rapid7 / recog

Pattern recognition for hosts, services, and content
Other
662 stars 195 forks source link

Add sip-banner record for Telepresence with higher certainty #624

Closed atorovik-r7 closed 2 weeks ago

atorovik-r7 commented 3 weeks ago

Description

A detailed description of your changes. Updated sip-banner record for Cisco Telepresence to reflect the current product naming, vendor, family. Make regex more strict to match only versions starting with X and TC. SIP protocol example:

SIP/2.0 403 Forbidden Via: SIP/2.0/UDP nm;branch=foo;received=224.85.86.107;rport=26810;ingress-zone=DefaultZone Call-ID: 50000 CSeq: 42 OPTIONS From: sip:nm@nm;tag=root To: sip:nm2@nm2;tag=dba04991a2a1090f Server: TANDBERG/4145 (X15.0.3)

Motivation and Context

How Has This Been Tested?

Tested with bin/recog_verify

Types of changes

Checklist: