recog 2.3.7 → 2.3.8

Sign up to get free protection for your applications and to get access to all the features.
Files changed (50) hide show
  1. checksums.yaml +4 -4
  2. data/.gitignore +3 -2
  3. data/.ruby-gemset +1 -0
  4. data/.ruby-version +1 -0
  5. data/.travis.yml +2 -4
  6. data/Gemfile +2 -5
  7. data/bin/recog_standardize +118 -0
  8. data/cpe-remap.yaml +21 -0
  9. data/features/match.feature +4 -0
  10. data/features/support/aruba.rb +3 -0
  11. data/features/verify.feature +5 -0
  12. data/identifiers/README.md +47 -0
  13. data/identifiers/os_architecture.txt +20 -0
  14. data/identifiers/os_device.txt +52 -0
  15. data/identifiers/os_family.txt +160 -0
  16. data/identifiers/os_product.txt +199 -0
  17. data/identifiers/service_family.txt +185 -0
  18. data/identifiers/service_product.txt +255 -0
  19. data/identifiers/software_class.txt +26 -0
  20. data/identifiers/software_family.txt +91 -0
  21. data/identifiers/software_product.txt +333 -0
  22. data/identifiers/vendor.txt +405 -0
  23. data/lib/recog/version.rb +1 -1
  24. data/spec/lib/fingerprint_self_test_spec.rb +1 -1
  25. data/spec/lib/recog/fingerprint/regexp_factory_spec.rb +1 -1
  26. data/update_cpes.py +1 -1
  27. data/xml/apache_os.xml +9 -0
  28. data/xml/architecture.xml +9 -5
  29. data/xml/dns_versionbind.xml +9 -11
  30. data/xml/ftp_banners.xml +47 -5
  31. data/xml/html_title.xml +310 -196
  32. data/xml/http_cookies.xml +13 -1
  33. data/xml/http_servers.xml +145 -7
  34. data/xml/http_wwwauth.xml +13 -1
  35. data/xml/mdns_device-info_txt.xml +20 -16
  36. data/xml/mysql_banners.xml +420 -38
  37. data/xml/ntp_banners.xml +16 -8
  38. data/xml/operating_system.xml +1 -0
  39. data/xml/rtsp_servers.xml +21 -21
  40. data/xml/sip_banners.xml +5 -41
  41. data/xml/sip_user_agents.xml +40 -1
  42. data/xml/smb_native_os.xml +1 -0
  43. data/xml/smtp_banners.xml +3 -4
  44. data/xml/snmp_sysdescr.xml +44 -28
  45. data/xml/ssh_banners.xml +78 -73
  46. data/xml/telnet_banners.xml +30 -9
  47. data/xml/x11_banners.xml +1 -1
  48. data/xml/x509_issuers.xml +7 -7
  49. data/xml/x509_subjects.xml +329 -28
  50. metadata +23 -6
@@ -0,0 +1,405 @@
1
+ 2Wire
2
+ 3Com
3
+ 4D
4
+ ACC
5
+ ACME Laboratories
6
+ Acorn
7
+ Actiontec
8
+ ActiveState
9
+ Adaptec
10
+ ADC
11
+ Adobe
12
+ Adtran
13
+ AIM
14
+ Aironet
15
+ Alcatel
16
+ Allegro Software
17
+ Allied Telesyn
18
+ Alpha Micro
19
+ Alpine
20
+ Alteon
21
+ Alt-N
22
+ Amazon
23
+ AMD
24
+ Amiga
25
+ AnalogX
26
+ Apache
27
+ APC
28
+ Apollo
29
+ Apple
30
+ Aprelium Technologies
31
+ Arescom
32
+ ArGoSoft
33
+ Arlan
34
+ ARM
35
+ ARRIS
36
+ Artifex Software Inc.
37
+ Asante
38
+ Ascend
39
+ Ascom
40
+ Asianux
41
+ Atari
42
+ ATG
43
+ AtheOS
44
+ Atrium Software
45
+ Attachmate
46
+ Auspex
47
+ Avaya
48
+ Avocent
49
+ Axent
50
+ Axis
51
+ Bay Networks
52
+ Be
53
+ BEA
54
+ Bell Labs
55
+ Bintec
56
+ Bitvise
57
+ Blue Coat
58
+ Borderware
59
+ Brix Networks
60
+ Brocade
61
+ Brother
62
+ BSDi
63
+ BT
64
+ Buffalo
65
+ Business Objects
66
+ Cabletron
67
+ Cacheflow
68
+ Canon
69
+ Canonical
70
+ Cantillion
71
+ Capellix
72
+ Castelle
73
+ CastleNet
74
+ Caucho
75
+ Cayman
76
+ CentOS
77
+ Chase
78
+ Check Point
79
+ CherryPy
80
+ Cisco
81
+ Citrix
82
+ Clearswift
83
+ CNET
84
+ CNT
85
+ Cobalt
86
+ Commodore
87
+ Compaq
88
+ Compatible Systems
89
+ Computer Associates
90
+ Computone
91
+ Conectiva
92
+ Conexant
93
+ Convex
94
+ Copper Mountain
95
+ Corega
96
+ Cray
97
+ Critical Path
98
+ CSM
99
+ CyberArk
100
+ CyberGuard
101
+ Cyclades
102
+ Data General
103
+ Datamax
104
+ DataVoice
105
+ Debian
106
+ DEC
107
+ Dell
108
+ Digital Link
109
+ Digital Networks
110
+ DigiTel
111
+ D-Link
112
+ Docker Inc.
113
+ DrayTek
114
+ EasyTel
115
+ Eaton
116
+ Edimax
117
+ Eicon
118
+ Ektron
119
+ ELSA
120
+ Embedthis
121
+ EMC
122
+ EMWAC
123
+ Enterasys
124
+ Epson
125
+ EqualLogic
126
+ Ericsson
127
+ Eudora
128
+ EUSSO
129
+ Exabyte
130
+ exim
131
+ ExtendNet
132
+ Extreme Networks
133
+ F5
134
+ FastComm
135
+ FatWire
136
+ FiberLine
137
+ Floosietek
138
+ FlowPoint
139
+ Fore
140
+ FortiNet
141
+ Foundry
142
+ Foxit Software Inc.
143
+ FreeBSD
144
+ FreeScale
145
+ FreeSCO
146
+ Fujitsu Siemens
147
+ GalactiComm
148
+ Gandalf
149
+ Gauntlet
150
+ Genius
151
+ Gentoo
152
+ Gigamon
153
+ Global Technology Associates
154
+ GlobalScape
155
+ GNet
156
+ GNU
157
+ Google
158
+ Gordano
159
+ Hawking
160
+ Hitachi
161
+ Hospira
162
+ HP
163
+ Huawei
164
+ Hydra
165
+ IBM
166
+ Imagistics
167
+ Innovaphone
168
+ Intel
169
+ Intergraph
170
+ IPCop
171
+ Ipswitch
172
+ Isolation
173
+ IXIA
174
+ Juniper
175
+ KA9Q
176
+ Kaspersky Lab
177
+ Kentrox
178
+ Kerio
179
+ Konica
180
+ Kronos
181
+ Kyocera
182
+ Labtam
183
+ LANCOM Systems
184
+ Lantronix
185
+ Leunig
186
+ Lexmark
187
+ LG Goldstream
188
+ Linksys
189
+ Linux
190
+ Linux Foundation
191
+ Livingston
192
+ LogMeIn
193
+ Lotus
194
+ Lucent
195
+ LWIP
196
+ Lyris
197
+ Macromedia
198
+ Madge
199
+ Magna
200
+ Mail-Max
201
+ Mandrake
202
+ Mandriva
203
+ Maxim IC
204
+ McAfee
205
+ Megabit
206
+ Merak
207
+ Meridian
208
+ MetaInfo
209
+ Microbase
210
+ Microplex
211
+ Microsoft
212
+ MikroTik
213
+ Minix
214
+ Minolta
215
+ Mirapoint
216
+ Mocana
217
+ Moodle
218
+ Mort Bay
219
+ Motorola
220
+ Mozilla
221
+ MRV Communications
222
+ MultiTech
223
+ MySQL
224
+ NAT
225
+ NCD
226
+ NcFTP Software
227
+ NCR
228
+ NEC
229
+ Neoware
230
+ NetApp
231
+ NetBSD
232
+ Netgear
233
+ NetJet
234
+ NetMatrix
235
+ Netopia
236
+ Netscape
237
+ NetScreen
238
+ NetSilicon
239
+ Network Systems
240
+ Nexland
241
+ NeXT
242
+ Nokia
243
+ Nortel
244
+ Norton
245
+ Novell
246
+ NSG
247
+ NTT
248
+ Oce
249
+ Okidata
250
+ Omron
251
+ OpenBSD
252
+ OpenJDK
253
+ OpenSUSE
254
+ Opera Software
255
+ Oracle
256
+ Overland
257
+ Oversee
258
+ ownCloud
259
+ Packet Engines
260
+ Packeteer
261
+ Palm
262
+ Palo Alto Networks
263
+ Panasonic
264
+ Paul Smith Computer Services
265
+ Philips
266
+ PHP
267
+ phpMyAdmin
268
+ Pigtail
269
+ Piriform
270
+ Pitney Bowes
271
+ Plain Black
272
+ Planet
273
+ PLD
274
+ Polycom
275
+ Postgres
276
+ PowerWare
277
+ Pragma Systems
278
+ PreEmptive Solutions
279
+ Process Software
280
+ Proteon
281
+ Proxim
282
+ qmail
283
+ QMS
284
+ QNX
285
+ Qualcomm
286
+ Quanterra
287
+ Quantum
288
+ Racal
289
+ Radionics
290
+ Rapid7
291
+ Raptor
292
+ Rarlab
293
+ RCA
294
+ RealMedia
295
+ Red Hat
296
+ Redback
297
+ Rhino Software
298
+ Ricoh
299
+ Ringdale
300
+ Riverbed Technology
301
+ Riverstone Networks
302
+ RoadLanner
303
+ Rockliffe
304
+ Rockwell
305
+ Roxen
306
+ rPath
307
+ SafeNet
308
+ SAP
309
+ SAR
310
+ Savin
311
+ SBLIM
312
+ Schneider Electric
313
+ SCO
314
+ Seattle Labs
315
+ Secure Computing
316
+ Sega
317
+ Sendmail
318
+ Sequent
319
+ SGI
320
+ Sharp
321
+ Shiva
322
+ Siebel
323
+ Siemens
324
+ Simon Tatham
325
+ Slackware
326
+ SMC
327
+ SmoothWall
328
+ SonicWALL
329
+ SonoSite
330
+ Sony
331
+ Sophos
332
+ Source Technologies
333
+ Sourcefire
334
+ SpeedStream
335
+ Sphera
336
+ SSH Communications Security
337
+ StackTools
338
+ Standard Networks
339
+ StartCom
340
+ Stratus
341
+ Sun
342
+ SUSE
343
+ Sybase
344
+ Symantec
345
+ Symbol
346
+ SysTech
347
+ Tahoe
348
+ Tally
349
+ Tandberg
350
+ Tandem
351
+ Tasman Networks
352
+ Tekelec
353
+ Tektonix
354
+ Telebit
355
+ Telindus
356
+ Telocity
357
+ Teltrend
358
+ Thomson
359
+ TIS
360
+ TOR
361
+ Toshiba
362
+ Trancell
363
+ Trend Micro
364
+ Truetime
365
+ Trustix
366
+ Turbolinux
367
+ Turtle Beach
368
+ Twisted Matrix Labs
369
+ TYPO3
370
+ Ubuntu
371
+ Unica
372
+ UnitedLinux
373
+ US Robotics
374
+ VanDyke Software
375
+ Vanguard
376
+ VersaNet
377
+ VideoLAN
378
+ Vignette
379
+ Vine
380
+ Vircom
381
+ Virtual Access
382
+ VMware
383
+ WatchGuard
384
+ Webmin
385
+ WebTrends
386
+ White Box
387
+ Wind River
388
+ Wireshark
389
+ Wordpress
390
+ WTI
391
+ XCD
392
+ Xerox
393
+ Xitami
394
+ XMach
395
+ XnSoft
396
+ Xylan
397
+ Xylogics
398
+ Xyplex
399
+ Yahoo
400
+ Yamaha
401
+ Zero One
402
+ ZMailer
403
+ Zoom
404
+ ZoomAir
405
+ Zyxel
@@ -1,3 +1,3 @@
1
1
  module Recog
2
- VERSION = '2.3.7'
2
+ VERSION = '2.3.8'
3
3
  end
@@ -113,7 +113,7 @@ describe Recog::DB do
113
113
  actual_capture_positions = []
114
114
  capture_number = 1
115
115
  Regexp::Scanner.scan(fp.regex).each do |token_parts|
116
- if token_parts.first == :group && ![:close, :passive, :options].include?(token_parts[1])
116
+ if token_parts.first == :group && ![:close, :passive, :options, :options_switch].include?(token_parts[1])
117
117
  actual_capture_positions << capture_number
118
118
  capture_number += 1
119
119
  end
@@ -26,7 +26,7 @@ describe Recog::Fingerprint::RegexpFactory do
26
26
  subject { described_class.build_options(flags) }
27
27
 
28
28
  let(:flags) { [ ] }
29
- it { is_expected.to be_a(Fixnum) }
29
+ it { is_expected.to be_a(Integer) }
30
30
 
31
31
  context 'without any explicit flags' do
32
32
  let(:flags) { [ ] }
@@ -67,7 +67,7 @@ def update_cpes(xml_file, cpe_vp_map, r7_vp_map):
67
67
  if not fp_type in params:
68
68
  params[fp_type] = {}
69
69
  if name in params[fp_type]:
70
- raise ValueError('Duplicated fingerprint named {} in {}'.format(name, fingerprint.attrib['pattern']))
70
+ raise ValueError('Duplicated fingerprint named {} in fingerprint {} in file {}'.format(name, fingerprint.attrib['pattern'], xml_file))
71
71
  params[fp_type][name] = param
72
72
 
73
73
 
@@ -10,6 +10,7 @@
10
10
  <param pos="0" name="os.vendor" value="IBM"/>
11
11
  <param pos="0" name="os.family" value="OS/400"/>
12
12
  <param pos="0" name="os.product" value="OS/400"/>
13
+ <param pos="0" name="os.cpe23" value="cpe:/o:ibm:os_400:-"/>
13
14
  </fingerprint>
14
15
  <fingerprint pattern=".*\(Mandrake Linux/\d+\.\d+\.92mdk\).*">
15
16
  <description>Mandriva (formerly Mandrake) Linux 9.2</description>
@@ -144,6 +145,14 @@
144
145
  <param pos="0" name="os.product" value="Linux"/>
145
146
  <param pos="0" name="os.cpe23" value="cpe:/o:redhat:linux:-"/>
146
147
  </fingerprint>
148
+ <fingerprint pattern=".*\(Red Hat Enterprise (?:Linux)?\).*">
149
+ <description>Apache OS: Red Hat Enterprise Linux</description>
150
+ <example os.vendor="Red Hat">Apache/2.4.6 (Red Hat Enterprise Linux) OpenSSL/1.0.2k-fips</example>
151
+ <param pos="0" name="os.vendor" value="Red Hat"/>
152
+ <param pos="0" name="os.family" value="Linux"/>
153
+ <param pos="0" name="os.product" value="Enterprise Linux"/>
154
+ <param pos="0" name="os.cpe23" value="cpe:/o:redhat:enterprise_linux:-"/>
155
+ </fingerprint>
147
156
  <fingerprint pattern=".*Debian(?:[/ ]GNU)?(?:/Linux)?.*">
148
157
  <description>Debian Linux</description>
149
158
  <param pos="0" name="os.vendor" value="Debian"/>