recog 2.3.2 → 2.3.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +5 -5
- data/lib/recog/version.rb +1 -1
- data/xml/ftp_banners.xml +1 -2
- data/xml/http_servers.xml +13 -1
- data/xml/mdns_device-info_txt.xml +1297 -31
- data/xml/smtp_banners.xml +36 -2
- metadata +3 -4
data/xml/smtp_banners.xml
CHANGED
|
@@ -242,6 +242,38 @@
|
|
|
242
242
|
<param pos="0" name="os.product" value="Windows"/>
|
|
243
243
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
|
244
244
|
</fingerprint>
|
|
245
|
+
<fingerprint pattern="^(:?[^ ]+)? ?Microsoft ESMTP MAIL Service, Version: +(10\.0\.14393\.[\d.]+) +ready +(?:at +)?(.+)$">
|
|
246
|
+
<description>Microsoft IIS builtin SMTP service - Windows Server 2016</description>
|
|
247
|
+
<example host.name="foo.bar" service.version="10.0.14393.2608">foo.bar Microsoft ESMTP MAIL Service, Version: 10.0.14393.2608 ready at Sun, 19 May 2019 09:04:29 -0500</example>
|
|
248
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
|
249
|
+
<param pos="0" name="service.family" value="IIS"/>
|
|
250
|
+
<param pos="0" name="service.product" value="IIS"/>
|
|
251
|
+
<param pos="2" name="service.version"/>
|
|
252
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:10.0"/>
|
|
253
|
+
<param pos="1" name="host.name"/>
|
|
254
|
+
<param pos="3" name="system.time"/>
|
|
255
|
+
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
|
256
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
257
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
258
|
+
<param pos="0" name="os.product" value="Windows Server 2016"/>
|
|
259
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2016:-"/>
|
|
260
|
+
</fingerprint>
|
|
261
|
+
<fingerprint pattern="^(:?[^ ]+)? ?Microsoft ESMTP MAIL Service, Version: +(10\.0\.17763\.[\d.]+) +ready +(?:at +)?(.+)$">
|
|
262
|
+
<description>Microsoft IIS builtin SMTP service - Windows Server 2019</description>
|
|
263
|
+
<example host.name="foo.bar" service.version="10.0.17763.1">foo.bar Microsoft ESMTP MAIL Service, Version: 10.0.17763.1 ready at Sun, 19 May 2019 09:04:29 -0500</example>
|
|
264
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
|
265
|
+
<param pos="0" name="service.family" value="IIS"/>
|
|
266
|
+
<param pos="0" name="service.product" value="IIS"/>
|
|
267
|
+
<param pos="2" name="service.version"/>
|
|
268
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:10.0"/>
|
|
269
|
+
<param pos="1" name="host.name"/>
|
|
270
|
+
<param pos="3" name="system.time"/>
|
|
271
|
+
<param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
|
|
272
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
273
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
274
|
+
<param pos="0" name="os.product" value="Windows Server 2019"/>
|
|
275
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2019:-"/>
|
|
276
|
+
</fingerprint>
|
|
245
277
|
<fingerprint pattern="^([^ ]+) Microsoft SMTP MAIL ready at (.+) Version: +(\d+\.\d+\.\d+\.\d+\.\d+) *$">
|
|
246
278
|
<description>Microsoft IIS builtin SMTP service, or Microsoft Exchange Server (they are differentiated from each other in smtp-iis.clp) - variant 1</description>
|
|
247
279
|
<example host.name="foo.bar" service.version="5.5.1877.197.19">foo.bar Microsoft SMTP MAIL ready at Wed, 29 Nov 2017 23:48:59 +0000 Version: 5.5.1877.197.19</example>
|
|
@@ -258,11 +290,13 @@
|
|
|
258
290
|
<param pos="0" name="os.product" value="Windows"/>
|
|
259
291
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
|
260
292
|
</fingerprint>
|
|
261
|
-
<fingerprint pattern="^(:?[^ ]+)? ?Microsoft ESMTP MAIL Service, Version: +(\d+\.\d+\.\d+\.\d+) +ready +(?:at +)?(.+)
|
|
293
|
+
<fingerprint pattern="^(:?[^ ]+)? ?Microsoft ESMTP MAIL Service, Version: +(\d+\.\d+\.\d+\.\d+)(?: +ready)?(?: +(?:at +)?(\w\w\w, \d.+))?$">
|
|
262
294
|
<description>Microsoft IIS builtin SMTP service, or Microsoft Exchange Server (they are differentiated from each other in smtp-iis.clp) - variant 2 </description>
|
|
263
295
|
<example service.version="5.0.2195.5329"> Microsoft ESMTP MAIL Service, Version: 5.0.2195.5329 ready Thu, 30 Nov 2017 11:40:25 +0200</example>
|
|
264
|
-
<example service.version="6.0.3790.4675">foo Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Wed, 21 Jul 2010 19:04:24 -0700</example>
|
|
296
|
+
<example service.version="6.0.3790.4675" host.name="foo.bar">foo.bar Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Wed, 21 Jul 2010 19:04:24 -0700</example>
|
|
265
297
|
<example service.version="6.0.2600.5512" system.time="Thu, 30 Nov 2017 18:22:40 +0900">Microsoft ESMTP MAIL Service, Version: 6.0.2600.5512 ready at Thu, 30 Nov 2017 18:22:40 +0900</example>
|
|
298
|
+
<example service.version="6.0.3790.3959" host.name="foo.bar">foo.bar Microsoft ESMTP MAIL Service, Version: 6.0.3790.3959 ready</example>
|
|
299
|
+
<example service.version="6.0.3790.1830" host.name="foo.bar">foo.bar Microsoft ESMTP MAIL Service, Version: 6.0.3790.1830</example>
|
|
266
300
|
<param pos="0" name="service.vendor" value="Microsoft"/>
|
|
267
301
|
<param pos="0" name="service.family" value="IIS"/>
|
|
268
302
|
<param pos="0" name="service.product" value="IIS"/>
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: recog
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 2.3.
|
|
4
|
+
version: 2.3.3
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Rapid7 Research
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2019-
|
|
11
|
+
date: 2019-09-23 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: rspec
|
|
@@ -249,8 +249,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
249
249
|
- !ruby/object:Gem::Version
|
|
250
250
|
version: '0'
|
|
251
251
|
requirements: []
|
|
252
|
-
|
|
253
|
-
rubygems_version: 2.6.6
|
|
252
|
+
rubygems_version: 3.0.3
|
|
254
253
|
signing_key:
|
|
255
254
|
specification_version: 4
|
|
256
255
|
summary: Network service fingerprint database, classes, and utilities
|