recog 3.1.5 → 3.1.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0c9b6f01ea5204e6bd877f0896ad0341c2c85d6f5b49f8fd4212ea1bb8478b74
-  data.tar.gz: ad552bc83c666faab4328a1acac910a47173b24fd2e6cf61b350d7c592f6ade6
+  metadata.gz: 55ef24f4fa270b31312de37adfb1f7aea943205387a16850a9e269c877ae05b2
+  data.tar.gz: 3356b57eb0b254604062066c5c5cd6751df47e7b6e6612c8fc23f00b33e89877
 SHA512:
-  metadata.gz: 8f200a41aa9921e4c00ffc0070225a59804bf5fafc0c3c8caf5bd7e306225e1b85b94a0e45a1ca6c37b6c275128053d50aa14fe365f285557a0afe1a288bef03
-  data.tar.gz: f4140eb456538153b6b8f8ede0652c39f0329b47e1529578701c1a37d81ca5278bdfbb37ef1fd6801e6faf19aa0017d5a7279636d3378ecc1c6cf6f4ffe227aa
+  metadata.gz: 627cb12753ac6c161cb9673c4d599d7ebd8d884e22de7c02468f8aa1197f60690cd2a45cd1d4adbecf7898550a8b6d45081f9380ac89b26b84dced9f4f648b2a
+  data.tar.gz: e014eedb0b53edb5cf699e2c5aa67669aa7423f573445f62c42cb4e5e52aef000411482142184bc5e4f0a521c743c460a50d0dbd656141d842faf6174f3629c9

data/Gemfile

@@ -4,6 +4,7 @@ source 'https://rubygems.org'
 
 gemspec name: 'recog'
 
+gem 'ffi', '1.16.3'
 gem 'nokogiri'
 
 group :test do

data/lib/recog/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Recog
-  VERSION = '3.1.5'
+  VERSION = '3.1.7'
 end

data/recog/xml/http_wwwauth.xml

@@ -182,11 +182,14 @@
 
   <fingerprint pattern="^(?:Basic|Digest) realm=&quot;(DCS-[^&quot;]+)&quot;">
     <description>D-Link DCS IP Cameras</description>
-    <example hw.product="DCS-5222LB1">Basic realm="DCS-5222LB1"</example>
-    <example hw.product="DCS-2530L">Basic realm="DCS-2530L"</example>
+    <example os.vendor="D-Link" hw.vendor="D-Link" hw.device="IP Camera" hw.product="DCS-5222LB1" hw.model="DCS-5222LB1">Basic realm="DCS-5222LB1"</example>
+    <example os.vendor="D-Link" hw.vendor="D-Link" hw.device="IP Camera" hw.product="DCS-2530L" hw.model="DCS-2530L">Basic realm="DCS-2530L"</example>
+    <example os.vendor="D-Link" hw.vendor="D-Link" hw.device="IP Camera" hw.product="DCS-932LB1_BC" hw.model="DCS-932LB1_BC">Digest realm="DCS-932LB1_BC",qop="auth", nonce="ab08230abdfae0061bb2b657537e7eea"</example>
+    <param pos="0" name="os.vendor" value="D-Link"/>    
     <param pos="0" name="hw.vendor" value="D-Link"/>
     <param pos="0" name="hw.device" value="IP Camera"/>
     <param pos="1" name="hw.product"/>
+    <param pos="1" name="hw.model"/>
   </fingerprint>
 
   <fingerprint pattern="^(?:Basic|Digest) realm=&quot;GoAhead&quot;">
@@ -889,4 +892,4 @@ Digest realm="WatchGuard SOHO  Configuration",qop="auth",nonce="7c8e98007db66888
      Basic realm="User Login"
   -->
 
-</fingerprints>
+</fingerprints>

data/recog/xml/snmp_sysdescr.xml

@@ -1820,7 +1820,7 @@ Copyright (c) 1995-2005 by Cisco Systems
     <param pos="0" name="os.product" value="Wireless Controller"/>
   </fingerprint>
 
-  <fingerprint pattern="Meraki (MX[A-Z0-9]{2,10})">
+  <fingerprint pattern="^Meraki (MX[A-Z0-9]{2,10})">
     <description>Meraki MX Cloud-Managed Security and SD-WAN</description>
     <example hw.model="MX68">Meraki MX68 Router/Security Appliance</example>
     <example hw.model="MX84">Meraki MX84 Cloud Managed Router</example>
@@ -1833,7 +1833,7 @@ Copyright (c) 1995-2005 by Cisco Systems
     <param pos="1" name="hw.model"/>
   </fingerprint>
 
-  <fingerprint pattern="Meraki (MR[A-Z0-9]{2,10})">
+  <fingerprint pattern="^Meraki (MR[A-Z0-9]{2,10})">
     <description>Meraki MR Cloud-Managed Wi-Fi Access Points</description>
     <example hw.model="MR46E">Meraki MR46E Cloud Managed AP</example>
     <example hw.model="MR90">Meraki MR90 Cloud Managed AP</example>
@@ -1846,7 +1846,7 @@ Copyright (c) 1995-2005 by Cisco Systems
     <param pos="1" name="hw.model"/>
   </fingerprint>
 
-  <fingerprint pattern="Meraki (MS[A-Z0-9-]{2,15})">
+  <fingerprint pattern="^(?:Cisco Meraki|Meraki) (MS[A-Z0-9-]{2,15})">
     <description>Meraki MS Cloud-Managed Network Switches</description>
     <example hw.model="MS120-8LP">Meraki MS120-8LP Cloud Managed PoE Switch</example>
     <example hw.model="MS225-24P">Meraki MS225-24P Cloud Managed PoE Switch</example>
@@ -3582,6 +3582,22 @@ Copyright (c) 1995-2005 by Cisco Systems
     <param pos="0" name="os.device" value="Printer"/>
   </fingerprint>
 
+  <!--======================================================================
+                            Ivanti (Pulse Secure)
+   =======================================================================-->
+
+  <fingerprint pattern="^(?:Pulse Secure, LLC|Ivanti Connect Secure),.*,(\d+\.\d+R\d+(?:\.\d+)?) \(build \d+\)$">
+    <description>Pulse Secure, LLC, Ivanti Connect Secure</description>
+    <example os.version="22.3R1">Pulse Secure, LLC,Ivanti Connect Secure,ISA-V,22.3R1 (build 1647)</example>
+    <example os.version="22.3R2.1245">Pulse Secure, LLC,Ivanti Connect Secure,ISA-V,22.3R2.1245 (build 1647)</example>
+    <example os.version="22.3R1">Pulse Secure, LLC,ISA-V,22.3R1 (build 1647)</example>
+    <example os.version="22.3R2.1245">Ivanti Connect Secure,ISA-V,22.3R2.1245 (build 1647)</example>
+    <param pos="0" name="os.certainty" value="0.99"/>
+    <param pos="0" name="os.vendor" value="Pulse Secure"/>
+    <param pos="0" name="os.product" value="Pulse Connect Secure"/>
+    <param pos="1" name="os.version"/>
+  </fingerprint>
+
   <!--======================================================================
                               Juniper
    =======================================================================-->

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: recog
 version: !ruby/object:Gem::Version
-  version: 3.1.5
+  version: 3.1.7
 platform: ruby
 authors:
 - Rapid7 Research
@@ -34,7 +34,7 @@ cert_chain:
   DgscAao7wB3xW2BWEp1KnaDWkf1x9ttgoBEYyuYwU7uatB67kBQG1PKvLt79wHvz
   Dxs+KOjGbBRfMnPgVGYkORKVrZIwlaboHbDKxcVW5xv+oZc7KYXWGg==
   -----END CERTIFICATE-----
-date: 2024-04-09 00:00:00.000000000 Z
+date: 2024-06-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec