recog 2.1.25 → 2.1.26
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/recog/version.rb +1 -1
- data/xml/http_cookies.xml +18 -0
- data/xml/sip_banners.xml +127 -3
- metadata +3 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 176fcc07ee328625371e582ea351a065b0149900
|
|
4
|
+
data.tar.gz: d2dc6e810cdb79662ab01ae7c4efad576469c026
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: d21436b918ada12e8ad24bdcbe420aca924230e38be2458cb3ac722c01c595c8221de9ab8a375b90e223511c2d3e38baba86e17f7b44460916a4e315d4333a2e
|
|
7
|
+
data.tar.gz: 6f3e0f933de01c54e0a4d72100ee8525b290f819c17769ec55d075d5daed3455a18312a5c09801499799c7b181292bab28a2698365014df13fa3a4a72a2dadbe
|
data/lib/recog/version.rb
CHANGED
data/xml/http_cookies.xml
CHANGED
|
@@ -105,6 +105,24 @@
|
|
|
105
105
|
<param pos="0" name="service.family" value="Content Service Switch"/>
|
|
106
106
|
<param pos="0" name="service.product" value="11000 Series Content Service Switch"/>
|
|
107
107
|
</fingerprint>
|
|
108
|
+
<fingerprint pattern="^webvpn(?:c|_portal|Lang|login|SharePoint)?=">
|
|
109
|
+
<description>Cisco ASA VPN</description>
|
|
110
|
+
<example>webvpn=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; secure</example>
|
|
111
|
+
<example>webvpnc=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; secure</example>
|
|
112
|
+
<example>webvpn_portal=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; secure</example>
|
|
113
|
+
<example>webvpnSharePoint=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; secure</example>
|
|
114
|
+
<example>webvpnlogin=1; path=/; secure</example>
|
|
115
|
+
<param pos="0" name="service.vendor" value="Cisco"/>
|
|
116
|
+
<param pos="0" name="service.product" value="HTTP"/>
|
|
117
|
+
<param pos="0" name="os.vendor" value="Cisco"/>
|
|
118
|
+
<param pos="0" name="os.family" value="ASA"/>
|
|
119
|
+
<param pos="0" name="os.product" value="VPN"/>
|
|
120
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
121
|
+
<param pos="0" name="hw.family" value="ASA"/>
|
|
122
|
+
<param pos="0" name="hw.cpe23" value="cpe:/h:cisco:adaptive_security_appliance:-"/>
|
|
123
|
+
<param pos="0" name="hw.product" value="Adaptive Security Appliance"/>
|
|
124
|
+
<param pos="0" name="hw.device" value="Firewall"/>
|
|
125
|
+
</fingerprint>
|
|
108
126
|
<fingerprint pattern="^(st8id)=.*">
|
|
109
127
|
<description>Citrix Application Protection System, Enterprise
|
|
110
128
|
http://support.citrix.com/article/CTX109330
|
data/xml/sip_banners.xml
CHANGED
|
@@ -3,14 +3,107 @@
|
|
|
3
3
|
<!--
|
|
4
4
|
SIP Server header values are matched against these patterns to fingerprint SIP devices.
|
|
5
5
|
-->
|
|
6
|
-
<fingerprint pattern="^Cisco-SIPGateway/IOS-(
|
|
7
|
-
<description>Cisco SIPGateway</description>
|
|
8
|
-
<example>Cisco-SIPGateway/IOS-12.x</example>
|
|
6
|
+
<fingerprint pattern="^Cisco-SIPGateway/IOS-(\d+)\.x$">
|
|
7
|
+
<description>Cisco IOS with SIPGateway with only major version</description>
|
|
8
|
+
<example os.version="12">Cisco-SIPGateway/IOS-12.x</example>
|
|
9
9
|
<param pos="0" name="os.vendor" value="Cisco"/>
|
|
10
10
|
<param pos="0" name="os.product" value="IOS"/>
|
|
11
11
|
<param pos="1" name="os.version"/>
|
|
12
12
|
<param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:{os.version}"/>
|
|
13
13
|
</fingerprint>
|
|
14
|
+
<fingerprint pattern="^Cisco-SIPGateway/IOS-([\d\.a-zA-Z]+)$">
|
|
15
|
+
<description>Cisco IOS with SIPGateway</description>
|
|
16
|
+
<example os.version="15.2.2.T1">Cisco-SIPGateway/IOS-15.2.2.T1</example>
|
|
17
|
+
<example os.version="15.2.3.T">Cisco-SIPGateway/IOS-15.2.3.T</example>
|
|
18
|
+
<example os.version="15.4.3.S5">Cisco-SIPGateway/IOS-15.4.3.S5</example>
|
|
19
|
+
<example os.version="15.6.3.M0a">Cisco-SIPGateway/IOS-15.6.3.M0a</example>
|
|
20
|
+
<example os.version="16.3.6">Cisco-SIPGateway/IOS-16.3.6</example>
|
|
21
|
+
<param pos="0" name="os.vendor" value="Cisco"/>
|
|
22
|
+
<param pos="0" name="os.product" value="IOS"/>
|
|
23
|
+
<param pos="1" name="os.version"/>
|
|
24
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:{os.version}"/>
|
|
25
|
+
</fingerprint>
|
|
26
|
+
<fingerprint pattern="^Cisco-CP-?(\d+G?)(?:-\S+)?/([\d\.]+)">
|
|
27
|
+
<description>Cisco CP VoIP Phone</description>
|
|
28
|
+
<example hw.model="7960G" hw.version="8.0">Cisco-CP7960G/8.0</example>
|
|
29
|
+
<example hw.model="7912" hw.version="8.0.1">Cisco-CP7912/8.0.1-060412A</example>
|
|
30
|
+
<example hw.model="7821" hw.version="11.0.0">Cisco-CP-7821-3PCC/11.0.0</example>
|
|
31
|
+
<example hw.model="6841" hw.version="11.1.1">Cisco-CP-6841-3PCC/11.1.1 (00727826a4e1) (sip68xx.11-1-1MPP-897.loads)</example>
|
|
32
|
+
<param pos="0" name="os.vendor" value="Cisco"/>
|
|
33
|
+
<param pos="0" name="os.device" value="VoIP"/>
|
|
34
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
35
|
+
<param pos="0" name="hw.product" value="CP"/>
|
|
36
|
+
<param pos="0" name="hw.device" value="VoIP"/>
|
|
37
|
+
<param pos="1" name="hw.model"/>
|
|
38
|
+
<param pos="2" name="hw.version"/>
|
|
39
|
+
</fingerprint>
|
|
40
|
+
<fingerprint pattern="(?:Cisco|Linksys)/(SPA\d+[DG]?\d?)-([\d\.a-zA-Z]+)">
|
|
41
|
+
<description>Cisco/Linksys SPA VoIP Phone</description>
|
|
42
|
+
<example hw.model="SPA112" hw.version="1.4.1SR1">Cisco/SPA112-1.4.1SR1(002)d-hisec</example>
|
|
43
|
+
<example hw.model="SPA122" hw.version="1.3.3">Cisco/SPA122-1.3.3(004)</example>
|
|
44
|
+
<example hw.model="SPA922" hw.version="6.1.5">PhoneSystems.net aabbccddeeff Linksys/SPA922-6.1.5(a)</example>
|
|
45
|
+
<example hw.model="SPA232D" hw.version="1.4.1">Cisco/SPA232D-1.4.1(002_282)</example>
|
|
46
|
+
<example hw.model="SPA504G" hw.version="7.5.2">Cisco/SPA504G-7.5.2</example>
|
|
47
|
+
<example hw.model="SPA525G2" hw.version="7.6.1">Cisco/SPA525G2-7.6.1</example>
|
|
48
|
+
<example hw.model="SPA922" hw.version="6.1.5">Linksys/SPA922-6.1.5</example>
|
|
49
|
+
<param pos="0" name="os.vendor" value="Cisco"/>
|
|
50
|
+
<param pos="0" name="os.device" value="VoIP"/>
|
|
51
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
52
|
+
<param pos="0" name="hw.product" value="SPA"/>
|
|
53
|
+
<param pos="0" name="hw.device" value="VoIP"/>
|
|
54
|
+
<param pos="1" name="hw.model"/>
|
|
55
|
+
<param pos="2" name="hw.version"/>
|
|
56
|
+
</fingerprint>
|
|
57
|
+
<fingerprint pattern="(?:Cisco|Linksys)(?: |/)(PAP2T?)(?:-|/)(\S+)$">
|
|
58
|
+
<description>Cisco/Linksys VoIP / Internet Phone adapter</description>
|
|
59
|
+
<example hw.version="3.1.22(LS)" hw.model="PAP2">PhoneSystems.net aabbccddeeff Linksys/PAP2-3.1.22(LS)</example>
|
|
60
|
+
<example hw.version="3.1.9(LSc)" hw.model="PAP2">aabbccddeeff Linksys/PAP2-3.1.9(LSc)</example>
|
|
61
|
+
<example hw.version="3.52.12X" hw.model="PAP2T">Linksys PAP2T/3.52.12X</example>
|
|
62
|
+
<example hw.version="2.0.10(LSb)" hw.model="PAP2">iLinksys/PAP2-2.0.10(LSb)</example>
|
|
63
|
+
<example hw.version="3.1.16(LS)" hw.model="PAP2T">Linksys/PAP2T-3.1.16(LS)</example>
|
|
64
|
+
<param pos="0" name="os.vendor" value="Cisco"/>
|
|
65
|
+
<param pos="0" name="os.device" value="VoIP"/>
|
|
66
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
67
|
+
<param pos="0" name="hw.product" value="Internet Phone Adapter"/>
|
|
68
|
+
<param pos="0" name="hw.device" value="VoIP"/>
|
|
69
|
+
<param pos="1" name="hw.model"/>
|
|
70
|
+
<param pos="2" name="hw.version"/>
|
|
71
|
+
</fingerprint>
|
|
72
|
+
<fingerprint pattern="^Cisco/(SRP\d+)-([\d\.]+)">
|
|
73
|
+
<description>Cisco Services Ready Platforms (SRP) Router</description>
|
|
74
|
+
<example hw.model="SRP541" hw.version="1.2.6">Cisco/SRP541-1.2.6(003)</example>
|
|
75
|
+
<example hw.model="SRP527" hw.version="1.02.03">Cisco/SRP527-1.02.03(002)</example>
|
|
76
|
+
<param pos="0" name="os.vendor" value="Cisco"/>
|
|
77
|
+
<param pos="0" name="os.device" value="Router"/>
|
|
78
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
79
|
+
<param pos="0" name="hw.product" value="SRP"/>
|
|
80
|
+
<param pos="0" name="hw.device" value="Router"/>
|
|
81
|
+
<param pos="1" name="hw.model"/>
|
|
82
|
+
<param pos="2" name="hw.version"/>
|
|
83
|
+
</fingerprint>
|
|
84
|
+
<fingerprint pattern="(?:Cisco|Linksys)/(WRP\d+)-(\S+)$">
|
|
85
|
+
<description>Cisco/Linksys WRP Wireless Router</description>
|
|
86
|
+
<example hw.version="2.00.26" hw.model="WRP400">aabbccddeeff_FinalStage_Linksys/WRP400-2.00.26</example>
|
|
87
|
+
<example hw.version="1.01.08" hw.model="WRP200">Linksys/WRP200-1.01.08</example>
|
|
88
|
+
<example hw.version="1.00.05B2" hw.model="WRP400">Linksys/WRP400-1.00.05B2</example>
|
|
89
|
+
<param pos="0" name="os.vendor" value="Cisco"/>
|
|
90
|
+
<param pos="0" name="os.device" value="Router"/>
|
|
91
|
+
<param pos="0" name="hw.vendor" value="Cisco"/>
|
|
92
|
+
<param pos="0" name="hw.product" value="Wireless Router"/>
|
|
93
|
+
<param pos="0" name="hw.device" value="Router"/>
|
|
94
|
+
<param pos="1" name="hw.model"/>
|
|
95
|
+
<param pos="2" name="hw.version"/>
|
|
96
|
+
</fingerprint>
|
|
97
|
+
<fingerprint pattern="^M5T SIP(?: Stack|-UA SAFE)/v?([\d\.]+)">
|
|
98
|
+
<description>Media5 Corporation SIP Stack</description>
|
|
99
|
+
<example service.version="4.1.2.2">M5T SIP Stack/4.1.2.2</example>
|
|
100
|
+
<example service.version="3.6.4.8">M5T SIP-UA SAFE/v3.6.4.8</example>
|
|
101
|
+
<example service.version="4.1.2.2">M5T SIP Stack/4.1.2.2alliu</example>
|
|
102
|
+
<param pos="0" name="service.vendor" value="Media5 Corporation"/>
|
|
103
|
+
<param pos="0" name="service.product" value="SIP Stack"/>
|
|
104
|
+
<param pos="1" name="service.version"/>
|
|
105
|
+
<param pos="0" name="hw.device" value="VoIP"/>
|
|
106
|
+
</fingerprint>
|
|
14
107
|
<fingerprint pattern="^TANDBERG/\d+ \(([a-zA-Z]+\d+(?:\.\d+)+).*\)">
|
|
15
108
|
<description>Cisco TelePresence</description>
|
|
16
109
|
<example os.version="X8.2.1">TANDBERG/4130 (X8.2.1)</example>
|
|
@@ -22,4 +115,35 @@
|
|
|
22
115
|
<param pos="0" name="os.product" value="TelePresence"/>
|
|
23
116
|
<param pos="1" name="os.version"/>
|
|
24
117
|
</fingerprint>
|
|
118
|
+
<fingerprint pattern="^Tilgin Vood ([^_\s]+)">
|
|
119
|
+
<description>Tilgin Vood</description>
|
|
120
|
+
<example hw.model="HG238x">Tilgin Vood HG238x_ESx000-02_07_03_26</example>
|
|
121
|
+
<example hw.model="HG27xx">Tilgin Vood HG27xx</example>
|
|
122
|
+
<example hw.model="452W">Tilgin Vood 452W_S_3_4_2_RC_2</example>
|
|
123
|
+
<param pos="0" name="hw.vendor" value="Tilgin"/>
|
|
124
|
+
<param pos="0" name="hw.product" value="Vood"/>
|
|
125
|
+
<param pos="1" name="hw.model"/>
|
|
126
|
+
</fingerprint>
|
|
127
|
+
<fingerprint pattern="^(F\d{3})/VT?(\d(?:[\d\.A-Z]+))$">
|
|
128
|
+
<description>ZTE GPON Router</description>
|
|
129
|
+
<example hw.product="F620" hw.version="3.30.20P5T4S">F620/V3.30.20P5T4S</example>
|
|
130
|
+
<example hw.product="F660" hw.version="2.22.21P1T14S">F660/V2.22.21P1T14S</example>
|
|
131
|
+
<example hw.product="F668" hw.version="2.30.22P1T9">F668/VT2.30.22P1T9</example>
|
|
132
|
+
<param pos="0" name="hw.vendor" value="ZTE"/>
|
|
133
|
+
<param pos="0" name="hw.device" value="Router"/>
|
|
134
|
+
<param pos="1" name="hw.product"/>
|
|
135
|
+
<param pos="2" name="hw.version"/>
|
|
136
|
+
</fingerprint>
|
|
137
|
+
<fingerprint pattern="^ZXHN (H\d{3}N)/V?(\d(?:[\d\.A-Z_]+))$">
|
|
138
|
+
<description>ZTE ZXHN router</description>
|
|
139
|
+
<example hw.product="H218N" hw.version="1.02.01_ERS">ZXHN H218N/V1.02.01_ERS</example>
|
|
140
|
+
<example hw.product="H367N" hw.version="1.0.4">ZXHN H367N/V1.0.4</example>
|
|
141
|
+
<example hw.product="H218N" hw.version="1.02.01">ZXHN H218N/V1.02.01</example>
|
|
142
|
+
<example hw.product="H208N" hw.version="1.0.2T02">ZXHN H208N/V1.0.2T02</example>
|
|
143
|
+
<param pos="0" name="hw.vendor" value="ZTE"/>
|
|
144
|
+
<param pos="0" name="hw.device" value="Router"/>
|
|
145
|
+
<param pos="0" name="hw.family" value="ZXHN"/>
|
|
146
|
+
<param pos="1" name="hw.product"/>
|
|
147
|
+
<param pos="2" name="hw.version"/>
|
|
148
|
+
</fingerprint>
|
|
25
149
|
</fingerprints>
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: recog
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 2.1.
|
|
4
|
+
version: 2.1.26
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Rapid7 Research
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2018-10-
|
|
11
|
+
date: 2018-10-10 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: rspec
|
|
@@ -244,7 +244,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
244
244
|
version: '0'
|
|
245
245
|
requirements: []
|
|
246
246
|
rubyforge_project:
|
|
247
|
-
rubygems_version: 2.
|
|
247
|
+
rubygems_version: 2.6.11
|
|
248
248
|
signing_key:
|
|
249
249
|
specification_version: 4
|
|
250
250
|
summary: Network service fingerprint database, classes, and utilities
|