[update] 整理部分指纹

finger/ehole/CLTPHP.yml → finger/manual/web/CLTPHP.yml

@@ -3,7 +3,8 @@ manual: false
 detail:
     fingerprint:
         name: CLTPHP
-    fofa: header="CLTPHP" || body="CLTPHP" || title="CLTPHP"
+    fofa: product="CLTPHP"
+    cpe: cltphp:cltphp
 transport: http
 rules:
     r0:

finger/ehole/EleanorCMS.yml → finger/manual/web/EleanorCMS.yml

@@ -3,7 +3,8 @@ manual: false
 detail:
     fingerprint:
         name: EleanorCMS
-    fofa: header="Eleanor CMS" || title="Eleanor CMS"
+    fofa: product="EleanorCMS"
+    cpe: eleanor-cms:eleanor_cms
 transport: http
 rules:
     r0:

finger/manual/web/NETGEAR-DGND3700.yml

@@ -0,0 +1,31 @@
+name: fingerprint-yaml-NETGEAR-DGND3700
+manual: false
+detail:
+    fingerprint:
+        name: NETGEAR-DGND3700
+    cpe: netgear:dgnd3700b_firmware
+    fofa: product="NETGEAR-DGND3700"
+transport: http
+rules:
+    r0:
+        request:
+            cache: true
+            method: GET
+            path: /
+            follow_redirects: true
+        expression: response.raw_header.ibcontains(bytes("netgear dgnd3700"))
+    r1:
+        request:
+            cache: true
+            method: GET
+            path: /
+            follow_redirects: true
+        expression: response.body_string.contains('content="dgnd3700')
+    r2:
+        request:
+            cache: true
+            method: GET
+            path: /
+            follow_redirects: true
+        expression: response.body_string.contains('var host_name="dgnd3700"')
+expression: r0() || r1() || r2()

finger/ehole/UCMS.yml → finger/manual/web/UCMS.yml

@@ -4,6 +4,7 @@ detail:
     fingerprint:
         name: UCMS
     fofa: title="UCMS"
+    cpe: ucms_project:ucms
 transport: http
 rules:
     r0:

finger/ehole/Vivotek (Camera).yml → finger/manual/web/Vivotek (Camera).yml

@@ -4,6 +4,7 @@ detail:
     fingerprint:
         name: Vivotek (Camera)
     fofa: icon_hash="-1654229048"
+    cpe: vivotek:camera
 transport: http
 rules:
     r0: