recog 1.0.7 → 1.0.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. checksums.yaml +4 -4
  2. data/.travis.yml +1 -1
  3. data/LICENSE +1 -1
  4. data/lib/recog/version.rb +1 -1
  5. data/xml/ftp_banners.xml +13 -0
  6. data/xml/sip_banners.xml +11 -1
  7. data/xml/snmp_sysdescr.xml +49 -31
  8. metadata +3 -3
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: 43a40c05aa93cac58baa77fc025bef525025f29a
4
- data.tar.gz: 3ced96c4d76e3b0a0df75676f280bb83f52103fd
3
+ metadata.gz: 25ed93ab984d93aa284e7a17dfe96cd4395913e5
4
+ data.tar.gz: 7f5caf500b3646ac3f180c5cc55c72cab6b5aa26
5
5
  SHA512:
6
- metadata.gz: aaf607fa4599df1cd090df5ba1dad1c33828d12cb29ad6fd6ec0cc631d7b0ebb8c97d770ce009245a49555a2e0febc718d56f4bd377fa71a5507635329905520
7
- data.tar.gz: 446fd9011a29dac2b93b4bad91d541381b9c2477553181172452defceb20b802adfc05af9bc0ea5949ac69ded5ffdb3b0ed647223b721f14689b72d4d293b2f8
6
+ metadata.gz: 00951a92a9893f2d58f0bc0dd9566ff45a5c58f5b9a024f31bb80e707073bec5f2709ca973f87259e30834834b0f6feb53cd06a3d3f85450b65529df3baf44bf
7
+ data.tar.gz: cc48bdd99a6d8c263ae93ca2552ea34e3725d7f07c04aad2c64f8d74c47b602448dbeb625132d64e464d295b98a4913b03632a461db0de5515cda11b6f739f15
data/.travis.yml CHANGED
@@ -1,6 +1,6 @@
1
1
  language: ruby
2
2
  rvm:
3
- - 2.1.4
3
+ - 2.1.5
4
4
  - 1.9.3
5
5
  - jruby
6
6
  matrix:
data/LICENSE CHANGED
@@ -1,4 +1,4 @@
1
- Copyright (c) 2014, Rapid7
1
+ Copyright (c) 2014-2015, Rapid7
2
2
  All rights reserved.
3
3
 
4
4
  Redistribution and use in source and binary forms, with or without modification,
data/lib/recog/version.rb CHANGED
@@ -1,3 +1,3 @@
1
1
  module Recog
2
- VERSION = "1.0.7"
2
+ VERSION = '1.0.8'
3
3
  end
data/xml/ftp_banners.xml CHANGED
@@ -808,4 +808,17 @@ against these patterns to fingerprint FTP servers.
808
808
  <param pos="1" name="host.name"/>
809
809
  <param pos="2" name="service.version"/>
810
810
  </fingerprint>
811
+ <fingerprint pattern="^Welcome to the (?:Cisco )?(?:TelePresence) ([a-zA-Z\s]*?) ((?:MSE )?\d+), version (\d+.\d+\(\d+.\d+\)).*?" flags="REG_ICASE">
812
+ <description>Cisco TelePresence</description>
813
+ <example os.device="AM GW" os.version="1.1(1.34)" hw.series="3610">Welcome to the Cisco TelePresence AM GW 3610, version 1.1(1.34) </example>
814
+ <example os.device="IP GW" os.version="2.0(3.32)" hw.series="3510">Welcome to the Cisco TelePresence IP GW 3510, version 2.0(3.32) </example>
815
+ <example os.device="MCU" os.version="4.3(2.18)" hw.series="4210">Welcome to the Cisco TelePresence MCU 4210, version 4.3(2.18) </example>
816
+ <example os.device="MCU" os.version="4.3(1.68)" hw.series="MSE 8420">Welcome to the Cisco TelePresence MCU MSE 8420, version 4.3(1.68) </example>
817
+ <example os.device="Server" os.version="2.1(1.18)" hw.series="7010">Welcome to the Telepresence Server 7010, version 2.1(1.18) </example>
818
+ <param pos="0" name="os.vendor" value="Cisco"/>
819
+ <param pos="0" name="os.product" value="TelePresence"/>
820
+ <param pos="1" name="os.device"/>
821
+ <param pos="2" name="hw.series"/>
822
+ <param pos="3" name="os.version"/>
823
+ </fingerprint>
811
824
  </fingerprints>
data/xml/sip_banners.xml CHANGED
@@ -2,7 +2,6 @@
2
2
  <!--
3
3
  SIP Server header values are matched against these patterns to fingerprint SIP devices.
4
4
  -->
5
-
6
5
  <fingerprints matches="sip_header.server">
7
6
  <fingerprint pattern="^Cisco-SIPGateway/IOS-([\d\.x]+)$">
8
7
  <description>Cisco SIPGateway</description>
@@ -11,4 +10,15 @@ SIP Server header values are matched against these patterns to fingerprint SIP d
11
10
  <param pos="0" name="os.product" value="IOS"/>
12
11
  <param pos="1" name="os.version"/>
13
12
  </fingerprint>
13
+ <fingerprint pattern="^TANDBERG/\d+ \(([a-zA-Z]+\d+(?:\.\d+)+).*\)">
14
+ <description>Cisco TelePresence</description>
15
+ <example os.version="X8.2.1">TANDBERG/4130 (X8.2.1)</example>
16
+ <example os.version="XC2.2.1">TANDBERG/4353 (XC2.2.1-b2bua-1.0)</example>
17
+ <example os.version="TC5.1.4.295090">TANDBERG/516 (TC5.1.4.295090)</example>
18
+ <example os.version="TCNC5.1.4.295090">TANDBERG/517 (TCNC5.1.4.295090)</example>
19
+ <example os.version="S5.30">TANDBERG/80 (S5.30)</example>
20
+ <param pos="0" name="os.vendor" value="Cisco"/>
21
+ <param pos="0" name="os.product" value="TelePresence"/>
22
+ <param pos="1" name="os.version"/>
23
+ </fingerprint>
14
24
  </fingerprints>
data/xml/snmp_sysdescr.xml CHANGED
@@ -1527,28 +1527,66 @@
1527
1527
  <!--======================================================================
1528
1528
  CISCO
1529
1529
  =======================================================================-->
1530
- <fingerprint pattern="^(?:Cisco|TANDBERG) Codec SoftW: (.*\d+[\.\d+]*) MCU: Cisco TelePresence ([A-Z]+\d+).*">
1530
+ <fingerprint pattern="^(?:Cisco|TANDBERG) Codec SoftW: (.*\d+[\.\d+]+)(?:(?: )?Beta\d)? (?:\w* )?MCU: (?:Cisco|TANDBERG) (?:\w* )?(\d+MXP|[A-Z]+\d+) .*?">
1531
1531
  <description>Cisco TelePresence</description>
1532
- <example os.version="TC5.1.0.280662" hw.product="SX20">Cisco Codec SoftW: TC5.1.0.280662 MCU: Cisco TelePresence SX20 Date: 2012-02-14 S/N: FTT16070041 BootSW: Board: 101790-6 [28]</example>
1533
- <example os.version="TE4.1.3.292001" hw.product="SX20">Cisco Codec SoftW: TE4.1.3.292001 MCU: Cisco TelePresence SX20 Date: 2012-06-21 S/N: FTT1625007Z BootSW: Board: 101790-6 [B0]</example>
1534
- <example os.version="TC4.2.0.259927" hw.product="MX200">TANDBERG Codec SoftW: TC4.2.0.259927 MCU: Cisco TelePresence MX200 Date: 2011-06-30 S/N: FTT1530000O BootSW: Board: 101770-4 [20]</example>
1535
- <example os.version="TC5.1.3.292001" hw.product="MX300">TANDBERG Codec SoftW: TC5.1.3.292001 MCU: Cisco TelePresence MX300 Date: 2012-06-21 S/N: FTT16030013 BootSW: Board: 101770-5 [22]</example>
1532
+ <example os.version="TC5.1.0.280662" hw.series="SX20">Cisco Codec SoftW: TC5.1.0.280662 MCU: Cisco TelePresence SX20 Date: 2012-02-14 S/N: FTT16070041 BootSW: Board: 101790-6 [28]</example>
1533
+ <example os.version="TC4.2.0.259927" hw.series="MX200">TANDBERG Codec SoftW: TC4.2.0.259927 MCU: Cisco TelePresence MX200 Date: 2011-06-30 S/N: FTT1530000O BootSW: Board: 101770-4 [20]</example>
1534
+ <example os.version="TC5.1.3.292001" hw.series="MX300">TANDBERG Codec SoftW: TC5.1.3.292001 MCU: Cisco TelePresence MX300 Date: 2012-06-21 S/N: FTT16030013 BootSW: Board: 101770-5 [22]</example>
1535
+ <example os.version="TC5.1.0.279658" hw.series="SX20">Cisco Codec SoftW: TC5.1.0.279658Beta7 MCU: Cisco TelePresence SX20 Date: 2012-02-03 S/N: FTT1616005D BootSW: Board: 101790-6 [B0]</example>
1536
+ <example os.version="TC6.0.0" hw.series="SX20">Cisco Codec SoftW: TC6.0.0 Beta7 MCU: Cisco TelePresence SX20 Date: 2012-09-17 S/N: FTT163100A3 BootSW: Board: 101790-6 [B0]</example>
1537
+ <example os.version="TC4.2.0.255978" hw.series="MX200">TANDBERG Codec SoftW: TC4.2.0.255978Beta2 MCU: Cisco TelePresence MX200 Date: 2011-05-23 S/N: FTT1524000I BootSW: Board: 101770-4 [00]</example>
1538
+ <example os.version="TCNC5.0.1.275220" hw.series="MX200">TANDBERG Codec SoftW: TCNC5.0.1.275220 MCU: Cisco TelePresence MX200 Date: 2011-12-19 S/N: FTT1615003S BootSW: Board: 101770-5 [22]</example>
1539
+ <example os.version="TCNC5.1.0.280662" hw.series="SX20">Cisco Codec SoftW: TCNC5.1.0.280662 MCU: Cisco TelePresence SX20 Date: 2012-02-14 S/N: FTT161300A0 BootSW: Board: 101790-6 [A0]</example>
1540
+ <example os.version="F8.1" hw.series="6000MXP">TANDBERG Codec SoftW: F8.1 PAL MCU: TANDBERG Profile 6000MXP Date: 2009-09-07 S/N: 25A46936 BootSW: Rev. 1.15, 2008-01-04 Board: 100670 rev. 07</example>
1541
+ <example os.version="F9.1" hw.series="6000MXP">TANDBERG Codec SoftW: F9.1 NTSC MCU: TANDBERG 6000MXP PORTABLE Date: 2011-06-08 S/N: 25A07029 BootSW: Rev. 1.16, 2009-01-21 Board: 100670 rev. 07</example>
1542
+ <example os.version="TC4.2.0.260857" hw.series="C40">TANDBERG Codec SoftW: TC4.2.0.260857 MCU: TANDBERG Codec C40 Date: 2011-07-11 S/N: B1AV02D00182 BootSW: Board: 101681-1 [04]</example>
1543
+ <example os.version="TC4.2.1.265253" hw.series="EX60">TANDBERG Codec SoftW: TC4.2.1.265253 MCU: TANDBERG EX60 Date: 2011-09-06 S/N: A1AZ02E00212 BootSW: Board: 101620-6 [22]</example>
1544
+ <example os.version="TE1.0.0.175435" hw.series="E20">TANDBERG Codec SoftW: TE1.0.0.175435 MCU: TANDBERG E20 Date: 2009-02-09 S/N: A1AA11B00658 BootSW: Board: 101390-6</example>
1536
1545
  <param pos="0" name="os.certainty" value="0.85"/>
1537
1546
  <param pos="0" name="os.vendor" value="Cisco"/>
1538
1547
  <param pos="0" name="os.product" value="TelePresence"/>
1548
+ <param pos="0" name="os.device" value="Codec"/>
1539
1549
  <param pos="1" name="os.version"/>
1540
- <param pos="2" name="hw.product"/>
1550
+ <param pos="2" name="hw.series"/>
1541
1551
  </fingerprint>
1542
1552
 
1543
- <fingerprint pattern="^Cisco TelePresence (Conductor|MCU (?:MSE )?\d+)">
1553
+ <fingerprint pattern="^Cisco TelePresence (?:(?:HD )?MCU) ((?:MSE )?\d+)">
1544
1554
  <description>Cisco TelePresence</description>
1545
- <example hw.product="Conductor">Cisco TelePresence Conductor</example>
1546
- <example hw.product="MCU 4205">Cisco TelePresence MCU 4205</example>
1547
- <example hw.product="MCU MSE 8420">Cisco TelePresence MCU MSE 8420</example>
1555
+ <example hw.series="4205">Cisco TelePresence MCU 4205</example>
1556
+ <example hw.series="MSE 8420">Cisco TelePresence MCU MSE 8420</example>
1557
+ <example hw.series="4520">Cisco TelePresence HD MCU 4520</example>
1548
1558
  <param pos="0" name="os.certainty" value="0.85"/>
1549
1559
  <param pos="0" name="os.vendor" value="Cisco"/>
1550
1560
  <param pos="0" name="os.product" value="TelePresence"/>
1551
- <param pos="1" name="hw.product"/>
1561
+ <param pos="0" name="os.device" value="Bridge"/>
1562
+ <param pos="1" name="hw.series"/>
1563
+ </fingerprint>
1564
+
1565
+ <fingerprint pattern="^Cisco TelePresence (Conductor|Supervisor)(?: (MSE \d+))?">
1566
+ <description>Cisco TelePresence</description>
1567
+ <example os.device="Conductor">Cisco TelePresence Conductor</example>
1568
+ <example os.device="Supervisor" hw.series="MSE 8050">Cisco TelePresence Supervisor MSE 8050</example>
1569
+ <param pos="0" name="os.certainty" value="0.85"/>
1570
+ <param pos="0" name="os.vendor" value="Cisco"/>
1571
+ <param pos="0" name="os.product" value="TelePresence"/>
1572
+ <param pos="1" name="os.device"/>
1573
+ <param pos="2" name="hw.series"/>
1574
+ </fingerprint>
1575
+
1576
+ <fingerprint pattern="^TANDBERG Codec$">
1577
+ <description>Tandberg videoconferencing device</description>
1578
+ <example>TANDBERG Codec</example>
1579
+ <param pos="0" name="os.vendor" value="Cisco"/>
1580
+ <param pos="0" name="os.product" value="TelePresence"/>
1581
+ <param pos="0" name="os.device" value="Codec"/>
1582
+ </fingerprint>
1583
+
1584
+ <fingerprint pattern="^TANDBERG MPS-MCU$">
1585
+ <description>Tandberg videoconferencing bridge</description>
1586
+ <example>TANDBERG MPS-MCU</example>
1587
+ <param pos="0" name="os.vendor" value="Cisco"/>
1588
+ <param pos="0" name="os.product" value="MPS-MCU"/>
1589
+ <param pos="0" name="os.device" value="VOIP"/>
1552
1590
  </fingerprint>
1553
1591
 
1554
1592
  <fingerprint pattern="^Cisco Adaptive Security Appliance Version (\d+\.\d+\(\d+\)\d*)">
@@ -7820,26 +7858,6 @@ Copyright (c) 1995-2005 by Cisco Systems
7820
7858
  <param pos="2" name="os.version"/>
7821
7859
  </fingerprint>
7822
7860
 
7823
-
7824
- <!--======================================================================
7825
- TANDBERG
7826
- =======================================================================-->
7827
-
7828
- <fingerprint pattern="^TANDBERG Codec$">
7829
- <description>Tandberg videoconferencing device</description>
7830
- <example>TANDBERG Codec</example>
7831
- <param pos="0" name="os.vendor" value="Tandberg"/>
7832
- <param pos="0" name="os.device" value="Web cam"/>
7833
- </fingerprint>
7834
-
7835
- <fingerprint pattern="^TANDBERG MPS-MCU$">
7836
- <description>Tandberg videoconferencing bridge</description>
7837
- <example>TANDBERG MPS-MCU</example>
7838
- <param pos="0" name="os.vendor" value="Tandberg"/>
7839
- <param pos="0" name="os.product" value="MPS-MCU"/>
7840
- <param pos="0" name="os.device" value="VOIP"/>
7841
- </fingerprint>
7842
-
7843
7861
  <!--======================================================================
7844
7862
  TEKTRONIX
7845
7863
  =======================================================================-->
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: recog
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.0.7
4
+ version: 1.0.8
5
5
  platform: ruby
6
6
  authors:
7
7
  - Rapid7 Research
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2014-12-16 00:00:00.000000000 Z
11
+ date: 2015-01-08 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: rspec
@@ -224,7 +224,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
224
224
  version: '0'
225
225
  requirements: []
226
226
  rubyforge_project:
227
- rubygems_version: 2.4.3
227
+ rubygems_version: 2.2.2
228
228
  signing_key:
229
229
  specification_version: 4
230
230
  summary: Network service fingerprint database, classes, and utilities