Add CALDERA C2 fingerprints (#401)

rapid7 · Jan 27, 2022 · 861d408 · 861d408
2 parents cf9443c + faf27ee
commit 861d408
Show file tree

Hide file tree

Showing 4 changed files with 18 additions and 0 deletions.
diff --git a/identifiers/service_product.txt b/identifiers/service_product.txt
@@ -50,6 +50,7 @@ BlackJumboDog
 BladeSystems
 Boa
 Bugzilla
+CALDERA
 CCProxy
 CMS
 CMS400.NET

diff --git a/identifiers/vendor.txt b/identifiers/vendor.txt
@@ -410,6 +410,7 @@ Lucent
 Lynx Technology
 Lyris
 MBP Kommunikationssysteme GmbH
+MITRE
 MPI Technologies
 MPS Software
 MRV Communications

diff --git a/xml/favicons.xml b/xml/favicons.xml
@@ -1954,4 +1954,12 @@
     <param pos="0" name="service.product" value="Covenant"/>
   </fingerprint>
 
+  <fingerprint pattern="^5508e5abca6493613e11c72f4296ebf4$">
+    <description>MITRE CALDERA C2 framework</description>
+    <example>5508e5abca6493613e11c72f4296ebf4</example>
+    <param pos="0" name="service.vendor" value="MITRE"/>
+    <param pos="0" name="service.product" value="CALDERA"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:mitre:caldera:-"/>
+  </fingerprint>
+
 </fingerprints>
diff --git a/xml/html_title.xml b/xml/html_title.xml
@@ -3730,4 +3730,12 @@
     <param pos="0" name="service.product" value="Covenant"/>
   </fingerprint>
 
+  <fingerprint pattern="^Login | CALDERA$">
+    <description>MITRE CALDERA C2 framework</description>
+    <example>Login | CALDERA</example>
+    <param pos="0" name="service.vendor" value="MITRE"/>
+    <param pos="0" name="service.product" value="CALDERA"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:mitre:caldera:-"/>
+  </fingerprint>
+
 </fingerprints>
-Original file line number
+Diff line change
@@ Expand Up / @@ -50,6 +50,7 @@ BlackJumboDog @@
     BladeSystems
     Boa
     Bugzilla
+    CALDERA
     CCProxy
     CMS
     CMS400.NET
@@ Expand Down @@