recog 2.3.12 → 2.3.17
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.github/SECURITY.md +35 -0
- data/.snyk +10 -0
- data/LICENSE +1 -1
- data/bin/recog_standardize +2 -2
- data/cpe-remap.yaml +46 -14
- data/identifiers/hw_device.txt +3 -4
- data/identifiers/hw_family.txt +6 -0
- data/identifiers/hw_product.txt +17 -6
- data/identifiers/os_architecture.txt +0 -10
- data/identifiers/os_device.txt +11 -31
- data/identifiers/os_family.txt +1 -95
- data/identifiers/os_product.txt +9 -117
- data/identifiers/service_family.txt +4 -36
- data/identifiers/service_product.txt +211 -92
- data/identifiers/vendor.txt +46 -194
- data/lib/recog/version.rb +1 -1
- data/requirements.txt +1 -1
- data/update_cpes.py +93 -45
- data/xml/dns_versionbind.xml +39 -16
- data/xml/favicons.xml +42 -17
- data/xml/ftp_banners.xml +39 -24
- data/xml/hp_pjl_id.xml +1 -1
- data/xml/html_title.xml +72 -22
- data/xml/http_cookies.xml +4 -1
- data/xml/http_servers.xml +342 -73
- data/xml/http_wwwauth.xml +20 -20
- data/xml/imap_banners.xml +39 -0
- data/xml/ldap_searchresult.xml +9 -6
- data/xml/ntp_banners.xml +1 -1
- data/xml/operating_system.xml +1 -0
- data/xml/pop_banners.xml +55 -2
- data/xml/sip_user_agents.xml +3 -3
- data/xml/smb_native_os.xml +1 -0
- data/xml/smtp_banners.xml +7 -2
- data/xml/smtp_help.xml +2 -0
- data/xml/smtp_vrfy.xml +2 -1
- data/xml/snmp_sysdescr.xml +125 -87
- data/xml/ssh_banners.xml +1 -1
- data/xml/telnet_banners.xml +155 -15
- data/xml/x509_issuers.xml +8 -5
- data/xml/x509_subjects.xml +25 -17
- metadata +4 -5
- data/identifiers/software_class.txt +0 -26
- data/identifiers/software_family.txt +0 -91
- data/identifiers/software_product.txt +0 -333
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: f593d696005c5d90c90e99a3ff779f11e73eeb28d94c6fed500bef2124502803
|
|
4
|
+
data.tar.gz: 555a3b4fc6ba321c11d0479cc6054e4f316fa810d567bdddf2dfa2de08788043
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: eeddda28aaf2233544f1f4072d1f1d62431d5a8ade16edfb39f57aa05d8199794305c043af3618bced6b752f247709fc5b0f6ee430309779e5ed56bd0f963cc7
|
|
7
|
+
data.tar.gz: 32c03df36eef13503fdeb2ebdb5a54a5fc26e682ced5b43e047d5e885135019e19b6617845dd0087d7c06c246dc49c6866ed00585e8b6978a1db9c58dc1ce4ad
|
data/.github/SECURITY.md
ADDED
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
# Reporting security issues
|
|
2
|
+
|
|
3
|
+
Thanks for your interest in making Recog more secure! If you feel
|
|
4
|
+
that you have found a security issue involving Metasploit, Meterpreter,
|
|
5
|
+
Recog, or any other Rapid7 open source project, you are welcome to let
|
|
6
|
+
us know in the way that's most comfortable for you.
|
|
7
|
+
|
|
8
|
+
## Via ZenDesk
|
|
9
|
+
|
|
10
|
+
You can click on the big blue button at [Rapid7's Vulnerability
|
|
11
|
+
Disclosure][r7-vulns] page, which will get you to our general
|
|
12
|
+
vulnerability reporting system. While this does require a (free) ZenDesk
|
|
13
|
+
account to use, you'll get regular updates on your issue as our software
|
|
14
|
+
support teams work through it. As it happens [that page][r7-vulns] also
|
|
15
|
+
will tell you what to expect when it comes to reporting vulns, how fast
|
|
16
|
+
we'll fix and respond, and all the rest, so it's a pretty good read
|
|
17
|
+
regardless.
|
|
18
|
+
|
|
19
|
+
## Via email
|
|
20
|
+
|
|
21
|
+
If you're more of a traditionalist, you can email your finding to
|
|
22
|
+
security@rapid7.com. If you like, you can use our [PGP key][pgp] to
|
|
23
|
+
encrypt your messages, but we certainly don't mind cleartext reports
|
|
24
|
+
over email.
|
|
25
|
+
|
|
26
|
+
## NOT via GitHub Issues
|
|
27
|
+
|
|
28
|
+
Please don't! Disclosing security vulnerabilities to public bug trackers
|
|
29
|
+
is kind of mean, even when it's well-intentioned, since you end up
|
|
30
|
+
dropping 0-day on pretty much everyone right out of the gate. We'd prefer
|
|
31
|
+
you didn't!
|
|
32
|
+
|
|
33
|
+
[r7-vulns]:https://www.rapid7.com/security/disclosure/
|
|
34
|
+
[pgp]:https://keybase.io/rapid7/pgp_keys.asc?fingerprint=9a90aea0576cbcafa39c502ba5e16807959d3eda
|
|
35
|
+
|
data/.snyk
ADDED
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
|
|
2
|
+
python: 3.6.0
|
|
3
|
+
version: v1.14.1
|
|
4
|
+
# ignores vulnerabilities until expiry date; change duration by modifying expiry date
|
|
5
|
+
ignore:
|
|
6
|
+
SNYK-PYTHON-PYYAML-590151:
|
|
7
|
+
- pyyaml:
|
|
8
|
+
reason: Project doesn't use vulnerable code path.
|
|
9
|
+
expires: 2021-06-01T00:00:00.000Z
|
|
10
|
+
patch: {}
|
data/LICENSE
CHANGED
data/bin/recog_standardize
CHANGED
|
@@ -68,7 +68,7 @@ ARGV.each do |arg|
|
|
|
68
68
|
f.params.each do |k,v|
|
|
69
69
|
paramIndex, val = v
|
|
70
70
|
next if paramIndex != 0
|
|
71
|
-
next if val.index("{") !=
|
|
71
|
+
next if val.index("{") != nil
|
|
72
72
|
next if val.strip == ""
|
|
73
73
|
case k
|
|
74
74
|
when "os.vendor", "service.vendor", "service.component.vendor", "hw.vendor"
|
|
@@ -111,7 +111,7 @@ ARGV.each do |arg|
|
|
|
111
111
|
puts "HW DEVICE MISSING: #{val}"
|
|
112
112
|
hw_device[val] = true
|
|
113
113
|
end
|
|
114
|
-
when "service.product"
|
|
114
|
+
when "service.product", "service.component.product"
|
|
115
115
|
if ! svc_prod[val]
|
|
116
116
|
puts "SERVICE PRODUCT MISSING: #{val}"
|
|
117
117
|
svc_prod[val] = true
|
data/cpe-remap.yaml
CHANGED
|
@@ -1,17 +1,19 @@
|
|
|
1
1
|
mappings:
|
|
2
2
|
alpine:
|
|
3
3
|
vendor: alpinelinux
|
|
4
|
+
products:
|
|
5
|
+
linux: alpine_linux
|
|
4
6
|
apache:
|
|
5
|
-
vendor: apache
|
|
6
7
|
products:
|
|
7
8
|
httpd: http_server
|
|
8
9
|
apple:
|
|
9
10
|
products:
|
|
10
11
|
ios: iphone_os
|
|
12
|
+
aprelium_technologies:
|
|
13
|
+
vendor: aprelium
|
|
11
14
|
alt-n:
|
|
12
15
|
vendor: altn
|
|
13
16
|
bea:
|
|
14
|
-
vendor: bea
|
|
15
17
|
products:
|
|
16
18
|
weblogic: weblogic_server
|
|
17
19
|
blue_coat:
|
|
@@ -21,63 +23,83 @@ mappings:
|
|
|
21
23
|
products:
|
|
22
24
|
cyrus_imap: cyrus_imap_server
|
|
23
25
|
centos:
|
|
24
|
-
vendor: centos
|
|
25
26
|
products:
|
|
26
27
|
linux: centos
|
|
28
|
+
centos_webpanel:
|
|
29
|
+
vendor: centos-webpanel
|
|
27
30
|
check_point:
|
|
28
31
|
vendor: checkpoint
|
|
29
32
|
cisco:
|
|
30
33
|
vendor: cisco
|
|
31
34
|
products:
|
|
32
35
|
adaptive_security_appliance: adaptive_security_appliance_software
|
|
36
|
+
apic: application_policy_infrastructure_controller
|
|
33
37
|
pix: pix_firewall_software
|
|
34
38
|
telepresence: telepresence_video_communication_server_software
|
|
39
|
+
crushftp:
|
|
40
|
+
products:
|
|
41
|
+
crushftp_web_interface: crushftp
|
|
42
|
+
data_domain:
|
|
43
|
+
vendor: dell
|
|
44
|
+
products:
|
|
45
|
+
dd_os: emc_data_domain_os
|
|
35
46
|
debian:
|
|
36
|
-
vendor: debian
|
|
37
47
|
products:
|
|
38
48
|
linux: debian_linux
|
|
49
|
+
drupal:
|
|
50
|
+
products:
|
|
51
|
+
cms: drupal
|
|
39
52
|
embedthis:
|
|
40
53
|
products:
|
|
41
54
|
goahead_webserver: goahead
|
|
55
|
+
emc:
|
|
56
|
+
products:
|
|
57
|
+
celerra: celerra_network_attached_storage
|
|
42
58
|
f5:
|
|
43
|
-
vendor: f5
|
|
44
59
|
products:
|
|
45
60
|
big-ip: big-ip_local_traffic_manager
|
|
46
61
|
big-ip_ltm: big-ip_local_traffic_manager
|
|
62
|
+
fedora_project:
|
|
63
|
+
vendor: fedoraproject
|
|
47
64
|
hp:
|
|
48
|
-
vendor: hp
|
|
49
65
|
products:
|
|
50
66
|
ilo: integrated_lights_out
|
|
51
67
|
tru64_unix: tru64
|
|
52
68
|
ibm:
|
|
53
|
-
vendor: ibm
|
|
54
69
|
products:
|
|
55
70
|
lotus_domino: lotus_domino_server
|
|
56
71
|
ibm_domino: lotus_domino
|
|
57
72
|
os/400: os_400
|
|
73
|
+
intel:
|
|
74
|
+
products:
|
|
75
|
+
intel(r)_active_management_technology: active_management_technology
|
|
76
|
+
intel(r)_standard_manageability: standard_manageability
|
|
58
77
|
jamf:
|
|
59
78
|
products:
|
|
60
79
|
jamf_pro: jamf
|
|
61
80
|
juniper:
|
|
62
|
-
vendor: juniper
|
|
63
81
|
products:
|
|
64
82
|
junos_os: junos
|
|
65
83
|
kibana:
|
|
66
84
|
vendor: elasticsearch
|
|
85
|
+
kodi:
|
|
86
|
+
products:
|
|
87
|
+
media_server: kodi
|
|
67
88
|
cz.nic:
|
|
68
89
|
vendor: knot-dns
|
|
69
90
|
litespeed_technologies:
|
|
70
91
|
vendor: litespeedtech
|
|
71
92
|
linux:
|
|
72
|
-
vendor: linux
|
|
73
93
|
products:
|
|
74
94
|
linux: linux_kernel
|
|
95
|
+
lynx_technology:
|
|
96
|
+
vendor: lynxtechnology
|
|
97
|
+
products:
|
|
98
|
+
twonky_media_server: twonky_server
|
|
75
99
|
mailenable:
|
|
76
|
-
vendor: mailenable
|
|
77
100
|
products:
|
|
78
101
|
mail_server: mailenable
|
|
79
102
|
microsoft:
|
|
80
|
-
vendor: microsoft
|
|
81
103
|
products:
|
|
82
104
|
active_directory_controller: active_directory
|
|
83
105
|
exchange_server_5.5: exchange_server
|
|
@@ -105,14 +127,18 @@ mappings:
|
|
|
105
127
|
vendor: modwsgi
|
|
106
128
|
mort_bay:
|
|
107
129
|
vendor: mortbay
|
|
130
|
+
munin:
|
|
131
|
+
vendor: munin-monitoring
|
|
108
132
|
nlnet_labs:
|
|
109
133
|
vendor: nlnetlabs
|
|
110
134
|
products:
|
|
111
135
|
dnsd: name_server_daemon
|
|
112
136
|
net-snmp:
|
|
113
|
-
vendor: net-snmp
|
|
114
137
|
products:
|
|
115
138
|
snmp_agent: net-snmp
|
|
139
|
+
owncloud:
|
|
140
|
+
products:
|
|
141
|
+
owncloud_server: owncloud
|
|
116
142
|
palo_alto_networks:
|
|
117
143
|
vendor: paloaltonetworks
|
|
118
144
|
products:
|
|
@@ -124,6 +150,11 @@ mappings:
|
|
|
124
150
|
vendor: parallels
|
|
125
151
|
proftpd_project:
|
|
126
152
|
vendor: proftpd
|
|
153
|
+
progress:
|
|
154
|
+
products:
|
|
155
|
+
openedge_explorer: openedge
|
|
156
|
+
pulse_secure:
|
|
157
|
+
vendor: pulsesecure
|
|
127
158
|
realvnc_ltd.:
|
|
128
159
|
vendor: realvnc
|
|
129
160
|
red_hat:
|
|
@@ -141,6 +172,8 @@ mappings:
|
|
|
141
172
|
vendor: sun
|
|
142
173
|
products:
|
|
143
174
|
solaris: sunos
|
|
175
|
+
swagger:
|
|
176
|
+
vendor: smartbear
|
|
144
177
|
tandberg:
|
|
145
178
|
vendor: cisco
|
|
146
179
|
tightvnc:
|
|
@@ -155,15 +188,14 @@ mappings:
|
|
|
155
188
|
vandyke_software:
|
|
156
189
|
vendor: vandyke
|
|
157
190
|
vmware:
|
|
158
|
-
vendor: vmware
|
|
159
191
|
products:
|
|
160
192
|
photon_linux: photon_os
|
|
161
193
|
zimbra: zimbra_desktop
|
|
194
|
+
vcenter: vcenter_server
|
|
162
195
|
vmware_esx_server: esx
|
|
163
196
|
vmware_esxi_server: esxi
|
|
164
197
|
wind_river:
|
|
165
198
|
vendor: windriver
|
|
166
199
|
x.org:
|
|
167
|
-
vendor: x.org
|
|
168
200
|
products:
|
|
169
201
|
x.org_x11: x11
|
data/identifiers/hw_device.txt
CHANGED
|
@@ -4,7 +4,7 @@ Access Control
|
|
|
4
4
|
Alarm Panel
|
|
5
5
|
Appliance
|
|
6
6
|
Audio Encoder
|
|
7
|
-
Broadband
|
|
7
|
+
Broadband Router
|
|
8
8
|
Building Automation
|
|
9
9
|
Cable Modem
|
|
10
10
|
Check Scanner
|
|
@@ -40,10 +40,10 @@ Network Appliance
|
|
|
40
40
|
Network Audio
|
|
41
41
|
Network Management Device
|
|
42
42
|
PLC
|
|
43
|
+
Power Device
|
|
43
44
|
Power Relay
|
|
44
|
-
Power device
|
|
45
45
|
Powerline
|
|
46
|
-
Print
|
|
46
|
+
Print Server
|
|
47
47
|
Printer
|
|
48
48
|
Router
|
|
49
49
|
SD-WAN Appliance
|
|
@@ -71,7 +71,6 @@ VoIP Switch
|
|
|
71
71
|
Voice Appliance
|
|
72
72
|
WAP
|
|
73
73
|
WLAN Repeater
|
|
74
|
-
Web cam
|
|
75
74
|
Whiteboard
|
|
76
75
|
Wireless Controller
|
|
77
76
|
Wireless Presenter
|
data/identifiers/hw_family.txt
CHANGED
|
@@ -7,6 +7,7 @@ Communication Manager
|
|
|
7
7
|
DVR
|
|
8
8
|
DiskStation
|
|
9
9
|
Document Centre
|
|
10
|
+
EDR
|
|
10
11
|
Extended Systems ExtendNet
|
|
11
12
|
FRITZ!Box
|
|
12
13
|
FRITZ!Powerline
|
|
@@ -36,6 +37,7 @@ Mac mini
|
|
|
36
37
|
MacBook
|
|
37
38
|
MacBook Pro
|
|
38
39
|
MegaRAC
|
|
40
|
+
MiiNePort
|
|
39
41
|
Multifunction
|
|
40
42
|
My Book
|
|
41
43
|
NE
|
|
@@ -59,6 +61,10 @@ SIP Device
|
|
|
59
61
|
SIP Gateway
|
|
60
62
|
Service Access Switch
|
|
61
63
|
Service Router
|
|
64
|
+
Simatic HMI
|
|
65
|
+
Simatic NET
|
|
66
|
+
Simatic S7
|
|
67
|
+
Simatic Sinumerik
|
|
62
68
|
SoundPoint
|
|
63
69
|
SoundTouch
|
|
64
70
|
SpeedTouch
|
data/identifiers/hw_product.txt
CHANGED
|
@@ -7,11 +7,13 @@ ADB-4820CD
|
|
|
7
7
|
APIC
|
|
8
8
|
AV Receiver
|
|
9
9
|
AVC787
|
|
10
|
+
Access Control
|
|
10
11
|
Access Gateway
|
|
11
12
|
Access Point
|
|
12
13
|
Adaptive Security Appliance
|
|
13
14
|
AirPort Express
|
|
14
15
|
AirPort Extreme
|
|
16
|
+
Alarm Panel
|
|
15
17
|
AppDynamics
|
|
16
18
|
Apple TV (2nd generation)
|
|
17
19
|
Apple TV (3rd generation)
|
|
@@ -38,6 +40,7 @@ CloudKey
|
|
|
38
40
|
CommandPost
|
|
39
41
|
ConnectUPS Web Card
|
|
40
42
|
Crosswork SON Appliance
|
|
43
|
+
DCS-932
|
|
41
44
|
DD OS
|
|
42
45
|
DNA Center
|
|
43
46
|
DSL Router
|
|
@@ -47,6 +50,9 @@ Discovery
|
|
|
47
50
|
Document Centre
|
|
48
51
|
DuraFon
|
|
49
52
|
ECOM100
|
|
53
|
+
EDR-G902
|
|
54
|
+
EDR-G903
|
|
55
|
+
EM7
|
|
50
56
|
EP-series
|
|
51
57
|
EXA Signal Analyzer
|
|
52
58
|
Eagle Eye Director II
|
|
@@ -67,12 +73,12 @@ FortiManager
|
|
|
67
73
|
GigaVUE
|
|
68
74
|
HDHomeRun
|
|
69
75
|
HDIPCam
|
|
70
|
-
HDX {hw.model}
|
|
71
76
|
HiPer Access Router Card
|
|
72
77
|
Home Controller
|
|
73
78
|
Home Gateway
|
|
74
79
|
HomePod
|
|
75
80
|
Hue
|
|
81
|
+
HyperFlex Connect
|
|
76
82
|
IA Appliance
|
|
77
83
|
IAM
|
|
78
84
|
IBHLink S7++
|
|
@@ -161,12 +167,14 @@ Makito X Decoder
|
|
|
161
167
|
MediaLink Controller
|
|
162
168
|
MediaSense
|
|
163
169
|
Meeting Management
|
|
170
|
+
Meeting Server
|
|
164
171
|
MegaRAC
|
|
165
172
|
Mercury
|
|
166
173
|
Mergepoint
|
|
167
174
|
Miniserver
|
|
168
175
|
My Book Live
|
|
169
176
|
N5172B Signal Generator
|
|
177
|
+
NAS4Free
|
|
170
178
|
NFVIS
|
|
171
179
|
NPort
|
|
172
180
|
NetScreen
|
|
@@ -174,7 +182,9 @@ NetVR
|
|
|
174
182
|
Netbox
|
|
175
183
|
Network Gateway
|
|
176
184
|
Network Node
|
|
185
|
+
Nexus 1000V
|
|
177
186
|
Nexus Player
|
|
187
|
+
OfficeConnect Switch
|
|
178
188
|
OnHub
|
|
179
189
|
OpenManage
|
|
180
190
|
OpenManage Switch
|
|
@@ -195,12 +205,10 @@ RTU
|
|
|
195
205
|
Rack PDU Card
|
|
196
206
|
Raspberry Pi
|
|
197
207
|
ReadyNAS
|
|
198
|
-
RealPresence Group {hw.model}
|
|
199
|
-
RealPresence Trio {hw.model}
|
|
200
208
|
RecoverPoint
|
|
201
209
|
ReeCam
|
|
202
210
|
Roku
|
|
203
|
-
Room Alert
|
|
211
|
+
Room Alert
|
|
204
212
|
S7 DALI Gateway
|
|
205
213
|
SHIELD
|
|
206
214
|
SIP Gateway
|
|
@@ -224,6 +232,7 @@ Spot
|
|
|
224
232
|
Stealthwatch
|
|
225
233
|
Storage Appliance
|
|
226
234
|
Sub
|
|
235
|
+
Sunny WebBox
|
|
227
236
|
SuperStack 3
|
|
228
237
|
SuperStack 3 Firewall
|
|
229
238
|
SuperStack II
|
|
@@ -231,16 +240,16 @@ Symmetry EN-2DBC
|
|
|
231
240
|
System Management
|
|
232
241
|
TelePresence
|
|
233
242
|
TelePresence MCU
|
|
234
|
-
TemPageR {hw.product.model}
|
|
235
243
|
Tenable Appliance
|
|
236
244
|
Tenable Core
|
|
237
|
-
|
|
245
|
+
Tetration
|
|
238
246
|
Time Capsule
|
|
239
247
|
TouchLink Control Panel
|
|
240
248
|
UCS Manager
|
|
241
249
|
UniFi Cloud Key
|
|
242
250
|
UniFi NVR
|
|
243
251
|
UniFi Security Gateway
|
|
252
|
+
Univerge
|
|
244
253
|
Universal Media Gateway
|
|
245
254
|
VBrick Rev
|
|
246
255
|
Verizon FiOS Router
|
|
@@ -256,6 +265,7 @@ Wireless Dock
|
|
|
256
265
|
Wireless LAN Controller
|
|
257
266
|
Wireless Router
|
|
258
267
|
XCC
|
|
268
|
+
Xfinity Broadband Router
|
|
259
269
|
Xserve (Early 2008)
|
|
260
270
|
Xserve (Early 2009)
|
|
261
271
|
Xserve (Late 2006)
|
|
@@ -268,6 +278,7 @@ e-STUDIO
|
|
|
268
278
|
iCOM Control Panel
|
|
269
279
|
iDRAC
|
|
270
280
|
iLO
|
|
281
|
+
iLO 3
|
|
271
282
|
iMac (21.5-inch, 2017)
|
|
272
283
|
iMac (21.5-inch, Late 2012)
|
|
273
284
|
iMac (21.5-inch, Late 2013)
|