1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
Plugin.define "CitrusDB" do
author "Brendan Coles <bcoles@gmail.com>" # 2012-04-11
version "0.1"
description "CitrusDB is a web based customer care and billing software solution (CC&B) - Requires PHP and MySQL - Homepage: http://www.citrusdb.org/"
# Google results as at 2012-04-11 #
# 36 for intitle:CitrusDB "Enter your username and password" "username" "password"
# Dorks #
dorks [
'intitle:CitrusDB "Enter your username and password" "username" "password"'
]
# Examples #
examples %w|
img.globalone.bg/citrus/
techguards.com/billing/
avidexinfotech.com/demo/citrusdb/citrus/
gosupernet.com/billing/
ddogbert.net/support/
www.tammymcdonaldtraining.com/citrus/index.php
trameltonis.com/clients/
sergeinc.dyndns.org/host/website/citrus/
billing.bluescreentechnologies.com/
ncinfo.com.pt/aa/
clients.trameltonis.com/
billing.report.at/
|
# Matches #
matches [
# input
{ :text=>'<INPUT TYPE="SUBMIT" NAME="submit" VALUE="Login" onclick="password.value = calcMD5(password.value)" class=smallbutton>' },
# logo html
{ :certainty=>75, :text=>'<center><table><td valign=top><img src="images/my-logo.png">' },
]
end
|
