diff --git a/nmap-os-db b/nmap-os-db index 745031385..1c8791a2d 100644 --- a/nmap-os-db +++ b/nmap-os-db @@ -87,7 +87,8 @@ IE(R=N) # 2 Wire RG2701HG-00 # 2Wire 2701HG-B # 2700HG-B 2Wire gateway -Fingerprint 2Wire 1701HG, 2700HG, 2700HG-B, 2701HG-B, or RG2701HG wireless ADSL modem +# 2Wire, Inc. 3800HGV-B Software Version 6.1.9.24-enh.tm +Fingerprint 2Wire 1701HG, 2700HG, 2700HG-B, 2701HG-B, RG2701HG, or 3800HGV-B wireless ADSL modem Class 2Wire | embedded || WAP SEQ(SP=5A-A0%GCD=1-6%ISR=98-A9%TI=I%TS=A) OPS(O1=M5B4NNSW0NNNT11%O2=M578NNSW0NNNT11%O3=M280W0NNNT11%O4=M218NNSW0NNNT11%O5=M218NNSW0NNNT11%O6=M109NNSNNT11) @@ -823,9 +824,11 @@ IE(DFI=S%T=3B-45%TG=40%CD=S) # Aastra ip phone 57i Revision 0, Firmware Version 2.3.0.82 # e-STUDIO 520 and an e-STUDIO 850 # TOSHIBA e-STUDIO281c multifunction printer +# Ethernet Routing Switch 4548GT-PWR HW:06 FW:5.2.0.3 SW:v5.3.1.001 BN:01 (c) Nortel Networks # VxWorks? -- Ed. -Fingerprint Aastra 57i IP phone or Toshiba e-STUDIO 281c, 351c, 3510c, 520, or 850 printer +Fingerprint Aastra 57i IP phone; Nortel 4548GT switch; or Toshiba e-STUDIO 281c, 351c, 3510c, 520, or 850 printer Class Aastra | embedded || VoIP phone +Class Nortel | embedded || printer Class Toshiba | embedded || printer SEQ(SP=FF-10B%GCD=1-6%ISR=FF-10F%TI=I%II=I%SS=S%TS=7) OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11) @@ -2227,12 +2230,10 @@ IE(DFI=N%T=FA-104%TG=FF%CD=S) # Canon imageRUNNER multifunction printer C10221 # Dell 3130cn Color Laser, Firmware Version 200903231111, Network Firmware Version 13.161 # Xerox Phaser 8560DN -Fingerprint VxWorks: Apple AirPort Extreme v5.7 or AirPort Express v6.3; Canon imageRUNNER printer; Dell 3130cn printer; Kyocera FS-4020DN printer; or Xerox Phaser 8800MFP-series printer -Class Apple | VxWorks || WAP -Class Dell | VxWorks || printer -Class Canon | VxWorks || printer -Class Kyocera | VxWorks || printer -Class Xerox | VxWorks || printer +# Kyocera Mita FS-1350DN +Fingerprint VxWorks +Class Wind River | VxWorks || WAP +Class Wind River | VxWorks || printer SEQ(SP=D1-110%GCD=1-6%ISR=F7-111%TI=I%II=I%SS=S%TS=6) OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11) WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000) @@ -2679,6 +2680,7 @@ IE(DFI=S%T=3B-45%TG=40%CD=S) # iPhone 3GS version 3.0 (7S341) Model: MB715LL # iPhone 2G (original iPhone) model nr. A1203, Darwin 10.0.0d3 Darwin Kernel Version 10.0.0d3: Wed May 13 22:11:58 PDT 2009; root:xnu-1357.2.89~4/RELEASE_ARM_S5L8900X iPhone1,1 arm M68AP Darwin, iPhone OS 3.0 # iPhone OS v. 3.1.2(7D11) running on iPod Touch (2nd Gen) +# Iphone OS 3.1.3 Fingerprint Apple iPhone mobile phone or iPod touch media player (iPhone OS 3.0 - 3.2, Darwin 10.0.0d3) Class Apple | iPhone OS | 3.X | phone Class Apple | iPhone OS | 3.X | media device @@ -3354,7 +3356,9 @@ IE(DFI=S%T=3B-45%TG=40%CD=S) # Darwin 10.2.0 Darwin Kernel Version 10.2.0: Tue Nov 3 10:37:10 PST 2009; root:xnu-1486.2.11~1/RELEASE_I386 i386 # jailbroken iphone ios4 # iPhone OS 4.02 (8A400 ) -Fingerprint Apple Mac OS X 10.5 - 10.6.2 (Leopard - Snow Leopard) or iOS 4.02 (Darwin 9.0.0b5 - 10.2.0) +# Apple iPhone 3GS phone running Apple iOS 4.0.1 (8A306), +# Apple iPhone 4 16GB running Apple iOS 4.1 public release +Fingerprint Apple Mac OS X 10.5 - 10.6.3 (Leopard - Snow Leopard) or iOS 4.0 - 4.1 (Darwin 9.0.0b5 - 10.2.0) Class Apple | iOS | 4.X | general purpose Class Apple | Mac OS X | 10.6.X | general purpose Class Apple | Mac OS X | 10.6.X | general purpose @@ -3498,9 +3502,10 @@ IE(DFI=S%T=2F-39%TG=40%CD=S) # MacBook Pro running Macos X 10.5.5 # Version 6.0 (Build 6001: Service Pack 1) +# 10.6.3 (Snow Leopard) Fingerprint Microsoft Windows Server 2008 SP1 Class Microsoft | Windows | 2008 | general purpose -SEQ(SP=FF-109%GCD=1-6%ISR=104-10E%TI=I%II=I%SS=S%TS=U) +SEQ(SP=E5-109%GCD=1-6%ISR=104-114%TI=I%CI=I%II=I%SS=S%TS=U) OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4) WIN(W1=FAF0%W2=FAF0%W3=FAF0%W4=FAF0%W5=FAF0%W6=FAF0) ECN(R=Y%DF=N%T=7B-85%TG=80%W=FAF0%O=M5B4%CC=N%Q=) @@ -6022,6 +6027,7 @@ IE(DFI=S%T=FA-104%TG=FF%CD=Z) # Sunfire T2000 Service controller # Avaya T3 IP II.3 Compact (IP Phone), SW Version: T441_0DE.a3i, Bootloader Version: B02.03 # Nortel Ethernet Routing Switch 5520-48T-PWR HW:32 FW:4.2.0.12 SW:v4.2.0.002 +# Philips SOPHO iS3000 PBX system # [Sun ALOM is VxWorks for sure. --Ed.] Fingerprint VxWorks Class Wind River | VxWorks || printer @@ -6046,7 +6052,8 @@ U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G) IE(DFI=S%T=3B-45%TG=40%CD=S) # Canon 4000r printer -Fingerprint Canon 4000r printer +# Canon MP800R printer +Fingerprint Canon PIXMA MP800R or 4000R printer Class Canon | embedded || printer SEQ(SP=E-2A%GCD=10000|20000|30000|40000|50000|60000%ISR=C6-D0%TI=I%II=I%SS=S%TS=U) OPS(O1=M5B4%O2=M578%O3=M5B4%O4=M5B4%O5=M218%O6=M109) @@ -6101,6 +6108,7 @@ IE(DFI=N%T=FA-104%TG=FF%CD=Z) # Canon iR6570 laser printer # Canon iR2270 Laser Printer # Canon iR4570 Laser Printer +# ReactOS Operating System, version 0.3.11-20091212-r44553 Fingerprint Canon imageRUNNER 2270, 4570, or 6570 laser printer Class Canon | embedded || printer SEQ(SP=97-A1%GCD=1-6%ISR=9D-A7%TI=I%TS=1|2) @@ -7105,9 +7113,10 @@ IE(DFI=N%T=3B-45%TG=40%CD=S) # Cisco 7941 phone running SIP firmware 8.3(3)SR2 # Cisco CP-7961G-GE, SCCP41.8-3-3SR2S # Cisco CP-7941G, SCCP41.8-3-4SR1S -Fingerprint Cisco IP Phone 7941 or 7961 +# Cisco IP Phone 7975 +Fingerprint Cisco IP Phone 7941, 7961, or 7975 Class Cisco | embedded || VoIP phone -SEQ(SP=F9-109%GCD=1-6%ISR=FE-112%TI=I%II=I%SS=S%TS=U) +SEQ(SP=C9-109%GCD=1-6%ISR=FE-112%TI=I%CI=I%II=I%SS=S%TS=U) OPS(O1=M578%O2=M578%O3=M578%O4=M578%O5=M578%O6=M578) WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000) ECN(R=N) @@ -8395,7 +8404,8 @@ IE(R=N) # 6513-core-switch# Cisco IOS Software, s72033_rp Software (s72033_rp-ADVENTERPRISEK9_WAN-M), Version 12.2(33)SXI # Cisco IOS Software, Catalyst 4500 L3 Switch Software (cat4500e-IPBASEK9-M), Version 12.2(52)XO, RELEASE SOFTWARE (fc1) -Fingerprint Cisco Catalyst 4500 or 6513 swich (IOS 12.2) +# WS-C3560X-48 12.2(53)SE2 C3560E-UNIVERSALK9-M +Fingerprint Cisco Catalyst 3560, 4500, or 6513 swich (IOS 12.2) Class Cisco | IOS | 12.X | switch SEQ(SP=F8-10C%GCD=1-6%ISR=106-110%TI=RD%II=RI%TS=U) OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109) @@ -8414,7 +8424,8 @@ IE(DFI=S%T=FA-104%TG=FF%CD=S) # Cisco Catalyst 6509 (setup to perform routing) # IOS (tm) c6sup2_rp Software (c6sup2_rp-JK2S-M), Version 12.1(26)E4, RELEASE SOFTWARE (fc1) # Cisco Catalyst 6500 running 12.1(11r)E1, RELEASE SOFTWARE (fc1) -Fingerprint Cisco Catalyst 6500-series switch (IOS 12.1) +# Cisco Catalyst 3560 switch [WS-C3560-48PS] running IOS 12.2(35)SE1. +Fingerprint Cisco Catalyst 3560 or 6500-series switch (IOS 12.1 - 12.2) Class Cisco | IOS | 12.X | switch SEQ(SP=E6-107%GCD=1-6%ISR=105-114%TI=RD%II=RI%TS=U) OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109) @@ -9321,7 +9332,8 @@ IE(DFI=N%T=FA-104%TG=FF%CD=Z) # DGL-4300 - Wireless 108G Gaming Router, Firmware version: 1.8, 2007/03/01 # DLINK DIR-615 wireless access router Firmware Version: 2.25RU # D-LINK DIR-855 Wireless N Quadband Gigabit Router -Fingerprint D-Link DPR-1260 print server; or DGL-4300, DIR-615, DIR-625, DIR-655, or DIR-855 WAP +# D-Link Systems DGL-4500. +Fingerprint D-Link DPR-1260 print server; or DGL-4300, DGL-4500, DIR-615, DIR-625, DIR-655, or DIR-855 WAP Class D-Link | embedded || print server Class D-Link | embedded || WAP SEQ(SP=95-B5%GCD=1-6%ISR=A9-BB%TI=I%II=I%SS=S%TS=U) @@ -9724,8 +9736,10 @@ IE(DFI=N%T=3B-45%TG=40%CD=S) # DWL-900AP+ Wireless Access Point # USRobotics USR5450 802.11g Wireless Turbo Multi-Function Access Point. Running firmware version 1.53b10. -Fingerprint D-Link DWL-900AP+ or USRobotics USR5450 WAP +# PLANET WAP-1966 +Fingerprint D-Link DWL-900AP+, Planet WAP-1966, or USRobotics USR5450 WAP Class D-Link | embedded || WAP +Class Planet | embedded || WAP Class USRobotics | embedded || WAP SEQ(SP=B-15%GCD=FA7F|1F4FE|2EF7D|3E9FC|4E47B|5DEFA%ISR=96-A0%TI=I%II=I%SS=S%TS=U) OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4) @@ -10727,10 +10741,13 @@ IE(R=N) # Develop INEO+ 203 # Konica Minolta C203 PS Multi-function printer. # Konica Minaolta magicolor 5670 EN -Fingerprint Develop ineo+203, or Konica Minolta C203 or MagiColor 5670 printer +# Arris TM602G, Firmware Revision: 6.1.77 +# ARRIS DOCSIS 2.0 / PacketCable 1.0 Touchstone Telephony Modem HW_REV: 32 +Fingerprint Arris TM602G cable modem, Develop ineo+203, or Konica Minolta C203 or MagiColor 5670 printer +Class Arris | embedded || broadband router Class Develop | embedded || printer Class Konica Minolta | embedded || printer -SEQ(SP=100-10A%GCD=1-6%ISR=FC-10E%TI=I%CI=I%II=I%SS=S%TS=8) +SEQ(SP=FE-10A%GCD=1-6%ISR=FC-10E%TI=I%CI=I%II=I%SS=S%TS=8) OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11) WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000) ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0%CC=N%Q=) @@ -11591,7 +11608,8 @@ U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=4210%RIPCK=Z%RUCK=0%RUD=G) IE(DFI=S%T=FA-104%TG=FF%CD=S) # Fortinet Fortigate FGT-50B - OS Version : 4.0 MR2 -Fingerprint Fortinet FortiGate-50B firewall +# Fortigate 310B +Fingerprint Fortinet FortiGate-50B or 310B firewall Class Fortinet | embedded || firewall SEQ(SP=F9-10B%GCD=1-6%ISR=105-10F%TI=BI|RD%TS=7|9) OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4ST11NW1%O6=M5B4ST11) @@ -12114,7 +12132,8 @@ IE(DFI=S%T=3B-45%TG=40%CD=S) # FreeBSD 5.4 on VMware (x86) # FreeBSD 5.4-RELEASE FreeBSD 5.4-RELEASE #0: Wed Aug 31 15:36:36 MSD 2005 i386 # Kylin v2.1, derived from FreeBSD 5.3 -Fingerprint FreeBSD 5.4 or 5.5 (x86) +# FreeBSD 5.3-RELEASE FreeBSD 5.3-RELEASE #1: Thu Dec 23 00:27:47 CST 2004 root@mydomain.com:/usr/obj/usr/src/sys/NS i386 +Fingerprint FreeBSD 5.3 or 5.5 (x86) Class FreeBSD | FreeBSD | 5.X | general purpose SEQ(SP=D6-10C%GCD=1-6%ISR=105-111%TI=I%II=I%SS=S%TS=7) OPS(O1=M5B4NW1NNT11NNS%O2=M5B4NW1NNT11NNS%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11NNS%O5=M5B4NW1NNT11NNS%O6=M5B4NNT11NNS) @@ -13289,7 +13308,9 @@ IE(DFI=S%T=3B-45%TG=40%CD=S) # FreeBSD 8.0-CURRENT # FreeBSD 8.0-RELEASE-p1 FreeBSD 8.0-RELEASE-p1 #10: Wed Dec 16 13:38:00 PST 2009 i386 # FreeBSD 7.3 x64 -Fingerprint FreeBSD 7.0-RELEASE-p1 - 8.0-CURRENT +# FreeBSD 8.1-RC2 +# FreeBSD 8.1-RELEASE-p1 FreeBSD 8.1-RELEASE-p1 #0: Sat Oct 16 23:26:34 CEST 2010 arm, Seagate FreeAgent Dockstar +Fingerprint FreeBSD 7.0-RELEASE-p1 - 8.1-RELEASE-p1 Class FreeBSD | FreeBSD | 7.X | general purpose Class FreeBSD | FreeBSD | 8.X | general purpose SEQ(SP=EC-10E%GCD=1-6%ISR=FC-112%TI=I%CI=I%II=I%SS=S%TS=20|21|22) @@ -14347,7 +14368,8 @@ U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=0%RUD=G) IE(DFI=S%T=3B-45%TG=40%CD=S) # HP JetDirect - J3110A - Firmware versioin G.08.40 -Fingerprint HP JetDirect J3110A print server +# Printserver is an HP 2591A. +Fingerprint HP JetDirect 2591A print server Class HP | embedded || print server SEQ(SP=0%GCD=1-6%ISR=16-20%TI=I%II=I%SS=S%TS=U) OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4) @@ -14506,8 +14528,10 @@ IE(DFI=N%T=3B-45%TG=40%CD=S) # hp LaserJet 1320 series, Formatter Number: E7206LL, Service ID: 16053, Firmware Datecode: 20041024, Network Statistics Firmware Version: V.28.05 # HP LaserJet 2550N Color LaserJet # Deskjet 1220C -Fingerprint HP DeskJet 1220, or LaserJet 1320 or 2550n printer +# TippingPoint IPS TOS Version 2.5.5.6994 Model Number 110 +Fingerprint HP DeskJet 1220, or LaserJet 1320 or 2550n printer; or TippingPoint 110 IPS Class HP | embedded || printer +Class TippingPoint | embedded || firewall SEQ(SP=94-9E%GCD=1-6%ISR=9B-A5%TI=I%II=I%SS=S%TS=1) OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11) WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000) @@ -15749,7 +15773,9 @@ IE(DFI=S%T=3B-45%TG=40%CD=S) # HP Switch: "PROCURVE J9028B" adm Software version PB.02.09, Hardware version R01 # HP ProCurve 1800-24G J9028B running firmware version PB.03.02 -Fingerprint HP ProCurve 1800-24G switch +# Cisco Small Business Switch SLM2008 Firmware Revision 2.0.0.10 +Fingerprint Cisco SLM2008 or HP ProCurve 1800-24G switch +Class Cisco | embedded || switch Class HP | embedded || switch SEQ(SP=C-16%GCD=A|14|1E|28|32%ISR=1E-28%TI=I%CI=I%II=I%SS=S%TS=U) OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4) @@ -18688,7 +18714,9 @@ IE(DFI=N%T=C2-CC%TG=FF%CD=S) # IPCOP 1.4.15; Linux 2.4.34 #1 Fri Mar 9 23:51:29 GMT 2007 i586 pentium-mmx i386 GNU/Linux running IPCOP v. 1.4.15 w/ Copfilter v. 0.82.1 # Ipcop 1.4.18 # IPcop firewall1.4.21, Linux 2.4.36 #1 Tue Jul 22 13:13:24 GMT 2008 i686 pentium2 i386 GNU/Linux IPCOP1.4.21 -Fingerprint IPCop firewall 1.4.10 - 1.4.21 (Linux 2.4.31 - 2.4.36) +# Linux 2.6.22.19-72.e19 #1 SMP Thu Nov 26 12:12:03 EST 2009 i686 i686 i386 GNU/Linux, gui indicates Endian Firewall Appliance release 2.3-1 (Deployset #0) (c) 2004-2009 +Fingerprint Endian 2.3 or IPCop firewall 1.4.10 - 1.4.21 (Linux 2.4.31 - 2.6.22) +Class Endian | Linux | 2.4.X | firewall Class IPCop | Linux | 2.4.X | firewall SEQ(SP=BA-D2%GCD=1-6%ISR=C6-D4%TI=Z%II=I%TS=U) OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4) @@ -20396,7 +20424,8 @@ IE(DFI=N%T=F5-FF%TG=FF%CD=S) # Linksys SPA901 SIP phone # Linksys SPA-921 hw 1.0.0(1436) -Fingerprint Linksys SPA901 or SPA921 SIP VoIP phone +# Linksys SPA941 with the latest firmware from 2005 +Fingerprint Linksys SPA901, SPA921, or SPA 941 SIP VoIP phone Class Linksys | embedded || VoIP phone SEQ(SP=F8-108%GCD=1-6%ISR=106-112%TI=I%II=I%SS=S%TS=U) OPS(O1=M5B0%O2=M5B0%O3=M5B0%O4=M5B0%O5=M5B0%O6=M5B0) @@ -21296,7 +21325,8 @@ IE(DFI=N%T=3B-45%TG=40%CD=S) # Linux 2.4.21-32.0.1.EL Red Hat Enterprise 3.1 # Linux 2.4.33.3 #6 Fri Sep 1 04:15:45 CDT 2006 i686 pentium4 i386 GNU/Linux [Slackware Linux 11.0] # Linux 2.4.20-021stab028.17.777-enterprise #1 SMP Tue Jul 19 19:31:27 MSD 2005 i686 GNU/Linux debian sarge -Fingerprint Linux 2.4.20 - 2.4.33 (x86) +# Linux 2.4.37-gentoox #1 Mon Jan 5 19:04:21 GMT 2009 i686 Celeron (Coppermine) GenuineIntel GNU/Linux +Fingerprint Linux 2.4.20 - 2.4.37 Class Linux | Linux | 2.4.X | general purpose SEQ(SP=B0-CE%GCD=1-6%ISR=C3-D5%TI=Z%II=I%TS=7) OPS(O1=M400CST11NW0%O2=M400CST11NW0%O3=M400CNNT11NW0%O4=M400CST11NW0%O5=M400CST11NW0%O6=M400CST11) @@ -21970,7 +22000,8 @@ IE(DFI=N%T=3B-45%TG=40%CD=S) # Buffalo WHR-G54S running the OpenWRT White Russian 0.9 distribution # OpenWRT Kamikaze 7.09 on an Asus wl500gP # OpenWrt KAMIKAZE (8.09.2, r18961), running Linux kernel 2.4.35.4. -Fingerprint OpenWrt 0.9 - 8.09.2 (Linux 2.4.30 - 2.4.35) +# OpenWrt 10.03 running a 2.4.37 kernel (brcm-2.4). +Fingerprint OpenWrt 0.9 - 10.03 (Linux 2.4.30 - 2.4.37) Class Linux | Linux | 2.4.X | WAP SEQ(SP=B3-D2%GCD=1-6%ISR=C0-D7%TI=Z%II=I%TS=U) OPS(O1=M5B4NNSNW0%O2=M5B4NNSNW0%O3=M5B4NW0%O4=M5B4NNSNW0%O5=M5B4NNSNW0%O6=M5B4NNS) @@ -22987,7 +23018,8 @@ IE(DFI=N%T=3B-45%TG=40%CD=S) # Linux 2.6.20-16-generic #2 SMP Sun Sep 23 19:50:39 UTC 2007 i686 GNU/Linux # Linux 2.6.22-1-mepis-smp #1 SMP PREEMPT Mon Feb 18 21:44:02 EST 2008 i686 GNU/Linux # Linux 2.6.24-19-xen #1 SMP Wed Aug 20 21:08:51 UTC 2008 x86_64 GNU/Linux -Fingerprint Linux 2.6.17 - 2.6.24 +# Linux 2.6.30-2-amd64 #1 SMP Mon Dec 7 05:21:45 UTC 2009 x86_64 GNU/Linux +Fingerprint Linux 2.6.17 - 2.6.30 Class Linux | Linux | 2.6.X | general purpose SEQ(SP=A5-D5%GCD=1-6%ISR=A7-D7%TI=Z%II=I%TS=U) OPS(O1=M400C%O2=M400C%O3=M400C%O4=M400C%O5=M400C%O6=M400C) @@ -28382,9 +28414,10 @@ IE(DFI=N%T=3B-45%TG=40%CD=S) # D-Link DNS-323, firmware v1.09 # D-Link DNS-323 1TB NAS Device # Wireless N Gigabit TRENDNet TEW-639GR Router +# Yealink Enterprise IP Phone, model SIP-T22P Fingerprint Linux 2.6.13 (embedded) Class Linux | Linux | 2.6.X | WAP -SEQ(SP=C2-D0%GCD=1-6%ISR=CA-D4%TI=Z%CI=I%II=I%TS=7) +SEQ(SP=A4-D0%GCD=1-6%ISR=BE-D4%TI=Z%CI=I%II=I%TS=7) OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4ST11NW1%O6=M5B4ST11) WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0) ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW1%CC=N%Q=) @@ -36754,7 +36787,9 @@ U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G) IE(DFI=S%T=3B-45%TG=40%CD=S) # Mitel 5212 SIP Phone -Fingerprint Mitel 5212 SIP Phone +# DragonWave Horizon 24GHz radio: get sw version -> Bootloader software: NCC 1.1.0 +Fingerprint DragonWave Horizon WAP or Mitel 5212 SIP Phone +Class DragonWave | embedded || WAP Class Mitel | embedded || VoIP phone SEQ(SP=102-10C%GCD=1-6%ISR=106-110%TI=I%II=I%SS=S%TS=U) OPS(O1=%O2=%O3=%O4=%O5=%O6=) @@ -37717,8 +37752,10 @@ U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G) IE(DFI=S%T=FA-104%TG=FF%CD=S) # Netgear CG814WG v2 (Comcast) -Fingerprint Netgear CG814WG v2 wireless cable modem -Class Netgear | embedded || broadband router +# Thomson TWG870U DOCSIS 3.0-compliant VoIP cable modem with software STBA.01.05. +Fingerprint Netgear CG814WG v2 or Thomson TWG870U wireless cable modem +Class Netgear | embedded || WAP +Class Thomson | embedded || WAP SEQ(SP=E7-107%GCD=1-6%ISR=EF-10B%TI=I%II=I%SS=S%TS=7) OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11) WIN(W1=43E0%W2=4110%W3=423C%W4=4074%W5=4180%W6=403D) @@ -41757,7 +41794,9 @@ IE(DFI=S%T=3B-45%TG=40%CD=S) # WebSTAR EPX2203 (Hardware Version: v2.0) (Software Version: v2.0.2r1152-060125epx2203-v202r1152-060125c-us-5-358.bin) # Webstar EPX2203 Series cable modem # ZyXEL ES-1528 Switch Firmware Version V1.12(ARD.3) Not ZynOS as it is not a layer 3 switch, only layer 2. -Fingerprint Scientific Atlanta WebSTAR EPX2203 cable modem +# Cisco EPC3212, Bootloader Version 2.3.0_R1 +Fingerprint Cisco EPC3212 or Scientific Atlanta WebSTAR EPX2203 cable modem +Class Cisco | embedded || broadband router Class Scientific Atlanta | embedded || broadband router SEQ(SP=CE-106%GCD=1-6%ISR=F6-10E%TI=I%II=I%SS=S%TS=7) OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11) @@ -43475,7 +43514,8 @@ IE(DFI=N%T=FA-104%TG=FF%CD=S) # Modified Sony PSP running 3.90M33-2 custom firmware # Playstation Portable (PSP), running a FTP server. -Fingerprint Sony PSP game console (modified, running Custom Firmware 3.90 M33-2) +# Sony PSP, 5.50 GEN-D (Full), hacked version of the m33 (Dark-Alex) firmware, running PSP FTPd +Fingerprint Sony PSP game console (modified, running Custom Firmware 3.90 - 5.50) Class Sony | embedded || game console SEQ(SP=C9-D9%GCD=1-6%ISR=D8-E2%TI=I%II=I%SS=S%TS=1) OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11) @@ -53091,3 +53131,88 @@ T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=R%O=%RD=0%Q=) T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=R%O=%RD=0%Q=) U1(DF=N%T=3B-45%TG=40%IPL=138%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G) IE(DFI=S%T=3B-45%TG=40%CD=Z) + +# Cisco IOS (tm) 3600 Software (C3620-IK9O3S6-M), Version 12.3(16), RELEASE SOFTWARE (fc 4) +Fingerprint Cisco C3620 router (IOS 12.3) +Class Cisco | IOS | 12.X | router +SEQ(SP=FD-107%GCD=1-6%ISR=103-10F%TI=Z%II=RI%TS=U) +OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109) +WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020) +ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=) +T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=) +T2(R=N) +T3(R=N) +T4(R=N) +T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=) +T6(R=N) +T7(R=N) +U1(DF=N%T=7B-85%TG=80%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G) +IE(DFI=S%T=FA-104%TG=FF%CD=S) + +# Xerox Phaser 6250DP +Fingerprint Xerox Phaser 6250DP printer +Class Xerox | embedded || printer +SEQ(SP=14-1E%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=99-A3%TI=I%CI=RD%II=I%SS=S%TS=U) +OPS(O1=M200NW0%O2=M200NW0%O3=M200NW0%O4=M200NW0%O5=M200NW0%O6=M200) +WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000) +ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M200NW0%CC=N%Q=) +T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=) +T2(R=Y%DF=Y%T=3B-45%TG=40%W=80%S=A%A=S+%F=AR%O=WANM109T10S%RD=0%Q=) +T3(R=Y%DF=N%T=3B-45%TG=40%W=100%S=A%A=S+%F=AR%O=WANM109T10S%RD=0%Q=) +T4(R=Y%DF=Y%T=3B-45%TG=40%W=400%S=A%A=S+%F=AR%O=WANM109T10S%RD=0%Q=) +T5(R=Y%DF=N%T=3B-45%TG=40%W=7A69%S=A%A=S+%F=AR%O=WANM109T10S%RD=0%Q=) +T6(R=Y%DF=Y%T=3B-45%TG=40%W=8000%S=A%A=S+%F=AR%O=WANM109T10S%RD=0%Q=) +T7(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=A%A=S+%F=AR%O=WFNM109T10S%RD=0%Q=) +U1(R=N) +IE(DFI=S%T=3B-45%TG=40%CD=S) + +# Windows Server 2003 RC2 SP1 +Fingerprint Microsoft Windows Server 2003 SP1 +Class Microsoft | Windows | 2003 | general purpose +SEQ(SP=101-10B%GCD=1-6%ISR=104-10E%TI=I%II=I%SS=S%TS=0) +OPS(O1=M576NW0NNT00NNS%O2=M576NW0NNT00NNS%O3=M576NW0NNT00%O4=M576NW0NNT00NNS%O5=M576NW0NNT00NNS%O6=M576NNT00NNS) +WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000) +ECN(R=Y%DF=N%T=7B-85%TG=80%W=4000%O=M576NW0NNS%CC=N%Q=) +T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=) +T2(R=N) +T3(R=N) +T4(R=N) +T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=) +T6(R=N) +T7(R=N) +U1(R=N) +IE(DFI=S%T=7B-85%TG=80%CD=Z) + +# Intermec EasyCoder PM4i +Fingerprint Intermec PM4i label printer +Class Intermec | embedded || printer +SEQ(SP=92-9C%GCD=1-6%ISR=99-A3%TI=RD%CI=RD|RI%II=RI%TS=1) +OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11) +WIN(W1=43E0%W2=4110%W3=423C%W4=4000%W5=4180%W6=403D) +ECN(R=Y%DF=N%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=) +T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=) +T2(R=N) +T3(R=Y%DF=N%T=3B-45%TG=40%W=403D%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=) +T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=) +T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=) +T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=) +T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=) +U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=134%RID=G%RIPCK=G%RUCK=G%RUD=G) +IE(DFI=S%T=FA-104%TG=FF%CD=S) + +# Fedora Core 1 2.4.22-1.2199.8.legacy.nptlsmp +Fingerprint Linux 2.4.7 +Class Linux | Linux | 2.4.X | general purpose +SEQ(SP=A3-BB%GCD=1-6%ISR=B6-C0%TI=Z%CI=Z%II=I%TS=7) +OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11) +WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0) +ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=) +T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=) +T2(R=N) +T3(R=N) +T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=) +T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=) +T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=) +T7(R=N) +U1(R=N) +IE(DFI=N%T=3B-45%TG=40%CD=S)