1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
Plugin.define "Sipura-VoIP-Phone" do
author "Brendan Coles <bcoles@gmail.com>" # 2011-04-10
version "0.1"
description "Sipura VoIP phone. Cisco Systems acquired Sipura Technologies for its Linksys division in 2005."
website "http://www.sipura.net/"
# Google results as at 2011-04-10 #
# 42 for intitle:"Sipura SPA Configuration" inurl:admin
# 40 for intitle:"Sipura SPA Configuration" inurl:admin -ext:htm
# 19 for intitle:"Sipura SPA Configuration" inurl:admin "Call History" -ext:htm
# Dorks #
dorks [
'intitle:"Sipura SPA Configuration" inurl:admin -ext:htm'
]
# Matches #
matches [
# Form HTML with unique file extension
{ :text=>'<form action="bsipura.spa" method="POST">' },
# Image HTML
{ :text=>'<img width="100%" src="/spabanner.jpg" border="0" alt="Sipura Technology Inc">' },
# Model Detection
{ :model=>/<tr bgcolor="#dcdcdc"><td>Product Name:<td><font color="darkblue">([^<]+)<\/font><td>Serial Number:<td>/ },
# Version Detection
{ :version=>/<tr bgcolor="#d3d3d3"><td>Software Version:<td><font color="darkblue">([^<]+)<\/font><td>Hardware Version:<td><font color="darkblue">[^<]+<\/font>/ },
# Firmware Version Detection
{ :firmware=>/<tr bgcolor="#d3d3d3"><td>Software Version:<td><font color="darkblue">[^<]+<\/font><td>Hardware Version:<td><font color="darkblue">([^<]+)<\/font>/ },
# MAC Address Detection
{ :string=>/<tr bgcolor="#dcdcdc"><td>MAC Address:<td><font color="darkblue">([A-F\d]{12})<\/font><td>Client Certificate:<td>/ },
# Call History Detection
{ :module=>/<\/font><a href="\/calllog\.htm" target=_calllog_[\d]+><font class=swalft>(Call History)<\/font><\/a><\/p><\/div>/ },
# Extract Addressbook Details
{ :url=>"/pdir.htm", :string=>/<td>[\d]+\.<td> <input class="inputc" size="40" name="[\d]+" value="(n=[^;]*;p=[\d]+)" maxlength=[\d]+>/ },
]
end
|
