recog 3.0.1 → 3.0.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (22) hide show
  1. checksums.yaml +4 -4
  2. checksums.yaml.gz.sig +0 -0
  3. data/lib/recog/match_reporter.rb +37 -3
  4. data/lib/recog/matcher.rb +5 -10
  5. data/lib/recog/version.rb +1 -1
  6. data/recog/bin/recog_match +20 -6
  7. data/recog/xml/dhcp_vendor_class.xml +219 -2
  8. data/recog/xml/favicons.xml +152 -48
  9. data/recog/xml/ftp_banners.xml +11 -0
  10. data/recog/xml/html_title.xml +128 -19
  11. data/recog/xml/http_cookies.xml +25 -7
  12. data/recog/xml/http_servers.xml +79 -5
  13. data/recog/xml/http_wwwauth.xml +8 -0
  14. data/recog/xml/imap_banners.xml +28 -16
  15. data/recog/xml/pop_banners.xml +8 -8
  16. data/recog/xml/tls_jarm.xml +6 -6
  17. data/recog/xml/x509_issuers.xml +8 -0
  18. data/recog/xml/x509_subjects.xml +29 -0
  19. data/spec/lib/recog/match_reporter_spec.rb +22 -8
  20. data.tar.gz.sig +0 -0
  21. metadata +91 -6
  22. metadata.gz.sig +0 -0
data/recog/xml/favicons.xml CHANGED
@@ -6,7 +6,7 @@
6
6
 
7
7
  <!-- Services -->
8
8
 
9
- <fingerprint pattern="^4297c114f263c206ed12aaff4b0c7a50|e5af3b68e837498a85b25ef2c36a0825$">
9
+ <fingerprint pattern="^(?:4297c114f263c206ed12aaff4b0c7a50|e5af3b68e837498a85b25ef2c36a0825)$">
10
10
  <description>Metabase</description>
11
11
  <example>4297c114f263c206ed12aaff4b0c7a50</example>
12
12
  <example>e5af3b68e837498a85b25ef2c36a0825</example>
@@ -75,7 +75,7 @@
75
75
  <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:-"/>
76
76
  </fingerprint>
77
77
 
78
- <fingerprint pattern="^b6341dfc213100c61db4fb8775878cec|cf2445dcb53a031c02f9b57e2199bc03$">
78
+ <fingerprint pattern="^(?:b6341dfc213100c61db4fb8775878cec|cf2445dcb53a031c02f9b57e2199bc03)$">
79
79
  <description>Drupal CMS</description>
80
80
  <example>b6341dfc213100c61db4fb8775878cec</example>
81
81
  <example>cf2445dcb53a031c02f9b57e2199bc03</example>
@@ -102,7 +102,7 @@
102
102
  <param pos="0" name="service.certainty" value="0.5"/>
103
103
  </fingerprint>
104
104
 
105
- <fingerprint pattern="^268ee26a1219a611828d5fd4bc4d69c0|5a84c349c00d95c8ebd174ded3b50a86|2b37c7f35285c341ec1f2cf7e40a3c22$">
105
+ <fingerprint pattern="^(?:268ee26a1219a611828d5fd4bc4d69c0|5a84c349c00d95c8ebd174ded3b50a86|2b37c7f35285c341ec1f2cf7e40a3c22)$">
106
106
  <description>Jenkins</description>
107
107
  <example>268ee26a1219a611828d5fd4bc4d69c0</example>
108
108
  <example>5a84c349c00d95c8ebd174ded3b50a86</example>
@@ -113,7 +113,7 @@
113
113
  <param pos="0" name="service.cpe23" value="cpe:/a:jenkins:jenkins:-"/>
114
114
  </fingerprint>
115
115
 
116
- <fingerprint pattern="^6eb4a43cb64c97f76562af703893c8fd|3bd2ec61324ad4d27cb7b0f484cd4289$">
116
+ <fingerprint pattern="^(?:6eb4a43cb64c97f76562af703893c8fd|3bd2ec61324ad4d27cb7b0f484cd4289)$">
117
117
  <description>XAMPP Server</description>
118
118
  <example>6eb4a43cb64c97f76562af703893c8fd</example>
119
119
  <example>3bd2ec61324ad4d27cb7b0f484cd4289</example>
@@ -122,7 +122,7 @@
122
122
  <param pos="0" name="service.certainty" value="0.5"/>
123
123
  </fingerprint>
124
124
 
125
- <fingerprint pattern="^1391664373e72311a656c4a5504682af|88717398db158e3330ce94fc1784e4a7|04d89d5b7a290334f5ce37c7e8b6a349|08aa365c2d0863df2735d386f77c22c2$">
125
+ <fingerprint pattern="^(?:1391664373e72311a656c4a5504682af|88717398db158e3330ce94fc1784e4a7|04d89d5b7a290334f5ce37c7e8b6a349|08aa365c2d0863df2735d386f77c22c2)$">
126
126
  <description>Atlassian Jira</description>
127
127
  <example>1391664373e72311a656c4a5504682af</example>
128
128
  <example>88717398db158e3330ce94fc1784e4a7</example>
@@ -134,6 +134,14 @@
134
134
  <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:jira:-"/>
135
135
  </fingerprint>
136
136
 
137
+ <fingerprint pattern="^d9edf2a6f791120dea5f27ae4faf1212$">
138
+ <description>Atlassian Bitbucket</description>
139
+ <example>d9edf2a6f791120dea5f27ae4faf1212</example>
140
+ <param pos="0" name="service.vendor" value="Atlassian"/>
141
+ <param pos="0" name="service.product" value="Bitbucket"/>
142
+ <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:bitbucket:-"/>
143
+ </fingerprint>
144
+
137
145
  <fingerprint pattern="^135aed33c0a7b8f44f0227a71b9ce345$">
138
146
  <description>Moodle</description>
139
147
  <example>135aed33c0a7b8f44f0227a71b9ce345</example>
@@ -168,7 +176,7 @@
168
176
  <param pos="0" name="service.certainty" value="0.5"/>
169
177
  </fingerprint>
170
178
 
171
- <fingerprint pattern="^e467554976ad3162eec9dfbf83e2c324|b338542efc5676d771c21fe94faf12b3$">
179
+ <fingerprint pattern="^(?:e467554976ad3162eec9dfbf83e2c324|b338542efc5676d771c21fe94faf12b3)$">
172
180
  <description>ownCloud</description>
173
181
  <example>e467554976ad3162eec9dfbf83e2c324</example>
174
182
  <example>b338542efc5676d771c21fe94faf12b3</example>
@@ -240,6 +248,30 @@
240
248
  <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_adaudit_plus:-"/>
241
249
  </fingerprint>
242
250
 
251
+ <fingerprint pattern="^895eea03838bb521717d632eec739e57$">
252
+ <description>ManageEngine PAM360</description>
253
+ <example>895eea03838bb521717d632eec739e57</example>
254
+ <param pos="0" name="service.vendor" value="ManageEngine"/>
255
+ <param pos="0" name="service.product" value="PAM360"/>
256
+ <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_pam360:-"/>
257
+ </fingerprint>
258
+
259
+ <fingerprint pattern="^611f1994a0ca4ce57eabe2f45b54dd07$">
260
+ <description>ManageEngine Password Manager Pro</description>
261
+ <example>611f1994a0ca4ce57eabe2f45b54dd07</example>
262
+ <param pos="0" name="service.vendor" value="ManageEngine"/>
263
+ <param pos="0" name="service.product" value="ManageEngine Password Manager Pro"/>
264
+ <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_password_manager_pro:-"/>
265
+ </fingerprint>
266
+
267
+ <fingerprint pattern="^9db18be9073f41227b4fb0c1715ce82d$">
268
+ <description>ManageEngine Access Manager Plus</description>
269
+ <example>9db18be9073f41227b4fb0c1715ce82d</example>
270
+ <param pos="0" name="service.vendor" value="ManageEngine"/>
271
+ <param pos="0" name="service.product" value="Access Manager Plus"/>
272
+ <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_access_manager_plus:-"/>
273
+ </fingerprint>
274
+
243
275
  <fingerprint pattern="^e9d6d23a961ea23a3e961266876e0ffd$">
244
276
  <description>HPE OfficeConnect Switch</description>
245
277
  <example>e9d6d23a961ea23a3e961266876e0ffd</example>
@@ -354,7 +386,7 @@
354
386
  <param pos="0" name="service.certainty" value="0.5"/>
355
387
  </fingerprint>
356
388
 
357
- <fingerprint pattern="^c02e22ca67f83a0fb6f2fd265074910a|68e1a9c89026b0efeddf718a48c282a5$">
389
+ <fingerprint pattern="^(?:c02e22ca67f83a0fb6f2fd265074910a|68e1a9c89026b0efeddf718a48c282a5)$">
358
390
  <description>HashiCorp Vault</description>
359
391
  <example>c02e22ca67f83a0fb6f2fd265074910a</example>
360
392
  <example>68e1a9c89026b0efeddf718a48c282a5</example>
@@ -386,7 +418,7 @@
386
418
  <param pos="0" name="service.cpe23" value="cpe:/a:apple:cups:1.x"/>
387
419
  </fingerprint>
388
420
 
389
- <fingerprint pattern="^448fa67ece2a35d57e8d19808d350e9b|0c9183bd23ed47288c733499fce4498c|c4302a71aae96e158c3057c66184abbd$">
421
+ <fingerprint pattern="^(?:448fa67ece2a35d57e8d19808d350e9b|0c9183bd23ed47288c733499fce4498c|c4302a71aae96e158c3057c66184abbd)$">
390
422
  <description>Apple CUPS 2.x</description>
391
423
  <example>448fa67ece2a35d57e8d19808d350e9b</example>
392
424
  <example>0c9183bd23ed47288c733499fce4498c</example>
@@ -416,7 +448,7 @@
416
448
  <param pos="0" name="service.certainty" value="0.5"/>
417
449
  </fingerprint>
418
450
 
419
- <fingerprint pattern="^4f21edb50ae95a99bbd4aa0a956a179e|1531801cb9e3047e72034ed34da9d104$">
451
+ <fingerprint pattern="^(?:4f21edb50ae95a99bbd4aa0a956a179e|1531801cb9e3047e72034ed34da9d104)$">
420
452
  <description>Apache Airflow</description>
421
453
  <example>4f21edb50ae95a99bbd4aa0a956a179e</example>
422
454
  <example>1531801cb9e3047e72034ed34da9d104</example>
@@ -434,7 +466,7 @@
434
466
  <param pos="0" name="service.certainty" value="0.5"/>
435
467
  </fingerprint>
436
468
 
437
- <fingerprint pattern="^9b67ee27ad29bd721c0c1f5e5a1a5211|801164802554cf799c6fc3851f93e0e1$">
469
+ <fingerprint pattern="^(?:9b67ee27ad29bd721c0c1f5e5a1a5211|801164802554cf799c6fc3851f93e0e1)$">
438
470
  <description>Gerrit Code Review</description>
439
471
  <example>9b67ee27ad29bd721c0c1f5e5a1a5211</example>
440
472
  <example>801164802554cf799c6fc3851f93e0e1</example>
@@ -443,7 +475,7 @@
443
475
  <param pos="0" name="service.certainty" value="0.5"/>
444
476
  </fingerprint>
445
477
 
446
- <fingerprint pattern="^9e312675a79186e08436bcc2cf314608|ed9dc05a5dde54b22d2edb16d9b68ab0$">
478
+ <fingerprint pattern="^(?:9e312675a79186e08436bcc2cf314608|ed9dc05a5dde54b22d2edb16d9b68ab0)$">
447
479
  <description>Apache Druid</description>
448
480
  <example>9e312675a79186e08436bcc2cf314608</example>
449
481
  <example>ed9dc05a5dde54b22d2edb16d9b68ab0</example>
@@ -453,7 +485,7 @@
453
485
  <param pos="0" name="service.cpe23" value="cpe:/a:apache:druid:-"/>
454
486
  </fingerprint>
455
487
 
456
- <fingerprint pattern="^ec60d8d2f3b0ded27c5767189882685c|5856edf7bcbea0817312d9e535e5eb2a|f4f3cb900258441d5dbc9105b7ab9b44|c6acedaff906029fc5455d9ec52c7f42$">
488
+ <fingerprint pattern="^(?:ec60d8d2f3b0ded27c5767189882685c|5856edf7bcbea0817312d9e535e5eb2a|f4f3cb900258441d5dbc9105b7ab9b44|c6acedaff906029fc5455d9ec52c7f42)$">
457
489
  <description>VMware Horizon</description>
458
490
  <example>ec60d8d2f3b0ded27c5767189882685c</example>
459
491
  <example>5856edf7bcbea0817312d9e535e5eb2a</example>
@@ -495,7 +527,7 @@
495
527
  <param pos="0" name="os.device" value="Router"/>
496
528
  </fingerprint>
497
529
 
498
- <fingerprint pattern="^bad2c1f96cd66e70b4aa119e7270cc62|966e60f8eb85b7ea43a7b0095f3e2336$">
530
+ <fingerprint pattern="^(?:bad2c1f96cd66e70b4aa119e7270cc62|966e60f8eb85b7ea43a7b0095f3e2336)$">
499
531
  <description>Atlassian Confluence</description>
500
532
  <example>bad2c1f96cd66e70b4aa119e7270cc62</example>
501
533
  <example>966e60f8eb85b7ea43a7b0095f3e2336</example>
@@ -540,7 +572,7 @@
540
572
  <param pos="0" name="service.cpe23" value="cpe:/a:cpanel:cpanel:-"/>
541
573
  </fingerprint>
542
574
 
543
- <fingerprint pattern="^765835f9b71c7f8405f5776d2a6ce49b|e6942b8d321aee26b514ef5513583d52$">
575
+ <fingerprint pattern="^(?:765835f9b71c7f8405f5776d2a6ce49b|e6942b8d321aee26b514ef5513583d52)$">
544
576
  <description>Spiceworks</description>
545
577
  <example>765835f9b71c7f8405f5776d2a6ce49b</example>
546
578
  <example>e6942b8d321aee26b514ef5513583d52</example>
@@ -549,7 +581,7 @@
549
581
  <param pos="0" name="service.certainty" value="0.5"/>
550
582
  </fingerprint>
551
583
 
552
- <fingerprint pattern="^07ba76de1eb6c4550bfbf627a21cd6f8|9cc719577e8de0abd0d76f43a40c2956|5f09cded07bb864fd9b3d2dd72b5418e$">
584
+ <fingerprint pattern="^(?:07ba76de1eb6c4550bfbf627a21cd6f8|9cc719577e8de0abd0d76f43a40c2956|5f09cded07bb864fd9b3d2dd72b5418e)$">
553
585
  <description>Twonky Server</description>
554
586
  <example>07ba76de1eb6c4550bfbf627a21cd6f8</example>
555
587
  <example>9cc719577e8de0abd0d76f43a40c2956</example>
@@ -628,7 +660,7 @@
628
660
  <param pos="0" name="service.certainty" value="0.5"/>
629
661
  </fingerprint>
630
662
 
631
- <fingerprint pattern="^f7e3d97f404e71d302b3239eef48d5f2|bfac77149bf662238eb92d9b65c88a2a|85c754581e1d4b628be5b7712c042224$">
663
+ <fingerprint pattern="^(?:f7e3d97f404e71d302b3239eef48d5f2|bfac77149bf662238eb92d9b65c88a2a|85c754581e1d4b628be5b7712c042224)$">
632
664
  <description>GitLab</description>
633
665
  <example>f7e3d97f404e71d302b3239eef48d5f2</example>
634
666
  <example>bfac77149bf662238eb92d9b65c88a2a</example>
@@ -663,7 +695,7 @@
663
695
  <param pos="0" name="service.certainty" value="0.5"/>
664
696
  </fingerprint>
665
697
 
666
- <fingerprint pattern="^e43ad9b75957c46a5975ded0f85a95b4|2145225dd4406c274c317f8d80ccf584$">
698
+ <fingerprint pattern="^(?:e43ad9b75957c46a5975ded0f85a95b4|2145225dd4406c274c317f8d80ccf584)$">
667
699
  <description>Elastic Kibana</description>
668
700
  <example>e43ad9b75957c46a5975ded0f85a95b4</example>
669
701
  <example>2145225dd4406c274c317f8d80ccf584</example>
@@ -673,7 +705,7 @@
673
705
  <param pos="0" name="service.cpe23" value="cpe:/a:elastic:kibana:-"/>
674
706
  </fingerprint>
675
707
 
676
- <fingerprint pattern="^ef07026465d7b449a9759132486d1e3b|bcc4933f81eff43e5d9bcc5b2828aa70|b204c198a410e5ee28346c4a2110535e|c00da11c81f9b887eed4123daee89909$">
708
+ <fingerprint pattern="^(?:ef07026465d7b449a9759132486d1e3b|bcc4933f81eff43e5d9bcc5b2828aa70|b204c198a410e5ee28346c4a2110535e|c00da11c81f9b887eed4123daee89909)$">
677
709
  <description>Grafana</description>
678
710
  <example>ef07026465d7b449a9759132486d1e3b</example>
679
711
  <example>bcc4933f81eff43e5d9bcc5b2828aa70</example>
@@ -742,7 +774,7 @@
742
774
  <param pos="0" name="service.cpe23" value="cpe:/a:redhat:wildfly:-"/>
743
775
  </fingerprint>
744
776
 
745
- <fingerprint pattern="^05664fb0c7afcd6436179437e31f3aa6|f45f040baaf5200eb82a54296e6040cd$">
777
+ <fingerprint pattern="^(?:05664fb0c7afcd6436179437e31f3aa6|f45f040baaf5200eb82a54296e6040cd)$">
746
778
  <description>Apache ActiveMQ</description>
747
779
  <example>05664fb0c7afcd6436179437e31f3aa6</example>
748
780
  <example>f45f040baaf5200eb82a54296e6040cd</example>
@@ -753,7 +785,7 @@
753
785
  <param pos="0" name="service.cpe23" value="cpe:/a:apache:activemq:-"/>
754
786
  </fingerprint>
755
787
 
756
- <fingerprint pattern="^8bbf74c036031fd834342ca75e9603d8|09353a60731f33fea28b3379407e20a2$">
788
+ <fingerprint pattern="^(?:8bbf74c036031fd834342ca75e9603d8|09353a60731f33fea28b3379407e20a2)$">
757
789
  <description>OpenStack Director</description>
758
790
  <example>8bbf74c036031fd834342ca75e9603d8</example>
759
791
  <example>09353a60731f33fea28b3379407e20a2</example>
@@ -778,14 +810,20 @@
778
810
  <param pos="0" name="service.certainty" value="0.5"/>
779
811
  </fingerprint>
780
812
 
781
- <fingerprint pattern="^97c6417ed01bdc0ae3ef32ae4894fd03|e2f298e9811cd34a08bf5bb69e2d1d6a$">
782
- <description>Jupyter Notebook</description>
813
+ <fingerprint pattern="^(?:97c6417ed01bdc0ae3ef32ae4894fd03|e2f298e9811cd34a08bf5bb69e2d1d6a)$">
814
+ <description>Jupyter Products</description>
783
815
  <example>97c6417ed01bdc0ae3ef32ae4894fd03</example>
784
816
  <example>e2f298e9811cd34a08bf5bb69e2d1d6a</example>
785
817
  <param pos="0" name="service.vendor" value="Jupyter"/>
786
- <param pos="0" name="service.product" value="Notebook"/>
787
818
  <param pos="0" name="service.certainty" value="0.5"/>
788
- <param pos="0" name="service.cpe23" value="cpe:/a:jupyter:notebook:-"/>
819
+ </fingerprint>
820
+
821
+ <fingerprint pattern="^7102bb857703a0fece6d039a6777fc3f$">
822
+ <description>Jupyter BinderHub</description>
823
+ <example>7102bb857703a0fece6d039a6777fc3f</example>
824
+ <param pos="0" name="service.vendor" value="Jupyter"/>
825
+ <param pos="0" name="service.product" value="BinderHub"/>
826
+ <param pos="0" name="service.cpe23" value="cpe:/a:jupyter:binderhub:-"/>
789
827
  </fingerprint>
790
828
 
791
829
  <fingerprint pattern="^36b3ef286fa4befbb797a0966b456479$">
@@ -796,7 +834,7 @@
796
834
  <param pos="0" name="service.certainty" value="0.5"/>
797
835
  </fingerprint>
798
836
 
799
- <fingerprint pattern="^0000eeec59841e6e63dd9f90424cac75|34f1c18ed89e1b514473434351edc181|b4d64bf2e42da188164d2a43cc71b5fb$">
837
+ <fingerprint pattern="^(?:0000eeec59841e6e63dd9f90424cac75|34f1c18ed89e1b514473434351edc181|b4d64bf2e42da188164d2a43cc71b5fb)$">
800
838
  <description>Tenable Nessus</description>
801
839
  <example>0000eeec59841e6e63dd9f90424cac75</example>
802
840
  <example>34f1c18ed89e1b514473434351edc181</example>
@@ -815,7 +853,7 @@
815
853
  <param pos="0" name="service.certainty" value="0.5"/>
816
854
  </fingerprint>
817
855
 
818
- <fingerprint pattern="^78ee71862e89db1b1870197b40d026e5|799f70b71314a7508326d1d2f68f7519$">
856
+ <fingerprint pattern="^(?:78ee71862e89db1b1870197b40d026e5|799f70b71314a7508326d1d2f68f7519)$">
819
857
  <description>Red Hat JBoss AS</description>
820
858
  <example>78ee71862e89db1b1870197b40d026e5</example>
821
859
  <example>799f70b71314a7508326d1d2f68f7519</example>
@@ -842,7 +880,7 @@
842
880
  <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:-"/>
843
881
  </fingerprint>
844
882
 
845
- <fingerprint pattern="^b4e4785d5852c563b9ae47cbb7af06fe|fa0d535bff80ca916d7d7a782a6b8dc0$">
883
+ <fingerprint pattern="^(?:b4e4785d5852c563b9ae47cbb7af06fe|fa0d535bff80ca916d7d7a782a6b8dc0)$">
846
884
  <description>SonarQube</description>
847
885
  <example>b4e4785d5852c563b9ae47cbb7af06fe</example>
848
886
  <example>fa0d535bff80ca916d7d7a782a6b8dc0</example>
@@ -986,7 +1024,7 @@
986
1024
  <param pos="0" name="hw.certainty" value="0.5"/>
987
1025
  </fingerprint>
988
1026
 
989
- <fingerprint pattern="^afbc222b5f04fce3ec3e381d87ebfc55|7a7cf293daa5b528bd49941630684c00$">
1027
+ <fingerprint pattern="^(?:afbc222b5f04fce3ec3e381d87ebfc55|7a7cf293daa5b528bd49941630684c00)$">
990
1028
  <description>Seagate Storage</description>
991
1029
  <example>afbc222b5f04fce3ec3e381d87ebfc55</example>
992
1030
  <example>7a7cf293daa5b528bd49941630684c00</example>
@@ -1042,7 +1080,7 @@
1042
1080
  <param pos="0" name="hw.cpe23" value="cpe:/h:ui:edgeswitch:-"/>
1043
1081
  </fingerprint>
1044
1082
 
1045
- <fingerprint pattern="^7da8813873190b6e3d7d8957d798bd1e|31ccf4e22ba33dbec54cc357a43a36d3$">
1083
+ <fingerprint pattern="^(?:7da8813873190b6e3d7d8957d798bd1e|31ccf4e22ba33dbec54cc357a43a36d3)$">
1046
1084
  <description>OpenMediaVault</description>
1047
1085
  <example>7da8813873190b6e3d7d8957d798bd1e</example>
1048
1086
  <example>31ccf4e22ba33dbec54cc357a43a36d3</example>
@@ -1210,7 +1248,7 @@
1210
1248
  <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:adaptive_security_appliance:-"/>
1211
1249
  </fingerprint>
1212
1250
 
1213
- <fingerprint pattern="^af13b379bdb4ae7a5e68d9aa4419b2e4|cd844ad9671131f5464458a2ef58b7bc|c32e2dc4d7caedd5cefc9d44cc4f62ec$">
1251
+ <fingerprint pattern="^(?:af13b379bdb4ae7a5e68d9aa4419b2e4|cd844ad9671131f5464458a2ef58b7bc|c32e2dc4d7caedd5cefc9d44cc4f62ec)$">
1214
1252
  <description>Cisco APIC</description>
1215
1253
  <example>af13b379bdb4ae7a5e68d9aa4419b2e4</example>
1216
1254
  <example>cd844ad9671131f5464458a2ef58b7bc</example>
@@ -1287,7 +1325,7 @@
1287
1325
  <param pos="0" name="hw.certainty" value="0.5"/>
1288
1326
  </fingerprint>
1289
1327
 
1290
- <fingerprint pattern="^c60ea375c39d1ab273c4d1bee717287a|9052ab290483b0bd75c05b857c182bba|3acbef1d83ac34f19a2631d6c1a4ac57$">
1328
+ <fingerprint pattern="^(?:c60ea375c39d1ab273c4d1bee717287a|9052ab290483b0bd75c05b857c182bba|3acbef1d83ac34f19a2631d6c1a4ac57)$">
1291
1329
  <description>Synology DSM</description>
1292
1330
  <example>c60ea375c39d1ab273c4d1bee717287a</example>
1293
1331
  <example>9052ab290483b0bd75c05b857c182bba</example>
@@ -1323,7 +1361,7 @@
1323
1361
  <param pos="0" name="hw.vendor" value="APC"/>
1324
1362
  </fingerprint>
1325
1363
 
1326
- <fingerprint pattern="^ddc75b0899dbf4f7b15290a77fbeb8ff|7f027d6d3eb672117ba63f246bc10f62|4aef220ab05308e3a3e8e4bec5984b2b$">
1364
+ <fingerprint pattern="^(?:ddc75b0899dbf4f7b15290a77fbeb8ff|7f027d6d3eb672117ba63f246bc10f62|4aef220ab05308e3a3e8e4bec5984b2b)$">
1327
1365
  <description>RabbitMQ</description>
1328
1366
  <example>ddc75b0899dbf4f7b15290a77fbeb8ff</example>
1329
1367
  <example>7f027d6d3eb672117ba63f246bc10f62</example>
@@ -1333,7 +1371,7 @@
1333
1371
  <param pos="0" name="service.certainty" value="0.5"/>
1334
1372
  </fingerprint>
1335
1373
 
1336
- <fingerprint pattern="^5567e9ce23e5549e0fcd7195f3882816|57f187c7a868faeac558007a8eb6cb2e$">
1374
+ <fingerprint pattern="^(?:5567e9ce23e5549e0fcd7195f3882816|57f187c7a868faeac558007a8eb6cb2e)$">
1337
1375
  <description>pfSense Firewall</description>
1338
1376
  <example>5567e9ce23e5549e0fcd7195f3882816</example>
1339
1377
  <example>57f187c7a868faeac558007a8eb6cb2e</example>
@@ -1358,7 +1396,7 @@
1358
1396
  <param pos="0" name="hw.certainty" value="0.5"/>
1359
1397
  </fingerprint>
1360
1398
 
1361
- <fingerprint pattern="^3d79fa32f03540637418f85d19c3ed60|76c6e492cb8cc73a2a50d62176f205c9$">
1399
+ <fingerprint pattern="^(?:3d79fa32f03540637418f85d19c3ed60|76c6e492cb8cc73a2a50d62176f205c9)$">
1362
1400
  <description>HP Printer</description>
1363
1401
  <example>3d79fa32f03540637418f85d19c3ed60</example>
1364
1402
  <example>76c6e492cb8cc73a2a50d62176f205c9</example>
@@ -1415,7 +1453,7 @@
1415
1453
  <param pos="0" name="service.cpe23" value="cpe:/a:citrix:netscaler:-"/>
1416
1454
  </fingerprint>
1417
1455
 
1418
- <fingerprint pattern="^953e0d0190e50d247f4ece5620569ef1|52794c5e8a69a8b03ba891e24c39da65$">
1456
+ <fingerprint pattern="^(?:953e0d0190e50d247f4ece5620569ef1|52794c5e8a69a8b03ba891e24c39da65)$">
1419
1457
  <description>Citrix NetScaler SDX Gateway</description>
1420
1458
  <example>953e0d0190e50d247f4ece5620569ef1</example>
1421
1459
  <example>52794c5e8a69a8b03ba891e24c39da65</example>
@@ -1432,7 +1470,7 @@
1432
1470
  <param pos="0" name="service.cpe23" value="cpe:/a:citrix:netscaler:-"/>
1433
1471
  </fingerprint>
1434
1472
 
1435
- <fingerprint pattern="^35c390dade9419b4d6e9b83a8fc361c7|3a7de0a4ee1ee78de3f06bfce823dc44$">
1473
+ <fingerprint pattern="^(?:35c390dade9419b4d6e9b83a8fc361c7|3a7de0a4ee1ee78de3f06bfce823dc44)$">
1436
1474
  <description>Crestron Video Conferencing</description>
1437
1475
  <example>35c390dade9419b4d6e9b83a8fc361c7</example>
1438
1476
  <example>3a7de0a4ee1ee78de3f06bfce823dc44</example>
@@ -1445,7 +1483,7 @@
1445
1483
  <param pos="0" name="os.certainty" value="0.5"/>
1446
1484
  </fingerprint>
1447
1485
 
1448
- <fingerprint pattern="^89b932fcc47cf4ca3faadb0cfdef89cf|efca7d9aeaad122133c65cdf628ac574$">
1486
+ <fingerprint pattern="^(?:89b932fcc47cf4ca3faadb0cfdef89cf|efca7d9aeaad122133c65cdf628ac574)$">
1449
1487
  <description>Hikvision DVR</description>
1450
1488
  <example>89b932fcc47cf4ca3faadb0cfdef89cf</example>
1451
1489
  <example>efca7d9aeaad122133c65cdf628ac574</example>
@@ -1553,7 +1591,7 @@
1553
1591
  <param pos="0" name="hw.certainty" value="0.5"/>
1554
1592
  </fingerprint>
1555
1593
 
1556
- <fingerprint pattern="^9c845f917bb1720d80df603f26878d42|9baf402c0fccb225c134eb9bdf9678c7|5e760a3842c5c2a0278545c2ad5d88b0|bf5c71bad91e3bb1fb0029ff1bf6ea06$">
1594
+ <fingerprint pattern="^(?:9c845f917bb1720d80df603f26878d42|9baf402c0fccb225c134eb9bdf9678c7|5e760a3842c5c2a0278545c2ad5d88b0|bf5c71bad91e3bb1fb0029ff1bf6ea06)$">
1557
1595
  <description>Mersive SolsticePod</description>
1558
1596
  <example>9c845f917bb1720d80df603f26878d42</example>
1559
1597
  <example>9baf402c0fccb225c134eb9bdf9678c7</example>
@@ -1565,7 +1603,7 @@
1565
1603
  <param pos="0" name="hw.certainty" value="0.5"/>
1566
1604
  </fingerprint>
1567
1605
 
1568
- <fingerprint pattern="^6dcab71e60f0242907940f0fcda69ea5|255b6fcbcb463e11ed763b2b892a2965$">
1606
+ <fingerprint pattern="^(?:6dcab71e60f0242907940f0fcda69ea5|255b6fcbcb463e11ed763b2b892a2965)$">
1569
1607
  <description>Ubiquiti WAP (Vague)</description>
1570
1608
  <example>6dcab71e60f0242907940f0fcda69ea5</example>
1571
1609
  <example>255b6fcbcb463e11ed763b2b892a2965</example>
@@ -1602,7 +1640,7 @@
1602
1640
  <param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_3_firmware:-"/>
1603
1641
  </fingerprint>
1604
1642
 
1605
- <fingerprint pattern="^ad93b3973782b03ea62a43bd6602ba8b|d521487f45fa7657450edfd6c16e4a63$">
1643
+ <fingerprint pattern="^(?:ad93b3973782b03ea62a43bd6602ba8b|d521487f45fa7657450edfd6c16e4a63)$">
1606
1644
  <description>HP Integrated Lights-Out</description>
1607
1645
  <example>ad93b3973782b03ea62a43bd6602ba8b</example>
1608
1646
  <example>d521487f45fa7657450edfd6c16e4a63</example>
@@ -1627,7 +1665,7 @@
1627
1665
  <param pos="0" name="hw.product" value="GigaVUE"/>
1628
1666
  </fingerprint>
1629
1667
 
1630
- <fingerprint pattern="^04d9541338e525258daf47cc844d59f3|486373b021971d0a95af04c811799e21$">
1668
+ <fingerprint pattern="^(?:04d9541338e525258daf47cc844d59f3|486373b021971d0a95af04c811799e21)$">
1631
1669
  <description>F5 BIG-IP Load Balancer</description>
1632
1670
  <example>04d9541338e525258daf47cc844d59f3</example>
1633
1671
  <example>486373b021971d0a95af04c811799e21</example>
@@ -1651,7 +1689,7 @@
1651
1689
  <param pos="0" name="hw.certainty" value="0.5"/>
1652
1690
  </fingerprint>
1653
1691
 
1654
- <fingerprint pattern="^df56ab6e924269e77945a0299716e679|faeab99d83cdd05b875382a690bc60f3$">
1692
+ <fingerprint pattern="^(?:df56ab6e924269e77945a0299716e679|faeab99d83cdd05b875382a690bc60f3)$">
1655
1693
  <description>S2 Access Control Appliances</description>
1656
1694
  <example>df56ab6e924269e77945a0299716e679</example>
1657
1695
  <example>faeab99d83cdd05b875382a690bc60f3</example>
@@ -1723,7 +1761,7 @@
1723
1761
  <param pos="0" name="hw.certainty" value="0.5"/>
1724
1762
  </fingerprint>
1725
1763
 
1726
- <fingerprint pattern="^1437920c973b2b7c03d075028440a656|9422fe1eb162eb5329788a6cb6d408cb$">
1764
+ <fingerprint pattern="^(?:1437920c973b2b7c03d075028440a656|9422fe1eb162eb5329788a6cb6d408cb)$">
1727
1765
  <description>BrightSign Digital Signage Player</description>
1728
1766
  <example>1437920c973b2b7c03d075028440a656</example>
1729
1767
  <example>9422fe1eb162eb5329788a6cb6d408cb</example>
@@ -1781,7 +1819,7 @@
1781
1819
  <param pos="0" name="os.certainty" value="0.5"/>
1782
1820
  </fingerprint>
1783
1821
 
1784
- <fingerprint pattern="^ed61e4c9e9a176e82734aa42c6a00ce4|0dc6bff9bdabf1184c157d75ac73c22a$">
1822
+ <fingerprint pattern="^(?:ed61e4c9e9a176e82734aa42c6a00ce4|0dc6bff9bdabf1184c157d75ac73c22a)$">
1785
1823
  <description>Lifesize TelePresence</description>
1786
1824
  <example>ed61e4c9e9a176e82734aa42c6a00ce4</example>
1787
1825
  <example>0dc6bff9bdabf1184c157d75ac73c22a</example>
@@ -1802,7 +1840,7 @@
1802
1840
  <param pos="0" name="hw.product" value="Key Management Server"/>
1803
1841
  </fingerprint>
1804
1842
 
1805
- <fingerprint pattern="^302fe34dc0e9515e2d0509ff5f3217e5|8565497731f799fdd25ae59286807055$">
1843
+ <fingerprint pattern="^(?:302fe34dc0e9515e2d0509ff5f3217e5|8565497731f799fdd25ae59286807055)$">
1806
1844
  <description>Riverbed Steelhead Appliance</description>
1807
1845
  <example>302fe34dc0e9515e2d0509ff5f3217e5</example>
1808
1846
  <example>8565497731f799fdd25ae59286807055</example>
@@ -1876,7 +1914,7 @@
1876
1914
  <param pos="0" name="hw.cpe23" value="cpe:/h:swhouse:istar_ultra:-"/>
1877
1915
  </fingerprint>
1878
1916
 
1879
- <fingerprint pattern="^fc83221e4a9e57f2e0b10416de541ca3|e518c347f94a594de49e3f3948b8e6e5$">
1917
+ <fingerprint pattern="^(?:fc83221e4a9e57f2e0b10416de541ca3|e518c347f94a594de49e3f3948b8e6e5)$">
1880
1918
  <description>SpotterRF</description>
1881
1919
  <example>fc83221e4a9e57f2e0b10416de541ca3</example>
1882
1920
  <example>e518c347f94a594de49e3f3948b8e6e5</example>
@@ -1938,7 +1976,7 @@
1938
1976
  <param pos="0" name="hw.certainty" value="0.5"/>
1939
1977
  </fingerprint>
1940
1978
 
1941
- <fingerprint pattern="^908db8e56aeee8bb7a911b5df4eaf90e|02f4db63a9cfb650c05ffd82956cbfd6$">
1979
+ <fingerprint pattern="^(?:908db8e56aeee8bb7a911b5df4eaf90e|02f4db63a9cfb650c05ffd82956cbfd6)$">
1942
1980
  <description>Proxmox</description>
1943
1981
  <example>908db8e56aeee8bb7a911b5df4eaf90e</example>
1944
1982
  <example>02f4db63a9cfb650c05ffd82956cbfd6</example>
@@ -2082,7 +2120,7 @@
2082
2120
  <param pos="0" name="hw.device" value="Power Device"/>
2083
2121
  </fingerprint>
2084
2122
 
2085
- <fingerprint pattern="^e174f317b4491295c63e5bc9d9b6115b|cd2461f62d76fbbc905fa15160c0788f|37fdaeebc861719280205e7107b78d52$">
2123
+ <fingerprint pattern="^(?:e174f317b4491295c63e5bc9d9b6115b|cd2461f62d76fbbc905fa15160c0788f|37fdaeebc861719280205e7107b78d52)$">
2086
2124
  <description>dotCMS Content Management Platform</description>
2087
2125
  <example>e174f317b4491295c63e5bc9d9b6115b</example>
2088
2126
  <example>cd2461f62d76fbbc905fa15160c0788f</example>
@@ -2092,4 +2130,70 @@
2092
2130
  <param pos="0" name="service.cpe23" value="cpe:/a:dotcms:dotcms:-"/>
2093
2131
  </fingerprint>
2094
2132
 
2133
+ <fingerprint pattern="^8c7d1c14e4b9c42f07bd6b800d93b806$">
2134
+ <description>Zimbra Collaboration</description>
2135
+ <example>8c7d1c14e4b9c42f07bd6b800d93b806</example>
2136
+ <param pos="0" name="service.vendor" value="Zimbra"/>
2137
+ <param pos="0" name="service.product" value="Collaboration"/>
2138
+ <param pos="0" name="service.cpe23" value="cpe:/a:zimbra:collaboration:-"/>
2139
+ </fingerprint>
2140
+
2141
+ <fingerprint pattern="^3a1cdf0deb443610aa2575467279a69e$">
2142
+ <description>OpenKM - Open Source Document Management System</description>
2143
+ <example>3a1cdf0deb443610aa2575467279a69e</example>
2144
+ <param pos="0" name="service.vendor" value="OpenKM"/>
2145
+ <param pos="0" name="service.product" value="OpenKM"/>
2146
+ <param pos="0" name="service.cpe23" value="cpe:/a:openkm:openkm:-"/>
2147
+ </fingerprint>
2148
+
2149
+ <fingerprint pattern="^3d97c1251e67b41be93817e2e0cd7a4d$">
2150
+ <description>Mayan EDMS - open-source document management system</description>
2151
+ <example>3d97c1251e67b41be93817e2e0cd7a4d</example>
2152
+ <param pos="0" name="service.vendor" value="Mayan-EDMS"/>
2153
+ <param pos="0" name="service.product" value="Mayan EDMS"/>
2154
+ <param pos="0" name="service.cpe23" value="cpe:/a:mayan-edms:mayan_edms:-"/>
2155
+ </fingerprint>
2156
+
2157
+ <fingerprint pattern="^1abc8c6149e4602d59eace535229217e$">
2158
+ <description>Papermerge - open-source document management system</description>
2159
+ <example>1abc8c6149e4602d59eace535229217e</example>
2160
+ <param pos="0" name="service.vendor" value="Papermerge"/>
2161
+ <param pos="0" name="service.product" value="Papermerge"/>
2162
+ <param pos="0" name="service.cpe23" value="cpe:/a:papermerge:papermerge:-"/>
2163
+ </fingerprint>
2164
+
2165
+ <fingerprint pattern="^ed9a8c7810e8c9fb7035b6c3147c9a3a$">
2166
+ <description>SuiteCRM</description>
2167
+ <example>ed9a8c7810e8c9fb7035b6c3147c9a3a</example>
2168
+ <param pos="0" name="service.vendor" value="SalesAgility"/>
2169
+ <param pos="0" name="service.product" value="SuiteCRM"/>
2170
+ <param pos="0" name="service.cpe23" value="cpe:/a:salesagility:suitecrm:-"/>
2171
+ </fingerprint>
2172
+
2173
+ <fingerprint pattern="^(?:13693d9673576eee0341b65f1697a376|c21973630a0986ce0bd703e69ff09491|91b8256f84bcb7c5c87493f652f1d191)$">
2174
+ <description>OpenSearch Dashboards</description>
2175
+ <example>13693d9673576eee0341b65f1697a376</example>
2176
+ <example>c21973630a0986ce0bd703e69ff09491</example>
2177
+ <example>91b8256f84bcb7c5c87493f652f1d191</example>
2178
+ <param pos="0" name="service.vendor" value="Amazon"/>
2179
+ <param pos="0" name="service.product" value="OpenSearch"/>
2180
+ <param pos="0" name="service.cpe23" value="cpe:/a:amazon:opensearch:-"/>
2181
+ </fingerprint>
2182
+
2183
+ <fingerprint pattern="^dca8de269506757ce7f61c276991e1c5$">
2184
+ <description>Supervisor - web interface</description>
2185
+ <example>dca8de269506757ce7f61c276991e1c5</example>
2186
+ <param pos="0" name="service.vendor" value="Supervisord"/>
2187
+ <param pos="0" name="service.product" value="Supervisor"/>
2188
+ <param pos="0" name="service.cpe23" value="cpe:/a:supervisord:supervisor:-"/>
2189
+ </fingerprint>
2190
+
2191
+ <fingerprint pattern="^b0bd48e57fd398c5da8ae8f2ccc8d90d$">
2192
+ <description>qdPM - project management tool</description>
2193
+ <example>b0bd48e57fd398c5da8ae8f2ccc8d90d</example>
2194
+ <param pos="0" name="service.vendor" value="qdPM"/>
2195
+ <param pos="0" name="service.product" value="qdPM"/>
2196
+ <param pos="0" name="service.cpe23" value="cpe:/a:qdpm:qdpm:-"/>
2197
+ </fingerprint>
2198
+
2095
2199
  </fingerprints>
data/recog/xml/ftp_banners.xml CHANGED
@@ -1799,4 +1799,15 @@ more text</example>
1799
1799
  <param pos="0" name="hw.device" value="Printer"/>
1800
1800
  </fingerprint>
1801
1801
 
1802
+ <fingerprint pattern="^(\S{1,512})?\s*FTP server \(Medusa Async V(\d+(?:\.\d+)*) \[experimental\]\) ready\.$">
1803
+ <description>Medusa - extensible Internet server framework for Python</description>
1804
+ <example host.name="foo.bar" service.version="2.43">foo.bar FTP server (Medusa Async V2.43 [experimental]) ready.</example>
1805
+ <example host.name="10.10.10.10" service.version="41297">10.10.10.10 FTP server (Medusa Async V41297 [experimental]) ready.</example>
1806
+ <example service.version="24763"> FTP server (Medusa Async V24763 [experimental]) ready.</example>
1807
+ <param pos="0" name="service.vendor" value="Nightmare Software"/>
1808
+ <param pos="0" name="service.product" value="Medusa"/>
1809
+ <param pos="1" name="host.name"/>
1810
+ <param pos="2" name="service.version"/>
1811
+ </fingerprint>
1812
+
1802
1813
  </fingerprints>