1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
Plugin.define "HP-System-Management-Homepage" do
author "Brendan Coles <bcoles@gmail.com>" # 2011-12-28
version "0.1"
description "The HP System Management Homepage is a web-based interface that consolidates and simplifies the management of individual ProLiant and Integrity servers running Microsoft Windows or Linux operating systems, or HP 9000 and HP Integrity servers running HP-UX 11i. - Homepage: http://h18002.www1.hp.com/products/servers/management/agents/index.html"
# Google results as at 2011-12-28 #
# 4 for intitle:"HP System Management Homepage Login" (inurl:2381|inurl:2301)
# 0 for inurl:"2301/red2301.html?RedirectUrl=/"
# ShodanHQ results as at 2011-12-28 #
# 0 for CompaqHTTPServer
# Dorks #
dorks [
'intitle:"HP System Management Homepage Login" (inurl:2381|inurl:2301)'
]
# Examples #
examples %w|
217.147.221.2:2301
134.139.10.131:2301
132.248.247.1:2301
https://www.lookinawe.co.uk:2381/
https://htca.us.es:2381/
https://206.72.80.10:2381/
|
# Matches #
matches [
# Title
{ :certainty=>75, :regexp=>/<TITLE>HP System Management Homepage Login<\/TITLE>/ },
# Set-Cookie # Compaq-HMMD
{ :search=>"headers[set-cookie]", :regexp=>/Compaq-HMMD=/ },
# Version Detection # Server Header
{ :search=>"headers[server]", :version=>/CompaqHTTPServer\/[^\s]+ HP System Management Homepage\/([\d\.]+)$/ },
]
# Passive #
def passive
m=[]
# Version Detection # JavaScript
if @body =~ /<TITLE>HP System Management Homepage Login<\/TITLE>/
if @body =~ /systemname = "([^\"^\s]+)";[\s]+smhversion = "HP System Management Homepage v([^\"^\s]+)";[\s]+smhcopyright = "©2003-20[\d]{2} Hewlett-Packard Development Company, L.P.";/
m << { :string=>"#{$1}" }
m << { :version=>"#{$2}" }
end
end
# Return passive matches
m
end
end
|
