recog 2.1.40 → 2.1.41

Sign up to get free protection for your applications and to get access to all the features.
Files changed (13) hide show
  1. checksums.yaml +4 -4
  2. data/lib/recog/version.rb +1 -1
  3. data/xml/dns_versionbind.xml +3 -2
  4. data/xml/http_wwwauth.xml +5 -0
  5. data/xml/sip_banners.xml +13 -0
  6. data/xml/sip_user_agents.xml +38 -0
  7. data/xml/smb_native_lm.xml +13 -0
  8. data/xml/smb_native_os.xml +25 -0
  9. data/xml/snmp_sysdescr.xml +3 -3
  10. data/xml/ssh_banners.xml +76 -4
  11. data/xml/telnet_banners.xml +3 -3
  12. data/xml/upnp_banners.xml +12 -6
  13. metadata +2 -2
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: 4c3f57536919170fc060b3e2ede8e77963b8988a
4
- data.tar.gz: '0679248fda6fe98a73ec0afe5cd56a865b0b3b74'
3
+ metadata.gz: 8b07340dc9ce908eef09e35803b0c0d81646c404
4
+ data.tar.gz: afa7d091ed95eeb88fb46abae6008ab95d5ba8ff
5
5
  SHA512:
6
- metadata.gz: 05e9268a5deb0e76d4ff021a4db9b7a420a632445f5d3b5797dfefe0d47ec1a69874c9a8d0ea3549907312ae92698f166987220437e68e662ada2529dcb96cfe
7
- data.tar.gz: 3ccb0957644ad83c3ae199e59faa73ff56781bbc0830141735889c550387c20bf485b0f53ef15e27e7dd4c751f4b2efd9f9d0409cc134aa09bfd4220f1b33db0
6
+ metadata.gz: 857350e061bdb6b7e1da0469e9cc148d69ee171be2cb0e1e7a19b3572af17a9f9cc3b4e40f0b3cd5d71d87c97d1a2530bd03168346c346294be23d6a348ffe72
7
+ data.tar.gz: 712ba6a4ca929e6a99de4a313d9a091d62e7acf75d1c3a6ae49b9edba8a2a617f9e02f017951358fb1c60137615ca6f381b1326e4779cbf65692be79a48e9cb0
data/lib/recog/version.rb CHANGED
@@ -1,3 +1,3 @@
1
1
  module Recog
2
- VERSION = '2.1.40'
2
+ VERSION = '2.1.41'
3
3
  end
data/xml/dns_versionbind.xml CHANGED
@@ -665,12 +665,13 @@
665
665
  <param pos="2" name="service.version.version"/>
666
666
  </fingerprint>
667
667
  <fingerprint pattern="^DraytekDNS-v([\d\.]+)$">
668
- <description>Draytek DNS</description>
668
+ <description>DrayTek DNS</description>
669
669
  <example service.version="1.2.3006">DraytekDNS-v1.2.3006</example>
670
- <param pos="0" name="service.vendor" value="Draytek"/>
670
+ <param pos="0" name="service.vendor" value="DrayTek"/>
671
671
  <param pos="0" name="service.family" value="DNS"/>
672
672
  <param pos="0" name="service.product" value="DNS"/>
673
673
  <param pos="1" name="service.version"/>
674
+ <param pos="0" name="hw.vendor" value="DrayTek"/>
674
675
  </fingerprint>
675
676
  <fingerprint pattern="^Atlas Anchor ([\d\.]+)$">
676
677
  <description>Ripe ATLAS Anchor</description>
data/xml/http_wwwauth.xml CHANGED
@@ -162,6 +162,11 @@
162
162
  <param pos="0" name="hw.family" value="Orbi"/>
163
163
  <param pos="1" name="hw.product"/>
164
164
  </fingerprint>
165
+ <fingerprint pattern="(?i)^(?:Basic|Digest) realm=&quot;RUIJIE(?:-CPE)?&quot;.*$">
166
+ <description>Ruijie Networks generic</description>
167
+ <example>Digest realm="RUIJIE-CPE"</example>
168
+ <param pos="0" name="hw.vendor" value="Ruijie"/>
169
+ </fingerprint>
165
170
  <fingerprint pattern="^(?:Basic|Digest) realm=.SpeedTouch \(([0-9A-F]{2}-[0-9A-F]{2}-[0-9A-F]{2}-[0-9A-F]{2}-[0-9A-F]{2}-[0-9A-F]{2})\).$">
166
171
  <description>Thomson SpeedTouch xDSL routers</description>
167
172
  <param pos="0" name="service.vendor" value="Thomson"/>
data/xml/sip_banners.xml CHANGED
@@ -101,6 +101,19 @@
101
101
  <param pos="0" name="hw.product" value="DuraFon"/>
102
102
  <param pos="0" name="hw.device" value="VoIP"/>
103
103
  </fingerprint>
104
+ <fingerprint pattern="(?i)^Huawei (SoftX\d+) (?:V\d.*)$">
105
+ <description>Huawei Softswitch</description>
106
+ <example hw.model="SoftX3000">Huawei SoftX3000 V300R006</example>
107
+ <param pos="0" name="hw.vendor" value="Huawei"/>
108
+ <param pos="0" name="hw.device" value="Telecom"/>
109
+ <param pos="0" name="hw.product" value="Softswitch"/>
110
+ <param pos="1" name="hw.model"/>
111
+ </fingerprint>
112
+ <fingerprint pattern="(?i)^SIP/1.0 \(Huawei\)$">
113
+ <description>Huawei generic</description>
114
+ <example>SIP/1.0 (Huawei)</example>
115
+ <param pos="0" name="hw.vendor" value="Huawei"/>
116
+ </fingerprint>
104
117
  <fingerprint pattern="^M5T SIP(?: Stack|-UA SAFE)/v?([\d\.]+)">
105
118
  <description>Media5 Corporation SIP Stack</description>
106
119
  <example service.version="4.1.2.2">M5T SIP Stack/4.1.2.2</example>
data/xml/sip_user_agents.xml CHANGED
@@ -72,6 +72,35 @@
72
72
  <param pos="0" name="os.family" value="Multibox"/>
73
73
  <param pos="1" name="os.product"/>
74
74
  <param pos="2" name="os.version"/>
75
+ </fingerprint>
76
+ <!-- Huawei devices -->
77
+ <fingerprint pattern="(?i)^Huawei$">
78
+ <description>Huawei generic</description>
79
+ <example>Huawei</example>
80
+ <param pos="0" name="hw.vendor" value="Huawei"/>
81
+ </fingerprint>
82
+ <fingerprint pattern="(?i)^Huawei-HomeGateway/V(?:\d.*)$">
83
+ <description>Huawei Home Gateway</description>
84
+ <example>Huawei-HomeGateway/V100R001</example>
85
+ <param pos="0" name="hw.vendor" value="Huawei"/>
86
+ <param pos="0" name="hw.device" value="Broadband router"/>
87
+ <param pos="0" name="hw.product" value="Home Gateway"/>
88
+ </fingerprint>
89
+ <fingerprint pattern="(?i)^Huawei-EchoLife (HG.*)/V(?:\d.*)$">
90
+ <description>Huawei EchoLife Home Gateway</description>
91
+ <example hw.model="HG8121H">HUAWEI-EchoLife HG8121H/V3R018C00S110</example>
92
+ <param pos="0" name="hw.vendor" value="Huawei"/>
93
+ <param pos="0" name="hw.device" value="Broadband router"/>
94
+ <param pos="0" name="hw.product" value="EchoLife Home Gateway"/>
95
+ <param pos="1" name="hw.model"/>
96
+ </fingerprint>
97
+ <fingerprint pattern="(?i)^Huawei (SoftX\d+) (?:V\d.*)$">
98
+ <description>Huawei Softswitch</description>
99
+ <example hw.model="SoftX3000">Huawei SoftX3000 V300R010</example>
100
+ <param pos="0" name="hw.vendor" value="Huawei"/>
101
+ <param pos="0" name="hw.device" value="Telecom"/>
102
+ <param pos="0" name="hw.product" value="Softswitch"/>
103
+ <param pos="1" name="hw.model"/>
75
104
  </fingerprint>
76
105
  <fingerprint pattern="^Mitel-(\S+)-SIP-Phone ([\d\.]+) (.{12})$">
77
106
  <description>Mitel SIP Phones</description>
@@ -141,4 +170,13 @@
141
170
  <param pos="1" name="hw.model"/>
142
171
  <param pos="2" name="hw.version"/>
143
172
  </fingerprint>
173
+ <fingerprint pattern="^Nero SIPPS IP Phone Version ([\d\.]+)+$">
174
+ <description>Nero SIPPS IP Phone</description>
175
+ <example service.version="2.0.51.16">Nero SIPPS IP Phone Version 2.0.51.16</example>
176
+ <param pos="0" name="service.vendor" value="Nero"/>
177
+ <param pos="0" name="service.family" value="SIPPS"/>
178
+ <param pos="0" name="service.protocol" value="VoIP"/>
179
+ <param pos="0" name="service.product" value="SIPPS IP Phone"/>
180
+ <param pos="1" name="service.version"/>
181
+ </fingerprint>
144
182
  </fingerprints>
data/xml/smb_native_lm.xml CHANGED
@@ -45,4 +45,17 @@
45
45
  <param pos="1" name="service.version"/>
46
46
  <param pos="0" name="service.cpe23" value="cpe:/a:samba:samba:{service.version}"/>
47
47
  </fingerprint>
48
+ <fingerprint pattern="^Netreon LANMAN 1.0$">
49
+ <description>Netreon SAN software</description>
50
+ <example>Netreon LANMAN 1.0</example>
51
+ <param pos="0" name="service.vendor" value="Netreon"/>
52
+ </fingerprint>
53
+ <fingerprint pattern="(?i)^MikrotikSMB$">
54
+ <description>Mikrotik</description>
55
+ <example>MikrotikSMB</example>
56
+ <param pos="0" name="os.vendor" value="MikroTik"/>
57
+ <param pos="0" name="os.device" value="Router"/>
58
+ <param pos="0" name="os.family" value="RouterOS"/>
59
+ <param pos="0" name="os.product" value="RouterOS"/>
60
+ </fingerprint>
48
61
  </fingerprints>
data/xml/smb_native_os.xml CHANGED
@@ -454,6 +454,31 @@
454
454
  <param pos="2" name="os.version.version"/>
455
455
  <param pos="3" name="os.version.version.version"/>
456
456
  </fingerprint>
457
+ <fingerprint pattern="^Apple Base Station$">
458
+ <description>SMB exposed via SMB shared USB disks on Apple devices</description>
459
+ <example>Apple Base Station</example>
460
+ <param pos="0" name="os.vendor" value="Apple"/>
461
+ <param pos="0" name="hw.vendor" value="Apple"/>
462
+ </fingerprint>
463
+ <fingerprint pattern="^EMC-SNAS:T([\d\.]+)?$">
464
+ <description>EMC Celerra</description>
465
+ <example service.version="7.1.80.7">EMC-SNAS:T7.1.80.7</example>
466
+ <param pos="0" name="service.vendor" value="EMC"/>
467
+ <param pos="0" name="service.product" value="Celerra"/>
468
+ <param pos="1" name="service.version"/>
469
+ <param pos="0" name="os.vendor" value="EMC"/>
470
+ <param pos="0" name="os.device" value="Storage"/>
471
+ <param pos="0" name="os.product" value="Celerra"/>
472
+ <param pos="1" name="os.version"/>
473
+ <param pos="0" name="hw.vendor" value="EMC"/>
474
+ <param pos="0" name="hw.device" value="Storage"/>
475
+ <param pos="0" name="hw.product" value="Celerra"/>
476
+ </fingerprint>
477
+ <fingerprint pattern="^Netreon OS 1.0$">
478
+ <description>Netreon SAN software</description>
479
+ <example>Netreon OS 1.0</example>
480
+ <param pos="0" name="service.vendor" value="Netreon"/>
481
+ </fingerprint>
457
482
  <!-- VisionFS -->
458
483
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)ai(\d{4})">
459
484
  <description>AIX</description>
data/xml/snmp_sysdescr.xml CHANGED
@@ -5384,7 +5384,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5384
5384
  <param pos="1" name="os.product"/>
5385
5385
  </fingerprint>
5386
5386
  <!--======================================================================
5387
- Mikrotik
5387
+ MikroTik
5388
5388
  =======================================================================-->
5389
5389
  <fingerprint pattern="^RouterOS (RB.*)$">
5390
5390
  <description>Miktorik RouterOS</description>
@@ -5404,7 +5404,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5404
5404
  <example>RouterOS RB751G-2HnD</example>
5405
5405
  <example>RouterOS RB800</example>
5406
5406
  <example>RouterOS RB951-2n</example>
5407
- <param pos="0" name="os.vendor" value="Mikrotik"/>
5407
+ <param pos="0" name="os.vendor" value="MikroTik"/>
5408
5408
  <param pos="0" name="os.family" value="RouterOS"/>
5409
5409
  <param pos="0" name="os.device" value="Router"/>
5410
5410
  <param pos="1" name="os.product"/>
@@ -5414,7 +5414,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5414
5414
  <example>RouterOS </example>
5415
5415
  <example>RouterOS x86</example>
5416
5416
  <example>RouterOS x86 </example>
5417
- <param pos="0" name="os.vendor" value="Mikrotik"/>
5417
+ <param pos="0" name="os.vendor" value="MikroTik"/>
5418
5418
  <param pos="0" name="os.family" value="RouterOS"/>
5419
5419
  <param pos="0" name="os.device" value="Router"/>
5420
5420
  </fingerprint>
data/xml/ssh_banners.xml CHANGED
@@ -17,6 +17,11 @@
17
17
  <param pos="0" name="service.product" value="RomSShell"/>
18
18
  <param pos="1" name="service.version"/>
19
19
  </fingerprint>
20
+ <fingerprint pattern="(?i)^DraySSH_\S+$">
21
+ <description>DrayTek generic</description>
22
+ <example>DraySSH_2.0</example>
23
+ <param pos="0" name="hw.vendor" value="DrayTek"/>
24
+ </fingerprint>
20
25
  <fingerprint pattern="^mpSSH_([\d\.]+)$">
21
26
  <description>HP Integrated Lights Out (iLO) usually bundled with HP servers</description>
22
27
  <example>mpSSH_0.0.1</example>
@@ -47,6 +52,14 @@
47
52
  <param pos="1" name="service.version"/>
48
53
  <param pos="0" name="service.cpe23" value="cpe:/a:ipswitch:ws_ftp:{service.version}"/>
49
54
  </fingerprint>
55
+ <fingerprint pattern="IPSSH[-_]([\d\.p]+).*$">
56
+ <description>VxWorks with version information</description>
57
+ <example os.version="6.9.0">IPSSH-6.9.0</example>
58
+ <param pos="0" name="os.vendor" value="Wind River"/>
59
+ <param pos="0" name="os.product" value="VxWorks"/>
60
+ <param pos="1" name="os.version"/>
61
+ <param pos="0" name="os.cpe23" value="cpe:/o:windriver:vxworks:{os.version}"/>
62
+ </fingerprint>
50
63
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(FreeBSD[ -].*)$">
51
64
  <description>OpenSSH running on FreeBSD</description>
52
65
  <example service.version="7.2" openssh.comment="FreeBSD-20160310">OpenSSH_7.2 FreeBSD-20160310</example>
@@ -712,6 +725,14 @@
712
725
  <param pos="0" name="os.product" value="Wireless LAN Controller"/>
713
726
  <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller:-"/>
714
727
  </fingerprint>
728
+ <fingerprint pattern="(?i)^Cleo (\S+)/(\S+) SSH FTP server$">
729
+ <description>Cleo networks Harmony, VLProxy, VLTrader, others</description>
730
+ <example service.product="Harmony" service.version="5.5.0.3">Cleo Harmony/5.5.0.3 SSH FTP server</example>
731
+ <example service.product="VLProxy" service.version="3.2">Cleo VLProxy/3.2 SSH FTP server</example>
732
+ <param pos="0" name="service.vendor" value="Cleo"/>
733
+ <param pos="1" name="service.product"/>
734
+ <param pos="2" name="service.version"/>
735
+ </fingerprint>
715
736
  <fingerprint pattern="^Sun_SSH_(.*)$">
716
737
  <description>Sun SSH banner</description>
717
738
  <example service.version="1.1">Sun_SSH_1.1</example>
@@ -724,7 +745,7 @@
724
745
  <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:-"/>
725
746
  </fingerprint>
726
747
  <fingerprint pattern="^SSH Protocol Compatible Server SCS (.*)$">
727
- <description>Netscreen</description>
748
+ <description>Netscreen with version</description>
728
749
  <param pos="1" name="service.version"/>
729
750
  <param pos="0" name="service.vendor" value="Juniper"/>
730
751
  <param pos="0" name="service.family" value="NetScreen"/>
@@ -736,7 +757,7 @@
736
757
  <param pos="0" name="os.cpe23" value="cpe:/o:juniper:screenos:-"/>
737
758
  </fingerprint>
738
759
  <fingerprint pattern="^NetScreen$">
739
- <description>Netscreen</description>
760
+ <description>Netscreen generic</description>
740
761
  <example>NetScreen</example>
741
762
  <param pos="0" name="service.vendor" value="Juniper"/>
742
763
  <param pos="0" name="service.family" value="NetScreen"/>
@@ -747,9 +768,23 @@
747
768
  <param pos="0" name="os.product" value="ScreenOS"/>
748
769
  <param pos="0" name="os.cpe23" value="cpe:/o:juniper:screenos:-"/>
749
770
  </fingerprint>
750
- <fingerprint pattern="^(?:HUAWEI-VRP-?|VRP-)(.*)$">
771
+ <fingerprint pattern="^HUAWEI-(?:[\d\.]+)$">
772
+ <description>Huawei generic</description>
773
+ <example>HUAWEI-1.5</example>
774
+ <param pos="0" name="hw.vendor" value="Huawei"/>
775
+ </fingerprint>
776
+ <fingerprint pattern="^HUAWEI-UMG(\d+)">
777
+ <description>Huawei Universal Media Gateway</description>
778
+ <example hw.model="8900">HUAWEI-UMG8900</example>
779
+ <param pos="0" name="hw.vendor" value="Huawei"/>
780
+ <param pos="0" name="hw.product" value="Universal Media Gateway"/>
781
+ <param pos="0" name="hw.device" value="Telecom"/>
782
+ <param pos="1" name="hw.model"/>
783
+ </fingerprint>
784
+ <fingerprint pattern="^HUAWEI.VRP.([\d\.]+)$">
751
785
  <description>Huawei Versatile Routing Platform (VRP)</description>
752
786
  <example os.version="3.10" service.version="3.10">HUAWEI-VRP-3.10</example>
787
+ <example os.version="8.0" service.version="8.0">HUAWEI_VRPV8.0</example>
753
788
  <param pos="0" name="service.vendor" value="Huawei"/>
754
789
  <param pos="0" name="service.family" value="VRP"/>
755
790
  <param pos="0" name="service.product" value="VRP"/>
@@ -794,7 +829,7 @@
794
829
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
795
830
  </fingerprint>
796
831
  <fingerprint pattern="^([^\s]+) FlowSsh: (?:Bitvise SSH Server \(WinSSHD\)|WinSSHD) ([\d\.]+):?.*$">
797
- <description>Bitvise WinSSHD (which uses Bitvise flowssh)</description>
832
+ <description>Bitvise WinSSHD (which uses Bitvise flowssh) with version</description>
798
833
  <example service.version="5.09" service.component.version="1.03">1.03 FlowSsh: WinSSHD 5.09</example>
799
834
  <example service.version="5.20" service.component.version="1.07">1.07 FlowSsh: WinSSHD 5.20: free only for personal non-commercial use</example>
800
835
  <example service.version="6.03" service.component.version="5.21">5.21 FlowSsh: Bitvise SSH Server (WinSSHD) 6.03: free only for personal non-commercial use</example>
@@ -811,6 +846,22 @@
811
846
  <param pos="0" name="os.product" value="Windows"/>
812
847
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
813
848
  </fingerprint>
849
+ <fingerprint pattern="^([^\s]+) FlowSsh: (?:Bitvise SSH Server \(WinSSHD\)|WinSSHD)(?: :.*)?$">
850
+ <description>Bitvise WinSSHD (which uses Bitvise flowssh) without version</description>
851
+ <example service.component.version="9.99">9.99 FlowSsh: Bitvise SSH Server (WinSSHD)</example>
852
+ <example service.component.version="9.99">9.99 FlowSsh: Bitvise SSH Server (WinSSHD) : free only for personal non-commercial use</example>
853
+ <param pos="1" name="service.component.version"/>
854
+ <param pos="0" name="service.component.vendor" value="Bitvise"/>
855
+ <param pos="0" name="service.component.family" value="flowssh"/>
856
+ <param pos="0" name="service.component.product" value="flowssh"/>
857
+ <param pos="0" name="service.vendor" value="Bitvise"/>
858
+ <param pos="0" name="service.family" value="WinSSHD"/>
859
+ <param pos="0" name="service.product" value="WinSSHD"/>
860
+ <param pos="0" name="os.vendor" value="Microsoft"/>
861
+ <param pos="0" name="os.family" value="Windows"/>
862
+ <param pos="0" name="os.product" value="Windows"/>
863
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
864
+ </fingerprint>
814
865
  <fingerprint pattern="^([^\s]+) sshlib: MOVEit DMZ SSH (.*)$">
815
866
  <description>MOVEit DMZ (which uses Bitvise sshlib)</description>
816
867
  <param pos="1" name="service.component.version"/>
@@ -826,6 +877,14 @@
826
877
  <param pos="0" name="os.product" value="Windows"/>
827
878
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
828
879
  </fingerprint>
880
+ <fingerprint pattern="^paramiko_([\d\.]+).*$">
881
+ <description>Paramiko</description>
882
+ <example service.version="2.1.3">paramiko_2.1.3 501 command not implemented ERROR</example>
883
+ <example service.version="2.1.4">paramiko_2.1.4</example>
884
+ <param pos="0" name="service.vendor" value="Paramiko"/>
885
+ <param pos="0" name="service.product" value="Paramiko"/>
886
+ <param pos="1" name="service.version"/>
887
+ </fingerprint>
829
888
  <fingerprint pattern="^Pragma SecureShell\s*(.*)$">
830
889
  <description>Pragma SecureShell</description>
831
890
  <param pos="1" name="service.version"/>
@@ -851,6 +910,19 @@
851
910
  <param pos="0" name="os.product" value="Windows"/>
852
911
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
853
912
  </fingerprint>
913
+ <fingerprint pattern="^RebexSSH_([\d\.]+)$">
914
+ <description>Rbex SSH</description>
915
+ <example service.version="1.0.5.25508">RebexSSH_1.0.5.25508</example>
916
+ <param pos="0" name="service.vendor" value="Ruijie"/>
917
+ <param pos="0" name="service.product" value="SSH"/>
918
+ <param pos="1" name="service.version"/>
919
+ </fingerprint>
920
+ <fingerprint pattern="^RGOS_\S+$">
921
+ <description>Ruijie Networks SSH</description>
922
+ <example>RGOS_SSH_1.0</example>
923
+ <example>RGOS_PK3223</example>
924
+ <param pos="0" name="hw.vendor" value="Ruijie"/>
925
+ </fingerprint>
854
926
  <fingerprint pattern="^VShell_(?:Special_Edition_)?(\d+)_(\d+)_(\d+)_(\d+) VShell$">
855
927
  <description>VanDyke VShell</description>
856
928
  <example service.version="3" service.version.version="6" service.version.version.version="2" service.version.version.version.version="446">VShell_3_6_2_446 VShell</example>
data/xml/telnet_banners.xml CHANGED
@@ -1270,9 +1270,9 @@
1270
1270
  U3lzdGVtIGFkbWluaXN0cmF0b3IgaXMgY29ubmVjdGluZyBmcm9tIDU0LjM5LjE3My44NgoKUmVqZWN0IH
1271
1271
  RoZSBjb25uZWN0aW9uIHJlcXVlc3QgISEh
1272
1272
  </example>
1273
- <param pos="0" name="os.vendor" value="Draytek"/>
1274
- <param pos="0" name="os.device" value="Broadband router"/>
1275
- <param pos="0" name="os.product" value="Vigor"/>
1273
+ <param pos="0" name="hw.vendor" value="DrayTek"/>
1274
+ <param pos="0" name="hw.device" value="Broadband router"/>
1275
+ <param pos="0" name="hw.product" value="Vigor"/>
1276
1276
  </fingerprint>
1277
1277
  <fingerprint pattern=".*Version\s(\d*.\d*)\/OpenBSD.*">
1278
1278
  <description>OpenBSD</description>
data/xml/upnp_banners.xml CHANGED
@@ -41,13 +41,19 @@
41
41
  </fingerprint>
42
42
  <fingerprint pattern="(?i)^DrayTek/Vigor(\S+) UPnP/\S+ miniupnpd/(\S+)$">
43
43
  <description>DrayTek Vigor router UPnP Server</description>
44
- <example>DrayTek/Vigor2130 UPnP/1.0 miniupnpd/1.0</example>
44
+ <example hw.model="2130">DrayTek/Vigor2130 UPnP/1.0 miniupnpd/1.0</example>
45
45
  <param pos="0" name="service.product" value="MiniUPnP"/>
46
46
  <param pos="2" name="service.version"/>
47
- <param pos="0" name="os.vendor" value="DrayTek"/>
48
- <param pos="0" name="os.family" value="Vigor"/>
49
- <param pos="1" name="os.product"/>
50
- <param pos="0" name="os.device" value="Router"/>
47
+ <param pos="0" name="hw.vendor" value="DrayTek"/>
48
+ <param pos="0" name="hw.product" value="Vigor"/>
49
+ <param pos="1" name="hw.model"/>
50
+ <param pos="0" name="hw.device" value="Router"/>
51
+ </fingerprint>
52
+ <fingerprint pattern="(?i)Linux UPnP/\d\.\d Huawei-ATP-IGD$">
53
+ <description>Huawei Echolife / Home Gateway (and possibly other) devices with UPnP</description>
54
+ <example>Linux UPnP/1.0 Huawei-ATP-IGD</example>
55
+ <param pos="0" name="hw.vendor" value="Huawei"/>
56
+ <param pos="0" name="hw.device" value="Broadband router"/>
51
57
  </fingerprint>
52
58
  <fingerprint pattern="(?i)^OpenWRT/kamikaze UPnP/\S+ MiniUPnPd/(\S+)$">
53
59
  <description>OpenWRT Kamikaze WAP UPnP Server</description>
@@ -555,7 +561,7 @@
555
561
  <param pos="1" name="host.name"/>
556
562
  </fingerprint>
557
563
  <fingerprint pattern="^RouterOS/(\S+)UPnP/1.0 MikroTik UPnP/1.0$">
558
- <description>Mikrotik RouterOS</description>
564
+ <description>MikroTik RouterOS</description>
559
565
  <example os.version="6.43">RouterOS/6.43UPnP/1.0 MikroTik UPnP/1.0</example>
560
566
  <param pos="0" name="os.vendor" value="MikroTik"/>
561
567
  <param pos="0" name="os.device" value="Router"/>
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: recog
3
3
  version: !ruby/object:Gem::Version
4
- version: 2.1.40
4
+ version: 2.1.41
5
5
  platform: ruby
6
6
  authors:
7
7
  - Rapid7 Research
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2018-12-26 00:00:00.000000000 Z
11
+ date: 2018-12-31 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: rspec