1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
Plugin.define "ionCube-Loader" do
author "Brendan Coles <bcoles@gmail.com>" # 2011-06-05
version "0.1"
description "ionCube Loader handles the reading and execution of ionCube encoded PHP files at run time. - Homepage: http://www.ioncube.com/loaders.php"
# More info: http://en.wikipedia.org/wiki/IonCube
# Google results as at 2011-06-05 #
# 147 for inurl:"loader-wizard.php" ext:php intitle:"ionCube Loader Wizard"
# Dorks #
dorks [
'inurl:"loader-wizard.php" ext:php intitle:"ionCube Loader Wizard"'
]
# Examples #
examples %w|
www.imvn.com/ioncube/loader-wizard.php
www.kalphastaligi.net/ioncube/loader-wizard.php
obterhost.net/loader-wizard.php
www.thechaplins.net/ioncube/loader-wizard.php
www.tommylee.co.uk/loaders/ioncube/loader-wizard.php
www.davegagneblog.com/wp-content/plugins/_tagpig/ioncube/loader-wizard.php
www.profitbuilder.us/ioncube/loader-wizard.php
www.lifetimeupgrades.com/ioncube/loader-wizard.php
forcecommunity.arredemo.org/ioncube/loader-wizard.php
connectseat.com/ioncube/loader-wizard.php
www.worldwidemart.com/ioncube/loader-wizard.php
www.chattydogs.com/ioncube/loader-wizard.php
www.zocagear.net/ioncube/loader-wizard.php
www.starkwebdesign.co.uk/aomtest/ioncube/loader-wizard.php
www.yamazakis-notebook.com/ioncube/loader-wizard.php
jproductions.org/ioncube/loader-wizard.php
www.apexhacks.com/ioncube/loader-wizard.php
danish-elite.e-rygere.dk/ioncube/loader-wizard.php
technofriends.in/search/loader-wizard.php
pumps-for-ponds.com/ioncube/loader-wizard.php
www.aliki.it/loaders/ioncube/loader-wizard.php
emergelert.com/ioncube/ioncube/loader-wizard.php
www.bogner.net.pl/ioncube/loader-wizard.php
gamepursuits.net/loader-wizard.php
|
# Matches #
matches [
# GHDB # filename and title
{ :certainty=>75, :ghdb=>'inurl:"loader-wizard.php" filetype:php intitle:"ionCube Loader Wizard"' },
# Logo HTML
{ :text=>'<img src="?page=logo" alt="ionCube logo">' },
# Updated version link
{ :text=>'<h2>ionCube Loader Wizard</h2><p class="alert">An updated version of this Wizard script is available <a href="http://loaders.ioncube.com/">here</a>.</p>' },
# Version Detection # Already installed message
{ :version=>/<p>The ionCube Loader ([^\s]+) is already installed but it is an old version\. It is recommended that the Loader be updated to the latest version/ },
{ :version=>/<p>The ionCube Loader ([^\s]+) is already installed and encoded files should run without problems.<\/p>/ },
# Wizard Module # Version Detection # Copyright footer
{ :module=>/<div id="footer">Copyright ionCube Ltd\. 2002-20[\d]{2} \| (Loader Wizard version [^\s]+) / },
# div id="loading"
{ :text=>'<div id="loading"><script type="text/javascript">document.write(\'<p>Initialising<br>ionCube Loader Wizard<br><span id="status"></span></p>\');</script>' },
]
end
|
