recog 2.3.20 → 2.3.21

Sign up to get free protection for your applications and to get access to all the features.
data/xml/x509_issuers.xml CHANGED
@@ -13,54 +13,84 @@
13
13
  <fingerprint pattern="^CN=R3,O=Let's Encrypt,C=US$">
14
14
  <description>Lets Encrypt R3 - generic -- assert nothing.</description>
15
15
  <example>CN=R3,O=Let's Encrypt,C=US</example>
16
+ <param pos="0" name="hw.certainty" value="0.0"/>
17
+ <param pos="0" name="os.certainty" value="0.0"/>
18
+ <param pos="0" name="service.certainty" value="0.0"/>
16
19
  </fingerprint>
17
20
 
18
21
  <fingerprint pattern="^CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US$">
19
22
  <description>Lets Encrypt X3 - generic -- assert nothing.</description>
20
23
  <example>CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US</example>
24
+ <param pos="0" name="hw.certainty" value="0.0"/>
25
+ <param pos="0" name="os.certainty" value="0.0"/>
26
+ <param pos="0" name="service.certainty" value="0.0"/>
21
27
  </fingerprint>
22
28
 
23
29
  <fingerprint pattern="^CN=Amazon,OU=Server CA 1B,O=Amazon,C=US$">
24
30
  <description>Amazon AWS Server CA 1B - generic -- assert nothing.</description>
25
31
  <example>CN=Amazon,OU=Server CA 1B,O=Amazon,C=US</example>
32
+ <param pos="0" name="hw.certainty" value="0.0"/>
33
+ <param pos="0" name="os.certainty" value="0.0"/>
34
+ <param pos="0" name="service.certainty" value="0.0"/>
26
35
  </fingerprint>
27
36
 
28
37
  <fingerprint pattern="^CN=DigiCert SHA2 Secure Server CA,O=DigiCert Inc,C=US$">
29
38
  <description>DigiCert SHA2 - generic -- assert nothing.</description>
30
39
  <example>CN=DigiCert SHA2 Secure Server CA,O=DigiCert Inc,C=US</example>
40
+ <param pos="0" name="hw.certainty" value="0.0"/>
41
+ <param pos="0" name="os.certainty" value="0.0"/>
42
+ <param pos="0" name="service.certainty" value="0.0"/>
31
43
  </fingerprint>
32
44
 
33
45
  <fingerprint pattern="^CN=DigiCert TLS (?:RSA SHA256|Hybrid ECC SHA384) 2020 CA1,O=DigiCert Inc,C=US$">
34
46
  <description>DigiCert SHA256 2020 CA1 - generic -- assert nothing.</description>
35
47
  <example>CN=DigiCert TLS RSA SHA256 2020 CA1,O=DigiCert Inc,C=US</example>
36
48
  <example>CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1,O=DigiCert Inc,C=US</example>
49
+ <param pos="0" name="hw.certainty" value="0.0"/>
50
+ <param pos="0" name="os.certainty" value="0.0"/>
51
+ <param pos="0" name="service.certainty" value="0.0"/>
37
52
  </fingerprint>
38
53
 
39
54
  <fingerprint pattern="^CN=DigiCert Secure Site ECC CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US$">
40
55
  <description>DigiCert ECC CA-1 - generic -- assert nothing.</description>
41
56
  <example>CN=DigiCert Secure Site ECC CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US</example>
57
+ <param pos="0" name="hw.certainty" value="0.0"/>
58
+ <param pos="0" name="os.certainty" value="0.0"/>
59
+ <param pos="0" name="service.certainty" value="0.0"/>
42
60
  </fingerprint>
43
61
 
44
62
  <fingerprint pattern="^CN=DigiCert SHA2 (?:Extended Validation|High Assurance) Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US$">
45
63
  <description>DigiCert SHA2 EV - generic -- assert nothing.</description>
46
64
  <example>CN=DigiCert SHA2 Extended Validation Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US</example>
47
65
  <example>CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US</example>
66
+ <param pos="0" name="hw.certainty" value="0.0"/>
67
+ <param pos="0" name="os.certainty" value="0.0"/>
68
+ <param pos="0" name="service.certainty" value="0.0"/>
48
69
  </fingerprint>
49
70
 
50
71
  <fingerprint pattern="^CN=Sectigo RSA (?:Domain|Organization) Validation Secure Server CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB$">
51
72
  <description>Sectigo RSA - generic -- assert nothing.</description>
52
73
  <example>CN=Sectigo RSA Domain Validation Secure Server CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB</example>
53
74
  <example>CN=Sectigo RSA Organization Validation Secure Server CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB</example>
75
+ <param pos="0" name="hw.certainty" value="0.0"/>
76
+ <param pos="0" name="os.certainty" value="0.0"/>
77
+ <param pos="0" name="service.certainty" value="0.0"/>
54
78
  </fingerprint>
55
79
 
56
80
  <fingerprint pattern="^CN=GeoTrust RSA CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US$">
57
81
  <description>GeoTrust RSA CA 2018 - generic -- assert nothing.</description>
58
82
  <example>CN=GeoTrust RSA CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US</example>
83
+ <param pos="0" name="hw.certainty" value="0.0"/>
84
+ <param pos="0" name="os.certainty" value="0.0"/>
85
+ <param pos="0" name="service.certainty" value="0.0"/>
59
86
  </fingerprint>
60
87
 
61
88
  <fingerprint pattern="^CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs\.godaddy\.com/repository/,O=GoDaddy.com\\, Inc\.,L=Scottsdale,ST=Arizona,C=US$">
62
89
  <description>Go Daddy G2 - generic -- assert nothing.</description>
63
90
  <example>CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US</example>
91
+ <param pos="0" name="hw.certainty" value="0.0"/>
92
+ <param pos="0" name="os.certainty" value="0.0"/>
93
+ <param pos="0" name="service.certainty" value="0.0"/>
64
94
  </fingerprint>
65
95
 
66
96
  <!-- Chromecast and various devices that support the Cast protocol -->
@@ -304,10 +334,10 @@
304
334
  <param pos="0" name="service.vendor" value="Traefik Labs"/>
305
335
  <param pos="0" name="service.family" value="Traefik"/>
306
336
  <param pos="0" name="service.product" value="Traefik Proxy"/>
307
- <param pos="0" name="service.cpe23" value="cpe:/a:containous:traefik:-"/>
337
+ <param pos="0" name="service.cpe23" value="cpe:/a:traefik:traefik:-"/>
308
338
  </fingerprint>
309
339
 
310
- <fingerprint pattern="^(?i)CN=Fireware web CA,OU=Fireware,O=WatchGuard(?: CA)?$">
340
+ <fingerprint pattern="(?i)^CN=Fireware web CA,OU=Fireware,O=WatchGuard(?: CA)?$">
311
341
  <description>WatchGuard Fireware</description>
312
342
  <example>CN=Fireware web ca,OU=Fireware,O=WatchGuard</example>
313
343
  <example>CN=Fireware web CA,OU=Fireware,O=Watchguard CA</example>
@@ -69,11 +69,12 @@
69
69
 
70
70
  <fingerprint pattern="^SERIALNUMBER=PID:([^ ]+) SN:([^,]+),CN=(?:[a-zA-Z0-9\-]+)-SEP([a-fA-F0-9]{12}),OU=[CV]TG,O=Cisco Systems Inc\.$">
71
71
  <description>Cisco IP phone with serial number</description>
72
- <example host.mac="B07D47D33A1C" hw.product="CP-8851" cisco.serial_number="FCH1924AHCA">SERIALNUMBER=PID:CP-8851 SN:FCH1924AHCA,CN=CP-8851-SEPB07D47D33A1C,OU=CTG,O=Cisco Systems Inc.</example>
73
- <example host.mac="64D989000000" hw.product="CP-9951" cisco.serial_number="FCH15200000">SERIALNUMBER=PID:CP-9951 SN:FCH15200000,CN=CP-9951-SEP64D989000000,OU=VTG,O=Cisco Systems Inc.</example>
72
+ <example host.mac="B07D47D33A1C" hw.product="CP-8851" cisco.serial_number="FCH1924AHCA" hw.serial_number="FCH1924AHCA">SERIALNUMBER=PID:CP-8851 SN:FCH1924AHCA,CN=CP-8851-SEPB07D47D33A1C,OU=CTG,O=Cisco Systems Inc.</example>
73
+ <example host.mac="64D989000000" hw.product="CP-9951" cisco.serial_number="FCH15200000" hw.serial_number="FCH15200000">SERIALNUMBER=PID:CP-9951 SN:FCH15200000,CN=CP-9951-SEP64D989000000,OU=VTG,O=Cisco Systems Inc.</example>
74
74
  <param pos="0" name="hw.device" value="VoIP"/>
75
75
  <param pos="0" name="hw.vendor" value="Cisco"/>
76
76
  <param pos="1" name="hw.product"/>
77
+ <param pos="2" name="hw.serial_number"/>
77
78
  <param pos="2" name="cisco.serial_number"/>
78
79
  <param pos="3" name="host.mac"/>
79
80
  </fingerprint>
@@ -289,6 +290,7 @@
289
290
  <param pos="0" name="os.vendor" value="Oracle"/>
290
291
  <param pos="0" name="os.family" value="ILOM"/>
291
292
  <param pos="0" name="os.product" value="ILOM"/>
293
+ <param pos="0" name="os.cpe23" value="cpe:/o:oracle:integrated_lights_out_manager_firmware:-"/>
292
294
  </fingerprint>
293
295
 
294
296
  <fingerprint pattern="^CN=AMI,OU=Service Processors,O=American Megatrends Inc">
@@ -307,10 +309,11 @@
307
309
 
308
310
  <fingerprint pattern="^CN=C-series CIMC,OU=PID:([^ ]+) SERIAL:([^,]+),O=Cisco">
309
311
  <description>Cisco Integrated Management Controller</description>
310
- <example cisco.serial_number="FCH18999AAA" cisco.imc_model="UCSC-C220-M3S">CN=C-series CIMC,OU=PID:UCSC-C220-M3S SERIAL:FCH18999AAA,O=Cisco Self Signed,L=San Jose,ST=California,C=US</example>
312
+ <example cisco.serial_number="FCH18999AAA" hw.serial_number="FCH18999AAA" cisco.imc_model="UCSC-C220-M3S">CN=C-series CIMC,OU=PID:UCSC-C220-M3S SERIAL:FCH18999AAA,O=Cisco Self Signed,L=San Jose,ST=California,C=US</example>
311
313
  <param pos="0" name="hw.device" value="Lights Out Management"/>
312
314
  <param pos="0" name="hw.vendor" value="Cisco"/>
313
315
  <param pos="0" name="hw.product" value="IMC"/>
316
+ <param pos="2" name="hw.serial_number"/>
314
317
  <param pos="0" name="os.vendor" value="Cisco"/>
315
318
  <param pos="0" name="os.family" value="Linux"/>
316
319
  <param pos="0" name="os.product" value="IMC"/>
@@ -320,10 +323,11 @@
320
323
 
321
324
  <fingerprint pattern="^CN=C220-(FCH[^,]+),OU=null,O=Cisco Systems Inc">
322
325
  <description>Cisco Integrated Management Controller C220</description>
323
- <example cisco.serial_number="FCH17999AAA">CN=C220-FCH17999AAA,OU=null,O=Cisco Systems Inc.,L=San Jose,ST=California,C=US</example>
326
+ <example cisco.serial_number="FCH17999AAA" hw.serial_number="FCH17999AAA">CN=C220-FCH17999AAA,OU=null,O=Cisco Systems Inc.,L=San Jose,ST=California,C=US</example>
324
327
  <param pos="0" name="hw.device" value="Lights Out Management"/>
325
328
  <param pos="0" name="hw.vendor" value="Cisco"/>
326
329
  <param pos="0" name="hw.product" value="IMC"/>
330
+ <param pos="1" name="hw.serial_number"/>
327
331
  <param pos="0" name="os.vendor" value="Cisco"/>
328
332
  <param pos="0" name="os.family" value="Linux"/>
329
333
  <param pos="0" name="os.product" value="IMC"/>
@@ -407,12 +411,13 @@
407
411
 
408
412
  <fingerprint pattern="^SERIALNUMBER=([a-zA-Z0-9]+),CN=DEVICE-vWLC,O=Cisco Virtual WLC$">
409
413
  <description>Cisco vWLC</description>
410
- <example cisco.serial_number="9C89M2088D1">SERIALNUMBER=9C89M2088D1,CN=DEVICE-vWLC,O=Cisco Virtual WLC</example>
414
+ <example cisco.serial_number="9C89M2088D1" hw.serial_number="9C89M2088D1">SERIALNUMBER=9C89M2088D1,CN=DEVICE-vWLC,O=Cisco Virtual WLC</example>
411
415
  <param pos="0" name="os.vendor" value="Cisco"/>
412
416
  <param pos="0" name="os.device" value="Wireless Controller"/>
413
417
  <param pos="0" name="os.product" value="Wireless LAN Controller"/>
414
418
  <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller_software:-"/>
415
419
  <param pos="1" name="cisco.serial_number"/>
420
+ <param pos="1" name="hw.serial_number"/>
416
421
  </fingerprint>
417
422
 
418
423
  <fingerprint pattern="^CN=[a-zA-Z0-9\.\-\_]+,OU=DeviceSSL \(WebAdmin\),O=Cisco Systems Inc\.,C=US$">
@@ -588,7 +593,7 @@
588
593
  <param pos="0" name="service.vendor" value="Traefik Labs"/>
589
594
  <param pos="0" name="service.family" value="Traefik"/>
590
595
  <param pos="0" name="service.product" value="Traefik Proxy"/>
591
- <param pos="0" name="service.cpe23" value="cpe:/a:containous:traefik:-"/>
596
+ <param pos="0" name="service.cpe23" value="cpe:/a:traefik:traefik:-"/>
592
597
  </fingerprint>
593
598
 
594
599
  <fingerprint pattern="^CN=default(?: [A-Z]+)?,OU=NS Internal,O=Citrix ANG,L=San Jose,ST=California,C=US$">
@@ -614,8 +619,8 @@
614
619
 
615
620
  <fingerprint pattern="^CN=([a-zA-Z0-9]{5,12}) ([a-zA-Z0-9]{12}),OU=(?:Cast|Google TV),O=Google Inc,L=Mountain View,ST=California,C=US$">
616
621
  <description>Google Chromecast</description>
617
- <example chromecast.serial_number="LVDZG5" host.mac_local="FA8FCA67413D">CN=LVDZG5 FA8FCA67413D,OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
618
- <example chromecast.serial_number="YRBLE" host.mac_local="FA8FCA7DE87D">CN=YRBLE FA8FCA7DE87D,OU=Google TV,O=Google Inc,L=Mountain View,ST=California,C=US</example>
622
+ <example chromecast.serial_number="LVDZG5" host.mac_local="FA8FCA67413D" hw.serial_number="LVDZG5">CN=LVDZG5 FA8FCA67413D,OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
623
+ <example chromecast.serial_number="YRBLE" host.mac_local="FA8FCA7DE87D" hw.serial_number="YRBLE">CN=YRBLE FA8FCA7DE87D,OU=Google TV,O=Google Inc,L=Mountain View,ST=California,C=US</example>
619
624
  <param pos="0" name="os.vendor" value="Google"/>
620
625
  <param pos="0" name="os.product" value="Chrome OS"/>
621
626
  <param pos="0" name="os.certainty" value="0.5"/>
@@ -623,6 +628,7 @@
623
628
  <param pos="0" name="hw.device" value="Media Server"/>
624
629
  <param pos="0" name="hw.vendor" value="Google"/>
625
630
  <param pos="0" name="hw.product" value="Chromecast"/>
631
+ <param pos="1" name="hw.serial_number"/>
626
632
  <param pos="0" name="hw.certainty" value="0.5"/>
627
633
  <param pos="1" name="chromecast.serial_number"/>
628
634
  <!-- This is the hotspot-mode MAC address (clear bit 2) -->
@@ -632,13 +638,14 @@
632
638
 
633
639
  <fingerprint pattern="^CN=([a-zA-Z0-9]{5,12}) ([a-zA-Z0-9]{12}),OU=Cast TV \(Vizio\),O=Google Inc,L=Mountain View,ST=California,C=US$">
634
640
  <description>Vizio SmartTV (Android) with Google Cast</description>
635
- <example chromecast.serial_number="9V039WC9" host.mac_local="FA8FCA697898">CN=9V039WC9 FA8FCA697898,OU=Cast TV (Vizio),O=Google Inc,L=Mountain View,ST=California,C=US</example>
641
+ <example chromecast.serial_number="9V039WC9" hw.serial_number="9V039WC9" host.mac_local="FA8FCA697898">CN=9V039WC9 FA8FCA697898,OU=Cast TV (Vizio),O=Google Inc,L=Mountain View,ST=California,C=US</example>
636
642
  <param pos="0" name="os.vendor" value="Google"/>
637
643
  <param pos="0" name="os.family" value="Linux"/>
638
644
  <param pos="0" name="os.product" value="Android"/>
639
645
  <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
640
646
  <param pos="0" name="hw.device" value="Smart TV"/>
641
647
  <param pos="0" name="hw.vendor" value="Vizio"/>
648
+ <param pos="1" name="hw.serial_number"/>
642
649
  <param pos="1" name="chromecast.serial_number"/>
643
650
  <!-- This is the hotspot-mode MAC address (clear bit 2) -->
644
651
 
@@ -878,10 +885,11 @@
878
885
 
879
886
  <fingerprint pattern="^CN=([A-Za-z0-9]+),OU=FortiGate,O=Fortinet,L=Sunnyvale,ST=California,C=US$">
880
887
  <description>Fortinet Gateway</description>
881
- <example fortinet.serial_number="FG100ETK1800118">CN=FG100ETK1800118,OU=FortiGate,O=Fortinet,L=Sunnyvale,ST=California,C=US</example>
882
- <example fortinet.serial_number="FGT30D3X15038375">CN=FGT30D3X15038375,OU=FortiGate,O=Fortinet,L=Sunnyvale,ST=California,C=US</example>
888
+ <example fortinet.serial_number="FG100ETK1800118" hw.serial_number="FG100ETK1800118">CN=FG100ETK1800118,OU=FortiGate,O=Fortinet,L=Sunnyvale,ST=California,C=US</example>
889
+ <example fortinet.serial_number="FGT30D3X15038375" hw.serial_number="FGT30D3X15038375">CN=FGT30D3X15038375,OU=FortiGate,O=Fortinet,L=Sunnyvale,ST=California,C=US</example>
883
890
  <param pos="0" name="hw.vendor" value="Fortinet"/>
884
891
  <param pos="0" name="hw.device" value="Firewall"/>
892
+ <param pos="1" name="hw.serial_number"/>
885
893
  <param pos="0" name="os.vendor" value="Fortinet"/>
886
894
  <param pos="0" name="os.family" value="Linux"/>
887
895
  <param pos="0" name="os.device" value="Firewall"/>
@@ -892,9 +900,10 @@
892
900
 
893
901
  <fingerprint pattern="^CN=([A-Za-z0-9]+),O=Fortinet Ltd\.$">
894
902
  <description>Fortinet Gateway (Older)</description>
895
- <example fortinet.serial_number="FG100D3G13803999">CN=FG100D3G13803999,O=Fortinet Ltd.</example>
903
+ <example fortinet.serial_number="FG100D3G13803999" hw.serial_number="FG100D3G13803999">CN=FG100D3G13803999,O=Fortinet Ltd.</example>
896
904
  <param pos="0" name="hw.vendor" value="Fortinet"/>
897
905
  <param pos="0" name="hw.device" value="Firewall"/>
906
+ <param pos="1" name="hw.serial_number"/>
898
907
  <param pos="0" name="os.vendor" value="Fortinet"/>
899
908
  <param pos="0" name="os.family" value="Linux"/>
900
909
  <param pos="0" name="os.device" value="Firewall"/>
@@ -1298,10 +1307,11 @@
1298
1307
 
1299
1308
  <fingerprint pattern="^CN=Ruckus Wireless ZoneDirector SN-(\d+),O=Ruckus Wireless\\, Inc\.,ST=CA,C=US$">
1300
1309
  <description>Ruckus Zone Director</description>
1301
- <example ruckus.serial_number="221301007591">CN=Ruckus Wireless ZoneDirector SN-221301007591,O=Ruckus Wireless\, Inc.,ST=CA,C=US</example>
1310
+ <example ruckus.serial_number="221301007591" hw.serial_number="221301007591">CN=Ruckus Wireless ZoneDirector SN-221301007591,O=Ruckus Wireless\, Inc.,ST=CA,C=US</example>
1302
1311
  <param pos="0" name="hw.device" value="Wireless Controller"/>
1303
1312
  <param pos="0" name="hw.vendor" value="Ruckus"/>
1304
1313
  <param pos="0" name="hw.product" value="Zone Director"/>
1314
+ <param pos="1" name="hw.serial_number"/>
1305
1315
  <param pos="0" name="os.device" value="Wireless Controller"/>
1306
1316
  <param pos="0" name="os.vendor" value="Ruckus"/>
1307
1317
  <param pos="0" name="os.product" value="Zone Director"/>
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: recog
3
3
  version: !ruby/object:Gem::Version
4
- version: 2.3.20
4
+ version: 2.3.21
5
5
  platform: ruby
6
6
  authors:
7
7
  - Rapid7 Research
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2021-05-13 00:00:00.000000000 Z
11
+ date: 2021-08-02 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: rspec