recog 2.1.11 → 2.1.12
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/lib/recog/version.rb +1 -1
- data/xml/dns_versionbind.xml +685 -0
- data/xml/snmp_sysdescr.xml +1 -1
- metadata +4 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 51463e356f924b8b3308760d4a8f7ff312b868db
|
|
4
|
+
data.tar.gz: 1a8a4c8e219c94dd42212ca264051e4e686993cd
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: fce4559ee26c063d8ca0ea6b0611b25a28a7005b486ea9d055cf8445d71bd23c9d15b3ed7c5bd3ddce0c7de84e30cb1f9dceb022be61b84aaf5804b7348a3c6f
|
|
7
|
+
data.tar.gz: 257ab6565edcbb7a72ac749800cc9a9c25b7eedd8c40ba23dbb171f64910dc2bee4009d59dca9965a01d17089f69e3ad5b8283b3a1a437972323fef7d8404f45
|
data/lib/recog/version.rb
CHANGED
|
@@ -0,0 +1,685 @@
|
|
|
1
|
+
<?xml version="1.0" encoding="UTF-8"?>
|
|
2
|
+
<!--
|
|
3
|
+
This fingerprint file matches the text string response from a DNS
|
|
4
|
+
version.bind request.
|
|
5
|
+
|
|
6
|
+
For example, the string 'dnsmasq-2.76-1-ubnt2' emitted by the command below:
|
|
7
|
+
|
|
8
|
+
$ nslookup -type=txt -class=chaos VERSION.BIND <dns_server> | grep VERSION.BIND | cut -d\" -f2
|
|
9
|
+
dnsmasq-2.76-1-ubnt2
|
|
10
|
+
|
|
11
|
+
-->
|
|
12
|
+
<fingerprints matches="dns.versionbind" protocol="dns" database_type="service" preference="0.750">
|
|
13
|
+
<!-- Red Hat package naming:
|
|
14
|
+
https://fedoraproject.org/wiki/Packaging:DistTag
|
|
15
|
+
https://fedoraproject.org/wiki/Packaging:Versioning
|
|
16
|
+
|
|
17
|
+
Enterprise linux release dates:
|
|
18
|
+
https://access.redhat.com/articles/3078
|
|
19
|
+
-->
|
|
20
|
+
<fingerprint pattern="^(9.[^-]+(?:-rpz\d?[+.]rl[\d.]+)?(?:-[SP]\d)?)-RedHat-[\d.]+[-.][\w.]+el([\d]+)_?(\d*)(?:.[\w.]+)?$">
|
|
21
|
+
<description>ISC BIND: Red Hat Enterprise Linux</description>
|
|
22
|
+
<example service.version="9.8.2rc1" os.version="6" os.version.version="9">9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.2</example>
|
|
23
|
+
<example service.version="9.9.4" os.version="7" os.version.version="3">9.9.4-RedHat-9.9.4-38.el7_3.3</example>
|
|
24
|
+
<example service.version="9.3.6-P1" os.version="5" os.version.version="11">9.3.6-P1-RedHat-9.3.6-25.P1.el5_11.12</example>
|
|
25
|
+
<example service.version="9.9.1-P3" os.version="6">9.9.1-P3-RedHat-9.9.1.P3.el6</example>
|
|
26
|
+
<example service.version="9.9.3-rpz2+rl.13208.13-P2" os.version="6">9.9.3-rpz2+rl.13208.13-P2-RedHat-9.9.3-4.P2.el6</example>
|
|
27
|
+
<example os.version="6" os.version.version="1">9.7.3-P3-RedHat-9.7.3-2.el6_1.P3.3</example>
|
|
28
|
+
<example os.version="6" os.version.version="">9.8.2rc1-RedHat-9.8.2-0.47.rc1.el6</example>
|
|
29
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
30
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
31
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
32
|
+
<param pos="1" name="service.version"/>
|
|
33
|
+
<param pos="0" name="os.vendor" value="Red Hat"/>
|
|
34
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
35
|
+
<param pos="0" name="os.product" value="Enterprise Linux"/>
|
|
36
|
+
<param pos="2" name="os.version"/>
|
|
37
|
+
<param pos="3" name="os.version.version"/>
|
|
38
|
+
</fingerprint>
|
|
39
|
+
<fingerprint pattern="^(9.[^-]+(?:-rl[.\d]+)?(?:-[SP]\d)?)-RedHat-[\d.]+-[\w.]+fc([\d]+)$">
|
|
40
|
+
<description>ISC BIND: Fedora</description>
|
|
41
|
+
<example service.version="9.10.4-P8">9.10.4-P8-RedHat-9.10.4-4.P8.fc25</example>
|
|
42
|
+
<!-- The '-rl' in the example below indicates a rate limiting patch -->
|
|
43
|
+
<example service.version="9.9.3-rl.13207.22-P2">9.9.3-rl.13207.22-P2-RedHat-9.9.3-5.P2.fc19</example>
|
|
44
|
+
<example os.version="10">9.5.2-RedHat-9.5.2-1.fc10</example>
|
|
45
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
46
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
47
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
48
|
+
<param pos="1" name="service.version"/>
|
|
49
|
+
<param pos="0" name="os.vendor" value="Fedora"/>
|
|
50
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
51
|
+
<param pos="0" name="os.product" value="Fedora"/>
|
|
52
|
+
<param pos="2" name="os.version"/>
|
|
53
|
+
</fingerprint>
|
|
54
|
+
<fingerprint pattern="^(9.[^-]+(?:-[SP]\d)?)-RedHat-[\w.-]+amzn1$">
|
|
55
|
+
<description>ISC BIND: Red Hat - Amazon hosted</description>
|
|
56
|
+
<example service.version="9.8.2rc1">9.8.2rc1-RedHat-9.8.2-0.37.rc1.45.amzn1</example>
|
|
57
|
+
<example service.version="9.7.3-P3">9.7.3-P3-RedHat-9.7.3-2.11.amzn1</example>
|
|
58
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
59
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
60
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
61
|
+
<param pos="1" name="service.version"/>
|
|
62
|
+
<param pos="0" name="os.vendor" value="Red Hat"/>
|
|
63
|
+
<param pos="0" name="os.device" value="General"/>
|
|
64
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
65
|
+
</fingerprint>
|
|
66
|
+
<fingerprint pattern="(9.[^-]+(?:-[SP]\d)?)-RedHat-[\w.-]+alios([\d\.]+)$">
|
|
67
|
+
<description>ISC BIND: Red Hat - Alibaba Customized EL</description>
|
|
68
|
+
<example service.version="9.9.9-P3" os.version="6">9.9.9-P3-RedHat-9.9.9-2.1.alios6</example>
|
|
69
|
+
<example service.version="9.8.2rc1" os.version="6.1">9.8.2rc1-RedHat-9.8.2-0.23.rc1.2.alios6.1</example>
|
|
70
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
71
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
72
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
73
|
+
<param pos="1" name="service.version"/>
|
|
74
|
+
<param pos="0" name="os.vendor" value="Red Hat"/>
|
|
75
|
+
<param pos="0" name="os.device" value="General"/>
|
|
76
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
77
|
+
<param pos="0" name="os.product" value="Enterprise Linux"/>
|
|
78
|
+
<param pos="2" name="os.version"/>
|
|
79
|
+
</fingerprint>
|
|
80
|
+
<fingerprint pattern="^(9.[^-]+(?:rc\d)?(?:-[SP]\d)?)-RedHat-[\d.-]+(?:[-\.][SP]\d)?(?:rc[\d\.]+)?$">
|
|
81
|
+
<description>ISC BIND: Red Hat nonspecific platform</description>
|
|
82
|
+
<example service.version="9.9.10-P2">9.9.10-P2-RedHat-9.9.10-P2</example>
|
|
83
|
+
<example service.version="9.9.5">9.9.5-RedHat-9.9.5-1</example>
|
|
84
|
+
<example service.version="9.8.2rc1">9.8.2rc1-RedHat-9.8.2-0.10.rc1.1</example>
|
|
85
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
86
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
87
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
88
|
+
<param pos="1" name="service.version"/>
|
|
89
|
+
<param pos="0" name="os.vendor" value="Red Hat"/>
|
|
90
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
91
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
92
|
+
</fingerprint>
|
|
93
|
+
<fingerprint pattern="^(9.[^-]+(?:-[SP]\d)?)-[\d.]+ubuntu[\d.]+-Ubuntu$">
|
|
94
|
+
<description>ISC BIND: Ubuntu</description>
|
|
95
|
+
<example service.version="9.9.5">9.9.5-11ubuntu1.1-Ubuntu</example>
|
|
96
|
+
<example service.version="9.10.3-P4">9.10.3-P4-10.1ubuntu5-Ubuntu</example>
|
|
97
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
98
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
99
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
100
|
+
<param pos="1" name="service.version"/>
|
|
101
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
102
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
103
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
104
|
+
</fingerprint>
|
|
105
|
+
<fingerprint pattern="^(9.[^-]+-rpz\d?[+.]rl[\d.]+(?:-[SP]\d)?)-Ubuntu-[\d\.:]+[\w\.]+(?:-[SP]\d)?-\d?ubuntu[\d\.]+$">
|
|
106
|
+
<description>ISC BIND: Ubuntu with Response Policy Zone and Request Limiting patches</description>
|
|
107
|
+
<example service.version="9.9.3-rpz2+rl.13214.22-P2">9.9.3-rpz2+rl.13214.22-P2-Ubuntu-1:9.9.3.dfsg.P2-4ubuntu1.1</example>
|
|
108
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
109
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
110
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
111
|
+
<param pos="1" name="service.version"/>
|
|
112
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
113
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
114
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
115
|
+
</fingerprint>
|
|
116
|
+
<fingerprint pattern="^(9.[^-]+(?:-[SP]\d)?)(?:-[\d\.]+)?-Ubuntu$">
|
|
117
|
+
<description>ISC BIND: Ubuntu short</description>
|
|
118
|
+
<example service.version="9.10.3-P4">9.10.3-P4-Ubuntu</example>
|
|
119
|
+
<example service.version="9.9.5">9.9.5-3-Ubuntu</example>
|
|
120
|
+
<example service.version="9.9.5">9.9.5-4.3-Ubuntu</example>
|
|
121
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
122
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
123
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
124
|
+
<param pos="1" name="service.version"/>
|
|
125
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
126
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
127
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
128
|
+
</fingerprint>
|
|
129
|
+
<fingerprint pattern="^(9.[\d\.]+(?:[+-]rpz\d?[+.]rl[\d.]+)?(?:-[SP]\d)?).*[+-]zentyal\d*">
|
|
130
|
+
<description>ISC BIND: Ubuntu Zentyal custom distribution</description>
|
|
131
|
+
<example service.version="9.9.5">9.9.5-3+zentyal-Ubuntu</example>
|
|
132
|
+
<example service.version="9.9.5">9.9.5-3-zentyal1-Ubuntu</example>
|
|
133
|
+
<example service.version="9.9.3-rpz2+rl.13214.22-P2">9.9.3-rpz2+rl.13214.22-P2-Ubuntu-2:9.9.3.dfsg.P2-4ubuntu1.1+zentyal12</example>
|
|
134
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
135
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
136
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
137
|
+
<param pos="1" name="service.version"/>
|
|
138
|
+
<param pos="0" name="os.vendor" value="Ubuntu"/>
|
|
139
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
140
|
+
<param pos="0" name="os.product" value="Zentyal"/>
|
|
141
|
+
</fingerprint>
|
|
142
|
+
<fingerprint pattern="^(9.[^-]+(?:-[SP]\d)?)-9\+deb8u[\w~\.]+-Debian$">
|
|
143
|
+
<description>ISC BIND: Debian Jessie</description>
|
|
144
|
+
<example service.version="9.9.5">9.9.5-9+deb8u11-Debian</example>
|
|
145
|
+
<example service.version="9.9.5">9.9.5-9+deb8u6A~4.2.0.201702281603-Debian</example>
|
|
146
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
147
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
148
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
149
|
+
<param pos="1" name="service.version"/>
|
|
150
|
+
<param pos="0" name="os.vendor" value="Debian"/>
|
|
151
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
152
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
153
|
+
<param pos="0" name="os.version" value="8.0"/>
|
|
154
|
+
</fingerprint>
|
|
155
|
+
<fingerprint pattern="^(9.[^-]+(?:-[SP]\d)?)-9wheezy\w+-Debian$">
|
|
156
|
+
<description>ISC BIND: Debian Wheezy</description>
|
|
157
|
+
<example service.version="9.9.5">9.9.5-9wheezy1-Debian</example>
|
|
158
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
159
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
160
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
161
|
+
<param pos="1" name="service.version"/>
|
|
162
|
+
<param pos="0" name="os.vendor" value="Debian"/>
|
|
163
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
164
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
165
|
+
<param pos="0" name="os.version" value="7.0"/>
|
|
166
|
+
</fingerprint>
|
|
167
|
+
<fingerprint pattern="^(9.[^-]+(?:-[SP]\d)?)-(?:[\d\.]+-)?Debian$">
|
|
168
|
+
<description>ISC BIND: Debian no version simple</description>
|
|
169
|
+
<example service.version="9.10.3-P4">9.10.3-P4-Debian</example>
|
|
170
|
+
<example service.version="9.9.5">9.9.5-12.1-Debian</example>
|
|
171
|
+
<example service.version="9.9.5">9.9.5-4-Debian</example>
|
|
172
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
173
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
174
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
175
|
+
<param pos="1" name="service.version"/>
|
|
176
|
+
<param pos="0" name="os.vendor" value="Debian"/>
|
|
177
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
178
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
179
|
+
</fingerprint>
|
|
180
|
+
<fingerprint pattern="^(9\.\d{,2}.\d{,2}-rpz\d?[+.]rl[\d.]+(?:-[SPW]\d+)?)$">
|
|
181
|
+
<description>ISC BIND: Response Policy Zone and Request Limiting patches</description>
|
|
182
|
+
<example service.version="9.8.4-rpz2+rl005.12-P1">9.8.4-rpz2+rl005.12-P1</example>
|
|
183
|
+
<example service.version="9.9.3-rpz2+rl.156.01-P2">9.9.3-rpz2+rl.156.01-P2</example>
|
|
184
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
185
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
186
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
187
|
+
<param pos="1" name="service.version"/>
|
|
188
|
+
</fingerprint>
|
|
189
|
+
<fingerprint pattern="^DNS Server BIND (9\.\d{,2}.\d{,2}-ESV(?:-R\d+)?(?:-[SPW]\d+)?)$">
|
|
190
|
+
<description>ISC BIND: ESV</description>
|
|
191
|
+
<example service.version="9.6-ESV-R7-P2">DNS Server BIND 9.6-ESV-R7-P2</example>
|
|
192
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
193
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
194
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
195
|
+
<param pos="1" name="service.version"/>
|
|
196
|
+
</fingerprint>
|
|
197
|
+
<!--
|
|
198
|
+
FP below might be overly specific, trying to avoid false positive when
|
|
199
|
+
matching cross-service/protocol.
|
|
200
|
+
-->
|
|
201
|
+
<fingerprint pattern="^(?:BIND )?([89]\.[\d\.]+(?:[ab]\d+)?(?:-ESV(?:-R\d+)?)?(?:-[SPW][\d\.]+)?(?:-REL)?(?:-[W]\d+)?(?:rc\d)?)(?:-NOESW)?$">
|
|
202
|
+
<description>ISC BIND: bare release number - ESV REL NOESW</description>
|
|
203
|
+
<example service.version="9.7.0-P1">9.7.0-P1</example>
|
|
204
|
+
<example service.version="9.4.2-P2.1">9.4.2-P2.1</example>
|
|
205
|
+
<example service.version="9.9.5-W1">9.9.5-W1</example>
|
|
206
|
+
<example service.version="9.2.2rc1">9.2.2rc1</example>
|
|
207
|
+
<example service.version="9.4.2-P2-W2">9.4.2-P2-W2</example>
|
|
208
|
+
<example service.version="9.5.0b1">9.5.0b1</example>
|
|
209
|
+
<example service.version="8.2.2-P5">8.2.2-P5</example>
|
|
210
|
+
<example service.version="8.2.2-P5">BIND 8.2.2-P5</example>
|
|
211
|
+
<example service.version="9.6-ESV-R11-P2">9.6-ESV-R11-P2</example>
|
|
212
|
+
<example service.version="9.6.-ESV-R6">9.6.-ESV-R6</example>
|
|
213
|
+
<example service.version="9.6-ESV">9.6-ESV</example>
|
|
214
|
+
<example service.version="8.4.7-REL">8.4.7-REL-NOESW</example>
|
|
215
|
+
<example service.version="8.3.7-REL">8.3.7-REL</example>
|
|
216
|
+
<example service.version="8.2.2-P5">8.2.2-P5-NOESW</example>
|
|
217
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
218
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
219
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
220
|
+
<param pos="1" name="service.version"/>
|
|
221
|
+
</fingerprint>
|
|
222
|
+
<fingerprint pattern="^dnsmasq-(\d.[\w\.]+)$">
|
|
223
|
+
<description>dnsmasq: simple</description>
|
|
224
|
+
<example service.version="2.40">dnsmasq-2.40</example>
|
|
225
|
+
<example service.version="2.51.2">dnsmasq-2.51.2</example>
|
|
226
|
+
<example service.version="2.63rc6">dnsmasq-2.63rc6</example>
|
|
227
|
+
<example service.version="2.76test8">dnsmasq-2.76test8</example>
|
|
228
|
+
<param pos="0" name="service.vendor" value="Thekelleys"/>
|
|
229
|
+
<param pos="0" name="service.family" value="Dnsmasq"/>
|
|
230
|
+
<param pos="0" name="service.product" value="Dnsmasq"/>
|
|
231
|
+
<param pos="1" name="service.version"/>
|
|
232
|
+
</fingerprint>
|
|
233
|
+
<fingerprint pattern="^dnsmasq-(\d.[\w]+-\d)-ubnt\d$">
|
|
234
|
+
<description>dnsmasq: Ubiquiti</description>
|
|
235
|
+
<example service.version="2.76-1">dnsmasq-2.76-1-ubnt2</example>
|
|
236
|
+
<param pos="0" name="service.vendor" value="Thekelleys"/>
|
|
237
|
+
<param pos="0" name="service.family" value="Dnsmasq"/>
|
|
238
|
+
<param pos="0" name="service.product" value="Dnsmasq"/>
|
|
239
|
+
<param pos="1" name="service.version"/>
|
|
240
|
+
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
|
241
|
+
<!-- Not including more info at this time as I'm not sure this doesn't
|
|
242
|
+
run on products other than EdgeRouter.
|
|
243
|
+
-->
|
|
244
|
+
</fingerprint>
|
|
245
|
+
<fingerprint pattern="^dnsmasq-(\d.[\w]+)-OpenDNS-\d$">
|
|
246
|
+
<description>dnsmasq: OpenDNS variant</description>
|
|
247
|
+
<example service.version="2.15">dnsmasq-2.15-OpenDNS-1</example>
|
|
248
|
+
<param pos="0" name="service.vendor" value="Thekelleys"/>
|
|
249
|
+
<param pos="0" name="service.family" value="Dnsmasq"/>
|
|
250
|
+
<param pos="0" name="service.product" value="Dnsmasq"/>
|
|
251
|
+
<param pos="1" name="service.version"/>
|
|
252
|
+
<!-- Seems to correlate with OpenWRT and Netgear but I haven't been able
|
|
253
|
+
to verify that it isn't used elsewhere.
|
|
254
|
+
-->
|
|
255
|
+
</fingerprint>
|
|
256
|
+
<fingerprint pattern="^dnsmasq-?(?:UNKNOWN)?$">
|
|
257
|
+
<description>dnsmasq: no version</description>
|
|
258
|
+
<example>dnsmasq-UNKNOWN</example>
|
|
259
|
+
<example>dnsmasq-</example>
|
|
260
|
+
<example>dnsmasq</example>
|
|
261
|
+
<param pos="0" name="service.vendor" value="Thekelleys"/>
|
|
262
|
+
<param pos="0" name="service.family" value="Dnsmasq"/>
|
|
263
|
+
<param pos="0" name="service.product" value="Dnsmasq"/>
|
|
264
|
+
</fingerprint>
|
|
265
|
+
<fingerprint pattern="^PowerDNS Recursor (\d\.[\d.]+(?:-\w+)?) \(\w+@[\w.]+ built \d+ \w+@[\w.-]*\)$">
|
|
266
|
+
<description>PowerDNS Recursor</description>
|
|
267
|
+
<example service.version="3.6.2">PowerDNS Recursor 3.6.2 (jenkins@autotest.powerdns.com built 20141031140810 mockbuild@)</example>
|
|
268
|
+
<example service.version="3.7.4-rc1">PowerDNS Recursor 3.7.4-rc1 (jenkins@autotest.powerdns.com built 20170120211656 root@foo-bar.foo.baz)</example>
|
|
269
|
+
<param pos="0" name="service.vendor" value="PowerDNS"/>
|
|
270
|
+
<param pos="0" name="service.family" value="PowerDNS"/>
|
|
271
|
+
<param pos="0" name="service.product" value="Recursor"/>
|
|
272
|
+
<param pos="1" name="service.version"/>
|
|
273
|
+
</fingerprint>
|
|
274
|
+
<fingerprint pattern="^PowerDNS Recursor (\d\.[\d.]+) \(built [\w\s:]+ by [\w]+\@[\w.-]*\)$">
|
|
275
|
+
<description>PowerDNS Recursor: format 2</description>
|
|
276
|
+
<example service.version="4.0.4">PowerDNS Recursor 4.0.4 (built Apr 13 2017 09:59:06 by root@oof-e.baz.foo.bar)</example>
|
|
277
|
+
<param pos="0" name="service.vendor" value="PowerDNS"/>
|
|
278
|
+
<param pos="0" name="service.family" value="PowerDNS"/>
|
|
279
|
+
<param pos="0" name="service.product" value="Recursor"/>
|
|
280
|
+
<param pos="1" name="service.version"/>
|
|
281
|
+
</fingerprint>
|
|
282
|
+
<fingerprint pattern="^PowerDNS Recursor (\d\.[\d.]+(?:-\w+)?)$">
|
|
283
|
+
<description>PowerDNS Recursor: version only</description>
|
|
284
|
+
<example service.version="4.0.4">PowerDNS Recursor 4.0.4</example>
|
|
285
|
+
<example service.version="4.0.0-alpha2">PowerDNS Recursor 4.0.0-alpha2</example>
|
|
286
|
+
<param pos="0" name="service.vendor" value="PowerDNS"/>
|
|
287
|
+
<param pos="0" name="service.family" value="PowerDNS"/>
|
|
288
|
+
<param pos="0" name="service.product" value="Recursor"/>
|
|
289
|
+
<param pos="1" name="service.version"/>
|
|
290
|
+
</fingerprint>
|
|
291
|
+
<fingerprint pattern="^PowerDNS Recursor (\d\.[\d.]+) \$Id[^$]*\$$">
|
|
292
|
+
<description>PowerDNS Recursor: ID format</description>
|
|
293
|
+
<example service.version="3.5.3">PowerDNS Recursor 3.5.3 $Id$</example>
|
|
294
|
+
<example service.version="3.2">PowerDNS Recursor 3.2 $Id: pdns_recursor.cc 1538 2010-03-06 11:39:03Z ahu $</example>
|
|
295
|
+
<param pos="0" name="service.vendor" value="PowerDNS"/>
|
|
296
|
+
<param pos="0" name="service.family" value="PowerDNS"/>
|
|
297
|
+
<param pos="0" name="service.product" value="Recursor"/>
|
|
298
|
+
<param pos="1" name="service.version"/>
|
|
299
|
+
</fingerprint>
|
|
300
|
+
<fingerprint pattern="^PowerDNS Recursor$">
|
|
301
|
+
<description>PowerDNS Recursor: no version</description>
|
|
302
|
+
<example>PowerDNS Recursor</example>
|
|
303
|
+
<param pos="0" name="service.vendor" value="PowerDNS"/>
|
|
304
|
+
<param pos="0" name="service.family" value="PowerDNS"/>
|
|
305
|
+
<param pos="0" name="service.product" value="Recursor"/>
|
|
306
|
+
</fingerprint>
|
|
307
|
+
<fingerprint pattern="^PowerDNS Authoritative Server (\d\.[\d.]++(?:-rc\d)?) \(\w+@[\w.]+ built [\d\s]+\w*@[\w.-]*\)$">
|
|
308
|
+
<description>PowerDNS Authoritative Server</description>
|
|
309
|
+
<example service.version="3.4.19">PowerDNS Authoritative Server 3.4.19 (jenkins@autotest.powerdns.com built 20160102220341 root@)</example>
|
|
310
|
+
<example service.version="3.4.10">PowerDNS Authoritative Server 3.4.10 (jenkins@autotest.powerdns.com built 20170306160718 root@foo-bar.foo.baz)</example>
|
|
311
|
+
<example service.version="3.3">PowerDNS Authoritative Server 3.3 (jenkins@autotest.powerdns.com built 20150306160718 root@foo-bar.foo.baz)</example>
|
|
312
|
+
<example service.version="3.3-rc2">PowerDNS Authoritative Server 3.3-rc2 (jenkins@autotest.powerdns.com built 20130627120406 root@foo-bar.foo.baz)</example>
|
|
313
|
+
<example service.version="3.4.10">PowerDNS Authoritative Server 3.4.10 (jenkins@autotest.powerdns.com built @)</example>
|
|
314
|
+
<param pos="0" name="service.vendor" value="PowerDNS"/>
|
|
315
|
+
<param pos="0" name="service.family" value="PowerDNS"/>
|
|
316
|
+
<param pos="0" name="service.product" value="Authoritative Server"/>
|
|
317
|
+
<param pos="1" name="service.version"/>
|
|
318
|
+
</fingerprint>
|
|
319
|
+
<fingerprint pattern="^PowerDNS Authoritative Server (\d\.[\w.]+(?:-rc\d)?(?:-alpha\d)?(?:-beta\d)?) \(built [\w\s:]+ by [\w]+\@[\w.-:-]*\)$">
|
|
320
|
+
<description>PowerDNS Authoritative Server: format 2</description>
|
|
321
|
+
<example service.version="4.0.4">PowerDNS Authoritative Server 4.0.4 (built Jul 26 2017 15:04:27 by root@FreeBSD:11:amd64-default-job-03)</example>
|
|
322
|
+
<example service.version="4.0.0-rc2">PowerDNS Authoritative Server 4.0.0-rc2 (built Jul 4 2016 15:44:39 by root@foo-bar.baz)</example>
|
|
323
|
+
<example service.version="4.0.0-alpha2">PowerDNS Authoritative Server 4.0.0-alpha2 (built Feb 01 2016 00:12:05 by buildbot@baz)</example>
|
|
324
|
+
<example service.version="4.0.0-beta1">PowerDNS Authoritative Server 4.0.0-beta1 (built Feb 01 2016 00:00:00 by buildbot@baz)</example>
|
|
325
|
+
<example service.version="0.0.g56d692a">PowerDNS Authoritative Server 0.0.g56d692a (built Feb 25 2017 13:10:19 by root@foo-bar.baz)</example>
|
|
326
|
+
<param pos="0" name="service.vendor" value="PowerDNS"/>
|
|
327
|
+
<param pos="0" name="service.family" value="PowerDNS"/>
|
|
328
|
+
<param pos="0" name="service.product" value="Authoritative Server"/>
|
|
329
|
+
<param pos="1" name="service.version"/>
|
|
330
|
+
</fingerprint>
|
|
331
|
+
<fingerprint pattern="^PowerDNS Authoritative Server (\d\.[\d.]+(?:-\w+)?)$">
|
|
332
|
+
<description>PowerDNS Authoritative Server: version only</description>
|
|
333
|
+
<example service.version="4.0.0">PowerDNS Authoritative Server 4.0.0</example>
|
|
334
|
+
<example service.version="4.0.0-alpha2">PowerDNS Authoritative Server 4.0.0-alpha2</example>
|
|
335
|
+
<param pos="0" name="service.vendor" value="PowerDNS"/>
|
|
336
|
+
<param pos="0" name="service.family" value="PowerDNS"/>
|
|
337
|
+
<param pos="0" name="service.product" value="Authoritative Server"/>
|
|
338
|
+
<param pos="1" name="service.version"/>
|
|
339
|
+
</fingerprint>
|
|
340
|
+
<!-- PowerDNS returns 'Served by ...' when the 'version-string' configuration
|
|
341
|
+
value / arguement is set to 'powerdns'. If this value is set to
|
|
342
|
+
'anonymous' then PowerDNS will return a ServFail DNS response
|
|
343
|
+
The matches below are *probably* Authoritative Server but we can't be
|
|
344
|
+
sure.
|
|
345
|
+
-->
|
|
346
|
+
<fingerprint pattern="^Served by POWERDNS (\d\.[\d.]+) \$Id[^$]*\$$">
|
|
347
|
+
<description>PowerDNS: Served by format with version</description>
|
|
348
|
+
<example service.version="2.9.22">Served by POWERDNS 2.9.22 $Id: packethandler.cc 1321 2008-12-06 19:44:36Z ahu $</example>
|
|
349
|
+
<param pos="0" name="service.vendor" value="PowerDNS"/>
|
|
350
|
+
<param pos="0" name="service.family" value="PowerDNS"/>
|
|
351
|
+
<param pos="1" name="service.version"/>
|
|
352
|
+
</fingerprint>
|
|
353
|
+
<fingerprint pattern="^Served by PowerDNS - https?:\/\/www.powerdns.com\/?$">
|
|
354
|
+
<description>PowerDNS: Served by format without version</description>
|
|
355
|
+
<example>Served by PowerDNS - https://www.powerdns.com/</example>
|
|
356
|
+
<example>Served by PowerDNS - http://www.powerdns.com</example>
|
|
357
|
+
<param pos="0" name="service.vendor" value="PowerDNS"/>
|
|
358
|
+
<param pos="0" name="service.family" value="PowerDNS"/>
|
|
359
|
+
</fingerprint>
|
|
360
|
+
<fingerprint pattern="^Nominum Vantio(?: CacheServe)? ([\d.]+)$">
|
|
361
|
+
<description>Nominum Vantio CacheServe</description>
|
|
362
|
+
<example service.version="4.3.0.2">Nominum Vantio 4.3.0.2</example>
|
|
363
|
+
<example service.version="7.2.1.3">Nominum Vantio CacheServe 7.2.1.3</example>
|
|
364
|
+
<param pos="0" name="service.vendor" value="Nominum"/>
|
|
365
|
+
<param pos="0" name="service.family" value="Vantio"/>
|
|
366
|
+
<param pos="0" name="service.product" value="CacheServe"/>
|
|
367
|
+
<param pos="1" name="service.version"/>
|
|
368
|
+
</fingerprint>
|
|
369
|
+
<fingerprint pattern="^Nominum Vantio ([\d.]+) \(build (\d+)\)$">
|
|
370
|
+
<description>Nominum Vantio CacheServe, with build</description>
|
|
371
|
+
<example service.version.version="114872">Nominum Vantio 5.4.5.1 (build 114872)</example>
|
|
372
|
+
<param pos="0" name="service.vendor" value="Nominum"/>
|
|
373
|
+
<param pos="0" name="service.family" value="Vantio"/>
|
|
374
|
+
<param pos="0" name="service.product" value="CacheServe"/>
|
|
375
|
+
<param pos="1" name="service.version"/>
|
|
376
|
+
<param pos="2" name="service.version.version"/>
|
|
377
|
+
</fingerprint>
|
|
378
|
+
<fingerprint pattern="^Nominum ANS(?:Premier)? ([\d\.]+)$">
|
|
379
|
+
<description>Nominum Vantio AuthServ</description>
|
|
380
|
+
<example service.version="5.4.0.0">Nominum ANS 5.4.0.0</example>
|
|
381
|
+
<example service.version="5.4.0.0">Nominum ANSPremier 5.4.0.0</example>
|
|
382
|
+
<param pos="0" name="service.vendor" value="Nominum"/>
|
|
383
|
+
<param pos="0" name="service.family" value="Vantio"/>
|
|
384
|
+
<param pos="0" name="service.product" value="AuthServ"/>
|
|
385
|
+
<param pos="1" name="service.version"/>
|
|
386
|
+
</fingerprint>
|
|
387
|
+
<fingerprint pattern="^NSD ([\d.]*(?:b\d+)?)$">
|
|
388
|
+
<description>NLnet Labs Name Server Daemon</description>
|
|
389
|
+
<example service.version="3.2.18">NSD 3.2.18</example>
|
|
390
|
+
<example service.version="4.0.0b5">NSD 4.0.0b5</example>
|
|
391
|
+
<example service.version="4">NSD 4</example>
|
|
392
|
+
<example>NSD </example>
|
|
393
|
+
<param pos="0" name="service.vendor" value="NLnet Labs"/>
|
|
394
|
+
<param pos="0" name="service.family" value="NSD"/>
|
|
395
|
+
<param pos="0" name="service.product" value="dnsd"/>
|
|
396
|
+
<param pos="1" name="service.version"/>
|
|
397
|
+
</fingerprint>
|
|
398
|
+
<fingerprint pattern="^unbound ([\d.]+)$">
|
|
399
|
+
<description>NLnet Labs Unbound</description>
|
|
400
|
+
<example service.version="1.4.22">unbound 1.4.22</example>
|
|
401
|
+
<param pos="0" name="service.vendor" value="NLnet Labs"/>
|
|
402
|
+
<param pos="0" name="service.family" value="Unbound"/>
|
|
403
|
+
<param pos="0" name="service.product" value="unbound"/>
|
|
404
|
+
<param pos="1" name="service.version"/>
|
|
405
|
+
</fingerprint>
|
|
406
|
+
<fingerprint pattern="^(?i:unbound)$">
|
|
407
|
+
<description>NLnet Labs Unbound no version string</description>
|
|
408
|
+
<example>unbound</example>
|
|
409
|
+
<param pos="0" name="service.vendor" value="NLnet Labs"/>
|
|
410
|
+
<param pos="0" name="service.family" value="Unbound"/>
|
|
411
|
+
<param pos="0" name="service.product" value="unbound"/>
|
|
412
|
+
</fingerprint>
|
|
413
|
+
<fingerprint pattern="^(?:BIND )?(9.[^-]+(?:-[SP]\d)?)-9\+deb8u\d+-Raspbian$">
|
|
414
|
+
<description>ISC BIND: Raspbian based on Debian Jessie</description>
|
|
415
|
+
<example service.version="9.9.5">9.9.5-9+deb8u7-Raspbian</example>
|
|
416
|
+
<example service.version="9.9.5">BIND 9.9.5-9+deb8u11-Raspbian</example>
|
|
417
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
418
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
419
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
420
|
+
<param pos="1" name="service.version"/>
|
|
421
|
+
<param pos="0" name="os.vendor" value="Raspbian"/>
|
|
422
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
423
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
424
|
+
<param pos="0" name="os.version" value="8.0"/>
|
|
425
|
+
</fingerprint>
|
|
426
|
+
<fingerprint pattern="^(9.[^-]+(?:-[SP]\d)?)-(?:\d-)?Raspbian$">
|
|
427
|
+
<description>ISC BIND: Raspbian based on Debian Jessie no version simple</description>
|
|
428
|
+
<example service.version="9.10.3-P4">9.10.3-P4-Raspbian</example>
|
|
429
|
+
<param pos="0" name="service.vendor" value="ISC"/>
|
|
430
|
+
<param pos="0" name="service.family" value="BIND"/>
|
|
431
|
+
<param pos="0" name="service.product" value="BIND"/>
|
|
432
|
+
<param pos="1" name="service.version"/>
|
|
433
|
+
<param pos="0" name="os.vendor" value="Raspbian"/>
|
|
434
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
435
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
436
|
+
</fingerprint>
|
|
437
|
+
<fingerprint pattern="^Knot DNS ([\d.]+(?:-dev)?)$">
|
|
438
|
+
<description>Knot DNS</description>
|
|
439
|
+
<example service.version="1.6.0">Knot DNS 1.6.0</example>
|
|
440
|
+
<example service.version="2.5.0-dev">Knot DNS 2.5.0-dev</example>
|
|
441
|
+
<param pos="0" name="service.vendor" value="cz.nic"/>
|
|
442
|
+
<param pos="0" name="service.family" value="Knot"/>
|
|
443
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
444
|
+
<param pos="1" name="service.version"/>
|
|
445
|
+
</fingerprint>
|
|
446
|
+
<fingerprint pattern="^UltraDNS Resolver$">
|
|
447
|
+
<description>Neustar UltraDNS Resolver</description>
|
|
448
|
+
<example>UltraDNS Resolver</example>
|
|
449
|
+
<param pos="0" name="service.vendor" value="Neustar"/>
|
|
450
|
+
<param pos="0" name="service.family" value="UltraDNS"/>
|
|
451
|
+
<param pos="0" name="service.product" value="Resolver"/>
|
|
452
|
+
</fingerprint>
|
|
453
|
+
<fingerprint pattern="^UltraDNS TLD Platform - www\.ultradns\.com$">
|
|
454
|
+
<description>Neustar UltraDNS TLD Platform</description>
|
|
455
|
+
<example>UltraDNS TLD Platform - www.ultradns.com</example>
|
|
456
|
+
<param pos="0" name="service.vendor" value="Neustar"/>
|
|
457
|
+
<param pos="0" name="service.family" value="UltraDNS"/>
|
|
458
|
+
<param pos="0" name="service.product" value="Resolver"/>
|
|
459
|
+
</fingerprint>
|
|
460
|
+
<!-- For Microsoft OSes the build number applies to the family. For example,
|
|
461
|
+
6.3.9600 is used by Windows 8.1 Update 1 as well as Windows 2012 R2. We
|
|
462
|
+
are assuming that the server version of the OS is what we are
|
|
463
|
+
fingerprinting since installation of the DNS service on the workstation
|
|
464
|
+
class OS would be unlikely and difficult if possible at all.
|
|
465
|
+
|
|
466
|
+
DNS version response is disabled by default on modern Windows versions
|
|
467
|
+
and the detail in the response is controlled via the EnableVersionQuery
|
|
468
|
+
setting.
|
|
469
|
+
|
|
470
|
+
The to enable version response on modern versions is:
|
|
471
|
+
dnscmd /config /EnableVersionQuery 1
|
|
472
|
+
-->
|
|
473
|
+
<fingerprint pattern="^Microsoft DNS (10.0.\d+)(?: \(\w+\))?$">
|
|
474
|
+
<description>Microsoft DNS on Windows 2016: GA</description>
|
|
475
|
+
<!-- Windows 10 / 2016 moved towards a rolling release so capturing build
|
|
476
|
+
is required unlike other Windows versions where we use a fixed string.
|
|
477
|
+
-->
|
|
478
|
+
<example service.version="10.0.14393" os.build="10.0.14393">Microsoft DNS 10.0.14393 (383900CE)</example>
|
|
479
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
|
480
|
+
<param pos="0" name="service.family" value="DNS"/>
|
|
481
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
482
|
+
<param pos="1" name="service.version"/>
|
|
483
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
484
|
+
<param pos="0" name="os.device" value="General"/>
|
|
485
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
486
|
+
<param pos="0" name="os.product" value="Windows Server 2016"/>
|
|
487
|
+
<param pos="1" name="os.build"/>
|
|
488
|
+
</fingerprint>
|
|
489
|
+
<fingerprint pattern="^Microsoft DNS 6.3.9600(?: \(\w+\))?$">
|
|
490
|
+
<description>Microsoft DNS on Windows 2012 R2</description>
|
|
491
|
+
<example>Microsoft DNS 6.3.9600 (25804825)</example>
|
|
492
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
|
493
|
+
<param pos="0" name="service.family" value="DNS"/>
|
|
494
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
495
|
+
<param pos="0" name="service.version" value="6.3.9600"/>
|
|
496
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
497
|
+
<param pos="0" name="os.device" value="General"/>
|
|
498
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
499
|
+
<param pos="0" name="os.product" value="Windows Server 2012 R2"/>
|
|
500
|
+
<param pos="0" name="os.build" value="6.3.9600"/>
|
|
501
|
+
</fingerprint>
|
|
502
|
+
<fingerprint pattern="^Microsoft DNS 6.2.9200(?: \(\w+\))?$">
|
|
503
|
+
<description>Microsoft DNS on Windows 2012</description>
|
|
504
|
+
<example>Microsoft DNS 6.2.9200 (23F04000)</example>
|
|
505
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
|
506
|
+
<param pos="0" name="service.family" value="DNS"/>
|
|
507
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
508
|
+
<param pos="0" name="service.version" value="6.2.9200"/>
|
|
509
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
510
|
+
<param pos="0" name="os.device" value="General"/>
|
|
511
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
512
|
+
<param pos="0" name="os.product" value="Windows Server 2012"/>
|
|
513
|
+
<param pos="0" name="os.build" value="6.2.9200"/>
|
|
514
|
+
</fingerprint>
|
|
515
|
+
<fingerprint pattern="^Microsoft DNS 6.1.7601(?: \(\w+\))?$">
|
|
516
|
+
<description>Microsoft DNS on Windows 2008 R2 Service Pack 1</description>
|
|
517
|
+
<example>Microsoft DNS 6.1.7601 (1DB15CD4)</example>
|
|
518
|
+
<example>Microsoft DNS 6.1.7601</example>
|
|
519
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
|
520
|
+
<param pos="0" name="service.family" value="DNS"/>
|
|
521
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
522
|
+
<param pos="0" name="service.version" value="6.1.7601"/>
|
|
523
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
524
|
+
<param pos="0" name="os.device" value="General"/>
|
|
525
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
526
|
+
<param pos="0" name="os.product" value="Windows Server 2008 R2"/>
|
|
527
|
+
<param pos="0" name="os.version" value="Service Pack 1"/>
|
|
528
|
+
<param pos="0" name="os.build" value="6.1.7601"/>
|
|
529
|
+
</fingerprint>
|
|
530
|
+
<fingerprint pattern="^Microsoft DNS 6.1.7600(?: \(\w+\))?$">
|
|
531
|
+
<description>Microsoft DNS on Windows 2008 R2</description>
|
|
532
|
+
<example>Microsoft DNS 6.1.7600 (1DB04228)</example>
|
|
533
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
|
534
|
+
<param pos="0" name="service.family" value="DNS"/>
|
|
535
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
536
|
+
<param pos="0" name="service.version" value="6.1.7600"/>
|
|
537
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
538
|
+
<param pos="0" name="os.device" value="General"/>
|
|
539
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
540
|
+
<param pos="0" name="os.product" value="Windows Server 2008 R2"/>
|
|
541
|
+
<param pos="0" name="os.build" value="6.1.7600"/>
|
|
542
|
+
</fingerprint>
|
|
543
|
+
<fingerprint pattern="^Microsoft DNS 6.0.6002(?: \(\w+\))?$">
|
|
544
|
+
<description>Microsoft DNS on Windows 2008 Service Pack 2</description>
|
|
545
|
+
<example>Microsoft DNS 6.0.6002 (17724D35)</example>
|
|
546
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
|
547
|
+
<param pos="0" name="service.family" value="DNS"/>
|
|
548
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
549
|
+
<param pos="0" name="service.version" value="6.0.6002"/>
|
|
550
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
551
|
+
<param pos="0" name="os.device" value="General"/>
|
|
552
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
553
|
+
<param pos="0" name="os.product" value="Windows Server 2008"/>
|
|
554
|
+
<param pos="0" name="os.version" value="Service Pack 2"/>
|
|
555
|
+
<param pos="0" name="os.build" value="6.0.6002"/>
|
|
556
|
+
</fingerprint>
|
|
557
|
+
<fingerprint pattern="^Microsoft DNS 6.0.6001(?: \(\w+\))?$">
|
|
558
|
+
<description>Microsoft DNS on Windows 2008 Service Pack 1</description>
|
|
559
|
+
<example>Microsoft DNS 6.0.6001 (17714726)</example>
|
|
560
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
|
561
|
+
<param pos="0" name="service.family" value="DNS"/>
|
|
562
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
563
|
+
<param pos="0" name="service.version" value="6.0.6001"/>
|
|
564
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
565
|
+
<param pos="0" name="os.device" value="General"/>
|
|
566
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
567
|
+
<param pos="0" name="os.product" value="Windows Server 2008"/>
|
|
568
|
+
<param pos="0" name="os.version" value="Service Pack 1"/>
|
|
569
|
+
<param pos="0" name="os.build" value="6.0.6001"/>
|
|
570
|
+
</fingerprint>
|
|
571
|
+
<fingerprint pattern="^DNSServer$">
|
|
572
|
+
<description>Synology DNS service</description>
|
|
573
|
+
<example>DNSServer</example>
|
|
574
|
+
<param pos="0" name="service.vendor" value="Synology"/>
|
|
575
|
+
<param pos="0" name="service.family" value="DSM"/>
|
|
576
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
577
|
+
<param pos="0" name="os.device" value="NAS"/>
|
|
578
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
579
|
+
<param pos="0" name="hw.vendor" value="Synology"/>
|
|
580
|
+
<param pos="0" name="hw.device" value="NAS"/>
|
|
581
|
+
</fingerprint>
|
|
582
|
+
<fingerprint pattern="^Incognito DNS Service ([\d\.]+) \(built">
|
|
583
|
+
<description>Incognito DNS Service</description>
|
|
584
|
+
<example service.version="6.4.4.2">Incognito DNS Service 6.4.4.2 (built Aug 10 2015) [up=15d30902s, ser=9876]</example>
|
|
585
|
+
<param pos="0" name="service.vendor" value="Incognito"/>
|
|
586
|
+
<param pos="0" name="service.family" value="DNS"/>
|
|
587
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
588
|
+
<param pos="1" name="service.version"/>
|
|
589
|
+
</fingerprint>
|
|
590
|
+
<fingerprint pattern="^(?i:djbdns)[\s-](\d.\d+)$">
|
|
591
|
+
<description>djbdns</description>
|
|
592
|
+
<example service.version="1.05">djbdns 1.05</example>
|
|
593
|
+
<example service.version="1.05">djbdns-1.05</example>
|
|
594
|
+
<example service.version="1.05">DjbDNS 1.05</example>
|
|
595
|
+
<param pos="0" name="service.vendor" value="D J Bernstein"/>
|
|
596
|
+
<param pos="0" name="service.family" value="djbdns"/>
|
|
597
|
+
<param pos="0" name="service.product" value="djbdns"/>
|
|
598
|
+
<param pos="1" name="service.version"/>
|
|
599
|
+
</fingerprint>
|
|
600
|
+
<fingerprint pattern="^(?i:djbdns)$">
|
|
601
|
+
<description>djbdns: no version</description>
|
|
602
|
+
<example>DJBDNS</example>
|
|
603
|
+
<example>djbdns</example>
|
|
604
|
+
<param pos="0" name="service.vendor" value="D J Bernstein"/>
|
|
605
|
+
<param pos="0" name="service.family" value="djbdns"/>
|
|
606
|
+
<param pos="0" name="service.product" value="djbdns"/>
|
|
607
|
+
</fingerprint>
|
|
608
|
+
<fingerprint pattern="^rbldnsd (\d[\.\w\/-]+) \(\d\d \w\w\w \d\d\d\d\)$">
|
|
609
|
+
<description>rbldnsd</description>
|
|
610
|
+
<example service.version="0.997a">rbldnsd 0.997a (23 Jul 2013)</example>
|
|
611
|
+
<example service.version="0.996a-0.1">rbldnsd 0.996a-0.1 (01 Apr 2008)</example>
|
|
612
|
+
<example service.version="0.998/WGC">rbldnsd 0.998/WGC (31 Dec 2015)</example>
|
|
613
|
+
<param pos="0" name="service.vendor" value="Michael Tokarev"/>
|
|
614
|
+
<param pos="0" name="service.family" value="rbldnsd"/>
|
|
615
|
+
<param pos="0" name="service.product" value="rbldnsd"/>
|
|
616
|
+
<param pos="1" name="service.version"/>
|
|
617
|
+
</fingerprint>
|
|
618
|
+
<fingerprint pattern="^ALU DNS ([\d\.]+) Build (\d+)$">
|
|
619
|
+
<description>ALU (Alcatel Lucent?) DNS</description>
|
|
620
|
+
<example service.version="6.2">ALU DNS 6.2 Build 22</example>
|
|
621
|
+
<example service.version.version="9">ALU DNS 6.2 Build 9</example>
|
|
622
|
+
<param pos="0" name="service.vendor" value="ALU"/>
|
|
623
|
+
<param pos="0" name="service.family" value="DNS"/>
|
|
624
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
625
|
+
<param pos="1" name="service.version"/>
|
|
626
|
+
<param pos="2" name="service.version.version"/>
|
|
627
|
+
</fingerprint>
|
|
628
|
+
<fingerprint pattern="^DraytekDNS-v([\d\.]+)$">
|
|
629
|
+
<description>Draytek DNS</description>
|
|
630
|
+
<example service.version="1.2.3006">DraytekDNS-v1.2.3006</example>
|
|
631
|
+
<param pos="0" name="service.vendor" value="Draytek"/>
|
|
632
|
+
<param pos="0" name="service.family" value="DNS"/>
|
|
633
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
634
|
+
<param pos="1" name="service.version"/>
|
|
635
|
+
</fingerprint>
|
|
636
|
+
<fingerprint pattern="^Atlas Anchor ([\d\.]+)$">
|
|
637
|
+
<description>Ripe ATLAS Anchor</description>
|
|
638
|
+
<!-- https://atlas.ripe.net/docs/anchors/ -->
|
|
639
|
+
<example service.version="0.1">Atlas Anchor 0.1</example>
|
|
640
|
+
<param pos="0" name="service.vendor" value="RIPE"/>
|
|
641
|
+
<param pos="0" name="service.family" value="Atlas Anchor"/>
|
|
642
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
643
|
+
<param pos="1" name="service.version"/>
|
|
644
|
+
</fingerprint>
|
|
645
|
+
<fingerprint pattern="^ZyWALL DNS$">
|
|
646
|
+
<description>ZyWALL DNS</description>
|
|
647
|
+
<example>ZyWALL DNS</example>
|
|
648
|
+
<param pos="0" name="service.vendor" value="Zyxel"/>
|
|
649
|
+
<param pos="0" name="service.family" value="ZyWALL"/>
|
|
650
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
651
|
+
<param pos="0" name="hw.vendor" value="Zyxel"/>
|
|
652
|
+
</fingerprint>
|
|
653
|
+
<fingerprint pattern="^Array SmartDNS$">
|
|
654
|
+
<description>Array Networks SmartDNS</description>
|
|
655
|
+
<example>Array SmartDNS</example>
|
|
656
|
+
<param pos="0" name="service.vendor" value="Array Networks"/>
|
|
657
|
+
<param pos="0" name="service.family" value="AVP"/>
|
|
658
|
+
<param pos="0" name="service.product" value="SmartDNS"/>
|
|
659
|
+
</fingerprint>
|
|
660
|
+
<fingerprint pattern="^gdnsd$">
|
|
661
|
+
<description>gdnsd</description>
|
|
662
|
+
<example>gdnsd</example>
|
|
663
|
+
<param pos="0" name="service.vendor" value="Brandon Black"/>
|
|
664
|
+
<param pos="0" name="service.family" value="gdnsd"/>
|
|
665
|
+
<param pos="0" name="service.product" value="gdnsd"/>
|
|
666
|
+
</fingerprint>
|
|
667
|
+
<fingerprint pattern="^Hi: [\w\.: =]+\d{4}$">
|
|
668
|
+
<description>OzymanDNS DNS tunnel</description>
|
|
669
|
+
<example>Hi: Thu Aug 17 23:29:10 2017</example>
|
|
670
|
+
<example>Hi: Lookup=VERSION.BIND Date=Thu Aug 17 23:53:10 UTC 2017</example>
|
|
671
|
+
<param pos="0" name="service.vendor" value="Dan Kaminsky"/>
|
|
672
|
+
<param pos="0" name="service.family" value="OzymanDNS"/>
|
|
673
|
+
<param pos="0" name="service.product" value="OzymanDNS"/>
|
|
674
|
+
</fingerprint>
|
|
675
|
+
<fingerprint pattern="^Meta IP[\s\/]DNS (?:V[\d\.]+ )?- BIND V([\d\.]+(?:-REL)?) \(Build (\d+)\s?\)$">
|
|
676
|
+
<description>Check Point Meta IP</description>
|
|
677
|
+
<example service.version="8.2.7-REL">Meta IP DNS - BIND V8.2.7-REL (Build 31)</example>
|
|
678
|
+
<example service.version.version="4704">Meta IP/DNS V4.1 - BIND V8.1.2 (Build 4704 )</example>
|
|
679
|
+
<param pos="0" name="service.vendor" value="Check Point"/>
|
|
680
|
+
<param pos="0" name="service.family" value="META IP"/>
|
|
681
|
+
<param pos="0" name="service.product" value="DNS"/>
|
|
682
|
+
<param pos="1" name="service.version"/>
|
|
683
|
+
<param pos="2" name="service.version.version"/>
|
|
684
|
+
</fingerprint>
|
|
685
|
+
</fingerprints>
|
data/xml/snmp_sysdescr.xml
CHANGED
|
@@ -7372,7 +7372,7 @@ Copyright (c) 1995-2005 by Cisco Systems
|
|
|
7372
7372
|
<example os.version="11" os.arch="sun4u">SunOS release:5.11 version:Generic_125100-07 machine:sun4u</example>
|
|
7373
7373
|
<example os.version="12" os.arch="sun4u">SunOS release:5.12 version:Generic_125100-07 machine:sun4u</example>
|
|
7374
7374
|
<param pos="0" name="os.vendor" value="Oracle"/>
|
|
7375
|
-
<param pos="0" name="os.
|
|
7375
|
+
<param pos="0" name="os.certainty" value="0.9"/>
|
|
7376
7376
|
<param pos="0" name="os.family" value="Solaris"/>
|
|
7377
7377
|
<param pos="0" name="os.product" value="Solaris"/>
|
|
7378
7378
|
<param pos="0" name="os.device" value="General"/>
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: recog
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 2.1.
|
|
4
|
+
version: 2.1.12
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Rapid7 Research
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2017-
|
|
11
|
+
date: 2017-08-22 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: rspec
|
|
@@ -180,6 +180,7 @@ files:
|
|
|
180
180
|
- spec/spec_helper.rb
|
|
181
181
|
- xml/apache_os.xml
|
|
182
182
|
- xml/architecture.xml
|
|
183
|
+
- xml/dns_versionbind.xml
|
|
183
184
|
- xml/fingerprints.xsd
|
|
184
185
|
- xml/ftp_banners.xml
|
|
185
186
|
- xml/h323_callresp.xml
|
|
@@ -238,7 +239,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
238
239
|
version: '0'
|
|
239
240
|
requirements: []
|
|
240
241
|
rubyforge_project:
|
|
241
|
-
rubygems_version: 2.
|
|
242
|
+
rubygems_version: 2.6.11
|
|
242
243
|
signing_key:
|
|
243
244
|
specification_version: 4
|
|
244
245
|
summary: Network service fingerprint database, classes, and utilities
|