recog 3.1.32 → 3.1.34

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '01609e9d7d70fba83070b5e1f1eee086fef32afaa7e51bf574d36c1386c251e4'
-  data.tar.gz: 77eb33fb7e46029d8bfdf58d8625542f572c59b436e79d503dedd95fa5605521
+  metadata.gz: 6cea4f5e9690bed42d5279bdd1fa86f6ff09c699bd0f4cc172aca68db7903b14
+  data.tar.gz: ff434dbf35a7a1f8885fad41fe56e2b42fa114883b6c5fe82191453a70128004
 SHA512:
-  metadata.gz: '09fa78008d8cd43eee8a9f57ebfe96dbeadb23373e547113824592d43675127d3a3a9cd37fd43db4ca66513e1ecb9a47f724bfb4ef84b545ad606483e2e0bab4'
-  data.tar.gz: 58212fae975838f9e391fc3ff5d3ac2a06232f72180638146fff1f69d95bf202726723411b6fef1300557ff8f346ca46df953a5323a9a905d4cca64aaca556e9
+  metadata.gz: 73540856993408f83220be3c485a2d0dd2c0fc0d985a665ac497837bd1abce01e459cb29f79476d330b6f13d8af79d650e90e5deaf866bc52a1457095b5b0c7d
+  data.tar.gz: bdd01a00297e350a1b3c156e557353b4c2aae18e54fcaa6a4d6af678bae5f4006f4347f37033826daad77a230fd6d0234c42d751b0caad633054fe976dba9d15

data/lib/recog/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Recog
-  VERSION = '3.1.32'
+  VERSION = '3.1.34'
 end

data/recog/xml/http_servers.xml

@@ -5191,6 +5191,13 @@
     <param pos="0" name="hw.device" value="Device"/>
   </fingerprint>
 
+  <fingerprint pattern=".*KNX-IP.*">
+    <description>KNX-IP Interface</description>
+    <example>Zennio KNX-IP Interface</example>
+    <param pos="0" name="service.vendor" value="KNX"/>
+    <param pos="0" name="service.product" value="KNX Device"/>
+  </fingerprint>
+
   <fingerprint pattern="^APISIX\/([\d\.]+)">
     <description>Apache APISIX</description>
     <example service.version="3.13.0">APISIX/3.13.0</example>

data/recog/xml/mysql_banners.xml

@@ -12,6 +12,21 @@
       from this version.
   -->
 
+  <!-- Amazon Aurora MySQL - must be checked before generic Oracle patterns -->
+  <fingerprint pattern="^(\d{1,2}\.\d{1,3}(?:\.\d{1,2})?)\.mysql_aurora\.(\d+\.\d+\.\d+)$" flags="REG_ICASE">
+    <description>Amazon Aurora MySQL</description>
+    <example service.version="5.7" service.component.version="3.04.0">5.7.mysql_aurora.3.04.0</example>
+    <example service.version="8.0" service.component.version="3.04.0">8.0.mysql_aurora.3.04.0</example>
+    <example service.version="8.0" service.component.version="2.11.0">8.0.mysql_aurora.2.11.0</example>
+    <example service.version="9.0" service.component.version="1.00.0">9.0.mysql_aurora.1.00.0</example>
+    <param pos="1" name="service.version"/>
+    <param pos="2" name="service.component.version"/>
+    <param pos="0" name="service.vendor" value="Amazon"/>
+    <param pos="0" name="service.family" value="MySQL"/>
+    <param pos="0" name="service.product" value="Aurora MySQL"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:amazon:aurora_mysql:{service.version}"/>
+  </fingerprint>
+
   <fingerprint pattern="^(\d{1,2}\.\d{1,3}\.[a-f\d]{1,3}(?:[.-]\d{1,2})?(?:[.-]\d{1})?)(?:-m\d{1,2})?(?:-rc)?(?:-alpha)?(?:-beta)?(?:-gamma)?(?:-?max)?(?:-rs)?(?:-modified)?(?:-debug)?(?:-log)?$" flags="REG_ICASE">
     <description>Oracle MySQL (common)</description>
     <example service.version="4.1.20">4.1.20</example>
@@ -1691,9 +1706,10 @@
     <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:9.0"/>
   </fingerprint>
 
-  <fingerprint pattern="^(?:\d{1,2}\.\d{1,3}\.[a-f\d]{1,3}-)(\d*\.\d*\.\d*)-MariaDB\S*deb\S*$" flags="REG_ICASE">
-    <description>MariaDB MariaDB on Debian 9.1 (stretch)</description>
-    <example service.version="10.1.23">5.5.5-10.1.23-MariaDB-9+deb9u1</example>
+  <fingerprint pattern="^(?:\d{1,2}\.\d{1,3}\.[a-f\d]{1,3}-)(\d*\.\d*\.\d*)-MariaDB\S*\+deb(\d{1,2})u\d\S*$" flags="REG_ICASE">
+    <description>MariaDB MariaDB packaged for Debian</description>
+    <example service.version="10.1.23" os.version="9">5.5.5-10.1.23-MariaDB-9+deb9u1</example>
+    <example service.version="10.5.29" os.version="11">5.5.5-10.5.29-MariaDB-0+deb11u1-log</example>
     <param pos="1" name="service.version"/>
     <param pos="0" name="service.vendor" value="MariaDB"/>
     <param pos="0" name="service.family" value="MySQL"/>
@@ -1702,8 +1718,8 @@
     <param pos="0" name="os.vendor" value="Debian"/>
     <param pos="0" name="os.family" value="Linux"/>
     <param pos="0" name="os.product" value="Linux"/>
-    <param pos="0" name="os.version" value="9.1"/>
-    <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:9.1"/>
+    <param pos="2" name="os.version"/>
+    <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
   </fingerprint>
 
   <fingerprint pattern="^^(\d{1,2}\.\d{1,2}\.[a-f\d]{1,3})-Sphinx" flags="REG_ICASE">

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: recog
 version: !ruby/object:Gem::Version
-  version: 3.1.32
+  version: 3.1.34
 platform: ruby
 authors:
 - Rapid7 Research
@@ -35,7 +35,7 @@ cert_chain:
   XXBvE6wC6iokirNlDvZlbO9G18iiVLdwQrWvhAiMXpuLobG6mXRnm2nRjGAbeluj
   F5KvN7/Jo4xic61stZ/n41BgEGMdZhzI20QStLGk6rsnKhmlXs1TKFr9NQRr4Hz/
   -----END CERTIFICATE-----
-date: 2026-07-13 00:00:00.000000000 Z
+date: 2026-08-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec