1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
#
Plugin.define "Plugin-Tutorial-6" do
author "Your preferred name <email@address>" # 1999-12-31
version "0.1"
description "Describe what the plugin identifies"
website "http://example.com/"
# Dorks #
dorks [
'"Generic CMS login"',
'Generic login register linkname',
]
# Matches #
matches [
# This searches for a text string.
{ :text => "This page was generated by <b>Generic CMS</b>" },
]
# You can write custom Ruby code in plugins for more control
# There can be a passive function and an aggressive function.
# The Passive function will always execute
#
##
# The following variables are available
#
# @body
# @headers
# @cookies
# @status
# @base_uri
# @md5sum
# @tagpattern
# @ip
##
def passive
# make a matches array
m=[]
# If the HTTP status is 302 and the redirection location is /admin/genericcms.php then match
if @status.to_s =~ /^302$/ and @headers["location"] =~ /^\/admin\/genericcms\.php$/
m << { :name => "302 redirection to /admin/genericcms.php" }
end
# You can add debugging and check the value of variables
# pp @status
# pp @headers
# return the matches array, even if it's empty
m
end
# Check other plugins with passive functions for examples.
##
# The Aggressive function will only sometimes execute
# At aggressive level 3 if a match is found, then the aggressive function executes
# At aggressive level 4, the aggressive function always executes
##
def aggressive
# make a matches array. this returns the equivalent of the matches[] block above
m=[]
# return the matches array, even if it's emtpy
m
end
## Very few plugins need startup and shutdown functions
#
# This executes when the plugin is first loaded
def startup
end
# This executes when the plugin is closed on whatweb shutdown
def shutdown
end
end
|
