HTTPS related fingerprints - Githubissues

rapid7 / recog

Pattern recognition for hosts, services, and content

Other

662 stars 195 forks source link

HTTPS related fingerprints #358

Closed tsellers-r7 closed 3 years ago

tsellers-r7 commented 3 years ago

Description

This PR includes fingerprint updates based on recent data. Most changes revolve around HTML titles or certificates.

NOTE: I have attempted to normalize some of the VMware ESX / ESXi values around what already exists in the NTP and SNMP databases.

ESXi replaced ESX. They were released side by side starting with version 4.1. All versions of 5.x (starting in 2010) were ESXi only.
My preference would be to set the os.family to vSphere and the os.product to either ESX or ESXi as appropriate but I do not want to break any existing dependencies.

Types of changes

Fingerprints

Checklist:

[x] I have updated the documentation accordingly (or changes are not required).
[x] I have added tests to cover my changes (or new tests are not required).
[x] All new and existing tests passed.

tsellers-r7 commented 3 years ago

@hdm - FYI for VMware normalization (see comment) and cert improvements.