From e727b19b036afb966ba26dc0dd16d434059fe223 Mon Sep 17 00:00:00 2001 From: Simone Facchini Date: Tue, 22 Aug 2023 10:55:38 +0200 Subject: [PATCH 1/4] added smb_banners.xml, identifiers updated --- identifiers/os_product.txt | 7 + xml/smb_banners.xml | 296 +++++++++++++++++++++++++++++++++++++ 2 files changed, 303 insertions(+) create mode 100644 xml/smb_banners.xml diff --git a/identifiers/os_product.txt b/identifiers/os_product.txt index 895b419a..e9ccddb0 100644 --- a/identifiers/os_product.txt +++ b/identifiers/os_product.txt @@ -307,7 +307,10 @@ WebCSU Windows Windows 10 Windows 10 Mobile +Windows 10 or Windows Server Windows 10 or Windows Server 2016 +Windows 10 or Windows Server 2019 +Windows 11 Windows 2000 Windows 2000 Datacenter Server Windows 2000 Server @@ -319,6 +322,8 @@ Windows 8.1 Windows 8.1 or Windows Server 2012 R2 Windows 95 Windows CE +Windows Home Server +Windows Home Server 2011 Windows NT Windows NT Server Windows NT Workstation @@ -335,7 +340,9 @@ Windows Server 2012 Windows Server 2012 R2 Windows Server 2016 Windows Server 2019 +Windows Server 2022 Windows Vista +Windows Vista or Windows Server 2008 Windows XP Wireless Controller Wireless LAN Controller diff --git a/xml/smb_banners.xml b/xml/smb_banners.xml new file mode 100644 index 00000000..6ae1b766 --- /dev/null +++ b/xml/smb_banners.xml @@ -0,0 +1,296 @@ + + + + + Windows 10, Version 22H2 + 10.0.19045 + + + + + + + + + Windows 11, Version 22H2 + 10.0.22621 + + + + + + + + + Windows 10, Version 21H2 + 10.0.19044 + + + + + + + + + Windows 11, Version 21H2 + 10.0.22000 + + + + + + + + + Windows Server 2022 + 10.0.20348 + + + + + + + + Windows 10, Version 21H1 + 10.0.19043 + + + + + + + + + Windows 10 / Windows Server, Version 20H2 + 10.0.19042 + + + + + + + + + Windows 10 / Windows Server, Version 2004 + 10.0.19041 + + + + + + + + + Windows 10 / Windows Server, Version 1909 + 10.0.18363 + + + + + + + + + Windows 10, Version 1903 + 10.0.18362 + + + + + + + + + Windows Server 2008, Service Pack 2, Rollup KB4489887 + 6.0.6003 + + + + + + + + + Windows 10 / Windows Server 2019, Version 1809 + 10.0.17763 + + + + + + + + + Windows 10, Version 1803 + 10.0.17134 + + + + + + + + + Windows 10, Version 1709 + 10.0.16299 + + + + + + + + + Windows 10, Version 1703 + 10.0.15063 + + + + + + + + + Windows 10 / Windows Server 2016, Version 1607 + 10.0.14393 + + + + + + + + + Windows 10, Version 1511 + 10.0.10586 + + + + + + + + + Windows 10, Version 1507 + 10.0.10240 + + + + + + + + + Windows 8.1 / Windows Server 2012 R2 + 6.3.9600 + + + + + + + + Windows 8 / Windows Server 2012 + 6.2.9200 + + + + + + + + Windows Home Server 2011 + 6.1.8400 + + + + + + + + Windows 7 / Windows Server 2008 R2, Service Pack 1 + 6.1.7601 + + + + + + + + + Windows 7 / Windows Server 2008 R2 + 6.1.7600 + + + + + + + + Windows Vista / Windows Server 2008, Service Pack 2 + 6.0.6002 + + + + + + + + + Windows XP, Service Pack 3 + 5.1.2600 + + + + + + + + + Windows Server 2008 + 6.0.6001 + + + + + + + + Windows Home Server + 5.2.4500 + + + + + + + + Windows Server 2003, Service Pack 2 + 5.2.3790 + + + + + + + + + Windows Server 2003 R2 + 5.2.3790 + + + + + + + + Windows Server 2003, Service Pack 1 + 5.2.3790.1180 + + + + + + + + \ No newline at end of file From 7f39d3ea4c63e9d536162f35ffbab9897c9326ae Mon Sep 17 00:00:00 2001 From: Simone Facchini Date: Tue, 22 Aug 2023 11:07:54 +0200 Subject: [PATCH 2/4] removed useless regexp symbols --- xml/smb_banners.xml | 60 ++++++++++++++++++++++----------------------- 1 file changed, 30 insertions(+), 30 deletions(-) diff --git a/xml/smb_banners.xml b/xml/smb_banners.xml index 6ae1b766..b3924b9a 100644 --- a/xml/smb_banners.xml +++ b/xml/smb_banners.xml @@ -1,7 +1,7 @@ - + Windows 10, Version 22H2 10.0.19045 @@ -11,7 +11,7 @@ - + Windows 11, Version 22H2 10.0.22621 @@ -21,7 +21,7 @@ - + Windows 10, Version 21H2 10.0.19044 @@ -31,7 +31,7 @@ - + Windows 11, Version 21H2 10.0.22000 @@ -41,7 +41,7 @@ - + Windows Server 2022 10.0.20348 @@ -50,7 +50,7 @@ - + Windows 10, Version 21H1 10.0.19043 @@ -60,7 +60,7 @@ - + Windows 10 / Windows Server, Version 20H2 10.0.19042 @@ -70,7 +70,7 @@ - + Windows 10 / Windows Server, Version 2004 10.0.19041 @@ -80,7 +80,7 @@ - + Windows 10 / Windows Server, Version 1909 10.0.18363 @@ -90,7 +90,7 @@ - + Windows 10, Version 1903 10.0.18362 @@ -100,7 +100,7 @@ - + Windows Server 2008, Service Pack 2, Rollup KB4489887 6.0.6003 @@ -110,7 +110,7 @@ - + Windows 10 / Windows Server 2019, Version 1809 10.0.17763 @@ -120,7 +120,7 @@ - + Windows 10, Version 1803 10.0.17134 @@ -130,7 +130,7 @@ - + Windows 10, Version 1709 10.0.16299 @@ -140,7 +140,7 @@ - + Windows 10, Version 1703 10.0.15063 @@ -150,7 +150,7 @@ - + Windows 10 / Windows Server 2016, Version 1607 10.0.14393 @@ -160,7 +160,7 @@ - + Windows 10, Version 1511 10.0.10586 @@ -170,7 +170,7 @@ - + Windows 10, Version 1507 10.0.10240 @@ -180,7 +180,7 @@ - + Windows 8.1 / Windows Server 2012 R2 6.3.9600 @@ -189,7 +189,7 @@ - + Windows 8 / Windows Server 2012 6.2.9200 @@ -198,7 +198,7 @@ - + Windows Home Server 2011 6.1.8400 @@ -207,7 +207,7 @@ - + Windows 7 / Windows Server 2008 R2, Service Pack 1 6.1.7601 @@ -217,7 +217,7 @@ - + Windows 7 / Windows Server 2008 R2 6.1.7600 @@ -226,7 +226,7 @@ - + Windows Vista / Windows Server 2008, Service Pack 2 6.0.6002 @@ -236,7 +236,7 @@ - + Windows XP, Service Pack 3 5.1.2600 @@ -246,7 +246,7 @@ - + Windows Server 2008 6.0.6001 @@ -255,7 +255,7 @@ - + Windows Home Server 5.2.4500 @@ -264,7 +264,7 @@ - + Windows Server 2003, Service Pack 2 5.2.3790 @@ -274,7 +274,7 @@ - + Windows Server 2003 R2 5.2.3790 @@ -283,7 +283,7 @@ - + Windows Server 2003, Service Pack 1 5.2.3790.1180 From 30523d5ea8391a3196fada10fa222fab0c861d67 Mon Sep 17 00:00:00 2001 From: Simone Facchini Date: Tue, 22 Aug 2023 11:18:19 +0200 Subject: [PATCH 3/4] fixed wrong fingerprint --- xml/smb_banners.xml | 13 ++----------- 1 file changed, 2 insertions(+), 11 deletions(-) diff --git a/xml/smb_banners.xml b/xml/smb_banners.xml index b3924b9a..44f9890f 100644 --- a/xml/smb_banners.xml +++ b/xml/smb_banners.xml @@ -265,21 +265,12 @@ - Windows Server 2003, Service Pack 2 - 5.2.3790 - - - - - - - - - Windows Server 2003 R2 + Windows Server 2003 R2, Service Pack 2 5.2.3790 + From 5b02d46c5992b824ce7bbb930e88e7f0b3c89c28 Mon Sep 17 00:00:00 2001 From: Simone Facchini Date: Tue, 22 Aug 2023 11:24:07 +0200 Subject: [PATCH 4/4] removed fingerprint with wrong regex --- xml/smb_banners.xml | 10 ---------- 1 file changed, 10 deletions(-) diff --git a/xml/smb_banners.xml b/xml/smb_banners.xml index 44f9890f..b48b8692 100644 --- a/xml/smb_banners.xml +++ b/xml/smb_banners.xml @@ -274,14 +274,4 @@ - - Windows Server 2003, Service Pack 1 - 5.2.3790.1180 - - - - - - - \ No newline at end of file