1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
# Version 0.2 #
# Updated version detection
##
Plugin.define "Trac" do
author "Brendan Coles <bcoles@gmail.com>" # 2010-06-15
version "0.2"
description "Trac is an enhanced wiki and issue tracking system for software development projects. - homepage: http://trac.edgewall.org/"
# About 77,000,000 results for "Powered by Trac" +intitle:Trac' @ 2010-06-14
# Dorks #
dorks [
'"Powered by Trac" intitle:Trac'
]
# Examples #
examples %w|
trac.edgewall.org/demo-0.12
trac.edgewall.org/demo-0.11
https://projects.honeynet.org/honeywall/
xcache.lighttpd.net
eaccelerator.net
code.djangoproject.com
dev.wifidog.org
plagger.org
code.reddit.com
munin-monitoring.org
firestats.cc
www.xinha.org
www.maiamailguard.com
www.cherrypy.org
byteflow.su
sourceforge.net/apps/trac/ipcop/
bitten.edgewall.org
trac.symfony-project.org
fedorahosted.org/koji/
cross-lfs.org
trac.bjourne.webfactional.com
www.ntop.org/trac/
symfonians.org
trac.enlightenment.org/e/wiki/
developer.longtailvideo.com/trac/
trac.fusebox.org
www.rpm.org
developer.pidgin.im
www.phpeclipse.com
trac.greenstone.org
dev.mobileread.com
www.licq.org
seer.isi.deterlab.net/trac/
svn.nuxeo.org
www.eresi-project.org
www.aminus.net
trac.osuosl.org/trac/replicant/
createrepo.baseurl.org
|
matches [
# GHDB Match
{ :ghdb=>'"Powered by Trac" +intitle:Trac', :certainty=>75 },
# Version detection # Powered by text
{ :version=>/Powered by <a[^>]*><strong>Trac ([^<]+)<\/strong><\/a><br \/>/ },
]
# Fingerprint cookie
def passive
m=[]
m << {:name=>"trac_form_token Cookie", :probability=>100 } if @headers["set-cookie"] =~ /trac_form_token=/
m
end
end
|
