cPanel®

## # This file is part of WhatWeb and may be subject to # redistribution and commercial restrictions. Please see the WhatWeb # web site for more information on licensing and terms of use. # https://morningstarsecurity.com/research/whatweb ## Plugin.define do name "cPanel" authors [ "Andrew Horton", # v0.2 # removed :name and :certainty=>100. "Brendan Coles ", # v0.3 # Added version detection. Added OS detection.. # v0.4 # 2011-04-06 # Brendan Coles # Added /cgi-sys/defaultwebpage.cgi and /img-sys/header.jpg aggressive matches. # v0.5 # 2011-08-04 # Andrew Horton # added default meta refresh page ] version "0.5" description "Site configuration and management software application. Supporting many operating systems while allowing endusers to control every aspect of their webhosting experience." website "http://www.cpanel.net/" # Google results as at 2012-04-11 # # 899 for inurl:":2082/frontend" -demo # 487 for inurl:":2095/webmail/x3" # Dorks # dorks [ 'inurl:":2082/frontend" -demo', 'inurl:":2095/webmail/x3"' ] # Matches # matches [ # Welcome Page # Default title { :text=>"cPanel®" }, # Welcome Page # Default logo HTML { :text=>'

' }, # Welcome Page # Default text { :text=>"Apache is working on your cPanel^® and WHM™ Server" }, # Default meta refresh redirection webpage { :text=>''}, # Login Page # Default CSS { :regexp=>// }, # Version Detection # Login page # Default title { :version=>/cPanel®[\s]{0,2}([\d\.]+)<\/title>/ }, # Aggressive # /cgi-sys/defaultwebpage.cgi { :url=>"/cgi-sys/defaultwebpage.cgi", :text=>'<p class="troubleshoot">It may be possible to restore access to this site by <a href="http://www.cpanel.net/docs/dnscache/cleardns.html">following these instructions</a> for clearing your dns cache.</p>' }, # Aggressive # /img-sys/header.jpg { :url=>"/img-sys/header.jpg", :md5=>"b0f3863b68ff707c3fb586bd87b4f9c6" }, # Version Detection # HTTP Server header { :search=>"headers[server]", :version=>/^cpsrvd\/([\d\.]+)$/ }, ] end