recog 3.1.33 → 3.1.35

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6881dcfb67d541d084e148c2d350aea579d2298fa9c87a19708e66d824773dd7
-  data.tar.gz: 4571b756d63f37494b563d071ceef733c4e10fe11c52c059364305124ac373ed
+  metadata.gz: 83a5e4484d602f10adc5762a3b388b6ed2b305f5f6404031a492e3f4c57d4fff
+  data.tar.gz: ab991810258cfd9ecd5392732d65962c669242964d2ac61292e44984fdd43be3
 SHA512:
-  metadata.gz: 6b0a94a2e68b5385d6f0a259703e553e138ba1c94b174133480d63d9a903781fd6d2bad32549b0c3eb4687d3c1bc255820e8ab085ae1853854ffa3ef08e70e0b
-  data.tar.gz: 6eeeb5f4bd60a73454ad13a6be1bb51de3e305e508a01451bc27d1d4121dad0f0d613f99dc17251ec34295fd937564fb3b540ca81e3a5899bb7c1958d3b0909d
+  metadata.gz: 1e0fdc9acbf0a14f37e1cdfea8afa812691b2544b22bc7ce613557dcf366df8c5febac8196388f53da72b76baee1e7ba75e0920a9d21d94721302f90f5858762
+  data.tar.gz: 8fe5f9f805a373aaeb74431ced9a48ff6e4bb33ee11d8852f262f9af98714855f8c3c07b69df6b0d55d75e3291a29cd429b55654946d93d419f919887d0285d0

data/lib/recog/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Recog
-  VERSION = '3.1.33'
+  VERSION = '3.1.35'
 end

data/recog/xml/http_header.x-fortisandbox-version.xml

@@ -0,0 +1,18 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<fingerprints matches="http_header.x-fortisandbox-version" protocol="http" database_type="service" preference="0.90">
+  <!-- HTTP X-Fortisandbox-Version headers are matched against these patterns to fingerprint Fortinet FortiSandbox appliances. -->
+
+  <fingerprint pattern="^(\d+\.\d+\.\d+)$">
+    <description>Fortinet FortiSandbox</description>
+    <example service.version="5.0.5">5.0.5</example>
+    <param pos="0" name="service.vendor" value="Fortinet"/>
+    <param pos="0" name="service.product" value="FortiSandbox"/>
+    <param pos="0" name="service.device" value="Sandbox"/>
+    <param pos="1" name="service.version"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:fortinet:fortisandbox:{service.version}"/>
+    <param pos="0" name="hw.vendor" value="Fortinet"/>
+    <param pos="0" name="hw.family" value="FortiSandbox"/>
+    <param pos="0" name="hw.device" value="Sandbox"/>
+  </fingerprint>
+
+</fingerprints>

data/recog/xml/http_servers.xml

@@ -5191,6 +5191,13 @@
     <param pos="0" name="hw.device" value="Device"/>
   </fingerprint>
 
+  <fingerprint pattern=".*KNX-IP.*">
+    <description>KNX-IP Interface</description>
+    <example>Zennio KNX-IP Interface</example>
+    <param pos="0" name="service.vendor" value="KNX"/>
+    <param pos="0" name="service.product" value="KNX Device"/>
+  </fingerprint>
+
   <fingerprint pattern="^APISIX\/([\d\.]+)">
     <description>Apache APISIX</description>
     <example service.version="3.13.0">APISIX/3.13.0</example>

data/recog/xml/mysql_banners.xml

@@ -1706,9 +1706,10 @@
     <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:9.0"/>
   </fingerprint>
 
-  <fingerprint pattern="^(?:\d{1,2}\.\d{1,3}\.[a-f\d]{1,3}-)(\d*\.\d*\.\d*)-MariaDB\S*deb\S*$" flags="REG_ICASE">
-    <description>MariaDB MariaDB on Debian 9.1 (stretch)</description>
-    <example service.version="10.1.23">5.5.5-10.1.23-MariaDB-9+deb9u1</example>
+  <fingerprint pattern="^(?:\d{1,2}\.\d{1,3}\.[a-f\d]{1,3}-)(\d*\.\d*\.\d*)-MariaDB\S*\+deb(\d{1,2})u\d\S*$" flags="REG_ICASE">
+    <description>MariaDB MariaDB packaged for Debian</description>
+    <example service.version="10.1.23" os.version="9">5.5.5-10.1.23-MariaDB-9+deb9u1</example>
+    <example service.version="10.5.29" os.version="11">5.5.5-10.5.29-MariaDB-0+deb11u1-log</example>
     <param pos="1" name="service.version"/>
     <param pos="0" name="service.vendor" value="MariaDB"/>
     <param pos="0" name="service.family" value="MySQL"/>
@@ -1717,8 +1718,8 @@
     <param pos="0" name="os.vendor" value="Debian"/>
     <param pos="0" name="os.family" value="Linux"/>
     <param pos="0" name="os.product" value="Linux"/>
-    <param pos="0" name="os.version" value="9.1"/>
-    <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:9.1"/>
+    <param pos="2" name="os.version"/>
+    <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:{os.version}"/>
   </fingerprint>
 
   <fingerprint pattern="^^(\d{1,2}\.\d{1,2}\.[a-f\d]{1,3})-Sphinx" flags="REG_ICASE">

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: recog
 version: !ruby/object:Gem::Version
-  version: 3.1.33
+  version: 3.1.35
 platform: ruby
 authors:
 - Rapid7 Research
@@ -35,7 +35,7 @@ cert_chain:
   XXBvE6wC6iokirNlDvZlbO9G18iiVLdwQrWvhAiMXpuLobG6mXRnm2nRjGAbeluj
   F5KvN7/Jo4xic61stZ/n41BgEGMdZhzI20QStLGk6rsnKhmlXs1TKFr9NQRr4Hz/
   -----END CERTIFICATE-----
-date: 2026-07-14 00:00:00.000000000 Z
+date: 2026-08-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec
@@ -167,6 +167,7 @@ files:
 - recog/xml/hp_pjl_id.xml
 - recog/xml/html_title.xml
 - recog/xml/http_cookies.xml
+- recog/xml/http_header.x-fortisandbox-version.xml
 - recog/xml/http_servers.xml
 - recog/xml/http_wwwauth.xml
 - recog/xml/http_xpoweredby.xml