sonar.js icon indicating copy to clipboard operation
sonar.js copied to clipboard

Schema Redesign

Open moloch-- opened this issue 10 years ago • 4 comments

Updated JSON schema to remove ambiguity around what constitutes a "fingerprint," and allow for us to more easily add more attributes:

Single "Fingerprint" Object

{
    "name": "ASUS RT-N66U",
    "created": "2015-09-07 01:02:10.229153",
    "resources": ["/images/New_ui/asustitle.png","/images/loading.gif","/images/alertImg.png","/images/New_ui/networkmap/line_one.png","/images/New_ui/networkmap/lock.png","/images/New_ui/networkmap/line_two.png","/index_style.css","/form_style.css","/NM_style.css","/other.css"],
}
  • name is a string
  • created is a UTC timestamp when the fingerprint was created
  • resources is a list of strings, which are the paths of web resources we're going to attempt to scan for

List of Fingerprints

 [
    {
        "name": "ASUS RT-N66U",
        "created": "2015-09-07 01:02:10.229153",
        "resources": ["/images/New_ui/asustitle.png","/images/loading.gif","/images/alertImg.png","/images/New_ui/networkmap/line_one.png","/images/New_ui/networkmap/lock.png","/images/New_ui/networkmap/line_two.png","/index_style.css","/form_style.css","/NM_style.css","/other.css"],

    },
    {
        "name": "Linksys WRT54G",
        "created": "2015-08-07 01:02:10.229153",
        "resources": ["/UILinksys.gif","/UI_10.gif","/UI_07.gif","/UI_06.gif","/UI_03.gif","/UI_02.gif","/UI_Cisco.gif","/style.css"],

    },
]

moloch-- avatar Sep 07 '15 01:09 moloch--

+1 for the new schema. An fingerprint object would allow the fingerprint to be more flexible like specifying IP addresses or ranges for a fingerprint, this could be useful for #10. It could also by used to specify the device is only accessible over https or to add a separate version field to help automate post discovery actions like exploitation.

 [
    {
        "name": "Some device",
        "version": "1.2.3",
        "created": "2015-09-07 01:02:10.229153",
        "resources": ["/someresource.css"],
        "address": ["192.168.1.1"],
        "protocol": "https",
    },
]

CheatCodes avatar Sep 07 '15 09:09 CheatCodes

Yep this is a good idea - I'll start coding on it today (thanks @moloch-- and @x0e-foobar)

mandatoryprogrammer avatar Sep 07 '15 17:09 mandatoryprogrammer

Changed scheme to reflect what @moloch-- suggested, will add more functionality for things such as protocol and address soon :smile:

Google Chrome fingerprint generator update should be approval in an hour or two.

mandatoryprogrammer avatar Sep 07 '15 18:09 mandatoryprogrammer

Adding a version is also a very good idea

moloch-- avatar Sep 07 '15 21:09 moloch--