1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
Plugin.define "Sphider" do
author "Brendan Coles <bcoles@gmail.com>" # 2011-08-23
version "0.1"
description "Sphider is a lightweight web spider and search engine written in PHP, using MySQL as its back end database. - Homepage: http://www.sphider.eu/"
# Google results as at 2011-08-23 #
# 62 for intitle:"Sphider Admin Login" inurl:"admin" +Username +Password
# 36 for intitle:"Sphider installation script" intext:"Sphider installation script" inurl:"install.php"
# Dorks #
dorks [
'intitle:"Sphider Admin Login" inurl:"admin" "Username" "Password"',
'intitle:"Sphider installation script" intext:"Sphider installation script" inurl:"install.php"'
]
# Examples #
examples %w|
www.celarwater.com/sphider/admin/install.php
www.aastra.kz/install.php
www.dailycognition.com/search/admin/install.php
www.theistargroup.com/sphider/admin/install.php
www.casa-india.org/search/admin_search/install.php
www.ortopedicosfuturo.com/sphider/admin/install.php
www.jppimports.com/pages/search/admin/install.php.old
dev.ambergoffice.com/search.ambergentertainment.com/admin/install.php
abhilashsaju.in/admin/install.php
vyhledavac.hustej.net/admin/install.php
www.hobler.hu/kereso/admin/install.php
www.sphider.ru.gp/admin/install.php
|
# Matches #
matches [
# Install Page # admin/install.php
{ :regexp=>/<html>[\s]+<head>[\s]+<title>[\s]+Sphider installation script\.[\s]+<\/title>[\s]+<LINK REL=STYLESHEET HREF="admin\.css" TYPE="text\/css">[\s]+<\/head>[\s]+<body>/ },
# Admin Page
{ :regexp=>/<title>Sphider Admin Login<\/title>[\s]+<LINK REL=STYLESHEET HREF="admin\.css" TYPE="text\/css">[\s]+<\/head>/ },
]
# An aggressive plugin could get the version from ./readme.txt #
end
|
