rapid7 / recog

Pattern recognition for hosts, services, and content
Other
662 stars 195 forks source link

Add teamspeak http server fingerprint #415

Closed dabdine closed 2 years ago

dabdine commented 2 years ago

Description

Adds a fingerprint for teamspeak. Over 20K of these on the internet, according to Censys.

How Has This Been Tested?

bundle exec rake tests

echo -n "TeamSpeak Server 3.13.6" | bin/recog_match xml/http_servers.xml | cut -c 8- | sed 's/=>/:/g' | jq .
{
  "matched": "TeamSpeak HTTP server",
  "service.vendor": "TeamSpeak",
  "service.product": "TeamSpeak",
  "service.family": "TeamSpeak",
  "service.version": "3.13.6",
  "service.cpe23": "cpe:/a:teamspeak:teamspeak:3.13.6",
  "service.protocol": "http",
  "fingerprint_db": "http_header.server",
  "data": "TeamSpeak Server 3.13.6"
}

Types of changes

Checklist:

mkienow-r7 commented 2 years ago

Thank you for the contribution @dabdine!