1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
Plugin.define "phpPgAdmin" do
author "Brendan Coles <bcoles@gmail.com>" # 2010-06-14
version "0.1"
description "phpPgAdmin is a web-based administration tool for PostgreSQL. It is perfect for PostgreSQL DBAs, newbies and hosting services - homepage: http://phppgadmin.sourceforge.net/"
# Dorks #
dorks [
'intitle:phpPgAdmin "Welcome to phpPgAdmin"'
]
# Examples #
examples %w|
phppgadmin.kattare.com/phppgadmin4/
216.157.146.2/phpPgAdmin/index.php
www-ldi.univ-paris13.fr/phppgadmin/
tiarajosodirdjo-assc.com/webapps/phppgadmin/
www.gnova.com/phppgadmin/
intermedia73.com/webapps/phppgadmin/
www.serverart.com/client_area/pgsql/
www.netflux.org/phppgadmin2/
cancellar.info/phppgadmin/
ssl.telvinet.pl/phppgadmin/
happy5214.no-ip.org/phppgadmin/intro.php
www.klinikzentrum.com/phppgadmin/
www.mideiros.net/phpPgAdmin/
|
matches [
# 17 results @ 2010-06-14
{:name=>'GHDB: +intitle:phpPgAdmin "Welcome to phpPgAdmin"',
:certainty=>75,
:ghdb=>'+intitle:phpPgAdmin "Welcome to phpPgAdmin"'
},
# <h1>phpPgAdmin 4.0.1 (PHP 5.2.0-8+etch15)</h1>
# <h1>phpPgAdmin 4.2.2 (PHP 5.3.2-1ubuntu4.2)</h1>
# <h1>phpPgAdmin 4.0.1 (PHP 5.2.2)</h1>
# an aggressive plugin could get the version from intro.php
{:name=>"default h1 version",
:certainty=>100,
:regexp=>/<h1>phpPgAdmin [0-9a-zA-Z\ \.\(\)\+-_]+<\/h1>/
},
]
def passive
m=[]
m << {:name=>"PPA_ID Cookie", :certainty=>100 } if @headers["set-cookie"] =~ /PPA_ID=[a-z0-9]+/
m
end
end
|
