From fc69ad90b281579017f0971de097a05f5012f528 Mon Sep 17 00:00:00 2001
From: nnposter <nnposter@e0a8ed71-7df4-0310-8962-fdc924857419>
Date: Tue, 30 Aug 2016 21:12:59 +0000
Subject: [PATCH] Adds a fingerprint for VMware ESXi hypervisor

---
 .../http-default-accounts-fingerprints.lua    | 27 +++++++++++++++++++
 scripts/http-default-accounts.nse             |  1 +
 2 files changed, 28 insertions(+)

diff --git a/nselib/data/http-default-accounts-fingerprints.lua b/nselib/data/http-default-accounts-fingerprints.lua
index 105854370..5e56e3604 100644
--- a/nselib/data/http-default-accounts-fingerprints.lua
+++ b/nselib/data/http-default-accounts-fingerprints.lua
@@ -749,6 +749,33 @@ table.insert(fingerprints, {
   end
 })
 
+---
+--Virtualization systems
+---
+table.insert(fingerprints, {
+  -- Version 5.0.0
+  name = "VMware ESXi",
+  category = "virtualization",
+  paths = {
+    {path = "/"}
+  },
+  target_check = function (host, port, path, response)
+    return response.status == 200
+           and response.body
+           and response.body:find("ID_EESX_Welcome", 1, true)
+           and response.body:find("/folder?dcPath=ha-datacenter", 1, true)
+  end,
+  login_combos = {
+    {username = "root", password = ""}
+  },
+  login_check = function (host, port, path, user, pass)
+    -- realm="VMware HTTP server"
+    return try_http_basic_login(host, port,
+                               url.absolute(path, "folder?dcPath=ha-datacenter"),
+                               user, pass, false)
+  end
+})
+
 ---
 --Remote consoles
 ---
diff --git a/scripts/http-default-accounts.nse b/scripts/http-default-accounts.nse
index 4e2fbe6d5..1baa02ff5 100644
--- a/scripts/http-default-accounts.nse
+++ b/scripts/http-default-accounts.nse
@@ -20,6 +20,7 @@ You may select a category if you wish to reduce the number of requests. We have
 * <code>industrial</code> - Industrial systems
 * <code>printer</code> - Network-attached printers and printer servers
 * <code>storage</code> - Storage devices
+* <code>virtualization</code> - Virtualization systems
 * <code>console</code> - Remote consoles
 
 Please help improve this script by adding new entries to nselib/data/http-default-accounts.lua