1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
# Version 0.2 # 2011-09-14 #
# Updated model/version detection and added server header match.
##
Plugin.define "ARRIS-Touchstone-Router" do
author "Brendan Coles <bcoles@gmail.com>" # 2011-08-14
version "0.2"
description "ARRIS Touchstone router - Homepage: http://www.arrisi.com/products/touchstone/"
# ShodanHQ results as at 2011-09-14 #
# 211,058 for NET-DK
# Google results as at 2011-08-14 #
# 101 for "HW/FW Versions" "CM Hardware Information" inurl:vers.htm
# Dorks #
dorks [
'"HW/FW Versions" "CM Hardware Information" inurl:vers.htm'
]
# Examples #
examples %w|
76.137.147.106
207.253.164.118
www.derrickhackman.com
www.conceptzowie.com
host-24-100-45-135.newwavecomm.net
anketa.ris.org
midmichigansprayfoam.com
24.198.158.173
96.223.142.140
76.136.63.249
174.182.108.63
208.100.178.55
98.51.71.86
74.16.31.241
98.52.105.138
96.217.52.114
96.223.172.237
96.196.72.16
|
# Matches #
matches [
# HTTP Server Header
{ :certainty=>25, :search=>"headers[server]", :regexp=>/^NET-DK\/[\d\.]+$/ },
# /logo_t.gif
{ :url=>'/logo_t.gif', :md5=>"634c757842b122c6cd4458051ab0ed12" },
# Copyright footer
{ :regexp=>/<br><center>© Copyright (2004-)?20[\d]{2}, ARRIS Group, Inc\., All rights reserved\.<\/center><\/BODY><\/HTML>/ },
# Frameset
{ :text=>'<FRAME name="tabs" src="/menu.htm?3" frameborder="0" scrolling="no">' },
# Software Version Detection # /vers.htm
{ :url=>"/vers.htm", :version=>/<BR> SW_REV: ([^\s^<]+)<BR> MODEL: ([^\s^<]+) <\/TD><\/TR><tr vAlign=top><td width="170">Product Type:<\/td>/ },
# Software Version Detection # /cgi-bin/vers_cgi
{ :url=>"/cgi-bin/vers_cgi", :version=>/HW_REV: [^<]+<br>[\s]+VENDOR: Arris Interactive, L\.L\.C\.<br>[\s]+BOOTR: [^<]+<br>[\s]+SW_REV: ([^\s^<]+)<br>[\s]+MODEL: ([^\s^<]+)<\/td>/ },
# Firmware Version Detection # /cgi-bin/vers_cgi
{ :url=>"/cgi-bin/vers_cgi", :firmware=>/HW_REV: [^<]+<br>[\s]+VENDOR: Arris Interactive, L\.L\.C\.<br>[\s]+BOOTR: ([^<^\s]+)<br>[\s]+SW_REV: ([^\s^<]+)<br>[\s]+MODEL: ([^\s^<]+)<\/td>/ },
# Model Detection # /cgi-bin/vers_cgi
{ :url=>"/cgi-bin/vers_cgi", :model=>/HW_REV: [^<]+<br>[\s]+VENDOR: Arris Interactive, L\.L\.C\.<br>[\s]+BOOTR: [^<]+<br>[\s]+SW_REV: ([^\s^<]+)<br>[\s]+MODEL: ([^\s^<]+)<\/td>/, :offset=>1 },
# Model Detection # /vers.htm
{ :url=>"/vers.htm", :model=>/<BR> SW_REV: ([^\s^<]+)<BR> MODEL: ([^\s^<]+) <\/TD><\/TR><tr vAlign=top><td width="170">Product Type:<\/td>/, :offset=>1 },
]
end
|
