1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
# Version 0.2
# removed :certainty=>100 & :name
# Version 0.3
# Uses :version=>//
Plugin.define "VSNSLemon" do
author "Andrew Horton"
version "0.3"
description "VSNS is a Very Simple News System written in PHP. VSNS Lemon vulnerabilities: http://evuln.com/vulns/106/summary.html"
# Examples #
examples %w|http://tachyondecay.net/blog/|
# Matches #
matches [
# http://johnny.ihackstuff.com/ghdb?function=detail&id=1840
{:ghdb=>'"Powered by Vsns Lemon" intitle:"Vsns Lemon"'},
{:text=>'<p>Powered by <abbr title="very simple news system">'},
{:regexp=>/<a[^>]+title="Blog powered by VSNS Lemon">/},
{:certainty=>50, :regexp=>/<div id="vsns-(inner|container)">/},
{:regexp=>/<img[^>]+alt="VSNS Lemon"[^>]+title="Blog powered by VSNS Lemon"/},
{:version=>/<p>Powered by <abbr title="very simple news system">VSNS<\/abbr> (Lemon) ([0-9.a-z]*) by <a href="http:\/\/tachyondecay.net\/">Tachyon<\/a>/, :offset=>1, :name=>"powered by link" }
]
end
|
