Blame: data/xml/banner/generic.xml - sqlmapproject/sqlmap

Automatic SQL injection and database takeover tool

36983 0 0 Python

Minor enhancement to fingerprint the back-end DBMS operating system (type, version, release, distribution, codename and service pack) by parsing the DBMS banner value when both -f and -b are provided: adapted the code and added XML files defining regular expressions for matching. Example of the -f -b output now on MySQL 5.0.67 running on latest Ubuntu: --8<-- back-end DBMS: active fingerprint: MySQL >= 5.0.38 and < 5.1.2 comment injection fingerprint: MySQL 5.0.67 banner parsing fingerprint: MySQL 5.0.67 html error message fingerprint: MySQL back-end DBMS operating system: Linux Ubuntu 8.10 (Intrepid) --8<-- 2008-11-15 23:41:31 +00:00			`<?xml version="1.0" encoding="UTF-8"?>`

			`<root>`
			`<!-- Windows -->`
Added new HTTP response headers on which fingerprint web app technology and web server OS. Updated documentation. 2008-11-19 15:33:39 +00:00
Minor update of banner regexes 2025-11-28 13:16:40 +01:00			`<regexp value="(Microsoft\|Windows\|Win32\|Win64\|WOW64\|Cygwin\|MinGW)">`
Minor enhancement to fingerprint the back-end DBMS operating system (type, version, release, distribution, codename and service pack) by parsing the DBMS banner value when both -f and -b are provided: adapted the code and added XML files defining regular expressions for matching. Example of the -f -b output now on MySQL 5.0.67 running on latest Ubuntu: --8<-- back-end DBMS: active fingerprint: MySQL >= 5.0.38 and < 5.1.2 comment injection fingerprint: MySQL 5.0.67 banner parsing fingerprint: MySQL 5.0.67 html error message fingerprint: MySQL back-end DBMS operating system: Linux Ubuntu 8.10 (Intrepid) --8<-- 2008-11-15 23:41:31 +00:00			`<info type="Windows"/>`
			`</regexp>`

Bug fix 2013-12-01 21:22:29 +01:00			`<regexp value="Service Pack 0">`
			`<info sp="0"/>`
			`</regexp>`

			`<regexp value="Service Pack 1">`
Major enhancement to the engine to parse XML files and matches on DBMS banner and HTTP response headers. Initial web application technology fingerprint (for the moment based only on X-Powered-By HTTP response header and not shown yet to the user). Minor layout adjustments. 2008-11-17 17:41:02 +00:00			`<info sp="1"/>`
Minor enhancement to show the DBMS operating system (if fingerprinted) also when only -b option is provided since it's an information that sqlmap get parsing the DBMS banner. Got rid completely of useless passive fuzzing. 2008-11-17 11:22:03 +00:00			`</regexp>`

Bug fix 2013-12-01 21:22:29 +01:00			`<regexp value="Service Pack 2">`
			`<info sp="2"/>`
			`</regexp>`

			`<regexp value="Service Pack 3">`
			`<info sp="3"/>`
			`</regexp>`

			`<regexp value="Service Pack 4">`
			`<info sp="4"/>`
			`</regexp>`

Update of xml/banner files 2018-04-10 11:35:39 +02:00			`<regexp value="Service Pack 5">`
			`<info sp="5"/>`
			`</regexp>`

Update of parsed versions 2016-06-01 10:44:08 +02:00			`<!-- Reference: https://msdn.microsoft.com/en-us/library/windows/desktop/ms724832%28v=vs.85%29.aspx -->`

Minor updates 2018-10-02 14:56:20 +02:00			`<regexp value="Windows.*\b10\.0">`
Minor update of fingerprinting data 2022-10-07 20:55:49 +02:00			`<info type="Windows" distrib="2016\|2019\|2022\|10\|11"/>`
Update of parsed versions 2016-06-01 10:44:08 +02:00			`</regexp>`

Minor updates 2018-10-02 14:56:20 +02:00			`<regexp value="Windows.*\b6\.3">`
Update of parsed versions 2016-06-01 10:44:08 +02:00			`<info type="Windows" distrib="2012 R2\|8.1"/>`
Minor update to properly differentiate Windows 2003 by 2008 via HTTP response headers 2010-10-27 10:09:47 +00:00			`</regexp>`

Minor updates 2018-10-02 14:56:20 +02:00			`<regexp value="Windows.*\b6\.2">`
Update of parsed versions 2016-06-01 10:44:08 +02:00			`<info type="Windows" distrib="2012\|8"/>`
Minor enhancement to fingerprint the back-end DBMS operating system (type, version, release, distribution, codename and service pack) by parsing the DBMS banner value when both -f and -b are provided: adapted the code and added XML files defining regular expressions for matching. Example of the -f -b output now on MySQL 5.0.67 running on latest Ubuntu: --8<-- back-end DBMS: active fingerprint: MySQL >= 5.0.38 and < 5.1.2 comment injection fingerprint: MySQL 5.0.67 banner parsing fingerprint: MySQL 5.0.67 html error message fingerprint: MySQL back-end DBMS operating system: Linux Ubuntu 8.10 (Intrepid) --8<-- 2008-11-15 23:41:31 +00:00			`</regexp>`

Minor updates 2018-10-02 14:56:20 +02:00			`<regexp value="Windows.*\b6\.1">`
Update of parsed versions 2016-06-01 10:44:08 +02:00			`<info type="Windows" distrib="2008 R2\|7"/>`
Minor bug fixes for -d 2012-01-13 21:46:21 +00:00			`</regexp>`

Minor updates 2018-10-02 14:56:20 +02:00			`<regexp value="Windows.*\b6\.0">`
Update of parsed versions 2016-06-01 10:44:08 +02:00			`<info type="Windows" distrib="2008\|Vista"/>`
Minor enhancement to show the DBMS operating system (if fingerprinted) also when only -b option is provided since it's an information that sqlmap get parsing the DBMS banner. Got rid completely of useless passive fuzzing. 2008-11-17 11:22:03 +00:00			`</regexp>`

Minor updates 2018-10-02 14:56:20 +02:00			`<regexp value="Windows.*\b5\.2">`
Minor adjustments and bug fixes 2008-12-17 20:11:18 +00:00			`<info type="Windows" distrib="2003"/>`
			`</regexp>`

Minor updates 2018-10-02 14:56:20 +02:00			`<regexp value="Windows.*\b5\.1">`
Minor enhancement to show the DBMS operating system (if fingerprinted) also when only -b option is provided since it's an information that sqlmap get parsing the DBMS banner. Got rid completely of useless passive fuzzing. 2008-11-17 11:22:03 +00:00			`<info type="Windows" distrib="XP"/>`
			`</regexp>`

Minor updates 2018-10-02 14:56:20 +02:00			`<regexp value="Windows.*\b5\.0">`
Minor enhancement to show the DBMS operating system (if fingerprinted) also when only -b option is provided since it's an information that sqlmap get parsing the DBMS banner. Got rid completely of useless passive fuzzing. 2008-11-17 11:22:03 +00:00			`<info type="Windows" distrib="2000"/>`
			`</regexp>`

Minor updates 2018-10-02 14:56:20 +02:00			`<regexp value="Windows.*\b4\.0">`
Minor enhancement to fingerprint the web server operating system and the web application technology by parsing also HTTP response Server header. Refactor libraries and plugins that parses XML to fingerprint and show on standard output the information. Updated changelog. 2008-11-18 17:42:46 +00:00			`<info type="Windows" distrib="NT 4.0"/>`
			`</regexp>`

Minor updates 2018-10-02 14:56:20 +02:00			`<regexp value="Windows.*\b3\.0">`
Minor enhancement to fingerprint the web server operating system and the web application technology by parsing also HTTP response Server header. Refactor libraries and plugins that parses XML to fingerprint and show on standard output the information. Updated changelog. 2008-11-18 17:42:46 +00:00			`<info type="Windows" distrib="NT 4.0"/>`
			`</regexp>`

Minor updates 2018-10-02 14:56:20 +02:00			`<regexp value="Windows.*\b2\.0">`
Minor enhancement to fingerprint the web server operating system and the web application technology by parsing also HTTP response Server header. Refactor libraries and plugins that parses XML to fingerprint and show on standard output the information. Updated changelog. 2008-11-18 17:42:46 +00:00			`<info type="Windows" distrib="NT 4.0"/>`
			`</regexp>`
Minor enhancement to fingerprint the back-end DBMS operating system (type, version, release, distribution, codename and service pack) by parsing the DBMS banner value when both -f and -b are provided: adapted the code and added XML files defining regular expressions for matching. Example of the -f -b output now on MySQL 5.0.67 running on latest Ubuntu: --8<-- back-end DBMS: active fingerprint: MySQL >= 5.0.38 and < 5.1.2 comment injection fingerprint: MySQL 5.0.67 banner parsing fingerprint: MySQL 5.0.67 html error message fingerprint: MySQL back-end DBMS operating system: Linux Ubuntu 8.10 (Intrepid) --8<-- 2008-11-15 23:41:31 +00:00
			`<!-- Linux -->`
Added new HTTP response headers on which fingerprint web app technology and web server OS. Updated documentation. 2008-11-19 15:33:39 +00:00
Minor enhancement to fingerprint the back-end DBMS operating system (type, version, release, distribution, codename and service pack) by parsing the DBMS banner value when both -f and -b are provided: adapted the code and added XML files defining regular expressions for matching. Example of the -f -b output now on MySQL 5.0.67 running on latest Ubuntu: --8<-- back-end DBMS: active fingerprint: MySQL >= 5.0.38 and < 5.1.2 comment injection fingerprint: MySQL 5.0.67 banner parsing fingerprint: MySQL 5.0.67 html error message fingerprint: MySQL back-end DBMS operating system: Linux Ubuntu 8.10 (Intrepid) --8<-- 2008-11-15 23:41:31 +00:00			`<regexp value="Linux">`
			`<info type="Linux"/>`
			`</regexp>`

Minor update 2020-01-07 11:48:02 +01:00			`<regexp value="\bArch\b">`
			`<info type="Linux" distrib="Arch"/>`
			`</regexp>`

Minor enhancement to fingerprint the web server operating system and the web application technology by parsing also HTTP response Server header. Refactor libraries and plugins that parses XML to fingerprint and show on standard output the information. Updated changelog. 2008-11-18 17:42:46 +00:00			`<regexp value="CentOS">`
			`<info type="Linux" distrib="CentOS"/>`
			`</regexp>`

Minor enhancement to fingerprint the back-end DBMS operating system (type, version, release, distribution, codename and service pack) by parsing the DBMS banner value when both -f and -b are provided: adapted the code and added XML files defining regular expressions for matching. Example of the -f -b output now on MySQL 5.0.67 running on latest Ubuntu: --8<-- back-end DBMS: active fingerprint: MySQL >= 5.0.38 and < 5.1.2 comment injection fingerprint: MySQL 5.0.67 banner parsing fingerprint: MySQL 5.0.67 html error message fingerprint: MySQL back-end DBMS operating system: Linux Ubuntu 8.10 (Intrepid) --8<-- 2008-11-15 23:41:31 +00:00			`<regexp value="Cobalt">`
			`<info type="Linux" distrib="Cobalt"/>`
			`</regexp>`

			`<regexp value="Conectiva">`
			`<info type="Linux" distrib="Conectiva"/>`
			`</regexp>`

			`<regexp value="Debian">`
Minor fix 2013-02-05 11:10:21 +01:00			`<info type="Linux" distrib="Debian"/>`
Minor enhancement to fingerprint the back-end DBMS operating system (type, version, release, distribution, codename and service pack) by parsing the DBMS banner value when both -f and -b are provided: adapted the code and added XML files defining regular expressions for matching. Example of the -f -b output now on MySQL 5.0.67 running on latest Ubuntu: --8<-- back-end DBMS: active fingerprint: MySQL >= 5.0.38 and < 5.1.2 comment injection fingerprint: MySQL 5.0.67 banner parsing fingerprint: MySQL 5.0.67 html error message fingerprint: MySQL back-end DBMS operating system: Linux Ubuntu 8.10 (Intrepid) --8<-- 2008-11-15 23:41:31 +00:00			`</regexp>`

			`<regexp value="Fedora">`
			`<info type="Linux" distrib="Fedora"/>`
			`</regexp>`

			`<regexp value="Gentoo">`
			`<info type="Linux" distrib="Gentoo"/>`
			`</regexp>`

			`<regexp value="Knoppix">`
			`<info type="Linux" distrib="Knoppix"/>`
			`</regexp>`

Minor bug fix to correctly enumerate columns on Microsoft SQL Server. Minor adjustments to XML signatures. Updated documentation. 2008-11-25 11:33:44 +00:00			`<regexp value="Mandrake">`
Minor enhancement to fingerprint the back-end DBMS operating system (type, version, release, distribution, codename and service pack) by parsing the DBMS banner value when both -f and -b are provided: adapted the code and added XML files defining regular expressions for matching. Example of the -f -b output now on MySQL 5.0.67 running on latest Ubuntu: --8<-- back-end DBMS: active fingerprint: MySQL >= 5.0.38 and < 5.1.2 comment injection fingerprint: MySQL 5.0.67 banner parsing fingerprint: MySQL 5.0.67 html error message fingerprint: MySQL back-end DBMS operating system: Linux Ubuntu 8.10 (Intrepid) --8<-- 2008-11-15 23:41:31 +00:00			`<info type="Linux" distrib="Mandrake"/>`
			`</regexp>`

Minor update 2020-01-07 11:48:02 +01:00			`<regexp value="Manjaro">`
			`<info type="Linux" distrib="Manjaro"/>`
			`</regexp>`

Minor bug fix to correctly enumerate columns on Microsoft SQL Server. Minor adjustments to XML signatures. Updated documentation. 2008-11-25 11:33:44 +00:00			`<regexp value="Mandriva">`
			`<info type="Linux" distrib="Mandriva"/>`
			`</regexp>`

Minor update 2020-01-07 11:48:02 +01:00			`<regexp value="\bMint\b">`
			`<info type="Linux" distrib="Mint"/>`
			`</regexp>`

			`<regexp value="\bPuppy\b">`
			`<info type="Linux" distrib="Puppy"/>`
			`</regexp>`

Revisiting banner xmls (Issue #2239) 2016-10-21 13:01:28 +02:00			`<regexp value="Red[\-\_\ ]?Hat">`
Minor enhancement to fingerprint the web server operating system and the web application technology by parsing also HTTP response Server header. Refactor libraries and plugins that parses XML to fingerprint and show on standard output the information. Updated changelog. 2008-11-18 17:42:46 +00:00			`<info type="Linux" distrib="Red Hat"/>`
Minor enhancement to fingerprint the back-end DBMS operating system (type, version, release, distribution, codename and service pack) by parsing the DBMS banner value when both -f and -b are provided: adapted the code and added XML files defining regular expressions for matching. Example of the -f -b output now on MySQL 5.0.67 running on latest Ubuntu: --8<-- back-end DBMS: active fingerprint: MySQL >= 5.0.38 and < 5.1.2 comment injection fingerprint: MySQL 5.0.67 banner parsing fingerprint: MySQL 5.0.67 html error message fingerprint: MySQL back-end DBMS operating system: Linux Ubuntu 8.10 (Intrepid) --8<-- 2008-11-15 23:41:31 +00:00			`</regexp>`

Minor bug fix to correctly enumerate columns on Microsoft SQL Server. Minor adjustments to XML signatures. Updated documentation. 2008-11-25 11:33:44 +00:00			`<regexp value="Slackware">`
			`<info type="Linux" distrib="Slackware"/>`
			`</regexp>`

Minor enhancement to fingerprint the back-end DBMS operating system (type, version, release, distribution, codename and service pack) by parsing the DBMS banner value when both -f and -b are provided: adapted the code and added XML files defining regular expressions for matching. Example of the -f -b output now on MySQL 5.0.67 running on latest Ubuntu: --8<-- back-end DBMS: active fingerprint: MySQL >= 5.0.38 and < 5.1.2 comment injection fingerprint: MySQL 5.0.67 banner parsing fingerprint: MySQL 5.0.67 html error message fingerprint: MySQL back-end DBMS operating system: Linux Ubuntu 8.10 (Intrepid) --8<-- 2008-11-15 23:41:31 +00:00			`<regexp value="SuSE">`
			`<info type="Linux" distrib="SuSE"/>`
			`</regexp>`

			`<regexp value="Ubuntu">`
			`<info type="Linux" distrib="Ubuntu"/>`
			`</regexp>`

Minor update of banner regexes 2025-11-28 13:16:40 +01:00			`<regexp value="\bAlpine\b">`
			`<info type="Linux" distrib="Alpine"/>`
			`</regexp>`

			`<regexp value="Oracle ?Linux">`
			`<info type="Linux" distrib="Oracle"/>`
			`</regexp>`

			`<regexp value="\bRHEL\b">`
			`<info type="Linux" distrib="Red Hat"/>`
			`</regexp>`

			`<regexp value="Amazon Linux">`
			`<info type="Linux" distrib="Amazon"/>`
			`</regexp>`

			`<regexp value="Raspbian">`
			`<info type="Linux" distrib="Raspbian"/>`
			`</regexp>`

			`<regexp value="\bKali\b">`
			`<info type="Linux" distrib="Kali"/>`
			`</regexp>`

			`<regexp value="Rocky Linux">`
			`<info type="Linux" distrib="Rocky"/>`
			`</regexp>`

Update of banner regexes 2020-12-08 14:41:19 +01:00			`<!-- BSD -->`
Added new HTTP response headers on which fingerprint web app technology and web server OS. Updated documentation. 2008-11-19 15:33:39 +00:00
Minor enhancement to fingerprint the back-end DBMS operating system (type, version, release, distribution, codename and service pack) by parsing the DBMS banner value when both -f and -b are provided: adapted the code and added XML files defining regular expressions for matching. Example of the -f -b output now on MySQL 5.0.67 running on latest Ubuntu: --8<-- back-end DBMS: active fingerprint: MySQL >= 5.0.38 and < 5.1.2 comment injection fingerprint: MySQL 5.0.67 banner parsing fingerprint: MySQL 5.0.67 html error message fingerprint: MySQL back-end DBMS operating system: Linux Ubuntu 8.10 (Intrepid) --8<-- 2008-11-15 23:41:31 +00:00			`<regexp value="FreeBSD">`
			`<info type="FreeBSD"/>`
			`</regexp>`

			`<regexp value="NetBSD">`
			`<info type="NetBSD"/>`
			`</regexp>`

			`<regexp value="OpenBSD">`
			`<info type="OpenBSD"/>`
			`</regexp>`

Minor bug fix to correctly enumerate columns on Microsoft SQL Server. Minor adjustments to XML signatures. Updated documentation. 2008-11-25 11:33:44 +00:00			`<!-- Mac OSX -->`

Minor update of banner regexes 2025-11-28 13:16:40 +01:00			`<regexp value="Mac[\-\_\ ]?OS ?X\|macOS\|Darwin">`
Minor bug fix to correctly enumerate columns on Microsoft SQL Server. Minor adjustments to XML signatures. Updated documentation. 2008-11-25 11:33:44 +00:00			`<info type="Mac OSX"/>`
			`</regexp>`

Minor update of banner regexes 2025-11-28 13:16:40 +01:00			`<!-- *nix -->`

			`<regexp value="SunOS\|Solaris">`
			`<info type="SunOS"/>`
Minor enhancement to fingerprint the back-end DBMS operating system (type, version, release, distribution, codename and service pack) by parsing the DBMS banner value when both -f and -b are provided: adapted the code and added XML files defining regular expressions for matching. Example of the -f -b output now on MySQL 5.0.67 running on latest Ubuntu: --8<-- back-end DBMS: active fingerprint: MySQL >= 5.0.38 and < 5.1.2 comment injection fingerprint: MySQL 5.0.67 banner parsing fingerprint: MySQL 5.0.67 html error message fingerprint: MySQL back-end DBMS operating system: Linux Ubuntu 8.10 (Intrepid) --8<-- 2008-11-15 23:41:31 +00:00			`</regexp>`
Minor update of banner regexes 2025-11-28 13:16:40 +01:00
			`<regexp value="\bAIX\b">`
			`<info type="AIX"/>`
			`</regexp>`

			`<regexp value="HP-UX\|HPUX">`
			`<info type="HP-UX"/>`
			`</regexp>`

Minor enhancement to fingerprint the back-end DBMS operating system (type, version, release, distribution, codename and service pack) by parsing the DBMS banner value when both -f and -b are provided: adapted the code and added XML files defining regular expressions for matching. Example of the -f -b output now on MySQL 5.0.67 running on latest Ubuntu: --8<-- back-end DBMS: active fingerprint: MySQL >= 5.0.38 and < 5.1.2 comment injection fingerprint: MySQL 5.0.67 banner parsing fingerprint: MySQL 5.0.67 html error message fingerprint: MySQL back-end DBMS operating system: Linux Ubuntu 8.10 (Intrepid) --8<-- 2008-11-15 23:41:31 +00:00			`</root>`