recog 1.0.24 → 1.0.25
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/lib/recog/version.rb +1 -1
- data/xml/mysql_banners.xml +1221 -0
- data/xml/mysql_error.xml +129 -0
- metadata +4 -2
data/xml/mysql_error.xml
ADDED
|
@@ -0,0 +1,129 @@
|
|
|
1
|
+
<?xml version="1.0"?>
|
|
2
|
+
<!--
|
|
3
|
+
Upon successful connection to an MySQL/derivative TCP endpoint, if
|
|
4
|
+
the connecting client is not allowed to speak to the MySQL service (for
|
|
5
|
+
example, it has been blocked for too many failed password attempts or it
|
|
6
|
+
isn't explicitly allowed to connect from this client), the first packet
|
|
7
|
+
received will contain an error message that is used to inform the client
|
|
8
|
+
of this failure prior to forcibly disconnecting the client:
|
|
9
|
+
|
|
10
|
+
$ mysql -u root -h mysql.example.com
|
|
11
|
+
ERROR 1130 (HY000): Host '192.168.0.100' is not allowed to connect to this MySQL server
|
|
12
|
+
|
|
13
|
+
This free-form field starts at the 7th byte and ends at the end of the TCP
|
|
14
|
+
payload. The fingerprints below are used to match and extract from this field.
|
|
15
|
+
-->
|
|
16
|
+
<fingerprints matches="mysql.error">
|
|
17
|
+
|
|
18
|
+
<fingerprint pattern="^(?:#HY000)?Host '[^']+' is not allowed to connect to this MySQL server$">
|
|
19
|
+
<example>Host '10.10.10.10' is not allowed to connect to this MySQL server</example>
|
|
20
|
+
<example>#HY000Host '10.10.10.10' is not allowed to connect to this MySQL server</example>
|
|
21
|
+
<description>Oracle MySQL - Error: Host not allowed to connect (English)</description>
|
|
22
|
+
<param pos="0" name="service.vendor" value="Oracle"/>
|
|
23
|
+
<param pos="0" name="service.family" value="MySQL"/>
|
|
24
|
+
<param pos="0" name="service.product" value="MySQL"/>
|
|
25
|
+
</fingerprint>
|
|
26
|
+
|
|
27
|
+
<fingerprint pattern="^(?:#HY000)?Host '[^']+' is blocked because of many connection errors.\s{1,2}[Uu]nblock with 'mysqladmin flush-hosts'$">
|
|
28
|
+
<example>Host '10.10.10.10' is blocked because of many connection errors; unblock with 'mysqladmin flush-hosts'</example>
|
|
29
|
+
<example>Host '10.10.10.10' is blocked because of many connection errors. Unblock with 'mysqladmin flush-hosts'</example>
|
|
30
|
+
<description>Oracle MySQL - Error: Blocked, too many errors from this host</description>
|
|
31
|
+
<param pos="0" name="service.vendor" value="Oracle"/>
|
|
32
|
+
<param pos="0" name="service.family" value="MySQL"/>
|
|
33
|
+
<param pos="0" name="service.product" value="MySQL"/>
|
|
34
|
+
</fingerprint>
|
|
35
|
+
|
|
36
|
+
<fingerprint pattern="^Host '[^']+' is not allowed to connect to this MariaDB server$">
|
|
37
|
+
<example>Host '10.10.10.10' is not allowed to connect to this MariaDB server</example>
|
|
38
|
+
<description>MariaDB MariaDB - Error: Host not allowed to connect (English) </description>
|
|
39
|
+
<param pos="0" name="service.vendor" value="MariaDB"/>
|
|
40
|
+
<param pos="0" name="service.family" value="MySQL"/>
|
|
41
|
+
<param pos="0" name="service.product" value="MariaDB"/>
|
|
42
|
+
</fingerprint>
|
|
43
|
+
|
|
44
|
+
<fingerprint pattern="^Le h.te '[^']+' n'est pas authoris. . se connecter . ce serveur MySQL$">
|
|
45
|
+
<example>Le h�te '10.10.10.10' n'est pas authoris� � se connecter � ce serveur MySQL</example>
|
|
46
|
+
<description>Oracle MySQL - Error: Host not allowed to connect (French)</description>
|
|
47
|
+
<param pos="0" name="service.vendor" value="Oracle"/>
|
|
48
|
+
<param pos="0" name="service.family" value="MySQL"/>
|
|
49
|
+
<param pos="0" name="service.product" value="MySQL"/>
|
|
50
|
+
</fingerprint>
|
|
51
|
+
|
|
52
|
+
<fingerprint pattern="^'Host' '[^']+' n.o tem permiss.o para se conectar com este servidor MySQL$">
|
|
53
|
+
<example>'Host' '10.10.10.10' n�o tem permiss�o para se conectar com este servidor MySQL</example>
|
|
54
|
+
<description>Oracle MySQL - Error: Host not allowed to connect (Spanish)</description>
|
|
55
|
+
<param pos="0" name="service.vendor" value="Oracle"/>
|
|
56
|
+
<param pos="0" name="service.family" value="MySQL"/>
|
|
57
|
+
<param pos="0" name="service.product" value="MySQL"/>
|
|
58
|
+
</fingerprint>
|
|
59
|
+
|
|
60
|
+
<fingerprint pattern="^Host.+?hat keine Berechtigung,.+?diesem MySQL">
|
|
61
|
+
<example>Host '10.10.10.10' hat keine Berechtigung, sich mit diesem MySQL-Server zu verbinden</example>
|
|
62
|
+
<example>Host hat keine Berechtigung, eine Verbindung zu diesem MySQL Server herzustellen.</example>
|
|
63
|
+
<description>Oracle MySQL - Error: Host not allowed to connect (German)</description>
|
|
64
|
+
<param pos="0" name="service.vendor" value="Oracle"/>
|
|
65
|
+
<param pos="0" name="service.family" value="MySQL"/>
|
|
66
|
+
<param pos="0" name="service.product" value="MySQL"/>
|
|
67
|
+
</fingerprint>
|
|
68
|
+
|
|
69
|
+
<fingerprint pattern="^Host.+?blockiert wegen zu vieler Verbindungsfehler. Aufheben der Blockierung mit 'mysqladmin flush-hosts'">
|
|
70
|
+
<example>Host blockiert wegen zu vieler Verbindungsfehler. Aufheben der Blockierung mit 'mysqladmin flush-hosts'.</example>
|
|
71
|
+
<example>Host '10.10.10.10' blockiert wegen zu vieler Verbindungsfehler. Aufheben der Blockierung mit 'mysqladmin flush-hosts'</example>
|
|
72
|
+
<description>Oracle MySQL - Error: Blocked, too many errors from this host (German)</description>
|
|
73
|
+
<param pos="0" name="service.vendor" value="Oracle"/>
|
|
74
|
+
<param pos="0" name="service.family" value="MySQL"/>
|
|
75
|
+
<param pos="0" name="service.product" value="MySQL"/>
|
|
76
|
+
</fingerprint>
|
|
77
|
+
|
|
78
|
+
<fingerprint pattern="^L'h.+?est bloqu.+?cause d'un trop grand nombre d'erreur de connexion\..+?bloquer le par 'mysqladmin flush-hosts'">
|
|
79
|
+
<example>L'h�te '10.10.10.10' est bloqu� � cause d'un trop grand nombre d'erreur de connexion. D�bloquer le par 'mysqladmin flush-hosts'</example>
|
|
80
|
+
<description>Oracle MySQL - Error: Blocked, too many errors from this host (French)</description>
|
|
81
|
+
<param pos="0" name="service.vendor" value="Oracle"/>
|
|
82
|
+
<param pos="0" name="service.family" value="MySQL"/>
|
|
83
|
+
<param pos="0" name="service.product" value="MySQL"/>
|
|
84
|
+
</fingerprint>
|
|
85
|
+
|
|
86
|
+
<fingerprint pattern="^Can't create a new thread \(errno -?\d{1,2}\)">
|
|
87
|
+
<example>Can't create a new thread (errno -1); if you are not out of available memory, you can consult the manual for a possible OS-dependent bug</example>
|
|
88
|
+
<example>Can't create a new thread (errno 12); if you are not out of available memory, you can consult the manual for a possible OS-dependent bug</example>
|
|
89
|
+
<example>Can't create a new thread (errno 35); if you are not out of available memory, you can consult the manual for a possible OS-dependent bug</example>
|
|
90
|
+
<description>Oracle MySQL - Error: Out of memory</description>
|
|
91
|
+
<description>Oracle MySQL - Error: Out of memory</description>
|
|
92
|
+
<param pos="0" name="service.vendor" value="Oracle"/>
|
|
93
|
+
<param pos="0" name="service.family" value="MySQL"/>
|
|
94
|
+
<param pos="0" name="service.product" value="MySQL"/>
|
|
95
|
+
</fingerprint>
|
|
96
|
+
|
|
97
|
+
<fingerprint pattern="^Too many connections$">
|
|
98
|
+
<example>Too many connections</example>
|
|
99
|
+
<description>Oracle MySQL - Error: Too many connections</description>
|
|
100
|
+
<param pos="0" name="service.vendor" value="Oracle"/>
|
|
101
|
+
<param pos="0" name="service.family" value="MySQL"/>
|
|
102
|
+
<param pos="0" name="service.product" value="MySQL"/>
|
|
103
|
+
</fingerprint>
|
|
104
|
+
|
|
105
|
+
<fingerprint pattern="^Can't get hostname for your address$">
|
|
106
|
+
<example>Can't get hostname for your address</example>
|
|
107
|
+
<description>Oracle MySQL - Error: Unable to resolve client hostname</description>
|
|
108
|
+
<param pos="0" name="service.vendor" value="Oracle"/>
|
|
109
|
+
<param pos="0" name="service.family" value="MySQL"/>
|
|
110
|
+
<param pos="0" name="service.product" value="MySQL"/>
|
|
111
|
+
</fingerprint>
|
|
112
|
+
|
|
113
|
+
<fingerprint pattern="^#07000Proxy Warning - IP Forbidden$">
|
|
114
|
+
<example>#07000Proxy Warning - IP Forbidden</example>
|
|
115
|
+
<description>Oracle MySQL Proxy - Error: Host not allowed to connect</description>
|
|
116
|
+
<param pos="0" name="service.vendor" value="Oracle"/>
|
|
117
|
+
<param pos="0" name="service.family" value="MySQL"/>
|
|
118
|
+
<param pos="0" name="service.product" value="MySQL Proxy"/>
|
|
119
|
+
</fingerprint>
|
|
120
|
+
|
|
121
|
+
<fingerprint pattern="^\(proxy\) all backends are down$">
|
|
122
|
+
<example>(proxy) all backends are down</example>
|
|
123
|
+
<description>Oracle MySQL Proxy - Error: Backends down</description>
|
|
124
|
+
<param pos="0" name="service.vendor" value="Oracle"/>
|
|
125
|
+
<param pos="0" name="service.family" value="MySQL"/>
|
|
126
|
+
<param pos="0" name="service.product" value="MySQL Proxy"/>
|
|
127
|
+
</fingerprint>
|
|
128
|
+
<!-- Error code reference: http://dev.mysql.com/doc/refman/5.5/en/error-messages-server.html -->
|
|
129
|
+
</fingerprints>
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: recog
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 1.0.
|
|
4
|
+
version: 1.0.25
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Rapid7 Research
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2015-03-
|
|
11
|
+
date: 2015-03-31 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: rspec
|
|
@@ -183,6 +183,8 @@ files:
|
|
|
183
183
|
- xml/http_servers.xml
|
|
184
184
|
- xml/http_wwwauth.xml
|
|
185
185
|
- xml/imap_banners.xml
|
|
186
|
+
- xml/mysql_banners.xml
|
|
187
|
+
- xml/mysql_error.xml
|
|
186
188
|
- xml/nntp_banners.xml
|
|
187
189
|
- xml/ntp_banners.xml
|
|
188
190
|
- xml/pop_banners.xml
|