1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
Plugin.define "cloudflare" do
author "Aung Khant <http://yehg.net/>" # 2011-02-04
version "0.1"
description "ClouldFlare - https://www.cloudflare.com/"
# Google results as at 2011-04-12 #
# 14 for "Performance & Security by Cloudflare"
# Dorks #
dorks [
'"Performance & Security by Cloudflare"'
]
# Examples #
examples %w|
http://yehg.net/
http://www.ornagai.com/
http://anti-virus.cloudflare.com
http://12flat.com/
http://techgeeks-online.com/
http://ps3blog.net/
http://techairlines.com/
http://manzwebdesigns.com/
http://jonesdoug.com/
199.27.132.117
199.27.135.56
199.27.135.145
199.27.135.104
199.27.128.121
199.27.129.67
199.27.129.160
199.27.129.28
199.27.130.224
199.27.131.170
199.27.128.218
199.27.132.54
199.27.132.221
199.27.132.132
199.27.130.46
199.27.134.115
199.27.132.182
199.27.132.124
199.27.134.48
199.27.128.67
199.27.129.163
199.27.134.93
199.27.130.164
199.27.131.92
199.27.130.149
199.27.134.73
199.27.129.193
199.27.129.31
199.27.130.102
199.27.131.65
199.27.129.47
199.27.129.150
199.27.130.84
199.27.134.103
199.27.128.83
199.27.130.171
199.27.134.52
199.27.130.181
199.27.130.55
|
# Matches #
matches [
{:name => 'access restricted iframe', :text => '<iframe frameborder="0" width="100%" height="100%" src="http://anti-virus.cloudflare.com/cdn-cgi/anti-virus-challenge?h='},
{:name => 'footer', :text => ' Performance & Security by <a id="FooterCloudFlare" href="https://www.cloudflare.com" target="_blank">CloudFlare</a>'},
]
# Passive #
def passive
m=[]
m << {:name=>"__cfduid cookie" } if @headers["set-cookie"] =~ /__cfduid/i
m << {:name=>"server header" } if @headers["server"] =~ /cloudflare\-nginx/i
# Return passive matches
m
end
end
|
