1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
Plugin.define "Diaspora" do
author "Brendan Coles <bcoles@gmail.com>" # 2011-10-30
version "0.1"
description "Diaspora - social networking service - Homepage: https://joindiaspora.com/"
# Source: https://github.com/diaspora/diaspora
# Needs more matches
# ShodanHQ results as at 2011-10-30 #
# 31 for _diaspora_session
# 7 for X-Git-Update
# Google results as at 2011-10-30 #
# 182 for intitle:"Sign In" "Sign up" "Forgot your password?" inurl:"users/sign_in"
# Dorks #
dorks [
'intitle:"Sign In" "Sign up" "Forgot your password?" inurl:"users/sign_in"'
]
# Examples #
examples %w|
67.202.61.58
89.238.82.161
www.midgeamesphoto.com/users/sign_in
www.class.in.th/users/sign_in
londondiaspora.org/users/sign_in
goldmansterling.co.uk/users/sign_in
raptjs.com/users/sign_in
lighthousemontessori.com/users/sign_in
couchnote.com/users/sign_in
www.pilotedge.net/users/sign_in
https://www.genetics-cme.com/users/sign_in
https://mimi.case.edu/users/sign_in
https://social.mathaba.net/
|
# Matches #
matches [
# Set-Cookie: _diaspora_session=
{ :search=>"headers[set-cookie]", :regexp=>/_diaspora_session=/ },
# X-Git-Update
{ :search=>"headers[x-git-update]", :string=>/^([\d]{4}-[\d]{2}-[\d]{2} [\d]{2}:[\d]{2}:[\d]{2} .+)$/ },
# X-Git-Revision
{ :search=>"headers[x-git-revision]", :regexp=>/^[a-f\d]{32}$/ },
# Login Page # Remember Me
{ :text=>'<input name="user[remember_me]" type="hidden" value="0" /><input id="user_remember_me" name="user[remember_me]" type="checkbox" value="1" />' },
]
end
|
