recog 3.1.1 → 3.1.2

Sign up to get free protection for your applications and to get access to all the features.
Files changed (50) hide show
  1. checksums.yaml +4 -4
  2. checksums.yaml.gz.sig +0 -0
  3. data/Gemfile +6 -0
  4. data/Rakefile +7 -5
  5. data/lib/recog/db.rb +67 -68
  6. data/lib/recog/db_manager.rb +22 -21
  7. data/lib/recog/fingerprint/regexp_factory.rb +10 -13
  8. data/lib/recog/fingerprint/test.rb +9 -8
  9. data/lib/recog/fingerprint.rb +252 -262
  10. data/lib/recog/fingerprint_parse_error.rb +3 -1
  11. data/lib/recog/formatter.rb +41 -39
  12. data/lib/recog/match_reporter.rb +82 -83
  13. data/lib/recog/matcher.rb +37 -40
  14. data/lib/recog/matcher_factory.rb +7 -6
  15. data/lib/recog/nizer.rb +218 -224
  16. data/lib/recog/verifier.rb +30 -28
  17. data/lib/recog/verify_reporter.rb +69 -73
  18. data/lib/recog/version.rb +3 -1
  19. data/lib/recog.rb +2 -0
  20. data/recog/bin/recog_match +21 -20
  21. data/recog/xml/apache_modules.xml +2 -0
  22. data/recog/xml/dhcp_vendor_class.xml +1 -1
  23. data/recog/xml/favicons.xml +133 -1
  24. data/recog/xml/ftp_banners.xml +1 -1
  25. data/recog/xml/html_title.xml +140 -1
  26. data/recog/xml/http_cookies.xml +20 -2
  27. data/recog/xml/http_servers.xml +38 -17
  28. data/recog/xml/http_wwwauth.xml +17 -4
  29. data/recog/xml/mdns_device-info_txt.xml +49 -15
  30. data/recog/xml/sip_banners.xml +0 -2
  31. data/recog/xml/sip_user_agents.xml +1 -1
  32. data/recog/xml/snmp_sysdescr.xml +1 -2
  33. data/recog/xml/ssh_banners.xml +8 -0
  34. data/recog/xml/telnet_banners.xml +3 -2
  35. data/recog/xml/tls_jarm.xml +1 -1
  36. data/recog/xml/x11_banners.xml +1 -0
  37. data/recog/xml/x509_issuers.xml +1 -1
  38. data/recog/xml/x509_subjects.xml +0 -1
  39. data/recog.gemspec +14 -13
  40. data/spec/lib/recog/db_spec.rb +37 -36
  41. data/spec/lib/recog/fingerprint/regexp_factory_spec.rb +19 -20
  42. data/spec/lib/recog/fingerprint_spec.rb +44 -42
  43. data/spec/lib/recog/formatter_spec.rb +20 -18
  44. data/spec/lib/recog/match_reporter_spec.rb +35 -30
  45. data/spec/lib/recog/nizer_spec.rb +85 -101
  46. data/spec/lib/recog/verify_reporter_spec.rb +45 -44
  47. data/spec/spec_helper.rb +2 -1
  48. data.tar.gz.sig +1 -3
  49. metadata +3 -3
  50. metadata.gz.sig +0 -0
@@ -1112,6 +1112,7 @@
1112
1112
  <param pos="0" name="hw.device" value="Lights Out Management"/>
1113
1113
  <param pos="0" name="hw.vendor" value="HP"/>
1114
1114
  <param pos="0" name="hw.product" value="iLO 3"/>
1115
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights-out_3:-"/>
1115
1116
  <param pos="0" name="os.vendor" value="HP"/>
1116
1117
  <param pos="0" name="os.device" value="Lights Out Management"/>
1117
1118
  <param pos="0" name="os.family" value="iLO"/>
@@ -1125,6 +1126,7 @@
1125
1126
  <param pos="0" name="hw.device" value="Lights Out Management"/>
1126
1127
  <param pos="0" name="hw.vendor" value="HP"/>
1127
1128
  <param pos="0" name="hw.product" value="iLO 4"/>
1129
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights-out_4:-"/>
1128
1130
  <param pos="0" name="os.vendor" value="HP"/>
1129
1131
  <param pos="0" name="os.device" value="Lights Out Management"/>
1130
1132
  <param pos="0" name="os.family" value="iLO"/>
@@ -3255,6 +3257,14 @@
3255
3257
  <param pos="0" name="service.product" value="Security Scanner"/>
3256
3258
  </fingerprint>
3257
3259
 
3260
+ <fingerprint pattern="^(?:Sign In - )?Jellyseerr$">
3261
+ <description>Jellyseerr</description>
3262
+ <example>Jellyseerr</example>
3263
+ <example>Sign In - Jellyseerr</example>
3264
+ <param pos="0" name="service.vendor" value="Jellyseerr"/>
3265
+ <param pos="0" name="service.product" value="Jellyseerr"/>
3266
+ </fingerprint>
3267
+
3258
3268
  <fingerprint pattern="^(?:Chorus 2 - )?Kodi(?: web interface)?$">
3259
3269
  <description>Kodi Media Server</description>
3260
3270
  <example>Kodi</example>
@@ -3333,7 +3343,7 @@
3333
3343
  <param pos="0" name="service.cpe23" value="cpe:/a:pulsesecure:pulse_connect_secure:-"/>
3334
3344
  <param pos="0" name="os.vendor" value="Pulse Secure"/>
3335
3345
  <param pos="0" name="os.family" value="SSL-VPN"/>
3336
- <param pos="0" name="os.device" value="SSL-VPN"/>
3346
+ <param pos="0" name="os.device" value="VPN"/>
3337
3347
  <param pos="0" name="os.product" value="Pulse Connect Secure"/>
3338
3348
  </fingerprint>
3339
3349
 
@@ -3904,6 +3914,14 @@
3904
3914
  <param pos="1" name="host.name"/>
3905
3915
  </fingerprint>
3906
3916
 
3917
+ <fingerprint pattern="^Superset$">
3918
+ <description>Apache Superset</description>
3919
+ <example>Superset</example>
3920
+ <param pos="0" name="service.vendor" value="Apache"/>
3921
+ <param pos="0" name="service.product" value="Superset"/>
3922
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:superset:-"/>
3923
+ </fingerprint>
3924
+
3907
3925
  <fingerprint pattern="^pfSense - Login$">
3908
3926
  <description>pfSense Firewall</description>
3909
3927
  <example>pfSense - Login</example>
@@ -4017,6 +4035,20 @@
4017
4035
  <param pos="0" name="service.cpe23" value="cpe:/a:papermerge:papermerge:-"/>
4018
4036
  </fingerprint>
4019
4037
 
4038
+ <fingerprint pattern="^Paperless-ng sign in$">
4039
+ <description>Paperless-ng - document management system</description>
4040
+ <example>Paperless-ng sign in</example>
4041
+ <param pos="0" name="service.vendor" value="Paperless-ng"/>
4042
+ <param pos="0" name="service.product" value="Paperless-ng"/>
4043
+ </fingerprint>
4044
+
4045
+ <fingerprint pattern="^Paperless-ngx sign in$">
4046
+ <description>Paperless-ngx - document management system</description>
4047
+ <example>Paperless-ngx sign in</example>
4048
+ <param pos="0" name="service.vendor" value="Paperless-ngx"/>
4049
+ <param pos="0" name="service.product" value="Paperless-ngx"/>
4050
+ </fingerprint>
4051
+
4020
4052
  <fingerprint pattern="^(?:FileRun :: (?:Login|Installation))|(?:(?:\S)* :: Login \(powered by FileRun\))$">
4021
4053
  <description>FileRun - self-hosted Google Drive alternative</description>
4022
4054
  <example>FileRun :: Login</example>
@@ -4097,6 +4129,20 @@
4097
4129
  <param pos="0" name="service.product" value="darkstat"/>
4098
4130
  </fingerprint>
4099
4131
 
4132
+ <fingerprint pattern="^Login - Radarr$">
4133
+ <description>Radarr</description>
4134
+ <example>Login - Radarr</example>
4135
+ <param pos="0" name="service.vendor" value="Radarr"/>
4136
+ <param pos="0" name="service.product" value="Radarr"/>
4137
+ </fingerprint>
4138
+
4139
+ <fingerprint pattern="^Login - Sonarr$">
4140
+ <description>Sonarr</description>
4141
+ <example>Login - Sonarr</example>
4142
+ <param pos="0" name="service.vendor" value="Sonarr"/>
4143
+ <param pos="0" name="service.product" value="Sonarr"/>
4144
+ </fingerprint>
4145
+
4100
4146
  <fingerprint pattern="^Login to Cacti$">
4101
4147
  <description>Cacti - network graphing solution</description>
4102
4148
  <example>Login to Cacti</example>
@@ -4141,6 +4187,44 @@
4141
4187
  <param pos="0" name="service.product" value="R1Soft Server Backup Manager"/>
4142
4188
  </fingerprint>
4143
4189
 
4190
+ <fingerprint pattern="^PaperCut Login for (?:.{1,512})$">
4191
+ <description>PaperCut MF and PaperCut NG - print management system</description>
4192
+ <example>PaperCut Login for Foo Bar</example>
4193
+ <param pos="0" name="service.vendor" value="PaperCut"/>
4194
+ </fingerprint>
4195
+
4196
+ <fingerprint pattern="^Transmission Web Interface$">
4197
+ <description>Transmission</description>
4198
+ <example>Transmission Web Interface</example>
4199
+ <param pos="0" name="service.vendor" value="TransmissionBT"/>
4200
+ <param pos="0" name="service.product" value="Transmission"/>
4201
+ <param pos="0" name="service.cpe23" value="cpe:/a:transmissionbt:transmission:-"/>
4202
+ </fingerprint>
4203
+
4204
+ <fingerprint pattern="^MeterSphere$">
4205
+ <description>MeterSphere - Open-source Continuous Testing Platform</description>
4206
+ <example>MeterSphere</example>
4207
+ <param pos="0" name="service.vendor" value="MeterSphere"/>
4208
+ <param pos="0" name="service.product" value="MeterSphere"/>
4209
+ <param pos="0" name="service.cpe23" value="cpe:/a:metersphere:metersphere:-"/>
4210
+ </fingerprint>
4211
+
4212
+ <fingerprint pattern="^(?:frps dashboard|frp client admin UI)$">
4213
+ <description>frp - fast reverse proxy</description>
4214
+ <example>frps dashboard</example>
4215
+ <example>frp client admin UI</example>
4216
+ <param pos="0" name="service.vendor" value="frp"/>
4217
+ <param pos="0" name="service.product" value="frp"/>
4218
+ </fingerprint>
4219
+
4220
+ <fingerprint pattern="^Roundcube Webmail :: Welcome to Roundcube Webmail$">
4221
+ <description>Roundcube Webmail</description>
4222
+ <example>Roundcube Webmail :: Welcome to Roundcube Webmail</example>
4223
+ <param pos="0" name="service.vendor" value="Roundcube"/>
4224
+ <param pos="0" name="service.product" value="Webmail"/>
4225
+ <param pos="0" name="service.cpe23" value="cpe:/a:roundcube:webmail:-"/>
4226
+ </fingerprint>
4227
+
4144
4228
  <!-- Specific Eltex fingerprints to enable CPE generation -->
4145
4229
 
4146
4230
  <fingerprint pattern="^Eltex - NTP-RG-1402G$">
@@ -4196,4 +4280,59 @@
4196
4280
  <param pos="0" name="hw.device" value="Broadband Router"/>
4197
4281
  </fingerprint>
4198
4282
 
4283
+ <!-- FatPipe Networks fingerprints -->
4284
+
4285
+ <fingerprint pattern="^FatPipe MPVPN(?:.nbsp;\| Log in| Remote Configuration)$">
4286
+ <description>FatPipe Networks MPVPN</description>
4287
+ <example>FatPipe MPVPN&amp;nbsp;| Log in</example>
4288
+ <example>FatPipe MPVPN Remote Configuration</example>
4289
+ <param pos="0" name="os.vendor" value="FatPipe Networks"/>
4290
+ <param pos="0" name="os.product" value="MPVPN Firmware"/>
4291
+ <param pos="0" name="os.device" value="Multiplexer"/>
4292
+ <param pos="0" name="os.cpe23" value="cpe:/o:fatpipeinc:mpvpn_firmware:-"/>
4293
+ <param pos="0" name="hw.vendor" value="FatPipe Networks"/>
4294
+ <param pos="0" name="hw.product" value="MPVPN"/>
4295
+ <param pos="0" name="hw.device" value="Multiplexer"/>
4296
+ <param pos="0" name="hw.cpe23" value="cpe:/h:fatpipeinc:mpvpn:-"/>
4297
+ </fingerprint>
4298
+
4299
+ <fingerprint pattern="^FatPipe IPVPN(?:.nbsp;\| Log in| Remote Configuration)$">
4300
+ <description>FatPipe Networks IPVPN</description>
4301
+ <example>FatPipe IPVPN&amp;nbsp;| Log in</example>
4302
+ <example>FatPipe IPVPN Remote Configuration</example>
4303
+ <param pos="0" name="os.vendor" value="FatPipe Networks"/>
4304
+ <param pos="0" name="os.product" value="IPVPN Firmware"/>
4305
+ <param pos="0" name="os.device" value="Multiplexer"/>
4306
+ <param pos="0" name="os.cpe23" value="cpe:/o:fatpipeinc:ipvpn_firmware:-"/>
4307
+ <param pos="0" name="hw.vendor" value="FatPipe Networks"/>
4308
+ <param pos="0" name="hw.product" value="IPVPN"/>
4309
+ <param pos="0" name="hw.device" value="Multiplexer"/>
4310
+ <param pos="0" name="hw.cpe23" value="cpe:/h:fatpipeinc:ipvpn:-"/>
4311
+ </fingerprint>
4312
+
4313
+ <fingerprint pattern="^FatPipe WARP(?:.nbsp;\| Log in| Remote Configuration)$">
4314
+ <description>FatPipe Networks WARP</description>
4315
+ <example>FatPipe WARP&amp;nbsp;| Log in</example>
4316
+ <example>FatPipe WARP Remote Configuration</example>
4317
+ <param pos="0" name="os.vendor" value="FatPipe Networks"/>
4318
+ <param pos="0" name="os.product" value="WARP Firmware"/>
4319
+ <param pos="0" name="os.device" value="Multiplexer"/>
4320
+ <param pos="0" name="os.cpe23" value="cpe:/o:fatpipeinc:warp_firmware:-"/>
4321
+ <param pos="0" name="hw.vendor" value="FatPipe Networks"/>
4322
+ <param pos="0" name="hw.product" value="WARP"/>
4323
+ <param pos="0" name="hw.device" value="Multiplexer"/>
4324
+ <param pos="0" name="hw.cpe23" value="cpe:/h:fatpipeinc:warp:-"/>
4325
+ </fingerprint>
4326
+
4327
+ <fingerprint pattern="^FatPipe SDWAN.nbsp;\| Log in$">
4328
+ <description>FatPipe Networks SDWAN</description>
4329
+ <example>FatPipe SDWAN&amp;nbsp;| Log in</example>
4330
+ <param pos="0" name="os.vendor" value="FatPipe Networks"/>
4331
+ <param pos="0" name="os.product" value="SDWAN Firmware"/>
4332
+ <param pos="0" name="os.device" value="SD-WAN Appliance"/>
4333
+ <param pos="0" name="hw.vendor" value="FatPipe Networks"/>
4334
+ <param pos="0" name="hw.product" value="SDWAN"/>
4335
+ <param pos="0" name="hw.device" value="SD-WAN Appliance"/>
4336
+ </fingerprint>
4337
+
4199
4338
  </fingerprints>
@@ -205,7 +205,6 @@
205
205
  <param pos="0" name="os.vendor" value="Cisco"/>
206
206
  <param pos="0" name="os.family" value="Adaptive Security Appliance"/>
207
207
  <param pos="0" name="os.product" value="Adaptive Security Appliance"/>
208
- <param pos="0" name="os.cpe23" value="cpe:/o:cisco:adaptive_security_appliance_software:-"/>
209
208
  <param pos="0" name="hw.vendor" value="Cisco"/>
210
209
  <param pos="0" name="hw.family" value="Adaptive Security Appliance"/>
211
210
  <param pos="0" name="hw.product" value="Adaptive Security Appliance"/>
@@ -246,7 +245,7 @@
246
245
  <param pos="0" name="service.cpe23" value="cpe:/a:pulsesecure:pulse_connect_secure:-"/>
247
246
  <param pos="0" name="os.vendor" value="Pulse Secure"/>
248
247
  <param pos="0" name="os.family" value="SSL-VPN"/>
249
- <param pos="0" name="os.device" value="SSL-VPN"/>
248
+ <param pos="0" name="os.device" value="VPN"/>
250
249
  <param pos="0" name="os.product" value="Pulse Connect Secure"/>
251
250
  </fingerprint>
252
251
 
@@ -805,6 +804,25 @@
805
804
  <param pos="0" name="service.cpe23" value="cpe:/a:filerun:filerun:-"/>
806
805
  </fingerprint>
807
806
 
807
+ <fingerprint pattern="^(DMZCookieTest|MIDMZLang|siLockLongTermInstID)=">
808
+ <description>Progress MOVEit Transfer (formerly MOVEit DMZ, MOVEit File Transfer)</description>
809
+ <example cookie="DMZCookieTest">DMZCookieTest=ifyoucanreadthisyourbrowsersupportscookies; path=/</example>
810
+ <example cookie="MIDMZLang">MIDMZLang=en; expires=Fri, 30-May-2025 05:08:54 GMT; path=/</example>
811
+ <example cookie="siLockLongTermInstID">siLockLongTermInstID=1337; expires=Fri, 30-May-2025 05:08:54 GMT; path=/</example>
812
+ <param pos="1" name="cookie"/>
813
+ <param pos="0" name="service.vendor" value="Progress"/>
814
+ <param pos="0" name="service.product" value="MOVEit Transfer"/>
815
+ <param pos="0" name="service.cpe23" value="cpe:/a:progress:moveit_transfer:-"/>
816
+ </fingerprint>
817
+
818
+ <fingerprint pattern="^roundcube_sessid=">
819
+ <description>Roundcube Webmail</description>
820
+ <example>roundcube_sessid=bdd66fb23fa3ce907a1e792475273145; path=/; HttpOnly</example>
821
+ <param pos="0" name="service.vendor" value="Roundcube"/>
822
+ <param pos="0" name="service.product" value="Webmail"/>
823
+ <param pos="0" name="service.cpe23" value="cpe:/a:roundcube:webmail:-"/>
824
+ </fingerprint>
825
+
808
826
  <!--
809
827
  Ignore various cookies that are very generic cookies for session IDs
810
828
  that are not necessarily indicative of any particular
@@ -2,6 +2,14 @@
2
2
  <fingerprints matches="http_header.server" protocol="http" database_type="service" preference="0.90">
3
3
  <!-- HTTP Server headers are matched against these patterns to fingerprint HTTP servers. -->
4
4
 
5
+ <fingerprint pattern="^Transmission$">
6
+ <description>Transmission</description>
7
+ <example>Transmission</example>
8
+ <param pos="0" name="service.vendor" value="TransmissionBT"/>
9
+ <param pos="0" name="service.product" value="Transmission"/>
10
+ <param pos="0" name="service.cpe23" value="cpe:/a:transmissionbt:transmission:-"/>
11
+ </fingerprint>
12
+
5
13
  <fingerprint pattern="^Mastodon$">
6
14
  <description>Mastodon</description>
7
15
  <example>Mastodon</example>
@@ -1051,10 +1059,10 @@
1051
1059
  <description>Varnish Cache</description>
1052
1060
  <example>Varnish</example>
1053
1061
  <example>Varnish-Cache</example>
1054
- <param pos="0" name="service.vendor" value="Varnish-cache"/>
1062
+ <param pos="0" name="service.vendor" value="Varnish Cache Project"/>
1055
1063
  <param pos="0" name="service.family" value="Varnish"/>
1056
- <param pos="0" name="service.product" value="Varnish"/>
1057
- <param pos="0" name="service.cpe23" value="cpe:/a:varnish-cache:varnish:-"/>
1064
+ <param pos="0" name="service.product" value="Varnish Cache"/>
1065
+ <param pos="0" name="service.cpe23" value="cpe:/a:varnish_cache_project:varnish_cache:-"/>
1058
1066
  </fingerprint>
1059
1067
 
1060
1068
  <fingerprint pattern="^Tengine\/?([\d.]+)?$">
@@ -1905,10 +1913,10 @@
1905
1913
  <description>SAP NetWeaver Application Server - Advanced Business Application Programming</description>
1906
1914
  <example service.version="731">SAP NetWeaver Application Server / ABAP 731</example>
1907
1915
  <param pos="0" name="service.vendor" value="SAP"/>
1908
- <param pos="0" name="service.product" value="NetWeaver AS ABAP"/>
1916
+ <param pos="0" name="service.product" value="NetWeaver Application Server ABAP"/>
1909
1917
  <param pos="0" name="service.family" value="NetWeaver"/>
1910
1918
  <param pos="1" name="service.version"/>
1911
- <param pos="0" name="service.cpe23" value="cpe:/a:sap:netweaver_as_abap:{service.version}"/>
1919
+ <param pos="0" name="service.cpe23" value="cpe:/a:sap:netweaver_application_server_abap:{service.version}"/>
1912
1920
  <param pos="0" name="service.component.vendor" value="SAP"/>
1913
1921
  <param pos="0" name="service.component.product" value="NetWeaver Application Server"/>
1914
1922
  <param pos="0" name="service.component.cpe23" value="cpe:/a:sap:netweaver_application_server:-"/>
@@ -2159,7 +2167,6 @@
2159
2167
  <param pos="0" name="service.vendor" value="Cisco"/>
2160
2168
  <param pos="0" name="service.family" value="IOS"/>
2161
2169
  <param pos="0" name="service.product" value="IOS"/>
2162
- <param pos="0" name="service.cpe23" value="cpe:/a:cisco:ios:-"/>
2163
2170
  <param pos="0" name="os.vendor" value="Cisco"/>
2164
2171
  <param pos="0" name="os.family" value="IOS"/>
2165
2172
  <param pos="0" name="os.product" value="IOS"/>
@@ -2174,7 +2181,6 @@
2174
2181
  <param pos="0" name="service.vendor" value="Cisco"/>
2175
2182
  <param pos="0" name="service.family" value="IOS"/>
2176
2183
  <param pos="0" name="service.product" value="IOS"/>
2177
- <param pos="0" name="service.cpe23" value="cpe:/a:cisco:ios:-"/>
2178
2184
  <param pos="0" name="os.vendor" value="Cisco"/>
2179
2185
  <param pos="0" name="os.family" value="IOS"/>
2180
2186
  <param pos="0" name="os.product" value="IOS"/>
@@ -2192,7 +2198,6 @@
2192
2198
  <param pos="0" name="os.vendor" value="Cisco"/>
2193
2199
  <param pos="0" name="os.family" value="Adaptive Security Appliance"/>
2194
2200
  <param pos="0" name="os.product" value="Adaptive Security Appliance"/>
2195
- <param pos="0" name="os.cpe23" value="cpe:/o:cisco:adaptive_security_appliance_software:-"/>
2196
2201
  <param pos="0" name="hw.vendor" value="Cisco"/>
2197
2202
  <param pos="0" name="hw.family" value="Adaptive Security Appliance"/>
2198
2203
  <param pos="0" name="hw.product" value="Adaptive Security Appliance"/>
@@ -2996,7 +3001,7 @@
2996
3001
  <param pos="0" name="service.vendor" value="Treck"/>
2997
3002
  <param pos="0" name="service.product" value="TCP/IP"/>
2998
3003
  <param pos="1" name="service.version"/>
2999
- <param pos="0" name="service.cpe23" value="cpe:/a:treck:tcp\/ip:{service.version}"/>
3004
+ <param pos="0" name="service.cpe23" value="cpe:/a:treck:tcp%2fip:{service.version}"/>
3000
3005
  </fingerprint>
3001
3006
 
3002
3007
  <fingerprint pattern="^WEBrick/([\d\.]+)">
@@ -3284,12 +3289,16 @@
3284
3289
 
3285
3290
  <fingerprint pattern="^Intel\(R\) Active Management Technology\s(\d+\.\d+\.\d+\.\d+|\d+\.\d+\.\d+|\d+\.\d+)">
3286
3291
  <description>Intel(R) Active Management Technology (AMT) with a version</description>
3287
- <example service.version="7.1.86">Intel(R) Active Management Technology 7.1.86</example>
3292
+ <example service.version="7.1.86" os.version="7.1.86">Intel(R) Active Management Technology 7.1.86</example>
3288
3293
  <param pos="0" name="service.vendor" value="Intel"/>
3289
- <param pos="0" name="service.product" value="Intel(R) Active Management Technology"/>
3290
3294
  <param pos="0" name="service.family" value="Intel(R) Active Management Technology"/>
3295
+ <param pos="0" name="service.product" value="Intel(R) Active Management Technology"/>
3291
3296
  <param pos="1" name="service.version"/>
3292
- <param pos="0" name="service.cpe23" value="cpe:/a:intel:active_management_technology:{service.version}"/>
3297
+ <param pos="0" name="os.vendor" value="Intel"/>
3298
+ <param pos="0" name="os.family" value="Intel(R) Active Management Technology"/>
3299
+ <param pos="0" name="os.product" value="Intel(R) Active Management Technology Firmware"/>
3300
+ <param pos="1" name="os.version"/>
3301
+ <param pos="0" name="os.cpe23" value="cpe:/o:intel:active_management_technology_firmware:{os.version}"/>
3293
3302
  </fingerprint>
3294
3303
 
3295
3304
  <fingerprint pattern="^(?:AMT|Intel\(R\) Active Management Technology)$">
@@ -3297,9 +3306,12 @@
3297
3306
  <example>AMT</example>
3298
3307
  <example>Intel(R) Active Management Technology</example>
3299
3308
  <param pos="0" name="service.vendor" value="Intel"/>
3300
- <param pos="0" name="service.product" value="Intel(R) Active Management Technology"/>
3301
3309
  <param pos="0" name="service.family" value="Intel(R) Active Management Technology"/>
3302
- <param pos="0" name="service.cpe23" value="cpe:/a:intel:active_management_technology:-"/>
3310
+ <param pos="0" name="service.product" value="Intel(R) Active Management Technology"/>
3311
+ <param pos="0" name="os.vendor" value="Intel"/>
3312
+ <param pos="0" name="os.family" value="Intel(R) Active Management Technology"/>
3313
+ <param pos="0" name="os.product" value="Intel(R) Active Management Technology Firmware"/>
3314
+ <param pos="0" name="os.cpe23" value="cpe:/o:intel:active_management_technology_firmware:-"/>
3303
3315
  </fingerprint>
3304
3316
 
3305
3317
  <fingerprint pattern="^Intel\(R\) Standard Manageability\s(\d+\.\d+\.\d+\.\d+|\d+\.\d+\.\d+|\d+\.\d+)">
@@ -3307,8 +3319,8 @@
3307
3319
  <example service.version="5.0.50">Intel(R) Standard Manageability 5.0.50</example>
3308
3320
  <example service.version="9.0.3">Intel(R) Standard Manageability 9.0.3</example>
3309
3321
  <param pos="0" name="service.vendor" value="Intel"/>
3310
- <param pos="0" name="service.product" value="Intel(R) Standard Manageability"/>
3311
3322
  <param pos="0" name="service.family" value="Intel(R) Active Management Technology"/>
3323
+ <param pos="0" name="service.product" value="Intel(R) Standard Manageability"/>
3312
3324
  <param pos="1" name="service.version"/>
3313
3325
  <param pos="0" name="service.cpe23" value="cpe:/a:intel:standard_manageability:{service.version}"/>
3314
3326
  </fingerprint>
@@ -3403,6 +3415,7 @@
3403
3415
  <param pos="0" name="service.family" value="Niagara"/>
3404
3416
  <param pos="0" name="service.product" value="Niagara AX"/>
3405
3417
  <param pos="1" name="service.version"/>
3418
+ <param pos="0" name="service.cpe23" value="cpe:/a:tridium:niagara_ax:{service.version}"/>
3406
3419
  </fingerprint>
3407
3420
 
3408
3421
  <fingerprint pattern="^Microsoft WinCE Fidelix v([\d.]+)$">
@@ -4713,8 +4726,8 @@
4713
4726
  <param pos="0" name="service.vendor" value="SerenityOS"/>
4714
4727
  <param pos="0" name="service.product" value="WebServer"/>
4715
4728
  <param pos="0" name="os.vendor" value="SerenityOS"/>
4716
- <param pos="0" name="os.product" value="Serenity"/>
4717
- <param pos="0" name="os.cpe23" value="cpe:/o:serenityos:serenity:-"/>
4729
+ <param pos="0" name="os.product" value="SerenityOS"/>
4730
+ <param pos="0" name="os.cpe23" value="cpe:/o:serenityos:serenityos:-"/>
4718
4731
  </fingerprint>
4719
4732
 
4720
4733
  <!-- This is a version of ACME mini_httpd where the value 'mini_httpd' has been
@@ -4931,6 +4944,14 @@
4931
4944
  <param pos="0" name="hw.vendor" value="Server Technology"/>
4932
4945
  </fingerprint>
4933
4946
 
4947
+ <fingerprint pattern="^frp/(\d+(?:\.\d+)*)$">
4948
+ <description>frp - fast reverse proxy, not found response</description>
4949
+ <example service.version="0.48.0">frp/0.48.0</example>
4950
+ <param pos="0" name="service.vendor" value="frp"/>
4951
+ <param pos="0" name="service.product" value="frp"/>
4952
+ <param pos="1" name="service.version"/>
4953
+ </fingerprint>
4954
+
4934
4955
  <!-- ntopng -->
4935
4956
 
4936
4957
  <fingerprint pattern="^ntopng (\d+(?:\.\d+)*) \[(?:FreeBSD |[\w-]+-freebsd)(\d+(?:\.\d+)*)(?:[a-z0-9-])* \[(\w+)\]\[[^\]]*\]\]$">
@@ -2,8 +2,16 @@
2
2
  <fingerprints matches="http_header.wwwauth" protocol="http" database_type="service" preference="0.85">
3
3
  <!-- HTTP WWW-Authenticate headers are matched against these patterns to fingerprint HTTP servers. -->
4
4
 
5
+ <fingerprint pattern="^(?:Basic|Digest) realm=&quot;Transmission&quot;$">
6
+ <description>Transmission</description>
7
+ <example>Basic realm="Transmission"</example>
8
+ <param pos="0" name="service.vendor" value="TransmissionBT"/>
9
+ <param pos="0" name="service.product" value="Transmission"/>
10
+ <param pos="0" name="service.cpe23" value="cpe:/a:transmissionbt:transmission:-"/>
11
+ </fingerprint>
12
+
5
13
  <fingerprint pattern="^(?:Basic|Digest) realm=&quot;monit&quot;$">
6
- <description>Minot</description>
14
+ <description>Monit</description>
7
15
  <example>Basic realm="monit"</example>
8
16
  <param pos="0" name="service.vendor" value="Tildeslash"/>
9
17
  <param pos="0" name="service.product" value="Monit"/>
@@ -17,7 +25,6 @@
17
25
  <param pos="0" name="service.product" value="IOS"/>
18
26
  <param pos="0" name="service.family" value="IOS"/>
19
27
  <param pos="0" name="service.version" value="11"/>
20
- <param pos="0" name="service.cpe23" value="cpe:/a:cisco:ios:11"/>
21
28
  <param pos="0" name="os.vendor" value="Cisco"/>
22
29
  <param pos="0" name="os.device" value="Router"/>
23
30
  <param pos="0" name="os.family" value="IOS"/>
@@ -36,7 +43,6 @@
36
43
  <param pos="0" name="service.product" value="IOS"/>
37
44
  <param pos="0" name="service.family" value="IOS"/>
38
45
  <param pos="0" name="service.version" value="12"/>
39
- <param pos="0" name="service.cpe23" value="cpe:/a:cisco:ios:12"/>
40
46
  <param pos="0" name="os.vendor" value="Cisco"/>
41
47
  <param pos="0" name="os.device" value="Router"/>
42
48
  <param pos="0" name="os.family" value="IOS"/>
@@ -55,7 +61,6 @@
55
61
  <param pos="0" name="service.product" value="IOS"/>
56
62
  <param pos="0" name="service.family" value="IOS"/>
57
63
  <param pos="0" name="service.version" value="12"/>
58
- <param pos="0" name="service.cpe23" value="cpe:/a:cisco:ios:12"/>
59
64
  <param pos="0" name="os.vendor" value="Cisco"/>
60
65
  <param pos="0" name="os.device" value="Router"/>
61
66
  <param pos="0" name="os.family" value="IOS"/>
@@ -444,6 +449,13 @@
444
449
  <param pos="0" name="service.cpe23" value="cpe:/a:f5:big-ip_local_traffic_manager:-"/>
445
450
  </fingerprint>
446
451
 
452
+ <fingerprint pattern="^(?:Basic|Digest) realm=&quot;Prowlarr&quot;$">
453
+ <description>Prowlarr</description>
454
+ <example>Basic realm="Prowlarr"</example>
455
+ <param pos="0" name="service.vendor" value="Prowlarr"/>
456
+ <param pos="0" name="service.product" value="Prowlarr"/>
457
+ </fingerprint>
458
+
447
459
  <!-- HP ProCurve -->
448
460
 
449
461
  <fingerprint pattern="(?i)^(?:Basic|Digest) realm=&quot;(?:HP|ProCurve) (J[3]\d{3}A)&quot;$">
@@ -678,6 +690,7 @@
678
690
  <param pos="0" name="os.family" value="Linux"/>
679
691
  <param pos="0" name="os.product" value="FreshTomato"/>
680
692
  <param pos="0" name="os.device" value="Router"/>
693
+ <param pos="0" name="os.cpe23" value="cpe:/o:freshtomato:freshtomato:-"/>
681
694
  </fingerprint>
682
695
 
683
696
  <fingerprint pattern="(?i)^Basic realm=&quot;NetPing \d+/PWR-220\s*v\d+/(?:ETH|SMS|GSM(?:3G)?)&quot;">