1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
Plugin.define "Plugin-Template" do
author "Enter your name preferred incl. contact details (eg. your e-mail address)"
description "Describe what the plugin identifies"
website "An URL for additional details (eg. software developer, hardware manufacturer, RFC, etc."
# a comment block here is a good place to make notes for yourself and others
# These are the types of matches:
# :regexp -- it's a regular expression in ruby, eg. /^foobar$/
# :text -- case sensitive text
# :ghdb -- Google Hack Database. u can use intitle: inurl: -
# :md5 -- MD5 hash
# :tagpattern -- a pattern made by the html entities. fuzzy matching coming soon
# :url -- you can combine this with other variables or use by itself
# :name -- naming the matches is optional
# :version -- this is used to return data
# :string -- this is used to return data
# Matches are enclosed in {} brackets and separated by commas
matches [
{:name=>"a brief description of the match, eg. powered by in footer",
:regexp=>/This page was generated by <a href="http:\/\/www.genericcms.com\/en\/products\/generic-cms\/">Generic CMS<\/a>/ },
{:name=>"title",
:certainty=>75,
:text=>"<title>Generic Homepage</title>" }, # note the comma
{:url=>'/admin/login.php', :text=>'StarCraft Login Panel' },
{:ghdb=>'intitle:"Foobar" -Fooboo Access', :certainty=>25 },
# :certainty => 100 is certain (default), 75 is probably and 25 is maybe
{:url=>"/wp-login.php",
:tagpattern=>"!DOCTYPE,html,head,title,/title,meta,link,link,script,/script,meta,/head,body,div,h1,a,/a,/h1,form,p,label,br,input,/label,/p,p,label,br,input,/label,/p,p,label,input,/label,/p,p,input,input,input,/p,/form,p,a,/a,/p,p,a,/a,/p,/div,script,/script,/body,/html"},
# tags are delimited by commas. fuzzy matching is coming in the future
{:url=>"favicon.ico", :md5=>'f420dc2c7d90d7873a90d82cd7fde315'} # not common, seen on http://s.wordpress.org/favicon.ico
]
end
|
