recog 3.0.2 → 3.1.0

data/recog/xml/ftp_banners.xml

@@ -1277,17 +1277,19 @@ more text</example>
   </fingerprint>
 
   <fingerprint pattern="^(ZBR-\d+) Version (\S+) ready\.?$">
-    <description>ZebraNet Print Server FTP</description>
-    <example os.product="ZBR-46686" os.version="7.02" hw.product="ZBR-46686">ZBR-46686 Version 7.02 ready.</example>
-    <example os.version="V56.17.5Z" os.product="ZBR-79071" hw.product="ZBR-79071">ZBR-79071 Version V56.17.5Z ready.</example>
-    <example os.version="7.02" os.product="ZBR-46687" hw.product="ZBR-46687">ZBR-46687 Version 7.02 ready.</example>
-    <param pos="0" name="os.vendor" value="ZebraNet"/>
-    <param pos="0" name="os.device" value="Print Server"/>
-    <param pos="1" name="os.product"/>
+    <description>Zebra ZebraNet Print Server FTP</description>
+    <example hw.product="ZBR-46686" os.version="7.02">ZBR-46686 Version 7.02 ready.</example>
+    <example hw.product="ZBR-79071" os.version="V56.17.5Z">ZBR-79071 Version V56.17.5Z ready.</example>
+    <example hw.product="ZBR-46687" os.version="7.02">ZBR-46687 Version 7.02 ready.</example>
+    <param pos="0" name="os.vendor" value="Zebra"/>
+    <param pos="0" name="os.family" value="ZebraNet"/>
+    <param pos="0" name="os.product" value="{hw.product} Firmware"/>
     <param pos="2" name="os.version"/>
-    <param pos="0" name="hw.vendor" value="ZebraNet"/>
-    <param pos="0" name="hw.device" value="Print Server"/>
+    <param pos="0" name="os.device" value="Print Server"/>
+    <param pos="0" name="hw.vendor" value="Zebra"/>
+    <param pos="0" name="hw.family" value="ZebraNet"/>
     <param pos="1" name="hw.product"/>
+    <param pos="0" name="hw.device" value="Print Server"/>
   </fingerprint>
 
   <fingerprint pattern="^(ET(\S{1,32})) Dell (\S+ Laser Printer) FTP Server">
@@ -1792,6 +1794,18 @@ more text</example>
     <param pos="0" name="hw.device" value="Power Device"/>
   </fingerprint>
 
+  <fingerprint pattern="^(Sentry Switched (?:PDU|CDU)) v(\d+(?:\.\d+)*[a-z](?:-[a-z][0-9])*) FTP server ready\.">
+    <description>Server Technology Sentry Switched Device</description>
+    <example hw.product="Sentry Switched PDU" os.product="Sentry Switched PDU Firmware" os.version="8.0w">Sentry Switched PDU v8.0w FTP server ready.</example>
+    <example hw.product="Sentry Switched CDU" os.product="Sentry Switched CDU Firmware" os.version="7.1e-d1">Sentry Switched CDU v7.1e-d1 FTP server ready.</example>
+    <param pos="0" name="os.vendor" value="Server Technology"/>
+    <param pos="0" name="os.product" value="{hw.product} Firmware"/>
+    <param pos="2" name="os.version"/>
+    <param pos="0" name="hw.vendor" value="Server Technology"/>
+    <param pos="1" name="hw.product"/>
+    <param pos="0" name="hw.device" value="Power Device"/>
+  </fingerprint>
+
   <fingerprint pattern="^Printer's ftp server (?:\d+) Please login with USER and PASS\.$">
     <description>Weidmüller Printer</description>
     <example>Printer's ftp server 530 Please login with USER and PASS.</example>
@@ -1799,4 +1813,15 @@ more text</example>
     <param pos="0" name="hw.device" value="Printer"/>
   </fingerprint>
 
+  <fingerprint pattern="^(\S{1,512})?\s*FTP server \(Medusa Async V(\d+(?:\.\d+)*) \[experimental\]\) ready\.$">
+    <description>Medusa - extensible Internet server framework for Python</description>
+    <example host.name="foo.bar" service.version="2.43">foo.bar FTP server (Medusa Async V2.43 [experimental]) ready.</example>
+    <example host.name="10.10.10.10" service.version="41297">10.10.10.10 FTP server (Medusa Async V41297 [experimental]) ready.</example>
+    <example service.version="24763"> FTP server (Medusa Async V24763 [experimental]) ready.</example>
+    <param pos="0" name="service.vendor" value="Nightmare Software"/>
+    <param pos="0" name="service.product" value="Medusa"/>
+    <param pos="1" name="host.name"/>
+    <param pos="2" name="service.version"/>
+  </fingerprint>
+
 </fingerprints>

data/recog/xml/html_title.xml

@@ -333,7 +333,7 @@
     <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
   </fingerprint>
 
-  <fingerprint pattern="^NETIASPOT Management Console|Konsola zarzdzania NETIASPOT$">
+  <fingerprint pattern="^(?:NETIASPOT Management Console|Konsola zarzdzania NETIASPOT)$">
     <description>Netia Spot wireless router</description>
     <example>Konsola zarzdzania NETIASPOT</example>
     <example>NETIASPOT Management Console</example>
@@ -576,7 +576,7 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:ui:unifi_video:-"/>
   </fingerprint>
 
-  <fingerprint pattern="^UniFi NVR: Software Portal|airVision: \[NVR\] - Software Portal$">
+  <fingerprint pattern="^(?:UniFi NVR: Software Portal|airVision: \[NVR\] - Software Portal)$">
     <description>UniFi NVR for recording from UniFi video cameras</description>
     <example>UniFi NVR: Software Portal</example>
     <example>airVision: [NVR] - Software Portal</example>
@@ -682,7 +682,7 @@
     <param pos="0" name="hw.device" value="Switch"/>
   </fingerprint>
 
-  <fingerprint pattern="^Welcome to nginx!|Test Page for the Nginx HTTP Server$">
+  <fingerprint pattern="^(?:Welcome to nginx!|Test Page for the Nginx HTTP Server)$">
     <description>Default OS-agnostic nginx</description>
     <example>Welcome to nginx!</example>
     <example>Test Page for the Nginx HTTP Server</example>
@@ -921,11 +921,13 @@
   </fingerprint>
 
   <fingerprint pattern="^Sentry Switched CDU$">
-    <description>Sentry Switched CDU</description>
+    <description>Server Technology Sentry Switched CDU</description>
     <example>Sentry Switched CDU</example>
-    <param pos="0" name="hw.vendor" value="ServerTech"/>
-    <param pos="0" name="hw.device" value="Power Device"/>
+    <param pos="0" name="os.vendor" value="Server Technology"/>
+    <param pos="0" name="os.product" value="{hw.product} Firmware"/>
+    <param pos="0" name="hw.vendor" value="Server Technology"/>
     <param pos="0" name="hw.product" value="Sentry Switched CDU"/>
+    <param pos="0" name="hw.device" value="Power Device"/>
   </fingerprint>
 
   <fingerprint pattern="^Emerson Network Power Rack PDU Card$">
@@ -2026,14 +2028,86 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:manageengine:desktop_central:-"/>
   </fingerprint>
 
-  <fingerprint pattern="^ManageEngine ADAudit Plus$">
-    <description>ManageEngineADAudit Plus</description>
-    <example>ManageEngine ADAudit Plus</example>
+  <fingerprint pattern="^ADAudit Plus$">
+    <description>ManageEngine ADAudit Plus</description>
+    <example>ADAudit Plus</example>
     <param pos="0" name="service.vendor" value="ManageEngine"/>
     <param pos="0" name="service.product" value="ADAudit Plus"/>
     <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_adaudit_plus:-"/>
   </fingerprint>
 
+  <fingerprint pattern="^ManageEngine - ADManager Plus$">
+    <description>ManageEngine ADManager Plus</description>
+    <example>ManageEngine - ADManager Plus</example>
+    <param pos="0" name="service.vendor" value="ManageEngine"/>
+    <param pos="0" name="service.product" value="ADManager Plus"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_admanager_plus:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^ManageEngine AssetExplorer$">
+    <description>ManageEngine AssetExplorer</description>
+    <example>ManageEngine AssetExplorer</example>
+    <param pos="0" name="service.vendor" value="ManageEngine"/>
+    <param pos="0" name="service.product" value="AssetExplorer"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_assetexplorer:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^ManageEngine Endpoint Central$">
+    <description>ManageEngine Endpoint Central (formerly Desktop Central)</description>
+    <example>ManageEngine Endpoint Central</example>
+    <param pos="0" name="service.vendor" value="ManageEngine"/>
+    <param pos="0" name="service.product" value="Endpoint Central"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_desktop_central:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^ManageEngine PAM360$">
+    <description>ManageEngine PAM360</description>
+    <example>ManageEngine PAM360</example>
+    <param pos="0" name="service.vendor" value="ManageEngine"/>
+    <param pos="0" name="service.product" value="PAM360"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_pam360:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^ManageEngine PasswordManager Pro$">
+    <description>ManageEngine Password Manager Pro</description>
+    <example>ManageEngine PasswordManager Pro</example>
+    <param pos="0" name="service.vendor" value="ManageEngine"/>
+    <param pos="0" name="service.product" value="ManageEngine Password Manager Pro"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_password_manager_pro:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^ManageEngine Access Manager Plus$">
+    <description>ManageEngine Access Manager Plus</description>
+    <example>ManageEngine Access Manager Plus</example>
+    <param pos="0" name="service.vendor" value="ManageEngine"/>
+    <param pos="0" name="service.product" value="Access Manager Plus"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_access_manager_plus:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^ManageEngine ServiceDesk Plus$">
+    <description>ManageEngine ServiceDesk Plus</description>
+    <example>ManageEngine ServiceDesk Plus</example>
+    <param pos="0" name="service.vendor" value="ManageEngine"/>
+    <param pos="0" name="service.product" value="ManageEngine ServiceDesk Plus"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_servicedesk_plus:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^ManageEngine ServiceDesk Plus - MSP$">
+    <description>ManageEngine ServiceDesk Plus MSP</description>
+    <example>ManageEngine ServiceDesk Plus - MSP</example>
+    <param pos="0" name="service.vendor" value="ManageEngine"/>
+    <param pos="0" name="service.product" value="ServiceDesk Plus MSP"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_servicedesk_plus_msp:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^ManageEngine SupportCenter Plus$">
+    <description>ManageEngine SupportCenter Plus</description>
+    <example>ManageEngine SupportCenter Plus</example>
+    <param pos="0" name="service.vendor" value="ManageEngine"/>
+    <param pos="0" name="service.product" value="SupportCenter Plus"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_supportcenter_plus:-"/>
+  </fingerprint>
+
   <fingerprint pattern="^(ScanFront \d.+)Web Menu$">
     <!-- no space between the product model and "Web Menu" in the title -->
 
@@ -2387,7 +2461,7 @@
     <param pos="0" name="hw.product" value="Network Node"/>
   </fingerprint>
 
-  <fingerprint pattern="^S2 Netbox Login|Home - NetBox$">
+  <fingerprint pattern="^(?:S2 Netbox Login|Home - NetBox)$">
     <description>S2 Netbox Appliance</description>
     <example>S2 Netbox Login</example>
     <example>Home - NetBox</example>
@@ -2439,7 +2513,7 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:ibm:tivoli_storage_flashcopy_manager:-"/>
   </fingerprint>
 
-  <fingerprint pattern="^Jupyter Notebook|JupyterLab|Home Page - Select or create a notebook$">
+  <fingerprint pattern="^(?:Jupyter Notebook|JupyterLab|Home Page - Select or create a notebook)$">
     <description>Jupyter Notebook Server</description>
     <example>Jupyter Notebook</example>
     <example>JupyterLab</example>
@@ -2500,7 +2574,7 @@
     <param pos="0" name="service.product" value="Network Monitor"/>
   </fingerprint>
 
-  <fingerprint pattern="^BrightSign&amp;reg;|BrightSign Applications|Diagnostics Web Server$">
+  <fingerprint pattern="^(?:BrightSign&amp;reg;|BrightSign Applications|Diagnostics Web Server)$">
     <description>BrightSign Controller</description>
     <example>BrightSign&amp;reg;</example>
     <example>BrightSign Applications</example>
@@ -2521,7 +2595,7 @@
     <param pos="0" name="hw.device" value="WAP"/>
   </fingerprint>
 
-  <fingerprint pattern="^DD System Manager|System Manager$">
+  <fingerprint pattern="^(?:DD System Manager|System Manager)$">
     <description>Data Domain System Manager</description>
     <example>DD System Manager</example>
     <example>System Manager</example>
@@ -2574,7 +2648,7 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:influxdata:influxdb:2.0"/>
   </fingerprint>
 
-  <fingerprint pattern="^Sign in . GitLab|GitLab|GitLab is not responding$">
+  <fingerprint pattern="^(?:Sign in . GitLab|GitLab|GitLab is not responding)$">
     <description>GitLab</description>
     <example>Sign in · GitLab</example>
     <example>GitLab is not responding</example>
@@ -2585,7 +2659,7 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:gitlab:gitlab:-"/>
   </fingerprint>
 
-  <fingerprint pattern="^GitHub Enterprise|Setup GitHub Enterprise|GitHub Enterprise preflight check$">
+  <fingerprint pattern="^(?:GitHub Enterprise|Setup GitHub Enterprise|GitHub Enterprise preflight check)$">
     <description>GitHub Enterprise</description>
     <example>GitHub Enterprise</example>
     <example>Setup GitHub Enterprise</example>
@@ -2594,7 +2668,7 @@
     <param pos="0" name="service.product" value="Enterprise"/>
   </fingerprint>
 
-  <fingerprint pattern="^SAP NetWeaver Application Server Java|SAP&amp;#x20;NetWeaver&amp;#x20;Portal|Loading Portal\.\.\.$">
+  <fingerprint pattern="^(?:SAP NetWeaver Application Server Java|SAP&amp;#x20;NetWeaver&amp;#x20;Portal|Loading Portal\.\.\.)$">
     <description>SAP NetWeaver Portal</description>
     <example>SAP NetWeaver Application Server Java</example>
     <example>SAP&amp;#x20;NetWeaver&amp;#x20;Portal</example>
@@ -2613,7 +2687,7 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:lansweeper:lansweeper:-"/>
   </fingerprint>
 
-  <fingerprint pattern="^Celery Flower|Flower$">
+  <fingerprint pattern="^(?:Celery Flower|Flower)$">
     <description>Celery Flower Dashboard</description>
     <example>Celery Flower</example>
     <example>Flower</example>
@@ -2753,7 +2827,7 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:apache:flink:-"/>
   </fingerprint>
 
-  <fingerprint pattern="^Twonky|Twonky Server|TwonkyMedia|TwonkyMedia server media browser$">
+  <fingerprint pattern="^(?:Twonky|Twonky Server|TwonkyMedia|TwonkyMedia server media browser)$">
     <description>Twonky Server</description>
     <example>Twonky</example>
     <example>Twonky Server</example>
@@ -2798,7 +2872,7 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:sabnzbd:sabnzbd:-"/>
   </fingerprint>
 
-  <fingerprint pattern="^Zabbix|.*: Zabbix$">
+  <fingerprint pattern="^(?:Zabbix|.*: Zabbix)$">
     <description>Zabbix</description>
     <example>Zabbix</example>
     <example>appliance: Zabbix</example>
@@ -2820,7 +2894,7 @@
     <param pos="0" name="os.cpe23" value="cpe:/o:dd-wrt:dd-wrt:{os.version}"/>
   </fingerprint>
 
-  <fingerprint pattern="^Apache Druid|Druid Console|Legacy Coordinator Console$">
+  <fingerprint pattern="^(?:Apache Druid|Druid Console|Legacy Coordinator Console)$">
     <description>Apache Druid</description>
     <example>Apache Druid</example>
     <example>Legacy Coordinator Console</example>
@@ -3030,7 +3104,7 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:solarwinds:virtualization_manager:-"/>
   </fingerprint>
 
-  <fingerprint pattern="^Gitea: .*|LocalRepo|TurnKey Gitea$">
+  <fingerprint pattern="^(?:Gitea: .*|LocalRepo|TurnKey Gitea)$">
     <description>Gitea</description>
     <example>Gitea: Git with a cup of tea</example>
     <example>TurnKey Gitea</example>
@@ -3118,7 +3192,7 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:rstudio:connect:-"/>
   </fingerprint>
 
-  <fingerprint pattern="^TurnKey Moodle|New Site$">
+  <fingerprint pattern="^(?:TurnKey Moodle|New Site)$">
     <description>Moodle</description>
     <example>TurnKey Moodle</example>
     <example>New Site</example>
@@ -3157,7 +3231,15 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:jira:-"/>
   </fingerprint>
 
-  <fingerprint pattern="^Welcome to XAMPP|XAMPP for Linux">
+  <fingerprint pattern="^Log in - Bitbucket$">
+    <description>Atlassian Bitbucket</description>
+    <example>Log in - Bitbucket</example>
+    <param pos="0" name="service.vendor" value="Atlassian"/>
+    <param pos="0" name="service.product" value="Bitbucket"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:bitbucket:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^(?:Welcome to XAMPP|XAMPP for Linux)">
     <description>XAMPP Server</description>
     <example>Welcome to XAMPP</example>
     <example>XAMPP for Linux</example>
@@ -3182,7 +3264,7 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:kodi:kodi:-"/>
   </fingerprint>
 
-  <fingerprint pattern="^Drupal|TurnKey Drupal\d+|Select an installation profile$">
+  <fingerprint pattern="^(?:Drupal|TurnKey Drupal\d+|Select an installation profile)$">
     <description>Drupal CMS</description>
     <example>Drupal</example>
     <example>TurnKey Drupal8</example>
@@ -3859,7 +3941,7 @@
     <param pos="0" name="hw.family" value="Vigor"/>
   </fingerprint>
 
-  <fingerprint pattern="^WSO2 API Manager|\[Publisher Portal\]WSO2 APIM$">
+  <fingerprint pattern="^(?:WSO2 API Manager|\[Publisher Portal\]WSO2 APIM)$">
     <description>WSO2 API Manager</description>
     <example>WSO2 API Manager</example>
     <example>[Publisher Portal]WSO2 APIM</example>
@@ -3910,6 +3992,155 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:zimbra:collaboration:-"/>
   </fingerprint>
 
+  <fingerprint pattern="^OpenKM$">
+    <description>OpenKM - Open Source Document Management System</description>
+    <example>OpenKM</example>
+    <param pos="0" name="service.vendor" value="OpenKM"/>
+    <param pos="0" name="service.product" value="OpenKM"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:openkm:openkm:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^\s*(?:\S)*\s*::\s*Mayan EDMS\s*$">
+    <description>Mayan EDMS - open-source document management system</description>
+    <example>:: Mayan EDMS</example>
+    <example>Home :: Mayan EDMS</example>
+    <param pos="0" name="service.vendor" value="Mayan-EDMS"/>
+    <param pos="0" name="service.product" value="Mayan EDMS"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:mayan-edms:mayan_edms:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^Papermerge \| Log in$">
+    <description>Papermerge - open-source document management system</description>
+    <example>Papermerge | Log in</example>
+    <param pos="0" name="service.vendor" value="Papermerge"/>
+    <param pos="0" name="service.product" value="Papermerge"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:papermerge:papermerge:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^(?:FileRun :: (?:Login|Installation))|(?:(?:\S)* :: Login \(powered by FileRun\))$">
+    <description>FileRun - self-hosted Google Drive alternative</description>
+    <example>FileRun :: Login</example>
+    <example>FileRun :: Installation</example>
+    <example>FileRun :: Login (powered by FileRun)</example>
+    <example>App Title :: Login (powered by FileRun)</example>
+    <param pos="0" name="service.vendor" value="FileRun"/>
+    <param pos="0" name="service.product" value="FileRun"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:filerun:filerun:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^SuiteCRM$">
+    <description>SuiteCRM</description>
+    <example>SuiteCRM</example>
+    <param pos="0" name="service.vendor" value="SalesAgility"/>
+    <param pos="0" name="service.product" value="SuiteCRM"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:salesagility:suitecrm:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^OpenSearch Dashboards$">
+    <description>OpenSearch Dashboards</description>
+    <example>OpenSearch Dashboards</example>
+    <param pos="0" name="service.vendor" value="Amazon"/>
+    <param pos="0" name="service.product" value="OpenSearch"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:amazon:opensearch:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^Supervisor Status$">
+    <description>Supervisor - web interface</description>
+    <example>Supervisor Status</example>
+    <param pos="0" name="service.vendor" value="Supervisord"/>
+    <param pos="0" name="service.product" value="Supervisor"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:supervisord:supervisor:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^qdPM (?:\| Login|(\d+(?:\.\d+)*)(?: BETA)? Installation)$">
+    <description>qdPM - project management tool</description>
+    <example>qdPM | Login</example>
+    <example service.version="9.1">qdPM 9.1 Installation</example>
+    <example service.version="9.0">qdPM 9.0 BETA Installation</example>
+    <param pos="0" name="service.vendor" value="qdPM"/>
+    <param pos="0" name="service.product" value="qdPM"/>
+    <param pos="1" name="service.version"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:qdpm:qdpm:{service.version}"/>
+  </fingerprint>
+
+  <fingerprint pattern="^ZAP API UI$">
+    <description>OWASP Zed Attack Proxy (ZAP) - API Web UI</description>
+    <example>ZAP API UI</example>
+    <param pos="0" name="service.vendor" value="OWASP"/>
+    <param pos="0" name="service.product" value="Zed Attack Proxy"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:owasp:zed_attack_proxy:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^CloudPanel \| Log In$">
+    <description>CloudPanel - server control panel</description>
+    <example>CloudPanel | Log In</example>
+    <param pos="0" name="service.vendor" value="MGT-COMMERCE GmbH"/>
+    <param pos="0" name="service.product" value="CloudPanel"/>
+  </fingerprint>
+
+  <fingerprint pattern="^(?:Login \| Control WebPanel|CWP \| User)$">
+    <description>Control Web Panel (CWP) (formerly CentOS Web Panel) - web hosting control panel</description>
+    <example>Login | Control WebPanel</example>
+    <example>CWP | User</example>
+    <param pos="0" name="service.vendor" value="Control Web Panel"/>
+    <param pos="0" name="service.product" value="Control Web Panel"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:control-webpanel:webpanel:-"/>
+    <param pos="0" name="os.family" value="Linux"/>
+    <param pos="0" name="os.product" value="Linux"/>
+  </fingerprint>
+
+  <fingerprint pattern="^Graphs \(darkstat [^)]+\)$">
+    <description>darkstat - network statistics gatherer</description>
+    <example>Graphs (darkstat eth0)</example>
+    <example>Graphs (darkstat lagg0.4091, lagg0.21, lagg0.101, lagg0.102, lagg0.4001, lagg0.4081)</example>
+    <param pos="0" name="service.vendor" value="darkstat Project"/>
+    <param pos="0" name="service.product" value="darkstat"/>
+  </fingerprint>
+
+  <fingerprint pattern="^Login to Cacti$">
+    <description>Cacti - network graphing solution</description>
+    <example>Login to Cacti</example>
+    <param pos="0" name="service.vendor" value="Cacti"/>
+    <param pos="0" name="service.product" value="Cacti"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:cacti:cacti:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^Bitwarden Web Vault$">
+    <description>Bitwarden Server</description>
+    <example>Bitwarden Web Vault</example>
+    <param pos="0" name="service.vendor" value="Bitwarden"/>
+    <param pos="0" name="service.product" value="Server"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:bitwarden:server:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^Vaultwarden Web Vault$">
+    <description>Vaultwarden - unofficial Bitwarden compatible server</description>
+    <example>Vaultwarden Web Vault</example>
+    <param pos="0" name="service.vendor" value="Vaultwarden"/>
+    <param pos="0" name="service.product" value="Vaultwarden"/>
+  </fingerprint>
+
+  <fingerprint pattern="^(?:GoAnywhere (\d+(?:\.\d+)*)(?: - \S{1,512})?|GoAnywhere Web Client - Login)$">
+    <description>Fortra GoAnywhere MFT - managed file transfer</description>
+    <example service.version="7.0.3">GoAnywhere 7.0.3</example>
+    <example service.version="6.8.6">GoAnywhere 6.8.6 - Production</example>
+    <example>GoAnywhere Web Client - Login</example>
+    <param pos="0" name="service.vendor" value="Fortra"/>
+    <param pos="0" name="service.product" value="GoAnywhere MFT"/>
+    <param pos="1" name="service.version"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:helpsystems:goanywhere_managed_file_transfer:{service.version}"/>
+  </fingerprint>
+
+  <fingerprint pattern="^Server Backup Manager SE\s*(?:- .{1,512})?$">
+    <description>ConnectWise R1Soft Server Backup Manager (SBM)</description>
+    <example>Server Backup Manager SE</example>
+    <example>Server Backup Manager SE </example>
+    <example>Server Backup Manager SE - foo.bar</example>
+    <example>Server Backup Manager SE - [1234] FooBar</example>
+    <param pos="0" name="service.vendor" value="ConnectWise"/>
+    <param pos="0" name="service.product" value="R1Soft Server Backup Manager"/>
+  </fingerprint>
+
   <!-- Specific Eltex fingerprints to enable CPE generation -->
 
   <fingerprint pattern="^Eltex - NTP-RG-1402G$">

data/recog/xml/http_cookies.xml

@@ -277,6 +277,14 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:fisheye:-"/>
   </fingerprint>
 
+  <fingerprint pattern="^BITBUCKETSESSIONID=">
+    <description>Atlassian Bitbucket</description>
+    <example>BITBUCKETSESSIONID=49D9B4A9C574CFA312E671F3453CEAC5; Max-Age=1209600; Expires=Tue, 04-Oct-2022 22:16:45 GMT; Path=/; HttpOnly</example>
+    <param pos="0" name="service.vendor" value="Atlassian"/>
+    <param pos="0" name="service.product" value="Bitbucket"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:bitbucket:-"/>
+  </fingerprint>
+
   <fingerprint pattern="(?i)^(BIGipServer([^=]+))=">
     <description>F5 BIG-IP LTM - Server variant</description>
     <example loadbalancer.poolname="CustomerRP" cookie="BigIpServerCustomerRP">BigIpServerCustomerRP=5a; path=/; domain=.foo.bar; secure; HttpOnly</example>
@@ -673,6 +681,14 @@
     <param pos="0" name="service.certainty" value="0.5"/>
   </fingerprint>
 
+  <fingerprint pattern="^laravel_session=">
+    <description>Laravel PHP web application framework</description>
+    <example>laravel_session=eyJpdiI6IjZmcXM4SXZqNVQxY2U2UDVEb1V0SFE9PSIsInZhbHVlIjoiQlRUYXk2WEsxUkZmVU5lRXpBTlZkUURkUnphR0RGMTdaRDkxWHFLVGhtaUZwM0plaWR2aVMyeVQ5MmFzNlVFczVQUExpeDdhUUZveVlCOVUxMVA4dHp6ZUQrK0t3KzBUaVlxb2o4WUxleE1rb29GTlozZWF6cXpUUTRnNFpJTHUiLCJtYWMiOiI3ZGNhNzhmOGRmMWFmZmE5ZjFiYjQ5ODBlNGEwMjgzZWNiZGI2ZTI4ZjFmYWJkMmIxZTgwYzM2NjA1OThlNGNlIn0%3D; expires=Mon, 13-Mar-2023 18:21:13 GMT; Max-Age=7200; path=/; httponly; samesite=lax</example>
+    <param pos="0" name="service.vendor" value="Laravel"/>
+    <param pos="0" name="service.product" value="Laravel"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:laravel:laravel:-"/>
+  </fingerprint>
+
   <fingerprint pattern="^phpMyAdmin=">
     <description>phpMyAdmin web interface for MySQL and MariaDB</description>
     <example>phpMyAdmin=28600e9ff9772c871dacec70f9c5edaa; path=/; HttpOnly</example>
@@ -699,14 +715,52 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:mongo-express_project:mongo-express:-"/>
   </fingerprint>
 
-  <fingerprint pattern="^adscsrf=">
+  <fingerprint pattern="^(JSESSIONIDADMP|admpcsrf)=">
+    <description>ManageEngine ADManager Plus</description>
+    <example cookie="JSESSIONIDADMP">JSESSIONIDADMP=3A92A25349FECF56B7D7D6FF915545B5; Path=/; HttpOnly</example>
+    <example cookie="admpcsrf">admpcsrf=f5fe4a87-0365-4d04-a8e2-87b3c640092e;path=/;priority=high</example>
+    <param pos="1" name="cookie"/>
+    <param pos="0" name="service.vendor" value="ManageEngine"/>
+    <param pos="0" name="service.product" value="ADManager Plus"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_admanager_plus:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^(JSESSIONIDADAP|adapcsrf)=">
+    <description>ManageEngine ADAudit Plus</description>
+    <example cookie="JSESSIONIDADAP">JSESSIONIDADAP=BB472B7AD767571D913190056ED594CB; Path=/; HttpOnly</example>
+    <example cookie="adapcsrf">adapcsrf=97fcd4a1-078f-487b-bd73-ca492ef05121;path=/;priority=high</example>
+    <param pos="1" name="cookie"/>
+    <param pos="0" name="service.vendor" value="ManageEngine"/>
+    <param pos="0" name="service.product" value="ADAudit Plus"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_adaudit_plus:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^(JSESSIONIDADSSP|adscsrf)=">
     <description>ManageEngine ADSelfService Plus</description>
-    <example>adscsrf=cffff6b5-bd68-4c35-92ef-e45127e68289;path=/;priority=high</example>
+    <example cookie="JSESSIONIDADSSP">JSESSIONIDADSSP=A7FECBD71C67184E929AF80715C29C20; Path=/; Secure; HttpOnly</example>
+    <example cookie="adscsrf">adscsrf=cffff6b5-bd68-4c35-92ef-e45127e68289;path=/;priority=high</example>
+    <param pos="1" name="cookie"/>
     <param pos="0" name="service.vendor" value="ManageEngine"/>
     <param pos="0" name="service.product" value="ADSelfService Plus"/>
     <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_adselfservice_plus:-"/>
   </fingerprint>
 
+  <fingerprint pattern="^ad360csrf=">
+    <description>ManageEngine Active Directory 360 (AD360)</description>
+    <example>ad360csrf=03c99789-515c-4aa9-8823-7e2e8e8b3026;path=/;SameSite=None;Secure;priority=high</example>
+    <param pos="0" name="service.vendor" value="ManageEngine"/>
+    <param pos="0" name="service.product" value="AD360"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_ad360:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^ZROPJSESSIONID=">
+    <description>ManageEngine Analytics Plus</description>
+    <example>ZROPJSESSIONID=FECE4724AC1990DBCC45DD3DA6CB3002; Path=/; Secure; HttpOnly</example>
+    <param pos="0" name="service.vendor" value="ManageEngine"/>
+    <param pos="0" name="service.product" value="Analytics Plus"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_analytics_plus:-"/>
+  </fingerprint>
+
   <fingerprint pattern="^(dmid|opvc|sitevisitscookie)=">
     <description>dotCMS Content Management Platform</description>
     <example cookie="dmid">dmid=dcd46b93-54ab-4a43-a023-99154f879c3e; Max-Age=153792000; Expires=Thu, 18-Mar-2027 21:28:37 GMT; Path=/; HttpOnly; SameSite=Strict</example>
@@ -718,6 +772,39 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:dotcms:dotcms:-"/>
   </fingerprint>
 
+  <fingerprint pattern="^qdPM8=">
+    <description>qdPM - project management tool</description>
+    <example>qdPM8=57d23588bfe525e24760bf4c73b10759; path=/</example>
+    <param pos="0" name="service.vendor" value="qdPM"/>
+    <param pos="0" name="service.product" value="qdPM"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:qdpm:qdpm:-"/>
+  </fingerprint>
+
+  <fingerprint pattern="^cloudpanel=">
+    <description>CloudPanel - server control panel</description>
+    <example>cloudpanel=9rs2cohqs9bfq5fch54j2m5eje; path=/; secure; httponly; samesite=lax</example>
+    <param pos="0" name="service.vendor" value="MGT-COMMERCE GmbH"/>
+    <param pos="0" name="service.product" value="CloudPanel"/>
+  </fingerprint>
+
+  <fingerprint pattern="^cwpsrv-[0-9a-f]{32}=">
+    <description>Control Web Panel (CWP) (formerly CentOS Web Panel) - web hosting control panel</description>
+    <example>cwpsrv-5df9a64aa14f59216453d6f07164a7f1=aq0jsl5muvuli7cif5p9ut7dtm; path=/</example>
+    <param pos="0" name="service.vendor" value="Control Web Panel"/>
+    <param pos="0" name="service.product" value="Control Web Panel"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:control-webpanel:webpanel:-"/>
+    <param pos="0" name="os.family" value="Linux"/>
+    <param pos="0" name="os.product" value="Linux"/>
+  </fingerprint>
+
+  <fingerprint pattern="^FileRunSID=">
+    <description>FileRun - self-hosted Google Drive alternative</description>
+    <example>FileRunSID=966e9a0441b5fea1a72af53b1a6adc8f; path=/; HttpOnly</example>
+    <param pos="0" name="service.vendor" value="FileRun"/>
+    <param pos="0" name="service.product" value="FileRun"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:filerun:filerun:-"/>
+  </fingerprint>
+
   <!--
         Ignore various cookies that are very generic cookies for session IDs
         that are not necessarily indicative of any particular