Merge pull request #581 from quantavis-sw/update_mac_fingerprints

Add fingerprints for Mac OS 13.0 Ventura and Apple MacBook Pro (14-Inch, M1, 2021)
rapid7 · Jul 3, 2024 · 0c6b552 · 0c6b552
2 parents 9aa81d4 + 32ef528
commit 0c6b552
Show file tree

Hide file tree

Showing 2 changed files with 25 additions and 0 deletions.
diff --git a/identifiers/hw_product.txt b/identifiers/hw_product.txt
@@ -196,6 +196,7 @@ MacBook Pro (13-inch, Mid 2009)
 MacBook Pro (13-inch, Mid 2010)
 MacBook Pro (13-inch, Mid 2012)
 MacBook Pro (14-inch, 2021)
+MacBook Pro (14-Inch, M1, 2021)
 MacBook Pro (15-inch, 2016)
 MacBook Pro (15-inch, 2017)
 MacBook Pro (15-inch, 2018)

diff --git a/xml/mdns_device-info_txt.xml b/xml/mdns_device-info_txt.xml
@@ -14,6 +14,16 @@
      version of OS X plus 4. E.g. osxvers=13 means OS X 10.9
    -->
 
+  <fingerprint pattern="^osxvers=22">
+    <description>OS X 13.0 (Ventura)</description>
+    <example>osxvers=22</example>
+    <param pos="0" name="os.vendor" value="Apple"/>
+    <param pos="0" name="os.family" value="Mac OS X"/>
+    <param pos="0" name="os.product" value="Mac OS X"/>
+    <param pos="0" name="os.version" value="13.0"/>
+    <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:13.0"/>
+  </fingerprint> 
+
   <fingerprint pattern="^osxvers=21">
     <description>OS X 12.0 (Monterey)</description>
     <example>osxvers=21</example>
@@ -258,6 +268,20 @@
 
   <!-- MacBookPro - Reference for the following: https://support.apple.com/en-us/HT201300 -->
 
+  <fingerprint pattern="^model=MacBookPro18,3$">
+    <description>MacBook Pro (14-Inch, M1, 2021)</description>
+    <example>model=MacBookPro18,3</example>
+    <param pos="0" name="os.vendor" value="Apple"/>
+    <param pos="0" name="os.family" value="Mac OS X"/>
+    <param pos="0" name="os.product" value="Mac OS X"/>
+    <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:-"/>
+    <param pos="0" name="hw.vendor" value="Apple"/>
+    <param pos="0" name="hw.family" value="MacBook Pro"/>
+    <param pos="0" name="hw.product" value="MacBook Pro (14-Inch, M1, 2021)"/>
+    <param pos="0" name="hw.device" value="Laptop"/>
+    <param pos="0" name="hw.cpe23" value="cpe:/h:apple:macbook_pro:-"/>
+  </fingerprint>
+
   <fingerprint pattern="^model=MacBookPro17,1$">
     <description>MacBook Pro (13-inch, M1, 2020)</description>
     <example>model=MacBookPro17,1</example>