recog 2.1.40 → 2.1.41

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (13) hide show
  1. checksums.yaml +4 -4
  2. data/lib/recog/version.rb +1 -1
  3. data/xml/dns_versionbind.xml +3 -2
  4. data/xml/http_wwwauth.xml +5 -0
  5. data/xml/sip_banners.xml +13 -0
  6. data/xml/sip_user_agents.xml +38 -0
  7. data/xml/smb_native_lm.xml +13 -0
  8. data/xml/smb_native_os.xml +25 -0
  9. data/xml/snmp_sysdescr.xml +3 -3
  10. data/xml/ssh_banners.xml +76 -4
  11. data/xml/telnet_banners.xml +3 -3
  12. data/xml/upnp_banners.xml +12 -6
  13. metadata +2 -2
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: 4c3f57536919170fc060b3e2ede8e77963b8988a
4
- data.tar.gz: '0679248fda6fe98a73ec0afe5cd56a865b0b3b74'
3
+ metadata.gz: 8b07340dc9ce908eef09e35803b0c0d81646c404
4
+ data.tar.gz: afa7d091ed95eeb88fb46abae6008ab95d5ba8ff
5
5
  SHA512:
6
- metadata.gz: 05e9268a5deb0e76d4ff021a4db9b7a420a632445f5d3b5797dfefe0d47ec1a69874c9a8d0ea3549907312ae92698f166987220437e68e662ada2529dcb96cfe
7
- data.tar.gz: 3ccb0957644ad83c3ae199e59faa73ff56781bbc0830141735889c550387c20bf485b0f53ef15e27e7dd4c751f4b2efd9f9d0409cc134aa09bfd4220f1b33db0
6
+ metadata.gz: 857350e061bdb6b7e1da0469e9cc148d69ee171be2cb0e1e7a19b3572af17a9f9cc3b4e40f0b3cd5d71d87c97d1a2530bd03168346c346294be23d6a348ffe72
7
+ data.tar.gz: 712ba6a4ca929e6a99de4a313d9a091d62e7acf75d1c3a6ae49b9edba8a2a617f9e02f017951358fb1c60137615ca6f381b1326e4779cbf65692be79a48e9cb0
data/lib/recog/version.rb CHANGED
@@ -1,3 +1,3 @@
1
1
  module Recog
2
- VERSION = '2.1.40'
2
+ VERSION = '2.1.41'
3
3
  end
data/xml/dns_versionbind.xml CHANGED
@@ -665,12 +665,13 @@
665
665
  <param pos="2" name="service.version.version"/>
666
666
  </fingerprint>
667
667
  <fingerprint pattern="^DraytekDNS-v([\d\.]+)$">
668
- <description>Draytek DNS</description>
668
+ <description>DrayTek DNS</description>
669
669
  <example service.version="1.2.3006">DraytekDNS-v1.2.3006</example>
670
- <param pos="0" name="service.vendor" value="Draytek"/>
670
+ <param pos="0" name="service.vendor" value="DrayTek"/>
671
671
  <param pos="0" name="service.family" value="DNS"/>
672
672
  <param pos="0" name="service.product" value="DNS"/>
673
673
  <param pos="1" name="service.version"/>
674
+ <param pos="0" name="hw.vendor" value="DrayTek"/>
674
675
  </fingerprint>
675
676
  <fingerprint pattern="^Atlas Anchor ([\d\.]+)$">
676
677
  <description>Ripe ATLAS Anchor</description>
data/xml/http_wwwauth.xml CHANGED
@@ -162,6 +162,11 @@
162
162
  <param pos="0" name="hw.family" value="Orbi"/>
163
163
  <param pos="1" name="hw.product"/>
164
164
  </fingerprint>
165
+ <fingerprint pattern="(?i)^(?:Basic|Digest) realm=&quot;RUIJIE(?:-CPE)?&quot;.*$">
166
+ <description>Ruijie Networks generic</description>
167
+ <example>Digest realm="RUIJIE-CPE"</example>
168
+ <param pos="0" name="hw.vendor" value="Ruijie"/>
169
+ </fingerprint>
165
170
  <fingerprint pattern="^(?:Basic|Digest) realm=.SpeedTouch \(([0-9A-F]{2}-[0-9A-F]{2}-[0-9A-F]{2}-[0-9A-F]{2}-[0-9A-F]{2}-[0-9A-F]{2})\).$">
166
171
  <description>Thomson SpeedTouch xDSL routers</description>
167
172
  <param pos="0" name="service.vendor" value="Thomson"/>
data/xml/sip_banners.xml CHANGED
@@ -101,6 +101,19 @@
101
101
  <param pos="0" name="hw.product" value="DuraFon"/>
102
102
  <param pos="0" name="hw.device" value="VoIP"/>
103
103
  </fingerprint>
104
+ <fingerprint pattern="(?i)^Huawei (SoftX\d+) (?:V\d.*)$">
105
+ <description>Huawei Softswitch</description>
106
+ <example hw.model="SoftX3000">Huawei SoftX3000 V300R006</example>
107
+ <param pos="0" name="hw.vendor" value="Huawei"/>
108
+ <param pos="0" name="hw.device" value="Telecom"/>
109
+ <param pos="0" name="hw.product" value="Softswitch"/>
110
+ <param pos="1" name="hw.model"/>
111
+ </fingerprint>
112
+ <fingerprint pattern="(?i)^SIP/1.0 \(Huawei\)$">
113
+ <description>Huawei generic</description>
114
+ <example>SIP/1.0 (Huawei)</example>
115
+ <param pos="0" name="hw.vendor" value="Huawei"/>
116
+ </fingerprint>
104
117
  <fingerprint pattern="^M5T SIP(?: Stack|-UA SAFE)/v?([\d\.]+)">
105
118
  <description>Media5 Corporation SIP Stack</description>
106
119
  <example service.version="4.1.2.2">M5T SIP Stack/4.1.2.2</example>
data/xml/sip_user_agents.xml CHANGED
@@ -72,6 +72,35 @@
72
72
  <param pos="0" name="os.family" value="Multibox"/>
73
73
  <param pos="1" name="os.product"/>
74
74
  <param pos="2" name="os.version"/>
75
+ </fingerprint>
76
+ <!-- Huawei devices -->
77
+ <fingerprint pattern="(?i)^Huawei$">
78
+ <description>Huawei generic</description>
79
+ <example>Huawei</example>
80
+ <param pos="0" name="hw.vendor" value="Huawei"/>
81
+ </fingerprint>
82
+ <fingerprint pattern="(?i)^Huawei-HomeGateway/V(?:\d.*)$">
83
+ <description>Huawei Home Gateway</description>
84
+ <example>Huawei-HomeGateway/V100R001</example>
85
+ <param pos="0" name="hw.vendor" value="Huawei"/>
86
+ <param pos="0" name="hw.device" value="Broadband router"/>
87
+ <param pos="0" name="hw.product" value="Home Gateway"/>
88
+ </fingerprint>
89
+ <fingerprint pattern="(?i)^Huawei-EchoLife (HG.*)/V(?:\d.*)$">
90
+ <description>Huawei EchoLife Home Gateway</description>
91
+ <example hw.model="HG8121H">HUAWEI-EchoLife HG8121H/V3R018C00S110</example>
92
+ <param pos="0" name="hw.vendor" value="Huawei"/>
93
+ <param pos="0" name="hw.device" value="Broadband router"/>
94
+ <param pos="0" name="hw.product" value="EchoLife Home Gateway"/>
95
+ <param pos="1" name="hw.model"/>
96
+ </fingerprint>
97
+ <fingerprint pattern="(?i)^Huawei (SoftX\d+) (?:V\d.*)$">
98
+ <description>Huawei Softswitch</description>
99
+ <example hw.model="SoftX3000">Huawei SoftX3000 V300R010</example>
100
+ <param pos="0" name="hw.vendor" value="Huawei"/>
101
+ <param pos="0" name="hw.device" value="Telecom"/>
102
+ <param pos="0" name="hw.product" value="Softswitch"/>
103
+ <param pos="1" name="hw.model"/>
75
104
  </fingerprint>
76
105
  <fingerprint pattern="^Mitel-(\S+)-SIP-Phone ([\d\.]+) (.{12})$">
77
106
  <description>Mitel SIP Phones</description>
@@ -141,4 +170,13 @@
141
170
  <param pos="1" name="hw.model"/>
142
171
  <param pos="2" name="hw.version"/>
143
172
  </fingerprint>
173
+ <fingerprint pattern="^Nero SIPPS IP Phone Version ([\d\.]+)+$">
174
+ <description>Nero SIPPS IP Phone</description>
175
+ <example service.version="2.0.51.16">Nero SIPPS IP Phone Version 2.0.51.16</example>
176
+ <param pos="0" name="service.vendor" value="Nero"/>
177
+ <param pos="0" name="service.family" value="SIPPS"/>
178
+ <param pos="0" name="service.protocol" value="VoIP"/>
179
+ <param pos="0" name="service.product" value="SIPPS IP Phone"/>
180
+ <param pos="1" name="service.version"/>
181
+ </fingerprint>
144
182
  </fingerprints>
data/xml/smb_native_lm.xml CHANGED
@@ -45,4 +45,17 @@
45
45
  <param pos="1" name="service.version"/>
46
46
  <param pos="0" name="service.cpe23" value="cpe:/a:samba:samba:{service.version}"/>
47
47
  </fingerprint>
48
+ <fingerprint pattern="^Netreon LANMAN 1.0$">
49
+ <description>Netreon SAN software</description>
50
+ <example>Netreon LANMAN 1.0</example>
51
+ <param pos="0" name="service.vendor" value="Netreon"/>
52
+ </fingerprint>
53
+ <fingerprint pattern="(?i)^MikrotikSMB$">
54
+ <description>Mikrotik</description>
55
+ <example>MikrotikSMB</example>
56
+ <param pos="0" name="os.vendor" value="MikroTik"/>
57
+ <param pos="0" name="os.device" value="Router"/>
58
+ <param pos="0" name="os.family" value="RouterOS"/>
59
+ <param pos="0" name="os.product" value="RouterOS"/>
60
+ </fingerprint>
48
61
  </fingerprints>
data/xml/smb_native_os.xml CHANGED
@@ -454,6 +454,31 @@
454
454
  <param pos="2" name="os.version.version"/>
455
455
  <param pos="3" name="os.version.version.version"/>
456
456
  </fingerprint>
457
+ <fingerprint pattern="^Apple Base Station$">
458
+ <description>SMB exposed via SMB shared USB disks on Apple devices</description>
459
+ <example>Apple Base Station</example>
460
+ <param pos="0" name="os.vendor" value="Apple"/>
461
+ <param pos="0" name="hw.vendor" value="Apple"/>
462
+ </fingerprint>
463
+ <fingerprint pattern="^EMC-SNAS:T([\d\.]+)?$">
464
+ <description>EMC Celerra</description>
465
+ <example service.version="7.1.80.7">EMC-SNAS:T7.1.80.7</example>
466
+ <param pos="0" name="service.vendor" value="EMC"/>
467
+ <param pos="0" name="service.product" value="Celerra"/>
468
+ <param pos="1" name="service.version"/>
469
+ <param pos="0" name="os.vendor" value="EMC"/>
470
+ <param pos="0" name="os.device" value="Storage"/>
471
+ <param pos="0" name="os.product" value="Celerra"/>
472
+ <param pos="1" name="os.version"/>
473
+ <param pos="0" name="hw.vendor" value="EMC"/>
474
+ <param pos="0" name="hw.device" value="Storage"/>
475
+ <param pos="0" name="hw.product" value="Celerra"/>
476
+ </fingerprint>
477
+ <fingerprint pattern="^Netreon OS 1.0$">
478
+ <description>Netreon SAN software</description>
479
+ <example>Netreon OS 1.0</example>
480
+ <param pos="0" name="service.vendor" value="Netreon"/>
481
+ </fingerprint>
457
482
  <!-- VisionFS -->
458
483
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)ai(\d{4})">
459
484
  <description>AIX</description>
data/xml/snmp_sysdescr.xml CHANGED
@@ -5384,7 +5384,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5384
5384
  <param pos="1" name="os.product"/>
5385
5385
  </fingerprint>
5386
5386
  <!--======================================================================
5387
- Mikrotik
5387
+ MikroTik
5388
5388
  =======================================================================-->
5389
5389
  <fingerprint pattern="^RouterOS (RB.*)$">
5390
5390
  <description>Miktorik RouterOS</description>
@@ -5404,7 +5404,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5404
5404
  <example>RouterOS RB751G-2HnD</example>
5405
5405
  <example>RouterOS RB800</example>
5406
5406
  <example>RouterOS RB951-2n</example>
5407
- <param pos="0" name="os.vendor" value="Mikrotik"/>
5407
+ <param pos="0" name="os.vendor" value="MikroTik"/>
5408
5408
  <param pos="0" name="os.family" value="RouterOS"/>
5409
5409
  <param pos="0" name="os.device" value="Router"/>
5410
5410
  <param pos="1" name="os.product"/>
@@ -5414,7 +5414,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5414
5414
  <example>RouterOS </example>
5415
5415
  <example>RouterOS x86</example>
5416
5416
  <example>RouterOS x86 </example>
5417
- <param pos="0" name="os.vendor" value="Mikrotik"/>
5417
+ <param pos="0" name="os.vendor" value="MikroTik"/>
5418
5418
  <param pos="0" name="os.family" value="RouterOS"/>
5419
5419
  <param pos="0" name="os.device" value="Router"/>
5420
5420
  </fingerprint>
data/xml/ssh_banners.xml CHANGED
@@ -17,6 +17,11 @@
17
17
  <param pos="0" name="service.product" value="RomSShell"/>
18
18
  <param pos="1" name="service.version"/>
19
19
  </fingerprint>
20
+ <fingerprint pattern="(?i)^DraySSH_\S+$">
21
+ <description>DrayTek generic</description>
22
+ <example>DraySSH_2.0</example>
23
+ <param pos="0" name="hw.vendor" value="DrayTek"/>
24
+ </fingerprint>
20
25
  <fingerprint pattern="^mpSSH_([\d\.]+)$">
21
26
  <description>HP Integrated Lights Out (iLO) usually bundled with HP servers</description>
22
27
  <example>mpSSH_0.0.1</example>
@@ -47,6 +52,14 @@
47
52
  <param pos="1" name="service.version"/>
48
53
  <param pos="0" name="service.cpe23" value="cpe:/a:ipswitch:ws_ftp:{service.version}"/>
49
54
  </fingerprint>
55
+ <fingerprint pattern="IPSSH[-_]([\d\.p]+).*$">
56
+ <description>VxWorks with version information</description>
57
+ <example os.version="6.9.0">IPSSH-6.9.0</example>
58
+ <param pos="0" name="os.vendor" value="Wind River"/>
59
+ <param pos="0" name="os.product" value="VxWorks"/>
60
+ <param pos="1" name="os.version"/>
61
+ <param pos="0" name="os.cpe23" value="cpe:/o:windriver:vxworks:{os.version}"/>
62
+ </fingerprint>
50
63
  <fingerprint pattern="^OpenSSH_([^\s]+)\s+(FreeBSD[ -].*)$">
51
64
  <description>OpenSSH running on FreeBSD</description>
52
65
  <example service.version="7.2" openssh.comment="FreeBSD-20160310">OpenSSH_7.2 FreeBSD-20160310</example>
@@ -712,6 +725,14 @@
712
725
  <param pos="0" name="os.product" value="Wireless LAN Controller"/>
713
726
  <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller:-"/>
714
727
  </fingerprint>
728
+ <fingerprint pattern="(?i)^Cleo (\S+)/(\S+) SSH FTP server$">
729
+ <description>Cleo networks Harmony, VLProxy, VLTrader, others</description>
730
+ <example service.product="Harmony" service.version="5.5.0.3">Cleo Harmony/5.5.0.3 SSH FTP server</example>
731
+ <example service.product="VLProxy" service.version="3.2">Cleo VLProxy/3.2 SSH FTP server</example>
732
+ <param pos="0" name="service.vendor" value="Cleo"/>
733
+ <param pos="1" name="service.product"/>
734
+ <param pos="2" name="service.version"/>
735
+ </fingerprint>
715
736
  <fingerprint pattern="^Sun_SSH_(.*)$">
716
737
  <description>Sun SSH banner</description>
717
738
  <example service.version="1.1">Sun_SSH_1.1</example>
@@ -724,7 +745,7 @@
724
745
  <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:-"/>
725
746
  </fingerprint>
726
747
  <fingerprint pattern="^SSH Protocol Compatible Server SCS (.*)$">
727
- <description>Netscreen</description>
748
+ <description>Netscreen with version</description>
728
749
  <param pos="1" name="service.version"/>
729
750
  <param pos="0" name="service.vendor" value="Juniper"/>
730
751
  <param pos="0" name="service.family" value="NetScreen"/>
@@ -736,7 +757,7 @@
736
757
  <param pos="0" name="os.cpe23" value="cpe:/o:juniper:screenos:-"/>
737
758
  </fingerprint>
738
759
  <fingerprint pattern="^NetScreen$">
739
- <description>Netscreen</description>
760
+ <description>Netscreen generic</description>
740
761
  <example>NetScreen</example>
741
762
  <param pos="0" name="service.vendor" value="Juniper"/>
742
763
  <param pos="0" name="service.family" value="NetScreen"/>
@@ -747,9 +768,23 @@
747
768
  <param pos="0" name="os.product" value="ScreenOS"/>
748
769
  <param pos="0" name="os.cpe23" value="cpe:/o:juniper:screenos:-"/>
749
770
  </fingerprint>
750
- <fingerprint pattern="^(?:HUAWEI-VRP-?|VRP-)(.*)$">
771
+ <fingerprint pattern="^HUAWEI-(?:[\d\.]+)$">
772
+ <description>Huawei generic</description>
773
+ <example>HUAWEI-1.5</example>
774
+ <param pos="0" name="hw.vendor" value="Huawei"/>
775
+ </fingerprint>
776
+ <fingerprint pattern="^HUAWEI-UMG(\d+)">
777
+ <description>Huawei Universal Media Gateway</description>
778
+ <example hw.model="8900">HUAWEI-UMG8900</example>
779
+ <param pos="0" name="hw.vendor" value="Huawei"/>
780
+ <param pos="0" name="hw.product" value="Universal Media Gateway"/>
781
+ <param pos="0" name="hw.device" value="Telecom"/>
782
+ <param pos="1" name="hw.model"/>
783
+ </fingerprint>
784
+ <fingerprint pattern="^HUAWEI.VRP.([\d\.]+)$">
751
785
  <description>Huawei Versatile Routing Platform (VRP)</description>
752
786
  <example os.version="3.10" service.version="3.10">HUAWEI-VRP-3.10</example>
787
+ <example os.version="8.0" service.version="8.0">HUAWEI_VRPV8.0</example>
753
788
  <param pos="0" name="service.vendor" value="Huawei"/>
754
789
  <param pos="0" name="service.family" value="VRP"/>
755
790
  <param pos="0" name="service.product" value="VRP"/>
@@ -794,7 +829,7 @@
794
829
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
795
830
  </fingerprint>
796
831
  <fingerprint pattern="^([^\s]+) FlowSsh: (?:Bitvise SSH Server \(WinSSHD\)|WinSSHD) ([\d\.]+):?.*$">
797
- <description>Bitvise WinSSHD (which uses Bitvise flowssh)</description>
832
+ <description>Bitvise WinSSHD (which uses Bitvise flowssh) with version</description>
798
833
  <example service.version="5.09" service.component.version="1.03">1.03 FlowSsh: WinSSHD 5.09</example>
799
834
  <example service.version="5.20" service.component.version="1.07">1.07 FlowSsh: WinSSHD 5.20: free only for personal non-commercial use</example>
800
835
  <example service.version="6.03" service.component.version="5.21">5.21 FlowSsh: Bitvise SSH Server (WinSSHD) 6.03: free only for personal non-commercial use</example>
@@ -811,6 +846,22 @@
811
846
  <param pos="0" name="os.product" value="Windows"/>
812
847
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
813
848
  </fingerprint>
849
+ <fingerprint pattern="^([^\s]+) FlowSsh: (?:Bitvise SSH Server \(WinSSHD\)|WinSSHD)(?: :.*)?$">
850
+ <description>Bitvise WinSSHD (which uses Bitvise flowssh) without version</description>
851
+ <example service.component.version="9.99">9.99 FlowSsh: Bitvise SSH Server (WinSSHD)</example>
852
+ <example service.component.version="9.99">9.99 FlowSsh: Bitvise SSH Server (WinSSHD) : free only for personal non-commercial use</example>
853
+ <param pos="1" name="service.component.version"/>
854
+ <param pos="0" name="service.component.vendor" value="Bitvise"/>
855
+ <param pos="0" name="service.component.family" value="flowssh"/>
856
+ <param pos="0" name="service.component.product" value="flowssh"/>
857
+ <param pos="0" name="service.vendor" value="Bitvise"/>
858
+ <param pos="0" name="service.family" value="WinSSHD"/>
859
+ <param pos="0" name="service.product" value="WinSSHD"/>
860
+ <param pos="0" name="os.vendor" value="Microsoft"/>
861
+ <param pos="0" name="os.family" value="Windows"/>
862
+ <param pos="0" name="os.product" value="Windows"/>
863
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
864
+ </fingerprint>
814
865
  <fingerprint pattern="^([^\s]+) sshlib: MOVEit DMZ SSH (.*)$">
815
866
  <description>MOVEit DMZ (which uses Bitvise sshlib)</description>
816
867
  <param pos="1" name="service.component.version"/>
@@ -826,6 +877,14 @@
826
877
  <param pos="0" name="os.product" value="Windows"/>
827
878
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
828
879
  </fingerprint>
880
+ <fingerprint pattern="^paramiko_([\d\.]+).*$">
881
+ <description>Paramiko</description>
882
+ <example service.version="2.1.3">paramiko_2.1.3 501 command not implemented ERROR</example>
883
+ <example service.version="2.1.4">paramiko_2.1.4</example>
884
+ <param pos="0" name="service.vendor" value="Paramiko"/>
885
+ <param pos="0" name="service.product" value="Paramiko"/>
886
+ <param pos="1" name="service.version"/>
887
+ </fingerprint>
829
888
  <fingerprint pattern="^Pragma SecureShell\s*(.*)$">
830
889
  <description>Pragma SecureShell</description>
831
890
  <param pos="1" name="service.version"/>
@@ -851,6 +910,19 @@
851
910
  <param pos="0" name="os.product" value="Windows"/>
852
911
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
853
912
  </fingerprint>
913
+ <fingerprint pattern="^RebexSSH_([\d\.]+)$">
914
+ <description>Rbex SSH</description>
915
+ <example service.version="1.0.5.25508">RebexSSH_1.0.5.25508</example>
916
+ <param pos="0" name="service.vendor" value="Ruijie"/>
917
+ <param pos="0" name="service.product" value="SSH"/>
918
+ <param pos="1" name="service.version"/>
919
+ </fingerprint>
920
+ <fingerprint pattern="^RGOS_\S+$">
921
+ <description>Ruijie Networks SSH</description>
922
+ <example>RGOS_SSH_1.0</example>
923
+ <example>RGOS_PK3223</example>
924
+ <param pos="0" name="hw.vendor" value="Ruijie"/>
925
+ </fingerprint>
854
926
  <fingerprint pattern="^VShell_(?:Special_Edition_)?(\d+)_(\d+)_(\d+)_(\d+) VShell$">
855
927
  <description>VanDyke VShell</description>
856
928
  <example service.version="3" service.version.version="6" service.version.version.version="2" service.version.version.version.version="446">VShell_3_6_2_446 VShell</example>
data/xml/telnet_banners.xml CHANGED
@@ -1270,9 +1270,9 @@
1270
1270
  U3lzdGVtIGFkbWluaXN0cmF0b3IgaXMgY29ubmVjdGluZyBmcm9tIDU0LjM5LjE3My44NgoKUmVqZWN0IH
1271
1271
  RoZSBjb25uZWN0aW9uIHJlcXVlc3QgISEh
1272
1272
  </example>
1273
- <param pos="0" name="os.vendor" value="Draytek"/>
1274
- <param pos="0" name="os.device" value="Broadband router"/>
1275
- <param pos="0" name="os.product" value="Vigor"/>
1273
+ <param pos="0" name="hw.vendor" value="DrayTek"/>
1274
+ <param pos="0" name="hw.device" value="Broadband router"/>
1275
+ <param pos="0" name="hw.product" value="Vigor"/>
1276
1276
  </fingerprint>
1277
1277
  <fingerprint pattern=".*Version\s(\d*.\d*)\/OpenBSD.*">
1278
1278
  <description>OpenBSD</description>
data/xml/upnp_banners.xml CHANGED
@@ -41,13 +41,19 @@
41
41
  </fingerprint>
42
42
  <fingerprint pattern="(?i)^DrayTek/Vigor(\S+) UPnP/\S+ miniupnpd/(\S+)$">
43
43
  <description>DrayTek Vigor router UPnP Server</description>
44
- <example>DrayTek/Vigor2130 UPnP/1.0 miniupnpd/1.0</example>
44
+ <example hw.model="2130">DrayTek/Vigor2130 UPnP/1.0 miniupnpd/1.0</example>
45
45
  <param pos="0" name="service.product" value="MiniUPnP"/>
46
46
  <param pos="2" name="service.version"/>
47
- <param pos="0" name="os.vendor" value="DrayTek"/>
48
- <param pos="0" name="os.family" value="Vigor"/>
49
- <param pos="1" name="os.product"/>
50
- <param pos="0" name="os.device" value="Router"/>
47
+ <param pos="0" name="hw.vendor" value="DrayTek"/>
48
+ <param pos="0" name="hw.product" value="Vigor"/>
49
+ <param pos="1" name="hw.model"/>
50
+ <param pos="0" name="hw.device" value="Router"/>
51
+ </fingerprint>
52
+ <fingerprint pattern="(?i)Linux UPnP/\d\.\d Huawei-ATP-IGD$">
53
+ <description>Huawei Echolife / Home Gateway (and possibly other) devices with UPnP</description>
54
+ <example>Linux UPnP/1.0 Huawei-ATP-IGD</example>
55
+ <param pos="0" name="hw.vendor" value="Huawei"/>
56
+ <param pos="0" name="hw.device" value="Broadband router"/>
51
57
  </fingerprint>
52
58
  <fingerprint pattern="(?i)^OpenWRT/kamikaze UPnP/\S+ MiniUPnPd/(\S+)$">
53
59
  <description>OpenWRT Kamikaze WAP UPnP Server</description>
@@ -555,7 +561,7 @@
555
561
  <param pos="1" name="host.name"/>
556
562
  </fingerprint>
557
563
  <fingerprint pattern="^RouterOS/(\S+)UPnP/1.0 MikroTik UPnP/1.0$">
558
- <description>Mikrotik RouterOS</description>
564
+ <description>MikroTik RouterOS</description>
559
565
  <example os.version="6.43">RouterOS/6.43UPnP/1.0 MikroTik UPnP/1.0</example>
560
566
  <param pos="0" name="os.vendor" value="MikroTik"/>
561
567
  <param pos="0" name="os.device" value="Router"/>
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: recog
3
3
  version: !ruby/object:Gem::Version
4
- version: 2.1.40
4
+ version: 2.1.41
5
5
  platform: ruby
6
6
  authors:
7
7
  - Rapid7 Research
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2018-12-26 00:00:00.000000000 Z
11
+ date: 2018-12-31 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: rspec