recog 3.1.25 → 3.1.27

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cd00205bcffdea3e8612f67aa1eaa0202af5bae3b8619d05cff81995639acd19
-  data.tar.gz: b1ddbe7b22aef1cc20d79c1c4ba6984e4212227592d4cdbf9a6febec2efc7c9e
+  metadata.gz: b262a6c8f84beaf7a3a9fb003e3fee03da3a8ef13f3f5a312c69e8bb4753fe73
+  data.tar.gz: 118bb5f0b94fd7c6ecc5625b05cbeedf88e32711dae592cf8e3cdf9f9a1f271c
 SHA512:
-  metadata.gz: 97001a25cebf2c1a36ee33d6a3b2b839f28bae83e5159ccfbb0a20333238d809ae1d5edce6083627b4bcffc932712e68b4fbcc7a1bb76bcd1098f772aafe0314
-  data.tar.gz: a34b332c23519a00018757d27bd916b697083d9d49d167b29a4a53bfbcfd421226b346529d18a09961edd0932c54c83f715aa52a7803e8f83f5cbf7c46457722
+  metadata.gz: 9d137b2880cad5ed5ec9bde7e2056c88b5d0ed38aa2646a20df102302c3b3de761a750671476367f2d63b2a466464f71198373fc3a7292c4314bf6823f4ff3fd
+  data.tar.gz: a65098416198df78d7f40aaf3d0981de87db5c6460df361cd9cd5f2cfa943288bef1e6c879a807dd8cb751b496a123a83325b1bb753f4e5aed473e79e7a4c021

data/lib/recog/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Recog
-  VERSION = '3.1.25'
+  VERSION = '3.1.27'
 end

data/recog/xml/mysql_banners.xml

@@ -1601,6 +1601,17 @@
     <param pos="0" name="service.product" value="MaxScale"/>
   </fingerprint>
 
+  <fingerprint pattern="^\d{1,2}\.\d{1,2}\.\d{1,2}-(\d{1,2}\.\d{1,2}\.\d{1,2})-(?i:maxscale)$">
+    <description>MariaDB MariaDB MaxScale with different version string</description>
+    <example service.version="10.6.8">5.5.5-10.6.8-maxscale</example>
+    <example service.version="10.6.8">5.5.5-10.6.8-MaxScale</example>
+    <param pos="1" name="service.version"/>
+    <param pos="0" name="service.vendor" value="MariaDB"/>
+    <param pos="0" name="service.family" value="MySQL"/>
+    <param pos="0" name="service.product" value="MariaDB"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:mariadb:mariadb:{service.version}"/>
+  </fingerprint>
+
   <fingerprint pattern="^(\d{1,2}\.\d{1,3}\.[a-f\d]{1,3})-falcon-alpha-community-nt" flags="REG_ICASE">
     <description>Oracle MySQL with defunct Falcon Storage Engine with Named Pipes (Windows)</description>
     <example service.version="5.2.0">5.2.0-falcon-alpha-community-nt</example>

data/recog/xml/ntp_banners.xml

@@ -365,7 +365,7 @@
     <param pos="0" name="os.cpe23" value="cpe:/o:citrix:netscaler_firmware:{os.version}"/>
   </fingerprint>
 
-  <fingerprint pattern="version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;FreeBSD/?([^ ]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
+  <fingerprint pattern="version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;FreeBSD/?([\d][^ ]*)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
     <description>ntpd running on FreeBSD</description>
     <example service.version="4.2.6p2@1.2194" os.arch="i386" os.version="7.4-PRERELEASE">
       version="ntpd 4.2.6p2@1.2194 Wed Nov 24 15:54:11 UTC 2010 (1)",
@@ -382,7 +382,7 @@
     <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
   </fingerprint>
 
-  <fingerprint pattern="processor=&quot;([^ ]+)&quot;,.*system=&quot;FreeBSD/?([^ ]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
+  <fingerprint pattern="processor=&quot;([^ ]+)&quot;,.*system=&quot;FreeBSD/?([\d][^ ]*)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
     <description>ntp without a version on FreeBSD</description>
     <example os.arch="i386" os.version="4.1-RELEASE">
       processor="i386", system="FreeBSD4.1-RELEASE"
@@ -1318,4 +1318,4 @@
     <param pos="1" name="service.version"/>
   </fingerprint>
 
-</fingerprints>
+</fingerprints>

data/recog/xml/snmp_sysdescr.xml

@@ -3358,17 +3358,21 @@ Copyright (c) 1995-2005 by Cisco Systems
     <param pos="0" name="os.device" value="WAP"/>
   </fingerprint>
 
-  <fingerprint pattern="VRP.*Version ([\d.]+) \((.+?) (V[\d.]+R[\d.]+C[\d.]+(?:SPC|SPH|CP|HP)?\d*)">
+  <fingerprint pattern="VRP[^V]*Version ([\d.]+) \(([^\s]+) (V\d{3,3}R\d{3,3}(?:C\d{2,2})?(?:SPC\d+|SPH\d+|CP\d+|HP\d+)?)\)">
     <description>HUAWEI VRP</description>
-    <example hw.model="CE6870EI" hw.series="V200R001C00SPC700" os.version="8.120">Huawei Versatile Routing Platform Software
+    <example hw.model="CE6870EI" hw.series="V200R001C00SPC700" os.device="CE6870EI" os.version="8.120">Huawei Versatile Routing Platform Software
       VRP (R) software, Version 8.120 (CE6870EI V200R001C00SPC700) Copyright (C) 2012-2016 Huawei Technologies Co., Ltd.
     </example>
-    <example hw.model="AR2200" hw.series="V200R003C00" os.version="5.120">Huawei Versatile Routing Platform Software
+    <example hw.model="AR2200" hw.series="V200R003C00" os.device="AR2200" os.version="5.120">Huawei Versatile Routing Platform Software
       VRP (R) software, Version 5.120 (AR2200 V200R003C00) Copyright (C) 2011-2012 HUAWEI TECH CO., LTD
     </example>
+    <example hw.model="5310EI" hw.series="V200R003" os.device="5310EI" os.version="5.111">Huawei Versatile Routing Platform Software
+      VRP (R) software, Version 5.111 (5310EI V200R003) Copyright (C) 2011-2012 HUAWEI TECH CO., LTD
+    </example>
     <param pos="0" name="os.vendor" value="Huawei"/>
     <param pos="0" name="os.product" value="VRP"/>
     <param pos="1" name="os.version"/>
+    <param pos="2" name="os.device"/>
     <param pos="2" name="hw.model"/>
     <param pos="3" name="hw.series"/>
     <param pos="0" name="hw.vendor" value="Huawei"/>

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: recog
 version: !ruby/object:Gem::Version
-  version: 3.1.25
+  version: 3.1.27
 platform: ruby
 authors:
 - Rapid7 Research
@@ -35,7 +35,7 @@ cert_chain:
   XXBvE6wC6iokirNlDvZlbO9G18iiVLdwQrWvhAiMXpuLobG6mXRnm2nRjGAbeluj
   F5KvN7/Jo4xic61stZ/n41BgEGMdZhzI20QStLGk6rsnKhmlXs1TKFr9NQRr4Hz/
   -----END CERTIFICATE-----
-date: 2025-12-17 00:00:00.000000000 Z
+date: 2026-05-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec