1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
Plugin.define "ClientExec" do
author "Brendan Coles <bcoles@gmail.com>" # 2011-05-23
version "0.1"
description "ClientExec is a comprehensive and flexible web hosting billing solution designed for customer billing, helpdesk, e-mail and (team) management and communication. ClientExec was conceived and built with small to mid-sized hosting companies in mind. - Homepage: http://www.clientexec.com/"
# ShodanHQ results as at 2011-05-23 #
# 74 for CLIENTEXEC
# 33 for fuse=newedge
# Google results as at 2011-05-23 #
# 254 for intitle:"Support Center - Powered By ClientExec"
# Dorks #
dorks [
'intitle:"Support Center - Powered By ClientExec"'
]
# Examples #
examples %w|
demo.clientexec.com
billing.myteamspeak.net
my.hostned.com/ce/
billing.miwcity.net
hqsecure.com/clientexec/
www.host3.co.uk/members/
dristal.com/client/
billing.veeservers.com
billing.velocity-servers.net
clients.medialayer.com
www.elkwebworks.com/clientexec/
members.hostedhere.net
www.xpservers.net/billing/
www.aquanetworks.com/helpdesk/
188.40.240.234
178.238.133.149
74.53.147.59
97.74.8.67
75.119.218.159
210.17.245.137
208.77.220.130
209.188.95.113
|
# Matches #
matches [
# HTML Comment
{ :text=>'<!-- These should not have debug at the end for production -->' },
# Default Title
{ :text=>'<title>Support Center - Powered By ClientExec</title>' },
# Login Form HTML
{ :text=>'<form action="index.php?fuse=admin&action=Login&public=1" method="post"' },
# Theme Detection
{ :module=>/<img class="logo" src="templates\/([^\/]+)\/images\/public\/caption_photo\.jpg" alt="clientexec" \/>/ },
]
# Passive #
def passive
m=[]
# CLIENTEXEC Cookie
if @headers["set-cookie"] =~ /CLIENTEXEC=[a-z\d]{26,32}; path=\//
m << { :name=>"CLIENTEXEC Cookie" }
# Unauthorized Version Installed
if @body =~ /^Cannot access EnterLicense view directly$/
m << { :string=>"Unauthorized Version" }
end
end
# Return passive matches
m
end
end
|
