1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
# Version 0.2 # 2011-03-19 # Brendan Coles <bcoles@gmail.com>
# Updated regex
##
Plugin.define "Juniper-Load-Balancer" do
author "Aung Khant <http://yehg.net/>" # 2011-02-04
version "0.2"
description "Juniper Networks Application Acceleration and Load Balancing Platforms - Homepage: http://juniper.net/ - Note: This will slow down your web app pentest scanning. Use only manual fuzzing with time throttling."
# Examples #
examples %w|
http://www.juniper.net/
http://12.105.142.170/
http://12.105.142.237/
http://123.176.112.242/
http://123.176.112.243/
http://123.176.112.41/
http://123.176.112.67/
http://147.6.81.92/
http://150.101.83.113
http://193.194.158.204/
http://193.242.192.57/
http://203.120.129.110/
http://203.120.149.83
http://207.104.211.80/
http://212.137.33.109/
http://212.137.33.88/
http://212.137.33.74
http://213.4.57.106/
http://213.4.57.108/
http://213.4.57.109/
http://63.210.58.82/
http://63.240.234.120/
http://63.240.234.123/
http://74.175.106.71/
http://corporate.lc.jumbo.pt/
http://cpms.dfa.state.nm.us/
http://www.marriottvacationclub.com
http://www.palmerston.nt.gov.au/
http://www.ritzcarltonclub.com/
https://aida.bvdep.com
https://mintglobal.bvdep.com/
https://www.myritzcarltonclub.com/
|
# Passive #
def passive
m=[]
# Cookie
m << {:name=>"cookie (rl-sticky-key)" } if @headers["set-cookie"] =~ /rl\-sticky\-key/i
# Via HTTP Header
if @headers["via"] =~ /Juniper Networks Application Acceleration Platform/i
m << {:name=>"via header" }
# Version Detection # Via HTTP Header
if @headers['via'] =~ /Juniper Networks Application Acceleration Platform \- ([^<^\)]+)/i
m << { :version=>@headers['via'].scan(/Juniper Networks Application Acceleration Platform \- ([^<^\)]+)/i) }
end
end
# Return passive matches
m
end
end
|
