1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
Plugin.define "SQL-Buddy" do
author "Brendan Coles <bcoles@gmail.com>" # 2011-09-28
version "0.1"
description "SQL Buddy - Web based MySQL administration - Homepage: http://www.sqlbuddy.com/"
# Google results as at 2011-09-28 #
# 79 for intitle:"SQL Buddy" +Host +Username +Password +Database -sbconfig -site:www.sqlbuddy.com -site:code.google.com
# 26 for inurl:"sqlbuddy/" +Host +Username +Password +Database -sbconfig
# 5 for inurl:"sqlbuddy/login.php" +Host +Username +Password +Database -sbconfig
# Dorks #
dorks [
'intitle:"SQL Buddy" "Host" "Username" "Password" "Database" -sbconfig -site:www.sqlbuddy.com -site:code.google.com',
'inurl:"sqlbuddy/login.php" "Host" "Username" "Password" "Database" -sbconfig'
]
# Examples #
examples %w|
www.bronzas.biz/sqlbuddy
crlive.com/cometchat/sqlbuddy/
www.trustbuddyinternational.net/sites/sqlbuddy/
toolbox.3gnt.net/sqlbuddy/
www.media.delawareareacc.org/11orej/Wampee-2.1-beta-2/apps/sqlbuddy1.3.2/
admin.heteml.jp/sqlbuddy/login.php
www.domes4kids.com/sqlbuddy/
myslice.ods.org/sqlbuddy/
home.dark-lord.ru/web/stat/sqlbuddy
demonstration.ogael.fr
ns1.metaserver.org/sqlbuddy/
trustbuddyinternational.net/sites/sqlbuddy/
m00nsh0ck.aimbot.fr/sqlbuddy/
safehouse.adsign.no/sites/sqlbuddy/
ticket.coral.ru
|
# Passive #
def passive
m=[]
# Help link
if @body =~ /<td colspan="2"><div class="loginheader"><h3><strong>Login<\/strong><\/h3><a href="http:\/\/www\.sqlbuddy\.com\/help\/"/
m << { :name=>"help link" }
# Version Detection
if @body =~ /<link type="text\/css" rel="stylesheet" href="themes\/bittersweet\/css\/main\.css\?ver=([\d\_]+)" \/>/
m << { :version=>"#{$1}".gsub!(/_/, ".") }
end
end
# Return passive matches
m
end
end
|
