1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
Plugin.define "SkyX" do
author "Brendan Coles <bcoles@gmail.com>" # 2011-05-30
version "0.1"
description "The Mentat SkyX series were designed for TCP acceleration/compression and high latency link optimization. Mentat was acquired by Packeteer in 2004. Packeteer was acquired by Blue Coat Systems in 2008 and the SkyX series was discontinued - Homepage: http://www.bluecoat.com/"
# More Info #
# http://www.bluecoat.com/landing/packeteer-end-life-matrix
# http://en.wikipedia.org/wiki/Packeteer
# ShodanHQ results as at 2011-05-30 #
# 63 for SkyX HTTPS
# Examples #
examples %w|
82.167.160.99
82.167.160.126
66.178.112.122
60.36.187.130
82.167.160.158
212.93.218.152
|
# Matches #
matches [
# div id="skyx_status"
{ :text=>'<div id="skyx_status">SkyX status: enhancing</div>' },
# JavaScript # /skyxgui.js
{ :text=>'<script language="javascript" type="text/javascript" src="/skyxgui.js"></script>' },
# Hostname Detection
{ :string=>/<div id="hostname"><a href="Misc">Hostname<\/a>: ([^\s^<]+)<\/div>/ },
]
# Passive #
def passive
m=[]
# HTTP Server Header
if @headers["server"] =~ /^SkyX HTTPS ([^\s]+)$/
# Version Detection
m << { :version=>@headers["server"].scan(/^SkyX HTTPS ([^\s]+)$/) }
# Model Detection
m << { :model=>@body.scan(/<div id="model">Model:([^<]+)<\/div>/) } if @body =~ /<div id="model">Model:([^<]+)<\/div>/
end
# Return passive matches
m
end
end
|
