rapid7 / recog

Pattern recognition for hosts, services, and content

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

FreeBSD SNMP banners incorrectly assert Linux fingerprints; regex is too loose

jhart-r7 opened this issue · comments

https://github.com/rapid7/recog/blob/master/xml/snmp_sysdescr.xml#L2489-2512

Those should be FreeBSD, not Linux.

Also, that second fingerprint is just too loose -- while it is likely correct that anything beginning with FreeBSD is in fact FreeBSD, there is almost certainly more we could get from the fingerprint provided this overly loose regex wasn't there and the match didn't occur.