1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
Plugin.define "Icecast" do
author "Brendan Coles <bcoles@gmail.com>" # 2011-08-07
version "0.1"
description "Icecast is a GPL streaming media server project that currently streams in MP3 format. - Homepage: http://www.icecast.org/"
# ShodanHQ results as at 2011-08-07 #
# 75 for icecast
# Examples #
examples %w|
91.184.192.11
209.9.238.67
204.93.222.91
195.190.137.196
194.97.151.150
202.0.155.77
194.30.0.193
195.227.130.212
204.93.226.36
80.69.78.251
193.213.115.197
|
# Passive #
def passive
m=[]
# Version Detection # HTTP Server Header
if @headers["server"] =~ /^Icecast ([^\s]+)/
m << { :version=>"#{$1}" }
end
if @headers["server"] =~ /^icecast\/([^\s]+)/
m << { :version=>"#{$1}" }
end
# icy-name Header
m << { :string=>@headers["icy-name"].to_s } unless @headers["icy-name"].nil?
# WWW-Authenticate Header
m << { :certainty=>75, :name=>"WWW-Authenticate Header" } if @headers["www-authenticate"] =~ /Basic realm="Icecast/
# Return passive matches
m
end
end
|
