recog 1.0.22 → 1.0.23

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 3a030d6c0daf514d323d291f2961901ec2e2896f
-  data.tar.gz: 987d2bdfa5707b55c7ec685e8913f72c2acb59c1
+  metadata.gz: ad487921922d1f5733299f9596229665492833e5
+  data.tar.gz: 707c0e7ff3eb7d3aa38998f115ef8af4c9d59a77
 SHA512:
-  metadata.gz: 488dd2e9a3ff72df64d00f2d1028e98d9a7e002223281d510a2614cc8c4964d7cd0370ef62019fc9cf5624423f70a2888f257eac0e7febe37d8a35a8a5b6cfb0
-  data.tar.gz: e3473f0f3b55c904cd546902c2377aa8951a4a20260869e4f2536710a5ce4b2ee5bf7ef2f1fdccd27c899a024feac7b298991f14b468e402b5ac5bfc1787044e
+  metadata.gz: 3854996cfe56e7f7462eaeb82e790e5c291ea1ada340580c4959b0b4266979d38f189546d121b518427474ce89d43a1de677fd0dc274f8d230e51962ae1ccf60
+  data.tar.gz: 17d7af15888c63ffdc242149e508d0ded0624726ff5b37eeb9222f36bc10a7434fb91600b61b88cf5bbd1425bb358887e7be38c89a0b567b499fb248f7d97424

data/lib/recog/version.rb

@@ -1,3 +1,3 @@
 module Recog
-  VERSION = '1.0.22'
+  VERSION = '1.0.23'
 end

data/xml/http_servers.xml

@@ -3030,10 +3030,11 @@
    </fingerprint>
    -->
 
-   <fingerprint pattern="^SentinelProtectionServer/((?:\d+\.)+\d+)$">
+   <fingerprint pattern="^SentinelProtectionServer/((?:\d+\.)*\d+)$">
       <example>SentinelProtectionServer/7.1</example>
       <example>SentinelProtectionServer/7.3</example>
       <example>SentinelProtectionServer/7.0</example>
+      <example>SentinelProtectionServer/7</example>
       <description>Embedded web server in SafeNet's memory key dongles.</description>
       <param pos="0" name="service.vendor" value="SafeNet"/>
       <param pos="0" name="service.product" value="Sentinel Protection Server"/>
@@ -3041,9 +3042,10 @@
       <param pos="1" name="service.version"/>
    </fingerprint>
 
-   <fingerprint pattern="^SentinelKeysServer/((?:\d+\.)+\d+)$">
+   <fingerprint pattern="^SentinelKeysServer/((?:\d+\.)*\d+)$">
       <example>SentinelKeysServer/1.3.1</example>
       <example>SentinelKeysServer/1.0</example>
+      <example>SentinelKeysServer/1</example>
       <description>Embedded web server in SafeNet's memory key dongles.</description>
       <param pos="0" name="service.vendor" value="SafeNet"/>
       <param pos="0" name="service.product" value="Sentinel Keys Server"/>
@@ -3051,8 +3053,9 @@
       <param pos="1" name="service.version"/>
    </fingerprint>
 
-   <fingerprint pattern="^CherryPy/((?:\d+\.)+\d+)$">
+   <fingerprint pattern="^CherryPy/((?:\d+\.)*\d+)$">
       <example>CherryPy/3.1.2</example>
+      <example>CherryPy/3</example>
       <description>Web server component of CherryPy web application framework.</description>
       <param pos="0" name="service.vendor" value="CherryPy"/>
       <param pos="0" name="service.product" value="CherryPy"/>
@@ -3080,8 +3083,9 @@
       <param pos="2" name="python.version"/>
    </fingerprint>
 
-   <fingerprint pattern="^HP Web Jetadmin/((?:\d+\.)+\d+)\s*(.*)$">
+   <fingerprint pattern="^HP Web Jetadmin/((?:\d+\.)*\d+)\s*(.*)$">
       <example>HP Web Jetadmin/2.0.50 (Win32) mod_auth_sspi/1.0.1 mod_ssl/2.0.50 OpenSSL/0.9.6m</example>
+      <example>HP Web Jetadmin/2 (Win32) mod_auth_sspi/1.0.1 mod_ssl/2.0.50 OpenSSL/0.9.6m</example>
       <description>Apache variant for web access to HP printers.</description>
       <param pos="0" name="service.vendor" value="Apache"/>
       <param pos="0" name="service.product" value="HTTPD"/>
@@ -3101,8 +3105,9 @@
       <param pos="0" name="service.family" value="Web PN Server"/>
    </fingerprint>
 
-   <fingerprint pattern="^Lotus Expeditor Web Container/((?:\d+\.)+\d+)$">
+   <fingerprint pattern="^Lotus Expeditor Web Container/((?:\d+\.)*\d+)$">
       <example>Lotus Expeditor Web Container/6.1</example>
+      <example>Lotus Expeditor Web Container/6</example>
       <description>Expeditor is a framework used by IBM in many products in the Lotus brand, such as Sametime and Notes.</description>
       <param pos="0" name="service.vendor" value="IBM"/>
       <param pos="0" name="service.product" value="Lotus Expeditor Server"/>
@@ -3118,9 +3123,10 @@
       <param pos="0" name="service.family" value="GoAhead Webserver"/>
    </fingerprint>
 
-   <fingerprint pattern="^Mbedthis-Appweb/((?:\d+\.)+\d+)$">
+   <fingerprint pattern="^Mbedthis-Appweb/((?:\d+\.)*\d+)$">
       <example>Mbedthis-Appweb/2.4.0</example>
       <example>Mbedthis-Appweb/2.4.2</example>
+      <example>Mbedthis-Appweb/2</example>
       <description>An embedded web server for hosting dynamic web applications.</description>
       <param pos="0" name="service.vendor" value="Embedthis"/>
       <param pos="0" name="service.product" value="Appweb"/>
@@ -3128,8 +3134,9 @@
       <param pos="1" name="service.version"/>
    </fingerprint>
 
-   <fingerprint pattern="^Avaya CMBE/((?:\d+\.)+\d+)$">
+   <fingerprint pattern="^Avaya CMBE/((?:\d+\.)*\d+)$">
       <example>Avaya CMBE/2.0.0</example>
+      <example>Avaya CMBE/2</example>
       <description>Web server for Avaya Aura Communication Manager Branch, a SIP-based communications platform.</description>
       <param pos="0" name="service.vendor" value="Avaya"/>
       <param pos="0" name="service.product" value="Aura Communication Manager"/>
@@ -3138,8 +3145,9 @@
    </fingerprint>
 
 
-   <fingerprint pattern="^Rapid Logic/((?:\d+\.)+\d+)$">
+   <fingerprint pattern="^Rapid Logic/((?:\d+\.)*\d+)$">
       <example>Rapid Logic/1.1</example>
+      <example>Rapid Logic/1</example>
       <description>Embedded web server by Rapid Logic, which was acquired by Wind River.</description>
       <!-- From Googling, it sounds like this is just referred to as the
            Rapid Logic web server. -->
@@ -3177,8 +3185,9 @@
       <param pos="1" name="service.version"/>
    </fingerprint>
 
-   <fingerprint pattern="^mini_httpd/((?:\d+\.)+\d+) \S*$">
+   <fingerprint pattern="^mini_httpd/((?:\d+\.)*\d+) \S*$">
       <example>mini_httpd/1.14 23jun2000</example>
+      <example>mini_httpd/1 23jun2000</example>
       <description>A small HTTP server</description>
       <param pos="0" name="service.vendor" value="ACME Laboratories"/>
       <param pos="0" name="service.product" value="mini_httpd"/>
@@ -3186,8 +3195,9 @@
       <param pos="1" name="service.version"/>
    </fingerprint>
 
-   <fingerprint pattern="^thin ((?:\d+\.)+\d+) codename .+$">
+   <fingerprint pattern="^thin ((?:\d+\.)*\d+) codename .+$">
       <example>thin 1.2.4 codename Flaming Astroboy</example>
+      <example>thin 1 codename Flaming Astroboy</example>
       <description>A Ruby-based web server.</description>
       <!-- By private developer Marc-Andre Cournoyer; assert
            nothing for service.vendor. -->
@@ -3196,8 +3206,9 @@
       <param pos="1" name="service.version"/>
    </fingerprint>
 
-   <fingerprint pattern="^Avocent DSView \d+/((?:\d+\.)+\d+)$">
+   <fingerprint pattern="^Avocent DSView \d+/((?:\d+\.)*\d+)$">
       <example>Avocent DSView 3/3.7.0.71</example>
+      <example>Avocent DSView 3/3</example>
       <description>Web server interface for controlling data centers.</description>
       <param pos="0" name="service.vendor" value="Avocent"/>
       <param pos="0" name="service.product" value="DSView"/>
@@ -3205,8 +3216,9 @@
       <param pos="1" name="service.version"/>
    </fingerprint>
 
-   <fingerprint pattern="^Mongrel ((?:\d+\.)+\d+)$">
+   <fingerprint pattern="^Mongrel ((?:\d+\.)*\d+)$">
       <example>Mongrel 1.1.5</example>
+      <example>Mongrel 1</example>
       <description>Ruby-based web server and HTTP library.</description>
       <!-- By private developer Zed A. Shaw; assert
            nothing for service.vendor. -->
@@ -3215,9 +3227,10 @@
       <param pos="1" name="service.version"/>
    </fingerprint>
 
-   <fingerprint pattern="^Microplex emHTTPD/((?:\d+\.)+\d+)$">
+   <fingerprint pattern="^Microplex emHTTPD/((?:\d+\.)*\d+)$">
       <example>Microplex emHTTPD/1.0</example>
       <example>Microplex emHTTPD/1.1</example>
+      <example>Microplex emHTTPD/1</example>
       <description>Embedded web server used by Microplex.</description>
       <param pos="0" name="service.vendor" value="Microplex"/>
       <!-- Per Microplex M307 data sheet, the device is manageable
@@ -3232,8 +3245,9 @@
       <param pos="0" name="os.device" value="Print server"/>
    </fingerprint>
 
-   <fingerprint pattern="^UPS_Server/((?:\d+\.)+\d+)$">
+   <fingerprint pattern="^UPS_Server/((?:\d+\.)*\d+)$">
       <example>UPS_Server/1.0</example>
+      <example>UPS_Server/1</example>
       <description>An embedded web server used for UPS management; primarily by Eaton, but also by APC.</description>
       <param pos="0" name="service.vendor" value="Eaton"/>
       <param pos="0" name="service.product" value="ConnectUPS"/>
@@ -3243,8 +3257,9 @@
       <param pos="0" name="os.device" value="UPS"/>
    </fingerprint>
 
-   <fingerprint pattern="^JC-HTTPD/((?:\d+\.)+\d+)$">
+   <fingerprint pattern="^JC-HTTPD/((?:\d+\.)*\d+)$">
       <example>JC-HTTPD/1.11.14</example>
+      <example>JC-HTTPD/1</example>
       <!-- Shodan shows multiple printers with servers having this
            banner, but I can't find a project page. -->
       <description>An embedded web server, used notably by Oki and Kyocera in printers.</description>
@@ -3253,8 +3268,9 @@
       <param pos="1" name="service.version"/>
    </fingerprint>
 
-   <fingerprint pattern="^JC-SHTTPD/((?:\d+\.)+\d+)$">
+   <fingerprint pattern="^JC-SHTTPD/((?:\d+\.)*\d+)$">
       <example>JC-SHTTPD/1.17.20</example>
+      <example>JC-SHTTPD/1</example>
       <!-- The only Google hits for "JC-SHTTPD" list it as being
       a Sharp printer. There is a project called SHTTPD (now Mongoose),
       but version 1.17 does not have this banner.
@@ -3268,8 +3284,9 @@
       <param pos="1" name="service.version"/>
    </fingerprint>
 
-   <fingerprint pattern="^Oracle XML DB/Oracle\S+ Enterprise Edition Release ((?:\d+\.)+\d+) - Production$">
+   <fingerprint pattern="^Oracle XML DB/Oracle\S+ Enterprise Edition Release ((?:\d+\.)*\d+) - Production$">
       <example>Oracle XML DB/Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production</example>
+      <example>Oracle XML DB/Oracle9i Enterprise Edition Release 9 - Production</example>
       <!-- Oracle provides a laundry list of HTTP(S) features not
       supported by the XML DB's web server; I think it's safe
       to say that it is almost certainly not Apache under the hood:
@@ -3300,8 +3317,9 @@
       <param pos="0" name="os.device" value="Firewall"/>
    </fingerprint>
 
-   <fingerprint pattern="^Ews/((?:\d+\.)+\d+)$">
+   <fingerprint pattern="^Ews/((?:\d+\.)*\d+)$">
       <example>Ews/0.1</example>
+      <example>Ews/0</example>
       <description>IBM Network Printer Manager.</description>
       <param pos="0" name="service.vendor" value="IBM"/>
       <param pos="0" name="service.product" value="Network Printer Manager"/>
@@ -3411,8 +3429,9 @@
       <param pos="0" name="service.family" value="Google Web Server"/>
    </fingerprint>
 
-   <fingerprint pattern="^GFE/((?:\d+\.)+\d+)$">
+   <fingerprint pattern="^GFE/((?:\d+\.)*\d+)$">
       <example>GFE/1.3</example>
+      <example>GFE/1</example>
       <description>Google Front End for apps running on Google services.</description>
       <param pos="0" name="service.vendor" value="Google"/>
       <param pos="0" name="service.product" value="Google Front End"/>

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: recog
 version: !ruby/object:Gem::Version
-  version: 1.0.22
+  version: 1.0.23
 platform: ruby
 authors:
 - Rapid7 Research
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-03-10 00:00:00.000000000 Z
+date: 2015-03-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec
@@ -225,7 +225,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.4.3
+rubygems_version: 2.2.2
 signing_key: 
 specification_version: 4
 summary: Network service fingerprint database, classes, and utilities