1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
# Version 0.2 # 2011-01-25 #
# Updated version detection
##
Plugin.define "IBM-HTTP-Server" do
author "Brendan Coles <bcoles@gmail.com>" # 2010-10-25
version "0.2"
description "IBM HTTP Server is based on the Apache HTTP Server (httpd.apache.org), developed by the Apache Software Foundation. IBM HTTP Server can be remotely administered and configured using the WebSphere administrative console - Homepage: http://www.ibm.com/software/webservers/httpservers/"
# ShodanHQ results as at 2010-10-25 #
# 23,022 for "Server: IBM_HTTP_Server"
# 34 for "srvrname:"
# Examples #
examples %w|
12.44.59.57
207.19.62.173
207.19.62.130
12.44.59.92
207.19.62.147
12.44.59.23
207.19.62.129
207.19.62.157
207.19.62.175
12.44.59.145
204.54.192.13
208.28.133.146
65.79.18.14
27.110.79.44
167.68.39.142
194.31.225.119
85.236.67.201
66.101.206.73
217.220.71.166
205.172.134.48
|
# Passive #
def passive
m=[]
# Server HTTP Header
m << { :version=>@headers["server"].scan(/[\s]*IBM-HTTP-Server\/([\d\.]+)/) } if @headers["server"] =~ /[\s]*IBM-HTTP-Server\/([\d\.]+)[^\r^\n]*/
m << { :version=>@headers["server"].scan(/[\s]*IBM_HTTP_Server\/([\d\.]+)/) } if @headers["server"] =~ /[\s]*IBM_HTTP_Server\/([\d\.]+)[^\r^\n]*/
m << { :name=>"IBM_HTTP_Server" } if @headers["server"].to_s =~ /^[\s]*IBM_HTTP_Server/
# srvrname HTTP Header
m << { :string=>@headers["srvrname"].to_s } unless @headers["srvrname"].nil?
# Return passive matches
m
end
end
|
