recog 2.2.1 → 2.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.travis.yml +4 -3
- data/lib/recog/version.rb +1 -1
- data/xml/x509_issuers.xml +134 -0
- data/xml/x509_subjects.xml +952 -0
- metadata +5 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: e1c998eada64784f6c8b38a44f146aea9176bde1
|
|
4
|
+
data.tar.gz: f651b55c9550222d5c6e91cdb49df1bbc17cfe65
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 004fc2c3552f9e60eb5c0c94533c27fbf137db37089877440a82104a041356a20c364e88e4ace79baa692a5a7edf6d4941973dd1f3d6edcc0e377008f0af5fb9
|
|
7
|
+
data.tar.gz: a662695949fb1ff138b845fe04f139f58988fc7f693dd9e86048e05f9a07177ffc70b77036842f04c9c0a2f22c429087760d5b9b83f2b142e32257dda28261ca
|
data/.travis.yml
CHANGED
data/lib/recog/version.rb
CHANGED
|
@@ -0,0 +1,134 @@
|
|
|
1
|
+
<?xml version="1.0" encoding="UTF-8"?>
|
|
2
|
+
<fingerprints matches="x509.issuer" protocol="x509">
|
|
3
|
+
<!--
|
|
4
|
+
This fingerprint set matches the Issuer field of x509 certificates. These x509
|
|
5
|
+
certificates may be sourced from any SSL or TLS service. If a particular system
|
|
6
|
+
has identical subject and issuer fields, the subject field should be preferred.
|
|
7
|
+
|
|
8
|
+
The format of the Issuer field is built from the x509 distinguished names using
|
|
9
|
+
a specific order. Please see the comments in x509_subjects.xml for details.
|
|
10
|
+
|
|
11
|
+
-->
|
|
12
|
+
<!-- Chromecast and various devices that support the Cast protocol -->
|
|
13
|
+
<fingerprint pattern="^CN=Chromecast ICA (\d+)\s*\(?([^,\)]*)\)?,OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US$">
|
|
14
|
+
<description>Google Chromecast</description>
|
|
15
|
+
<example chromecast.generation="3">CN=Chromecast ICA 3,OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
|
16
|
+
<example chromecast.generation="4" chromecast.capabilities="Audio">CN=Chromecast ICA 4 (Audio),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
|
17
|
+
<example chromecast.generation="5" chromecast.capabilities="4K">CN=Chromecast ICA 5 (4K),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
|
18
|
+
<example chromecast.generation="6" chromecast.capabilities="Audio Assist">CN=Chromecast ICA 6 (Audio Assist),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
|
19
|
+
<example chromecast.generation="7" chromecast.capabilities="Audio Assist 2">CN=Chromecast ICA 7 (Audio Assist 2),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
|
20
|
+
<example chromecast.generation="9" chromecast.capabilities="Audio Assist">CN=Chromecast ICA 9 (Audio Assist),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
|
21
|
+
<example chromecast.generation="11" chromecast.capabilities="Video Assist">CN=Chromecast ICA 11 (Video Assist),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
|
22
|
+
<example chromecast.generation="12">CN=Chromecast ICA 12,OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
|
23
|
+
<param pos="0" name="os.vendor" value="Google"/>
|
|
24
|
+
<param pos="0" name="os.product" value="ChromeOS"/>
|
|
25
|
+
<param pos="0" name="hw.device" value="Media Server"/>
|
|
26
|
+
<param pos="0" name="hw.vendor" value="Google"/>
|
|
27
|
+
<param pos="0" name="hw.product" value="Chromecast"/>
|
|
28
|
+
<param pos="1" name="chromecast.generation"/>
|
|
29
|
+
<param pos="2" name="chromecast.capabilities"/>
|
|
30
|
+
</fingerprint>
|
|
31
|
+
<fingerprint pattern="^CN=Asus fugu Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US$">
|
|
32
|
+
<description>ASUS Nexus Player (Android) with Google Cast</description>
|
|
33
|
+
<example>CN=Asus fugu Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US</example>
|
|
34
|
+
<param pos="0" name="os.vendor" value="Google"/>
|
|
35
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
|
|
36
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
37
|
+
<param pos="0" name="os.product" value="Android"/>
|
|
38
|
+
<param pos="0" name="hw.device" value="Media Server"/>
|
|
39
|
+
<param pos="0" name="hw.vendor" value="ASUS"/>
|
|
40
|
+
<param pos="0" name="hw.product" value="Nexus Player"/>
|
|
41
|
+
</fingerprint>
|
|
42
|
+
<fingerprint pattern="^CN=Sony amai Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US$">
|
|
43
|
+
<description>Sony SmartTV (Android) with Google Cast</description>
|
|
44
|
+
<example>CN=Sony amai Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US</example>
|
|
45
|
+
<param pos="0" name="os.vendor" value="Google"/>
|
|
46
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
|
|
47
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
48
|
+
<param pos="0" name="os.product" value="Android"/>
|
|
49
|
+
<param pos="0" name="hw.device" value="Smart TV"/>
|
|
50
|
+
<param pos="0" name="hw.vendor" value="Sony"/>
|
|
51
|
+
</fingerprint>
|
|
52
|
+
<fingerprint pattern="^CN=Cast TV ICA \(Vizio\),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US$">
|
|
53
|
+
<description>Vizio SmartTV (Android) with Google Cast</description>
|
|
54
|
+
<example>CN=Cast TV ICA (Vizio),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
|
55
|
+
<param pos="0" name="os.vendor" value="Google"/>
|
|
56
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
|
|
57
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
58
|
+
<param pos="0" name="os.product" value="Android"/>
|
|
59
|
+
<param pos="0" name="hw.device" value="Smart TV"/>
|
|
60
|
+
<param pos="0" name="hw.vendor" value="Vizio"/>
|
|
61
|
+
</fingerprint>
|
|
62
|
+
<fingerprint pattern="^CN=NVidia Shield Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US$">
|
|
63
|
+
<description>NVIDIA SHIELD (Android) with Google Cast</description>
|
|
64
|
+
<example>CN=NVidia Shield Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US</example>
|
|
65
|
+
<param pos="0" name="os.vendor" value="Google"/>
|
|
66
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
|
|
67
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
68
|
+
<param pos="0" name="os.product" value="Android"/>
|
|
69
|
+
<param pos="0" name="hw.device" value="Tablet"/>
|
|
70
|
+
<param pos="0" name="hw.vendor" value="NVIDIA"/>
|
|
71
|
+
<param pos="0" name="hw.product" value="SHIELD"/>
|
|
72
|
+
</fingerprint>
|
|
73
|
+
<fingerprint pattern="^CN=NVidia Darcy NVidia Tegra K1-Denver Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US$">
|
|
74
|
+
<description>NVIDIA SHIELD (Android) with Google Cast (Darcy)</description>
|
|
75
|
+
<example>CN=NVidia Darcy NVidia Tegra K1-Denver Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US</example>
|
|
76
|
+
<param pos="0" name="os.vendor" value="Google"/>
|
|
77
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
|
|
78
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
79
|
+
<param pos="0" name="os.product" value="Android"/>
|
|
80
|
+
<param pos="0" name="hw.device" value="Tablet"/>
|
|
81
|
+
<param pos="0" name="hw.vendor" value="NVIDIA"/>
|
|
82
|
+
<param pos="0" name="hw.product" value="SHIELD"/>
|
|
83
|
+
</fingerprint>
|
|
84
|
+
<!-- End of Chromecast -->
|
|
85
|
+
<fingerprint pattern="^CN=Yealink Equipment Issuing CA,OU=yealink\.com,O=Yealink Network Technology Co\.\\,Ltd.,L=Xiamen,ST=Fujian,C=CN$">
|
|
86
|
+
<description>Yealink VoIP Phone</description>
|
|
87
|
+
<example>CN=Yealink Equipment Issuing CA,OU=yealink.com,O=Yealink Network Technology Co.\,Ltd.,L=Xiamen,ST=Fujian,C=CN</example>
|
|
88
|
+
<param pos="0" name="os.vendor" value="Yealink"/>
|
|
89
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
90
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
91
|
+
<param pos="0" name="hw.device" value="IP Phone"/>
|
|
92
|
+
<param pos="0" name="hw.vendor" value="Yealink"/>
|
|
93
|
+
</fingerprint>
|
|
94
|
+
<fingerprint pattern="^CN=[a-zA-Z0-9]+,OU=Internally Generated Certificate,O=American Power Conversion Corp,L=Default Locality,ST=Default State,C=US$">
|
|
95
|
+
<description>APC UPS</description>
|
|
96
|
+
<example>CN=ZA1117619249,OU=Internally Generated Certificate,O=American Power Conversion Corp,L=Default Locality,ST=Default State,C=US</example>
|
|
97
|
+
<param pos="0" name="hw.device" value="Power Device"/>
|
|
98
|
+
<param pos="0" name="hw.vendor" value="APC"/>
|
|
99
|
+
</fingerprint>
|
|
100
|
+
<fingerprint pattern="^CN=Temporary CA [a-fA-F0-9]{8}\-[a-fA-F0-9]{4}\-[a-fA-F0-9]{4}\-[a-fA-F0-9]{4}\-[a-fA-F0-9]{12},OU=Temporary CA">
|
|
101
|
+
<description>Cisco Video Communication Server</description>
|
|
102
|
+
<example>CN=Temporary CA 218131fe-8af4-11e7-aa6e-9950d6bbaf74,OU=Temporary CA 218131fe-8af4-11e7-aa6e-9950d6bbaf74,O=Temporary CA 218131fe-8af4-11e7-aa6e-9950d6bbaf74</example>
|
|
103
|
+
<param pos="0" name="hw.device" value="Video Conference"/>
|
|
104
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
105
|
+
<param pos="0" name="hw.product" value="TelePresence"/>
|
|
106
|
+
</fingerprint>
|
|
107
|
+
<fingerprint pattern="^O=VMware Installer$">
|
|
108
|
+
<description>VMWare ESXi w/Installer</description>
|
|
109
|
+
<example>O=VMware Installer</example>
|
|
110
|
+
<param pos="0" name="os.vendor" value="VMWare"/>
|
|
111
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:vmware:esxi:-"/>
|
|
112
|
+
<param pos="0" name="os.product" value="ESXi"/>
|
|
113
|
+
<param pos="0" name="os.device" value="Hypervisor"/>
|
|
114
|
+
</fingerprint>
|
|
115
|
+
<fingerprint pattern="^CN=CA,OU=VMware Engineering,O=vCenter,ST=California,C=US$">
|
|
116
|
+
<description>VMWare vCenter</description>
|
|
117
|
+
<example>CN=CA,OU=VMware Engineering,O=vCenter,ST=California,C=US</example>
|
|
118
|
+
<param pos="0" name="service.vendor" value="VMWare"/>
|
|
119
|
+
<param pos="0" name="service.product" value="vCenter"/>
|
|
120
|
+
</fingerprint>
|
|
121
|
+
<fingerprint pattern="^CN=Default Issuer \(Do not trust\),OU=ISS,O=Hewlett Packard Enterprise,L=Houston,ST=Texas,C=US$">
|
|
122
|
+
<description>HP iLO</description>
|
|
123
|
+
<example>CN=Default Issuer (Do not trust),OU=ISS,O=Hewlett Packard Enterprise,L=Houston,ST=Texas,C=US</example>
|
|
124
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
|
125
|
+
<param pos="0" name="hw.vendor" value="HP"/>
|
|
126
|
+
<param pos="0" name="hw.family" value="iLO"/>
|
|
127
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
|
|
128
|
+
<param pos="0" name="hw.product" value="iLO"/>
|
|
129
|
+
<param pos="0" name="os.device" value="Lights Out Management"/>
|
|
130
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
|
131
|
+
<param pos="0" name="os.family" value="iLO"/>
|
|
132
|
+
<param pos="0" name="os.product" value="iLO"/>
|
|
133
|
+
</fingerprint>
|
|
134
|
+
</fingerprints>
|
|
@@ -0,0 +1,952 @@
|
|
|
1
|
+
<?xml version="1.0" encoding="UTF-8"?>
|
|
2
|
+
<fingerprints matches="x509.subject" protocol="x509">
|
|
3
|
+
<!--
|
|
4
|
+
This fingerprint set matches the Subject field of x509 certificates. These x509
|
|
5
|
+
certificates may be sourced from any SSL or TLS service. If a particular system
|
|
6
|
+
has identical subject and issuer fields, the subject field should be preferred.
|
|
7
|
+
|
|
8
|
+
The format of the Subject field is built from the x509 distinguished names using
|
|
9
|
+
a specific order. This order matches the Go implementation at the URL:
|
|
10
|
+
https://golang.org/src/crypto/x509/pkix/pkix.go#203
|
|
11
|
+
|
|
12
|
+
The ToRDNSequence() function builds the string in reverse order:
|
|
13
|
+
|
|
14
|
+
func (n Name) ToRDNSequence() (ret RDNSequence) {
|
|
15
|
+
ret = n.appendRDNs(ret, n.Country, oidCountry)
|
|
16
|
+
ret = n.appendRDNs(ret, n.Province, oidProvince)
|
|
17
|
+
ret = n.appendRDNs(ret, n.Locality, oidLocality)
|
|
18
|
+
ret = n.appendRDNs(ret, n.StreetAddress, oidStreetAddress)
|
|
19
|
+
ret = n.appendRDNs(ret, n.PostalCode, oidPostalCode)
|
|
20
|
+
ret = n.appendRDNs(ret, n.Organization, oidOrganization)
|
|
21
|
+
ret = n.appendRDNs(ret, n.OrganizationalUnit, oidOrganizationalUnit)
|
|
22
|
+
if len(n.CommonName) > 0 {
|
|
23
|
+
ret = n.appendRDNs(ret, []string{n.CommonName}, oidCommonName)
|
|
24
|
+
}
|
|
25
|
+
if len(n.SerialNumber) > 0 {
|
|
26
|
+
ret = n.appendRDNs(ret, []string{n.SerialNumber}, oidSerialNumber)
|
|
27
|
+
}
|
|
28
|
+
for _, atv := range n.ExtraNames {
|
|
29
|
+
ret = append(ret, []AttributeTypeAndValue{atv})
|
|
30
|
+
}
|
|
31
|
+
|
|
32
|
+
return ret
|
|
33
|
+
}
|
|
34
|
+
|
|
35
|
+
All names are separated by commas and any commas inside a name are escaped with a
|
|
36
|
+
single backslash character. See RFC 2253 for additional details on formatting.
|
|
37
|
+
|
|
38
|
+
Practically, most Subjects start with the Common Name (CN=) and then step through
|
|
39
|
+
Organization Unit (OU), Organization (O), and then some level of location, but
|
|
40
|
+
typically Locality (L) and Country (C). Names are guaranteed to be listed in
|
|
41
|
+
the order described above, but may start at any point in the list. For example,
|
|
42
|
+
Subjects may start with a Serial Number (SERIALNUMBER=) or even Extra Names, but
|
|
43
|
+
these are somewhat rare. Keep this name order in mind when working on these
|
|
44
|
+
fingerprints.
|
|
45
|
+
|
|
46
|
+
The same constraints also apply to the x509 Issuers (x509_issuers.xml).
|
|
47
|
+
|
|
48
|
+
-->
|
|
49
|
+
<fingerprint pattern="^CN=([0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}),OU=([^,]+),O=Araknis Networks \(TM\),L=Charlotte,C=US$">
|
|
50
|
+
<description>Araknis Networks Router</description>
|
|
51
|
+
<example host.mac="d4:6a:91:7a:a3:c4" hw.product="AN-300-RT-4L2W">CN=d4:6a:91:7a:a3:c4,OU=AN-300-RT-4L2W,O=Araknis Networks (TM),L=Charlotte,C=US</example>
|
|
52
|
+
<param pos="0" name="hw.device" value="Router"/>
|
|
53
|
+
<param pos="0" name="hw.vendor" value="Araknis Networks"/>
|
|
54
|
+
<param pos="2" name="hw.product"/>
|
|
55
|
+
<param pos="1" name="host.mac"/>
|
|
56
|
+
</fingerprint>
|
|
57
|
+
<fingerprint pattern="^CN=([a-fA-F0-9:]+),OU=([^,]+),O=Cisco-Linksys\\, LLC">
|
|
58
|
+
<description>Cisco / Linksys Router</description>
|
|
59
|
+
<example host.mac="00:22:6b:ef:1e:d0" hw.product="RV042">CN=00:22:6b:ef:1e:d0,OU=RV042,O=Cisco-Linksys\, LLC,L=Irvine,C=US</example>
|
|
60
|
+
<param pos="0" name="hw.device" value="Broadband Router"/>
|
|
61
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
62
|
+
<param pos="2" name="hw.product"/>
|
|
63
|
+
<param pos="1" name="host.mac"/>
|
|
64
|
+
</fingerprint>
|
|
65
|
+
<fingerprint pattern="^CN=([a-fA-F0-9\:]+),OU=([^,]+),O=Cisco Systems\\, Inc\.">
|
|
66
|
+
<description>Cisco Post-Linksys Router</description>
|
|
67
|
+
<example host.mac="74:a2:e6:5c:99:21" hw.product="RV042G">CN=74:a2:e6:5c:99:21,OU=RV042G,O=Cisco Systems\, Inc.,L=Irvine,C=US</example>
|
|
68
|
+
<example host.mac="4C4E315901D0" hw.product="RV180">CN=4C4E315901D0,OU=RV180,O=Cisco Systems\, Inc.,C=US</example>
|
|
69
|
+
<param pos="0" name="hw.device" value="Broadband Router"/>
|
|
70
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
71
|
+
<param pos="2" name="hw.product"/>
|
|
72
|
+
<param pos="1" name="host.mac"/>
|
|
73
|
+
</fingerprint>
|
|
74
|
+
<fingerprint pattern="^SERIALNUMBER=PID:([^ ]+) SN:([^,]+),CN=(?:[a-zA-Z0-9\-]+)-SEP([a-fA-F0-9]{12}),OU=CTG,O=Cisco Systems Inc\.$">
|
|
75
|
+
<description>Cisco / Linksys Router</description>
|
|
76
|
+
<example host.mac="B07D47D33A1C" hw.product="CP-8851" cisco.serial_number="FCH1924AHCA">SERIALNUMBER=PID:CP-8851 SN:FCH1924AHCA,CN=CP-8851-SEPB07D47D33A1C,OU=CTG,O=Cisco Systems Inc.</example>
|
|
77
|
+
<param pos="0" name="hw.device" value="IP Phone"/>
|
|
78
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
79
|
+
<param pos="1" name="hw.product"/>
|
|
80
|
+
<param pos="2" name="cisco.serial_number"/>
|
|
81
|
+
<param pos="3" name="host.mac"/>
|
|
82
|
+
</fingerprint>
|
|
83
|
+
<fingerprint pattern="^CN=Cambium WLAN AP,OU=Products,O=Cambium Networks Inc,L=San Jose,ST=CA,C=US$">
|
|
84
|
+
<description>Cambium Networks WAP</description>
|
|
85
|
+
<example>CN=Cambium WLAN AP,OU=Products,O=Cambium Networks Inc,L=San Jose,ST=CA,C=US</example>
|
|
86
|
+
<param pos="0" name="hw.device" value="WAP"/>
|
|
87
|
+
<param pos="0" name="hw.vendor" value="Cambium Networks"/>
|
|
88
|
+
<param pos="0" name="hw.product" value="WLAN AP"/>
|
|
89
|
+
</fingerprint>
|
|
90
|
+
<fingerprint pattern="^CN=([^,]+),OU=Products,O=Cambium Networks Inc,L=San Jose,ST=CA,C=US$">
|
|
91
|
+
<description>Cambium Networks Router</description>
|
|
92
|
+
<example hw.product="R190V">CN=R190V,OU=Products,O=Cambium Networks Inc,L=San Jose,ST=CA,C=US</example>
|
|
93
|
+
<example hw.product="R200">CN=R200,OU=Products,O=Cambium Networks Inc,L=San Jose,ST=CA,C=US</example>
|
|
94
|
+
<param pos="0" name="hw.device" value="Router"/>
|
|
95
|
+
<param pos="0" name="hw.vendor" value="Cambium Networks"/>
|
|
96
|
+
<param pos="1" name="hw.product"/>
|
|
97
|
+
</fingerprint>
|
|
98
|
+
<fingerprint pattern="^CN=Nepenthes Development Team,OU=anv,O=dionaea\.carnivore\.it,C=DE$">
|
|
99
|
+
<description>Nepenthes honeypot</description>
|
|
100
|
+
<example>CN=Nepenthes Development Team,OU=anv,O=dionaea.carnivore.it,C=DE</example>
|
|
101
|
+
<param pos="0" name="service.family" value="Nepenthes"/>
|
|
102
|
+
<param pos="0" name="service.product" value="Nepenthes"/>
|
|
103
|
+
</fingerprint>
|
|
104
|
+
<fingerprint pattern="^CN=IPMI,OU=Software,O=Super Micro Computer,ST=California,C=US$">
|
|
105
|
+
<description>Super Micro IPMI Controller</description>
|
|
106
|
+
<example>CN=IPMI,OU=Software,O=Super Micro Computer,ST=California,C=US</example>
|
|
107
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
|
108
|
+
<param pos="0" name="hw.vendor" value="Super Micro"/>
|
|
109
|
+
<param pos="0" name="hw.product" value="IPMI"/>
|
|
110
|
+
<param pos="0" name="os.vendor" value="Super Micro"/>
|
|
111
|
+
<param pos="0" name="os.product" value="ATEN Linux"/>
|
|
112
|
+
</fingerprint>
|
|
113
|
+
<fingerprint pattern="^CN=iDRACdefault([a-fA-F0-9]{12}),OU=iDRAC Group,O=Dell Inc.,L=Round Rock,C=US$">
|
|
114
|
+
<description>Dell iDRAC Remote Access Controller w/MAC</description>
|
|
115
|
+
<example host.mac="0023AEF89AD1">CN=iDRACdefault0023AEF89AD1,OU=iDRAC Group,O=Dell Inc.,L=Round Rock,C=US</example>
|
|
116
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
|
117
|
+
<param pos="0" name="hw.vendor" value="Dell"/>
|
|
118
|
+
<param pos="0" name="hw.product" value="iDRAC"/>
|
|
119
|
+
<param pos="0" name="os.vendor" value="Dell"/>
|
|
120
|
+
<param pos="0" name="os.product" value="iDRAC Linux"/>
|
|
121
|
+
<param pos="1" name="host.mac"/>
|
|
122
|
+
</fingerprint>
|
|
123
|
+
<fingerprint pattern="^CN=idrac-([A-Z0-9]{7}),OU=Remote Access Group,O=Dell Inc\.,L=Round Rock,ST=Texas,C=US$">
|
|
124
|
+
<description>Dell iDRAC Remote Access Controller w/Service Tag</description>
|
|
125
|
+
<example dell.service_tag="JXJJC02">CN=idrac-JXJJC02,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
|
126
|
+
<example dell.service_tag="FMDSJH3">CN=idrac-FMDSJH3,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
|
127
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
|
128
|
+
<param pos="0" name="hw.vendor" value="Dell"/>
|
|
129
|
+
<param pos="0" name="hw.product" value="iDRAC"/>
|
|
130
|
+
<param pos="0" name="os.vendor" value="Dell"/>
|
|
131
|
+
<param pos="0" name="os.product" value="iDRAC Linux"/>
|
|
132
|
+
<param pos="1" name="dell.service_tag"/>
|
|
133
|
+
</fingerprint>
|
|
134
|
+
<fingerprint pattern="^CN=idrac.*,OU=Remote Access Group,O=Dell Inc\.,L=Round Rock,ST=Texas,C=US$">
|
|
135
|
+
<description>Dell iDRAC Remote Access Controller w/o Service Tag</description>
|
|
136
|
+
<example>CN=idrac-SVCTAG,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
|
137
|
+
<example>CN=idrac-prosit-laks,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
|
138
|
+
<example>CN=idrac-,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
|
139
|
+
<example>CN=idrac-SVCTAG,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
|
140
|
+
<example>CN=idrac,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
|
141
|
+
<example>CN=idrac,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
|
142
|
+
<example>CN=idrac-SVCTAG,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
|
143
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
|
144
|
+
<param pos="0" name="hw.vendor" value="Dell"/>
|
|
145
|
+
<param pos="0" name="hw.product" value="iDRAC"/>
|
|
146
|
+
<param pos="0" name="os.vendor" value="Dell"/>
|
|
147
|
+
<param pos="0" name="os.product" value="iDRAC Linux"/>
|
|
148
|
+
</fingerprint>
|
|
149
|
+
<fingerprint pattern="^CN=(i?DRAC\d+) default certificate,OU=Remote Access Group,O=Dell Inc\.,L=Round Rock,ST=Texas,C=US$">
|
|
150
|
+
<description>Dell iDRAC Remote Access Controller w/Version</description>
|
|
151
|
+
<example>CN=iDRAC7 default certificate,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
|
152
|
+
<example>CN=iDRAC6 default certificate,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
|
153
|
+
<example>CN=DRAC5 default certificate,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
|
154
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
|
155
|
+
<param pos="0" name="hw.vendor" value="Dell"/>
|
|
156
|
+
<param pos="1" name="hw.product"/>
|
|
157
|
+
<param pos="0" name="os.vendor" value="Dell"/>
|
|
158
|
+
<param pos="0" name="os.product" value="iDRAC Linux"/>
|
|
159
|
+
</fingerprint>
|
|
160
|
+
<fingerprint pattern="^CN=iDRAC default certificate,OU=Server Firmware Group,O=Dell Inc\.,L=Round Rock,ST=Texas,C=US$">
|
|
161
|
+
<description>Dell iDRAC Remote Access Controller Default Certificate</description>
|
|
162
|
+
<example>CN=iDRAC default certificate,OU=Server Firmware Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
|
|
163
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
|
164
|
+
<param pos="0" name="hw.vendor" value="Dell"/>
|
|
165
|
+
<param pos="0" name="hw.product" value="iDRAC"/>
|
|
166
|
+
<param pos="0" name="os.vendor" value="Dell"/>
|
|
167
|
+
<param pos="0" name="os.product" value="iDRAC Linux"/>
|
|
168
|
+
</fingerprint>
|
|
169
|
+
<fingerprint pattern="^CN=XCC-([a-zA-Z0-9]+)-([a-zA-Z0-9]+),O=System X,L=RTP,ST=NC,C=US$">
|
|
170
|
+
<description>Lenovo XCC</description>
|
|
171
|
+
<example lenovo.machine_type="7X06" lenovo.machine_model="J1005NEX">CN=XCC-7X06-J1005NEX,O=System X,L=RTP,ST=NC,C=US</example>
|
|
172
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
|
173
|
+
<param pos="0" name="hw.vendor" value="Lenovo"/>
|
|
174
|
+
<param pos="0" name="hw.family" value="System X"/>
|
|
175
|
+
<param pos="0" name="hw.product" value="XCC"/>
|
|
176
|
+
<param pos="0" name="os.vendor" value="Lenovo"/>
|
|
177
|
+
<param pos="0" name="os.product" value="XCC Linux"/>
|
|
178
|
+
<param pos="1" name="lenovo.machine_type"/>
|
|
179
|
+
<param pos="2" name="lenovo.machine_model"/>
|
|
180
|
+
</fingerprint>
|
|
181
|
+
<fingerprint pattern="^CN=([A-Za-z0-9\_\-\.]+),OU=ISS,O=Hewlett-Packard Company,L=Houston,ST=Texas,C=US$">
|
|
182
|
+
<description>HP iLO</description>
|
|
183
|
+
<example>CN=SERVER-1231,OU=ISS,O=Hewlett-Packard Company,L=Houston,ST=Texas,C=US</example>
|
|
184
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
|
185
|
+
<param pos="0" name="hw.vendor" value="HP"/>
|
|
186
|
+
<param pos="0" name="hw.family" value="iLO"/>
|
|
187
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
|
|
188
|
+
<param pos="0" name="hw.product" value="iLO"/>
|
|
189
|
+
<param pos="0" name="os.device" value="Lights Out Management"/>
|
|
190
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
|
191
|
+
<param pos="0" name="os.family" value="iLO"/>
|
|
192
|
+
<param pos="0" name="os.product" value="iLO"/>
|
|
193
|
+
<param pos="1" name="host.name"/>
|
|
194
|
+
</fingerprint>
|
|
195
|
+
<fingerprint pattern="^CN=HP Service Processor,OU=UDU Service Tools,O=Hewlett-Packard Development Company\\, L\.P\.\\ ,L=Fremont,ST=California,C=US$">
|
|
196
|
+
<description>HP iLO</description>
|
|
197
|
+
<example>CN=HP Service Processor,OU=UDU Service Tools,O=Hewlett-Packard Development Company\, L.P.\ ,L=Fremont,ST=California,C=US</example>
|
|
198
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
|
199
|
+
<param pos="0" name="hw.vendor" value="HP"/>
|
|
200
|
+
<param pos="0" name="hw.family" value="iLO"/>
|
|
201
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
|
|
202
|
+
<param pos="0" name="hw.product" value="iLO"/>
|
|
203
|
+
<param pos="0" name="os.device" value="Lights Out Management"/>
|
|
204
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
|
205
|
+
<param pos="0" name="os.family" value="iLO"/>
|
|
206
|
+
<param pos="0" name="os.product" value="iLO"/>
|
|
207
|
+
</fingerprint>
|
|
208
|
+
<fingerprint pattern="^CN=OA\-([a-fA-F0-9]+),OU=Onboard Administrator,">
|
|
209
|
+
<description>HP iLO (Onboard Administrator)</description>
|
|
210
|
+
<example>CN=OA-001F296E21A3,OU=Onboard Administrator,O=Corp.,L=Location,ST=N/A,C=US</example>
|
|
211
|
+
<example>CN=OA-80C16E999999,OU=Onboard Administrator,O=Hewlett-Packard</example>
|
|
212
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
|
213
|
+
<param pos="0" name="hw.vendor" value="HP"/>
|
|
214
|
+
<param pos="0" name="hw.family" value="iLO"/>
|
|
215
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
|
|
216
|
+
<param pos="0" name="hw.product" value="iLO"/>
|
|
217
|
+
<param pos="0" name="os.device" value="Lights Out Management"/>
|
|
218
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
|
219
|
+
<param pos="0" name="os.family" value="iLO"/>
|
|
220
|
+
<param pos="0" name="os.product" value="iLO"/>
|
|
221
|
+
<param pos="1" name="host.mac"/>
|
|
222
|
+
</fingerprint>
|
|
223
|
+
<fingerprint pattern="^CN=([A-Za-z0-9\_\-\.]+),OU=Hewlett Packard Enterprise Network Management Software \(SMH\),O=Hewlett Packard Enterprise,L=Houston,ST=Texas,C=US$">
|
|
224
|
+
<description>HP iLO</description>
|
|
225
|
+
<example>CN=bigsrv99,OU=Hewlett Packard Enterprise Network Management Software (SMH),O=Hewlett Packard Enterprise,L=Houston,ST=Texas,C=US</example>
|
|
226
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
|
227
|
+
<param pos="0" name="hw.vendor" value="HP"/>
|
|
228
|
+
<param pos="0" name="hw.family" value="iLO"/>
|
|
229
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
|
|
230
|
+
<param pos="0" name="hw.product" value="iLO"/>
|
|
231
|
+
<param pos="0" name="os.device" value="Lights Out Management"/>
|
|
232
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
|
233
|
+
<param pos="0" name="os.family" value="iLO"/>
|
|
234
|
+
<param pos="0" name="os.product" value="iLO"/>
|
|
235
|
+
<param pos="1" name="host.name"/>
|
|
236
|
+
</fingerprint>
|
|
237
|
+
<fingerprint pattern="^CN=Oracle Integrated Lights Out Manager,O=Oracle America\\, Inc\.,L=Redwood Shores,ST=California,C=US$">
|
|
238
|
+
<description>Oracle iLO</description>
|
|
239
|
+
<example>CN=Oracle Integrated Lights Out Manager,O=Oracle America\, Inc.,L=Redwood Shores,ST=California,C=US</example>
|
|
240
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
|
241
|
+
<param pos="0" name="hw.vendor" value="Oracle"/>
|
|
242
|
+
<param pos="0" name="hw.family" value="ILOM"/>
|
|
243
|
+
<param pos="0" name="hw.product" value="ILOM"/>
|
|
244
|
+
<param pos="0" name="os.device" value="Lights Out Management"/>
|
|
245
|
+
<param pos="0" name="os.vendor" value="Oracle"/>
|
|
246
|
+
<param pos="0" name="os.family" value="ILOM"/>
|
|
247
|
+
<param pos="0" name="os.product" value="ILOM"/>
|
|
248
|
+
</fingerprint>
|
|
249
|
+
<fingerprint pattern="^CN=AMI,OU=Service Processors,O=American Megatrends Inc\.,L=Norcross,ST=Georgia,C=US$">
|
|
250
|
+
<description>AMI MegaRAC LOM</description>
|
|
251
|
+
<example>CN=AMI,OU=Service Processors,O=American Megatrends Inc.,L=Norcross,ST=Georgia,C=US</example>
|
|
252
|
+
<param pos="0" name="hw.device" value="Lights Out Management"/>
|
|
253
|
+
<param pos="0" name="hw.vendor" value="AMI"/>
|
|
254
|
+
<param pos="0" name="hw.family" value="MegaRAC"/>
|
|
255
|
+
<param pos="0" name="hw.product" value="MegaRAC"/>
|
|
256
|
+
<param pos="0" name="os.device" value="Lights Out Management"/>
|
|
257
|
+
<param pos="0" name="os.vendor" value="AMI"/>
|
|
258
|
+
<param pos="0" name="os.family" value="MegaRAC"/>
|
|
259
|
+
<param pos="0" name="os.product" value="MegaRAC"/>
|
|
260
|
+
</fingerprint>
|
|
261
|
+
<fingerprint pattern="^CN=avocent.com,OU=AESS,O=Avocent,L=Sunrise,ST=FL,C=US$">
|
|
262
|
+
<description>Avocent KVM</description>
|
|
263
|
+
<example>CN=avocent.com,OU=AESS,O=Avocent,L=Sunrise,ST=FL,C=US</example>
|
|
264
|
+
<param pos="0" name="hw.device" value="KVM"/>
|
|
265
|
+
<param pos="0" name="hw.vendor" value="Avocent"/>
|
|
266
|
+
<param pos="0" name="os.device" value="KVM"/>
|
|
267
|
+
<param pos="0" name="os.vendor" value="Avocent"/>
|
|
268
|
+
</fingerprint>
|
|
269
|
+
<fingerprint pattern="^CN=Avocent Mergepoint Unity,O=Avocent Mergepoint Unity,L=Huntsville,ST=Alabama,C=US$">
|
|
270
|
+
<description>Avocent KVM</description>
|
|
271
|
+
<example>CN=Avocent Mergepoint Unity,O=Avocent Mergepoint Unity,L=Huntsville,ST=Alabama,C=US</example>
|
|
272
|
+
<param pos="0" name="hw.device" value="KVM"/>
|
|
273
|
+
<param pos="0" name="hw.vendor" value="Avocent"/>
|
|
274
|
+
<param pos="0" name="hw.product" value="Mergepoint"/>
|
|
275
|
+
<param pos="0" name="os.device" value="KVM"/>
|
|
276
|
+
<param pos="0" name="os.vendor" value="Avocent"/>
|
|
277
|
+
<param pos="0" name="os.product" value="Mergepoint"/>
|
|
278
|
+
</fingerprint>
|
|
279
|
+
<fingerprint pattern="^CN=HP Jetdirect [a-zA-Z0-9]+,OU=([a-fA-F0-9]{12})\+OU=([a-zA-Z0-9]+),O=Hewlett-Packard Co\.$">
|
|
280
|
+
<description>HP Jet Direct</description>
|
|
281
|
+
<example>CN=HP Jetdirect 38831831,OU=2C413883186A+OU=J8028E,O=Hewlett-Packard Co.</example>
|
|
282
|
+
<example>CN=HP Jetdirect FBFA31E7,OU=8851FBE33ABB+OU=J8016E,O=Hewlett-Packard Co.</example>
|
|
283
|
+
<param pos="0" name="hw.device" value="Printer"/>
|
|
284
|
+
<param pos="0" name="hw.vendor" value="HP"/>
|
|
285
|
+
<param pos="0" name="hw.family" value="JetDirect"/>
|
|
286
|
+
<param pos="0" name="os.device" value="Printer"/>
|
|
287
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
|
288
|
+
<param pos="0" name="os.family" value="JetDirect"/>
|
|
289
|
+
<param pos="1" name="host.mac"/>
|
|
290
|
+
<param pos="2" name="hw.product"/>
|
|
291
|
+
<param pos="2" name="os.product"/>
|
|
292
|
+
</fingerprint>
|
|
293
|
+
<fingerprint pattern="^CN=([a-zA-Z0-9\.\-\_]+),OU=HP-IPG,O=HP,L=Vancouver,ST=Washington,C=US$">
|
|
294
|
+
<description>HP Jet Direct</description>
|
|
295
|
+
<example host.name="HPD49F21">CN=HPD49F21,OU=HP-IPG,O=HP,L=Vancouver,ST=Washington,C=US</example>
|
|
296
|
+
<param pos="0" name="hw.device" value="Printer"/>
|
|
297
|
+
<param pos="0" name="hw.vendor" value="HP"/>
|
|
298
|
+
<param pos="0" name="hw.family" value="JetDirect"/>
|
|
299
|
+
<param pos="0" name="os.device" value="Printer"/>
|
|
300
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
|
301
|
+
<param pos="0" name="os.family" value="JetDirect"/>
|
|
302
|
+
<param pos="1" name="host.name"/>
|
|
303
|
+
</fingerprint>
|
|
304
|
+
<fingerprint pattern="^CN=(?:Sourcefire3D|firepower|ciscoasa),OU=Intrusion Management System,O=(?:Sourcefire\\, Inc.|Cisco Systems\\, Inc),C=US$">
|
|
305
|
+
<description>Cisco Firepower</description>
|
|
306
|
+
<example>CN=firepower,OU=Intrusion Management System,O=Cisco Systems\, Inc,C=US</example>
|
|
307
|
+
<example>CN=ciscoasa,OU=Intrusion Management System,O=Cisco Systems\, Inc,C=US</example>
|
|
308
|
+
<example>CN=Sourcefire3D,OU=Intrusion Management System,O=Sourcefire\, Inc.,C=US</example>
|
|
309
|
+
<param pos="0" name="hw.device" value="IPS"/>
|
|
310
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
311
|
+
<param pos="0" name="hw.product" value="Firepower"/>
|
|
312
|
+
<param pos="0" name="os.device" value="IPS"/>
|
|
313
|
+
<param pos="0" name="os.vendor" value="Cisco"/>
|
|
314
|
+
<param pos="0" name="os.product" value="Firepower"/>
|
|
315
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
316
|
+
</fingerprint>
|
|
317
|
+
<fingerprint pattern="^CN=ASA Temporary Self Signed Certificate$">
|
|
318
|
+
<description>Cisco ASA</description>
|
|
319
|
+
<example>CN=ASA Temporary Self Signed Certificate</example>
|
|
320
|
+
<param pos="0" name="hw.device" value="Firewall"/>
|
|
321
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:cisco:adaptive_security_appliance:-"/>
|
|
322
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
323
|
+
<param pos="0" name="hw.product" value="Adaptive Security Appliance"/>
|
|
324
|
+
</fingerprint>
|
|
325
|
+
<fingerprint pattern="^CN=synology\.com.*,O=Synology Inc\.,L=Taipei.*,C=TW$">
|
|
326
|
+
<description>Synology NAS</description>
|
|
327
|
+
<example>CN=synology.com,OU=FTP Team,O=Synology Inc.,L=Taipei,ST=Taiwan,C=TW</example>
|
|
328
|
+
<example>CN=synology.com,O=Synology Inc.,L=Taipei,C=TW</example>
|
|
329
|
+
<param pos="0" name="hw.vendor" value="Synology"/>
|
|
330
|
+
<param pos="0" name="hw.family" value="DiskStation"/>
|
|
331
|
+
<param pos="0" name="hw.device" value="Storage"/>
|
|
332
|
+
<param pos="0" name="os.device" value="Storage"/>
|
|
333
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
334
|
+
<param pos="0" name="os.product" value="DSM"/>
|
|
335
|
+
<param pos="0" name="os.vendor" value="Synology"/>
|
|
336
|
+
</fingerprint>
|
|
337
|
+
<fingerprint pattern="^CN=(?:\*\.)?([a-zA-Z0-9\.\_\-]+)\.wd2go\.com">
|
|
338
|
+
<description>Western Digital WD2GO Devices</description>
|
|
339
|
+
<example wd2go.device_id="device1133796-01b3e3fa">CN=device1133796-01b3e3fa.wd2go.com,OU=Domain Control Validated+OU=Hosted by Western Digital Corporation+OU=COMODO SSL Unified Communications</example>
|
|
340
|
+
<example wd2go.device_id="device4113440">CN=*.device4113440.wd2go.com,OU=Branded Products,O=Western Digital,L=Mountain View,ST=California,C=US</example>
|
|
341
|
+
<param pos="0" name="hw.vendor" value="Western Digital"/>
|
|
342
|
+
<param pos="0" name="hw.family" value="WD2GO"/>
|
|
343
|
+
<param pos="0" name="hw.device" value="Storage"/>
|
|
344
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
345
|
+
<param pos="0" name="os.vendor" value="Western Digital"/>
|
|
346
|
+
<param pos="0" name="os.device" value="Storage"/>
|
|
347
|
+
<param pos="1" name="wd2go.device_id"/>
|
|
348
|
+
</fingerprint>
|
|
349
|
+
<fingerprint pattern="^CN=Seagate Technology LLC,O=Seagate Technology LLC,L=Cupertino,ST=California,C=US$">
|
|
350
|
+
<description>Seagate NAS</description>
|
|
351
|
+
<example>CN=Seagate Technology LLC,O=Seagate Technology LLC,L=Cupertino,ST=California,C=US</example>
|
|
352
|
+
<param pos="0" name="hw.vendor" value="Seagate"/>
|
|
353
|
+
<param pos="0" name="hw.device" value="Storage"/>
|
|
354
|
+
<param pos="0" name="os.vendor" value="Seagate"/>
|
|
355
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
356
|
+
</fingerprint>
|
|
357
|
+
<fingerprint pattern="^CN=[\d\.]+,OU=Q-Series,O=Quantum,ST=CO,C=US$">
|
|
358
|
+
<description>Seagate Q-Series NAS (previously Quantum)</description>
|
|
359
|
+
<example>CN=1.1.1.1,OU=Q-Series,O=Quantum,ST=CO,C=US</example>
|
|
360
|
+
<param pos="0" name="hw.vendor" value="Seagate"/>
|
|
361
|
+
<param pos="0" name="hw.device" value="Storage"/>
|
|
362
|
+
<param pos="0" name="os.vendor" value="Seagate"/>
|
|
363
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
364
|
+
</fingerprint>
|
|
365
|
+
<fingerprint pattern="^CN=QNAP NAS,OU=QTS,O=QNAP Systems\\, Inc\.,L=Taipei,ST=Taipei,C=TW$">
|
|
366
|
+
<description>QNAP NAS</description>
|
|
367
|
+
<example>CN=QNAP NAS,OU=QTS,O=QNAP Systems\, Inc.,L=Taipei,ST=Taipei,C=TW</example>
|
|
368
|
+
<param pos="0" name="hw.vendor" value="QNAP Systems"/>
|
|
369
|
+
<param pos="0" name="hw.family" value="Storage"/>
|
|
370
|
+
<param pos="0" name="hw.device" value="Storage"/>
|
|
371
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
372
|
+
<param pos="0" name="os.vendor" value="QNAP Systems"/>
|
|
373
|
+
<param pos="0" name="os.device" value="Storage"/>
|
|
374
|
+
</fingerprint>
|
|
375
|
+
<fingerprint pattern="^CN=VMware,OU=VMware,L=Palo Alto,C=US$">
|
|
376
|
+
<description>VMWare Authentication Daemon</description>
|
|
377
|
+
<example>CN=VMware,OU=VMware,L=Palo Alto,C=US</example>
|
|
378
|
+
<param pos="0" name="service.vendor" value="VMWare"/>
|
|
379
|
+
<param pos="0" name="service.product" value="vmauthd"/>
|
|
380
|
+
</fingerprint>
|
|
381
|
+
<fingerprint pattern="^CN=([a-zA-Z0-9\.\-\_]+),OU=VMware ESX Server Default Certificate,O=VMware\\, Inc,L=Palo Alto,ST=California,C=US$">
|
|
382
|
+
<description>VMWare ESX</description>
|
|
383
|
+
<example>CN=server99.,OU=VMware ESX Server Default Certificate,O=VMware\, Inc,L=Palo Alto,ST=California,C=US</example>
|
|
384
|
+
<param pos="0" name="os.vendor" value="VMWare"/>
|
|
385
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:vmware:esx:-"/>
|
|
386
|
+
<param pos="0" name="os.product" value="ESX"/>
|
|
387
|
+
<param pos="0" name="os.device" value="Hypervisor"/>
|
|
388
|
+
<param pos="1" name="host.name"/>
|
|
389
|
+
</fingerprint>
|
|
390
|
+
<fingerprint pattern="^CN=IOS-Self-Signed-Certificate-">
|
|
391
|
+
<description>Cisco IOS Default Certificate</description>
|
|
392
|
+
<example>CN=IOS-Self-Signed-Certificate-4163115936</example>
|
|
393
|
+
<param pos="0" name="os.vendor" value="Cisco"/>
|
|
394
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:-"/>
|
|
395
|
+
<param pos="0" name="os.family" value="IOS"/>
|
|
396
|
+
<param pos="0" name="os.product" value="IOS"/>
|
|
397
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
398
|
+
<param pos="0" name="hw.device" value="Router"/>
|
|
399
|
+
</fingerprint>
|
|
400
|
+
<fingerprint pattern="^CN=([a-zA-Z0-9]{5,12}) ([a-zA-Z0-9]{12}),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US$">
|
|
401
|
+
<description>Google Chromecast</description>
|
|
402
|
+
<example chromecast.serial_number="LVDZG5" host.mac_local="FA8FCA67413D">CN=LVDZG5 FA8FCA67413D,OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
|
403
|
+
<param pos="0" name="os.vendor" value="Google"/>
|
|
404
|
+
<param pos="0" name="os.product" value="ChromeOS"/>
|
|
405
|
+
<param pos="0" name="hw.device" value="Media Server"/>
|
|
406
|
+
<param pos="0" name="hw.vendor" value="Google"/>
|
|
407
|
+
<param pos="0" name="hw.product" value="Chromecast"/>
|
|
408
|
+
<param pos="1" name="chromecast.serial_number"/>
|
|
409
|
+
<!-- local administered mac address (clear bit 2 of first byte) -->
|
|
410
|
+
<param pos="2" name="host.mac_local"/>
|
|
411
|
+
</fingerprint>
|
|
412
|
+
<fingerprint pattern="^CN=([a-zA-Z0-9]{5,12}) ([a-zA-Z0-9]{12}),OU=Cast TV \(Vizio\),O=Google Inc,L=Mountain View,ST=California,C=US$">
|
|
413
|
+
<description>Vizio SmartTV (Android) with Google Cast</description>
|
|
414
|
+
<example chromecast.serial_number="9V039WC9" host.mac_local="FA8FCA697898">CN=9V039WC9 FA8FCA697898,OU=Cast TV (Vizio),O=Google Inc,L=Mountain View,ST=California,C=US</example>
|
|
415
|
+
<param pos="0" name="os.vendor" value="Google"/>
|
|
416
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
|
|
417
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
418
|
+
<param pos="0" name="os.product" value="Android"/>
|
|
419
|
+
<param pos="0" name="hw.device" value="Smart TV"/>
|
|
420
|
+
<param pos="0" name="hw.vendor" value="Vizio"/>
|
|
421
|
+
<param pos="1" name="chromecast.serial_number"/>
|
|
422
|
+
<!-- local administered mac address (clear bit 2 of first byte) -->
|
|
423
|
+
<param pos="2" name="host.mac_local"/>
|
|
424
|
+
</fingerprint>
|
|
425
|
+
<fingerprint pattern="^CN=TANDBERG,OU=R&D,O=TANDBERG ASA,L=Lysaker,ST=Askerhus,C=NO$">
|
|
426
|
+
<description>Cisco (TANDBERG) TelePresence</description>
|
|
427
|
+
<example>CN=TANDBERG,OU=R&D,O=TANDBERG ASA,L=Lysaker,ST=Askerhus,C=NO</example>
|
|
428
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
429
|
+
<param pos="0" name="hw.device" value="Video Conferencing"/>
|
|
430
|
+
<param pos="0" name="hw.product" value="TelePresence"/>
|
|
431
|
+
<param pos="0" name="os.vendor" value="Cisco"/>
|
|
432
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
433
|
+
<param pos="0" name="os.product" value="TelePresence"/>
|
|
434
|
+
<param pos="0" name="os.device" value="Video Conferencing"/>
|
|
435
|
+
</fingerprint>
|
|
436
|
+
<fingerprint pattern="^CN=lifesize.com,C=US$">
|
|
437
|
+
<description>Lifesize TelePresence</description>
|
|
438
|
+
<example>CN=lifesize.com,C=US</example>
|
|
439
|
+
<param pos="0" name="hw.vendor" value="Lifesize"/>
|
|
440
|
+
<param pos="0" name="hw.device" value="Video Conferencing"/>
|
|
441
|
+
<param pos="0" name="hw.product" value="TelePresence"/>
|
|
442
|
+
<param pos="0" name="os.vendor" value="Lifesize"/>
|
|
443
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
444
|
+
<param pos="0" name="os.product" value="TelePresence"/>
|
|
445
|
+
<param pos="0" name="os.device" value="Video Conferencing"/>
|
|
446
|
+
</fingerprint>
|
|
447
|
+
<fingerprint pattern="^CN=VMM APIC,OU=VMM\d+,O=Cisco,L=San Jose,ST=CA,C=US$">
|
|
448
|
+
<description>Cisco APIC</description>
|
|
449
|
+
<example>CN=VMM APIC,OU=VMM15,O=Cisco,L=San Jose,ST=CA,C=US</example>
|
|
450
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
451
|
+
<param pos="0" name="hw.product" value="APIC"/>
|
|
452
|
+
</fingerprint>
|
|
453
|
+
<fingerprint pattern="^CN=APIC$">
|
|
454
|
+
<description>Cisco APIC</description>
|
|
455
|
+
<example>CN=APIC</example>
|
|
456
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
457
|
+
<param pos="0" name="hw.product" value="APIC"/>
|
|
458
|
+
</fingerprint>
|
|
459
|
+
<fingerprint pattern="^CN=(iPX\d+),OU=I Project,O=Samsung Electronics,L=Suwon,ST=Gyeonggi-do,C=KR$">
|
|
460
|
+
<description>Samsung Communication Manager</description>
|
|
461
|
+
<example hw.product="iPX3010">CN=iPX3010,OU=I Project,O=Samsung Electronics,L=Suwon,ST=Gyeonggi-do,C=KR</example>
|
|
462
|
+
<param pos="0" name="hw.vendor" value="Samsung"/>
|
|
463
|
+
<param pos="0" name="hw.device" value="VoIP Server"/>
|
|
464
|
+
<param pos="0" name="hw.family" value="Communication Manager"/>
|
|
465
|
+
<param pos="1" name="hw.product"/>
|
|
466
|
+
<param pos="0" name="os.vendor" value="Samsung"/>
|
|
467
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
468
|
+
</fingerprint>
|
|
469
|
+
<fingerprint pattern="^CN=www.hikvision.com,OU=DVRNVR,O=HIKVISION,L=HangZhou,ST=ZheJiang,C=CN$">
|
|
470
|
+
<description>HIKVISION DVR</description>
|
|
471
|
+
<example>CN=www.hikvision.com,OU=DVRNVR,O=HIKVISION,L=HangZhou,ST=ZheJiang,C=CN</example>
|
|
472
|
+
<param pos="0" name="os.vendor" value="Hikvision"/>
|
|
473
|
+
<param pos="0" name="os.device" value="DVR"/>
|
|
474
|
+
<param pos="0" name="hw.vendor" value="Hikvision"/>
|
|
475
|
+
<param pos="0" name="hw.device" value="DVR"/>
|
|
476
|
+
</fingerprint>
|
|
477
|
+
<fingerprint pattern="^CN=([a-zA-Z0-9\.\-\_]+),OU=Polatis Switch ([a-zA-Z0-9]+),O=Polatis Inc\.,ST=N/A,C=UK$">
|
|
478
|
+
<description>Polatis Switch</description>
|
|
479
|
+
<example host.name="192.168.0.1" hw.product="1591">CN=192.168.0.1,OU=Polatis Switch 1591,O=Polatis Inc.,ST=N/A,C=UK</example>
|
|
480
|
+
<example host.name="central-01" hw.product="1590">CN=central-01,OU=Polatis Switch 1590,O=Polatis Inc.,ST=N/A,C=UK</example>
|
|
481
|
+
<param pos="0" name="os.vendor" value="Polatis"/>
|
|
482
|
+
<param pos="0" name="os.device" value="Switch"/>
|
|
483
|
+
<param pos="0" name="hw.vendor" value="Polatis"/>
|
|
484
|
+
<param pos="0" name="hw.device" value="Switch"/>
|
|
485
|
+
<param pos="1" name="host.name"/>
|
|
486
|
+
<param pos="2" name="hw.product"/>
|
|
487
|
+
</fingerprint>
|
|
488
|
+
<fingerprint pattern="^CN=([a-zA-Z0-9\.\-\_]+),O=Fidelis Cybersecurity$">
|
|
489
|
+
<description>Fidelis CommandPost</description>
|
|
490
|
+
<example host.name="localhost.localdomain">CN=localhost.localdomain,O=Fidelis Cybersecurity</example>
|
|
491
|
+
<param pos="0" name="hw.vendor" value="Fidelis"/>
|
|
492
|
+
<param pos="0" name="hw.product" value="CommandPost"/>
|
|
493
|
+
<param pos="0" name="hw.device" value="Appliance"/>
|
|
494
|
+
<param pos="0" name="os.vendor" value="Fidelis"/>
|
|
495
|
+
<param pos="0" name="os.product" value="CommandPost"/>
|
|
496
|
+
<param pos="1" name="host.name"/>
|
|
497
|
+
</fingerprint>
|
|
498
|
+
<fingerprint pattern="^CN=([a-zA-Z0-9]+\-[a-zA-Z0-9]+)\-([a-zA-Z0-9]+),O=IBM,L=Endicott,ST=New York,C=IN$">
|
|
499
|
+
<description>IBM POWER System</description>
|
|
500
|
+
<example hw.product="8284-22A" hw.model="211BAFW">CN=8284-22A-211BAFW,O=IBM,L=Endicott,ST=New York,C=IN</example>
|
|
501
|
+
<param pos="0" name="hw.vendor" value="IBM"/>
|
|
502
|
+
<param pos="0" name="hw.family" value="POWER System"/>
|
|
503
|
+
<param pos="1" name="hw.product" value=""/>
|
|
504
|
+
<param pos="2" name="hw.model"/>
|
|
505
|
+
</fingerprint>
|
|
506
|
+
<fingerprint pattern="^CN=EagleEyeDirectorII.polycom.com,OU=Video Division,O=Polycom Inc.,L=San Jose,ST=California,C=US$">
|
|
507
|
+
<description>Polycom Eagle Eye Director</description>
|
|
508
|
+
<example>CN=EagleEyeDirectorII.polycom.com,OU=Video Division,O=Polycom Inc.,L=San Jose,ST=California,C=US</example>
|
|
509
|
+
<param pos="0" name="hw.vendor" value="Polycom"/>
|
|
510
|
+
<param pos="0" name="hw.device" value="Video Conferencing"/>
|
|
511
|
+
<param pos="0" name="hw.product" value="Eagle Eye Director II"/>
|
|
512
|
+
</fingerprint>
|
|
513
|
+
<fingerprint pattern="^CN=([a-zA-Z0-9]+),OU=RD,O=QSC\\, LLC,ST=Colorado,C=US$">
|
|
514
|
+
<description>Q-SYS Licensing Manager</description>
|
|
515
|
+
<example host.name="SVRTIP44">CN=SVRTIP44,OU=RD,O=QSC\, LLC,ST=Colorado,C=US</example>
|
|
516
|
+
<param pos="0" name="service.vendor" value="Q-SYS"/>
|
|
517
|
+
<param pos="0" name="service.product" value="Licensing Manager"/>
|
|
518
|
+
<param pos="1" name="host.name"/>
|
|
519
|
+
</fingerprint>
|
|
520
|
+
<fingerprint pattern="^CN=([A-Za-z0-9]+),OU=FortiGate,O=Fortinet,L=Sunnyvale,ST=California,C=US$">
|
|
521
|
+
<description>Fortinet Gateway</description>
|
|
522
|
+
<example fortinet.serial_number="FG100ETK1800118">CN=FG100ETK1800118,OU=FortiGate,O=Fortinet,L=Sunnyvale,ST=California,C=US</example>
|
|
523
|
+
<example fortinet.serial_number="FGT30D3X15038375">CN=FGT30D3X15038375,OU=FortiGate,O=Fortinet,L=Sunnyvale,ST=California,C=US</example>
|
|
524
|
+
<param pos="0" name="hw.vendor" value="Fortinet"/>
|
|
525
|
+
<param pos="0" name="hw.device" value="Firewall"/>
|
|
526
|
+
<param pos="0" name="os.vendor" value="Fortinet"/>
|
|
527
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
|
|
528
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
529
|
+
<param pos="0" name="os.device" value="Firewall"/>
|
|
530
|
+
<param pos="0" name="os.product" value="FortiOS"/>
|
|
531
|
+
<param pos="1" name="fortinet.serial_number"/>
|
|
532
|
+
</fingerprint>
|
|
533
|
+
<fingerprint pattern="^CN=([A-Za-z0-9]+),O=Fortinet Ltd\.$">
|
|
534
|
+
<description>Fortinet Gateway (Older)</description>
|
|
535
|
+
<example fortinet.serial_number="FG100D3G13803999">CN=FG100D3G13803999,O=Fortinet Ltd.</example>
|
|
536
|
+
<param pos="0" name="hw.vendor" value="Fortinet"/>
|
|
537
|
+
<param pos="0" name="hw.device" value="Firewall"/>
|
|
538
|
+
<param pos="0" name="os.vendor" value="Fortinet"/>
|
|
539
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
|
|
540
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
541
|
+
<param pos="0" name="os.device" value="Firewall"/>
|
|
542
|
+
<param pos="0" name="os.product" value="FortiOS"/>
|
|
543
|
+
<param pos="1" name="fortinet.serial_number"/>
|
|
544
|
+
</fingerprint>
|
|
545
|
+
<fingerprint pattern="^CN=FortiMail,OU=FortiMail,O=Fortinet,L=Sunnyvale,ST=California,C=US$">
|
|
546
|
+
<description>Fortinet FortiMail Appliance</description>
|
|
547
|
+
<example>CN=FortiMail,OU=FortiMail,O=Fortinet,L=Sunnyvale,ST=California,C=US</example>
|
|
548
|
+
<param pos="0" name="hw.vendor" value="Fortinet"/>
|
|
549
|
+
<param pos="0" name="hw.device" value="Appliance"/>
|
|
550
|
+
<param pos="0" name="hw.product" value="FortiMail"/>
|
|
551
|
+
<param pos="0" name="os.vendor" value="Fortinet"/>
|
|
552
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
|
|
553
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
554
|
+
<param pos="0" name="os.product" value="FortiOS"/>
|
|
555
|
+
<param pos="0" name="os.device" value="Appliance"/>
|
|
556
|
+
</fingerprint>
|
|
557
|
+
<fingerprint pattern="^CN=.*,OU=FortiManager,O=Fortinet,L=Sunnyvale,ST=California,C=US$">
|
|
558
|
+
<description>Fortinet FortiMail Appliance</description>
|
|
559
|
+
<example>CN=FMG-VM0000000000,OU=FortiManager,O=Fortinet,L=Sunnyvale,ST=California,C=US</example>
|
|
560
|
+
<param pos="0" name="hw.vendor" value="Fortinet"/>
|
|
561
|
+
<param pos="0" name="hw.device" value="Appliance"/>
|
|
562
|
+
<param pos="0" name="hw.product" value="FortiManager"/>
|
|
563
|
+
<param pos="0" name="os.vendor" value="Fortinet"/>
|
|
564
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
|
|
565
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
566
|
+
<param pos="0" name="os.product" value="FortiOS"/>
|
|
567
|
+
<param pos="0" name="os.device" value="Appliance"/>
|
|
568
|
+
</fingerprint>
|
|
569
|
+
<fingerprint pattern="^CN=CyberoamApplianceCertificate">
|
|
570
|
+
<description>Cyberoam SSL VPN</description>
|
|
571
|
+
<example>CN=CyberoamApplianceCertificate_C35316263111,OU=Cyberoam Appliance,O=Cyberoam,L=Ahmedabad,ST=Gujarat,C=IN</example>
|
|
572
|
+
<example>CN=CyberoamApplianceCertificate,OU=Cyberoam Appliance,O=Cyberoam,L=Ahmedabad,ST=Gujarat,C=IN</example>
|
|
573
|
+
<param pos="0" name="hw.vendor" value="Cyberoam"/>
|
|
574
|
+
<param pos="0" name="hw.device" value="VPN"/>
|
|
575
|
+
<param pos="0" name="hw.product" value="Appliance"/>
|
|
576
|
+
<param pos="0" name="os.vendor" value="Cyberoam"/>
|
|
577
|
+
<param pos="0" name="os.device" value="VPN"/>
|
|
578
|
+
</fingerprint>
|
|
579
|
+
<fingerprint pattern="^CN=UBNT\-([0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}),OU=Technical Support,O=Ubiquiti Networks Inc.,L=San Jose,ST=CA,C=US$">
|
|
580
|
+
<description>Ubiquiti Wireless AP</description>
|
|
581
|
+
<example host.mac="68:72:51:4B:90:16">CN=UBNT-68:72:51:4B:90:16,OU=Technical Support,O=Ubiquiti Networks Inc.,L=San Jose,ST=CA,C=US</example>
|
|
582
|
+
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
|
583
|
+
<param pos="0" name="hw.device" value="WAP"/>
|
|
584
|
+
<param pos="0" name="os.vendor" value="Ubiquiti"/>
|
|
585
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
586
|
+
<param pos="0" name="os.device" value="WAP"/>
|
|
587
|
+
<param pos="1" name="host.mac"/>
|
|
588
|
+
</fingerprint>
|
|
589
|
+
<fingerprint pattern="^CN=unifi$">
|
|
590
|
+
<description>Ubiquiti Controller</description>
|
|
591
|
+
<example>CN=unifi</example>
|
|
592
|
+
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
|
593
|
+
<param pos="0" name="hw.device" value="Wireless Controller"/>
|
|
594
|
+
<param pos="0" name="os.vendor" value="Ubiquiti"/>
|
|
595
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
596
|
+
<param pos="0" name="os.device" value="Wireless Controller"/>
|
|
597
|
+
</fingerprint>
|
|
598
|
+
<fingerprint pattern="^CN=UniFi,OU=UniFi,O=ubnt\.com,L=San Jose,ST=CA,C=US$">
|
|
599
|
+
<description>Ubiquiti Controller</description>
|
|
600
|
+
<example>CN=UniFi,OU=UniFi,O=ubnt.com,L=San Jose,ST=CA,C=US</example>
|
|
601
|
+
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
|
602
|
+
<param pos="0" name="hw.device" value="Wireless Controller"/>
|
|
603
|
+
<param pos="0" name="os.vendor" value="Ubiquiti"/>
|
|
604
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
605
|
+
<param pos="0" name="os.device" value="Wireless Controller"/>
|
|
606
|
+
</fingerprint>
|
|
607
|
+
<fingerprint pattern="^CN=UBNT,OU=Technical Support,O=Ubiquiti Networks Inc\.,L=San Jose,ST=CA,C=US$">
|
|
608
|
+
<description>Ubiquiti Controller</description>
|
|
609
|
+
<example>CN=UBNT,OU=Technical Support,O=Ubiquiti Networks Inc.,L=San Jose,ST=CA,C=US</example>
|
|
610
|
+
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
|
611
|
+
<param pos="0" name="hw.device" value="Wireless Controller"/>
|
|
612
|
+
<param pos="0" name="os.vendor" value="Ubiquiti"/>
|
|
613
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
614
|
+
<param pos="0" name="os.device" value="Wireless Controller"/>
|
|
615
|
+
</fingerprint>
|
|
616
|
+
<fingerprint pattern="^CN=CloudKey,O=Ubiquiti Networks,L=San Jose,ST=CA,C=US$">
|
|
617
|
+
<description>Ubiquiti CloudKey Controller</description>
|
|
618
|
+
<example>CN=CloudKey,O=Ubiquiti Networks,L=San Jose,ST=CA,C=US</example>
|
|
619
|
+
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
|
620
|
+
<param pos="0" name="hw.device" value="Wireless Controller"/>
|
|
621
|
+
<param pos="0" name="hw.product" value="CloudKey"/>
|
|
622
|
+
<param pos="0" name="os.vendor" value="Ubiquiti"/>
|
|
623
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
624
|
+
<param pos="0" name="os.device" value="Wireless Controller"/>
|
|
625
|
+
<param pos="0" name="os.product" value="CloudKey"/>
|
|
626
|
+
</fingerprint>
|
|
627
|
+
<fingerprint pattern="^CN=UBNT Router UI,O=Ubiquiti Networks,L=San Jose,ST=CA,C=US$">
|
|
628
|
+
<description>Ubiquiti Router</description>
|
|
629
|
+
<example>CN=UBNT Router UI,O=Ubiquiti Networks,L=San Jose,ST=CA,C=US</example>
|
|
630
|
+
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
|
631
|
+
<param pos="0" name="hw.device" value="Router"/>
|
|
632
|
+
<param pos="0" name="os.vendor" value="Ubiquiti"/>
|
|
633
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
634
|
+
<param pos="0" name="os.device" value="Router"/>
|
|
635
|
+
</fingerprint>
|
|
636
|
+
<fingerprint pattern="^CN=UniFi-Video Controller,OU=R&D,O=Ubiquiti Networks,L=New York,ST=NY,C=US$">
|
|
637
|
+
<description>Ubiquiti Video Controller</description>
|
|
638
|
+
<example>CN=UniFi-Video Controller,OU=R&D,O=Ubiquiti Networks,L=New York,ST=NY,C=US</example>
|
|
639
|
+
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
|
640
|
+
<param pos="0" name="hw.device" value="DVR"/>
|
|
641
|
+
<param pos="0" name="hw.product" value="Video Controller"/>
|
|
642
|
+
<param pos="0" name="os.vendor" value="Ubiquiti"/>
|
|
643
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
644
|
+
<param pos="0" name="os.device" value="DVR"/>
|
|
645
|
+
</fingerprint>
|
|
646
|
+
<fingerprint pattern="^CN=camera.ubnt.dev,OU=devint,O=Ubiquiti Networks Inc.,L=Taipei,C=TW$">
|
|
647
|
+
<description>Ubiquiti Video Camera</description>
|
|
648
|
+
<example>CN=camera.ubnt.dev,OU=devint,O=Ubiquiti Networks Inc.,L=Taipei,C=TW</example>
|
|
649
|
+
<param pos="0" name="hw.vendor" value="Ubiquiti"/>
|
|
650
|
+
<param pos="0" name="hw.device" value="Web Cam"/>
|
|
651
|
+
<param pos="0" name="hw.product" value="Camera"/>
|
|
652
|
+
<param pos="0" name="os.vendor" value="Ubiquiti"/>
|
|
653
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
654
|
+
<param pos="0" name="os.device" value="Web Cam"/>
|
|
655
|
+
</fingerprint>
|
|
656
|
+
<fingerprint pattern="^CN=GreenWave Systems,OU=PKI,O=GreenWave Systems,L=Irvine,ST=California,C=US$">
|
|
657
|
+
<description>Verizon / Greenwave FIOS Router</description>
|
|
658
|
+
<example>CN=GreenWave Systems,OU=PKI,O=GreenWave Systems,L=Irvine,ST=California,C=US</example>
|
|
659
|
+
<param pos="0" name="hw.vendor" value="Greenwave Systems"/>
|
|
660
|
+
<param pos="0" name="hw.device" value="Broadband Router"/>
|
|
661
|
+
<param pos="0" name="hw.product" value="Verizon FiOS Router"/>
|
|
662
|
+
</fingerprint>
|
|
663
|
+
<fingerprint pattern="^CN=PoliWall,OU=Bandura Labs,O=Bandura\\, LLC\.,L=Lake Saint Louis,ST=Missouri,C=US$">
|
|
664
|
+
<description>PoliWall Firewall</description>
|
|
665
|
+
<example>CN=PoliWall,OU=Bandura Labs,O=Bandura\, LLC.,L=Lake Saint Louis,ST=Missouri,C=US</example>
|
|
666
|
+
<param pos="0" name="hw.vendor" value="Bandura Labs"/>
|
|
667
|
+
<param pos="0" name="hw.device" value="Firewall"/>
|
|
668
|
+
<param pos="0" name="hw.product" value="PoliWall"/>
|
|
669
|
+
</fingerprint>
|
|
670
|
+
<fingerprint pattern="^CN=pfSense-[a-zA-Z0-9]+,O=pfSense webConfigurator Self-Signed Certificate">
|
|
671
|
+
<description>pfSense Firewall</description>
|
|
672
|
+
<example>CN=pfSense-58fb5b0b06777,O=pfSense webConfigurator Self-Signed Certificate,L=Locality,ST=State,C=US</example>
|
|
673
|
+
<example>CN=pfSense-5c76251e4d3e4,O=pfSense webConfigurator Self-Signed Certificate</example>
|
|
674
|
+
<param pos="0" name="hw.vendor" value="pfSense"/>
|
|
675
|
+
<param pos="0" name="hw.device" value="Firewall"/>
|
|
676
|
+
<param pos="0" name="hw.product" value="Firewall"/>
|
|
677
|
+
<param pos="0" name="os.vendor" value="pfSense"/>
|
|
678
|
+
<param pos="0" name="os.product" value="FreeBSD"/>
|
|
679
|
+
</fingerprint>
|
|
680
|
+
<fingerprint pattern="^CN=SophosApplianceCertificate">
|
|
681
|
+
<description>Sophos Appliance</description>
|
|
682
|
+
<example>CN=SophosApplianceCertificate_C330AC22W713PAF,OU=OU,O=Green House Data,L=Cheyenne,ST=WY,C=US</example>
|
|
683
|
+
<example>CN=SophosApplianceCertificate_C22315405928-UU5JKO,OU=OU,O=(null),L=NA,ST=NA,C=PK</example>
|
|
684
|
+
<example>CN=SophosApplianceCertificate,OU=OU,O=Sophos,L=Abingdon,ST=Oxfordshire,C=GB</example>
|
|
685
|
+
<param pos="0" name="hw.vendor" value="Sophos"/>
|
|
686
|
+
<param pos="0" name="hw.device" value="Appliance"/>
|
|
687
|
+
</fingerprint>
|
|
688
|
+
<fingerprint pattern="^CN=Hubitat Elevation,OU=Hub,O=Hubitat\\, Inc\.,L=Scottsdale,ST=Arizona,C=US$">
|
|
689
|
+
<description>Hubitat Device Hub</description>
|
|
690
|
+
<example>CN=Hubitat Elevation,OU=Hub,O=Hubitat\, Inc.,L=Scottsdale,ST=Arizona,C=US</example>
|
|
691
|
+
<param pos="0" name="hw.vendor" value="Hubitat"/>
|
|
692
|
+
<param pos="0" name="hw.device" value="Device Hub"/>
|
|
693
|
+
<param pos="0" name="hw.product" value="Elevation"/>
|
|
694
|
+
<param pos="0" name="os.vendor" value="Hubitat"/>
|
|
695
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
696
|
+
</fingerprint>
|
|
697
|
+
<fingerprint pattern="^CN=MAC([a-fA-F0-9]{12}),OU=([^,]+),O=Mercury Security Products\\, LLC,L=Long Beach,ST=CA,C=US$">
|
|
698
|
+
<description>Mercurity Security (now HID Global)</description>
|
|
699
|
+
<example hw.product="M5IC" host.mac="000FE507A1F1">CN=MAC000FE507A1F1,OU=M5IC,O=Mercury Security Products\, LLC,L=Long Beach,ST=CA,C=US</example>
|
|
700
|
+
<example hw.product="EP-1502" host.mac="000FE508BC71">CN=MAC000FE508BC71,OU=EP-1502,O=Mercury Security Products\, LLC,L=Long Beach,ST=CA,C=US</example>
|
|
701
|
+
<param pos="0" name="hw.vendor" value="Mercury Security"/>
|
|
702
|
+
<param pos="0" name="hw.device" value="Access Controller"/>
|
|
703
|
+
<param pos="1" name="host.mac"/>
|
|
704
|
+
<param pos="2" name="hw.product"/>
|
|
705
|
+
</fingerprint>
|
|
706
|
+
<fingerprint pattern="^CN=securelogin.arubanetworks.com,">
|
|
707
|
+
<description>Aruba Wireless Controller</description>
|
|
708
|
+
<example>CN=securelogin.arubanetworks.com,O=Aruba Networks,C=US</example>
|
|
709
|
+
<example>CN=securelogin.arubanetworks.com,OU=Instant,O=Aruba Networks,L=Sunnyvale,ST=California,C=US</example>
|
|
710
|
+
<param pos="0" name="hw.vendor" value="Aruba Networks"/>
|
|
711
|
+
<param pos="0" name="hw.device" value="Wireless Controller"/>
|
|
712
|
+
<param pos="0" name="hw.product" value="Captive Portal"/>
|
|
713
|
+
</fingerprint>
|
|
714
|
+
<fingerprint pattern="^CN=Fireware web CA,OU=Fireware,O=WatchGuard$">
|
|
715
|
+
<description>WatchGuard Firewall</description>
|
|
716
|
+
<example>CN=Fireware web CA,OU=Fireware,O=WatchGuard</example>
|
|
717
|
+
<param pos="0" name="hw.vendor" value="WatchGuard"/>
|
|
718
|
+
<param pos="0" name="hw.device" value="Firewall"/>
|
|
719
|
+
<param pos="0" name="os.vendor" value="WatchGuard"/>
|
|
720
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:watchguard:fireware:-"/>
|
|
721
|
+
<param pos="0" name="os.product" value="Fireware"/>
|
|
722
|
+
</fingerprint>
|
|
723
|
+
<fingerprint pattern="^CN=[0-9\.]+,OU=SSL-VPN,O=SonicWALL\\, Inc\.,L=Sunnyvale,ST=CA,C=US$">
|
|
724
|
+
<description>SonicWALL Firewall</description>
|
|
725
|
+
<example>CN=192.168.200.1,OU=SSL-VPN,O=SonicWALL\, Inc.,L=Sunnyvale,ST=CA,C=US</example>
|
|
726
|
+
<param pos="0" name="hw.vendor" value="SonicWALL"/>
|
|
727
|
+
<param pos="0" name="hw.device" value="VPN"/>
|
|
728
|
+
<param pos="0" name="os.vendor" value="SonicWALL"/>
|
|
729
|
+
<param pos="0" name="os.product" value="VPN"/>
|
|
730
|
+
<param pos="0" name="os.family" value="VPN"/>
|
|
731
|
+
</fingerprint>
|
|
732
|
+
<fingerprint pattern="^CN=.*\.akamai\.net,O=Akamai Technologies\\, Inc\.,L=Cambridge,ST=Massachusetts,C=US$">
|
|
733
|
+
<description>Akamai Global Host</description>
|
|
734
|
+
<example>CN=a248.e.akamai.net,O=Akamai Technologies\, Inc.,L=Cambridge,ST=Massachusetts,C=US</example>
|
|
735
|
+
<param pos="0" name="service.vendor" value="Akamai"/>
|
|
736
|
+
<param pos="0" name="service.product" value="GHost"/>
|
|
737
|
+
<param pos="0" name="os.vendor" value="Akamai"/>
|
|
738
|
+
<param pos="0" name="os.device" value="Web proxy"/>
|
|
739
|
+
</fingerprint>
|
|
740
|
+
<fingerprint pattern="^CN=HP_3PAR_">
|
|
741
|
+
<description>HP 3PAR</description>
|
|
742
|
+
<example>CN=HP_3PAR_1626615</example>
|
|
743
|
+
<example>CN=HP_3PAR_CZ3601VYFJ</example>
|
|
744
|
+
<param pos="0" name="hw.vendor" value="HP"/>
|
|
745
|
+
<param pos="0" name="hw.device" value="Storage"/>
|
|
746
|
+
<param pos="0" name="hw.product" value="3PAR"/>
|
|
747
|
+
</fingerprint>
|
|
748
|
+
<fingerprint pattern="^CN=(?:alienvault|VirtualUSMAllInOne)$">
|
|
749
|
+
<description>Alienvault OSSIM</description>
|
|
750
|
+
<example>CN=alienvault</example>
|
|
751
|
+
<example>CN=VirtualUSMAllInOne</example>
|
|
752
|
+
<param pos="0" name="os.vendor" value="AlienVault"/>
|
|
753
|
+
<param pos="0" name="os.device" value="Appliance"/>
|
|
754
|
+
<param pos="0" name="os.product" value="OSSIM"/>
|
|
755
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
756
|
+
</fingerprint>
|
|
757
|
+
<fingerprint pattern="^CN=Canon (iR-[a-zA-Z0-9\.\-\_]+)$">
|
|
758
|
+
<description>Canon iR-ADV Printer</description>
|
|
759
|
+
<example os.product="iR-ADV">CN=Canon iR-ADV</example>
|
|
760
|
+
<param pos="0" name="hw.device" value="Printer"/>
|
|
761
|
+
<param pos="0" name="hw.vendor" value="Canon"/>
|
|
762
|
+
<param pos="0" name="os.device" value="Printer"/>
|
|
763
|
+
<param pos="0" name="os.vendor" value="Canon"/>
|
|
764
|
+
<param pos="1" name="hw.product"/>
|
|
765
|
+
<param pos="1" name="os.product"/>
|
|
766
|
+
</fingerprint>
|
|
767
|
+
<fingerprint pattern="^CN=Canon Imaging Product$">
|
|
768
|
+
<description>Canon iR-ADV Printer</description>
|
|
769
|
+
<example>CN=Canon Imaging Product</example>
|
|
770
|
+
<param pos="0" name="hw.device" value="Printer"/>
|
|
771
|
+
<param pos="0" name="hw.vendor" value="Canon"/>
|
|
772
|
+
<param pos="0" name="os.device" value="Printer"/>
|
|
773
|
+
<param pos="0" name="os.vendor" value="Canon"/>
|
|
774
|
+
</fingerprint>
|
|
775
|
+
<fingerprint pattern="^CN=tnsappliance.*,O=Tenable Network Security\\, Inc\.,L=Columbia,ST=Maryland,C=US$">
|
|
776
|
+
<description>Tenable Appliance</description>
|
|
777
|
+
<example>CN=tnsappliance-b088a321,OU=--,O=Tenable Network Security\, Inc.,L=Columbia,ST=Maryland,C=US</example>
|
|
778
|
+
<example>CN=tnsappliance,OU=--,O=Tenable Network Security\, Inc.,L=Columbia,ST=Maryland,C=US</example>
|
|
779
|
+
<param pos="0" name="hw.device" value="Appliance"/>
|
|
780
|
+
<param pos="0" name="hw.vendor" value="Tenable"/>
|
|
781
|
+
<param pos="0" name="hw.product" value="Tenable Core"/>
|
|
782
|
+
<param pos="0" name="os.device" value="Appliance"/>
|
|
783
|
+
<param pos="0" name="os.vendor" value="Tenable"/>
|
|
784
|
+
<param pos="0" name="os.product" value="Tenable Core"/>
|
|
785
|
+
</fingerprint>
|
|
786
|
+
<fingerprint pattern="^CN=extrahop,OU=extrahop\.com,O=ExtraHop,C=US$">
|
|
787
|
+
<description>ExtraHop Appliance</description>
|
|
788
|
+
<example>CN=extrahop,OU=extrahop.com,O=ExtraHop,C=US</example>
|
|
789
|
+
<param pos="0" name="hw.device" value="Appliance"/>
|
|
790
|
+
<param pos="0" name="hw.vendor" value="ExtraHop"/>
|
|
791
|
+
<param pos="0" name="hw.product" value="Discover"/>
|
|
792
|
+
<param pos="0" name="os.device" value="Appliance"/>
|
|
793
|
+
<param pos="0" name="os.vendor" value="ExtraHop"/>
|
|
794
|
+
<param pos="0" name="os.product" value="Discover"/>
|
|
795
|
+
</fingerprint>
|
|
796
|
+
<fingerprint pattern="^CN=Ruckus Wireless ZoneDirector SN-(\d+),O=Ruckus Wireless\\, Inc\.,ST=CA,C=US$">
|
|
797
|
+
<description>Ruckus Zone Director</description>
|
|
798
|
+
<example ruckus.serial_number="221301007591">CN=Ruckus Wireless ZoneDirector SN-221301007591,O=Ruckus Wireless\, Inc.,ST=CA,C=US</example>
|
|
799
|
+
<param pos="0" name="hw.device" value="Wireless Controller"/>
|
|
800
|
+
<param pos="0" name="hw.vendor" value="Ruckus"/>
|
|
801
|
+
<param pos="0" name="hw.product" value="Zone Director"/>
|
|
802
|
+
<param pos="0" name="os.device" value="Wireless Controller"/>
|
|
803
|
+
<param pos="0" name="os.vendor" value="Ruckus"/>
|
|
804
|
+
<param pos="0" name="os.product" value="Zone Director"/>
|
|
805
|
+
<param pos="1" name="ruckus.serial_number"/>
|
|
806
|
+
</fingerprint>
|
|
807
|
+
<fingerprint pattern="^CN=DT([^\s]+) Series,O=NEC Corporation,ST=Tokyo,C=JP$">
|
|
808
|
+
<description>NEC DT Series IP Phone</description>
|
|
809
|
+
<example>CN=DT800 Series,O=NEC Corporation,ST=Tokyo,C=JP</example>
|
|
810
|
+
<param pos="0" name="os.vendor" value="NEC"/>
|
|
811
|
+
<param pos="0" name="os.device" value="IP Phone"/>
|
|
812
|
+
<param pos="0" name="hw.vendor" value="NEC"/>
|
|
813
|
+
<param pos="0" name="hw.device" value="IP Phone"/>
|
|
814
|
+
<param pos="1" name="hw.product"/>
|
|
815
|
+
</fingerprint>
|
|
816
|
+
<fingerprint pattern="^CN=([a-fA-F0-9]{12}),O=Polycom Inc\.$">
|
|
817
|
+
<description>NEC DT Series IP Phone</description>
|
|
818
|
+
<example host.mac="64167F169981">CN=64167F169981,O=Polycom Inc.</example>
|
|
819
|
+
<param pos="0" name="os.vendor" value="Polycom"/>
|
|
820
|
+
<param pos="0" name="os.device" value="IP Phone"/>
|
|
821
|
+
<param pos="0" name="hw.vendor" value="Polycom"/>
|
|
822
|
+
<param pos="0" name="hw.device" value="IP Phone"/>
|
|
823
|
+
<param pos="0" name="hw.product" value="SoundPoint"/>
|
|
824
|
+
<param pos="1" name="host.mac"/>
|
|
825
|
+
</fingerprint>
|
|
826
|
+
<fingerprint pattern="^CN=EN Software Production & Release,OU=Enterprise Networks,O=Siemens AG,L=Munich,ST=Germany,C=DE$">
|
|
827
|
+
<description>Siemens EN Software</description>
|
|
828
|
+
<example>CN=EN Software Production & Release,OU=Enterprise Networks,O=Siemens AG,L=Munich,ST=Germany,C=DE</example>
|
|
829
|
+
<param pos="0" name="os.vendor" value="Siemens"/>
|
|
830
|
+
<param pos="0" name="os.device" value="IP Phone"/>
|
|
831
|
+
<param pos="0" name="hw.vendor" value="Siemens"/>
|
|
832
|
+
<param pos="0" name="hw.device" value="IP Phone"/>
|
|
833
|
+
</fingerprint>
|
|
834
|
+
<fingerprint pattern="^CN=SecureConnect server,O=Quest,ST=CA,C=US$">
|
|
835
|
+
<description>SecureConnect SSL VPN</description>
|
|
836
|
+
<example>CN=SecureConnect server,O=Quest,ST=CA,C=US</example>
|
|
837
|
+
<param pos="0" name="hw.vendor" value="SecureConnect"/>
|
|
838
|
+
<param pos="0" name="hw.device" value="VPN"/>
|
|
839
|
+
<param pos="0" name="os.vendor" value="SecureConnect"/>
|
|
840
|
+
<param pos="0" name="os.device" value="VPN"/>
|
|
841
|
+
</fingerprint>
|
|
842
|
+
<fingerprint pattern="^CN=RecoverPoint,OU=Data Protection and Availability Division,O=EMC Corporation,L=Hopkinton,ST=Massachusetts,C=US$">
|
|
843
|
+
<description>RecoverPoint Appliance</description>
|
|
844
|
+
<example>CN=RecoverPoint,OU=Data Protection and Availability Division,O=EMC Corporation,L=Hopkinton,ST=Massachusetts,C=US</example>
|
|
845
|
+
<param pos="0" name="hw.device" value="Appliance"/>
|
|
846
|
+
<param pos="0" name="hw.vendor" value="EMC"/>
|
|
847
|
+
<param pos="0" name="hw.product" value="RecoverPoint"/>
|
|
848
|
+
<param pos="0" name="os.device" value="Appliance"/>
|
|
849
|
+
<param pos="0" name="os.vendor" value="EMC"/>
|
|
850
|
+
<param pos="0" name="os.product" value="RecoverPoint"/>
|
|
851
|
+
</fingerprint>
|
|
852
|
+
<fingerprint pattern="^CN=[a-fA-F0-9]+,O=Palo Alto Networks,L=Santa Clara,ST=CA,C=US$">
|
|
853
|
+
<description>Palo Alto Firewall</description>
|
|
854
|
+
<example>CN=d9fc2294968367a3a8ad1acd4c816c78444e6ea4d69869b40cc9751951fd3693,O=Palo Alto Networks,L=Santa Clara,ST=CA,C=US</example>
|
|
855
|
+
<param pos="0" name="hw.vendor" value="Palo Alto Networks"/>
|
|
856
|
+
<param pos="0" name="hw.device" value="Firewall"/>
|
|
857
|
+
<param pos="0" name="os.vendor" value="Palo Alto Networks"/>
|
|
858
|
+
<param pos="0" name="os.product" value="PANOS"/>
|
|
859
|
+
<param pos="0" name="os.device" value="Firewall"/>
|
|
860
|
+
</fingerprint>
|
|
861
|
+
<fingerprint pattern="^CN=VMware default certificate,OU=vCenterServer.*,O=VMware\\, Inc\.$">
|
|
862
|
+
<description>VMWare vCenter</description>
|
|
863
|
+
<example>CN=VMware default certificate,OU=vCenterServer_2013.09.26_220623,O=VMware\, Inc.</example>
|
|
864
|
+
<param pos="0" name="service.vendor" value="VMWare"/>
|
|
865
|
+
<param pos="0" name="service.product" value="vCenter"/>
|
|
866
|
+
</fingerprint>
|
|
867
|
+
<fingerprint pattern="^CN=selfappliance,OU=Engineering,O=Symplified,L=Boulder,ST=Colorado,C=US$">
|
|
868
|
+
<description>Symplified IAM Appliance (now RSA)</description>
|
|
869
|
+
<example>CN=selfappliance,OU=Engineering,O=Symplified,L=Boulder,ST=Colorado,C=US</example>
|
|
870
|
+
<param pos="0" name="hw.vendor" value="Symplified"/>
|
|
871
|
+
<param pos="0" name="hw.device" value="Appliance"/>
|
|
872
|
+
<param pos="0" name="hw.product" value="IAM"/>
|
|
873
|
+
</fingerprint>
|
|
874
|
+
<fingerprint pattern="^CN=OpenWrt,L=Leipzig,ST=Saxony,C=DE$">
|
|
875
|
+
<description>OpenWRT WAP</description>
|
|
876
|
+
<example>CN=OpenWrt,L=Leipzig,ST=Saxony,C=DE</example>
|
|
877
|
+
<param pos="0" name="os.vendor" value="OpenWRT"/>
|
|
878
|
+
<param pos="0" name="os.device" value="WAP"/>
|
|
879
|
+
</fingerprint>
|
|
880
|
+
<fingerprint pattern="^CN=axis-([a-fA-F0-9]{12}),O=Axis Communications AB$">
|
|
881
|
+
<description>OpenWRT WAP</description>
|
|
882
|
+
<example host.mac="accc8ea31abf">CN=axis-accc8ea31abf,O=Axis Communications AB</example>
|
|
883
|
+
<param pos="0" name="hw.vendor" value="AXIS"/>
|
|
884
|
+
<param pos="0" name="hw.device" value="Web Cam"/>
|
|
885
|
+
<param pos="0" name="os.vendor" value="AXIS"/>
|
|
886
|
+
<param pos="0" name="os.device" value="Web Cam"/>
|
|
887
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
888
|
+
<param pos="1" name="host.mac"/>
|
|
889
|
+
</fingerprint>
|
|
890
|
+
<fingerprint pattern="^CN=Dell_OpenManage.*,OU=PG,O=Dell Inc\.,ST=Texas,C=US$">
|
|
891
|
+
<description>Dell OpenManage</description>
|
|
892
|
+
<example>CN=Dell_OpenManage01,OU=PG,O=Dell Inc.,ST=Texas,C=US</example>
|
|
893
|
+
<param pos="0" name="hw.vendor" value="Dell"/>
|
|
894
|
+
<param pos="0" name="hw.device" value="Appliance"/>
|
|
895
|
+
<param pos="0" name="hw.product" value="OpenManage"/>
|
|
896
|
+
<param pos="0" name="os.vendor" value="Dell"/>
|
|
897
|
+
<param pos="0" name="os.device" value="Appliance"/>
|
|
898
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
899
|
+
</fingerprint>
|
|
900
|
+
<fingerprint pattern="^CN=Equallogic PS Array,OU=Dell Equallogic,O=Dell Inc\.,L=Nashua,ST=New Hampshire,C=US$">
|
|
901
|
+
<description>Dell EqualLogic PS Array</description>
|
|
902
|
+
<example>CN=Equallogic PS Array,OU=Dell Equallogic,O=Dell Inc.,L=Nashua,ST=New Hampshire,C=US</example>
|
|
903
|
+
<param pos="0" name="hw.vendor" value="Dell"/>
|
|
904
|
+
<param pos="0" name="hw.device" value="Storage"/>
|
|
905
|
+
<param pos="0" name="hw.product" value="EqualLogic"/>
|
|
906
|
+
<param pos="0" name="os.vendor" value="Dell"/>
|
|
907
|
+
<param pos="0" name="os.device" value="Storage"/>
|
|
908
|
+
<param pos="0" name="os.product" value="EqualLogic"/>
|
|
909
|
+
</fingerprint>
|
|
910
|
+
<fingerprint pattern="^CN=opennac\.test,L=Madrid,ST=Madrid,C=ES$">
|
|
911
|
+
<description>OpenNAC Appliance</description>
|
|
912
|
+
<example>CN=opennac.test,L=Madrid,ST=Madrid,C=ES</example>
|
|
913
|
+
<param pos="0" name="hw.vendor" value="OpenNAC"/>
|
|
914
|
+
<param pos="0" name="hw.device" value="Appliance"/>
|
|
915
|
+
<param pos="0" name="hw.product" value="OpenNAC"/>
|
|
916
|
+
<param pos="0" name="os.vendor" value="OpenNAC"/>
|
|
917
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
918
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
919
|
+
</fingerprint>
|
|
920
|
+
<fingerprint pattern="^CN=SmartEdge Sensor,O=AirMagnet,L=Sunnyvale,ST=California,C=US$">
|
|
921
|
+
<description>AirMagnet SmartEdge Sensor</description>
|
|
922
|
+
<example>CN=SmartEdge Sensor,O=AirMagnet,L=Sunnyvale,ST=California,C=US</example>
|
|
923
|
+
<param pos="0" name="hw.vendor" value="AirMagnet"/>
|
|
924
|
+
<param pos="0" name="hw.device" value="Wireless Controller"/>
|
|
925
|
+
<param pos="0" name="hw.product" value="SmartEdge Sensor"/>
|
|
926
|
+
</fingerprint>
|
|
927
|
+
<fingerprint pattern="^CN=Sensor WebUI,O=AirDefense Inc.,L=Alpharetta,ST=GA,C=US$">
|
|
928
|
+
<description>AirDefense Inc Sensor</description>
|
|
929
|
+
<example>CN=Sensor WebUI,O=AirDefense Inc.,L=Alpharetta,ST=GA,C=US</example>
|
|
930
|
+
<param pos="0" name="hw.vendor" value="AirDefense"/>
|
|
931
|
+
<param pos="0" name="hw.device" value="Wireless Controller"/>
|
|
932
|
+
<param pos="0" name="hw.product" value="Sensor"/>
|
|
933
|
+
</fingerprint>
|
|
934
|
+
<fingerprint pattern="^CN=(usg[^_]+)_([a-fA-F0-9]{12})$">
|
|
935
|
+
<description>ZyWall Router</description>
|
|
936
|
+
<example hw.product="usg20w" host.mac="5CF4AB615FAC">CN=usg20w_5CF4AB615FAC</example>
|
|
937
|
+
<example hw.product="usg20w" host.mac="5067F0BC1D3C">CN=usg20w_5067F0BC1D3C</example>
|
|
938
|
+
<example hw.product="usg20" host.mac="107BEF0AD201">CN=usg20_107BEF0AD201</example>
|
|
939
|
+
<param pos="0" name="hw.vendor" value="ZyWall"/>
|
|
940
|
+
<param pos="0" name="hw.device" value="Broadband Router"/>
|
|
941
|
+
<param pos="1" name="hw.product"/>
|
|
942
|
+
<param pos="2" name="host.mac"/>
|
|
943
|
+
</fingerprint>
|
|
944
|
+
<fingerprint pattern="^CN=([a-fA-F0-9]{16}),O=Philips Hue,C=NL$">
|
|
945
|
+
<description>Philips Hue Personal Wireless Lighting</description>
|
|
946
|
+
<example host.mac_eui64="001788fffe4f1999">CN=001788fffe4f1999,O=Philips Hue,C=NL</example>
|
|
947
|
+
<param pos="0" name="hw.vendor" value="Philips"/>
|
|
948
|
+
<param pos="0" name="hw.product" value="Hue"/>
|
|
949
|
+
<param pos="0" name="hw.device" value="Light Bulb"/>
|
|
950
|
+
<param pos="1" name="host.mac_eui64"/>
|
|
951
|
+
</fingerprint>
|
|
952
|
+
</fingerprints>
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: recog
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 2.
|
|
4
|
+
version: 2.3.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Rapid7 Research
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2019-
|
|
11
|
+
date: 2019-04-10 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: rspec
|
|
@@ -229,6 +229,8 @@ files:
|
|
|
229
229
|
- xml/ssh_banners.xml
|
|
230
230
|
- xml/telnet_banners.xml
|
|
231
231
|
- xml/x11_banners.xml
|
|
232
|
+
- xml/x509_issuers.xml
|
|
233
|
+
- xml/x509_subjects.xml
|
|
232
234
|
homepage: https://www.github.com/rapid7/recog
|
|
233
235
|
licenses: []
|
|
234
236
|
metadata: {}
|
|
@@ -248,7 +250,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
248
250
|
version: '0'
|
|
249
251
|
requirements: []
|
|
250
252
|
rubyforge_project:
|
|
251
|
-
rubygems_version: 2.
|
|
253
|
+
rubygems_version: 2.6.11
|
|
252
254
|
signing_key:
|
|
253
255
|
specification_version: 4
|
|
254
256
|
summary: Network service fingerprint database, classes, and utilities
|