recog 2.0.12 → 2.0.13

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: a07f586033f575b33fe73d848a469b63af083d33
-  data.tar.gz: 01422888e9cb4f0cc236e901e7cc5e19c57e86fb
+  metadata.gz: 550cc41ba69213d60ced6ead986dc8c38d3129da
+  data.tar.gz: 317c61c92e185f982f0066ddafcd811a0b644224
 SHA512:
-  metadata.gz: 729aec1ee13659cfdc33ef5fe7ac5daa3799e1e4334c6ca1130e7b9d233b62958efb8e2b466b452af0cfda2e76dfed8800f5177ce2c17b41c10d1ce271e9fa68
-  data.tar.gz: 88416047ae29c8cada38d07fedbe3fc30b205aefc5e1bc7f9d9d272c3487636afbda0bc4bef48d121d990b976e9f5785df210ae1c33565d20ffe92a7e1fecfdf
+  metadata.gz: a6c71d5f88b88e952613346681a0f5834d0a47469df0e53420a114102626c52edb5eeb392a4fa8fb866b3c63de7f361a680e4e9a521e257948bb500f7a8f81af
+  data.tar.gz: 5db712820756886fd6bc2c1d550d5a82672d2291ae4237e3985a104b363c552d7d59fdf96028a11bc179a45ff0ad734cc64ec5b4058939cd0c12b0cc14707169

data/.travis.yml

@@ -1,4 +1,5 @@
 language: ruby
+sudo: false
 cache: bundler
 rvm:
   - 2.1.5

data/lib/recog/version.rb

@@ -1,3 +1,3 @@
 module Recog
-  VERSION = '2.0.12'
+  VERSION = '2.0.13'
 end

data/xml/http_servers.xml

@@ -1767,13 +1767,21 @@
    </fingerprint>
 
    <fingerprint pattern="^PHP/(\S+)$">
-      <example>PHP/4.4.2-1build1</example>
-      <example>PHP/5.1.2</example>
+      <example service.component.version="4.4.2-1build1">PHP/4.4.2-1build1</example>
+      <example service.component.version="5.1.2">PHP/5.1.2</example>
       <description>PHP</description>
       <param pos="0" name="service.component.product" value="PHP"/>
       <param pos="1" name="service.component.version"/>
    </fingerprint>
 
+   <!-- TODO: Capture ZendServer version in fingerprint -->
+   <fingerprint pattern="^PHP/(\S+)\s+ZendServer/\S+$">
+      <example service.component.version="5.3.14">PHP/5.3.14 ZendServer/5.0</example>
+      <description>PHP with ZendServer</description>
+      <param pos="0" name="service.component.product" value="PHP"/>
+      <param pos="1" name="service.component.version"/>
+   </fingerprint>
+
    <fingerprint pattern="^Oracle Application Server Containers for J2EE 10g \(([\d.]+)\)$">
       <example>Oracle Application Server Containers for J2EE 10g (9.0.4.0.0)</example>
       <description>Oracle Application Server Containers for J2EE 10g</description>
@@ -3509,5 +3517,30 @@
       <description>gSOAP</description>
       <param pos="0" name="service.product" value="gSOAP"/>
       <param pos="1" name="service.version"/>
+    </fingerprint>
+
+           <!-- Apple QuickTime streaming server -->
+    <fingerprint pattern="^QTSS\/([\d\.]+) \(Build\/[\d\.]+; Platform\/MacOSX; Release\/Panther">
+      <description>QTSS on OS X 10.3</description>
+      <example service.version="5.0">QTSS/5.0 (Build/452; Platform/MacOSX; Release/Panther; )</example>
+      <example service.version="5.0.3.3">QTSS/5.0.3.3 (Build/452.22.4; Platform/MacOSX; Release/Panther; Update/Security; )</example>
+      <param pos="0" name="os.vendor" value="Apple"/>
+      <param pos="0" name="os.family" value="Mac OS X"/>
+      <param pos="0" name="os.product" value="Mac OS X"/>
+      <param pos="0" name="os.device" value="General"/>
+      <param pos="0" name="os.version" value="10.3"/>
+      <param pos="0" name="service.product" value="QTSS"/>
+      <param pos="1" name="service.version"/>
+    </fingerprint>
+
+    <fingerprint pattern="^QTSS\/([\d\.]+) \(Build\/[\d\.]+; Platform\/MacOSX; Release\/Mac OS X">
+      <description>QTSS OS X</description>
+      <example service.version="6.1.0">QTSS/6.1.0 (Build/532; Platform/MacOSX; Release/Mac OS X Server; )</example>
+      <param pos="0" name="os.vendor" value="Apple"/>
+      <param pos="0" name="os.family" value="Mac OS X"/>
+      <param pos="0" name="os.product" value="Mac OS X"/>
+      <param pos="0" name="os.device" value="General"/>
+      <param pos="0" name="service.product" value="QTSS"/>
+      <param pos="1" name="service.version"/>
     </fingerprint>
 </fingerprints>

data/xml/smb_native_os.xml

@@ -384,6 +384,33 @@
       <param pos="2" name="os.build"/>
    </fingerprint>
 
+      <!-- Mac OS X -->
+   <fingerprint pattern="^Samba (3\.0\.28a-apple)$">
+      <description>Samba on OS X 10.6</description>
+      <example service.version="3.0.28a-apple">Samba 3.0.28a-apple</example>
+      <param pos="0" name="os.vendor" value="Apple"/>
+      <param pos="0" name="os.family" value="Mac OS X"/>
+      <param pos="0" name="os.product" value="Mac OS X"/>
+      <param pos="0" name="os.device" value="General"/>
+      <param pos="0" name="os.version" value="10.6"/>
+      <param pos="0" name="service.vendor" value="Samba"/>
+      <param pos="0" name="service.product" value="Samba"/>
+      <param pos="1" name="service.version"/>
+   </fingerprint>
+
+   <fingerprint pattern="^Samba (3\.0\.25b-apple)$">
+      <description>Samba on OS X 10.5</description>
+      <example service.version="3.0.25b-apple">Samba 3.0.25b-apple</example>
+      <param pos="0" name="os.vendor" value="Apple"/>
+      <param pos="0" name="os.family" value="Mac OS X"/>
+      <param pos="0" name="os.product" value="Mac OS X"/>
+      <param pos="0" name="os.device" value="General"/>
+      <param pos="0" name="os.version" value="10.5"/>
+      <param pos="0" name="service.vendor" value="Samba"/>
+      <param pos="0" name="service.product" value="Samba"/>
+      <param pos="1" name="service.version"/>
+   </fingerprint>
+
    <!-- TODO: Detect vendor, distribution, and package versions -->
    <fingerprint pattern="^Samba (\d\.\d+.\d+\w*)">
       <description>Samba</description>

data/xml/snmp_sysdescr.xml

@@ -5157,6 +5157,121 @@ Copyright (c) 1995-2005 by Cisco Systems
       <param pos="1" name="host.name"/>
    </fingerprint>
 
+   <!--======================================================================
+                              Mac OS X
+   =======================================================================-->
+   <fingerprint pattern="^Darwin (\S*) \S* Darwin Kernel Version 7.(\d+).\d+: .*RELEASE_\w* ?\s* (\S* ?\S*)$">
+      <description>Mac OS X 10.3 (Panther)</description>
+      <example host.name="host.example.com" os.arch="Power Macintosh" os.version.version="0">Darwin host.example.com 7.0.0 Darwin Kernel Version 7.0.0: Wed Sep 24 15:48:39 PDT 2003; root:xnu/xnu-517.obj~1/RELEASE_PPC Power Macintosh</example>
+      <param pos="1" name="host.name"/>
+      <param pos="0" name="os.vendor" value="Apple"/>
+      <param pos="0" name="os.family" value="Mac OS X"/>
+      <param pos="0" name="os.product" value="Mac OS X"/>
+      <param pos="0" name="os.device" value="General"/>
+      <param pos="3" name="os.arch"/>
+      <param pos="0" name="os.version" value="10.3"/>
+      <param pos="2" name="os.version.version"/>
+      <param pos="0" name="os.certainty" value="0.9"/>
+   </fingerprint>
+
+   <fingerprint pattern="^Darwin (\S*) \S* Darwin Kernel Version 8.(\d+).\d+: .*RELEASE_\w* ?\s* (\S* ?\S*)$">
+      <description>Mac OS X 10.4 (Tiger)</description>
+      <example host.name="host.example.com" os.arch="Power Macintosh" os.version.version="6">Darwin host.example.com 8.6.0 Darwin Kernel Version 8.6.0: Tue Mar 7 16:58:48 PST 2006; root:xnu-792.6.70.obj~1/RELEASE_PPC Power Macintosh</example>
+      <param pos="1" name="host.name"/>
+      <param pos="0" name="os.vendor" value="Apple"/>
+      <param pos="0" name="os.family" value="Mac OS X"/>
+      <param pos="0" name="os.product" value="Mac OS X"/>
+      <param pos="0" name="os.device" value="General"/>
+      <param pos="3" name="os.arch"/>
+      <param pos="0" name="os.version" value="10.4"/>
+      <param pos="2" name="os.version.version"/>
+      <param pos="0" name="os.certainty" value="0.9"/>
+   </fingerprint>
+
+   <fingerprint pattern="^Darwin (\S*) \S* Darwin Kernel Version 9.(\d+).\d+: .*RELEASE_\w* ?\s* (\S* ?\S*)$">
+      <description>Mac OS X 10.5 (Leopard)</description>
+      <example host.name="host.example.com" os.arch="Power Macintosh" os.version.version="0">Darwin host.example.com 9.0.0 Darwin Kernel Version 9.0.0: Tue Oct 9 21:37:58 PDT 2007; root:xnu-1228~1/RELEASE_PPC Power Macintosh</example>
+      <param pos="1" name="host.name"/>
+      <param pos="0" name="os.vendor" value="Apple"/>
+      <param pos="0" name="os.family" value="Mac OS X"/>
+      <param pos="0" name="os.product" value="Mac OS X"/>
+      <param pos="0" name="os.device" value="General"/>
+      <param pos="3" name="os.arch"/>
+      <param pos="0" name="os.version" value="10.5"/>
+      <param pos="2" name="os.version.version"/>
+      <param pos="0" name="os.certainty" value="0.9"/>
+   </fingerprint>
+
+   <fingerprint pattern="^Darwin (\S*) \S* Darwin Kernel Version 10.(\d+).\d+: .*RELEASE_\w* ?\s* (\S* ?\S*)$">
+      <description>Mac OS X 10.6 (Snow Leopard)</description>
+      <example host.name="host.example.com" os.arch="x86_64" os.version.version="0">Darwin host.example.com 10.0.0 Darwin Kernel Version 10.0.0: Fri Jul 31 22:46:25 PDT 2009; root:xnu-1456.1.25~1/RELEASE_X86_64 x86_64</example>
+      <param pos="1" name="host.name"/>
+      <param pos="0" name="os.vendor" value="Apple"/>
+      <param pos="0" name="os.family" value="Mac OS X"/>
+      <param pos="0" name="os.product" value="Mac OS X"/>
+      <param pos="0" name="os.device" value="General"/>
+      <param pos="3" name="os.arch"/>
+      <param pos="0" name="os.version" value="10.6"/>
+      <param pos="2" name="os.version.version"/>
+      <param pos="0" name="os.certainty" value="0.9"/>
+   </fingerprint>
+
+   <fingerprint pattern="^Darwin (\S*) \S* Darwin Kernel Version 11.(\d+).\d+: .*RELEASE_\w* ?\s* (\S* ?\S*)$">
+      <description>Mac OS X 10.7 (Lion)</description>
+      <example host.name="host.example.com" os.arch="x86_64" os.version.version="2">Darwin host.example.com 11.2.0 Darwin Kernel Version 11.2.0: Tue Aug 9 20:54:00 PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64 x86_64</example>
+      <param pos="1" name="host.name"/>
+      <param pos="0" name="os.vendor" value="Apple"/>
+      <param pos="0" name="os.family" value="Mac OS X"/>
+      <param pos="0" name="os.product" value="Mac OS X"/>
+      <param pos="0" name="os.device" value="General"/>
+      <param pos="3" name="os.arch"/>
+      <param pos="0" name="os.version" value="10.7"/>
+      <param pos="2" name="os.version.version"/>
+      <param pos="0" name="os.certainty" value="0.9"/>
+   </fingerprint>
+
+   <fingerprint pattern="^Darwin (\S*) \S* Darwin Kernel Version 12.(\d+).\d+: .*RELEASE_\w* ?\s* (\S* ?\S*)$">
+      <description>Mac OS X 10.8 (Mountain Lion)</description>
+      <example host.name="host.example.com" os.arch="x86_64" os.version.version="2">Darwin host.example.com 12.2.1 Darwin Kernel Version 12.2.1: Thu Oct 18 12:13:47 PDT 2012; root:xnu-2050.20.9~1/RELEASE_X86_64 x86_64</example>
+      <param pos="1" name="host.name"/>
+      <param pos="0" name="os.vendor" value="Apple"/>
+      <param pos="0" name="os.family" value="Mac OS X"/>
+      <param pos="0" name="os.product" value="Mac OS X"/>
+      <param pos="0" name="os.device" value="General"/>
+      <param pos="3" name="os.arch"/>
+      <param pos="0" name="os.version" value="10.8"/>
+      <param pos="2" name="os.version.version"/>
+      <param pos="0" name="os.certainty" value="0.9"/>
+   </fingerprint>
+
+   <fingerprint pattern="^Darwin (\S*) \S* Darwin Kernel Version 13.(\d+).\d+: .*RELEASE_\w* ?\s* (\S* ?\S*)$">
+      <description>Mac OS X 10.9 (Mavericks)</description>
+      <example host.name="host.example.com" os.arch="x86_64" os.version.version="4">Darwin host.example.com 13.4.0 Darwin Kernel Version 13.4.0: Sun Aug 17 19:50:11 PDT 2014; root:xnu-2422.115.4~1/RELEASE_X86_64 x86_64</example>
+      <param pos="1" name="host.name"/>
+      <param pos="0" name="os.vendor" value="Apple"/>
+      <param pos="0" name="os.family" value="Mac OS X"/>
+      <param pos="0" name="os.product" value="Mac OS X"/>
+      <param pos="0" name="os.device" value="General"/>
+      <param pos="3" name="os.arch"/>
+      <param pos="0" name="os.version" value="10.9"/>
+      <param pos="2" name="os.version.version"/>
+      <param pos="0" name="os.certainty" value="0.9"/>
+   </fingerprint>
+
+   <fingerprint pattern="^Darwin (\S*) \S* Darwin Kernel Version 14.(\d+).\d+: .*RELEASE_\w* ?\s* (\S* ?\S*)$">
+      <description>Mac OS X 10.10 (Yosemite)</description>
+      <example host.name="host.example.com" os.arch="x86_64" os.version.version="4">Darwin host.example.com 14.4.0 Darwin Kernel Version 14.4.0: Thu May 28 11:35:04 PDT 2015; root:xnu-2782.30.5~1/RELEASE_X86_64 x86_64</example>
+      <param pos="1" name="host.name"/>
+      <param pos="0" name="os.vendor" value="Apple"/>
+      <param pos="0" name="os.family" value="Mac OS X"/>
+      <param pos="0" name="os.product" value="Mac OS X"/>
+      <param pos="0" name="os.device" value="General"/>
+      <param pos="3" name="os.arch"/>
+      <param pos="0" name="os.version" value="10.10"/>
+      <param pos="2" name="os.version.version"/>
+      <param pos="0" name="os.certainty" value="0.9"/>
+   </fingerprint>
+
    <!--======================================================================
                               MICROSOFT
    =======================================================================-->

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: recog
 version: !ruby/object:Gem::Version
-  version: 2.0.12
+  version: 2.0.13
 platform: ruby
 authors:
 - Rapid7 Research
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-08-20 00:00:00.000000000 Z
+date: 2015-09-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec
@@ -231,7 +231,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.4.5
+rubygems_version: 2.4.5.1
 signing_key: 
 specification_version: 4
 summary: Network service fingerprint database, classes, and utilities