cisco UCS Manager</description>
|
598
718
|
<example>Cisco UCS Manager</example>
|
@@ -605,6 +725,7 @@
|
|
605
725
|
<param pos="0" name="os.certainty" value="0.8"/>
|
606
726
|
<param pos="0" name="os.cpe23" value="cpe:/o:cisco:nx-os:-"/>
|
607
727
|
</fingerprint>
|
728
|
+
|
608
729
|
<fingerprint pattern="^Cisco (?:IMC Login|Integrated Management Controller)">
|
609
730
|
<description>Cisco Integrated Management Controller</description>
|
610
731
|
<example>Cisco Integrated Management Controller</example>
|
@@ -618,6 +739,26 @@
|
|
618
739
|
<param pos="0" name="os.family" value="Linux"/>
|
619
740
|
<param pos="0" name="os.product" value="IMC"/>
|
620
741
|
</fingerprint>
|
742
|
+
|
743
|
+
<fingerprint pattern="^Cisco Meeting Management$">
|
744
|
+
<description>Cisco Meeting Management Virtual Appliance</description>
|
745
|
+
<example>Cisco Meeting Management</example>
|
746
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
747
|
+
<param pos="0" name="hw.device" value="Video Conferencing"/>
|
748
|
+
<param pos="0" name="hw.product" value="Meeting Management"/>
|
749
|
+
<param pos="0" name="os.vendor" value="Cisco"/>
|
750
|
+
<param pos="0" name="os.family" value="Linux"/>
|
751
|
+
<param pos="0" name="os.product" value="Meeting Management"/>
|
752
|
+
</fingerprint>
|
753
|
+
|
754
|
+
<fingerprint pattern="^Cisco SON$">
|
755
|
+
<description>Cisco Crosswork SON</description>
|
756
|
+
<example>Cisco SON</example>
|
757
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
758
|
+
<param pos="0" name="hw.device" value="Network Management Device"/>
|
759
|
+
<param pos="0" name="hw.product" value="Crosswork SON Appliance"/>
|
760
|
+
</fingerprint>
|
761
|
+
|
621
762
|
<fingerprint pattern="^HPE Virtual Connect Manager$">
|
622
763
|
<description>HPE Virtual Connect Manager</description>
|
623
764
|
<example>HPE Virtual Connect Manager</example>
|
@@ -628,6 +769,7 @@
|
|
628
769
|
<param pos="0" name="os.device" value="Lights Out Management"/>
|
629
770
|
<param pos="0" name="os.product" value="iLO"/>
|
630
771
|
</fingerprint>
|
772
|
+
|
631
773
|
<fingerprint pattern="^HPE BladeSystem Onboard Administrator$">
|
632
774
|
<description>HPE BladeSystem Onboard Administrator</description>
|
633
775
|
<example>HPE BladeSystem Onboard Administrator</example>
|
@@ -635,6 +777,7 @@
|
|
635
777
|
<param pos="0" name="hw.vendor" value="HPE"/>
|
636
778
|
<param pos="0" name="hw.product" value="BladeSystem Onboard Administrator"/>
|
637
779
|
</fingerprint>
|
780
|
+
|
638
781
|
<fingerprint pattern="^HPE System Management Homepage$">
|
639
782
|
<description>HPE System Management Homepage</description>
|
640
783
|
<example>HPE System Management Homepage</example>
|
@@ -645,6 +788,7 @@
|
|
645
788
|
<param pos="0" name="os.device" value="Lights Out Management"/>
|
646
789
|
<param pos="0" name="os.product" value="iLO"/>
|
647
790
|
</fingerprint>
|
791
|
+
|
648
792
|
<fingerprint pattern="^HP Integrated Lights-Out$">
|
649
793
|
<description>HP Integrated Lights-Out</description>
|
650
794
|
<example>HP Integrated Lights-Out</example>
|
@@ -657,6 +801,7 @@
|
|
657
801
|
<param pos="0" name="os.family" value="iLO"/>
|
658
802
|
<param pos="0" name="os.product" value="iLO"/>
|
659
803
|
</fingerprint>
|
804
|
+
|
660
805
|
<fingerprint pattern="^HP Integrated Lights-Out 2$">
|
661
806
|
<description>HP Integrated Lights-Out 2</description>
|
662
807
|
<example>HP Integrated Lights-Out 2</example>
|
@@ -669,6 +814,7 @@
|
|
669
814
|
<param pos="0" name="os.family" value="iLO"/>
|
670
815
|
<param pos="0" name="os.product" value="iLO 2"/>
|
671
816
|
</fingerprint>
|
817
|
+
|
672
818
|
<fingerprint pattern="^(iLO \d+)$">
|
673
819
|
<description>HP Integrated Lights-Out 3+</description>
|
674
820
|
<example hw.product="iLO 3" os.product="iLO 3">iLO 3</example>
|
@@ -681,6 +827,7 @@
|
|
681
827
|
<param pos="0" name="os.family" value="iLO"/>
|
682
828
|
<param pos="1" name="os.product"/>
|
683
829
|
</fingerprint>
|
830
|
+
|
684
831
|
<fingerprint pattern="^HPE SimpliVity OmniStack$">
|
685
832
|
<description>HPE SimpliVity OmniStack</description>
|
686
833
|
<example>HPE SimpliVity OmniStack</example>
|
@@ -688,6 +835,7 @@
|
|
688
835
|
<param pos="0" name="hw.vendor" value="HPE"/>
|
689
836
|
<param pos="0" name="hw.product" value="SimpliVity OmniStack"/>
|
690
837
|
</fingerprint>
|
838
|
+
|
691
839
|
<fingerprint pattern="^HPE (StoreEver \S+)$">
|
692
840
|
<description>HPE StoreEver</description>
|
693
841
|
<example hw.product="StoreEver MSL3040">HPE StoreEver MSL3040</example>
|
@@ -695,6 +843,7 @@
|
|
695
843
|
<param pos="0" name="hw.vendor" value="HPE"/>
|
696
844
|
<param pos="1" name="hw.product"/>
|
697
845
|
</fingerprint>
|
846
|
+
|
698
847
|
<fingerprint pattern="^Dell OpenManage Switch Administrator$">
|
699
848
|
<description>Dell OpenManage Switch Administrator</description>
|
700
849
|
<example>Dell OpenManage Switch Administrator</example>
|
@@ -702,6 +851,7 @@
|
|
702
851
|
<param pos="0" name="hw.device" value="Switch"/>
|
703
852
|
<param pos="0" name="hw.product" value="OpenManage Switch"/>
|
704
853
|
</fingerprint>
|
854
|
+
|
705
855
|
<fingerprint pattern="^(\S+)\s+-\s+ProCurve Switch (\S+) \((.*)\)$">
|
706
856
|
<description>HPE ProCurve Switch w/Hostname</description>
|
707
857
|
<example host.name="SW1" hw.product="4204vl" procurve.model="J8770A">SW1 - ProCurve Switch 4204vl (J8770A)</example>
|
@@ -711,6 +861,7 @@
|
|
711
861
|
<param pos="1" name="host.name"/>
|
712
862
|
<param pos="3" name="procurve.model"/>
|
713
863
|
</fingerprint>
|
864
|
+
|
714
865
|
<fingerprint pattern="^ProCurve Switch (\S+) \((.*)\)$">
|
715
866
|
<description>HPE ProCurve Switch w/o Hostname</description>
|
716
867
|
<example hw.product="2610-24/12PWR" procurve.model="J9086A">ProCurve Switch 2610-24/12PWR (J9086A)</example>
|
@@ -719,6 +870,7 @@
|
|
719
870
|
<param pos="1" name="hw.product"/>
|
720
871
|
<param pos="2" name="procurve.model"/>
|
721
872
|
</fingerprint>
|
873
|
+
|
722
874
|
<fingerprint pattern="^FlexiPacket Hub$">
|
723
875
|
<description>Nokia Siemens FlexiPacket Hub</description>
|
724
876
|
<example>FlexiPacket Hub</example>
|
@@ -726,6 +878,7 @@
|
|
726
878
|
<param pos="0" name="hw.device" value="Switch"/>
|
727
879
|
<param pos="0" name="hw.product" value="FlexiPacket Hub"/>
|
728
880
|
</fingerprint>
|
881
|
+
|
729
882
|
<fingerprint pattern="^R&S Instrument VNC desktop$">
|
730
883
|
<description>Rohde and Schwarz Remote Instrument (vnc)</description>
|
731
884
|
<example>R&S Instrument VNC desktop</example>
|
@@ -735,12 +888,14 @@
|
|
735
888
|
<param pos="0" name="os.vendor" value="Rohde & Schwarz"/>
|
736
889
|
<param pos="0" name="os.family" value="Linux"/>
|
737
890
|
</fingerprint>
|
891
|
+
|
738
892
|
<fingerprint pattern="^Rohde & Schwarz remote instrument$">
|
739
893
|
<description>Rohde and Schwarz Remote Instrument (web admin)</description>
|
740
894
|
<example>Rohde & Schwarz remote instrument</example>
|
741
895
|
<param pos="0" name="hw.device" value="Test Instrument"/>
|
742
896
|
<param pos="0" name="hw.vendor" value="Rohde & Schwarz"/>
|
743
897
|
</fingerprint>
|
898
|
+
|
744
899
|
<fingerprint pattern="^EXA$">
|
745
900
|
<description>Keysight EXA Signal Analyzer</description>
|
746
901
|
<example>EXA</example>
|
@@ -749,6 +904,7 @@
|
|
749
904
|
<param pos="0" name="hw.product" value="EXA Signal Analyzer"/>
|
750
905
|
<param pos="0" name="os.device" value="Test Instrument"/>
|
751
906
|
</fingerprint>
|
907
|
+
|
752
908
|
<fingerprint pattern="^MXA$">
|
753
909
|
<description>Keysight MXA Signal Analyzer</description>
|
754
910
|
<example>MXA</example>
|
@@ -757,6 +913,7 @@
|
|
757
913
|
<param pos="0" name="hw.product" value="MXA Signal Analyzer"/>
|
758
914
|
<param pos="0" name="os.device" value="Test Instrument"/>
|
759
915
|
</fingerprint>
|
916
|
+
|
760
917
|
<fingerprint pattern="^Paragon-100G$">
|
761
918
|
<description>Calnex Paragon-100G</description>
|
762
919
|
<example>Paragon-100G</example>
|
@@ -764,6 +921,7 @@
|
|
764
921
|
<param pos="0" name="hw.device" value="Test Instrument"/>
|
765
922
|
<param pos="0" name="hw.product" value="Paragon-100G"/>
|
766
923
|
</fingerprint>
|
924
|
+
|
767
925
|
<fingerprint pattern="^33521A$">
|
768
926
|
<description>Keysight 33521A Waveform Generator</description>
|
769
927
|
<example>33521A</example>
|
@@ -771,6 +929,7 @@
|
|
771
929
|
<param pos="0" name="hw.device" value="Test Instrument"/>
|
772
930
|
<param pos="0" name="hw.product" value="33521A Waveform Generator"/>
|
773
931
|
</fingerprint>
|
932
|
+
|
774
933
|
<fingerprint pattern="^34972A$">
|
775
934
|
<description>Keysight 34972A Data Logger</description>
|
776
935
|
<example>34972A</example>
|
@@ -778,6 +937,7 @@
|
|
778
937
|
<param pos="0" name="hw.device" value="Test Instrument"/>
|
779
938
|
<param pos="0" name="hw.product" value="34972A Data Logger"/>
|
780
939
|
</fingerprint>
|
940
|
+
|
781
941
|
<fingerprint pattern="^53230A$">
|
782
942
|
<description>Agilent 53230A Frequency Counter</description>
|
783
943
|
<example>53230A</example>
|
@@ -785,6 +945,7 @@
|
|
785
945
|
<param pos="0" name="hw.device" value="Test Instrument"/>
|
786
946
|
<param pos="0" name="hw.product" value="53230A Frequency Counter"/>
|
787
947
|
</fingerprint>
|
948
|
+
|
788
949
|
<fingerprint pattern="^Agilent 33220A \((.*)\)$">
|
789
950
|
<description>Agilent 33220A</description>
|
790
951
|
<example agilent.serial="MY44041111">Agilent 33220A (MY44041111)</example>
|
@@ -793,6 +954,7 @@
|
|
793
954
|
<param pos="0" name="hw.product" value="33220A Waveform Generator"/>
|
794
955
|
<param pos="1" name="agilent.serial"/>
|
795
956
|
</fingerprint>
|
957
|
+
|
796
958
|
<fingerprint pattern="^Agilent N5172B (?:EXG )?(MY\S+)$">
|
797
959
|
<description>Agilent N5172B</description>
|
798
960
|
<example agilent.serial="MY44041111">Agilent N5172B EXG MY44041111</example>
|
@@ -801,6 +963,7 @@
|
|
801
963
|
<param pos="0" name="hw.product" value="N5172B Signal Generator"/>
|
802
964
|
<param pos="1" name="agilent.serial"/>
|
803
965
|
</fingerprint>
|
966
|
+
|
804
967
|
<fingerprint pattern="^Polycom - Configuration Utility$">
|
805
968
|
<description>Polycom IP Phone</description>
|
806
969
|
<example>Polycom - Configuration Utility</example>
|
@@ -810,12 +973,14 @@
|
|
810
973
|
<param pos="0" name="os.vendor" value="Polycom"/>
|
811
974
|
<param pos="0" name="os.product" value="Polycom"/>
|
812
975
|
</fingerprint>
|
976
|
+
|
813
977
|
<fingerprint pattern="^Digium Phone Settings$">
|
814
978
|
<description>Digium Phone Settings</description>
|
815
979
|
<example>Digium Phone Settings</example>
|
816
980
|
<param pos="0" name="hw.vendor" value="Digium"/>
|
817
981
|
<param pos="0" name="hw.device" value="VoIP"/>
|
818
982
|
</fingerprint>
|
983
|
+
|
819
984
|
<fingerprint pattern="^(SPA\S+) Configuration Utility$">
|
820
985
|
<description>Cisco IP Phone - SPA504G Configuration Utility</description>
|
821
986
|
<example hw.product="SPA504G">SPA504G Configuration Utility</example>
|
@@ -823,6 +988,7 @@
|
|
823
988
|
<param pos="0" name="hw.device" value="VoIP"/>
|
824
989
|
<param pos="1" name="hw.product"/>
|
825
990
|
</fingerprint>
|
991
|
+
|
826
992
|
<fingerprint pattern="^Cisco (?:SPA Configuration|IP Phone)$">
|
827
993
|
<description>Cisco IP Phone </description>
|
828
994
|
<example>Cisco SPA Configuration</example>
|
@@ -830,12 +996,14 @@
|
|
830
996
|
<param pos="0" name="hw.vendor" value="Cisco"/>
|
831
997
|
<param pos="0" name="hw.device" value="VoIP"/>
|
832
998
|
</fingerprint>
|
999
|
+
|
833
1000
|
<fingerprint pattern="^Cisco IP Camera$">
|
834
1001
|
<description>Cisco IP Camera</description>
|
835
1002
|
<example>Cisco IP Camera</example>
|
836
1003
|
<param pos="0" name="hw.vendor" value="Cisco"/>
|
837
1004
|
<param pos="0" name="hw.device" value="Web cam"/>
|
838
1005
|
</fingerprint>
|
1006
|
+
|
839
1007
|
<fingerprint pattern="^Cisco TelePresence MCU">
|
840
1008
|
<description>Cisco TelePresence MCU - Home page</description>
|
841
1009
|
<example>Cisco TelePresence MCU - Home page</example>
|
@@ -844,6 +1012,7 @@
|
|
844
1012
|
<param pos="0" name="hw.device" value="Video Conferencing"/>
|
845
1013
|
<param pos="0" name="hw.product" value="TelePresence MCU"/>
|
846
1014
|
</fingerprint>
|
1015
|
+
|
847
1016
|
<fingerprint pattern="^Cisco (Nexus \d+\S+)$">
|
848
1017
|
<description>Cisco Nexus Virtual Switch</description>
|
849
1018
|
<example hw.product="Nexus 1000V">Cisco Nexus 1000V</example>
|
@@ -851,6 +1020,7 @@
|
|
851
1020
|
<param pos="0" name="hw.device" value="Switch"/>
|
852
1021
|
<param pos="1" name="hw.product"/>
|
853
1022
|
</fingerprint>
|
1023
|
+
|
854
1024
|
<fingerprint pattern="^Cisco Catalyst Switch - Home$">
|
855
1025
|
<description>Cisco Catalyst Switch</description>
|
856
1026
|
<example>Cisco Catalyst Switch - Home</example>
|
@@ -861,6 +1031,7 @@
|
|
861
1031
|
<param pos="0" name="os.product" value="CatOS"/>
|
862
1032
|
<param pos="0" name="os.cpe23" value="cpe:/o:cisco:catos:-"/>
|
863
1033
|
</fingerprint>
|
1034
|
+
|
864
1035
|
<fingerprint pattern="^Cisco MDS 9000(?: and Nexus 5000)? Management Modules (\d+\.\d+\S+)$">
|
865
1036
|
<description>Cisco MDS 9000/Nexus 5000</description>
|
866
1037
|
<example os.version="7.3(1)D1(1)">Cisco MDS 9000 and Nexus 5000 Management Modules 7.3(1)D1(1)</example>
|
@@ -876,6 +1047,7 @@
|
|
876
1047
|
<param pos="1" name="os.version"/>
|
877
1048
|
<param pos="0" name="os.cpe23" value="cpe:/o:cisco:mds_9000:{os.version}"/>
|
878
1049
|
</fingerprint>
|
1050
|
+
|
879
1051
|
<fingerprint pattern="^Stealthwatch Management Console$">
|
880
1052
|
<description>Stealthwatch Management Console</description>
|
881
1053
|
<example>Stealthwatch Management Console</example>
|
@@ -886,6 +1058,7 @@
|
|
886
1058
|
<param pos="0" name="os.device" value="Security Appliance"/>
|
887
1059
|
<param pos="0" name="os.product" value="Stealthwatch"/>
|
888
1060
|
</fingerprint>
|
1061
|
+
|
889
1062
|
<fingerprint pattern="^Cisco vManage$">
|
890
1063
|
<description>Cisco vManage SD-WAN</description>
|
891
1064
|
<example>Cisco vManage</example>
|
@@ -896,6 +1069,7 @@
|
|
896
1069
|
<param pos="0" name="os.device" value="SD-WAN Appliance"/>
|
897
1070
|
<param pos="0" name="os.product" value="vManage"/>
|
898
1071
|
</fingerprint>
|
1072
|
+
|
899
1073
|
<fingerprint pattern="^Login - Cisco DNA Center$">
|
900
1074
|
<description>Cisco DNA Center Appliance</description>
|
901
1075
|
<example>Login - Cisco DNA Center</example>
|
@@ -906,6 +1080,7 @@
|
|
906
1080
|
<param pos="0" name="os.device" value="Network Management Device"/>
|
907
1081
|
<param pos="0" name="os.product" value="DNA Center"/>
|
908
1082
|
</fingerprint>
|
1083
|
+
|
909
1084
|
<fingerprint pattern="^Cisco (?:Enterprise )?NFVIS$">
|
910
1085
|
<description>Cisco NFVIS</description>
|
911
1086
|
<example>Cisco NFVIS</example>
|
@@ -917,16 +1092,20 @@
|
|
917
1092
|
<param pos="0" name="os.device" value="Network Management Device"/>
|
918
1093
|
<param pos="0" name="os.product" value="NFVIS"/>
|
919
1094
|
</fingerprint>
|
1095
|
+
|
920
1096
|
<fingerprint pattern="^Cisco Systems Login$">
|
921
1097
|
<description>Cisco WLC</description>
|
922
1098
|
<example>Cisco Systems Login</example>
|
923
1099
|
<param pos="0" name="os.vendor" value="Cisco"/>
|
924
1100
|
<param pos="0" name="os.device" value="Wireless Controller"/>
|
925
1101
|
<param pos="0" name="os.product" value="Wireless LAN Controller"/>
|
1102
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller:-"/>
|
926
1103
|
<param pos="0" name="hw.vendor" value="Cisco"/>
|
927
1104
|
<param pos="0" name="hw.device" value="Wireless Controller"/>
|
928
1105
|
<param pos="0" name="hw.product" value="Wireless LAN Controller"/>
|
1106
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:cisco:wireless_lan_controller:-"/>
|
929
1107
|
</fingerprint>
|
1108
|
+
|
930
1109
|
<fingerprint pattern="^Duo Access Gateway$">
|
931
1110
|
<description>Duo Access Gateway</description>
|
932
1111
|
<example>Duo Access Gateway</example>
|
@@ -937,6 +1116,7 @@
|
|
937
1116
|
<param pos="0" name="os.device" value="Security Appliance"/>
|
938
1117
|
<param pos="0" name="os.product" value="Access Gateway"/>
|
939
1118
|
</fingerprint>
|
1119
|
+
|
940
1120
|
<fingerprint pattern="^Login - Duo Network Gateway$">
|
941
1121
|
<description>Duo Network Gateway</description>
|
942
1122
|
<example>Login - Duo Network Gateway</example>
|
@@ -947,6 +1127,7 @@
|
|
947
1127
|
<param pos="0" name="os.device" value="Security Appliance"/>
|
948
1128
|
<param pos="0" name="os.product" value="Network Gateway"/>
|
949
1129
|
</fingerprint>
|
1130
|
+
|
950
1131
|
<fingerprint pattern="^VBrick Rev">
|
951
1132
|
<description>VBrick Rev</description>
|
952
1133
|
<example>VBrick Rev</example>
|
@@ -957,6 +1138,7 @@
|
|
957
1138
|
<param pos="0" name="os.device" value="Video Conferencing"/>
|
958
1139
|
<param pos="0" name="os.product" value="VBrick Rev"/>
|
959
1140
|
</fingerprint>
|
1141
|
+
|
960
1142
|
<fingerprint pattern="^(LinxVII-\S+) Remote Access$">
|
961
1143
|
<description>LinxVII-5S Data Terminal</description>
|
962
1144
|
<example hw.product="LinxVII-5S">LinxVII-5S Remote Access</example>
|
@@ -964,12 +1146,14 @@
|
|
964
1146
|
<param pos="0" name="hw.device" value="Data Terminal"/>
|
965
1147
|
<param pos="1" name="hw.product"/>
|
966
1148
|
</fingerprint>
|
1149
|
+
|
967
1150
|
<fingerprint pattern="^Datalogic Mobile Portable$">
|
968
1151
|
<description>Datalogic Mobile Portable</description>
|
969
1152
|
<example>Datalogic Mobile Portable</example>
|
970
1153
|
<param pos="0" name="hw.vendor" value="Datalogic Mobile"/>
|
971
1154
|
<param pos="0" name="hw.device" value="Handheld Scanner"/>
|
972
1155
|
</fingerprint>
|
1156
|
+
|
973
1157
|
<fingerprint pattern="^AXIS$">
|
974
1158
|
<description>Axis Communications Web Cam</description>
|
975
1159
|
<example>AXIS</example>
|
@@ -979,6 +1163,7 @@
|
|
979
1163
|
<param pos="0" name="os.family" value="Linux"/>
|
980
1164
|
<param pos="0" name="os.device" value="Web cam"/>
|
981
1165
|
</fingerprint>
|
1166
|
+
|
982
1167
|
<fingerprint pattern="^Hanwha Techwin$">
|
983
1168
|
<description>Hanwha Techwin IP Camera</description>
|
984
1169
|
<example>Hanwha Techwin</example>
|
@@ -988,6 +1173,7 @@
|
|
988
1173
|
<param pos="0" name="os.device" value="Web cam"/>
|
989
1174
|
<param pos="0" name="os.family" value="Linux"/>
|
990
1175
|
</fingerprint>
|
1176
|
+
|
991
1177
|
<fingerprint pattern="^(WV-NS\S+) Network Camera$">
|
992
1178
|
<description>WV-NS202A Network Camera</description>
|
993
1179
|
<example hw.product="WV-NS202A">WV-NS202A Network Camera</example>
|
@@ -999,15 +1185,29 @@
|
|
999
1185
|
<param pos="0" name="os.device" value="Web cam"/>
|
1000
1186
|
<param pos="0" name="os.family" value="Linux"/>
|
1001
1187
|
</fingerprint>
|
1002
|
-
|
1188
|
+
|
1189
|
+
<fingerprint pattern="^KACE (?:Systems Management|Systems Deployment|Remote Site) Appliance">
|
1003
1190
|
<description>KACE Systems Management Appliances</description>
|
1004
1191
|
<example>KACE Systems Management Appliance Service Center</example>
|
1005
1192
|
<example>KACE Systems Management Appliance Administrator Console</example>
|
1193
|
+
<example>KACE Systems Deployment Appliance</example>
|
1194
|
+
<example>KACE Remote Site Appliance</example>
|
1006
1195
|
<param pos="0" name="hw.vendor" value="KACE"/>
|
1007
1196
|
<param pos="0" name="hw.device" value="Support Appliance"/>
|
1008
1197
|
<param pos="0" name="os.vendor" value="KACE"/>
|
1009
1198
|
<param pos="0" name="os.family" value="FreeBSD"/>
|
1010
1199
|
</fingerprint>
|
1200
|
+
|
1201
|
+
<fingerprint pattern="^K1000 Service Center$">
|
1202
|
+
<description>Dell K1000 Systems Management Appliances (KACE)</description>
|
1203
|
+
<example>K1000 Service Center</example>
|
1204
|
+
<param pos="0" name="hw.vendor" value="KACE"/>
|
1205
|
+
<param pos="0" name="hw.device" value="Support Appliance"/>
|
1206
|
+
<param pos="0" name="hw.product" value="K1000"/>
|
1207
|
+
<param pos="0" name="os.vendor" value="KACE"/>
|
1208
|
+
<param pos="0" name="os.family" value="FreeBSD"/>
|
1209
|
+
</fingerprint>
|
1210
|
+
|
1011
1211
|
<fingerprint pattern="Portal.*Powered by BOMGAR$">
|
1012
1212
|
<description>Bomgar Appliances</description>
|
1013
1213
|
<example>Remote Support Portal | Powered by BOMGAR</example>
|
@@ -1017,6 +1217,7 @@
|
|
1017
1217
|
<param pos="0" name="os.vendor" value="Bomgar"/>
|
1018
1218
|
<param pos="0" name="os.family" value="Linux"/>
|
1019
1219
|
</fingerprint>
|
1220
|
+
|
1020
1221
|
<fingerprint pattern="^XRoads Network Appliance Administration$">
|
1021
1222
|
<description>XRoads SD-WAN Network Appliance </description>
|
1022
1223
|
<example>XRoads Network Appliance Administration</example>
|
@@ -1025,7 +1226,9 @@
|
|
1025
1226
|
<param pos="0" name="os.vendor" value="XRoads"/>
|
1026
1227
|
<param pos="0" name="os.family" value="Linux"/>
|
1027
1228
|
</fingerprint>
|
1229
|
+
|
1028
1230
|
<!-- An OEM of the Quantum Corporation SuperLoader 3 -->
|
1231
|
+
|
1029
1232
|
<fingerprint pattern="^On Board Remote Management$">
|
1030
1233
|
<description>PowerVault 124T Tape Library</description>
|
1031
1234
|
<example>On Board Remote Management</example>
|
@@ -1034,6 +1237,7 @@
|
|
1034
1237
|
<param pos="0" name="hw.product" value="PowerVault 124T"/>
|
1035
1238
|
<param pos="0" name="os.vendor" value="Dell"/>
|
1036
1239
|
</fingerprint>
|
1240
|
+
|
1037
1241
|
<fingerprint pattern="^(HD-RX-\S+)$">
|
1038
1242
|
<description>Crestron Multiformat Receivers</description>
|
1039
1243
|
<example hw.product="HD-RX-201-C-E">HD-RX-201-C-E</example>
|
@@ -1042,6 +1246,7 @@
|
|
1042
1246
|
<param pos="1" name="hw.product"/>
|
1043
1247
|
<param pos="0" name="os.vendor" value="Crestron"/>
|
1044
1248
|
</fingerprint>
|
1249
|
+
|
1045
1250
|
<fingerprint pattern="^Lencore Sound Manager 2$">
|
1046
1251
|
<description>Lencore Sound Manager 2</description>
|
1047
1252
|
<example>Lencore Sound Manager 2</example>
|
@@ -1051,7 +1256,9 @@
|
|
1051
1256
|
<param pos="0" name="os.vendor" value="i.LON"/>
|
1052
1257
|
<param pos="0" name="os.product" value="SmartServer"/>
|
1053
1258
|
</fingerprint>
|
1259
|
+
|
1054
1260
|
<!-- Various ICS/OT -->
|
1261
|
+
|
1055
1262
|
<fingerprint pattern="^CTI (25\S+) Main Menu$">
|
1056
1263
|
<description>Siemens 257x Ethernet Adapter (CTI Branded)</description>
|
1057
1264
|
<example hw.product="2572-A">CTI 2572-A Main Menu</example>
|
@@ -1060,6 +1267,7 @@
|
|
1060
1267
|
<param pos="1" name="hw.product"/>
|
1061
1268
|
<param pos="0" name="os.vendor" value="Siemens"/>
|
1062
1269
|
</fingerprint>
|
1270
|
+
|
1063
1271
|
<fingerprint pattern="^(25\S+) Ethernet TCP/IP Module$">
|
1064
1272
|
<description>Siemens 257x Ethernet Adapter</description>
|
1065
1273
|
<example hw.product="2572-B">2572-B Ethernet TCP/IP Module</example>
|
@@ -1068,6 +1276,7 @@
|
|
1068
1276
|
<param pos="1" name="hw.product"/>
|
1069
1277
|
<param pos="0" name="os.vendor" value="Siemens"/>
|
1070
1278
|
</fingerprint>
|
1279
|
+
|
1071
1280
|
<fingerprint pattern="^ECOM100 Main$">
|
1072
1281
|
<description>DirectLOGIC DL205 communication module</description>
|
1073
1282
|
<example>ECOM100 Main</example>
|
@@ -1076,6 +1285,7 @@
|
|
1076
1285
|
<param pos="0" name="hw.product" value="ECOM100"/>
|
1077
1286
|
<param pos="0" name="os.vendor" value="DirectLOGIC"/>
|
1078
1287
|
</fingerprint>
|
1288
|
+
|
1079
1289
|
<fingerprint pattern="^(1794-\S+) FLEX Ethernet Adapter$">
|
1080
1290
|
<description>Allen-Bradley 1794-AENTR FLEX Ethernet Adapter</description>
|
1081
1291
|
<example hw.product="1794-AENTR">1794-AENTR FLEX Ethernet Adapter</example>
|
@@ -1084,6 +1294,7 @@
|
|
1084
1294
|
<param pos="1" name="hw.product"/>
|
1085
1295
|
<param pos="0" name="os.vendor" value="Allen-Bradley"/>
|
1086
1296
|
</fingerprint>
|
1297
|
+
|
1087
1298
|
<fingerprint pattern="^Anybus-CC EtherNet/IP$">
|
1088
1299
|
<description>Anybus-CC EtherNet/IP</description>
|
1089
1300
|
<example>Anybus-CC EtherNet/IP</example>
|
@@ -1092,6 +1303,7 @@
|
|
1092
1303
|
<param pos="0" name="hw.product" value="CC EtherNet/IP"/>
|
1093
1304
|
<param pos="0" name="os.vendor" value="AnyBus"/>
|
1094
1305
|
</fingerprint>
|
1306
|
+
|
1095
1307
|
<fingerprint pattern="^Symmetry 2DBC">
|
1096
1308
|
<description>AMAG Technology Symmetry EN-2DBC Access Controller</description>
|
1097
1309
|
<example>Symmetry 2DBC STD APP (EN2DBC_00_EF_4F)</example>
|
@@ -1100,6 +1312,7 @@
|
|
1100
1312
|
<param pos="0" name="hw.product" value="Symmetry EN-2DBC"/>
|
1101
1313
|
<param pos="0" name="os.vendor" value="AMAG Technology"/>
|
1102
1314
|
</fingerprint>
|
1315
|
+
|
1103
1316
|
<fingerprint pattern="^(1747-\S+) Home Page$">
|
1104
1317
|
<description>Allen-Bradley 1747-LXXX SLC 5/05 Controller</description>
|
1105
1318
|
<example hw.product="1747-L551">1747-L551 Home Page</example>
|
@@ -1110,6 +1323,7 @@
|
|
1110
1323
|
<param pos="1" name="hw.product"/>
|
1111
1324
|
<param pos="0" name="os.vendor" value="Allen-Bradley"/>
|
1112
1325
|
</fingerprint>
|
1326
|
+
|
1113
1327
|
<fingerprint pattern="^(1766-\S+) (B/\S+)$">
|
1114
1328
|
<description>Allen-Bradley 1766-L32BXB PLC</description>
|
1115
1329
|
<example hw.product="1766-L32BXB" os.product="1766-L32BXB" os.version="B/11.00">1766-L32BXB B/11.00</example>
|
@@ -1121,6 +1335,7 @@
|
|
1121
1335
|
<param pos="1" name="os.product"/>
|
1122
1336
|
<param pos="2" name="os.version"/>
|
1123
1337
|
</fingerprint>
|
1338
|
+
|
1124
1339
|
<fingerprint pattern="^PLC-5 Ethernet Base Page$">
|
1125
1340
|
<description>PLC-5 Ethernet Interface Module</description>
|
1126
1341
|
<example>PLC-5 Ethernet Base Page</example>
|
@@ -1131,6 +1346,7 @@
|
|
1131
1346
|
<param pos="0" name="os.device" value="PLC"/>
|
1132
1347
|
<param pos="0" name="os.product" value="PLC-5"/>
|
1133
1348
|
</fingerprint>
|
1349
|
+
|
1134
1350
|
<fingerprint pattern="^(1761-NET-\S+)$">
|
1135
1351
|
<description>Allen-Bradley Ethernet Module</description>
|
1136
1352
|
<example hw.product="1761-NET-EN">1761-NET-EN</example>
|
@@ -1140,6 +1356,7 @@
|
|
1140
1356
|
<param pos="1" name="hw.product"/>
|
1141
1357
|
<param pos="0" name="os.vendor" value="Allen-Bradley"/>
|
1142
1358
|
</fingerprint>
|
1359
|
+
|
1143
1360
|
<fingerprint pattern="^(1785-\S+) Ethernet Base Page$">
|
1144
1361
|
<description>Allen-Bradley 1785 Ethernet Module</description>
|
1145
1362
|
<example hw.product="1785-ENET">1785-ENET Ethernet Base Page</example>
|
@@ -1148,6 +1365,7 @@
|
|
1148
1365
|
<param pos="1" name="hw.product"/>
|
1149
1366
|
<param pos="0" name="os.vendor" value="Allen-Bradley"/>
|
1150
1367
|
</fingerprint>
|
1368
|
+
|
1151
1369
|
<fingerprint pattern="^NFT S7 - DALI-Gateway\(Ethernet\)$">
|
1152
1370
|
<description>NFT DALI S7 Ethernet Module</description>
|
1153
1371
|
<example>NFT S7 - DALI-Gateway(Ethernet)</example>
|
@@ -1156,6 +1374,7 @@
|
|
1156
1374
|
<param pos="0" name="hw.product" value="S7 DALI Gateway"/>
|
1157
1375
|
<param pos="0" name="os.vendor" value="NFT"/>
|
1158
1376
|
</fingerprint>
|
1377
|
+
|
1159
1378
|
<fingerprint pattern="^IBHLink S7\+\+$">
|
1160
1379
|
<description>IBHsofte IBHLink S7++</description>
|
1161
1380
|
<example>IBHLink S7++</example>
|
@@ -1164,13 +1383,16 @@
|
|
1164
1383
|
<param pos="0" name="hw.product" value="IBHLink S7++"/>
|
1165
1384
|
<param pos="0" name="os.vendor" value="IBHsofte"/>
|
1166
1385
|
</fingerprint>
|
1386
|
+
|
1167
1387
|
<!-- Software and Appliances -->
|
1388
|
+
|
1168
1389
|
<fingerprint pattern="^S7/S5 OPC Server$">
|
1169
1390
|
<description>Softing Industrial S7/S5 OPC Server</description>
|
1170
1391
|
<example>S7/S5 OPC Server</example>
|
1171
1392
|
<param pos="0" name="service.vendor" value="Softing"/>
|
1172
1393
|
<param pos="0" name="service.product" value="S7/S5 OPC Server"/>
|
1173
1394
|
</fingerprint>
|
1395
|
+
|
1174
1396
|
<fingerprint pattern="^Nessus$">
|
1175
1397
|
<description>Nessus</description>
|
1176
1398
|
<example>Nessus</example>
|
@@ -1178,6 +1400,7 @@
|
|
1178
1400
|
<param pos="0" name="service.product" value="Nessus"/>
|
1179
1401
|
<param pos="0" name="service.cpe23" value="cpe:/a:tenable:nessus:-"/>
|
1180
1402
|
</fingerprint>
|
1403
|
+
|
1181
1404
|
<fingerprint pattern="^Tenable Appliance$">
|
1182
1405
|
<description>Tenable Appliance</description>
|
1183
1406
|
<example>Tenable Appliance</example>
|
@@ -1185,6 +1408,7 @@
|
|
1185
1408
|
<param pos="0" name="hw.device" value="Security Appliance"/>
|
1186
1409
|
<param pos="0" name="hw.product" value="Tenable Appliance"/>
|
1187
1410
|
</fingerprint>
|
1411
|
+
|
1188
1412
|
<fingerprint pattern="^(?:Welcome to Citrix )?XenServer ([0-9\.]+)$">
|
1189
1413
|
<description>XenServer</description>
|
1190
1414
|
<example service.version="7.2.0">Welcome to Citrix XenServer 7.2.0</example>
|
@@ -1194,18 +1418,21 @@
|
|
1194
1418
|
<param pos="1" name="service.version"/>
|
1195
1419
|
<param pos="0" name="service.cpe23" value="cpe:/a:citrix:xenserver:{service.version}"/>
|
1196
1420
|
</fingerprint>
|
1421
|
+
|
1197
1422
|
<fingerprint pattern="^RabbitMQ Management$">
|
1198
1423
|
<description>RabbitMQ Management</description>
|
1199
1424
|
<example>RabbitMQ Management</example>
|
1200
1425
|
<param pos="0" name="service.vendor" value="RabbitMQ"/>
|
1201
1426
|
<param pos="0" name="service.product" value="Management Server"/>
|
1202
1427
|
</fingerprint>
|
1428
|
+
|
1203
1429
|
<fingerprint pattern="^Statistics Report for HAProxy$">
|
1204
1430
|
<description>HAProxy Stats Server</description>
|
1205
1431
|
<example>Statistics Report for HAProxy</example>
|
1206
1432
|
<param pos="0" name="service.vendor" value="HAProxy"/>
|
1207
1433
|
<param pos="0" name="service.product" value="HAProxy Stats Server"/>
|
1208
1434
|
</fingerprint>
|
1435
|
+
|
1209
1436
|
<fingerprint pattern="^Open Manage&trade;$">
|
1210
1437
|
<description>Dell OpenManage Admin</description>
|
1211
1438
|
<example>Open Manage&trade;</example>
|
@@ -1213,6 +1440,7 @@
|
|
1213
1440
|
<param pos="0" name="service.product" value="OpenManage"/>
|
1214
1441
|
<param pos="0" name="service.cpe23" value="cpe:/a:dell:openmanage:-"/>
|
1215
1442
|
</fingerprint>
|
1443
|
+
|
1216
1444
|
<fingerprint pattern="^TightVNC desktop \[(.*)\]$">
|
1217
1445
|
<description>TightVNC Web Server</description>
|
1218
1446
|
<example host.name="teller01">TightVNC desktop [teller01]</example>
|
@@ -1221,6 +1449,7 @@
|
|
1221
1449
|
<param pos="0" name="service.cpe23" value="cpe:/a:tightvnc:tightvnc:-"/>
|
1222
1450
|
<param pos="1" name="host.name"/>
|
1223
1451
|
</fingerprint>
|
1452
|
+
|
1224
1453
|
<fingerprint pattern="^noVNC$">
|
1225
1454
|
<description>noVNC Web Server</description>
|
1226
1455
|
<example>noVNC</example>
|
@@ -1228,6 +1457,7 @@
|
|
1228
1457
|
<param pos="0" name="service.product" value="noVNC"/>
|
1229
1458
|
<param pos="0" name="service.cpe23" value="cpe:/a:novnc:novnc:-"/>
|
1230
1459
|
</fingerprint>
|
1460
|
+
|
1231
1461
|
<fingerprint pattern="^.* \[Jenkins\]$">
|
1232
1462
|
<description>Jenkins Customized Dashboard</description>
|
1233
1463
|
<example>Continuous Integrations [Jenkins]</example>
|
@@ -1236,24 +1466,36 @@
|
|
1236
1466
|
<param pos="0" name="service.product" value="Jenkins"/>
|
1237
1467
|
<param pos="0" name="service.cpe23" value="cpe:/a:jenkins:jenkins:-"/>
|
1238
1468
|
</fingerprint>
|
1469
|
+
|
1239
1470
|
<fingerprint pattern="^Shell In A Box$">
|
1240
1471
|
<description>Shell In A Box (OSS Project)</description>
|
1241
1472
|
<example>Shell In A Box</example>
|
1242
1473
|
<param pos="0" name="service.vendor" value="ShellInABox"/>
|
1243
1474
|
<param pos="0" name="service.product" value="ShellInABox"/>
|
1244
1475
|
</fingerprint>
|
1476
|
+
|
1245
1477
|
<fingerprint pattern="^AgilentLicenseManagerService Service$">
|
1246
1478
|
<description>Agilent License Manager Service</description>
|
1247
1479
|
<example>AgilentLicenseManagerService Service</example>
|
1248
1480
|
<param pos="0" name="service.vendor" value="Agilent"/>
|
1249
1481
|
<param pos="0" name="service.product" value="License Manager"/>
|
1250
1482
|
</fingerprint>
|
1251
|
-
|
1483
|
+
|
1484
|
+
<fingerprint pattern="^Red Hat(?:.reg;)? OpenStack (?:Platform )?Director$">
|
1252
1485
|
<description>Red Hat OpenStack Platform Director</description>
|
1253
1486
|
<example>Red Hat OpenStack Platform Director</example>
|
1487
|
+
<example>Red Hat&reg; OpenStack Director</example>
|
1254
1488
|
<param pos="0" name="service.vendor" value="Red Hat"/>
|
1255
1489
|
<param pos="0" name="service.product" value="Open Stack Platform Director"/>
|
1256
1490
|
</fingerprint>
|
1491
|
+
|
1492
|
+
<fingerprint pattern="^Login - OpenStack Dashboard$">
|
1493
|
+
<description>OpenStack Dashboard</description>
|
1494
|
+
<example>Login - OpenStack Dashboard</example>
|
1495
|
+
<param pos="0" name="service.vendor" value="OpenStack"/>
|
1496
|
+
<param pos="0" name="service.product" value="Dashboard"/>
|
1497
|
+
</fingerprint>
|
1498
|
+
|
1257
1499
|
<fingerprint pattern="^splunkd$">
|
1258
1500
|
<description>Splunk HTTP server used in the web interface, forwarders, indexers and more</description>
|
1259
1501
|
<example>splunkd</example>
|
@@ -1261,24 +1503,30 @@
|
|
1261
1503
|
<param pos="0" name="service.product" value="Splunk"/>
|
1262
1504
|
<param pos="0" name="service.cpe23" value="cpe:/a:splunk:splunk:-"/>
|
1263
1505
|
</fingerprint>
|
1264
|
-
|
1506
|
+
|
1507
|
+
<fingerprint pattern="^VMware(?: Horizon(?: View)?|.nbsp;Horizon| View Portal)?$">
|
1265
1508
|
<description>VMware Horizon</description>
|
1266
1509
|
<example>VMware Horizon</example>
|
1267
|
-
<
|
1510
|
+
<example>VMware Horizon View</example>
|
1511
|
+
<example>VMware&nbsp;Horizon</example>
|
1512
|
+
<example>VMware View Portal</example>
|
1513
|
+
<param pos="0" name="service.vendor" value="VMware"/>
|
1268
1514
|
<param pos="0" name="service.product" value="Horizon"/>
|
1269
1515
|
<param pos="0" name="service.cpe23" value="cpe:/a:vmware:horizon:-"/>
|
1270
1516
|
</fingerprint>
|
1517
|
+
|
1271
1518
|
<fingerprint pattern="^Welcome to VMware Site Recovery Manager$">
|
1272
1519
|
<description>VMware SRM</description>
|
1273
1520
|
<example>Welcome to VMware Site Recovery Manager</example>
|
1274
|
-
<param pos="0" name="os.vendor" value="
|
1521
|
+
<param pos="0" name="os.vendor" value="VMware"/>
|
1275
1522
|
<param pos="0" name="os.product" value="Linux"/>
|
1276
|
-
<param pos="0" name="hw.vendor" value="
|
1523
|
+
<param pos="0" name="hw.vendor" value="VMware"/>
|
1277
1524
|
<param pos="0" name="hw.device" value="Appliance"/>
|
1278
1525
|
<param pos="0" name="hw.product" value="Site Recovery Manager"/>
|
1279
|
-
<param pos="0" name="service.vendor" value="
|
1526
|
+
<param pos="0" name="service.vendor" value="VMware"/>
|
1280
1527
|
<param pos="0" name="service.product" value="Site Recovery Manager"/>
|
1281
1528
|
</fingerprint>
|
1529
|
+
|
1282
1530
|
<fingerprint pattern="^Graylog Web Interface$">
|
1283
1531
|
<description>Graylog Web Interface</description>
|
1284
1532
|
<example>Graylog Web Interface</example>
|
@@ -1286,14 +1534,17 @@
|
|
1286
1534
|
<param pos="0" name="service.product" value="Graylog"/>
|
1287
1535
|
<param pos="0" name="service.cpe23" value="cpe:/a:graylog:graylog:-"/>
|
1288
1536
|
</fingerprint>
|
1537
|
+
|
1289
1538
|
<!-- The 'vendor' here has changed over time -->
|
1290
|
-
|
1539
|
+
|
1540
|
+
<fingerprint pattern="^(?:Elastic\s+)?Kibana$">
|
1291
1541
|
<description>Kibana Web Interface</description>
|
1292
1542
|
<example>Kibana</example>
|
1293
|
-
<
|
1543
|
+
<example>Elastic Kibana</example>
|
1544
|
+
<param pos="0" name="service.vendor" value="Elastic"/>
|
1294
1545
|
<param pos="0" name="service.product" value="Kibana"/>
|
1295
|
-
<param pos="0" name="service.cpe23" value="cpe:/a:elasticsearch:kibana:-"/>
|
1296
1546
|
</fingerprint>
|
1547
|
+
|
1297
1548
|
<fingerprint pattern="^Grafana$">
|
1298
1549
|
<description>Grafana Web Interface</description>
|
1299
1550
|
<example>Grafana</example>
|
@@ -1301,6 +1552,15 @@
|
|
1301
1552
|
<param pos="0" name="service.product" value="Grafana"/>
|
1302
1553
|
<param pos="0" name="service.cpe23" value="cpe:/a:grafana:grafana:-"/>
|
1303
1554
|
</fingerprint>
|
1555
|
+
|
1556
|
+
<fingerprint pattern="^Prometheus Time Series Collection and Processing Server$">
|
1557
|
+
<description>Prometheus Web Interface</description>
|
1558
|
+
<example>Prometheus Time Series Collection and Processing Server</example>
|
1559
|
+
<param pos="0" name="service.vendor" value="Prometheus"/>
|
1560
|
+
<param pos="0" name="service.product" value="Prometheus"/>
|
1561
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:prometheus:prometheus:-"/>
|
1562
|
+
</fingerprint>
|
1563
|
+
|
1304
1564
|
<fingerprint pattern="^Symantec Endpoint Protection Manager$">
|
1305
1565
|
<description>Symantec Endpoint Protection Manager</description>
|
1306
1566
|
<example>Symantec Endpoint Protection Manager</example>
|
@@ -1308,18 +1568,14 @@
|
|
1308
1568
|
<param pos="0" name="service.product" value="Endpoint Protection Manager"/>
|
1309
1569
|
<param pos="0" name="service.cpe23" value="cpe:/a:symantec:endpoint_protection_manager:-"/>
|
1310
1570
|
</fingerprint>
|
1311
|
-
|
1312
|
-
<description>Kiwi Syslog Web Access</description>
|
1313
|
-
<example>Login Gateway - Kiwi Syslog Web Access</example>
|
1314
|
-
<param pos="0" name="service.vendor" value="Solarwinds"/>
|
1315
|
-
<param pos="0" name="service.product" value="Kiwi Syslog Web Access"/>
|
1316
|
-
</fingerprint>
|
1571
|
+
|
1317
1572
|
<fingerprint pattern="^Hadoop Administration$">
|
1318
1573
|
<description>Hadoop Administration Web Service</description>
|
1319
1574
|
<example>Hadoop Administration</example>
|
1320
1575
|
<param pos="0" name="service.vendor" value="Hadoop"/>
|
1321
1576
|
<param pos="0" name="service.product" value="Hadoop Web Admin"/>
|
1322
1577
|
</fingerprint>
|
1578
|
+
|
1323
1579
|
<fingerprint pattern="^ManageEngine OpManager$">
|
1324
1580
|
<description>ManageEngine OpManager</description>
|
1325
1581
|
<example>ManageEngine OpManager</example>
|
@@ -1327,8 +1583,17 @@
|
|
1327
1583
|
<param pos="0" name="service.product" value="OpManager"/>
|
1328
1584
|
<param pos="0" name="service.cpe23" value="cpe:/a:manageengine:opmanager:-"/>
|
1329
1585
|
</fingerprint>
|
1586
|
+
|
1587
|
+
<fingerprint pattern="^ManageEngine ADAudit Plus$">
|
1588
|
+
<description>ManageEngineADAudit Plus</description>
|
1589
|
+
<example>ManageEngine ADAudit Plus</example>
|
1590
|
+
<param pos="0" name="service.vendor" value="ManageEngine"/>
|
1591
|
+
<param pos="0" name="service.product" value="ADAudit Plus"/>
|
1592
|
+
</fingerprint>
|
1593
|
+
|
1330
1594
|
<fingerprint pattern="^(ScanFront \d.+)Web Menu$">
|
1331
1595
|
<!-- no space between the product model and "Web Menu" in the title -->
|
1596
|
+
|
1332
1597
|
<description>Canon ScanFront</description>
|
1333
1598
|
<example os.product="ScanFront 220" hw.product="ScanFront 220">ScanFront 220Web Menu</example>
|
1334
1599
|
<param pos="0" name="hw.device" value="Scanner"/>
|
@@ -1338,12 +1603,14 @@
|
|
1338
1603
|
<param pos="0" name="os.vendor" value="Canon"/>
|
1339
1604
|
<param pos="1" name="os.product"/>
|
1340
1605
|
</fingerprint>
|
1606
|
+
|
1341
1607
|
<fingerprint pattern="^CDVI Update$">
|
1342
1608
|
<description>CDVI Door Control System</description>
|
1343
1609
|
<example>CDVI Update</example>
|
1344
1610
|
<param pos="0" name="hw.vendor" value="CDVI"/>
|
1345
|
-
<param pos="0" name="hw.device" value="Access
|
1611
|
+
<param pos="0" name="hw.device" value="Access Control"/>
|
1346
1612
|
</fingerprint>
|
1613
|
+
|
1347
1614
|
<fingerprint pattern="^Liebert OpenComms Network Interface Card$">
|
1348
1615
|
<description>Liebert UPS</description>
|
1349
1616
|
<example>Liebert OpenComms Network Interface Card</example>
|
@@ -1352,6 +1619,7 @@
|
|
1352
1619
|
<param pos="0" name="os.device" value="Power device"/>
|
1353
1620
|
<param pos="0" name="os.vendor" value="Liebert"/>
|
1354
1621
|
</fingerprint>
|
1622
|
+
|
1355
1623
|
<fingerprint pattern="^Excella Main Page$">
|
1356
1624
|
<description>MagTek Excella STX Check Scanner</description>
|
1357
1625
|
<example>Excella Main Page</example>
|
@@ -1362,6 +1630,7 @@
|
|
1362
1630
|
<param pos="0" name="os.vendor" value="MagTek"/>
|
1363
1631
|
<param pos="0" name="os.product" value="Excella"/>
|
1364
1632
|
</fingerprint>
|
1633
|
+
|
1365
1634
|
<fingerprint pattern="^B426$">
|
1366
1635
|
<description>Bosch Security Systems Ethernet Module (Alarm Panel)</description>
|
1367
1636
|
<example>B426</example>
|
@@ -1370,6 +1639,7 @@
|
|
1370
1639
|
<param pos="0" name="os.device" value="Alarm Panel"/>
|
1371
1640
|
<param pos="0" name="os.vendor" value="Bosch"/>
|
1372
1641
|
</fingerprint>
|
1642
|
+
|
1373
1643
|
<fingerprint pattern="^Citrix Login$">
|
1374
1644
|
<description>Citrix NetScaler</description>
|
1375
1645
|
<example>Citrix Login</example>
|
@@ -1383,6 +1653,50 @@
|
|
1383
1653
|
<param pos="0" name="service.product" value="NetScaler"/>
|
1384
1654
|
<param pos="0" name="service.cpe23" value="cpe:/a:citrix:netscaler:-"/>
|
1385
1655
|
</fingerprint>
|
1656
|
+
|
1657
|
+
<fingerprint pattern="^Netscaler Gateway$">
|
1658
|
+
<description>Citrix Netscaler Gateway</description>
|
1659
|
+
<example>Netscaler Gateway</example>
|
1660
|
+
<param pos="0" name="os.vendor" value="Citrix"/>
|
1661
|
+
<param pos="0" name="os.family" value="NetScaler"/>
|
1662
|
+
<param pos="0" name="os.device" value="Network Management Device"/>
|
1663
|
+
<param pos="0" name="os.product" value="NetScaler Gateway"/>
|
1664
|
+
<param pos="0" name="service.vendor" value="Citrix"/>
|
1665
|
+
<param pos="0" name="service.family" value="NetScaler"/>
|
1666
|
+
<param pos="0" name="service.device" value="Network Management Device"/>
|
1667
|
+
<param pos="0" name="service.product" value="NetScaler Gateway"/>
|
1668
|
+
</fingerprint>
|
1669
|
+
|
1670
|
+
<fingerprint pattern="^Citrix (?:NetScaler SDX|ADC SDX)$">
|
1671
|
+
<description>Citrix NetScaler SDX Gateway</description>
|
1672
|
+
<example>Citrix NetScaler SDX</example>
|
1673
|
+
<example>Citrix ADC SDX</example>
|
1674
|
+
<param pos="0" name="os.vendor" value="Citrix"/>
|
1675
|
+
<param pos="0" name="os.family" value="NetScaler"/>
|
1676
|
+
<param pos="0" name="os.device" value="Network Management Device"/>
|
1677
|
+
<param pos="0" name="os.product" value="NetScaler SDX Gateway"/>
|
1678
|
+
<param pos="0" name="service.vendor" value="Citrix"/>
|
1679
|
+
<param pos="0" name="service.family" value="NetScaler"/>
|
1680
|
+
<param pos="0" name="service.device" value="Network Management Device"/>
|
1681
|
+
<param pos="0" name="service.product" value="NetScaler SDX Gateway"/>
|
1682
|
+
</fingerprint>
|
1683
|
+
|
1684
|
+
<fingerprint pattern="^Citrix NetScaler Insight Center$">
|
1685
|
+
<description>Citrix NetScaler Insight Center</description>
|
1686
|
+
<example>Citrix NetScaler Insight Center</example>
|
1687
|
+
<param pos="0" name="service.vendor" value="Citrix"/>
|
1688
|
+
<param pos="0" name="service.family" value="NetScaler"/>
|
1689
|
+
<param pos="0" name="service.product" value="NetScaler Insight Center"/>
|
1690
|
+
</fingerprint>
|
1691
|
+
|
1692
|
+
<fingerprint pattern="^Brother ([^\s]+) series$">
|
1693
|
+
<description>Brother Printers</description>
|
1694
|
+
<example hw.product="MFC-L5900DW">Brother MFC-L5900DW series</example>
|
1695
|
+
<param pos="0" name="hw.vendor" value="Brother"/>
|
1696
|
+
<param pos="0" name="hw.device" value="Printer"/>
|
1697
|
+
<param pos="1" name="hw.product"/>
|
1698
|
+
</fingerprint>
|
1699
|
+
|
1386
1700
|
<fingerprint pattern="^HP (?:Color )?LaserJet ([^&]+)&">
|
1387
1701
|
<description>HP LaserJet</description>
|
1388
1702
|
<example hw.product="M1536dnf MFP">HP LaserJet M1536dnf MFP&nbsp;&nbsp;&nbsp;1.1.1.1</example>
|
@@ -1391,6 +1705,7 @@
|
|
1391
1705
|
<param pos="0" name="hw.device" value="Printer"/>
|
1392
1706
|
<param pos="1" name="hw.product"/>
|
1393
1707
|
</fingerprint>
|
1708
|
+
|
1394
1709
|
<fingerprint pattern="^Jamf Pro Login - Jamf Pro v(\S+)$">
|
1395
1710
|
<description>Jamf Pro</description>
|
1396
1711
|
<example service.version="10.14.0-t1563397490">Jamf Pro Login - Jamf Pro v10.14.0-t1563397490</example>
|
@@ -1399,6 +1714,7 @@
|
|
1399
1714
|
<param pos="1" name="service.version"/>
|
1400
1715
|
<param pos="0" name="service.cpe23" value="cpe:/a:jamf:jamf:{service.version}"/>
|
1401
1716
|
</fingerprint>
|
1717
|
+
|
1402
1718
|
<fingerprint pattern="^Keyper Systems Administration - Login$">
|
1403
1719
|
<description>Keyper Systems Administration - Login</description>
|
1404
1720
|
<example>Keyper Systems Administration - Login</example>
|
@@ -1406,6 +1722,7 @@
|
|
1406
1722
|
<param pos="0" name="hw.device" value="Access Control"/>
|
1407
1723
|
<param pos="0" name="hw.product" value="Key Management"/>
|
1408
1724
|
</fingerprint>
|
1725
|
+
|
1409
1726
|
<fingerprint pattern="FireEye:\s*$">
|
1410
1727
|
<description>FireEye Investigation Analysis System Appliance</description>
|
1411
1728
|
<example>FireEye:</example>
|
@@ -1413,6 +1730,7 @@
|
|
1413
1730
|
<param pos="0" name="hw.product" value="IA Appliance"/>
|
1414
1731
|
<param pos="0" name="hw.device" value="Security Appliance"/>
|
1415
1732
|
</fingerprint>
|
1733
|
+
|
1416
1734
|
<fingerprint pattern="^GigaVUE-OS$">
|
1417
1735
|
<description>Gigamon GigaVUE Appliance</description>
|
1418
1736
|
<example>GigaVUE-OS</example>
|
@@ -1420,6 +1738,7 @@
|
|
1420
1738
|
<param pos="0" name="hw.device" value="Monitoring"/>
|
1421
1739
|
<param pos="0" name="hw.product" value="GigaVUE"/>
|
1422
1740
|
</fingerprint>
|
1741
|
+
|
1423
1742
|
<fingerprint pattern="^Pure Storage Login$">
|
1424
1743
|
<description>Pure Storage Appliance</description>
|
1425
1744
|
<example>Pure Storage Login</example>
|
@@ -1427,6 +1746,15 @@
|
|
1427
1746
|
<param pos="0" name="hw.device" value="NAS"/>
|
1428
1747
|
<param pos="0" name="hw.product" value="Appliance"/>
|
1429
1748
|
</fingerprint>
|
1749
|
+
|
1750
|
+
<fingerprint pattern="^Axonius Cybersecurity Asset Management Platform$">
|
1751
|
+
<description>Axonius Appliance</description>
|
1752
|
+
<example>Axonius Cybersecurity Asset Management Platform</example>
|
1753
|
+
<param pos="0" name="hw.vendor" value="Axonius"/>
|
1754
|
+
<param pos="0" name="hw.device" value="Security Appliance"/>
|
1755
|
+
<param pos="0" name="hw.product" value="Asset Management"/>
|
1756
|
+
</fingerprint>
|
1757
|
+
|
1430
1758
|
<fingerprint pattern="^CRESTRON$">
|
1431
1759
|
<description>Crestron Video Conferencing</description>
|
1432
1760
|
<example>CRESTRON</example>
|
@@ -1436,6 +1764,7 @@
|
|
1436
1764
|
<param pos="0" name="os.family" value="Linux"/>
|
1437
1765
|
<param pos="0" name="os.device" value="Video Conferencing"/>
|
1438
1766
|
</fingerprint>
|
1767
|
+
|
1439
1768
|
<fingerprint pattern="^ELAN Viewer Installation$">
|
1440
1769
|
<description>ELAN Smart Home Controller</description>
|
1441
1770
|
<example>ELAN Viewer Installation</example>
|
@@ -1445,6 +1774,7 @@
|
|
1445
1774
|
<param pos="0" name="os.vendor" value="ELAN"/>
|
1446
1775
|
<param pos="0" name="os.family" value="Linux"/>
|
1447
1776
|
</fingerprint>
|
1777
|
+
|
1448
1778
|
<fingerprint pattern="^iTach IP2IR Setup and Configuration$">
|
1449
1779
|
<description>iTach IP2IR</description>
|
1450
1780
|
<example>iTach IP2IR Setup and Configuration</example>
|
@@ -1452,4 +1782,927 @@
|
|
1452
1782
|
<param pos="0" name="hw.device" value="Device"/>
|
1453
1783
|
<param pos="0" name="hw.product" value="IP2IR"/>
|
1454
1784
|
</fingerprint>
|
1455
|
-
|
1785
|
+
|
1786
|
+
<fingerprint pattern="^AVTECH Device ManageR$">
|
1787
|
+
<description>AVTECH Device ManageR Software</description>
|
1788
|
+
<example>AVTECH Device ManageR</example>
|
1789
|
+
<param pos="0" name="service.vendor" value="AVTECH"/>
|
1790
|
+
<param pos="0" name="service.product" value="Device Manager"/>
|
1791
|
+
</fingerprint>
|
1792
|
+
|
1793
|
+
<fingerprint pattern="^AVTECH Software, Inc\. - Room Alert(?:&reg;)?\s+([a-zA-Z0-9/]+) - Advanced">
|
1794
|
+
<description>AVTECH RoomAlert</description>
|
1795
|
+
<example hw.product="Room Alert 11E" hw.product.model="11E">AVTECH Software, Inc. - Room Alert 11E - Advanced Computer Room Environment Monitoring, Alerting &amp; Automatic Corrective Action</example>
|
1796
|
+
<example hw.product="Room Alert 32E/W" hw.product.model="32E/W">AVTECH Software, Inc. - Room Alert 32E/W - Advanced Computer Room Environment Monitoring, Alerting &amp; Automatic Corrective Action</example>
|
1797
|
+
<example hw.product="Room Alert 32E/W" hw.product.model="32E/W">AVTECH Software, Inc. - Room Alert&reg; 32E/W - Advanced Computer Room Monitoring, Alerting &amp; Automatic Corrective Action</example>
|
1798
|
+
<param pos="0" name="hw.vendor" value="AVTECH"/>
|
1799
|
+
<param pos="0" name="hw.device" value="Monitoring"/>
|
1800
|
+
<param pos="1" name="hw.product.model"/>
|
1801
|
+
<param pos="0" name="hw.product" value="Room Alert {hw.product.model}"/>
|
1802
|
+
</fingerprint>
|
1803
|
+
|
1804
|
+
<fingerprint pattern="^AVTECH Software, Inc\. - TemPageR\s+([a-zA-Z0-9/]+) - Real-Time">
|
1805
|
+
<description>AVTECH TepPageR</description>
|
1806
|
+
<example hw.product="TemPageR 3E" hw.product.model="3E">AVTECH Software, Inc. - TemPageR 3E - Real-Time Temperature Monitor For IT &amp; Facilities Environment Monitoring</example>
|
1807
|
+
<param pos="0" name="hw.vendor" value="AVTECH"/>
|
1808
|
+
<param pos="0" name="hw.device" value="Monitoring"/>
|
1809
|
+
<param pos="1" name="hw.product.model"/>
|
1810
|
+
<param pos="0" name="hw.product" value="TemPageR {hw.product.model}"/>
|
1811
|
+
</fingerprint>
|
1812
|
+
|
1813
|
+
<fingerprint pattern="^AppDynamics$">
|
1814
|
+
<description>Cisco AppDynamics Appliance</description>
|
1815
|
+
<example>AppDynamics</example>
|
1816
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
1817
|
+
<param pos="0" name="hw.device" value="Network Appliance"/>
|
1818
|
+
<param pos="0" name="hw.product" value="AppDynamics"/>
|
1819
|
+
</fingerprint>
|
1820
|
+
|
1821
|
+
<fingerprint pattern="^INDECT - CarDetector Configurator$">
|
1822
|
+
<description>INDECT Parking Management Console</description>
|
1823
|
+
<example>INDECT - CarDetector Configurator</example>
|
1824
|
+
<param pos="0" name="hw.vendor" value="INDECT"/>
|
1825
|
+
<param pos="0" name="hw.device" value="Network Appliance"/>
|
1826
|
+
<param pos="0" name="hw.product" value="CarDetector"/>
|
1827
|
+
</fingerprint>
|
1828
|
+
|
1829
|
+
<fingerprint pattern="^J-Link Pro Webserver$">
|
1830
|
+
<description>Segger J-Link Pro</description>
|
1831
|
+
<example>J-Link Pro Webserver</example>
|
1832
|
+
<param pos="0" name="hw.vendor" value="Segger"/>
|
1833
|
+
<param pos="0" name="hw.device" value="JTAG Adapter"/>
|
1834
|
+
<param pos="0" name="hw.product" value="J-Link Pro"/>
|
1835
|
+
</fingerprint>
|
1836
|
+
|
1837
|
+
<fingerprint pattern="^OneFS$">
|
1838
|
+
<description>EMC Isilon OneFS</description>
|
1839
|
+
<example>OneFS</example>
|
1840
|
+
<param pos="0" name="os.family" value="FreeBSD"/>
|
1841
|
+
<param pos="0" name="os.vendor" value="EMC"/>
|
1842
|
+
<param pos="0" name="os.product" value="Isilon OneFS OS"/>
|
1843
|
+
<param pos="0" name="hw.vendor" value="EMC"/>
|
1844
|
+
<param pos="0" name="hw.device" value="NAS"/>
|
1845
|
+
<param pos="0" name="hw.product" value="Isilon OneFS"/>
|
1846
|
+
</fingerprint>
|
1847
|
+
|
1848
|
+
<fingerprint pattern="^Isilon InsightIQ$">
|
1849
|
+
<description>EMC Isilon InsightIQ</description>
|
1850
|
+
<example>Isilon InsightIQ</example>
|
1851
|
+
<param pos="0" name="os.family" value="FreeBSD"/>
|
1852
|
+
<param pos="0" name="os.vendor" value="EMC"/>
|
1853
|
+
<param pos="0" name="os.product" value="Isilon OneFS OS"/>
|
1854
|
+
<param pos="0" name="hw.vendor" value="EMC"/>
|
1855
|
+
<param pos="0" name="hw.device" value="Network Appliance"/>
|
1856
|
+
<param pos="0" name="hw.product" value="Isilon InsightIQ"/>
|
1857
|
+
</fingerprint>
|
1858
|
+
|
1859
|
+
<fingerprint pattern="^Active Intelligence Engine$">
|
1860
|
+
<description>Attivio Active Intelligence Engine</description>
|
1861
|
+
<example>Active Intelligence Engine</example>
|
1862
|
+
<param pos="0" name="service.vendor" value="Attivio"/>
|
1863
|
+
<param pos="0" name="service.product" value="Active Intelligence Engine"/>
|
1864
|
+
</fingerprint>
|
1865
|
+
|
1866
|
+
<fingerprint pattern="^Welcome to WildFly(?: Application Server)?\s+(\d+)">
|
1867
|
+
<description>WildFly with version</description>
|
1868
|
+
<example service.version="11">Welcome to WildFly 11</example>
|
1869
|
+
<example service.version="8">Welcome to WildFly 8</example>
|
1870
|
+
<example service.version="8">Welcome to WildFly Application Server 8</example>
|
1871
|
+
<param pos="0" name="service.vendor" value="Red Hat"/>
|
1872
|
+
<param pos="0" name="service.product" value="WildFly"/>
|
1873
|
+
<param pos="1" name="service.version"/>
|
1874
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:redhat:wildfly:{service.version}"/>
|
1875
|
+
</fingerprint>
|
1876
|
+
|
1877
|
+
<fingerprint pattern="^Welcome to WildFly$">
|
1878
|
+
<description>WildFly with no version</description>
|
1879
|
+
<example>Welcome to WildFly</example>
|
1880
|
+
<param pos="0" name="service.vendor" value="Red Hat"/>
|
1881
|
+
<param pos="0" name="service.product" value="WildFly"/>
|
1882
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:redhat:wildfly:-"/>
|
1883
|
+
</fingerprint>
|
1884
|
+
|
1885
|
+
<fingerprint pattern="^Welcome to JBoss Application Server ([\d\.]+)$">
|
1886
|
+
<description>JBoss Application Server w/ Version</description>
|
1887
|
+
<example service.version="7">Welcome to JBoss Application Server 7</example>
|
1888
|
+
<param pos="0" name="service.vendor" value="Red Hat"/>
|
1889
|
+
<param pos="0" name="service.product" value="JBoss AS"/>
|
1890
|
+
<param pos="1" name="service.version"/>
|
1891
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_wildfly_application_server:{service.version}"/>
|
1892
|
+
</fingerprint>
|
1893
|
+
|
1894
|
+
<fingerprint pattern="^Welcome to JBoss(?: AS|.trade;)$">
|
1895
|
+
<description>JBoss Application Server w/o Version</description>
|
1896
|
+
<example>Welcome to JBoss AS</example>
|
1897
|
+
<example>Welcome to JBoss&trade;</example>
|
1898
|
+
<param pos="0" name="service.vendor" value="Red Hat"/>
|
1899
|
+
<param pos="0" name="service.product" value="JBoss AS"/>
|
1900
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_wildfly_application_server:-"/>
|
1901
|
+
</fingerprint>
|
1902
|
+
|
1903
|
+
<fingerprint pattern="^(?:JBoss )?EAP ([\d\.]+)$">
|
1904
|
+
<description>JBoss EAP w/ Version</description>
|
1905
|
+
<example service.version="7">JBoss EAP 7</example>
|
1906
|
+
<example service.version="7">EAP 7</example>
|
1907
|
+
<param pos="0" name="service.vendor" value="Red Hat"/>
|
1908
|
+
<param pos="0" name="service.product" value="JBoss EAP"/>
|
1909
|
+
<param pos="1" name="service.version"/>
|
1910
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:{service.version}"/>
|
1911
|
+
</fingerprint>
|
1912
|
+
|
1913
|
+
<fingerprint pattern="^Welcome to JBoss EAP$">
|
1914
|
+
<description>JBoss EAP w/o Version</description>
|
1915
|
+
<example>Welcome to JBoss EAP</example>
|
1916
|
+
<param pos="0" name="service.vendor" value="Red Hat"/>
|
1917
|
+
<param pos="0" name="service.product" value="JBoss EAP"/>
|
1918
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:-"/>
|
1919
|
+
</fingerprint>
|
1920
|
+
|
1921
|
+
<fingerprint pattern="^S2 Network Node$">
|
1922
|
+
<description>S2 Network Node Appliance</description>
|
1923
|
+
<example>S2 Network Node</example>
|
1924
|
+
<param pos="0" name="hw.vendor" value="S2"/>
|
1925
|
+
<param pos="0" name="hw.device" value="Access Control"/>
|
1926
|
+
<param pos="0" name="hw.product" value="Network Node"/>
|
1927
|
+
</fingerprint>
|
1928
|
+
|
1929
|
+
<fingerprint pattern="^(?:S2 Netbox Login|Home - NetBox)$">
|
1930
|
+
<description>S2 Netbox Appliance</description>
|
1931
|
+
<example>S2 Netbox Login</example>
|
1932
|
+
<example>Home - NetBox</example>
|
1933
|
+
<param pos="0" name="hw.vendor" value="S2"/>
|
1934
|
+
<param pos="0" name="hw.device" value="Access Control"/>
|
1935
|
+
<param pos="0" name="hw.product" value="Netbox"/>
|
1936
|
+
</fingerprint>
|
1937
|
+
|
1938
|
+
<fingerprint pattern="^S2 NetVR Login$">
|
1939
|
+
<description>S2 NetVR Appliance</description>
|
1940
|
+
<example>S2 NetVR Login</example>
|
1941
|
+
<param pos="0" name="hw.vendor" value="S2"/>
|
1942
|
+
<param pos="0" name="hw.device" value="Access Control"/>
|
1943
|
+
<param pos="0" name="hw.product" value="NetVR"/>
|
1944
|
+
</fingerprint>
|
1945
|
+
|
1946
|
+
<fingerprint pattern="^IBM HTTP Server$">
|
1947
|
+
<description>IBM HTTP Server w/o Version</description>
|
1948
|
+
<example>IBM HTTP Server</example>
|
1949
|
+
<param pos="0" name="service.vendor" value="IBM"/>
|
1950
|
+
<param pos="0" name="service.product" value="HTTPD"/>
|
1951
|
+
<param pos="0" name="service.family" value="Apache"/>
|
1952
|
+
</fingerprint>
|
1953
|
+
|
1954
|
+
<fingerprint pattern="^IBM HTTP Server ([0-9\.]+)$">
|
1955
|
+
<description>IBM HTTP Server with Version</description>
|
1956
|
+
<example service.version="8.5.5">IBM HTTP Server 8.5.5</example>
|
1957
|
+
<param pos="0" name="service.vendor" value="IBM"/>
|
1958
|
+
<param pos="0" name="service.product" value="HTTPD"/>
|
1959
|
+
<param pos="0" name="service.family" value="Apache"/>
|
1960
|
+
<param pos="1" name="service.version"/>
|
1961
|
+
</fingerprint>
|
1962
|
+
|
1963
|
+
<fingerprint pattern="^IBM Tivoli Storage Manager$">
|
1964
|
+
<description>IBM Tivoli Storage Manager</description>
|
1965
|
+
<example>IBM Tivoli Storage Manager</example>
|
1966
|
+
<param pos="0" name="service.vendor" value="IBM"/>
|
1967
|
+
<param pos="0" name="service.family" value="Tivoli"/>
|
1968
|
+
<param pos="0" name="service.product" value="Tivoli Storage Manager"/>
|
1969
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:ibm:tivoli_storage_manager:-"/>
|
1970
|
+
</fingerprint>
|
1971
|
+
|
1972
|
+
<fingerprint pattern="^IBM FlashCopy Manager$">
|
1973
|
+
<description>IBM FlashCopy Manager</description>
|
1974
|
+
<example>IBM FlashCopy Manager</example>
|
1975
|
+
<param pos="0" name="service.vendor" value="IBM"/>
|
1976
|
+
<param pos="0" name="service.family" value="Tivoli"/>
|
1977
|
+
<param pos="0" name="service.product" value="Tivoli Storage FlashCopy Manager"/>
|
1978
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:ibm:tivoli_storage_flashcopy_manager:-"/>
|
1979
|
+
</fingerprint>
|
1980
|
+
|
1981
|
+
<fingerprint pattern="^(?:Jupyter Notebook|JupyterLab|Home Page - Select or create a notebook)$">
|
1982
|
+
<description>Jupyter Notebook Server</description>
|
1983
|
+
<example>Jupyter Notebook</example>
|
1984
|
+
<example>JupyterLab</example>
|
1985
|
+
<example>Home Page - Select or create a notebook</example>
|
1986
|
+
<param pos="0" name="service.vendor" value="Jupyter"/>
|
1987
|
+
<param pos="0" name="service.product" value="Notebook"/>
|
1988
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:jupyter:notebook:-"/>
|
1989
|
+
</fingerprint>
|
1990
|
+
|
1991
|
+
<fingerprint pattern="^Redirect to userimage: /control/userimage\.html$">
|
1992
|
+
<description>Mobotix Network Camera</description>
|
1993
|
+
<example>Redirect to userimage: /control/userimage.html</example>
|
1994
|
+
<param pos="0" name="hw.vendor" value="Mobotix"/>
|
1995
|
+
<param pos="0" name="hw.device" value="Web cam"/>
|
1996
|
+
<param pos="0" name="hw.product" value="IP Camera"/>
|
1997
|
+
</fingerprint>
|
1998
|
+
|
1999
|
+
<fingerprint pattern="^Apache ActiveMQ$">
|
2000
|
+
<description>Apache ActiveMQ</description>
|
2001
|
+
<example>Apache ActiveMQ</example>
|
2002
|
+
<param pos="0" name="service.vendor" value="Apache"/>
|
2003
|
+
<param pos="0" name="service.family" value="ActiveMQ"/>
|
2004
|
+
<param pos="0" name="service.product" value="ActiveMQ"/>
|
2005
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:apache:activemq:-"/>
|
2006
|
+
</fingerprint>
|
2007
|
+
|
2008
|
+
<fingerprint pattern="^Google Wifi$">
|
2009
|
+
<description>Google OnHub Router</description>
|
2010
|
+
<example>Google Wifi</example>
|
2011
|
+
<param pos="0" name="os.vendor" value="Google"/>
|
2012
|
+
<param pos="0" name="os.family" value="Linux"/>
|
2013
|
+
<param pos="0" name="hw.vendor" value="Google"/>
|
2014
|
+
<param pos="0" name="hw.device" value="Router"/>
|
2015
|
+
<param pos="0" name="hw.product" value="OnHub"/>
|
2016
|
+
</fingerprint>
|
2017
|
+
|
2018
|
+
<fingerprint pattern="PRTG Network Monitor">
|
2019
|
+
<description>PRTG Network Monitor (not anchored)</description>
|
2020
|
+
<example>PRTG Network Monitor (WIN-R4C1T8HRRAA)</example>
|
2021
|
+
<example>BigCorp PRTG Network Monitor (PRTG2)</example>
|
2022
|
+
<param pos="0" name="service.vendor" value="PRTG"/>
|
2023
|
+
<param pos="0" name="service.product" value="Network Monitor"/>
|
2024
|
+
</fingerprint>
|
2025
|
+
|
2026
|
+
<fingerprint pattern="^(?:BrightSign&reg;|BrightSign Applications|Diagnostics Web Server)$">
|
2027
|
+
<description>BrightSign Controller</description>
|
2028
|
+
<example>BrightSign&reg;</example>
|
2029
|
+
<example>BrightSign Applications</example>
|
2030
|
+
<example>Diagnostics Web Server</example>
|
2031
|
+
<param pos="0" name="os.vendor" value="BrightSign"/>
|
2032
|
+
<param pos="0" name="os.family" value="Linux"/>
|
2033
|
+
<param pos="0" name="hw.vendor" value="BrightSign"/>
|
2034
|
+
<param pos="0" name="hw.device" value="Media Server"/>
|
2035
|
+
<param pos="0" name="hw.product" value="Digital Signage Player"/>
|
2036
|
+
</fingerprint>
|
2037
|
+
|
2038
|
+
<fingerprint pattern="^Linksys Smart Wi-Fi$">
|
2039
|
+
<description>Linksys Smart Wi-Fi</description>
|
2040
|
+
<example>Linksys Smart Wi-Fi</example>
|
2041
|
+
<param pos="0" name="os.vendor" value="Linksys"/>
|
2042
|
+
<param pos="0" name="os.family" value="Linux"/>
|
2043
|
+
<param pos="0" name="hw.vendor" value="Linksys"/>
|
2044
|
+
<param pos="0" name="hw.device" value="WAP"/>
|
2045
|
+
</fingerprint>
|
2046
|
+
|
2047
|
+
<fingerprint pattern="^(?:DD System Manager|System Manager)$">
|
2048
|
+
<description>Data Domain System Manager</description>
|
2049
|
+
<example>DD System Manager</example>
|
2050
|
+
<example>System Manager</example>
|
2051
|
+
<param pos="0" name="os.vendor" value="Data Domain"/>
|
2052
|
+
<param pos="0" name="os.product" value="DD OS"/>
|
2053
|
+
<param pos="0" name="os.device" value="Storage"/>
|
2054
|
+
<param pos="0" name="hw.vendor" value="Data Domain"/>
|
2055
|
+
<param pos="0" name="hw.product" value="DD OS"/>
|
2056
|
+
<param pos="0" name="hw.device" value="Storage"/>
|
2057
|
+
</fingerprint>
|
2058
|
+
|
2059
|
+
<fingerprint pattern="^SonarQube$">
|
2060
|
+
<description>SonarQube</description>
|
2061
|
+
<example>SonarQube</example>
|
2062
|
+
<param pos="0" name="service.vendor" value="SonarQube"/>
|
2063
|
+
<param pos="0" name="service.product" value="SonarQube"/>
|
2064
|
+
</fingerprint>
|
2065
|
+
|
2066
|
+
<fingerprint pattern="^(\S+) - Opengear Management Console$">
|
2067
|
+
<description>Opengear Management Console</description>
|
2068
|
+
<example host.name="server01">server01 - Opengear Management Console</example>
|
2069
|
+
<param pos="0" name="service.vendor" value="Opengear"/>
|
2070
|
+
<param pos="0" name="service.product" value="Management Console"/>
|
2071
|
+
<param pos="1" name="host.name"/>
|
2072
|
+
</fingerprint>
|
2073
|
+
|
2074
|
+
<fingerprint pattern="^Login \(Virtual Traffic Manager Appliance :: (\S+)\)$">
|
2075
|
+
<description>Brocade Virtual Traffic Manager Appliance</description>
|
2076
|
+
<example host.name="10.0.0.1">Login (Virtual Traffic Manager Appliance :: 10.0.0.1)</example>
|
2077
|
+
<param pos="0" name="hw.vendor" value="Brocade"/>
|
2078
|
+
<param pos="0" name="hw.device" value="Network Management Device"/>
|
2079
|
+
<param pos="0" name="hw.product" value="Virtual Traffic Manager"/>
|
2080
|
+
<param pos="1" name="host.name"/>
|
2081
|
+
</fingerprint>
|
2082
|
+
|
2083
|
+
<fingerprint pattern="^Chronograf$">
|
2084
|
+
<description>Chronograf Dashboard</description>
|
2085
|
+
<example>Chronograf</example>
|
2086
|
+
<param pos="0" name="service.vendor" value="InfluxData"/>
|
2087
|
+
<param pos="0" name="service.product" value="Chronograf"/>
|
2088
|
+
</fingerprint>
|
2089
|
+
|
2090
|
+
<fingerprint pattern="^InfluxDB 2.0$">
|
2091
|
+
<description>InfluxDB 2.0 Dashboard</description>
|
2092
|
+
<example>InfluxDB 2.0</example>
|
2093
|
+
<param pos="0" name="service.vendor" value="InfluxData"/>
|
2094
|
+
<param pos="0" name="service.product" value="InfluxDB"/>
|
2095
|
+
<param pos="0" name="service.version" value="2.0"/>
|
2096
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:influxdata:influxdb:2.0"/>
|
2097
|
+
</fingerprint>
|
2098
|
+
|
2099
|
+
<fingerprint pattern="^(?:Sign in . GitLab|GitLab|GitLab is not responding)$">
|
2100
|
+
<description>GitLab</description>
|
2101
|
+
<example>Sign in · GitLab</example>
|
2102
|
+
<example>GitLab is not responding</example>
|
2103
|
+
<example>GitLab</example>
|
2104
|
+
<example>Sign in | GitLab</example>
|
2105
|
+
<param pos="0" name="service.vendor" value="GitLab"/>
|
2106
|
+
<param pos="0" name="service.product" value="GitLab"/>
|
2107
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:gitlab:gitlab:-"/>
|
2108
|
+
</fingerprint>
|
2109
|
+
|
2110
|
+
<fingerprint pattern="^(?:GitHub Enterprise|Setup GitHub Enterprise|GitHub Enterprise preflight check)$">
|
2111
|
+
<description>GitHub Enterprise</description>
|
2112
|
+
<example>GitHub Enterprise</example>
|
2113
|
+
<example>Setup GitHub Enterprise</example>
|
2114
|
+
<example>GitHub Enterprise preflight check</example>
|
2115
|
+
<param pos="0" name="service.vendor" value="GitHub"/>
|
2116
|
+
<param pos="0" name="service.product" value="Enterprise"/>
|
2117
|
+
</fingerprint>
|
2118
|
+
|
2119
|
+
<fingerprint pattern="^(?:SAP NetWeaver Application Server Java|SAP&#x20;NetWeaver&#x20;Portal|Loading Portal\.\.\.)$">
|
2120
|
+
<description>SAP NetWeaver Portal</description>
|
2121
|
+
<example>SAP NetWeaver Application Server Java</example>
|
2122
|
+
<example>SAP&#x20;NetWeaver&#x20;Portal</example>
|
2123
|
+
<example>Loading Portal...</example>
|
2124
|
+
<param pos="0" name="service.vendor" value="SAP"/>
|
2125
|
+
<param pos="0" name="service.product" value="NetWeaver Web AS"/>
|
2126
|
+
<param pos="0" name="service.family" value="NetWeaver"/>
|
2127
|
+
</fingerprint>
|
2128
|
+
|
2129
|
+
<fingerprint pattern="^Lansweeper (?:- Login|First Run Wizard)$">
|
2130
|
+
<description>Lansweeper</description>
|
2131
|
+
<example>Lansweeper - Login</example>
|
2132
|
+
<example>Lansweeper First Run Wizard</example>
|
2133
|
+
<param pos="0" name="service.vendor" value="Lansweeper"/>
|
2134
|
+
<param pos="0" name="service.product" value="Lansweeper"/>
|
2135
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:lansweeper:lansweeper:-"/>
|
2136
|
+
</fingerprint>
|
2137
|
+
|
2138
|
+
<fingerprint pattern="^(?:Celery Flower|Flower)$">
|
2139
|
+
<description>Celery Flower Dashboard</description>
|
2140
|
+
<example>Celery Flower</example>
|
2141
|
+
<example>Flower</example>
|
2142
|
+
<param pos="0" name="service.vendor" value="Celery"/>
|
2143
|
+
<param pos="0" name="service.product" value="Flower"/>
|
2144
|
+
</fingerprint>
|
2145
|
+
|
2146
|
+
<fingerprint pattern="^(?:Insight)?VM Security Console :: Login$">
|
2147
|
+
<description>Rapid7 InsightVM Console</description>
|
2148
|
+
<example>InsightVM Security Console :: Login</example>
|
2149
|
+
<example>VM Security Console :: Login</example>
|
2150
|
+
<param pos="0" name="service.vendor" value="Rapid7"/>
|
2151
|
+
<param pos="0" name="service.product" value="InsightVM"/>
|
2152
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:rapid7:insightvm:-"/>
|
2153
|
+
</fingerprint>
|
2154
|
+
|
2155
|
+
<fingerprint pattern="^Nexpose Security Console :: Login$">
|
2156
|
+
<description>Rapid7 Nexpose Console</description>
|
2157
|
+
<example>Nexpose Security Console :: Login</example>
|
2158
|
+
<param pos="0" name="service.vendor" value="Rapid7"/>
|
2159
|
+
<param pos="0" name="service.product" value="Nexpose"/>
|
2160
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:rapid7:nexpose:-"/>
|
2161
|
+
</fingerprint>
|
2162
|
+
|
2163
|
+
<fingerprint pattern="^(?:Login Gateway|Session Error) - Kiwi Syslog Web Access$">
|
2164
|
+
<description>Kiwi Syslog Web Access</description>
|
2165
|
+
<example>Login Gateway - Kiwi Syslog Web Access</example>
|
2166
|
+
<example>Session Error - Kiwi Syslog Web Access</example>
|
2167
|
+
<param pos="0" name="service.vendor" value="SolarWinds"/>
|
2168
|
+
<param pos="0" name="service.product" value="Kiwi Syslog"/>
|
2169
|
+
</fingerprint>
|
2170
|
+
|
2171
|
+
<fingerprint pattern="^ClickShare Configurator$">
|
2172
|
+
<description>ClickShare Wireless Presenter</description>
|
2173
|
+
<example>ClickShare Configurator</example>
|
2174
|
+
<param pos="0" name="hw.vendor" value="Barco"/>
|
2175
|
+
<param pos="0" name="hw.device" value="Wireless Presenter"/>
|
2176
|
+
<param pos="0" name="hw.product" value="ClickShare"/>
|
2177
|
+
<param pos="0" name="os.vendor" value="Barco"/>
|
2178
|
+
<param pos="0" name="os.family" value="ClickShareOS"/>
|
2179
|
+
<param pos="0" name="os.device" value="Wireless Presenter"/>
|
2180
|
+
</fingerprint>
|
2181
|
+
|
2182
|
+
<fingerprint pattern="^(IQ\S+) IQEYE\S+: Live Images$">
|
2183
|
+
<description>IQinVision IQeye Network Camera</description>
|
2184
|
+
<example hw.product="IQA22N">IQA22N IQEYE1A1613: Live Images</example>
|
2185
|
+
<example hw.product="IQeye703">IQeye703 IQEYE011750: Live Images</example>
|
2186
|
+
<param pos="0" name="hw.vendor" value="IQinVision"/>
|
2187
|
+
<param pos="0" name="hw.device" value="Web cam"/>
|
2188
|
+
<param pos="1" name="hw.product"/>
|
2189
|
+
</fingerprint>
|
2190
|
+
|
2191
|
+
<fingerprint pattern="^(?:Oracle\(R\) )?Integrated Lights Out Manager$">
|
2192
|
+
<description>Oracle iLOM</description>
|
2193
|
+
<example>Oracle(R) Integrated Lights Out Manager</example>
|
2194
|
+
<example>Integrated Lights Out Manager</example>
|
2195
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
2196
|
+
<param pos="0" name="hw.vendor" value="Oracle"/>
|
2197
|
+
<param pos="0" name="hw.family" value="ILOM"/>
|
2198
|
+
<param pos="0" name="hw.product" value="ILOM"/>
|
2199
|
+
<param pos="0" name="os.device" value="Lights Out Management"/>
|
2200
|
+
<param pos="0" name="os.vendor" value="Oracle"/>
|
2201
|
+
<param pos="0" name="os.family" value="ILOM"/>
|
2202
|
+
<param pos="0" name="os.product" value="ILOM"/>
|
2203
|
+
</fingerprint>
|
2204
|
+
|
2205
|
+
<fingerprint pattern="^Genetec - SHARPV\S+$">
|
2206
|
+
<description>Genetec AutoVu SharpV ALPR Camera</description>
|
2207
|
+
<example>Genetec - SHARPV01111</example>
|
2208
|
+
<param pos="0" name="hw.vendor" value="Genetec"/>
|
2209
|
+
<param pos="0" name="hw.device" value="Web cam"/>
|
2210
|
+
<param pos="0" name="hw.product" value="AutoVu SharpV"/>
|
2211
|
+
</fingerprint>
|
2212
|
+
|
2213
|
+
<fingerprint pattern="^Nexus Repository Manager$">
|
2214
|
+
<description>Nexus Repository Manager</description>
|
2215
|
+
<example>Nexus Repository Manager</example>
|
2216
|
+
<param pos="0" name="service.vendor" value="Apache"/>
|
2217
|
+
<param pos="0" name="service.product" value="Nexus Repository Manager"/>
|
2218
|
+
</fingerprint>
|
2219
|
+
|
2220
|
+
<fingerprint pattern="^Apache Flink Web Dashboard$">
|
2221
|
+
<description>Apache Flink Web Dashboard</description>
|
2222
|
+
<example>Apache Flink Web Dashboard</example>
|
2223
|
+
<param pos="0" name="service.vendor" value="Apache"/>
|
2224
|
+
<param pos="0" name="service.product" value="Flink"/>
|
2225
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:apache:flink:-"/>
|
2226
|
+
</fingerprint>
|
2227
|
+
|
2228
|
+
<fingerprint pattern="^(?:Twonky|Twonky Server|TwonkyMedia|TwonkyMedia server media browser)$">
|
2229
|
+
<description>Twonky Server</description>
|
2230
|
+
<example>Twonky</example>
|
2231
|
+
<example>Twonky Server</example>
|
2232
|
+
<example>TwonkyMedia</example>
|
2233
|
+
<example>TwonkyMedia server media browser</example>
|
2234
|
+
<param pos="0" name="service.vendor" value="Lynx Technology"/>
|
2235
|
+
<param pos="0" name="service.product" value="Twonky Media Server"/>
|
2236
|
+
</fingerprint>
|
2237
|
+
|
2238
|
+
<fingerprint pattern="^Spiceworks(?: Server Busy| Help Desk)?$">
|
2239
|
+
<description>Spiceworks</description>
|
2240
|
+
<example>Spiceworks</example>
|
2241
|
+
<example>Spiceworks Help Desk</example>
|
2242
|
+
<example>Spiceworks Server Busy</example>
|
2243
|
+
<param pos="0" name="service.vendor" value="Spiceworks"/>
|
2244
|
+
<param pos="0" name="service.product" value="Help Desk Server"/>
|
2245
|
+
</fingerprint>
|
2246
|
+
|
2247
|
+
<fingerprint pattern="^Network Monitor$">
|
2248
|
+
<description>Spiceworks Network Monitor</description>
|
2249
|
+
<example>Network Monitor</example>
|
2250
|
+
<param pos="0" name="service.vendor" value="Spiceworks"/>
|
2251
|
+
<param pos="0" name="service.product" value="Network Monitor"/>
|
2252
|
+
</fingerprint>
|
2253
|
+
|
2254
|
+
<fingerprint pattern="^Spirent TestCenter IQ(?: - (?:Free )?Preview)?$">
|
2255
|
+
<description>Spirent TestCenter IQ</description>
|
2256
|
+
<example>Spirent TestCenter IQ</example>
|
2257
|
+
<example>Spirent TestCenter IQ - Free Preview</example>
|
2258
|
+
<example>Spirent TestCenter IQ - Preview</example>
|
2259
|
+
<param pos="0" name="service.vendor" value="Spirent Communications"/>
|
2260
|
+
<param pos="0" name="service.product" value="TestCenter IQ"/>
|
2261
|
+
</fingerprint>
|
2262
|
+
|
2263
|
+
<fingerprint pattern="^SABnzbd(?: - Log in)?$">
|
2264
|
+
<description>SABnzbd Newsreader</description>
|
2265
|
+
<example>SABnzbd</example>
|
2266
|
+
<example>SABnzbd - Log in</example>
|
2267
|
+
<param pos="0" name="service.vendor" value="SABnzbd"/>
|
2268
|
+
<param pos="0" name="service.product" value="SABnzbd"/>
|
2269
|
+
</fingerprint>
|
2270
|
+
|
2271
|
+
<fingerprint pattern="^(?:Zabbix|.*: Zabbix)$">
|
2272
|
+
<description>Zabbix</description>
|
2273
|
+
<example>Zabbix</example>
|
2274
|
+
<example>appliance: Zabbix</example>
|
2275
|
+
<param pos="0" name="service.vendor" value="Zabbix"/>
|
2276
|
+
<param pos="0" name="service.product" value="Zabbix"/>
|
2277
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:zabbix:zabbix:-"/>
|
2278
|
+
</fingerprint>
|
2279
|
+
|
2280
|
+
<fingerprint pattern="^(\S+) \(build (\S+)\) - Info$">
|
2281
|
+
<description>DD-WRT</description>
|
2282
|
+
<example host.name="SubTerraVia-NUC" os.version="36104" os.build="36104">SubTerraVia-NUC (build 36104) - Info</example>
|
2283
|
+
<example host.name="DD-WRT" os.version="35030M" os.build="35030M">DD-WRT (build 35030M) - Info</example>
|
2284
|
+
<param pos="0" name="os.vendor" value="DD-WRT"/>
|
2285
|
+
<param pos="0" name="os.product" value="DD-WRT"/>
|
2286
|
+
<param pos="0" name="os.device" value="Router"/>
|
2287
|
+
<param pos="1" name="host.name"/>
|
2288
|
+
<param pos="2" name="os.version"/>
|
2289
|
+
<param pos="2" name="os.build"/>
|
2290
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:dd-wrt:dd-wrt:{os.version}"/>
|
2291
|
+
</fingerprint>
|
2292
|
+
|
2293
|
+
<fingerprint pattern="^(?:Apache Druid|Druid Console|Legacy Coordinator Console)$">
|
2294
|
+
<description>Apache Druid</description>
|
2295
|
+
<example>Apache Druid</example>
|
2296
|
+
<example>Legacy Coordinator Console</example>
|
2297
|
+
<example>Druid Console</example>
|
2298
|
+
<param pos="0" name="service.vendor" value="Apache"/>
|
2299
|
+
<param pos="0" name="service.product" value="Druid"/>
|
2300
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:apache:druid:-"/>
|
2301
|
+
</fingerprint>
|
2302
|
+
|
2303
|
+
<fingerprint pattern="^Gerrit Code Review$">
|
2304
|
+
<description>Gerrit Code Review</description>
|
2305
|
+
<example>Gerrit Code Review</example>
|
2306
|
+
<param pos="0" name="service.vendor" value="Gerrit"/>
|
2307
|
+
<param pos="0" name="service.product" value="Code Review"/>
|
2308
|
+
</fingerprint>
|
2309
|
+
|
2310
|
+
<fingerprint pattern=" - Ignition Gateway$">
|
2311
|
+
<description>Inductive Automation Ignition Gateway</description>
|
2312
|
+
<example>QA-ROBOT3 - Ignition Gateway</example>
|
2313
|
+
<example>Ignition 8.0 Demo Server - Ignition Gateway</example>
|
2314
|
+
<param pos="0" name="service.vendor" value="Inductive Automation"/>
|
2315
|
+
<param pos="0" name="service.product" value="Ignition Gateway"/>
|
2316
|
+
</fingerprint>
|
2317
|
+
|
2318
|
+
<fingerprint pattern="^Airflow(?: - (?:Login|DAGs))?$">
|
2319
|
+
<description>Apache Airflow</description>
|
2320
|
+
<example>Airflow</example>
|
2321
|
+
<example>Airflow - DAGs</example>
|
2322
|
+
<example>Airflow - Login</example>
|
2323
|
+
<param pos="0" name="service.vendor" value="Apache"/>
|
2324
|
+
<param pos="0" name="service.product" value="Airflow"/>
|
2325
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:apache:airflow:-"/>
|
2326
|
+
</fingerprint>
|
2327
|
+
|
2328
|
+
<fingerprint pattern="^Cockroach Console$">
|
2329
|
+
<description>CockroachDB Console</description>
|
2330
|
+
<example>Cockroach Console</example>
|
2331
|
+
<param pos="0" name="service.vendor" value="Cockroach Labs"/>
|
2332
|
+
<param pos="0" name="service.product" value="CockroachDB"/>
|
2333
|
+
</fingerprint>
|
2334
|
+
|
2335
|
+
<fingerprint pattern="^(?:openmediavault control panel|OpenMediaVault web administration interface) - (\S+)$">
|
2336
|
+
<description>OpenMediaVault</description>
|
2337
|
+
<example host.name="raspberrypi">openmediavault control panel - raspberrypi</example>
|
2338
|
+
<example host.name="raspberrypi">OpenMediaVault web administration interface - raspberrypi</example>
|
2339
|
+
<param pos="0" name="os.vendor" value="OpenMediaVault"/>
|
2340
|
+
<param pos="0" name="os.family" value="Linux"/>
|
2341
|
+
<param pos="0" name="os.product" value="OpenMediaVault"/>
|
2342
|
+
<param pos="0" name="os.device" value="NAS"/>
|
2343
|
+
<param pos="1" name="host.name"/>
|
2344
|
+
</fingerprint>
|
2345
|
+
|
2346
|
+
<fingerprint pattern="^Log in to TeamCity .mdash; TeamCity$">
|
2347
|
+
<description>TeamCity</description>
|
2348
|
+
<example>Log in to TeamCity &mdash; TeamCity</example>
|
2349
|
+
<param pos="0" name="service.vendor" value="JetBrains"/>
|
2350
|
+
<param pos="0" name="service.product" value="TeamCity"/>
|
2351
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:jetbrains:teamcity:-"/>
|
2352
|
+
</fingerprint>
|
2353
|
+
|
2354
|
+
<fingerprint pattern="^Home - CUPS ([\d\.]+)$">
|
2355
|
+
<description>Apple CUPS</description>
|
2356
|
+
<example service.version="2.3.1">Home - CUPS 2.3.1</example>
|
2357
|
+
<param pos="0" name="service.vendor" value="Apple"/>
|
2358
|
+
<param pos="0" name="service.product" value="CUPS"/>
|
2359
|
+
<param pos="0" name="service.family" value="CUPS"/>
|
2360
|
+
<param pos="1" name="service.version"/>
|
2361
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:apple:cups:{service.version}"/>
|
2362
|
+
</fingerprint>
|
2363
|
+
|
2364
|
+
<fingerprint pattern="^RUNDECK ENTERPRISE - Login$">
|
2365
|
+
<description>Rundeck Enterprise</description>
|
2366
|
+
<example>RUNDECK ENTERPRISE - Login</example>
|
2367
|
+
<param pos="0" name="service.vendor" value="Rundeck"/>
|
2368
|
+
<param pos="0" name="service.product" value="Rundeck Enterprise"/>
|
2369
|
+
</fingerprint>
|
2370
|
+
|
2371
|
+
<fingerprint pattern="^Rundeck - Login$">
|
2372
|
+
<description>Rundeck</description>
|
2373
|
+
<example>Rundeck - Login</example>
|
2374
|
+
<param pos="0" name="service.vendor" value="Rundeck"/>
|
2375
|
+
<param pos="0" name="service.product" value="Rundeck"/>
|
2376
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:rundeck:rundeck:-"/>
|
2377
|
+
</fingerprint>
|
2378
|
+
|
2379
|
+
<fingerprint pattern="^CrushFTP WebInterface$">
|
2380
|
+
<description>CrushFTP Web</description>
|
2381
|
+
<example>CrushFTP WebInterface</example>
|
2382
|
+
<param pos="0" name="service.vendor" value="CrushFTP"/>
|
2383
|
+
<param pos="0" name="service.product" value="CrushFTP Web Interface"/>
|
2384
|
+
<param pos="0" name="service.certainty" value="0.5"/>
|
2385
|
+
</fingerprint>
|
2386
|
+
|
2387
|
+
<fingerprint pattern="^OpenEdge Explorer$">
|
2388
|
+
<description>Progress OpenEdge Explorer</description>
|
2389
|
+
<example>OpenEdge Explorer</example>
|
2390
|
+
<param pos="0" name="service.vendor" value="Progress"/>
|
2391
|
+
<param pos="0" name="service.product" value="OpenEdge Explorer"/>
|
2392
|
+
</fingerprint>
|
2393
|
+
|
2394
|
+
<fingerprint pattern="^Consul by HashiCorp$">
|
2395
|
+
<description>HashiCorp Consul</description>
|
2396
|
+
<example>Consul by HashiCorp</example>
|
2397
|
+
<param pos="0" name="service.vendor" value="HashiCorp"/>
|
2398
|
+
<param pos="0" name="service.product" value="Consul"/>
|
2399
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:hashicorp:consul:-"/>
|
2400
|
+
</fingerprint>
|
2401
|
+
|
2402
|
+
<fingerprint pattern="^Redmine(?: 500 error)?$">
|
2403
|
+
<description>Redmine</description>
|
2404
|
+
<example>Redmine</example>
|
2405
|
+
<param pos="0" name="service.vendor" value="Redmine"/>
|
2406
|
+
<param pos="0" name="service.product" value="Redmine"/>
|
2407
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:redmine:redmine:-"/>
|
2408
|
+
</fingerprint>
|
2409
|
+
|
2410
|
+
<fingerprint pattern="; Nagios Log Server$">
|
2411
|
+
<description>Nagios Log Server</description>
|
2412
|
+
<example>Database Offline &middot; Nagios Log Server</example>
|
2413
|
+
<param pos="0" name="service.vendor" value="Nagios"/>
|
2414
|
+
<param pos="0" name="service.product" value="Nagios Log Server"/>
|
2415
|
+
</fingerprint>
|
2416
|
+
|
2417
|
+
<fingerprint pattern="; Nagios Network Analyzer$">
|
2418
|
+
<description>Nagios Network Analyzer</description>
|
2419
|
+
<example>Login &bull; Nagios Network Analyzer</example>
|
2420
|
+
<example>Licensing &bull; Nagios Network Analyzer</example>
|
2421
|
+
<param pos="0" name="service.vendor" value="Nagios"/>
|
2422
|
+
<param pos="0" name="service.product" value="Nagios Network Analyzer"/>
|
2423
|
+
</fingerprint>
|
2424
|
+
|
2425
|
+
<fingerprint pattern="^Zing Vision$">
|
2426
|
+
<description>Zing Vision</description>
|
2427
|
+
<example>Zing Vision</example>
|
2428
|
+
<param pos="0" name="service.vendor" value="Azul Systems"/>
|
2429
|
+
<param pos="0" name="service.product" value="Zing Vision"/>
|
2430
|
+
</fingerprint>
|
2431
|
+
|
2432
|
+
<fingerprint pattern="^Swagger (?:UI|Editor)$">
|
2433
|
+
<description>Swagger UI</description>
|
2434
|
+
<example>Swagger UI</example>
|
2435
|
+
<example>Swagger Editor</example>
|
2436
|
+
<param pos="0" name="service.vendor" value="Swagger"/>
|
2437
|
+
<param pos="0" name="service.product" value="UI"/>
|
2438
|
+
</fingerprint>
|
2439
|
+
|
2440
|
+
<fingerprint pattern="^Emby$">
|
2441
|
+
<description>Emby Media Server</description>
|
2442
|
+
<example>Emby</example>
|
2443
|
+
<param pos="0" name="service.vendor" value="Emby"/>
|
2444
|
+
<param pos="0" name="service.product" value="Web Client"/>
|
2445
|
+
<param pos="0" name="service.device" value="Media Server"/>
|
2446
|
+
</fingerprint>
|
2447
|
+
|
2448
|
+
<fingerprint pattern="^WS - Folding@home Work Server$">
|
2449
|
+
<description>Folding@home Work Server</description>
|
2450
|
+
<example>WS - Folding@home Work Server</example>
|
2451
|
+
<param pos="0" name="service.vendor" value="Folding@home"/>
|
2452
|
+
<param pos="0" name="service.product" value="Work Server"/>
|
2453
|
+
</fingerprint>
|
2454
|
+
|
2455
|
+
<fingerprint pattern="^Welcome to IBM Lotus Sametime$">
|
2456
|
+
<description>IBM Lotus Sametime</description>
|
2457
|
+
<example>Welcome to IBM Lotus Sametime</example>
|
2458
|
+
<param pos="0" name="service.vendor" value="IBM"/>
|
2459
|
+
<param pos="0" name="service.product" value="Lotus Sametime"/>
|
2460
|
+
<param pos="0" name="service.certainty" value="0.5"/>
|
2461
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_sametime:-"/>
|
2462
|
+
</fingerprint>
|
2463
|
+
|
2464
|
+
<fingerprint pattern="^HPE OfficeConnect Switch (.*)\s+(J\S+)$">
|
2465
|
+
<description>HPE OfficeConnect Switch</description>
|
2466
|
+
<example hw.product="1820 24G" hw.model="J9980A">HPE OfficeConnect Switch 1820 24G J9980A</example>
|
2467
|
+
<example hw.product="1820 8G" hw.model="J9979A">HPE OfficeConnect Switch 1820 8G J9979A</example>
|
2468
|
+
<example hw.product="1920S 24G 2SFP PoE+ (370W)" hw.model="JL385A">HPE OfficeConnect Switch 1920S 24G 2SFP PoE+ (370W) JL385A</example>
|
2469
|
+
<param pos="0" name="hw.vendor" value="HPE"/>
|
2470
|
+
<param pos="0" name="hw.device" value="Switch"/>
|
2471
|
+
<param pos="1" name="hw.product"/>
|
2472
|
+
<param pos="2" name="hw.model"/>
|
2473
|
+
</fingerprint>
|
2474
|
+
|
2475
|
+
<fingerprint pattern="^Device42$">
|
2476
|
+
<description>Device42 Virtual Appliance</description>
|
2477
|
+
<example>Device42</example>
|
2478
|
+
<param pos="0" name="os.vendor" value="Device42"/>
|
2479
|
+
<param pos="0" name="os.family" value="Linux"/>
|
2480
|
+
<param pos="0" name="os.product" value="Linux"/>
|
2481
|
+
<param pos="0" name="os.certainty" value="0.5"/>
|
2482
|
+
<param pos="0" name="hw.vendor" value="Device42"/>
|
2483
|
+
<param pos="0" name="hw.device" value="Network Appliance"/>
|
2484
|
+
<param pos="0" name="hw.product" value="Discovery"/>
|
2485
|
+
<param pos="0" name="hw.certainty" value="0.5"/>
|
2486
|
+
</fingerprint>
|
2487
|
+
|
2488
|
+
<fingerprint pattern="^SolarWinds Virtualization Manager$">
|
2489
|
+
<description>SolarWinds Virtualization Manager</description>
|
2490
|
+
<example>SolarWinds Virtualization Manager</example>
|
2491
|
+
<param pos="0" name="service.vendor" value="SolarWinds"/>
|
2492
|
+
<param pos="0" name="service.product" value="Virtualization Manager"/>
|
2493
|
+
</fingerprint>
|
2494
|
+
|
2495
|
+
<fingerprint pattern="^(?:Gitea: .*|LocalRepo|TurnKey Gitea)$">
|
2496
|
+
<description>Gitea</description>
|
2497
|
+
<example>Gitea: Git with a cup of tea</example>
|
2498
|
+
<example>TurnKey Gitea</example>
|
2499
|
+
<example>LocalRepo</example>
|
2500
|
+
<param pos="0" name="service.vendor" value="Gitea"/>
|
2501
|
+
<param pos="0" name="service.product" value="Gitea"/>
|
2502
|
+
<param pos="0" name="service.certainty" value="0.5"/>
|
2503
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:gitea:gitea:-"/>
|
2504
|
+
</fingerprint>
|
2505
|
+
|
2506
|
+
<fingerprint pattern="^Metasploit$">
|
2507
|
+
<description>Metasploit Pro (and Community Edition Web UI)</description>
|
2508
|
+
<example>Metasploit</example>
|
2509
|
+
<param pos="0" name="service.vendor" value="Rapid7"/>
|
2510
|
+
<param pos="0" name="service.product" value="Metasploit Pro"/>
|
2511
|
+
</fingerprint>
|
2512
|
+
|
2513
|
+
<fingerprint pattern="^Makito X Decoder$">
|
2514
|
+
<description>Haivision Makito X Video Decoder</description>
|
2515
|
+
<example>Makito X Decoder</example>
|
2516
|
+
<param pos="0" name="hw.vendor" value="Haivision"/>
|
2517
|
+
<param pos="0" name="hw.device" value="Video Decoder"/>
|
2518
|
+
<param pos="0" name="hw.product" value="Makito X Decoder"/>
|
2519
|
+
</fingerprint>
|
2520
|
+
|
2521
|
+
<fingerprint pattern="^Ceph(?: Dashboard)?$">
|
2522
|
+
<description>Ceph Dashboard</description>
|
2523
|
+
<example>Ceph Dashboard</example>
|
2524
|
+
<example>Ceph</example>
|
2525
|
+
<param pos="0" name="service.vendor" value="Ceph"/>
|
2526
|
+
<param pos="0" name="service.product" value="Dashboard"/>
|
2527
|
+
</fingerprint>
|
2528
|
+
|
2529
|
+
<fingerprint pattern="^Scrutinizer$">
|
2530
|
+
<description>Plixer Scrutinizer</description>
|
2531
|
+
<example>Scrutinizer</example>
|
2532
|
+
<param pos="0" name="os.vendor" value="Plixer"/>
|
2533
|
+
<param pos="0" name="os.product" value="Linux"/>
|
2534
|
+
<param pos="0" name="os.certainty" value="0.5"/>
|
2535
|
+
<param pos="0" name="hw.vendor" value="Plixer"/>
|
2536
|
+
<param pos="0" name="hw.product" value="Scrutinizer"/>
|
2537
|
+
<param pos="0" name="hw.certainty" value="0.5"/>
|
2538
|
+
</fingerprint>
|
2539
|
+
|
2540
|
+
<fingerprint pattern="^Hortonworks SmartSense Tool is loading\.\.\.$">
|
2541
|
+
<description>Cloudera Hortonworks SmartSense Tool</description>
|
2542
|
+
<example>Hortonworks SmartSense Tool is loading...</example>
|
2543
|
+
<param pos="0" name="service.vendor" value="Cloudera"/>
|
2544
|
+
<param pos="0" name="service.product" value="SmartSense Tool"/>
|
2545
|
+
<param pos="0" name="service.certainty" value="0.5"/>
|
2546
|
+
</fingerprint>
|
2547
|
+
|
2548
|
+
<fingerprint pattern="^ownCloud$">
|
2549
|
+
<description>ownCloud</description>
|
2550
|
+
<example>ownCloud</example>
|
2551
|
+
<param pos="0" name="service.vendor" value="ownCloud"/>
|
2552
|
+
<param pos="0" name="service.product" value="ownCloud Server"/>
|
2553
|
+
<param pos="0" name="service.certainty" value="0.5"/>
|
2554
|
+
</fingerprint>
|
2555
|
+
|
2556
|
+
<fingerprint pattern="^Octopus Deploy$">
|
2557
|
+
<description>Octopus Deploy</description>
|
2558
|
+
<example>Octopus Deploy</example>
|
2559
|
+
<param pos="0" name="service.vendor" value="Octopus"/>
|
2560
|
+
<param pos="0" name="service.product" value="Deploy"/>
|
2561
|
+
<param pos="0" name="service.certainty" value="0.5"/>
|
2562
|
+
</fingerprint>
|
2563
|
+
|
2564
|
+
<fingerprint pattern="^Android Debug Database$">
|
2565
|
+
<description>Android Debug Database</description>
|
2566
|
+
<example>Android Debug Database</example>
|
2567
|
+
<param pos="0" name="service.vendor" value="Android Debug Database"/>
|
2568
|
+
<param pos="0" name="service.product" value="Android Debug Database"/>
|
2569
|
+
</fingerprint>
|
2570
|
+
|
2571
|
+
<fingerprint pattern="^RStudio Sign In$">
|
2572
|
+
<description>RStudio</description>
|
2573
|
+
<example>RStudio Sign In</example>
|
2574
|
+
<param pos="0" name="service.vendor" value="RStudio"/>
|
2575
|
+
<param pos="0" name="service.product" value="Connect"/>
|
2576
|
+
</fingerprint>
|
2577
|
+
|
2578
|
+
<fingerprint pattern="^(?:TurnKey Moodle|New Site)$">
|
2579
|
+
<description>Moodle</description>
|
2580
|
+
<example>TurnKey Moodle</example>
|
2581
|
+
<example>New Site</example>
|
2582
|
+
<param pos="0" name="service.vendor" value="Moodle"/>
|
2583
|
+
<param pos="0" name="service.product" value="Moodle CMS"/>
|
2584
|
+
<param pos="0" name="service.certainty" value="0.5"/>
|
2585
|
+
</fingerprint>
|
2586
|
+
|
2587
|
+
<fingerprint pattern="^ArchiveTeam Warrior$">
|
2588
|
+
<description>Internet Archive Warrior Appliance</description>
|
2589
|
+
<example>ArchiveTeam Warrior</example>
|
2590
|
+
<param pos="0" name="os.vendor" value="Internet Archive"/>
|
2591
|
+
<param pos="0" name="os.family" value="Linux"/>
|
2592
|
+
<param pos="0" name="os.product" value="Linux"/>
|
2593
|
+
<param pos="0" name="hw.vendor" value="Internet Archive"/>
|
2594
|
+
<param pos="0" name="hw.device" value="Storage Appliance"/>
|
2595
|
+
<param pos="0" name="hw.product" value="ArchiveTeam Warrior"/>
|
2596
|
+
</fingerprint>
|
2597
|
+
|
2598
|
+
<fingerprint pattern="^(?:Dashboard|Log In) - Confluence$">
|
2599
|
+
<description>Atlassian Confluence</description>
|
2600
|
+
<example>Dashboard - Confluence</example>
|
2601
|
+
<example>Log In - Confluence</example>
|
2602
|
+
<param pos="0" name="service.vendor" value="Atlassian"/>
|
2603
|
+
<param pos="0" name="service.product" value="Confluence"/>
|
2604
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:atlassian:confluence:-"/>
|
2605
|
+
</fingerprint>
|
2606
|
+
|
2607
|
+
<fingerprint pattern="^System Dashboard - ">
|
2608
|
+
<description>Atlassian Jira</description>
|
2609
|
+
<example>System Dashboard - Jira</example>
|
2610
|
+
<example>System Dashboard - [Dev Test JIRA]</example>
|
2611
|
+
<param pos="0" name="service.vendor" value="Atlassian"/>
|
2612
|
+
<param pos="0" name="service.product" value="Jira"/>
|
2613
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:atlassian:jira:-"/>
|
2614
|
+
</fingerprint>
|
2615
|
+
|
2616
|
+
<fingerprint pattern="^(?:Welcome to XAMPP|XAMPP for Linux)">
|
2617
|
+
<description>XAMPP Server</description>
|
2618
|
+
<example>Welcome to XAMPP</example>
|
2619
|
+
<example>XAMPP for Linux</example>
|
2620
|
+
<param pos="0" name="service.vendor" value="XAMPP"/>
|
2621
|
+
<param pos="0" name="service.product" value="XAMPP Server"/>
|
2622
|
+
</fingerprint>
|
2623
|
+
|
2624
|
+
<fingerprint pattern="^Greenbone Security (?:Assistant|Manager)">
|
2625
|
+
<description>Greenbone Security Scanner</description>
|
2626
|
+
<example>Greenbone Security Assistant</example>
|
2627
|
+
<example>Greenbone Security Manager</example>
|
2628
|
+
<param pos="0" name="service.vendor" value="Greenbone"/>
|
2629
|
+
<param pos="0" name="service.product" value="Security Scanner"/>
|
2630
|
+
</fingerprint>
|
2631
|
+
|
2632
|
+
<fingerprint pattern="^Kodi$">
|
2633
|
+
<description>Kodi Media Server</description>
|
2634
|
+
<example>Kodi</example>
|
2635
|
+
<param pos="0" name="service.vendor" value="Kodi"/>
|
2636
|
+
<param pos="0" name="service.product" value="Media Server"/>
|
2637
|
+
</fingerprint>
|
2638
|
+
|
2639
|
+
<fingerprint pattern="^(?:Drupal|TurnKey Drupal\d+|Select an installation profile)$">
|
2640
|
+
<description>Drupal CMS</description>
|
2641
|
+
<example>Drupal</example>
|
2642
|
+
<example>TurnKey Drupal8</example>
|
2643
|
+
<example>TurnKey Drupal7</example>
|
2644
|
+
<example>Select an installation profile</example>
|
2645
|
+
<param pos="0" name="service.vendor" value="Drupal"/>
|
2646
|
+
<param pos="0" name="service.product" value="CMS"/>
|
2647
|
+
</fingerprint>
|
2648
|
+
|
2649
|
+
<fingerprint pattern="^LibreNMS$">
|
2650
|
+
<description>LibreNMS</description>
|
2651
|
+
<example>LibreNMS</example>
|
2652
|
+
<param pos="0" name="service.vendor" value="LibreNMS"/>
|
2653
|
+
<param pos="0" name="service.product" value="LibreNMS"/>
|
2654
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:librenms:librenms:-"/>
|
2655
|
+
</fingerprint>
|
2656
|
+
|
2657
|
+
<fingerprint pattern="^HDHomeRun Main Menu$">
|
2658
|
+
<description>HDHomeRun</description>
|
2659
|
+
<example>HDHomeRun Main Menu</example>
|
2660
|
+
<param pos="0" name="os.vendor" value="SiliconDust"/>
|
2661
|
+
<param pos="0" name="os.family" value="Linux"/>
|
2662
|
+
<param pos="0" name="os.product" value="Linux"/>
|
2663
|
+
<param pos="0" name="hw.vendor" value="SiliconDust"/>
|
2664
|
+
<param pos="0" name="hw.device" value="Media Server"/>
|
2665
|
+
<param pos="0" name="hw.product" value="HDHomeRun"/>
|
2666
|
+
</fingerprint>
|
2667
|
+
|
2668
|
+
<fingerprint pattern="^Kubernetes Dashboard$">
|
2669
|
+
<description>Kubernetes Dashboard</description>
|
2670
|
+
<example>Kubernetes Dashboard</example>
|
2671
|
+
<param pos="0" name="service.vendor" value="Kubernetes"/>
|
2672
|
+
<param pos="0" name="service.product" value="Dashboard"/>
|
2673
|
+
</fingerprint>
|
2674
|
+
|
2675
|
+
<fingerprint pattern="^SoundTouch Access Point Setup$">
|
2676
|
+
<description>Bose SoundTouch</description>
|
2677
|
+
<example>SoundTouch Access Point Setup</example>
|
2678
|
+
<param pos="0" name="hw.device" value="Network Audio"/>
|
2679
|
+
<param pos="0" name="hw.vendor" value="Bose"/>
|
2680
|
+
<param pos="0" name="hw.family" value="SoundTouch"/>
|
2681
|
+
<param pos="0" name="os.device" value="Network Audio"/>
|
2682
|
+
<param pos="0" name="os.vendor" value="Bose"/>
|
2683
|
+
<param pos="0" name="os.product" value="SoundTouch"/>
|
2684
|
+
</fingerprint>
|
2685
|
+
|
2686
|
+
<fingerprint pattern="^(?:embedded )?WS server test page$">
|
2687
|
+
<description>Dell iDRAC Websocket Endpoint</description>
|
2688
|
+
<example>WS server test page</example>
|
2689
|
+
<example>embedded WS server test page</example>
|
2690
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
2691
|
+
<param pos="0" name="hw.vendor" value="Dell"/>
|
2692
|
+
<param pos="0" name="hw.product" value="iDRAC"/>
|
2693
|
+
<param pos="0" name="hw.certainty" value="0.75"/>
|
2694
|
+
<param pos="0" name="os.vendor" value="Dell"/>
|
2695
|
+
<param pos="0" name="os.product" value="iDRAC Linux"/>
|
2696
|
+
<param pos="0" name="os .certainty" value="0.75"/>
|
2697
|
+
</fingerprint>
|
2698
|
+
|
2699
|
+
<fingerprint pattern="^Pulse Connect Secure - SSL">
|
2700
|
+
<description>Pulse Secure VPN</description>
|
2701
|
+
<example>Pulse Connect Secure - SSL</example>
|
2702
|
+
<param pos="0" name="os.vendor" value="Pulse Secure"/>
|
2703
|
+
<param pos="0" name="os.family" value="SSL-VPN"/>
|
2704
|
+
<param pos="0" name="os.device" value="SSL-VPN"/>
|
2705
|
+
<param pos="0" name="os.product" value="SSL-VPN"/>
|
2706
|
+
</fingerprint>
|
2707
|
+
|
2708
|
+
</fingerprints>
|