From 10f64ee687afe38fa713f35eeed586a284bee83a Mon Sep 17 00:00:00 2001
From: jvoisin <julien.voisin@dustri.org>
Date: Mon, 8 Jan 2024 15:11:30 +0100
Subject: [PATCH] Add X-Powered-By fingerprinting

---
 xml/http_xpoweredby.xml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 xml/http_xpoweredby.xml

diff --git a/xml/http_xpoweredby.xml b/xml/http_xpoweredby.xml
new file mode 100644
index 00000000..32881b84
--- /dev/null
+++ b/xml/http_xpoweredby.xml
@@ -0,0 +1,15 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<fingerprints matches="http_header.x-powered-by" protocol="http" database_type="service" preference="0.90">
+  <!-- HTTP X-Powered_by headers are matched against these patterns to fingerprint HTTP services. -->
+
+  <fingerprint pattern="^PHP/([0-9.]+)$">
+    <description>PHP</description>
+    <example service.version="8.2.14">PHP/8.2.14</example>
+    <param pos="0" name="service.vendor" value="PHP"/>
+    <param pos="0" name="service.family" value="PHP"/>
+    <param pos="0" name="service.product" value="PHP"/>
+    <param pos="1" name="service.version"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:php:php:{service.version}"/>
+  </fingerprint>
+
+</fingerprints>
\ No newline at end of file