recog 3.1.1 → 3.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (50) hide show
  1. checksums.yaml +4 -4
  2. checksums.yaml.gz.sig +0 -0
  3. data/Gemfile +6 -0
  4. data/Rakefile +7 -5
  5. data/lib/recog/db.rb +67 -68
  6. data/lib/recog/db_manager.rb +22 -21
  7. data/lib/recog/fingerprint/regexp_factory.rb +10 -13
  8. data/lib/recog/fingerprint/test.rb +9 -8
  9. data/lib/recog/fingerprint.rb +252 -262
  10. data/lib/recog/fingerprint_parse_error.rb +3 -1
  11. data/lib/recog/formatter.rb +41 -39
  12. data/lib/recog/match_reporter.rb +82 -83
  13. data/lib/recog/matcher.rb +37 -40
  14. data/lib/recog/matcher_factory.rb +7 -6
  15. data/lib/recog/nizer.rb +218 -224
  16. data/lib/recog/verifier.rb +30 -28
  17. data/lib/recog/verify_reporter.rb +69 -73
  18. data/lib/recog/version.rb +3 -1
  19. data/lib/recog.rb +2 -0
  20. data/recog/bin/recog_match +21 -20
  21. data/recog/xml/apache_modules.xml +2 -0
  22. data/recog/xml/dhcp_vendor_class.xml +1 -1
  23. data/recog/xml/favicons.xml +133 -1
  24. data/recog/xml/ftp_banners.xml +1 -1
  25. data/recog/xml/html_title.xml +140 -1
  26. data/recog/xml/http_cookies.xml +20 -2
  27. data/recog/xml/http_servers.xml +38 -17
  28. data/recog/xml/http_wwwauth.xml +17 -4
  29. data/recog/xml/mdns_device-info_txt.xml +49 -15
  30. data/recog/xml/sip_banners.xml +0 -2
  31. data/recog/xml/sip_user_agents.xml +1 -1
  32. data/recog/xml/snmp_sysdescr.xml +1 -2
  33. data/recog/xml/ssh_banners.xml +8 -0
  34. data/recog/xml/telnet_banners.xml +3 -2
  35. data/recog/xml/tls_jarm.xml +1 -1
  36. data/recog/xml/x11_banners.xml +1 -0
  37. data/recog/xml/x509_issuers.xml +1 -1
  38. data/recog/xml/x509_subjects.xml +0 -1
  39. data/recog.gemspec +14 -13
  40. data/spec/lib/recog/db_spec.rb +37 -36
  41. data/spec/lib/recog/fingerprint/regexp_factory_spec.rb +19 -20
  42. data/spec/lib/recog/fingerprint_spec.rb +44 -42
  43. data/spec/lib/recog/formatter_spec.rb +20 -18
  44. data/spec/lib/recog/match_reporter_spec.rb +35 -30
  45. data/spec/lib/recog/nizer_spec.rb +85 -101
  46. data/spec/lib/recog/verify_reporter_spec.rb +45 -44
  47. data/spec/spec_helper.rb +2 -1
  48. data.tar.gz.sig +1 -3
  49. metadata +3 -3
  50. metadata.gz.sig +0 -0
data/recog/xml/html_title.xml CHANGED
@@ -1112,6 +1112,7 @@
1112
1112
  <param pos="0" name="hw.device" value="Lights Out Management"/>
1113
1113
  <param pos="0" name="hw.vendor" value="HP"/>
1114
1114
  <param pos="0" name="hw.product" value="iLO 3"/>
1115
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights-out_3:-"/>
1115
1116
  <param pos="0" name="os.vendor" value="HP"/>
1116
1117
  <param pos="0" name="os.device" value="Lights Out Management"/>
1117
1118
  <param pos="0" name="os.family" value="iLO"/>
@@ -1125,6 +1126,7 @@
1125
1126
  <param pos="0" name="hw.device" value="Lights Out Management"/>
1126
1127
  <param pos="0" name="hw.vendor" value="HP"/>
1127
1128
  <param pos="0" name="hw.product" value="iLO 4"/>
1129
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights-out_4:-"/>
1128
1130
  <param pos="0" name="os.vendor" value="HP"/>
1129
1131
  <param pos="0" name="os.device" value="Lights Out Management"/>
1130
1132
  <param pos="0" name="os.family" value="iLO"/>
@@ -3255,6 +3257,14 @@
3255
3257
  <param pos="0" name="service.product" value="Security Scanner"/>
3256
3258
  </fingerprint>
3257
3259
 
3260
+ <fingerprint pattern="^(?:Sign In - )?Jellyseerr$">
3261
+ <description>Jellyseerr</description>
3262
+ <example>Jellyseerr</example>
3263
+ <example>Sign In - Jellyseerr</example>
3264
+ <param pos="0" name="service.vendor" value="Jellyseerr"/>
3265
+ <param pos="0" name="service.product" value="Jellyseerr"/>
3266
+ </fingerprint>
3267
+
3258
3268
  <fingerprint pattern="^(?:Chorus 2 - )?Kodi(?: web interface)?$">
3259
3269
  <description>Kodi Media Server</description>
3260
3270
  <example>Kodi</example>
@@ -3333,7 +3343,7 @@
3333
3343
  <param pos="0" name="service.cpe23" value="cpe:/a:pulsesecure:pulse_connect_secure:-"/>
3334
3344
  <param pos="0" name="os.vendor" value="Pulse Secure"/>
3335
3345
  <param pos="0" name="os.family" value="SSL-VPN"/>
3336
- <param pos="0" name="os.device" value="SSL-VPN"/>
3346
+ <param pos="0" name="os.device" value="VPN"/>
3337
3347
  <param pos="0" name="os.product" value="Pulse Connect Secure"/>
3338
3348
  </fingerprint>
3339
3349
 
@@ -3904,6 +3914,14 @@
3904
3914
  <param pos="1" name="host.name"/>
3905
3915
  </fingerprint>
3906
3916
 
3917
+ <fingerprint pattern="^Superset$">
3918
+ <description>Apache Superset</description>
3919
+ <example>Superset</example>
3920
+ <param pos="0" name="service.vendor" value="Apache"/>
3921
+ <param pos="0" name="service.product" value="Superset"/>
3922
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:superset:-"/>
3923
+ </fingerprint>
3924
+
3907
3925
  <fingerprint pattern="^pfSense - Login$">
3908
3926
  <description>pfSense Firewall</description>
3909
3927
  <example>pfSense - Login</example>
@@ -4017,6 +4035,20 @@
4017
4035
  <param pos="0" name="service.cpe23" value="cpe:/a:papermerge:papermerge:-"/>
4018
4036
  </fingerprint>
4019
4037
 
4038
+ <fingerprint pattern="^Paperless-ng sign in$">
4039
+ <description>Paperless-ng - document management system</description>
4040
+ <example>Paperless-ng sign in</example>
4041
+ <param pos="0" name="service.vendor" value="Paperless-ng"/>
4042
+ <param pos="0" name="service.product" value="Paperless-ng"/>
4043
+ </fingerprint>
4044
+
4045
+ <fingerprint pattern="^Paperless-ngx sign in$">
4046
+ <description>Paperless-ngx - document management system</description>
4047
+ <example>Paperless-ngx sign in</example>
4048
+ <param pos="0" name="service.vendor" value="Paperless-ngx"/>
4049
+ <param pos="0" name="service.product" value="Paperless-ngx"/>
4050
+ </fingerprint>
4051
+
4020
4052
  <fingerprint pattern="^(?:FileRun :: (?:Login|Installation))|(?:(?:\S)* :: Login \(powered by FileRun\))$">
4021
4053
  <description>FileRun - self-hosted Google Drive alternative</description>
4022
4054
  <example>FileRun :: Login</example>
@@ -4097,6 +4129,20 @@
4097
4129
  <param pos="0" name="service.product" value="darkstat"/>
4098
4130
  </fingerprint>
4099
4131
 
4132
+ <fingerprint pattern="^Login - Radarr$">
4133
+ <description>Radarr</description>
4134
+ <example>Login - Radarr</example>
4135
+ <param pos="0" name="service.vendor" value="Radarr"/>
4136
+ <param pos="0" name="service.product" value="Radarr"/>
4137
+ </fingerprint>
4138
+
4139
+ <fingerprint pattern="^Login - Sonarr$">
4140
+ <description>Sonarr</description>
4141
+ <example>Login - Sonarr</example>
4142
+ <param pos="0" name="service.vendor" value="Sonarr"/>
4143
+ <param pos="0" name="service.product" value="Sonarr"/>
4144
+ </fingerprint>
4145
+
4100
4146
  <fingerprint pattern="^Login to Cacti$">
4101
4147
  <description>Cacti - network graphing solution</description>
4102
4148
  <example>Login to Cacti</example>
@@ -4141,6 +4187,44 @@
4141
4187
  <param pos="0" name="service.product" value="R1Soft Server Backup Manager"/>
4142
4188
  </fingerprint>
4143
4189
 
4190
+ <fingerprint pattern="^PaperCut Login for (?:.{1,512})$">
4191
+ <description>PaperCut MF and PaperCut NG - print management system</description>
4192
+ <example>PaperCut Login for Foo Bar</example>
4193
+ <param pos="0" name="service.vendor" value="PaperCut"/>
4194
+ </fingerprint>
4195
+
4196
+ <fingerprint pattern="^Transmission Web Interface$">
4197
+ <description>Transmission</description>
4198
+ <example>Transmission Web Interface</example>
4199
+ <param pos="0" name="service.vendor" value="TransmissionBT"/>
4200
+ <param pos="0" name="service.product" value="Transmission"/>
4201
+ <param pos="0" name="service.cpe23" value="cpe:/a:transmissionbt:transmission:-"/>
4202
+ </fingerprint>
4203
+
4204
+ <fingerprint pattern="^MeterSphere$">
4205
+ <description>MeterSphere - Open-source Continuous Testing Platform</description>
4206
+ <example>MeterSphere</example>
4207
+ <param pos="0" name="service.vendor" value="MeterSphere"/>
4208
+ <param pos="0" name="service.product" value="MeterSphere"/>
4209
+ <param pos="0" name="service.cpe23" value="cpe:/a:metersphere:metersphere:-"/>
4210
+ </fingerprint>
4211
+
4212
+ <fingerprint pattern="^(?:frps dashboard|frp client admin UI)$">
4213
+ <description>frp - fast reverse proxy</description>
4214
+ <example>frps dashboard</example>
4215
+ <example>frp client admin UI</example>
4216
+ <param pos="0" name="service.vendor" value="frp"/>
4217
+ <param pos="0" name="service.product" value="frp"/>
4218
+ </fingerprint>
4219
+
4220
+ <fingerprint pattern="^Roundcube Webmail :: Welcome to Roundcube Webmail$">
4221
+ <description>Roundcube Webmail</description>
4222
+ <example>Roundcube Webmail :: Welcome to Roundcube Webmail</example>
4223
+ <param pos="0" name="service.vendor" value="Roundcube"/>
4224
+ <param pos="0" name="service.product" value="Webmail"/>
4225
+ <param pos="0" name="service.cpe23" value="cpe:/a:roundcube:webmail:-"/>
4226
+ </fingerprint>
4227
+
4144
4228
  <!-- Specific Eltex fingerprints to enable CPE generation -->
4145
4229
 
4146
4230
  <fingerprint pattern="^Eltex - NTP-RG-1402G$">
@@ -4196,4 +4280,59 @@
4196
4280
  <param pos="0" name="hw.device" value="Broadband Router"/>
4197
4281
  </fingerprint>
4198
4282
 
4283
+ <!-- FatPipe Networks fingerprints -->
4284
+
4285
+ <fingerprint pattern="^FatPipe MPVPN(?:.nbsp;\| Log in| Remote Configuration)$">
4286
+ <description>FatPipe Networks MPVPN</description>
4287
+ <example>FatPipe MPVPN&amp;nbsp;| Log in</example>
4288
+ <example>FatPipe MPVPN Remote Configuration</example>
4289
+ <param pos="0" name="os.vendor" value="FatPipe Networks"/>
4290
+ <param pos="0" name="os.product" value="MPVPN Firmware"/>
4291
+ <param pos="0" name="os.device" value="Multiplexer"/>
4292
+ <param pos="0" name="os.cpe23" value="cpe:/o:fatpipeinc:mpvpn_firmware:-"/>
4293
+ <param pos="0" name="hw.vendor" value="FatPipe Networks"/>
4294
+ <param pos="0" name="hw.product" value="MPVPN"/>
4295
+ <param pos="0" name="hw.device" value="Multiplexer"/>
4296
+ <param pos="0" name="hw.cpe23" value="cpe:/h:fatpipeinc:mpvpn:-"/>
4297
+ </fingerprint>
4298
+
4299
+ <fingerprint pattern="^FatPipe IPVPN(?:.nbsp;\| Log in| Remote Configuration)$">
4300
+ <description>FatPipe Networks IPVPN</description>
4301
+ <example>FatPipe IPVPN&amp;nbsp;| Log in</example>
4302
+ <example>FatPipe IPVPN Remote Configuration</example>
4303
+ <param pos="0" name="os.vendor" value="FatPipe Networks"/>
4304
+ <param pos="0" name="os.product" value="IPVPN Firmware"/>
4305
+ <param pos="0" name="os.device" value="Multiplexer"/>
4306
+ <param pos="0" name="os.cpe23" value="cpe:/o:fatpipeinc:ipvpn_firmware:-"/>
4307
+ <param pos="0" name="hw.vendor" value="FatPipe Networks"/>
4308
+ <param pos="0" name="hw.product" value="IPVPN"/>
4309
+ <param pos="0" name="hw.device" value="Multiplexer"/>
4310
+ <param pos="0" name="hw.cpe23" value="cpe:/h:fatpipeinc:ipvpn:-"/>
4311
+ </fingerprint>
4312
+
4313
+ <fingerprint pattern="^FatPipe WARP(?:.nbsp;\| Log in| Remote Configuration)$">
4314
+ <description>FatPipe Networks WARP</description>
4315
+ <example>FatPipe WARP&amp;nbsp;| Log in</example>
4316
+ <example>FatPipe WARP Remote Configuration</example>
4317
+ <param pos="0" name="os.vendor" value="FatPipe Networks"/>
4318
+ <param pos="0" name="os.product" value="WARP Firmware"/>
4319
+ <param pos="0" name="os.device" value="Multiplexer"/>
4320
+ <param pos="0" name="os.cpe23" value="cpe:/o:fatpipeinc:warp_firmware:-"/>
4321
+ <param pos="0" name="hw.vendor" value="FatPipe Networks"/>
4322
+ <param pos="0" name="hw.product" value="WARP"/>
4323
+ <param pos="0" name="hw.device" value="Multiplexer"/>
4324
+ <param pos="0" name="hw.cpe23" value="cpe:/h:fatpipeinc:warp:-"/>
4325
+ </fingerprint>
4326
+
4327
+ <fingerprint pattern="^FatPipe SDWAN.nbsp;\| Log in$">
4328
+ <description>FatPipe Networks SDWAN</description>
4329
+ <example>FatPipe SDWAN&amp;nbsp;| Log in</example>
4330
+ <param pos="0" name="os.vendor" value="FatPipe Networks"/>
4331
+ <param pos="0" name="os.product" value="SDWAN Firmware"/>
4332
+ <param pos="0" name="os.device" value="SD-WAN Appliance"/>
4333
+ <param pos="0" name="hw.vendor" value="FatPipe Networks"/>
4334
+ <param pos="0" name="hw.product" value="SDWAN"/>
4335
+ <param pos="0" name="hw.device" value="SD-WAN Appliance"/>
4336
+ </fingerprint>
4337
+
4199
4338
  </fingerprints>
data/recog/xml/http_cookies.xml CHANGED
@@ -205,7 +205,6 @@
205
205
  <param pos="0" name="os.vendor" value="Cisco"/>
206
206
  <param pos="0" name="os.family" value="Adaptive Security Appliance"/>
207
207
  <param pos="0" name="os.product" value="Adaptive Security Appliance"/>
208
- <param pos="0" name="os.cpe23" value="cpe:/o:cisco:adaptive_security_appliance_software:-"/>
209
208
  <param pos="0" name="hw.vendor" value="Cisco"/>
210
209
  <param pos="0" name="hw.family" value="Adaptive Security Appliance"/>
211
210
  <param pos="0" name="hw.product" value="Adaptive Security Appliance"/>
@@ -246,7 +245,7 @@
246
245
  <param pos="0" name="service.cpe23" value="cpe:/a:pulsesecure:pulse_connect_secure:-"/>
247
246
  <param pos="0" name="os.vendor" value="Pulse Secure"/>
248
247
  <param pos="0" name="os.family" value="SSL-VPN"/>
249
- <param pos="0" name="os.device" value="SSL-VPN"/>
248
+ <param pos="0" name="os.device" value="VPN"/>
250
249
  <param pos="0" name="os.product" value="Pulse Connect Secure"/>
251
250
  </fingerprint>
252
251
 
@@ -805,6 +804,25 @@
805
804
  <param pos="0" name="service.cpe23" value="cpe:/a:filerun:filerun:-"/>
806
805
  </fingerprint>
807
806
 
807
+ <fingerprint pattern="^(DMZCookieTest|MIDMZLang|siLockLongTermInstID)=">
808
+ <description>Progress MOVEit Transfer (formerly MOVEit DMZ, MOVEit File Transfer)</description>
809
+ <example cookie="DMZCookieTest">DMZCookieTest=ifyoucanreadthisyourbrowsersupportscookies; path=/</example>
810
+ <example cookie="MIDMZLang">MIDMZLang=en; expires=Fri, 30-May-2025 05:08:54 GMT; path=/</example>
811
+ <example cookie="siLockLongTermInstID">siLockLongTermInstID=1337; expires=Fri, 30-May-2025 05:08:54 GMT; path=/</example>
812
+ <param pos="1" name="cookie"/>
813
+ <param pos="0" name="service.vendor" value="Progress"/>
814
+ <param pos="0" name="service.product" value="MOVEit Transfer"/>
815
+ <param pos="0" name="service.cpe23" value="cpe:/a:progress:moveit_transfer:-"/>
816
+ </fingerprint>
817
+
818
+ <fingerprint pattern="^roundcube_sessid=">
819
+ <description>Roundcube Webmail</description>
820
+ <example>roundcube_sessid=bdd66fb23fa3ce907a1e792475273145; path=/; HttpOnly</example>
821
+ <param pos="0" name="service.vendor" value="Roundcube"/>
822
+ <param pos="0" name="service.product" value="Webmail"/>
823
+ <param pos="0" name="service.cpe23" value="cpe:/a:roundcube:webmail:-"/>
824
+ </fingerprint>
825
+
808
826
  <!--
809
827
  Ignore various cookies that are very generic cookies for session IDs
810
828
  that are not necessarily indicative of any particular
data/recog/xml/http_servers.xml CHANGED
@@ -2,6 +2,14 @@
2
2
  <fingerprints matches="http_header.server" protocol="http" database_type="service" preference="0.90">
3
3
  <!-- HTTP Server headers are matched against these patterns to fingerprint HTTP servers. -->
4
4
 
5
+ <fingerprint pattern="^Transmission$">
6
+ <description>Transmission</description>
7
+ <example>Transmission</example>
8
+ <param pos="0" name="service.vendor" value="TransmissionBT"/>
9
+ <param pos="0" name="service.product" value="Transmission"/>
10
+ <param pos="0" name="service.cpe23" value="cpe:/a:transmissionbt:transmission:-"/>
11
+ </fingerprint>
12
+
5
13
  <fingerprint pattern="^Mastodon$">
6
14
  <description>Mastodon</description>
7
15
  <example>Mastodon</example>
@@ -1051,10 +1059,10 @@
1051
1059
  <description>Varnish Cache</description>
1052
1060
  <example>Varnish</example>
1053
1061
  <example>Varnish-Cache</example>
1054
- <param pos="0" name="service.vendor" value="Varnish-cache"/>
1062
+ <param pos="0" name="service.vendor" value="Varnish Cache Project"/>
1055
1063
  <param pos="0" name="service.family" value="Varnish"/>
1056
- <param pos="0" name="service.product" value="Varnish"/>
1057
- <param pos="0" name="service.cpe23" value="cpe:/a:varnish-cache:varnish:-"/>
1064
+ <param pos="0" name="service.product" value="Varnish Cache"/>
1065
+ <param pos="0" name="service.cpe23" value="cpe:/a:varnish_cache_project:varnish_cache:-"/>
1058
1066
  </fingerprint>
1059
1067
 
1060
1068
  <fingerprint pattern="^Tengine\/?([\d.]+)?$">
@@ -1905,10 +1913,10 @@
1905
1913
  <description>SAP NetWeaver Application Server - Advanced Business Application Programming</description>
1906
1914
  <example service.version="731">SAP NetWeaver Application Server / ABAP 731</example>
1907
1915
  <param pos="0" name="service.vendor" value="SAP"/>
1908
- <param pos="0" name="service.product" value="NetWeaver AS ABAP"/>
1916
+ <param pos="0" name="service.product" value="NetWeaver Application Server ABAP"/>
1909
1917
  <param pos="0" name="service.family" value="NetWeaver"/>
1910
1918
  <param pos="1" name="service.version"/>
1911
- <param pos="0" name="service.cpe23" value="cpe:/a:sap:netweaver_as_abap:{service.version}"/>
1919
+ <param pos="0" name="service.cpe23" value="cpe:/a:sap:netweaver_application_server_abap:{service.version}"/>
1912
1920
  <param pos="0" name="service.component.vendor" value="SAP"/>
1913
1921
  <param pos="0" name="service.component.product" value="NetWeaver Application Server"/>
1914
1922
  <param pos="0" name="service.component.cpe23" value="cpe:/a:sap:netweaver_application_server:-"/>
@@ -2159,7 +2167,6 @@
2159
2167
  <param pos="0" name="service.vendor" value="Cisco"/>
2160
2168
  <param pos="0" name="service.family" value="IOS"/>
2161
2169
  <param pos="0" name="service.product" value="IOS"/>
2162
- <param pos="0" name="service.cpe23" value="cpe:/a:cisco:ios:-"/>
2163
2170
  <param pos="0" name="os.vendor" value="Cisco"/>
2164
2171
  <param pos="0" name="os.family" value="IOS"/>
2165
2172
  <param pos="0" name="os.product" value="IOS"/>
@@ -2174,7 +2181,6 @@
2174
2181
  <param pos="0" name="service.vendor" value="Cisco"/>
2175
2182
  <param pos="0" name="service.family" value="IOS"/>
2176
2183
  <param pos="0" name="service.product" value="IOS"/>
2177
- <param pos="0" name="service.cpe23" value="cpe:/a:cisco:ios:-"/>
2178
2184
  <param pos="0" name="os.vendor" value="Cisco"/>
2179
2185
  <param pos="0" name="os.family" value="IOS"/>
2180
2186
  <param pos="0" name="os.product" value="IOS"/>
@@ -2192,7 +2198,6 @@
2192
2198
  <param pos="0" name="os.vendor" value="Cisco"/>
2193
2199
  <param pos="0" name="os.family" value="Adaptive Security Appliance"/>
2194
2200
  <param pos="0" name="os.product" value="Adaptive Security Appliance"/>
2195
- <param pos="0" name="os.cpe23" value="cpe:/o:cisco:adaptive_security_appliance_software:-"/>
2196
2201
  <param pos="0" name="hw.vendor" value="Cisco"/>
2197
2202
  <param pos="0" name="hw.family" value="Adaptive Security Appliance"/>
2198
2203
  <param pos="0" name="hw.product" value="Adaptive Security Appliance"/>
@@ -2996,7 +3001,7 @@
2996
3001
  <param pos="0" name="service.vendor" value="Treck"/>
2997
3002
  <param pos="0" name="service.product" value="TCP/IP"/>
2998
3003
  <param pos="1" name="service.version"/>
2999
- <param pos="0" name="service.cpe23" value="cpe:/a:treck:tcp\/ip:{service.version}"/>
3004
+ <param pos="0" name="service.cpe23" value="cpe:/a:treck:tcp%2fip:{service.version}"/>
3000
3005
  </fingerprint>
3001
3006
 
3002
3007
  <fingerprint pattern="^WEBrick/([\d\.]+)">
@@ -3284,12 +3289,16 @@
3284
3289
 
3285
3290
  <fingerprint pattern="^Intel\(R\) Active Management Technology\s(\d+\.\d+\.\d+\.\d+|\d+\.\d+\.\d+|\d+\.\d+)">
3286
3291
  <description>Intel(R) Active Management Technology (AMT) with a version</description>
3287
- <example service.version="7.1.86">Intel(R) Active Management Technology 7.1.86</example>
3292
+ <example service.version="7.1.86" os.version="7.1.86">Intel(R) Active Management Technology 7.1.86</example>
3288
3293
  <param pos="0" name="service.vendor" value="Intel"/>
3289
- <param pos="0" name="service.product" value="Intel(R) Active Management Technology"/>
3290
3294
  <param pos="0" name="service.family" value="Intel(R) Active Management Technology"/>
3295
+ <param pos="0" name="service.product" value="Intel(R) Active Management Technology"/>
3291
3296
  <param pos="1" name="service.version"/>
3292
- <param pos="0" name="service.cpe23" value="cpe:/a:intel:active_management_technology:{service.version}"/>
3297
+ <param pos="0" name="os.vendor" value="Intel"/>
3298
+ <param pos="0" name="os.family" value="Intel(R) Active Management Technology"/>
3299
+ <param pos="0" name="os.product" value="Intel(R) Active Management Technology Firmware"/>
3300
+ <param pos="1" name="os.version"/>
3301
+ <param pos="0" name="os.cpe23" value="cpe:/o:intel:active_management_technology_firmware:{os.version}"/>
3293
3302
  </fingerprint>
3294
3303
 
3295
3304
  <fingerprint pattern="^(?:AMT|Intel\(R\) Active Management Technology)$">
@@ -3297,9 +3306,12 @@
3297
3306
  <example>AMT</example>
3298
3307
  <example>Intel(R) Active Management Technology</example>
3299
3308
  <param pos="0" name="service.vendor" value="Intel"/>
3300
- <param pos="0" name="service.product" value="Intel(R) Active Management Technology"/>
3301
3309
  <param pos="0" name="service.family" value="Intel(R) Active Management Technology"/>
3302
- <param pos="0" name="service.cpe23" value="cpe:/a:intel:active_management_technology:-"/>
3310
+ <param pos="0" name="service.product" value="Intel(R) Active Management Technology"/>
3311
+ <param pos="0" name="os.vendor" value="Intel"/>
3312
+ <param pos="0" name="os.family" value="Intel(R) Active Management Technology"/>
3313
+ <param pos="0" name="os.product" value="Intel(R) Active Management Technology Firmware"/>
3314
+ <param pos="0" name="os.cpe23" value="cpe:/o:intel:active_management_technology_firmware:-"/>
3303
3315
  </fingerprint>
3304
3316
 
3305
3317
  <fingerprint pattern="^Intel\(R\) Standard Manageability\s(\d+\.\d+\.\d+\.\d+|\d+\.\d+\.\d+|\d+\.\d+)">
@@ -3307,8 +3319,8 @@
3307
3319
  <example service.version="5.0.50">Intel(R) Standard Manageability 5.0.50</example>
3308
3320
  <example service.version="9.0.3">Intel(R) Standard Manageability 9.0.3</example>
3309
3321
  <param pos="0" name="service.vendor" value="Intel"/>
3310
- <param pos="0" name="service.product" value="Intel(R) Standard Manageability"/>
3311
3322
  <param pos="0" name="service.family" value="Intel(R) Active Management Technology"/>
3323
+ <param pos="0" name="service.product" value="Intel(R) Standard Manageability"/>
3312
3324
  <param pos="1" name="service.version"/>
3313
3325
  <param pos="0" name="service.cpe23" value="cpe:/a:intel:standard_manageability:{service.version}"/>
3314
3326
  </fingerprint>
@@ -3403,6 +3415,7 @@
3403
3415
  <param pos="0" name="service.family" value="Niagara"/>
3404
3416
  <param pos="0" name="service.product" value="Niagara AX"/>
3405
3417
  <param pos="1" name="service.version"/>
3418
+ <param pos="0" name="service.cpe23" value="cpe:/a:tridium:niagara_ax:{service.version}"/>
3406
3419
  </fingerprint>
3407
3420
 
3408
3421
  <fingerprint pattern="^Microsoft WinCE Fidelix v([\d.]+)$">
@@ -4713,8 +4726,8 @@
4713
4726
  <param pos="0" name="service.vendor" value="SerenityOS"/>
4714
4727
  <param pos="0" name="service.product" value="WebServer"/>
4715
4728
  <param pos="0" name="os.vendor" value="SerenityOS"/>
4716
- <param pos="0" name="os.product" value="Serenity"/>
4717
- <param pos="0" name="os.cpe23" value="cpe:/o:serenityos:serenity:-"/>
4729
+ <param pos="0" name="os.product" value="SerenityOS"/>
4730
+ <param pos="0" name="os.cpe23" value="cpe:/o:serenityos:serenityos:-"/>
4718
4731
  </fingerprint>
4719
4732
 
4720
4733
  <!-- This is a version of ACME mini_httpd where the value 'mini_httpd' has been
@@ -4931,6 +4944,14 @@
4931
4944
  <param pos="0" name="hw.vendor" value="Server Technology"/>
4932
4945
  </fingerprint>
4933
4946
 
4947
+ <fingerprint pattern="^frp/(\d+(?:\.\d+)*)$">
4948
+ <description>frp - fast reverse proxy, not found response</description>
4949
+ <example service.version="0.48.0">frp/0.48.0</example>
4950
+ <param pos="0" name="service.vendor" value="frp"/>
4951
+ <param pos="0" name="service.product" value="frp"/>
4952
+ <param pos="1" name="service.version"/>
4953
+ </fingerprint>
4954
+
4934
4955
  <!-- ntopng -->
4935
4956
 
4936
4957
  <fingerprint pattern="^ntopng (\d+(?:\.\d+)*) \[(?:FreeBSD |[\w-]+-freebsd)(\d+(?:\.\d+)*)(?:[a-z0-9-])* \[(\w+)\]\[[^\]]*\]\]$">
data/recog/xml/http_wwwauth.xml CHANGED
@@ -2,8 +2,16 @@
2
2
  <fingerprints matches="http_header.wwwauth" protocol="http" database_type="service" preference="0.85">
3
3
  <!-- HTTP WWW-Authenticate headers are matched against these patterns to fingerprint HTTP servers. -->
4
4
 
5
+ <fingerprint pattern="^(?:Basic|Digest) realm=&quot;Transmission&quot;$">
6
+ <description>Transmission</description>
7
+ <example>Basic realm="Transmission"</example>
8
+ <param pos="0" name="service.vendor" value="TransmissionBT"/>
9
+ <param pos="0" name="service.product" value="Transmission"/>
10
+ <param pos="0" name="service.cpe23" value="cpe:/a:transmissionbt:transmission:-"/>
11
+ </fingerprint>
12
+
5
13
  <fingerprint pattern="^(?:Basic|Digest) realm=&quot;monit&quot;$">
6
- <description>Minot</description>
14
+ <description>Monit</description>
7
15
  <example>Basic realm="monit"</example>
8
16
  <param pos="0" name="service.vendor" value="Tildeslash"/>
9
17
  <param pos="0" name="service.product" value="Monit"/>
@@ -17,7 +25,6 @@
17
25
  <param pos="0" name="service.product" value="IOS"/>
18
26
  <param pos="0" name="service.family" value="IOS"/>
19
27
  <param pos="0" name="service.version" value="11"/>
20
- <param pos="0" name="service.cpe23" value="cpe:/a:cisco:ios:11"/>
21
28
  <param pos="0" name="os.vendor" value="Cisco"/>
22
29
  <param pos="0" name="os.device" value="Router"/>
23
30
  <param pos="0" name="os.family" value="IOS"/>
@@ -36,7 +43,6 @@
36
43
  <param pos="0" name="service.product" value="IOS"/>
37
44
  <param pos="0" name="service.family" value="IOS"/>
38
45
  <param pos="0" name="service.version" value="12"/>
39
- <param pos="0" name="service.cpe23" value="cpe:/a:cisco:ios:12"/>
40
46
  <param pos="0" name="os.vendor" value="Cisco"/>
41
47
  <param pos="0" name="os.device" value="Router"/>
42
48
  <param pos="0" name="os.family" value="IOS"/>
@@ -55,7 +61,6 @@
55
61
  <param pos="0" name="service.product" value="IOS"/>
56
62
  <param pos="0" name="service.family" value="IOS"/>
57
63
  <param pos="0" name="service.version" value="12"/>
58
- <param pos="0" name="service.cpe23" value="cpe:/a:cisco:ios:12"/>
59
64
  <param pos="0" name="os.vendor" value="Cisco"/>
60
65
  <param pos="0" name="os.device" value="Router"/>
61
66
  <param pos="0" name="os.family" value="IOS"/>
@@ -444,6 +449,13 @@
444
449
  <param pos="0" name="service.cpe23" value="cpe:/a:f5:big-ip_local_traffic_manager:-"/>
445
450
  </fingerprint>
446
451
 
452
+ <fingerprint pattern="^(?:Basic|Digest) realm=&quot;Prowlarr&quot;$">
453
+ <description>Prowlarr</description>
454
+ <example>Basic realm="Prowlarr"</example>
455
+ <param pos="0" name="service.vendor" value="Prowlarr"/>
456
+ <param pos="0" name="service.product" value="Prowlarr"/>
457
+ </fingerprint>
458
+
447
459
  <!-- HP ProCurve -->
448
460
 
449
461
  <fingerprint pattern="(?i)^(?:Basic|Digest) realm=&quot;(?:HP|ProCurve) (J[3]\d{3}A)&quot;$">
@@ -678,6 +690,7 @@
678
690
  <param pos="0" name="os.family" value="Linux"/>
679
691
  <param pos="0" name="os.product" value="FreshTomato"/>
680
692
  <param pos="0" name="os.device" value="Router"/>
693
+ <param pos="0" name="os.cpe23" value="cpe:/o:freshtomato:freshtomato:-"/>
681
694
  </fingerprint>
682
695
 
683
696
  <fingerprint pattern="(?i)^Basic realm=&quot;NetPing \d+/PWR-220\s*v\d+/(?:ETH|SMS|GSM(?:3G)?)&quot;">