recog 2.3.13 → 2.3.14

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bcb38d92e99f80970a8d4eec2abb80816d4c127b4d107106fde5d5c07aabb152
-  data.tar.gz: 0da9a345449f4a1ee5d15b707e9e6ca22f9605e18a90bdd4901bccef4e7662bb
+  metadata.gz: c46efafef760f2701e6eeee565e715ac04544300ebfb08f0083db856e4c81603
+  data.tar.gz: 4e66bbd5ec6364325c9c7130aeb7434ab20242def9d7200d0e7d8e588f577c40
 SHA512:
-  metadata.gz: 306dc9d2c908bf80b8db7889a0235b13596c281edd3d2f73dba27e8f061dea75f4ae7db3bf879cce2a8d190e4a8f69343827b94de81888f60dfb761924657c72
-  data.tar.gz: ac48ced11b97be9e8074ac55b1fcf2299375a5edd4e7bfe9d5e2403616fe797f8e2a3942e29302cdd4f3d222d6ec16e8b09f2baf8ea72b12ae2062ba4256a25e
+  metadata.gz: 61ca19b2266100f66d6c220459941ddbc0aa795cbcd2bc52c6782cd66feeb6787a3d1657486ff2af99c196592b5cdabcb2c4d9b33e7efe136f175d2bf5c12bbc
+  data.tar.gz: dd5718510eb4780815fda18496c37afcbb4971246d2b9c6e439ca4697ac17ca1f9e70d3f634b04b5b9be7374e4fc15a346d3177ac5cf827c50e9136f48169009

data/lib/recog/version.rb

@@ -1,3 +1,3 @@
 module Recog
-  VERSION = '2.3.13'
+  VERSION = '2.3.14'
 end

data/xml/html_title.xml

@@ -1458,6 +1458,14 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:novnc:novnc:-"/>
   </fingerprint>
 
+  <fingerprint pattern="^VNC Viewer for Java$">
+    <description>RealVNC built-in webserver</description>
+    <example>VNC Viewer for Java</example>
+    <param pos="0" name="service.vendor" value="RealVNC Ltd."/>
+    <param pos="0" name="service.product" value="RealVNC"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:realvnc:realvnc:-"/>
+  </fingerprint>
+
   <fingerprint pattern="^.* \[Jenkins\]$">
     <description>Jenkins Customized Dashboard</description>
     <example>Continuous Integrations [Jenkins]</example>

data/xml/http_servers.xml

@@ -1724,7 +1724,7 @@
     <param pos="0" name="hw.device" value="VPN"/>
   </fingerprint>
 
-  <fingerprint pattern="^SonicWALL (SSL-?VPN(?: (?:\d+))?) Web Server\.?$">
+  <fingerprint pattern="^SonicWALL SSL-?VPN Web Server$">
     <description>SonicWALL SSL-VPN device</description>
     <example>SonicWALL SSLVPN Web Server</example>
     <example>SonicWALL SSL-VPN Web Server</example>
@@ -1734,7 +1734,8 @@
     <param pos="0" name="os.vendor" value="SonicWall"/>
     <param pos="0" name="os.device" value="VPN"/>
     <param pos="0" name="os.family" value="SSL-VPN"/>
-    <param pos="1" name="os.product"/>
+    <param pos="0" name="os.product" value="SonicOS"/>
+    <param pos="0" name="os.cpe23" value="cpe:/o:sonicwall:sonicos:-"/>
     <param pos="0" name="hw.vendor" value="SonicWall"/>
     <param pos="0" name="hw.device" value="VPN"/>
   </fingerprint>
@@ -1745,6 +1746,12 @@
     <param pos="0" name="service.vendor" value="SonicWall"/>
     <param pos="0" name="service.product" value="HTTP"/>
     <param pos="0" name="os.vendor" value="SonicWall"/>
+    <param pos="0" name="os.device" value="VPN"/>
+    <param pos="0" name="os.family" value="SSL-VPN"/>
+    <param pos="0" name="os.product" value="SonicOS"/>
+    <param pos="0" name="os.cpe23" value="cpe:/o:sonicwall:sonicos:-"/>
+    <param pos="0" name="hw.vendor" value="SonicWall"/>
+    <param pos="0" name="hw.device" value="VPN"/>
   </fingerprint>
 
   <fingerprint pattern="^NetCache appliance \(NetApp/+(\d+\.\d+[\w.]+)\)$">
@@ -1961,6 +1968,26 @@
     <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:adaptive_security_appliance:-"/>
   </fingerprint>
 
+  <fingerprint pattern="^CE_E$">
+    <description>Cisco Expressway-E (Edge)</description>
+    <example>CE_E</example>
+    <param pos="0" name="service.vendor" value="Cisco"/>
+    <param pos="0" name="service.product" value="Expressway"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:cisco:expressway:-"/>
+    <param pos="0" name="hw.vendor" value="Cisco"/>
+    <param pos="0" name="hw.device" value="VoIP"/>
+  </fingerprint>
+
+  <fingerprint pattern="^CE_C$">
+    <description>Cisco Expressway-C (Core)</description>
+    <example>CE_C</example>
+    <param pos="0" name="service.vendor" value="Cisco"/>
+    <param pos="0" name="service.product" value="Expressway"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:cisco:expressway:-"/>
+    <param pos="0" name="hw.vendor" value="Cisco"/>
+    <param pos="0" name="hw.device" value="VoIP"/>
+  </fingerprint>
+
   <fingerprint pattern="^CradlepointHTTPService/([\d\.]+)$">
     <description>Cradlepoint HTTP service</description>
     <example service.version="1.0.0">CradlepointHTTPService/1.0.0</example>
@@ -2148,12 +2175,44 @@
     <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:-"/>
   </fingerprint>
 
-  <fingerprint pattern="^RealVNC/(?:\S+)$">
+  <fingerprint pattern="^VNC Server (Enterprise|Personal) Edition/(?:E|P)([\d.]+) \(r([\d.]+)\)$">
+    <description>RealVNC built-in webserver - Enterprise edition</description>
+    <example service.version="4.5.1" service.version.version="27892">VNC Server Enterprise Edition/E4.5.1 (r27892)</example>
+    <example service.edition="Personal">VNC Server Personal Edition/P4.5.3 (r39012)</example>
+    <param pos="0" name="service.vendor" value="RealVNC Ltd."/>
+    <param pos="0" name="service.product" value="RealVNC"/>
+    <param pos="1" name="service.edition"/>
+    <param pos="2" name="service.version"/>
+    <param pos="3" name="service.version.version"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:realvnc:realvnc:{service.version}"/>
+  </fingerprint>
+
+  <fingerprint pattern="^RealVNC/E([\d.]+)$">
+    <description>RealVNC built-in webserver - Enterprise edition, short variant</description>
+    <example service.version="4">RealVNC/E4</example>
+    <param pos="0" name="service.vendor" value="RealVNC Ltd."/>
+    <param pos="0" name="service.product" value="RealVNC"/>
+    <param pos="1" name="service.version"/>
+    <param pos="0" name="service.version.version" value="Enterprise"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:realvnc:realvnc:{service.version}"/>
+  </fingerprint>
+
+  <fingerprint pattern="^RealVNC/([\d.]+)$">
     <description>RealVNC built-in webserver</description>
-    <example>RealVNC/4.0</example>
+    <example service.version="4.0">RealVNC/4.0</example>
     <param pos="0" name="service.vendor" value="RealVNC Ltd."/>
     <param pos="0" name="service.product" value="RealVNC"/>
-    <param pos="0" name="service.cpe23" value="cpe:/a:realvnc:realvnc:-"/>
+    <param pos="1" name="service.version"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:realvnc:realvnc:{service.version}"/>
+  </fingerprint>
+
+  <fingerprint pattern="^TigerVNC/([\d.]+)$">
+    <description>TigerVNC built-in webserver</description>
+    <example service.version="4.0">TigerVNC/4.0</example>
+    <param pos="0" name="service.vendor" value="TigerVNC"/>
+    <param pos="0" name="service.product" value="TigerVNC"/>
+    <param pos="1" name="service.version"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:tigervnc:tigervnc:{service.version}"/>
   </fingerprint>
 
   <fingerprint pattern="^SecureTransport (\d+[\d\.]+) \(build: (\d+)\)$">

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: recog
 version: !ruby/object:Gem::Version
-  version: 2.3.13
+  version: 2.3.14
 platform: ruby
 authors:
 - Rapid7 Research
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2020-08-03 00:00:00.000000000 Z
+date: 2020-08-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec