recog 1.0.7 → 1.0.8

Sign up to get free protection for your applications and to get access to all the features.
Files changed (8) hide show
  1. checksums.yaml +4 -4
  2. data/.travis.yml +1 -1
  3. data/LICENSE +1 -1
  4. data/lib/recog/version.rb +1 -1
  5. data/xml/ftp_banners.xml +13 -0
  6. data/xml/sip_banners.xml +11 -1
  7. data/xml/snmp_sysdescr.xml +49 -31
  8. metadata +3 -3
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: 43a40c05aa93cac58baa77fc025bef525025f29a
4
- data.tar.gz: 3ced96c4d76e3b0a0df75676f280bb83f52103fd
3
+ metadata.gz: 25ed93ab984d93aa284e7a17dfe96cd4395913e5
4
+ data.tar.gz: 7f5caf500b3646ac3f180c5cc55c72cab6b5aa26
5
5
  SHA512:
6
- metadata.gz: aaf607fa4599df1cd090df5ba1dad1c33828d12cb29ad6fd6ec0cc631d7b0ebb8c97d770ce009245a49555a2e0febc718d56f4bd377fa71a5507635329905520
7
- data.tar.gz: 446fd9011a29dac2b93b4bad91d541381b9c2477553181172452defceb20b802adfc05af9bc0ea5949ac69ded5ffdb3b0ed647223b721f14689b72d4d293b2f8
6
+ metadata.gz: 00951a92a9893f2d58f0bc0dd9566ff45a5c58f5b9a024f31bb80e707073bec5f2709ca973f87259e30834834b0f6feb53cd06a3d3f85450b65529df3baf44bf
7
+ data.tar.gz: cc48bdd99a6d8c263ae93ca2552ea34e3725d7f07c04aad2c64f8d74c47b602448dbeb625132d64e464d295b98a4913b03632a461db0de5515cda11b6f739f15
data/.travis.yml CHANGED
@@ -1,6 +1,6 @@
1
1
  language: ruby
2
2
  rvm:
3
- - 2.1.4
3
+ - 2.1.5
4
4
  - 1.9.3
5
5
  - jruby
6
6
  matrix:
data/LICENSE CHANGED
@@ -1,4 +1,4 @@
1
- Copyright (c) 2014, Rapid7
1
+ Copyright (c) 2014-2015, Rapid7
2
2
  All rights reserved.
3
3
 
4
4
  Redistribution and use in source and binary forms, with or without modification,
data/lib/recog/version.rb CHANGED
@@ -1,3 +1,3 @@
1
1
  module Recog
2
- VERSION = "1.0.7"
2
+ VERSION = '1.0.8'
3
3
  end
data/xml/ftp_banners.xml CHANGED
@@ -808,4 +808,17 @@ against these patterns to fingerprint FTP servers.
808
808
  <param pos="1" name="host.name"/>
809
809
  <param pos="2" name="service.version"/>
810
810
  </fingerprint>
811
+ <fingerprint pattern="^Welcome to the (?:Cisco )?(?:TelePresence) ([a-zA-Z\s]*?) ((?:MSE )?\d+), version (\d+.\d+\(\d+.\d+\)).*?" flags="REG_ICASE">
812
+ <description>Cisco TelePresence</description>
813
+ <example os.device="AM GW" os.version="1.1(1.34)" hw.series="3610">Welcome to the Cisco TelePresence AM GW 3610, version 1.1(1.34) </example>
814
+ <example os.device="IP GW" os.version="2.0(3.32)" hw.series="3510">Welcome to the Cisco TelePresence IP GW 3510, version 2.0(3.32) </example>
815
+ <example os.device="MCU" os.version="4.3(2.18)" hw.series="4210">Welcome to the Cisco TelePresence MCU 4210, version 4.3(2.18) </example>
816
+ <example os.device="MCU" os.version="4.3(1.68)" hw.series="MSE 8420">Welcome to the Cisco TelePresence MCU MSE 8420, version 4.3(1.68) </example>
817
+ <example os.device="Server" os.version="2.1(1.18)" hw.series="7010">Welcome to the Telepresence Server 7010, version 2.1(1.18) </example>
818
+ <param pos="0" name="os.vendor" value="Cisco"/>
819
+ <param pos="0" name="os.product" value="TelePresence"/>
820
+ <param pos="1" name="os.device"/>
821
+ <param pos="2" name="hw.series"/>
822
+ <param pos="3" name="os.version"/>
823
+ </fingerprint>
811
824
  </fingerprints>
data/xml/sip_banners.xml CHANGED
@@ -2,7 +2,6 @@
2
2
  <!--
3
3
  SIP Server header values are matched against these patterns to fingerprint SIP devices.
4
4
  -->
5
-
6
5
  <fingerprints matches="sip_header.server">
7
6
  <fingerprint pattern="^Cisco-SIPGateway/IOS-([\d\.x]+)$">
8
7
  <description>Cisco SIPGateway</description>
@@ -11,4 +10,15 @@ SIP Server header values are matched against these patterns to fingerprint SIP d
11
10
  <param pos="0" name="os.product" value="IOS"/>
12
11
  <param pos="1" name="os.version"/>
13
12
  </fingerprint>
13
+ <fingerprint pattern="^TANDBERG/\d+ \(([a-zA-Z]+\d+(?:\.\d+)+).*\)">
14
+ <description>Cisco TelePresence</description>
15
+ <example os.version="X8.2.1">TANDBERG/4130 (X8.2.1)</example>
16
+ <example os.version="XC2.2.1">TANDBERG/4353 (XC2.2.1-b2bua-1.0)</example>
17
+ <example os.version="TC5.1.4.295090">TANDBERG/516 (TC5.1.4.295090)</example>
18
+ <example os.version="TCNC5.1.4.295090">TANDBERG/517 (TCNC5.1.4.295090)</example>
19
+ <example os.version="S5.30">TANDBERG/80 (S5.30)</example>
20
+ <param pos="0" name="os.vendor" value="Cisco"/>
21
+ <param pos="0" name="os.product" value="TelePresence"/>
22
+ <param pos="1" name="os.version"/>
23
+ </fingerprint>
14
24
  </fingerprints>
data/xml/snmp_sysdescr.xml CHANGED
@@ -1527,28 +1527,66 @@
1527
1527
  <!--======================================================================
1528
1528
  CISCO
1529
1529
  =======================================================================-->
1530
- <fingerprint pattern="^(?:Cisco|TANDBERG) Codec SoftW: (.*\d+[\.\d+]*) MCU: Cisco TelePresence ([A-Z]+\d+).*">
1530
+ <fingerprint pattern="^(?:Cisco|TANDBERG) Codec SoftW: (.*\d+[\.\d+]+)(?:(?: )?Beta\d)? (?:\w* )?MCU: (?:Cisco|TANDBERG) (?:\w* )?(\d+MXP|[A-Z]+\d+) .*?">
1531
1531
  <description>Cisco TelePresence</description>
1532
- <example os.version="TC5.1.0.280662" hw.product="SX20">Cisco Codec SoftW: TC5.1.0.280662 MCU: Cisco TelePresence SX20 Date: 2012-02-14 S/N: FTT16070041 BootSW: Board: 101790-6 [28]</example>
1533
- <example os.version="TE4.1.3.292001" hw.product="SX20">Cisco Codec SoftW: TE4.1.3.292001 MCU: Cisco TelePresence SX20 Date: 2012-06-21 S/N: FTT1625007Z BootSW: Board: 101790-6 [B0]</example>
1534
- <example os.version="TC4.2.0.259927" hw.product="MX200">TANDBERG Codec SoftW: TC4.2.0.259927 MCU: Cisco TelePresence MX200 Date: 2011-06-30 S/N: FTT1530000O BootSW: Board: 101770-4 [20]</example>
1535
- <example os.version="TC5.1.3.292001" hw.product="MX300">TANDBERG Codec SoftW: TC5.1.3.292001 MCU: Cisco TelePresence MX300 Date: 2012-06-21 S/N: FTT16030013 BootSW: Board: 101770-5 [22]</example>
1532
+ <example os.version="TC5.1.0.280662" hw.series="SX20">Cisco Codec SoftW: TC5.1.0.280662 MCU: Cisco TelePresence SX20 Date: 2012-02-14 S/N: FTT16070041 BootSW: Board: 101790-6 [28]</example>
1533
+ <example os.version="TC4.2.0.259927" hw.series="MX200">TANDBERG Codec SoftW: TC4.2.0.259927 MCU: Cisco TelePresence MX200 Date: 2011-06-30 S/N: FTT1530000O BootSW: Board: 101770-4 [20]</example>
1534
+ <example os.version="TC5.1.3.292001" hw.series="MX300">TANDBERG Codec SoftW: TC5.1.3.292001 MCU: Cisco TelePresence MX300 Date: 2012-06-21 S/N: FTT16030013 BootSW: Board: 101770-5 [22]</example>
1535
+ <example os.version="TC5.1.0.279658" hw.series="SX20">Cisco Codec SoftW: TC5.1.0.279658Beta7 MCU: Cisco TelePresence SX20 Date: 2012-02-03 S/N: FTT1616005D BootSW: Board: 101790-6 [B0]</example>
1536
+ <example os.version="TC6.0.0" hw.series="SX20">Cisco Codec SoftW: TC6.0.0 Beta7 MCU: Cisco TelePresence SX20 Date: 2012-09-17 S/N: FTT163100A3 BootSW: Board: 101790-6 [B0]</example>
1537
+ <example os.version="TC4.2.0.255978" hw.series="MX200">TANDBERG Codec SoftW: TC4.2.0.255978Beta2 MCU: Cisco TelePresence MX200 Date: 2011-05-23 S/N: FTT1524000I BootSW: Board: 101770-4 [00]</example>
1538
+ <example os.version="TCNC5.0.1.275220" hw.series="MX200">TANDBERG Codec SoftW: TCNC5.0.1.275220 MCU: Cisco TelePresence MX200 Date: 2011-12-19 S/N: FTT1615003S BootSW: Board: 101770-5 [22]</example>
1539
+ <example os.version="TCNC5.1.0.280662" hw.series="SX20">Cisco Codec SoftW: TCNC5.1.0.280662 MCU: Cisco TelePresence SX20 Date: 2012-02-14 S/N: FTT161300A0 BootSW: Board: 101790-6 [A0]</example>
1540
+ <example os.version="F8.1" hw.series="6000MXP">TANDBERG Codec SoftW: F8.1 PAL MCU: TANDBERG Profile 6000MXP Date: 2009-09-07 S/N: 25A46936 BootSW: Rev. 1.15, 2008-01-04 Board: 100670 rev. 07</example>
1541
+ <example os.version="F9.1" hw.series="6000MXP">TANDBERG Codec SoftW: F9.1 NTSC MCU: TANDBERG 6000MXP PORTABLE Date: 2011-06-08 S/N: 25A07029 BootSW: Rev. 1.16, 2009-01-21 Board: 100670 rev. 07</example>
1542
+ <example os.version="TC4.2.0.260857" hw.series="C40">TANDBERG Codec SoftW: TC4.2.0.260857 MCU: TANDBERG Codec C40 Date: 2011-07-11 S/N: B1AV02D00182 BootSW: Board: 101681-1 [04]</example>
1543
+ <example os.version="TC4.2.1.265253" hw.series="EX60">TANDBERG Codec SoftW: TC4.2.1.265253 MCU: TANDBERG EX60 Date: 2011-09-06 S/N: A1AZ02E00212 BootSW: Board: 101620-6 [22]</example>
1544
+ <example os.version="TE1.0.0.175435" hw.series="E20">TANDBERG Codec SoftW: TE1.0.0.175435 MCU: TANDBERG E20 Date: 2009-02-09 S/N: A1AA11B00658 BootSW: Board: 101390-6</example>
1536
1545
  <param pos="0" name="os.certainty" value="0.85"/>
1537
1546
  <param pos="0" name="os.vendor" value="Cisco"/>
1538
1547
  <param pos="0" name="os.product" value="TelePresence"/>
1548
+ <param pos="0" name="os.device" value="Codec"/>
1539
1549
  <param pos="1" name="os.version"/>
1540
- <param pos="2" name="hw.product"/>
1550
+ <param pos="2" name="hw.series"/>
1541
1551
  </fingerprint>
1542
1552
 
1543
- <fingerprint pattern="^Cisco TelePresence (Conductor|MCU (?:MSE )?\d+)">
1553
+ <fingerprint pattern="^Cisco TelePresence (?:(?:HD )?MCU) ((?:MSE )?\d+)">
1544
1554
  <description>Cisco TelePresence</description>
1545
- <example hw.product="Conductor">Cisco TelePresence Conductor</example>
1546
- <example hw.product="MCU 4205">Cisco TelePresence MCU 4205</example>
1547
- <example hw.product="MCU MSE 8420">Cisco TelePresence MCU MSE 8420</example>
1555
+ <example hw.series="4205">Cisco TelePresence MCU 4205</example>
1556
+ <example hw.series="MSE 8420">Cisco TelePresence MCU MSE 8420</example>
1557
+ <example hw.series="4520">Cisco TelePresence HD MCU 4520</example>
1548
1558
  <param pos="0" name="os.certainty" value="0.85"/>
1549
1559
  <param pos="0" name="os.vendor" value="Cisco"/>
1550
1560
  <param pos="0" name="os.product" value="TelePresence"/>
1551
- <param pos="1" name="hw.product"/>
1561
+ <param pos="0" name="os.device" value="Bridge"/>
1562
+ <param pos="1" name="hw.series"/>
1563
+ </fingerprint>
1564
+
1565
+ <fingerprint pattern="^Cisco TelePresence (Conductor|Supervisor)(?: (MSE \d+))?">
1566
+ <description>Cisco TelePresence</description>
1567
+ <example os.device="Conductor">Cisco TelePresence Conductor</example>
1568
+ <example os.device="Supervisor" hw.series="MSE 8050">Cisco TelePresence Supervisor MSE 8050</example>
1569
+ <param pos="0" name="os.certainty" value="0.85"/>
1570
+ <param pos="0" name="os.vendor" value="Cisco"/>
1571
+ <param pos="0" name="os.product" value="TelePresence"/>
1572
+ <param pos="1" name="os.device"/>
1573
+ <param pos="2" name="hw.series"/>
1574
+ </fingerprint>
1575
+
1576
+ <fingerprint pattern="^TANDBERG Codec$">
1577
+ <description>Tandberg videoconferencing device</description>
1578
+ <example>TANDBERG Codec</example>
1579
+ <param pos="0" name="os.vendor" value="Cisco"/>
1580
+ <param pos="0" name="os.product" value="TelePresence"/>
1581
+ <param pos="0" name="os.device" value="Codec"/>
1582
+ </fingerprint>
1583
+
1584
+ <fingerprint pattern="^TANDBERG MPS-MCU$">
1585
+ <description>Tandberg videoconferencing bridge</description>
1586
+ <example>TANDBERG MPS-MCU</example>
1587
+ <param pos="0" name="os.vendor" value="Cisco"/>
1588
+ <param pos="0" name="os.product" value="MPS-MCU"/>
1589
+ <param pos="0" name="os.device" value="VOIP"/>
1552
1590
  </fingerprint>
1553
1591
 
1554
1592
  <fingerprint pattern="^Cisco Adaptive Security Appliance Version (\d+\.\d+\(\d+\)\d*)">
@@ -7820,26 +7858,6 @@ Copyright (c) 1995-2005 by Cisco Systems
7820
7858
  <param pos="2" name="os.version"/>
7821
7859
  </fingerprint>
7822
7860
 
7823
-
7824
- <!--======================================================================
7825
- TANDBERG
7826
- =======================================================================-->
7827
-
7828
- <fingerprint pattern="^TANDBERG Codec$">
7829
- <description>Tandberg videoconferencing device</description>
7830
- <example>TANDBERG Codec</example>
7831
- <param pos="0" name="os.vendor" value="Tandberg"/>
7832
- <param pos="0" name="os.device" value="Web cam"/>
7833
- </fingerprint>
7834
-
7835
- <fingerprint pattern="^TANDBERG MPS-MCU$">
7836
- <description>Tandberg videoconferencing bridge</description>
7837
- <example>TANDBERG MPS-MCU</example>
7838
- <param pos="0" name="os.vendor" value="Tandberg"/>
7839
- <param pos="0" name="os.product" value="MPS-MCU"/>
7840
- <param pos="0" name="os.device" value="VOIP"/>
7841
- </fingerprint>
7842
-
7843
7861
  <!--======================================================================
7844
7862
  TEKTRONIX
7845
7863
  =======================================================================-->
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: recog
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.0.7
4
+ version: 1.0.8
5
5
  platform: ruby
6
6
  authors:
7
7
  - Rapid7 Research
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2014-12-16 00:00:00.000000000 Z
11
+ date: 2015-01-08 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: rspec
@@ -224,7 +224,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
224
224
  version: '0'
225
225
  requirements: []
226
226
  rubyforge_project:
227
- rubygems_version: 2.4.3
227
+ rubygems_version: 2.2.2
228
228
  signing_key:
229
229
  specification_version: 4
230
230
  summary: Network service fingerprint database, classes, and utilities