recog 2.3.14 → 2.3.19

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c46efafef760f2701e6eeee565e715ac04544300ebfb08f0083db856e4c81603
-  data.tar.gz: 4e66bbd5ec6364325c9c7130aeb7434ab20242def9d7200d0e7d8e588f577c40
+  metadata.gz: 1730f78c5d43d5e0bf074820df10e11d051112e1f35a768807942cef830c8752
+  data.tar.gz: f4bbfb15e03793f02bed6da87e76ff6750a737b08957f216a41377ad5dd4e77f
 SHA512:
-  metadata.gz: 61ca19b2266100f66d6c220459941ddbc0aa795cbcd2bc52c6782cd66feeb6787a3d1657486ff2af99c196592b5cdabcb2c4d9b33e7efe136f175d2bf5c12bbc
-  data.tar.gz: dd5718510eb4780815fda18496c37afcbb4971246d2b9c6e439ca4697ac17ca1f9e70d3f634b04b5b9be7374e4fc15a346d3177ac5cf827c50e9136f48169009
+  metadata.gz: 0ddc88f9553b8ac65157032c8d082b315dfee065fd9994bd9c4f04fb1f23738ce4b15d7e958ef85cd4d548422bbab6db7343126560242b2aacf66a0bea05794a
+  data.tar.gz: 18a1df88375afa271379547779eaeb2379f431164ac116316005ff60d2035b89608c4aec64e2a66ac9f7d27af13e58e703ead9a2f3532f8d9b1074439ad05458

data/.github/SECURITY.md

@@ -0,0 +1,35 @@
+# Reporting security issues
+
+Thanks for your interest in making Recog more secure! If you feel
+that you have found a security issue involving Metasploit, Meterpreter,
+Recog, or any other Rapid7 open source project, you are welcome to let
+us know in the way that's most comfortable for you.
+
+## Via ZenDesk
+
+You can click on the big blue button at [Rapid7's Vulnerability
+Disclosure][r7-vulns] page, which will get you to our general
+vulnerability reporting system. While this does require a (free) ZenDesk
+account to use, you'll get regular updates on your issue as our software
+support teams work through it. As it happens [that page][r7-vulns] also
+will tell you what to expect when it comes to reporting vulns, how fast
+we'll fix and respond, and all the rest, so it's a pretty good read
+regardless.
+
+## Via email
+
+If you're more of a traditionalist, you can email your finding to
+security@rapid7.com. If you like, you can use our [PGP key][pgp] to
+encrypt your messages, but we certainly don't mind cleartext reports
+over email.
+
+## NOT via GitHub Issues
+
+Please don't! Disclosing security vulnerabilities to public bug trackers
+is kind of mean, even when it's well-intentioned, since you end up
+dropping 0-day on pretty much everyone right out of the gate. We'd prefer
+you didn't!
+
+[r7-vulns]:https://www.rapid7.com/security/disclosure/
+[pgp]:https://keybase.io/rapid7/pgp_keys.asc?fingerprint=9a90aea0576cbcafa39c502ba5e16807959d3eda
+

data/.github/workflows/ci.yml

@@ -0,0 +1,26 @@
+name: CI
+
+on: [push, pull_request]
+
+jobs:
+  test:
+    name: 'Ruby: ${{ matrix.ruby-version }}'
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        ruby-version: ['2.5', '2.6', '2.7', '3.0', 'jruby-9.1.17.0', 'jruby']
+
+    steps:
+    - uses: actions/checkout@v2
+    - name: Set up Ruby
+      uses: ruby/setup-ruby@v1
+      with:
+        ruby-version: ${{ matrix.ruby-version }}
+        bundler-cache: true # runs 'bundle install' and caches installed gems automatically
+    - name: Run tests
+      run: |
+        bundle exec rake --version
+        bundle exec rake tests
+      env:
+        JRUBY_OPTS: --server -J-Xms512m -J-Xmx2G

data/.snyk

@@ -0,0 +1,10 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+python: 3.6.0
+version: v1.14.1
+# ignores vulnerabilities until expiry date; change duration by modifying expiry date
+ignore:
+  SNYK-PYTHON-PYYAML-590151:
+    - pyyaml:
+        reason: Project doesn't use vulnerable code path.
+        expires: 2021-06-01T00:00:00.000Z
+patch: {}

data/LICENSE

@@ -2,6 +2,6 @@ Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
 Source: https://github.com/rapid7/recog
 
 Files: *
-Copyright: 2014-2015, Rapid7, Inc.
+Copyright: 2014, Rapid7, Inc.
 License: BSD-2-clause
 

data/bin/recog_standardize

@@ -68,7 +68,7 @@ ARGV.each do |arg|
       f.params.each do |k,v|
         paramIndex, val = v
         next if paramIndex != 0
-        next if val.index("{") != -1
+        next if val.index("{") != nil
         next if val.strip == ""
         case k
         when "os.vendor", "service.vendor", "service.component.vendor", "hw.vendor"
@@ -111,7 +111,7 @@ ARGV.each do |arg|
             puts "HW DEVICE MISSING: #{val}"
             hw_device[val] = true
           end          
-        when "service.product"
+        when "service.product", "service.component.product"
           if ! svc_prod[val]
             puts "SERVICE PRODUCT MISSING: #{val}"
             svc_prod[val] = true

data/cpe-remap.yaml

@@ -1,17 +1,21 @@
 mappings:
   alpine:
     vendor: alpinelinux
+    products:
+      linux: alpine_linux
   apache:
-    vendor: apache
     products:
       httpd: http_server
   apple:
     products:
       ios: iphone_os
+  aprelium_technologies:
+    vendor: aprelium
   alt-n:
     vendor: altn
+  aruba_networks:
+    vendor: arubanetworks
   bea:
-    vendor: bea
     products:
       weblogic: weblogic_server
   blue_coat:
@@ -21,65 +25,90 @@ mappings:
     products:
       cyrus_imap: cyrus_imap_server
   centos:
-    vendor: centos
     products:
       linux: centos
   centos_webpanel:
     vendor: centos-webpanel
   check_point:
     vendor: checkpoint
+  cherokee_project:
+    vendor: cherokee-project
   cisco:
     vendor: cisco
     products:
       adaptive_security_appliance: adaptive_security_appliance_software
+      apic: application_policy_infrastructure_controller
       pix: pix_firewall_software
       telepresence: telepresence_video_communication_server_software
+  crushftp:
+    products:
+      crushftp_web_interface: crushftp
+  cumulus:
+    vendor: cumulusnetworks
+  data_domain:
+    vendor: dell
+    products:
+      dd_os: emc_data_domain_os
   debian:
-    vendor: debian
     products:
       linux: debian_linux
+  drupal:
+    products:
+      cms: drupal
   embedthis:
     products:
        goahead_webserver: goahead
+  emc:
+    products:
+      celerra: celerra_network_attached_storage
   f5:
-    vendor: f5
     products:
       big-ip: big-ip_local_traffic_manager
       big-ip_ltm: big-ip_local_traffic_manager
+  fedora_project:
+    vendor: fedoraproject
   hp:
-    vendor: hp
     products:
       ilo: integrated_lights_out
       tru64_unix: tru64
   ibm:
-    vendor: ibm
     products:
       lotus_domino: lotus_domino_server
       ibm_domino: lotus_domino
       os/400: os_400
+      i5/os: i5os
+  ignite_realtime:
+    vendor: igniterealtime
+  intel:
+    products:
+      intel(r)_active_management_technology: active_management_technology
+      intel(r)_standard_manageability: standard_manageability
   jamf:
     products:
       jamf_pro: jamf
   juniper:
-    vendor: juniper
     products:
       junos_os: junos
   kibana:
     vendor: elasticsearch
+  kodi:
+    products:
+      media_server: kodi
   cz.nic:
     vendor: knot-dns
   litespeed_technologies:
     vendor: litespeedtech
   linux:
-    vendor: linux
     products:
       linux: linux_kernel
+  lynx_technology:
+    vendor: lynxtechnology
+    products:
+      twonky_media_server: twonky_server
   mailenable:
-    vendor: mailenable
     products:
       mail_server: mailenable
   microsoft:
-    vendor: microsoft
     products:
       active_directory_controller: active_directory
       exchange_server_5.5: exchange_server
@@ -107,14 +136,18 @@ mappings:
     vendor: modwsgi
   mort_bay:
     vendor: mortbay
+  munin:
+    vendor: munin-monitoring
   nlnet_labs:
     vendor: nlnetlabs
     products:
       dnsd: name_server_daemon
   net-snmp:
-    vendor: net-snmp
     products:
       snmp_agent: net-snmp
+  owncloud:
+    products:
+      owncloud_server: owncloud
   palo_alto_networks:
     vendor: paloaltonetworks
     products:
@@ -126,6 +159,11 @@ mappings:
     vendor: parallels
   proftpd_project:
     vendor: proftpd
+  progress:
+    products:
+      openedge_explorer: openedge
+  pulse_secure:
+    vendor: pulsesecure
   realvnc_ltd.:
     vendor: realvnc
   red_hat:
@@ -143,11 +181,15 @@ mappings:
     vendor: sun
     products:
       solaris: sunos
+  swagger:
+    vendor: smartbear
   tandberg:
     vendor: cisco
   tightvnc:
     products:
       desktop: tightvnc
+  tor_project:
+    vendor: torproject
   ubiquiti:
     vendor: ui
   ubuntu:
@@ -157,15 +199,14 @@ mappings:
   vandyke_software:
     vendor: vandyke
   vmware:
-    vendor: vmware
     products:
       photon_linux: photon_os
       zimbra: zimbra_desktop
+      vcenter: vcenter_server
       vmware_esx_server: esx
       vmware_esxi_server: esxi
   wind_river:
     vendor: windriver
   x.org:
-    vendor: x.org
     products:
       x.org_x11: x11

data/identifiers/hw_device.txt

@@ -4,7 +4,7 @@ Access Control
 Alarm Panel
 Appliance
 Audio Encoder
-Broadband router
+Broadband Router
 Building Automation
 Cable Modem
 Check Scanner
@@ -22,6 +22,7 @@ Ethernet Adapter
 Firewall
 HMI Controller
 Handheld Scanner
+Hypervisor
 IP Camera
 IPS
 Industrial Control
@@ -40,11 +41,12 @@ Network Appliance
 Network Audio
 Network Management Device
 PLC
+Power Device
 Power Relay
-Power device
 Powerline
-Print server
+Print Server
 Printer
+Relay Controller
 Router
 SD-WAN Appliance
 SIP Device
@@ -71,7 +73,6 @@ VoIP Switch
 Voice Appliance
 WAP
 WLAN Repeater
-Web cam
 Whiteboard
 Wireless Controller
 Wireless Presenter

data/identifiers/hw_family.txt

@@ -5,16 +5,20 @@ AirPort
 Apple TV
 Communication Manager
 DVR
+Data ONTAP
 DiskStation
 Document Centre
+EDR
 Extended Systems ExtendNet
 FRITZ!Box
+FRITZ!Fon
 FRITZ!Powerline
 FRITZ!WLAN Repeater
 FS
 Firewall-1
 Forms Printer
 FortiGate
+FortiVoice
 GW25
 GXV
 GXW
@@ -36,6 +40,7 @@ Mac mini
 MacBook
 MacBook Pro
 MegaRAC
+MiiNePort
 Multifunction
 My Book
 NE
@@ -57,8 +62,13 @@ Router
 S500 Range
 SIP Device
 SIP Gateway
+SL2100
 Service Access Switch
 Service Router
+Simatic HMI
+Simatic NET
+Simatic S7
+Simatic Sinumerik
 SoundPoint
 SoundTouch
 SpeedTouch
@@ -73,8 +83,10 @@ TelePresence
 Time Capsule
 TippingPoint
 Turbo Station
+UNIVERGE
 UniFi
 Unified Security Gateway
+VDX
 VSX
 VoIP
 WD2GO

data/identifiers/hw_product.txt

@@ -3,15 +3,18 @@
 34972A Data Logger
 3PAR
 53230A Frequency Counter
+883 VoIP
 ADB-4820CD
 APIC
 AV Receiver
 AVC787
+Access Control
 Access Gateway
 Access Point
 Adaptive Security Appliance
 AirPort Express
 AirPort Extreme
+Alarm Panel
 AppDynamics
 Apple TV (2nd generation)
 Apple TV (3rd generation)
@@ -33,20 +36,28 @@ Catalyst
 Catalyst 1900
 Celerra
 Chromecast
+ClearPass Policy Manager
 ClickShare
 CloudKey
 CommandPost
 ConnectUPS Web Card
 Crosswork SON Appliance
+D Series
+DCS-825L
+DCS-932
 DD OS
 DNA Center
 DSL Router
+Data ONTAP
 Digital Signage Player
 Discover
 Discovery
 Document Centre
 DuraFon
 ECOM100
+EDR-G902
+EDR-G903
+EM7
 EP-series
 EXA Signal Analyzer
 Eagle Eye Director II
@@ -54,6 +65,7 @@ EchoLife Home Gateway
 EdgeSwitch
 Elevation
 EqualLogic
+Ethernet Relay Controller
 Ethernet Relay Module
 Excella
 Fastmark M5
@@ -64,15 +76,26 @@ Firewall-1
 FlexiPacket Hub
 FortiMail
 FortiManager
+GXP1610
+GXP1615
+GXP1625
+GXP1628
+GXP2200
 GigaVUE
 HDHomeRun
 HDIPCam
-HDX {hw.model}
+HT801
+HT802
+HT812
+HT813
+HT814
+HT818
 HiPer Access Router Card
 Home Controller
 Home Gateway
 HomePod
 Hue
+HyperFlex Connect
 IA Appliance
 IAM
 IBHLink S7++
@@ -83,6 +106,7 @@ IP Link Control Processor
 IP2IR
 IPMI
 IVR
+Infinity Controler
 IntelliSlot Web Card
 Internet Payment Gateway
 Internet Phone Adapter
@@ -94,6 +118,7 @@ JetDirect
 K1000
 KWS-1043N
 Key Management
+Key Management Server
 Lantick Ethernet Relay Controller
 Lencore Sound Manager 2
 MDS 9000
@@ -109,6 +134,7 @@ Mac mini (Late 2009)
 Mac mini (Late 2012)
 Mac mini (Late 2014)
 Mac mini (Late 2018)
+Mac mini (M1, 2020)
 Mac mini (Mid 2007)
 Mac mini (Mid 2010)
 Mac mini (Mid 2011)
@@ -126,16 +152,20 @@ MacBook Air (13-inch, Early 2014)
 MacBook Air (13-inch, Late 2010)
 MacBook Air (13-inch, Mid 2011)
 MacBook Air (13-inch, Mid 2012)
+MacBook Air (M1, 2020)
 MacBook Air (Mid 2009)
 MacBook Air (Retina, 13-inch, 2018)
 MacBook Air (Retina, 13-inch, 2019)
+MacBook Air (Retina, 13-inch, 2020)
 MacBook Pro (13-inch, 2016, Four Thunderbolt 3 ports)
 MacBook Pro (13-inch, 2016, Two Thunderbolt 3 ports)
 MacBook Pro (13-inch, 2017, Four Thunderbolt 3 ports)
 MacBook Pro (13-inch, 2017, Two Thunderbolt 3 ports)
 MacBook Pro (13-inch, 2018, Four Thunderbolt 3 ports)
 MacBook Pro (13-inch, 2019, Two Thunderbolt 3 ports)
+MacBook Pro (13-inch, 2020)
 MacBook Pro (13-inch, Late 2011)
+MacBook Pro (13-inch, M1, 2020)
 MacBook Pro (13-inch, Mid 2009)
 MacBook Pro (13-inch, Mid 2010)
 MacBook Pro (13-inch, Mid 2012)
@@ -147,6 +177,8 @@ MacBook Pro (15-inch, Late 2008)
 MacBook Pro (15-inch, Late 2011)
 MacBook Pro (15-inch, Mid 2009)
 MacBook Pro (15-inch, Mid 2010)
+MacBook Pro (15-inch, Mid 2012)
+MacBook Pro (16-inch, 2019)
 MacBook Pro (17-inch, Early 2008)
 MacBook Pro (17-inch, Late 2011)
 MacBook Pro (17-inch, Mid 2009)
@@ -158,29 +190,38 @@ MacBook Pro (Retina, 15-inch, Early 2013)
 MacBook Pro (Retina, 15-inch, Late 2013)
 MacBook Pro (Retina, 15-inch, Mid 2015)
 Makito X Decoder
+Media Gateway
 MediaLink Controller
 MediaSense
 Meeting Management
+Meeting Server
 MegaRAC
+Meraki Device
 Mercury
 Mergepoint
 Miniserver
 My Book Live
 N5172B Signal Generator
+NAS4Free
 NFVIS
 NPort
 NetScreen
 NetVR
 Netbox
+Network Camera
 Network Gateway
 Network Node
+Nexus 1000V
 Nexus Player
+OfficeConnect Switch
 OnHub
 OpenManage
 OpenManage Switch
 OpenNAC
+Orbi micro
 Orbit IP Camera
 PDR M800
+PIAF Virtual Appliance
 PLAY
 PLC-5
 Paragon-100G
@@ -191,23 +232,29 @@ Prime Collaboration Manager
 Primergy
 Printer
 Prosafe Plus
+R Series
+RT31P2
 RTU
 Rack PDU Card
 Raspberry Pi
 ReadyNAS
-RealPresence Group {hw.model}
-RealPresence Trio {hw.model}
 RecoverPoint
 ReeCam
 Roku
-Room Alert {hw.product.model}
+Room Alert
 S7 DALI Gateway
+SD-WAN
 SHIELD
 SIP Gateway
 SIParator Firewall
+SL2100
 SLS
 SPA
+SPA112
+SPA122
 SRP
+SV8100
+SV9100
 ScanFront
 Scrutinizer
 Sensor
@@ -222,27 +269,34 @@ SolsticePod
 SoundPoint
 Spot
 Stealthwatch
+Steelhead
 Storage Appliance
 Sub
+Sunny WebBox
 SuperStack 3
 SuperStack 3 Firewall
 SuperStack II
 Symmetry EN-2DBC
 System Management
+TG789vac
 TelePresence
 TelePresence MCU
-TemPageR {hw.product.model}
 Tenable Appliance
 Tenable Core
-Thermal Label Printer {hw.model}
+Tetration
 Time Capsule
 TouchLink Control Panel
+UCM6202
+UCM6204
+UCM6208
 UCS Manager
 UniFi Cloud Key
 UniFi NVR
 UniFi Security Gateway
+Univerge
 Universal Media Gateway
 VBrick Rev
+VPN Gateway
 Verizon FiOS Router
 Video Controller
 Vigor
@@ -250,12 +304,14 @@ Virtual Connect Manager
 Virtual Traffic Manager
 Vood
 WLAN AP
+WNR2000
 WebBox
 Whiteboard
 Wireless Dock
 Wireless LAN Controller
 Wireless Router
 XCC
+Xfinity Broadband Router
 Xserve (Early 2008)
 Xserve (Early 2009)
 Xserve (Late 2006)
@@ -268,6 +324,8 @@ e-STUDIO
 iCOM Control Panel
 iDRAC
 iLO
+iLO 3
+iMac (20/24-inch, Early 2008)
 iMac (21.5-inch, 2017)
 iMac (21.5-inch, Late 2012)
 iMac (21.5-inch, Late 2013)
@@ -286,6 +344,7 @@ iMac (Retina 4K, 21.5-inch, 2019)
 iMac (Retina 4K, 21.5-inch, Late 2015)
 iMac (Retina 5K, 27-inch, 2017)
 iMac (Retina 5K, 27-inch, 2019)
+iMac (Retina 5K, 27-inch, 2020)
 iMac (Retina 5K, 27-inch, Late 2015)
 iMac (Retina 5K, 27-inch, Mid 2015)
 iMac Pro (Retina 5K, Late 2017)
@@ -297,7 +356,11 @@ iPad Air (3rd generation)
 iPad Air 2
 iPad Pro (10.5-inch)
 iPad Pro (11-inch)
+iPad Pro (11-inch, 2nd generation)
 iPad Pro (12.9-inch)
+iPad Pro (12.9-inch, 2nd generation)
+iPad Pro (12.9-inch, 3rd generation)
+iPad Pro (12.9-inch, 4th generation)
 iPad Pro (9.7-inch)
 iPad mini
 iPad mini (5th generation)
@@ -305,6 +368,12 @@ iPad mini 2
 iPad mini 3
 iPad mini 4
 iPhone
+iPhone 11 Pro
+iPhone 11 Pro Max
+iPhone 12 5G
+iPhone 12 Mini 5G
+iPhone 12 Pro 5G
+iPhone 12 Pro Max 5G
 iPhone 3G
 iPhone 3GS
 iPhone 4
@@ -321,6 +390,7 @@ iPhone 7 Plus
 iPhone 8
 iPhone 8 Plus
 iPhone SE
+iPhone SE (2020)
 iPhone X
 iPhone XR
 iPhone XS