recog 2.3.8 → 2.3.13

Sign up to get free protection for your applications and to get access to all the features.
Files changed (69) hide show
  1. checksums.yaml +4 -4
  2. data/.gitignore +6 -0
  3. data/CONTRIBUTING.md +136 -37
  4. data/README.md +18 -16
  5. data/bin/recog_cleanup +16 -0
  6. data/bin/recog_standardize +30 -6
  7. data/cpe-remap.yaml +18 -2
  8. data/identifiers/README.md +9 -0
  9. data/identifiers/hw_device.txt +77 -0
  10. data/identifiers/hw_family.txt +96 -0
  11. data/identifiers/hw_product.txt +328 -0
  12. data/identifiers/os_architecture.txt +6 -6
  13. data/identifiers/os_device.txt +45 -3
  14. data/identifiers/os_family.txt +206 -41
  15. data/identifiers/os_product.txt +238 -17
  16. data/identifiers/service_family.txt +144 -57
  17. data/identifiers/service_product.txt +385 -83
  18. data/identifiers/vendor.txt +554 -68
  19. data/lib/recog/version.rb +1 -1
  20. data/requirements.txt +1 -1
  21. data/update_cpes.py +3 -0
  22. data/xml/apache_modules.xml +292 -5
  23. data/xml/apache_os.xml +41 -2
  24. data/xml/architecture.xml +11 -3
  25. data/xml/dns_versionbind.xml +191 -15
  26. data/xml/favicons.xml +1701 -0
  27. data/xml/ftp_banners.xml +250 -18
  28. data/xml/h323_callresp.xml +112 -12
  29. data/xml/hp_pjl_id.xml +47 -5
  30. data/xml/html_title.xml +1278 -25
  31. data/xml/http_cookies.xml +64 -9
  32. data/xml/http_servers.xml +1013 -96
  33. data/xml/http_wwwauth.xml +141 -26
  34. data/xml/imap_banners.xml +62 -13
  35. data/xml/ldap_searchresult.xml +81 -9
  36. data/xml/mdns_device-info_txt.xml +175 -2
  37. data/xml/mdns_workstation_txt.xml +4 -2
  38. data/xml/mysql_banners.xml +134 -7
  39. data/xml/mysql_error.xml +113 -6
  40. data/xml/nntp_banners.xml +10 -2
  41. data/xml/ntp_banners.xml +80 -4
  42. data/xml/operating_system.xml +89 -3
  43. data/xml/pop_banners.xml +87 -33
  44. data/xml/rsh_resp.xml +11 -2
  45. data/xml/rtsp_servers.xml +22 -2
  46. data/xml/sip_banners.xml +35 -4
  47. data/xml/sip_user_agents.xml +29 -2
  48. data/xml/smb_native_lm.xml +10 -2
  49. data/xml/smb_native_os.xml +79 -2
  50. data/xml/smtp_banners.xml +230 -9
  51. data/xml/smtp_debug.xml +6 -4
  52. data/xml/smtp_ehlo.xml +7 -5
  53. data/xml/smtp_expn.xml +13 -4
  54. data/xml/smtp_help.xml +23 -4
  55. data/xml/smtp_mailfrom.xml +5 -2
  56. data/xml/smtp_noop.xml +6 -5
  57. data/xml/smtp_quit.xml +5 -4
  58. data/xml/smtp_rcptto.xml +5 -2
  59. data/xml/smtp_rset.xml +4 -4
  60. data/xml/smtp_turn.xml +4 -4
  61. data/xml/smtp_vrfy.xml +14 -4
  62. data/xml/snmp_sysdescr.xml +733 -25
  63. data/xml/snmp_sysobjid.xml +47 -2
  64. data/xml/ssh_banners.xml +182 -8
  65. data/xml/telnet_banners.xml +493 -22
  66. data/xml/x11_banners.xml +26 -3
  67. data/xml/x509_issuers.xml +30 -6
  68. data/xml/x509_subjects.xml +200 -31
  69. metadata +8 -2
data/xml/smb_native_os.xml CHANGED
@@ -1,8 +1,9 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
1
+ <?xml version='1.0' encoding='UTF-8'?>
2
2
  <fingerprints matches="smb.native_os" protocol="smb" database_type="util.os">
3
3
  <!--
4
4
  SMB fingerprints obtained from the Native OS field of SMB negotations
5
5
  -->
6
+
6
7
  <fingerprint pattern="^(Windows NT \d\.\d+)$">
7
8
  <description>Windows NT</description>
8
9
  <example os.product="Windows NT 4.0">Windows NT 4.0</example>
@@ -10,6 +11,7 @@
10
11
  <param pos="0" name="os.vendor" value="Microsoft"/>
11
12
  <param pos="1" name="os.product"/>
12
13
  </fingerprint>
14
+
13
15
  <fingerprint pattern="^(Windows (?:95|98|ME))$">
14
16
  <description>Windows 95/98/ME</description>
15
17
  <example os.product="Windows 95">Windows 95</example>
@@ -18,6 +20,7 @@
18
20
  <param pos="0" name="os.vendor" value="Microsoft"/>
19
21
  <param pos="1" name="os.product"/>
20
22
  </fingerprint>
23
+
21
24
  <fingerprint pattern="^Windows 5\.0$">
22
25
  <description>Windows 2000</description>
23
26
  <example>Windows 5.0</example>
@@ -26,6 +29,7 @@
26
29
  <param pos="0" name="os.product" value="Windows 2000"/>
27
30
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_2000:-"/>
28
31
  </fingerprint>
32
+
29
33
  <fingerprint pattern="^Windows 5\.1$">
30
34
  <description>Windows XP</description>
31
35
  <example>Windows 5.1</example>
@@ -34,6 +38,7 @@
34
38
  <param pos="0" name="os.product" value="Windows XP"/>
35
39
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_xp:-"/>
36
40
  </fingerprint>
41
+
37
42
  <fingerprint pattern="^Windows XP (\d+) (Service Pack \d+)$">
38
43
  <description>Windows XP with Service Pack</description>
39
44
  <example os.build="2600" os.version="Service Pack 1">Windows XP 2600 Service Pack 1</example>
@@ -44,6 +49,7 @@
44
49
  <param pos="2" name="os.version"/>
45
50
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_xp:{os.version}"/>
46
51
  </fingerprint>
52
+
47
53
  <fingerprint pattern="^Windows XP (\d+)$">
48
54
  <description>Windows XP with build number</description>
49
55
  <example os.build="2600">Windows XP 2600</example>
@@ -53,6 +59,7 @@
53
59
  <param pos="1" name="os.build"/>
54
60
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_xp:-"/>
55
61
  </fingerprint>
62
+
56
63
  <fingerprint pattern="^Windows XP (Home|Professional)(?: Edition)?$">
57
64
  <description>Windows XP without a version</description>
58
65
  <example os.edition="Home">Windows XP Home Edition</example>
@@ -63,6 +70,7 @@
63
70
  <param pos="1" name="os.edition"/>
64
71
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_xp:-"/>
65
72
  </fingerprint>
73
+
66
74
  <fingerprint pattern="^Windows \.NET">
67
75
  <description>Windows Server 2003 Beta</description>
68
76
  <param pos="0" name="os.certainty" value="1.0"/>
@@ -71,6 +79,7 @@
71
79
  <param pos="0" name="os.version" value="Beta"/>
72
80
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:Beta"/>
73
81
  </fingerprint>
82
+
74
83
  <fingerprint pattern="^Windows Server 2003 R2 (\d+)$">
75
84
  <description>Windows Server 2003 R2</description>
76
85
  <param pos="0" name="os.certainty" value="1.0"/>
@@ -79,6 +88,7 @@
79
88
  <param pos="1" name="os.build"/>
80
89
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
81
90
  </fingerprint>
91
+
82
92
  <fingerprint pattern="^Windows Server 2003 R2 (\d+) (Service Pack \d+)(?:, v\.\d+)?$">
83
93
  <description>Windows Server 2003 R2 (SP)</description>
84
94
  <example os.build="3790" os.version="Service Pack 2">Windows Server 2003 R2 3790 Service Pack 2</example>
@@ -90,6 +100,7 @@
90
100
  <param pos="2" name="os.version"/>
91
101
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:{os.version}"/>
92
102
  </fingerprint>
103
+
93
104
  <fingerprint pattern="^Windows Server 2003 (\d+)$">
94
105
  <description>Windows Server 2003 with a build</description>
95
106
  <example os.build="3790">Windows Server 2003 3790</example>
@@ -99,6 +110,7 @@
99
110
  <param pos="1" name="os.build"/>
100
111
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
101
112
  </fingerprint>
113
+
102
114
  <fingerprint pattern="^Windows Server 2003$">
103
115
  <description>Windows Server 2003 without a build</description>
104
116
  <example>Windows Server 2003</example>
@@ -107,6 +119,7 @@
107
119
  <param pos="0" name="os.product" value="Windows Server 2003"/>
108
120
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
109
121
  </fingerprint>
122
+
110
123
  <fingerprint pattern="^Windows Server 2003 (\d+) (Service Pack \d+)(?:, v\.\d+)?$">
111
124
  <description>Windows Server 2003 (SP)</description>
112
125
  <example os.build="3790" os.version="Service Pack 1">Windows Server 2003 3790 Service Pack 1, v.3309</example>
@@ -118,7 +131,9 @@
118
131
  <param pos="2" name="os.version"/>
119
132
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:{os.version}"/>
120
133
  </fingerprint>
134
+
121
135
  <!-- Note that 2008 SP1 is technically "2008 Gold" according to Microsoft -->
136
+
122
137
  <fingerprint pattern="^Windows Server 2008$">
123
138
  <description>Windows Server 2008 without a build</description>
124
139
  <example>Windows Server 2008</example>
@@ -127,6 +142,7 @@
127
142
  <param pos="0" name="os.product" value="Windows Server 2008"/>
128
143
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
129
144
  </fingerprint>
145
+
130
146
  <fingerprint pattern="^Windows Server \(R\) 2008 (\w+|\w+ \w+|\w+ \w+ \w+)(?: (?:with|without) Hyper-V|) (\d+) (Service Pack \d+)(?:, v\.\d+)?$">
131
147
  <description>Windows Server 2008</description>
132
148
  <example os.edition="Enterprise" os.version="Service Pack 1">Windows Server (R) 2008 Enterprise without Hyper-V 6001 Service Pack 1</example>
@@ -139,6 +155,7 @@
139
155
  <param pos="3" name="os.version"/>
140
156
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:{os.version}"/>
141
157
  </fingerprint>
158
+
142
159
  <fingerprint pattern="^Windows \(R\) Web Server 2008 (\d+) (Service Pack \d+)$">
143
160
  <description>Windows Web Server 2008 (SP)</description>
144
161
  <example os.edition="Web" os.version="Service Pack 2">Windows (R) Web Server 2008 6002 Service Pack 2</example>
@@ -150,6 +167,7 @@
150
167
  <param pos="2" name="os.version"/>
151
168
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:{os.version}"/>
152
169
  </fingerprint>
170
+
153
171
  <fingerprint pattern="^Windows \(R\) Web Server 2008 (\d+)$">
154
172
  <description>Windows Web Server 2008</description>
155
173
  <example>Windows (R) Web Server 2008 6002</example>
@@ -160,7 +178,9 @@
160
178
  <param pos="1" name="os.build"/>
161
179
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
162
180
  </fingerprint>
181
+
163
182
  <!-- TODO: Need an example string -->
183
+
164
184
  <fingerprint pattern="^Windows \(R\) Storage Server 2008 (?:\w+|\w+ \w+|\w+ \w+ \w+) (\d+) (Service Pack \d+)$">
165
185
  <description>Windows Server 2008 Storage (SP)</description>
166
186
  <param pos="0" name="os.certainty" value="1.0"/>
@@ -171,7 +191,9 @@
171
191
  <param pos="2" name="os.version"/>
172
192
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:{os.version}"/>
173
193
  </fingerprint>
194
+
174
195
  <!-- TODO: Need an example string -->
196
+
175
197
  <fingerprint pattern="^Windows \(R\) Storage Server 2008 (?:\w+|\w+ \w+|\w+ \w+ \w+) (\d+)$">
176
198
  <description>Windows Web Server 2008 Storage</description>
177
199
  <param pos="0" name="os.certainty" value="1.0"/>
@@ -181,6 +203,7 @@
181
203
  <param pos="1" name="os.build"/>
182
204
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
183
205
  </fingerprint>
206
+
184
207
  <fingerprint pattern="^Windows Server 2008 HPC Edition (\d+) (Service Pack \d+)$">
185
208
  <description>Windows Server 2008 HPC</description>
186
209
  <example>Windows Server 2008 HPC Edition 7601 Service Pack 1</example>
@@ -192,7 +215,9 @@
192
215
  <param pos="2" name="os.version"/>
193
216
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:{os.version}"/>
194
217
  </fingerprint>
218
+
195
219
  <!-- TODO: Need an example string -->
220
+
196
221
  <fingerprint pattern="^Windows Server 2008 HPC Edition (\d+)$">
197
222
  <description>Windows Web Server 2008 HPC</description>
198
223
  <example>Windows Server 2008 HPC Edition 7600</example>
@@ -203,7 +228,9 @@
203
228
  <param pos="1" name="os.build"/>
204
229
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
205
230
  </fingerprint>
231
+
206
232
  <!-- 2008 R2 -->
233
+
207
234
  <fingerprint pattern="^Windows Server 2008 R2 (\w+|\w+ \w+|\w+ \w+ \w+) (\d+) (Service Pack \d+)(?:, v\.\d+)?$">
208
235
  <description>Windows Server 2008 R2</description>
209
236
  <example>Windows Server 2008 R2 Enterprise 7601 Service Pack 1</example>
@@ -216,6 +243,7 @@
216
243
  <param pos="3" name="os.version"/>
217
244
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:{os.version}"/>
218
245
  </fingerprint>
246
+
219
247
  <fingerprint pattern="^Windows Server 2008 R2 (\w+|\w+ \w+|\w+ \w+ \w+) (\d+)$">
220
248
  <description>Windows Server 2008 R2 without Service Pack</description>
221
249
  <example os.edition="Enterprise">Windows Server 2008 R2 Enterprise 7600</example>
@@ -228,6 +256,7 @@
228
256
  <param pos="2" name="os.build"/>
229
257
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
230
258
  </fingerprint>
259
+
231
260
  <fingerprint pattern="^Windows Server 2016(?: Technical Preview \d+)? (\w+|\w+ \w+|\w+ \w+ \w+)(?: Evaluation)? (\d+)$">
232
261
  <description>Windows Server 2016 with a build, without service pack</description>
233
262
  <example os.edition="Datacenter" os.build="14393">Windows Server 2016 Datacenter 14393</example>
@@ -240,6 +269,7 @@
240
269
  <param pos="2" name="os.build"/>
241
270
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2016:-"/>
242
271
  </fingerprint>
272
+
243
273
  <fingerprint pattern="^Windows Storage Server 2016 (?:\w+|\w+ \w+|\w+ \w+ \w+) (\d+)$">
244
274
  <description>Windows Server 2016 Storage</description>
245
275
  <example os.build="14393">Windows Storage Server 2016 Standard 14393</example>
@@ -250,6 +280,7 @@
250
280
  <param pos="1" name="os.build"/>
251
281
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2016:-"/>
252
282
  </fingerprint>
283
+
253
284
  <fingerprint pattern="^Windows Web Server 2008 R2 (\d+) (Service Pack \d+)$">
254
285
  <description>Windows Server 2008 R2 Web</description>
255
286
  <example os.version="Service Pack 1">Windows Web Server 2008 R2 7601 Service Pack 1</example>
@@ -261,6 +292,7 @@
261
292
  <param pos="2" name="os.version"/>
262
293
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:{os.version}"/>
263
294
  </fingerprint>
295
+
264
296
  <fingerprint pattern="^Windows Web Server 2008 R2 (\d+)$">
265
297
  <description>Windows Web Server 2008 R2 Web</description>
266
298
  <example>Windows Web Server 2008 R2 7600</example>
@@ -271,6 +303,7 @@
271
303
  <param pos="1" name="os.build"/>
272
304
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
273
305
  </fingerprint>
306
+
274
307
  <fingerprint pattern="^Windows Storage Server 2008 R2 (?:\w+|\w+ \w+|\w+ \w+ \w+) (\d+) (Service Pack \d+)$">
275
308
  <description>Windows Server 2008 Storage R2 (SP)</description>
276
309
  <example os.version="Service Pack 1" os.build="7601">Windows Storage Server 2008 R2 Essentials 7601 Service Pack 1</example>
@@ -282,6 +315,7 @@
282
315
  <param pos="2" name="os.version"/>
283
316
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:{os.version}"/>
284
317
  </fingerprint>
318
+
285
319
  <fingerprint pattern="^Windows Vista \(TM\) (\w+|\w+ \w+|\w+ \w+ \w+) (\d+) (Service Pack \d+)$">
286
320
  <description>Windows Vista (SP)</description>
287
321
  <example os.edition="Home Premium" os.version="Service Pack 2">Windows Vista (TM) Home Premium 6002 Service Pack 2</example>
@@ -293,6 +327,7 @@
293
327
  <param pos="3" name="os.version"/>
294
328
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_vista:{os.version}"/>
295
329
  </fingerprint>
330
+
296
331
  <fingerprint pattern="^Windows Vista \(TM\) (\w+|\w+ \w+|\w+ \w+ \w+) (\d+)$">
297
332
  <description>Windows Vista</description>
298
333
  <example os.edition="Home Premium">Windows Vista (TM) Home Premium 6000</example>
@@ -303,6 +338,7 @@
303
338
  <param pos="2" name="os.build"/>
304
339
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_vista:-"/>
305
340
  </fingerprint>
341
+
306
342
  <fingerprint pattern="^(Windows (?:7|8|8\.1)(?:| RT)) (\w+|\w+ \w+|\w+ \w+ \w+) (\d+) (Service Pack \d+)(?:, v\.\d+)?$">
307
343
  <description>Windows 7/8 (SP + Edition)</description>
308
344
  <example os.edition="Enterprise" os.version="Service Pack 1">Windows 7 Enterprise 7601 Service Pack 1</example>
@@ -315,6 +351,7 @@
315
351
  <param pos="3" name="os.build"/>
316
352
  <param pos="4" name="os.version"/>
317
353
  </fingerprint>
354
+
318
355
  <fingerprint pattern="^(Windows (?:7|8|8\.1)(?:| RT)) (\d+) (Service Pack \d+)$">
319
356
  <description>Windows 7/8 (SP)</description>
320
357
  <example os.version="Service Pack 1">Windows 7 7601 Service Pack 1</example>
@@ -324,6 +361,7 @@
324
361
  <param pos="2" name="os.build"/>
325
362
  <param pos="3" name="os.version"/>
326
363
  </fingerprint>
364
+
327
365
  <fingerprint pattern="^(Windows (?:7|8|8\.1)(?:| RT)) (\w+|\w+ \w+|\w+ \w+ \w+) (\d+)$">
328
366
  <description>Windows 7/8 (Edition)</description>
329
367
  <example os.edition="Enterprise">Windows 7 Enterprise 7600</example>
@@ -335,6 +373,7 @@
335
373
  <param pos="2" name="os.edition"/>
336
374
  <param pos="3" name="os.build"/>
337
375
  </fingerprint>
376
+
338
377
  <fingerprint pattern="^(Windows (?:7|8|8\.1)(?:| RT)) (\d+)$">
339
378
  <description>Windows 7/8</description>
340
379
  <example>Windows 8 9200</example>
@@ -343,8 +382,11 @@
343
382
  <param pos="1" name="os.product"/>
344
383
  <param pos="2" name="os.build"/>
345
384
  </fingerprint>
385
+
346
386
  <!-- Windows 2012 R2 matches go first to simplify the regular expressions -->
387
+
347
388
  <!-- TODO: Need an example string -->
389
+
348
390
  <fingerprint pattern="^Windows Server 2012 R2 (\w+|\w+ \w+|\w+ \w+ \w+) (\d+) (Service Pack \d+)$">
349
391
  <description>Windows Server 2012 R2 (SP)</description>
350
392
  <param pos="0" name="os.certainty" value="1.0"/>
@@ -355,6 +397,7 @@
355
397
  <param pos="3" name="os.version"/>
356
398
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:{os.version}"/>
357
399
  </fingerprint>
400
+
358
401
  <fingerprint pattern="^Windows Server 2012 R2 (\w+|\w+ \w+|\w+ \w+ \w+) (\d+)$">
359
402
  <description>Windows Server 2012 R2</description>
360
403
  <example os.edition="Standard">Windows Server 2012 R2 Standard 9600</example>
@@ -365,7 +408,9 @@
365
408
  <param pos="2" name="os.build"/>
366
409
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
367
410
  </fingerprint>
411
+
368
412
  <!-- TODO: Need an example string -->
413
+
369
414
  <fingerprint pattern="^Windows Server 2012 (\w+|\w+ \w+|\w+ \w+ \w+) (\d+) (Service Pack \d+)$">
370
415
  <description>Windows Server 2012 (SP)</description>
371
416
  <param pos="0" name="os.certainty" value="1.0"/>
@@ -376,6 +421,7 @@
376
421
  <param pos="3" name="os.version"/>
377
422
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:{os.version}"/>
378
423
  </fingerprint>
424
+
379
425
  <fingerprint pattern="^Windows Server 2012 (\w+|\w+ \w+|\w+ \w+ \w+) (\d+)$">
380
426
  <description>Windows Server 2012</description>
381
427
  <example>Windows Server 2012 Standard 9200</example>
@@ -386,6 +432,7 @@
386
432
  <param pos="2" name="os.build"/>
387
433
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
388
434
  </fingerprint>
435
+
389
436
  <fingerprint pattern="^Windows MultiPoint Server 2012 (?:\w+|\w+ \w+|\w+ \w+ \w+) (\d+) (Service Pack \d+)$">
390
437
  <description>Windows MultiPoint Server 2012 (SP)</description>
391
438
  <example os.build="9201" os.version="Service Pack 1">Windows MultiPoint Server 2012 Premium 9201 Service Pack 1</example>
@@ -397,6 +444,7 @@
397
444
  <param pos="2" name="os.version"/>
398
445
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:{os.version}"/>
399
446
  </fingerprint>
447
+
400
448
  <fingerprint pattern="^Windows MultiPoint Server 2012 (?:\w+|\w+ \w+|\w+ \w+ \w+) (\d+)$">
401
449
  <description>Windows MultiPoint Server 2012</description>
402
450
  <example os.build="9200">Windows MultiPoint Server 2012 Premium 9200</example>
@@ -407,7 +455,9 @@
407
455
  <param pos="1" name="os.build"/>
408
456
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
409
457
  </fingerprint>
458
+
410
459
  <!-- Windows 10 Preview -->
460
+
411
461
  <fingerprint pattern="^Windows 10 (\w+|\w+ \w+|\w+ \w+ \w+) Insider Preview (\d+)$">
412
462
  <description>Windows 10 Enterprise Insider Preview</description>
413
463
  <example os.build="10130" os.edition="Enterprise">Windows 10 Enterprise Insider Preview 10130</example>
@@ -418,6 +468,7 @@
418
468
  <param pos="2" name="os.build"/>
419
469
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_10:-"/>
420
470
  </fingerprint>
471
+
421
472
  <fingerprint pattern="^Windows 10 ((?:\w+|\w+ \w+|\w+ \w+ \w+)(?: LTSB(?: Evaluation)?)?) (\d+)$">
422
473
  <description>Windows 10</description>
423
474
  <example os.build="10130" os.edition="Enterprise">Windows 10 Enterprise 10130</example>
@@ -435,6 +486,7 @@
435
486
  <param pos="2" name="os.build"/>
436
487
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_10:-"/>
437
488
  </fingerprint>
489
+
438
490
  <fingerprint pattern="^VxWorks">
439
491
  <description>VxWorks</description>
440
492
  <example>VxWorks</example>
@@ -445,6 +497,7 @@
445
497
  <param pos="0" name="service.vendor" value="Wind River"/>
446
498
  <param pos="0" name="service.product" value="VxWorks CIFS"/>
447
499
  </fingerprint>
500
+
448
501
  <fingerprint pattern="^OS/400 \D(\d+)\D(\d+)\D(\d+)">
449
502
  <description>OS/400</description>
450
503
  <example os.version="4" os.version.version="5" os.version.version.version="0">OS/400 V4R5M0</example>
@@ -455,12 +508,14 @@
455
508
  <param pos="3" name="os.version.version.version"/>
456
509
  <param pos="0" name="os.cpe23" value="cpe:/o:ibm:os_400:{os.version}"/>
457
510
  </fingerprint>
511
+
458
512
  <fingerprint pattern="^Apple Base Station$">
459
513
  <description>SMB exposed via SMB shared USB disks on Apple devices</description>
460
514
  <example>Apple Base Station</example>
461
515
  <param pos="0" name="os.vendor" value="Apple"/>
462
516
  <param pos="0" name="hw.vendor" value="Apple"/>
463
517
  </fingerprint>
518
+
464
519
  <fingerprint pattern="^EMC-SNAS:T([\d\.]+)?$">
465
520
  <description>EMC Celerra</description>
466
521
  <example service.version="7.1.80.7">EMC-SNAS:T7.1.80.7</example>
@@ -475,12 +530,15 @@
475
530
  <param pos="0" name="hw.device" value="Storage"/>
476
531
  <param pos="0" name="hw.product" value="Celerra"/>
477
532
  </fingerprint>
533
+
478
534
  <fingerprint pattern="^Netreon OS 1.0$">
479
535
  <description>Netreon SAN software</description>
480
536
  <example>Netreon OS 1.0</example>
481
537
  <param pos="0" name="service.vendor" value="Netreon"/>
482
538
  </fingerprint>
539
+
483
540
  <!-- VisionFS -->
541
+
484
542
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)ai(\d{4})">
485
543
  <description>AIX</description>
486
544
  <example service.version="9876">axai9876</example>
@@ -491,6 +549,7 @@
491
549
  <param pos="0" name="service.product" value="VisionFS"/>
492
550
  <param pos="1" name="service.version"/>
493
551
  </fingerprint>
552
+
494
553
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)dg(\d{4})">
495
554
  <description>DG/UX</description>
496
555
  <example service.version="9876">i3dg9876</example>
@@ -500,6 +559,7 @@
500
559
  <param pos="0" name="service.product" value="VisionFS"/>
501
560
  <param pos="1" name="service.version"/>
502
561
  </fingerprint>
562
+
503
563
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)dw(\d{4})">
504
564
  <description>Darwin</description>
505
565
  <example service.version="9876">m8dw9876</example>
@@ -510,6 +570,7 @@
510
570
  <param pos="0" name="service.product" value="VisionFS"/>
511
571
  <param pos="1" name="service.version"/>
512
572
  </fingerprint>
573
+
513
574
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)dy(\d{4})">
514
575
  <description>DYNIX</description>
515
576
  <example service.version="9876">m8dy9876</example>
@@ -519,6 +580,7 @@
519
580
  <param pos="0" name="service.product" value="VisionFS"/>
520
581
  <param pos="1" name="service.version"/>
521
582
  </fingerprint>
583
+
522
584
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)fb(\d{4})">
523
585
  <description>FreeBSD</description>
524
586
  <example service.version="9876">m8fb9876</example>
@@ -529,6 +591,7 @@
529
591
  <param pos="0" name="service.product" value="VisionFS"/>
530
592
  <param pos="1" name="service.version"/>
531
593
  </fingerprint>
594
+
532
595
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)hp(\d{4})">
533
596
  <description>HP-UX</description>
534
597
  <example service.version="9876">m8hp9876</example>
@@ -539,6 +602,7 @@
539
602
  <param pos="0" name="service.product" value="VisionFS"/>
540
603
  <param pos="1" name="service.version"/>
541
604
  </fingerprint>
605
+
542
606
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)ir(\d{4})">
543
607
  <description>IRIX</description>
544
608
  <example service.version="9876">m8ir9876</example>
@@ -549,6 +613,7 @@
549
613
  <param pos="0" name="service.product" value="VisionFS"/>
550
614
  <param pos="1" name="service.version"/>
551
615
  </fingerprint>
616
+
552
617
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)li(\d{4})">
553
618
  <description>Linux</description>
554
619
  <example service.version="9876">m8li9876</example>
@@ -559,6 +624,7 @@
559
624
  <param pos="0" name="service.product" value="VisionFS"/>
560
625
  <param pos="1" name="service.version"/>
561
626
  </fingerprint>
627
+
562
628
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)mo(\d{4})">
563
629
  <description>SVR</description>
564
630
  <example service.version="9876">m8mo9876</example>
@@ -568,6 +634,7 @@
568
634
  <param pos="0" name="service.product" value="VisionFS"/>
569
635
  <param pos="1" name="service.version"/>
570
636
  </fingerprint>
637
+
571
638
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)o1(\d{4})">
572
639
  <description>OSF/1</description>
573
640
  <example service.version="9876">m8o19876</example>
@@ -577,6 +644,7 @@
577
644
  <param pos="0" name="service.product" value="VisionFS"/>
578
645
  <param pos="1" name="service.version"/>
579
646
  </fingerprint>
647
+
580
648
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)ro(\d{4})">
581
649
  <description>RISC OS</description>
582
650
  <example service.version="9876">m8ro9876</example>
@@ -585,6 +653,7 @@
585
653
  <param pos="0" name="service.product" value="VisionFS"/>
586
654
  <param pos="1" name="service.version"/>
587
655
  </fingerprint>
656
+
588
657
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)sc(\d{4})">
589
658
  <description>OpenServer</description>
590
659
  <example service.version="9876">m8sc9876</example>
@@ -594,6 +663,7 @@
594
663
  <param pos="0" name="service.product" value="VisionFS"/>
595
664
  <param pos="1" name="service.version"/>
596
665
  </fingerprint>
666
+
597
667
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)so(\d{4})">
598
668
  <description>SunOS</description>
599
669
  <example service.version="9876">m8so9876</example>
@@ -604,6 +674,7 @@
604
674
  <param pos="0" name="service.product" value="VisionFS"/>
605
675
  <param pos="1" name="service.version"/>
606
676
  </fingerprint>
677
+
607
678
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)su(\d{4})">
608
679
  <description>Solaris</description>
609
680
  <example service.version="9876">m8su9876</example>
@@ -614,6 +685,7 @@
614
685
  <param pos="0" name="service.product" value="VisionFS"/>
615
686
  <param pos="1" name="service.version"/>
616
687
  </fingerprint>
688
+
617
689
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)sx(\d{4})">
618
690
  <description>SINIX</description>
619
691
  <example service.version="9876">m8sx9876</example>
@@ -623,6 +695,7 @@
623
695
  <param pos="0" name="service.product" value="VisionFS"/>
624
696
  <param pos="1" name="service.version"/>
625
697
  </fingerprint>
698
+
626
699
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)ul(\d{4})">
627
700
  <description>Ultrix/1</description>
628
701
  <example service.version="9876">m8ul9876</example>
@@ -632,6 +705,7 @@
632
705
  <param pos="0" name="service.product" value="VisionFS"/>
633
706
  <param pos="1" name="service.version"/>
634
707
  </fingerprint>
708
+
635
709
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)un(\d{4})">
636
710
  <description>UnixWare</description>
637
711
  <example service.version="9876">m8un9876</example>
@@ -641,6 +715,7 @@
641
715
  <param pos="0" name="service.product" value="VisionFS"/>
642
716
  <param pos="1" name="service.version"/>
643
717
  </fingerprint>
718
+
644
719
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)wi(\d{4})">
645
720
  <description>Windows</description>
646
721
  <example service.version="9876">m8wi9876</example>
@@ -651,6 +726,7 @@
651
726
  <param pos="0" name="service.product" value="VisionFS"/>
652
727
  <param pos="1" name="service.version"/>
653
728
  </fingerprint>
729
+
654
730
  <fingerprint pattern="^(?i:unix)$">
655
731
  <description>Generally some Samba variant, which reports Unix</description>
656
732
  <example>Unix</example>
@@ -660,4 +736,5 @@
660
736
  <param pos="0" name="service.vendor" value="Samba"/>
661
737
  <param pos="0" name="service.cpe23" value="cpe:/a:samba:samba:-"/>
662
738
  </fingerprint>
663
- </fingerprints>
739
+
740
+ </fingerprints>