recog 3.1.1 → 3.1.2
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- checksums.yaml.gz.sig +0 -0
- data/Gemfile +6 -0
- data/Rakefile +7 -5
- data/lib/recog/db.rb +67 -68
- data/lib/recog/db_manager.rb +22 -21
- data/lib/recog/fingerprint/regexp_factory.rb +10 -13
- data/lib/recog/fingerprint/test.rb +9 -8
- data/lib/recog/fingerprint.rb +252 -262
- data/lib/recog/fingerprint_parse_error.rb +3 -1
- data/lib/recog/formatter.rb +41 -39
- data/lib/recog/match_reporter.rb +82 -83
- data/lib/recog/matcher.rb +37 -40
- data/lib/recog/matcher_factory.rb +7 -6
- data/lib/recog/nizer.rb +218 -224
- data/lib/recog/verifier.rb +30 -28
- data/lib/recog/verify_reporter.rb +69 -73
- data/lib/recog/version.rb +3 -1
- data/lib/recog.rb +2 -0
- data/recog/bin/recog_match +21 -20
- data/recog/xml/apache_modules.xml +2 -0
- data/recog/xml/dhcp_vendor_class.xml +1 -1
- data/recog/xml/favicons.xml +133 -1
- data/recog/xml/ftp_banners.xml +1 -1
- data/recog/xml/html_title.xml +140 -1
- data/recog/xml/http_cookies.xml +20 -2
- data/recog/xml/http_servers.xml +38 -17
- data/recog/xml/http_wwwauth.xml +17 -4
- data/recog/xml/mdns_device-info_txt.xml +49 -15
- data/recog/xml/sip_banners.xml +0 -2
- data/recog/xml/sip_user_agents.xml +1 -1
- data/recog/xml/snmp_sysdescr.xml +1 -2
- data/recog/xml/ssh_banners.xml +8 -0
- data/recog/xml/telnet_banners.xml +3 -2
- data/recog/xml/tls_jarm.xml +1 -1
- data/recog/xml/x11_banners.xml +1 -0
- data/recog/xml/x509_issuers.xml +1 -1
- data/recog/xml/x509_subjects.xml +0 -1
- data/recog.gemspec +14 -13
- data/spec/lib/recog/db_spec.rb +37 -36
- data/spec/lib/recog/fingerprint/regexp_factory_spec.rb +19 -20
- data/spec/lib/recog/fingerprint_spec.rb +44 -42
- data/spec/lib/recog/formatter_spec.rb +20 -18
- data/spec/lib/recog/match_reporter_spec.rb +35 -30
- data/spec/lib/recog/nizer_spec.rb +85 -101
- data/spec/lib/recog/verify_reporter_spec.rb +45 -44
- data/spec/spec_helper.rb +2 -1
- data.tar.gz.sig +1 -3
- metadata +3 -3
- metadata.gz.sig +0 -0
data/recog/xml/html_title.xml
CHANGED
@@ -1112,6 +1112,7 @@
|
|
1112
1112
|
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
1113
1113
|
<param pos="0" name="hw.vendor" value="HP"/>
|
1114
1114
|
<param pos="0" name="hw.product" value="iLO 3"/>
|
1115
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights-out_3:-"/>
|
1115
1116
|
<param pos="0" name="os.vendor" value="HP"/>
|
1116
1117
|
<param pos="0" name="os.device" value="Lights Out Management"/>
|
1117
1118
|
<param pos="0" name="os.family" value="iLO"/>
|
@@ -1125,6 +1126,7 @@
|
|
1125
1126
|
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
1126
1127
|
<param pos="0" name="hw.vendor" value="HP"/>
|
1127
1128
|
<param pos="0" name="hw.product" value="iLO 4"/>
|
1129
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights-out_4:-"/>
|
1128
1130
|
<param pos="0" name="os.vendor" value="HP"/>
|
1129
1131
|
<param pos="0" name="os.device" value="Lights Out Management"/>
|
1130
1132
|
<param pos="0" name="os.family" value="iLO"/>
|
@@ -3255,6 +3257,14 @@
|
|
3255
3257
|
<param pos="0" name="service.product" value="Security Scanner"/>
|
3256
3258
|
</fingerprint>
|
3257
3259
|
|
3260
|
+
<fingerprint pattern="^(?:Sign In - )?Jellyseerr$">
|
3261
|
+
<description>Jellyseerr</description>
|
3262
|
+
<example>Jellyseerr</example>
|
3263
|
+
<example>Sign In - Jellyseerr</example>
|
3264
|
+
<param pos="0" name="service.vendor" value="Jellyseerr"/>
|
3265
|
+
<param pos="0" name="service.product" value="Jellyseerr"/>
|
3266
|
+
</fingerprint>
|
3267
|
+
|
3258
3268
|
<fingerprint pattern="^(?:Chorus 2 - )?Kodi(?: web interface)?$">
|
3259
3269
|
<description>Kodi Media Server</description>
|
3260
3270
|
<example>Kodi</example>
|
@@ -3333,7 +3343,7 @@
|
|
3333
3343
|
<param pos="0" name="service.cpe23" value="cpe:/a:pulsesecure:pulse_connect_secure:-"/>
|
3334
3344
|
<param pos="0" name="os.vendor" value="Pulse Secure"/>
|
3335
3345
|
<param pos="0" name="os.family" value="SSL-VPN"/>
|
3336
|
-
<param pos="0" name="os.device" value="
|
3346
|
+
<param pos="0" name="os.device" value="VPN"/>
|
3337
3347
|
<param pos="0" name="os.product" value="Pulse Connect Secure"/>
|
3338
3348
|
</fingerprint>
|
3339
3349
|
|
@@ -3904,6 +3914,14 @@
|
|
3904
3914
|
<param pos="1" name="host.name"/>
|
3905
3915
|
</fingerprint>
|
3906
3916
|
|
3917
|
+
<fingerprint pattern="^Superset$">
|
3918
|
+
<description>Apache Superset</description>
|
3919
|
+
<example>Superset</example>
|
3920
|
+
<param pos="0" name="service.vendor" value="Apache"/>
|
3921
|
+
<param pos="0" name="service.product" value="Superset"/>
|
3922
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:apache:superset:-"/>
|
3923
|
+
</fingerprint>
|
3924
|
+
|
3907
3925
|
<fingerprint pattern="^pfSense - Login$">
|
3908
3926
|
<description>pfSense Firewall</description>
|
3909
3927
|
<example>pfSense - Login</example>
|
@@ -4017,6 +4035,20 @@
|
|
4017
4035
|
<param pos="0" name="service.cpe23" value="cpe:/a:papermerge:papermerge:-"/>
|
4018
4036
|
</fingerprint>
|
4019
4037
|
|
4038
|
+
<fingerprint pattern="^Paperless-ng sign in$">
|
4039
|
+
<description>Paperless-ng - document management system</description>
|
4040
|
+
<example>Paperless-ng sign in</example>
|
4041
|
+
<param pos="0" name="service.vendor" value="Paperless-ng"/>
|
4042
|
+
<param pos="0" name="service.product" value="Paperless-ng"/>
|
4043
|
+
</fingerprint>
|
4044
|
+
|
4045
|
+
<fingerprint pattern="^Paperless-ngx sign in$">
|
4046
|
+
<description>Paperless-ngx - document management system</description>
|
4047
|
+
<example>Paperless-ngx sign in</example>
|
4048
|
+
<param pos="0" name="service.vendor" value="Paperless-ngx"/>
|
4049
|
+
<param pos="0" name="service.product" value="Paperless-ngx"/>
|
4050
|
+
</fingerprint>
|
4051
|
+
|
4020
4052
|
<fingerprint pattern="^(?:FileRun :: (?:Login|Installation))|(?:(?:\S)* :: Login \(powered by FileRun\))$">
|
4021
4053
|
<description>FileRun - self-hosted Google Drive alternative</description>
|
4022
4054
|
<example>FileRun :: Login</example>
|
@@ -4097,6 +4129,20 @@
|
|
4097
4129
|
<param pos="0" name="service.product" value="darkstat"/>
|
4098
4130
|
</fingerprint>
|
4099
4131
|
|
4132
|
+
<fingerprint pattern="^Login - Radarr$">
|
4133
|
+
<description>Radarr</description>
|
4134
|
+
<example>Login - Radarr</example>
|
4135
|
+
<param pos="0" name="service.vendor" value="Radarr"/>
|
4136
|
+
<param pos="0" name="service.product" value="Radarr"/>
|
4137
|
+
</fingerprint>
|
4138
|
+
|
4139
|
+
<fingerprint pattern="^Login - Sonarr$">
|
4140
|
+
<description>Sonarr</description>
|
4141
|
+
<example>Login - Sonarr</example>
|
4142
|
+
<param pos="0" name="service.vendor" value="Sonarr"/>
|
4143
|
+
<param pos="0" name="service.product" value="Sonarr"/>
|
4144
|
+
</fingerprint>
|
4145
|
+
|
4100
4146
|
<fingerprint pattern="^Login to Cacti$">
|
4101
4147
|
<description>Cacti - network graphing solution</description>
|
4102
4148
|
<example>Login to Cacti</example>
|
@@ -4141,6 +4187,44 @@
|
|
4141
4187
|
<param pos="0" name="service.product" value="R1Soft Server Backup Manager"/>
|
4142
4188
|
</fingerprint>
|
4143
4189
|
|
4190
|
+
<fingerprint pattern="^PaperCut Login for (?:.{1,512})$">
|
4191
|
+
<description>PaperCut MF and PaperCut NG - print management system</description>
|
4192
|
+
<example>PaperCut Login for Foo Bar</example>
|
4193
|
+
<param pos="0" name="service.vendor" value="PaperCut"/>
|
4194
|
+
</fingerprint>
|
4195
|
+
|
4196
|
+
<fingerprint pattern="^Transmission Web Interface$">
|
4197
|
+
<description>Transmission</description>
|
4198
|
+
<example>Transmission Web Interface</example>
|
4199
|
+
<param pos="0" name="service.vendor" value="TransmissionBT"/>
|
4200
|
+
<param pos="0" name="service.product" value="Transmission"/>
|
4201
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:transmissionbt:transmission:-"/>
|
4202
|
+
</fingerprint>
|
4203
|
+
|
4204
|
+
<fingerprint pattern="^MeterSphere$">
|
4205
|
+
<description>MeterSphere - Open-source Continuous Testing Platform</description>
|
4206
|
+
<example>MeterSphere</example>
|
4207
|
+
<param pos="0" name="service.vendor" value="MeterSphere"/>
|
4208
|
+
<param pos="0" name="service.product" value="MeterSphere"/>
|
4209
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:metersphere:metersphere:-"/>
|
4210
|
+
</fingerprint>
|
4211
|
+
|
4212
|
+
<fingerprint pattern="^(?:frps dashboard|frp client admin UI)$">
|
4213
|
+
<description>frp - fast reverse proxy</description>
|
4214
|
+
<example>frps dashboard</example>
|
4215
|
+
<example>frp client admin UI</example>
|
4216
|
+
<param pos="0" name="service.vendor" value="frp"/>
|
4217
|
+
<param pos="0" name="service.product" value="frp"/>
|
4218
|
+
</fingerprint>
|
4219
|
+
|
4220
|
+
<fingerprint pattern="^Roundcube Webmail :: Welcome to Roundcube Webmail$">
|
4221
|
+
<description>Roundcube Webmail</description>
|
4222
|
+
<example>Roundcube Webmail :: Welcome to Roundcube Webmail</example>
|
4223
|
+
<param pos="0" name="service.vendor" value="Roundcube"/>
|
4224
|
+
<param pos="0" name="service.product" value="Webmail"/>
|
4225
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:roundcube:webmail:-"/>
|
4226
|
+
</fingerprint>
|
4227
|
+
|
4144
4228
|
<!-- Specific Eltex fingerprints to enable CPE generation -->
|
4145
4229
|
|
4146
4230
|
<fingerprint pattern="^Eltex - NTP-RG-1402G$">
|
@@ -4196,4 +4280,59 @@
|
|
4196
4280
|
<param pos="0" name="hw.device" value="Broadband Router"/>
|
4197
4281
|
</fingerprint>
|
4198
4282
|
|
4283
|
+
<!-- FatPipe Networks fingerprints -->
|
4284
|
+
|
4285
|
+
<fingerprint pattern="^FatPipe MPVPN(?:.nbsp;\| Log in| Remote Configuration)$">
|
4286
|
+
<description>FatPipe Networks MPVPN</description>
|
4287
|
+
<example>FatPipe MPVPN&nbsp;| Log in</example>
|
4288
|
+
<example>FatPipe MPVPN Remote Configuration</example>
|
4289
|
+
<param pos="0" name="os.vendor" value="FatPipe Networks"/>
|
4290
|
+
<param pos="0" name="os.product" value="MPVPN Firmware"/>
|
4291
|
+
<param pos="0" name="os.device" value="Multiplexer"/>
|
4292
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:fatpipeinc:mpvpn_firmware:-"/>
|
4293
|
+
<param pos="0" name="hw.vendor" value="FatPipe Networks"/>
|
4294
|
+
<param pos="0" name="hw.product" value="MPVPN"/>
|
4295
|
+
<param pos="0" name="hw.device" value="Multiplexer"/>
|
4296
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:fatpipeinc:mpvpn:-"/>
|
4297
|
+
</fingerprint>
|
4298
|
+
|
4299
|
+
<fingerprint pattern="^FatPipe IPVPN(?:.nbsp;\| Log in| Remote Configuration)$">
|
4300
|
+
<description>FatPipe Networks IPVPN</description>
|
4301
|
+
<example>FatPipe IPVPN&nbsp;| Log in</example>
|
4302
|
+
<example>FatPipe IPVPN Remote Configuration</example>
|
4303
|
+
<param pos="0" name="os.vendor" value="FatPipe Networks"/>
|
4304
|
+
<param pos="0" name="os.product" value="IPVPN Firmware"/>
|
4305
|
+
<param pos="0" name="os.device" value="Multiplexer"/>
|
4306
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:fatpipeinc:ipvpn_firmware:-"/>
|
4307
|
+
<param pos="0" name="hw.vendor" value="FatPipe Networks"/>
|
4308
|
+
<param pos="0" name="hw.product" value="IPVPN"/>
|
4309
|
+
<param pos="0" name="hw.device" value="Multiplexer"/>
|
4310
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:fatpipeinc:ipvpn:-"/>
|
4311
|
+
</fingerprint>
|
4312
|
+
|
4313
|
+
<fingerprint pattern="^FatPipe WARP(?:.nbsp;\| Log in| Remote Configuration)$">
|
4314
|
+
<description>FatPipe Networks WARP</description>
|
4315
|
+
<example>FatPipe WARP&nbsp;| Log in</example>
|
4316
|
+
<example>FatPipe WARP Remote Configuration</example>
|
4317
|
+
<param pos="0" name="os.vendor" value="FatPipe Networks"/>
|
4318
|
+
<param pos="0" name="os.product" value="WARP Firmware"/>
|
4319
|
+
<param pos="0" name="os.device" value="Multiplexer"/>
|
4320
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:fatpipeinc:warp_firmware:-"/>
|
4321
|
+
<param pos="0" name="hw.vendor" value="FatPipe Networks"/>
|
4322
|
+
<param pos="0" name="hw.product" value="WARP"/>
|
4323
|
+
<param pos="0" name="hw.device" value="Multiplexer"/>
|
4324
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:fatpipeinc:warp:-"/>
|
4325
|
+
</fingerprint>
|
4326
|
+
|
4327
|
+
<fingerprint pattern="^FatPipe SDWAN.nbsp;\| Log in$">
|
4328
|
+
<description>FatPipe Networks SDWAN</description>
|
4329
|
+
<example>FatPipe SDWAN&nbsp;| Log in</example>
|
4330
|
+
<param pos="0" name="os.vendor" value="FatPipe Networks"/>
|
4331
|
+
<param pos="0" name="os.product" value="SDWAN Firmware"/>
|
4332
|
+
<param pos="0" name="os.device" value="SD-WAN Appliance"/>
|
4333
|
+
<param pos="0" name="hw.vendor" value="FatPipe Networks"/>
|
4334
|
+
<param pos="0" name="hw.product" value="SDWAN"/>
|
4335
|
+
<param pos="0" name="hw.device" value="SD-WAN Appliance"/>
|
4336
|
+
</fingerprint>
|
4337
|
+
|
4199
4338
|
</fingerprints>
|
data/recog/xml/http_cookies.xml
CHANGED
@@ -205,7 +205,6 @@
|
|
205
205
|
<param pos="0" name="os.vendor" value="Cisco"/>
|
206
206
|
<param pos="0" name="os.family" value="Adaptive Security Appliance"/>
|
207
207
|
<param pos="0" name="os.product" value="Adaptive Security Appliance"/>
|
208
|
-
<param pos="0" name="os.cpe23" value="cpe:/o:cisco:adaptive_security_appliance_software:-"/>
|
209
208
|
<param pos="0" name="hw.vendor" value="Cisco"/>
|
210
209
|
<param pos="0" name="hw.family" value="Adaptive Security Appliance"/>
|
211
210
|
<param pos="0" name="hw.product" value="Adaptive Security Appliance"/>
|
@@ -246,7 +245,7 @@
|
|
246
245
|
<param pos="0" name="service.cpe23" value="cpe:/a:pulsesecure:pulse_connect_secure:-"/>
|
247
246
|
<param pos="0" name="os.vendor" value="Pulse Secure"/>
|
248
247
|
<param pos="0" name="os.family" value="SSL-VPN"/>
|
249
|
-
<param pos="0" name="os.device" value="
|
248
|
+
<param pos="0" name="os.device" value="VPN"/>
|
250
249
|
<param pos="0" name="os.product" value="Pulse Connect Secure"/>
|
251
250
|
</fingerprint>
|
252
251
|
|
@@ -805,6 +804,25 @@
|
|
805
804
|
<param pos="0" name="service.cpe23" value="cpe:/a:filerun:filerun:-"/>
|
806
805
|
</fingerprint>
|
807
806
|
|
807
|
+
<fingerprint pattern="^(DMZCookieTest|MIDMZLang|siLockLongTermInstID)=">
|
808
|
+
<description>Progress MOVEit Transfer (formerly MOVEit DMZ, MOVEit File Transfer)</description>
|
809
|
+
<example cookie="DMZCookieTest">DMZCookieTest=ifyoucanreadthisyourbrowsersupportscookies; path=/</example>
|
810
|
+
<example cookie="MIDMZLang">MIDMZLang=en; expires=Fri, 30-May-2025 05:08:54 GMT; path=/</example>
|
811
|
+
<example cookie="siLockLongTermInstID">siLockLongTermInstID=1337; expires=Fri, 30-May-2025 05:08:54 GMT; path=/</example>
|
812
|
+
<param pos="1" name="cookie"/>
|
813
|
+
<param pos="0" name="service.vendor" value="Progress"/>
|
814
|
+
<param pos="0" name="service.product" value="MOVEit Transfer"/>
|
815
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:progress:moveit_transfer:-"/>
|
816
|
+
</fingerprint>
|
817
|
+
|
818
|
+
<fingerprint pattern="^roundcube_sessid=">
|
819
|
+
<description>Roundcube Webmail</description>
|
820
|
+
<example>roundcube_sessid=bdd66fb23fa3ce907a1e792475273145; path=/; HttpOnly</example>
|
821
|
+
<param pos="0" name="service.vendor" value="Roundcube"/>
|
822
|
+
<param pos="0" name="service.product" value="Webmail"/>
|
823
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:roundcube:webmail:-"/>
|
824
|
+
</fingerprint>
|
825
|
+
|
808
826
|
<!--
|
809
827
|
Ignore various cookies that are very generic cookies for session IDs
|
810
828
|
that are not necessarily indicative of any particular
|
data/recog/xml/http_servers.xml
CHANGED
@@ -2,6 +2,14 @@
|
|
2
2
|
<fingerprints matches="http_header.server" protocol="http" database_type="service" preference="0.90">
|
3
3
|
<!-- HTTP Server headers are matched against these patterns to fingerprint HTTP servers. -->
|
4
4
|
|
5
|
+
<fingerprint pattern="^Transmission$">
|
6
|
+
<description>Transmission</description>
|
7
|
+
<example>Transmission</example>
|
8
|
+
<param pos="0" name="service.vendor" value="TransmissionBT"/>
|
9
|
+
<param pos="0" name="service.product" value="Transmission"/>
|
10
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:transmissionbt:transmission:-"/>
|
11
|
+
</fingerprint>
|
12
|
+
|
5
13
|
<fingerprint pattern="^Mastodon$">
|
6
14
|
<description>Mastodon</description>
|
7
15
|
<example>Mastodon</example>
|
@@ -1051,10 +1059,10 @@
|
|
1051
1059
|
<description>Varnish Cache</description>
|
1052
1060
|
<example>Varnish</example>
|
1053
1061
|
<example>Varnish-Cache</example>
|
1054
|
-
<param pos="0" name="service.vendor" value="Varnish
|
1062
|
+
<param pos="0" name="service.vendor" value="Varnish Cache Project"/>
|
1055
1063
|
<param pos="0" name="service.family" value="Varnish"/>
|
1056
|
-
<param pos="0" name="service.product" value="Varnish"/>
|
1057
|
-
<param pos="0" name="service.cpe23" value="cpe:/a:
|
1064
|
+
<param pos="0" name="service.product" value="Varnish Cache"/>
|
1065
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:varnish_cache_project:varnish_cache:-"/>
|
1058
1066
|
</fingerprint>
|
1059
1067
|
|
1060
1068
|
<fingerprint pattern="^Tengine\/?([\d.]+)?$">
|
@@ -1905,10 +1913,10 @@
|
|
1905
1913
|
<description>SAP NetWeaver Application Server - Advanced Business Application Programming</description>
|
1906
1914
|
<example service.version="731">SAP NetWeaver Application Server / ABAP 731</example>
|
1907
1915
|
<param pos="0" name="service.vendor" value="SAP"/>
|
1908
|
-
<param pos="0" name="service.product" value="NetWeaver
|
1916
|
+
<param pos="0" name="service.product" value="NetWeaver Application Server ABAP"/>
|
1909
1917
|
<param pos="0" name="service.family" value="NetWeaver"/>
|
1910
1918
|
<param pos="1" name="service.version"/>
|
1911
|
-
<param pos="0" name="service.cpe23" value="cpe:/a:sap:
|
1919
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:sap:netweaver_application_server_abap:{service.version}"/>
|
1912
1920
|
<param pos="0" name="service.component.vendor" value="SAP"/>
|
1913
1921
|
<param pos="0" name="service.component.product" value="NetWeaver Application Server"/>
|
1914
1922
|
<param pos="0" name="service.component.cpe23" value="cpe:/a:sap:netweaver_application_server:-"/>
|
@@ -2159,7 +2167,6 @@
|
|
2159
2167
|
<param pos="0" name="service.vendor" value="Cisco"/>
|
2160
2168
|
<param pos="0" name="service.family" value="IOS"/>
|
2161
2169
|
<param pos="0" name="service.product" value="IOS"/>
|
2162
|
-
<param pos="0" name="service.cpe23" value="cpe:/a:cisco:ios:-"/>
|
2163
2170
|
<param pos="0" name="os.vendor" value="Cisco"/>
|
2164
2171
|
<param pos="0" name="os.family" value="IOS"/>
|
2165
2172
|
<param pos="0" name="os.product" value="IOS"/>
|
@@ -2174,7 +2181,6 @@
|
|
2174
2181
|
<param pos="0" name="service.vendor" value="Cisco"/>
|
2175
2182
|
<param pos="0" name="service.family" value="IOS"/>
|
2176
2183
|
<param pos="0" name="service.product" value="IOS"/>
|
2177
|
-
<param pos="0" name="service.cpe23" value="cpe:/a:cisco:ios:-"/>
|
2178
2184
|
<param pos="0" name="os.vendor" value="Cisco"/>
|
2179
2185
|
<param pos="0" name="os.family" value="IOS"/>
|
2180
2186
|
<param pos="0" name="os.product" value="IOS"/>
|
@@ -2192,7 +2198,6 @@
|
|
2192
2198
|
<param pos="0" name="os.vendor" value="Cisco"/>
|
2193
2199
|
<param pos="0" name="os.family" value="Adaptive Security Appliance"/>
|
2194
2200
|
<param pos="0" name="os.product" value="Adaptive Security Appliance"/>
|
2195
|
-
<param pos="0" name="os.cpe23" value="cpe:/o:cisco:adaptive_security_appliance_software:-"/>
|
2196
2201
|
<param pos="0" name="hw.vendor" value="Cisco"/>
|
2197
2202
|
<param pos="0" name="hw.family" value="Adaptive Security Appliance"/>
|
2198
2203
|
<param pos="0" name="hw.product" value="Adaptive Security Appliance"/>
|
@@ -2996,7 +3001,7 @@
|
|
2996
3001
|
<param pos="0" name="service.vendor" value="Treck"/>
|
2997
3002
|
<param pos="0" name="service.product" value="TCP/IP"/>
|
2998
3003
|
<param pos="1" name="service.version"/>
|
2999
|
-
<param pos="0" name="service.cpe23" value="cpe:/a:treck:tcp
|
3004
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:treck:tcp%2fip:{service.version}"/>
|
3000
3005
|
</fingerprint>
|
3001
3006
|
|
3002
3007
|
<fingerprint pattern="^WEBrick/([\d\.]+)">
|
@@ -3284,12 +3289,16 @@
|
|
3284
3289
|
|
3285
3290
|
<fingerprint pattern="^Intel\(R\) Active Management Technology\s(\d+\.\d+\.\d+\.\d+|\d+\.\d+\.\d+|\d+\.\d+)">
|
3286
3291
|
<description>Intel(R) Active Management Technology (AMT) with a version</description>
|
3287
|
-
<example service.version="7.1.86">Intel(R) Active Management Technology 7.1.86</example>
|
3292
|
+
<example service.version="7.1.86" os.version="7.1.86">Intel(R) Active Management Technology 7.1.86</example>
|
3288
3293
|
<param pos="0" name="service.vendor" value="Intel"/>
|
3289
|
-
<param pos="0" name="service.product" value="Intel(R) Active Management Technology"/>
|
3290
3294
|
<param pos="0" name="service.family" value="Intel(R) Active Management Technology"/>
|
3295
|
+
<param pos="0" name="service.product" value="Intel(R) Active Management Technology"/>
|
3291
3296
|
<param pos="1" name="service.version"/>
|
3292
|
-
<param pos="0" name="
|
3297
|
+
<param pos="0" name="os.vendor" value="Intel"/>
|
3298
|
+
<param pos="0" name="os.family" value="Intel(R) Active Management Technology"/>
|
3299
|
+
<param pos="0" name="os.product" value="Intel(R) Active Management Technology Firmware"/>
|
3300
|
+
<param pos="1" name="os.version"/>
|
3301
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:intel:active_management_technology_firmware:{os.version}"/>
|
3293
3302
|
</fingerprint>
|
3294
3303
|
|
3295
3304
|
<fingerprint pattern="^(?:AMT|Intel\(R\) Active Management Technology)$">
|
@@ -3297,9 +3306,12 @@
|
|
3297
3306
|
<example>AMT</example>
|
3298
3307
|
<example>Intel(R) Active Management Technology</example>
|
3299
3308
|
<param pos="0" name="service.vendor" value="Intel"/>
|
3300
|
-
<param pos="0" name="service.product" value="Intel(R) Active Management Technology"/>
|
3301
3309
|
<param pos="0" name="service.family" value="Intel(R) Active Management Technology"/>
|
3302
|
-
<param pos="0" name="service.
|
3310
|
+
<param pos="0" name="service.product" value="Intel(R) Active Management Technology"/>
|
3311
|
+
<param pos="0" name="os.vendor" value="Intel"/>
|
3312
|
+
<param pos="0" name="os.family" value="Intel(R) Active Management Technology"/>
|
3313
|
+
<param pos="0" name="os.product" value="Intel(R) Active Management Technology Firmware"/>
|
3314
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:intel:active_management_technology_firmware:-"/>
|
3303
3315
|
</fingerprint>
|
3304
3316
|
|
3305
3317
|
<fingerprint pattern="^Intel\(R\) Standard Manageability\s(\d+\.\d+\.\d+\.\d+|\d+\.\d+\.\d+|\d+\.\d+)">
|
@@ -3307,8 +3319,8 @@
|
|
3307
3319
|
<example service.version="5.0.50">Intel(R) Standard Manageability 5.0.50</example>
|
3308
3320
|
<example service.version="9.0.3">Intel(R) Standard Manageability 9.0.3</example>
|
3309
3321
|
<param pos="0" name="service.vendor" value="Intel"/>
|
3310
|
-
<param pos="0" name="service.product" value="Intel(R) Standard Manageability"/>
|
3311
3322
|
<param pos="0" name="service.family" value="Intel(R) Active Management Technology"/>
|
3323
|
+
<param pos="0" name="service.product" value="Intel(R) Standard Manageability"/>
|
3312
3324
|
<param pos="1" name="service.version"/>
|
3313
3325
|
<param pos="0" name="service.cpe23" value="cpe:/a:intel:standard_manageability:{service.version}"/>
|
3314
3326
|
</fingerprint>
|
@@ -3403,6 +3415,7 @@
|
|
3403
3415
|
<param pos="0" name="service.family" value="Niagara"/>
|
3404
3416
|
<param pos="0" name="service.product" value="Niagara AX"/>
|
3405
3417
|
<param pos="1" name="service.version"/>
|
3418
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:tridium:niagara_ax:{service.version}"/>
|
3406
3419
|
</fingerprint>
|
3407
3420
|
|
3408
3421
|
<fingerprint pattern="^Microsoft WinCE Fidelix v([\d.]+)$">
|
@@ -4713,8 +4726,8 @@
|
|
4713
4726
|
<param pos="0" name="service.vendor" value="SerenityOS"/>
|
4714
4727
|
<param pos="0" name="service.product" value="WebServer"/>
|
4715
4728
|
<param pos="0" name="os.vendor" value="SerenityOS"/>
|
4716
|
-
<param pos="0" name="os.product" value="
|
4717
|
-
<param pos="0" name="os.cpe23" value="cpe:/o:serenityos:
|
4729
|
+
<param pos="0" name="os.product" value="SerenityOS"/>
|
4730
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:serenityos:serenityos:-"/>
|
4718
4731
|
</fingerprint>
|
4719
4732
|
|
4720
4733
|
<!-- This is a version of ACME mini_httpd where the value 'mini_httpd' has been
|
@@ -4931,6 +4944,14 @@
|
|
4931
4944
|
<param pos="0" name="hw.vendor" value="Server Technology"/>
|
4932
4945
|
</fingerprint>
|
4933
4946
|
|
4947
|
+
<fingerprint pattern="^frp/(\d+(?:\.\d+)*)$">
|
4948
|
+
<description>frp - fast reverse proxy, not found response</description>
|
4949
|
+
<example service.version="0.48.0">frp/0.48.0</example>
|
4950
|
+
<param pos="0" name="service.vendor" value="frp"/>
|
4951
|
+
<param pos="0" name="service.product" value="frp"/>
|
4952
|
+
<param pos="1" name="service.version"/>
|
4953
|
+
</fingerprint>
|
4954
|
+
|
4934
4955
|
<!-- ntopng -->
|
4935
4956
|
|
4936
4957
|
<fingerprint pattern="^ntopng (\d+(?:\.\d+)*) \[(?:FreeBSD |[\w-]+-freebsd)(\d+(?:\.\d+)*)(?:[a-z0-9-])* \[(\w+)\]\[[^\]]*\]\]$">
|
data/recog/xml/http_wwwauth.xml
CHANGED
@@ -2,8 +2,16 @@
|
|
2
2
|
<fingerprints matches="http_header.wwwauth" protocol="http" database_type="service" preference="0.85">
|
3
3
|
<!-- HTTP WWW-Authenticate headers are matched against these patterns to fingerprint HTTP servers. -->
|
4
4
|
|
5
|
+
<fingerprint pattern="^(?:Basic|Digest) realm="Transmission"$">
|
6
|
+
<description>Transmission</description>
|
7
|
+
<example>Basic realm="Transmission"</example>
|
8
|
+
<param pos="0" name="service.vendor" value="TransmissionBT"/>
|
9
|
+
<param pos="0" name="service.product" value="Transmission"/>
|
10
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:transmissionbt:transmission:-"/>
|
11
|
+
</fingerprint>
|
12
|
+
|
5
13
|
<fingerprint pattern="^(?:Basic|Digest) realm="monit"$">
|
6
|
-
<description>
|
14
|
+
<description>Monit</description>
|
7
15
|
<example>Basic realm="monit"</example>
|
8
16
|
<param pos="0" name="service.vendor" value="Tildeslash"/>
|
9
17
|
<param pos="0" name="service.product" value="Monit"/>
|
@@ -17,7 +25,6 @@
|
|
17
25
|
<param pos="0" name="service.product" value="IOS"/>
|
18
26
|
<param pos="0" name="service.family" value="IOS"/>
|
19
27
|
<param pos="0" name="service.version" value="11"/>
|
20
|
-
<param pos="0" name="service.cpe23" value="cpe:/a:cisco:ios:11"/>
|
21
28
|
<param pos="0" name="os.vendor" value="Cisco"/>
|
22
29
|
<param pos="0" name="os.device" value="Router"/>
|
23
30
|
<param pos="0" name="os.family" value="IOS"/>
|
@@ -36,7 +43,6 @@
|
|
36
43
|
<param pos="0" name="service.product" value="IOS"/>
|
37
44
|
<param pos="0" name="service.family" value="IOS"/>
|
38
45
|
<param pos="0" name="service.version" value="12"/>
|
39
|
-
<param pos="0" name="service.cpe23" value="cpe:/a:cisco:ios:12"/>
|
40
46
|
<param pos="0" name="os.vendor" value="Cisco"/>
|
41
47
|
<param pos="0" name="os.device" value="Router"/>
|
42
48
|
<param pos="0" name="os.family" value="IOS"/>
|
@@ -55,7 +61,6 @@
|
|
55
61
|
<param pos="0" name="service.product" value="IOS"/>
|
56
62
|
<param pos="0" name="service.family" value="IOS"/>
|
57
63
|
<param pos="0" name="service.version" value="12"/>
|
58
|
-
<param pos="0" name="service.cpe23" value="cpe:/a:cisco:ios:12"/>
|
59
64
|
<param pos="0" name="os.vendor" value="Cisco"/>
|
60
65
|
<param pos="0" name="os.device" value="Router"/>
|
61
66
|
<param pos="0" name="os.family" value="IOS"/>
|
@@ -444,6 +449,13 @@
|
|
444
449
|
<param pos="0" name="service.cpe23" value="cpe:/a:f5:big-ip_local_traffic_manager:-"/>
|
445
450
|
</fingerprint>
|
446
451
|
|
452
|
+
<fingerprint pattern="^(?:Basic|Digest) realm="Prowlarr"$">
|
453
|
+
<description>Prowlarr</description>
|
454
|
+
<example>Basic realm="Prowlarr"</example>
|
455
|
+
<param pos="0" name="service.vendor" value="Prowlarr"/>
|
456
|
+
<param pos="0" name="service.product" value="Prowlarr"/>
|
457
|
+
</fingerprint>
|
458
|
+
|
447
459
|
<!-- HP ProCurve -->
|
448
460
|
|
449
461
|
<fingerprint pattern="(?i)^(?:Basic|Digest) realm="(?:HP|ProCurve) (J[3]\d{3}A)"$">
|
@@ -678,6 +690,7 @@
|
|
678
690
|
<param pos="0" name="os.family" value="Linux"/>
|
679
691
|
<param pos="0" name="os.product" value="FreshTomato"/>
|
680
692
|
<param pos="0" name="os.device" value="Router"/>
|
693
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:freshtomato:freshtomato:-"/>
|
681
694
|
</fingerprint>
|
682
695
|
|
683
696
|
<fingerprint pattern="(?i)^Basic realm="NetPing \d+/PWR-220\s*v\d+/(?:ETH|SMS|GSM(?:3G)?)"">
|