1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
# Version 0.2
# convert :regexp to :text, remove :certainty=>100
##
# Version 0.3
# added more matches for 1999- 2007 version, improved existing matches
##
# Version 0.4 # 2011-09-15 # Brendan Coles <bcoles@gmail.com>
# Minor match updates
# Added version detection
# Added matches for favicon, redirect page and headers
##
Plugin.define "Plesk" do
author "Andrew Horton"
version "0.4"
description "Plesk is a web control panel"
website "http://www.parallels.com/products/plesk/"
# Google results as at 2011-09-15 #
# 258 for intitle:"Default Parallels Plesk Panel Page"
# 16 for inurl:"plesk/unilogin.php"
# ShodanHQ results as at 2011-09-15 #
# 25,941 for PleskWin
# 1,881 for PleskLin
# 26 for sw-cp-server
# Dorks #
dorks [
'intitle:"Default Parallels Plesk Panel Page"'
]
# 2006
# <img src='def_plesk_logo.gif' alt="Plesk logo">
# <h1>This is the Plesk™ default page</h1>
# <p>For more information please contact <!--@adminemail@-->
# newer
# img/common/def_plesk_logo.gif
# <p>For more information please contact <!--@adminemail@-->
# 192.47.116.250
# <a target="_blank" href="http://www.parallels.com"><img src="img/common/parallels_powered.gif" title="Powered by Parallels™"></a>
# http://202.89.57.34
# 1999-2006 version
# <title>Default PLESK Page</title>
# <img src='def_plesk_logo.gif' alt="Plesk logo" width="161" height="41">
# <h1>This is the Plesk™ default page</h1>
# http://119.47.118.185/
# -2009 version
# <title>Default Parallels Plesk Panel Page</title>
# <h1><a class="product-logo" href="http://www.parallels.com/plesk/" title="Parallels Plesk Panel">Parallels Plesk Panel</a></h1>
# © Copyright 1999-2009, Parallels<br />
# <p><strong>This page is generated by <a href="http://www.parallels.com/plesk/">Parallels Plesk Panel</a>
# This page was generated by <a href="http://www.parallels.com/en/products/plesk/">Parallels Plesk Panel</a>
# 1999- 2007 version
# This page is autogenerated by <a target="_blank" href="http://www.swsoft.com/en/products/plesk/">Plesk
# <div class="poweredBy"><a target="_blank" href="http://www.swsoft.com/en/products/plesk/"><img src="img/common/pb_plesk.gif"
# if (window.plesk_promo.virtuozzo) {
# Matches #
matches [
# /favicon.ico
{ :url=>"favicon.ico", :md5=>"2cee5e3ce2f5c4640a68fc208c286494" },
# X-Powered-By: PleskLin # X-Powered-By: PleskWin
{ :search=>"headers[x-powered-by]", :string=>/Plesk([WL]in)/ },
# HTTP Server Header
{ :certainty=>75, :search=>"headers[server]", :regexp=>/sw-cp-server/ },
# Logo HTML
{:name=>"logo gif", :regexp=>/<img src='def_plesk_logo\.gif' alt="Plesk logo"/ },
# HTML Comment
{:text=>'<p>For more information please contact <!--@adminemail@-->' },
# Powered by
{:name=>"poweredBy parallels",
:regexp=>/<a target="_blank" href="http:\/\/www\.parallels\.com"><img src="[^"]+\/parallels_powered\.gif" title="Powered by Parallels™"><\/a>/ }, #"
{:text=>'<div class="poweredBy"><a target="_blank" href="http://www.swsoft.com/en/products/plesk/'},
# Title
{:text=>'<title>Default PLESK Page</title>' },
{:text=>'<title>Default Parallels Plesk Panel Page</title>' },
# Heading
{:text=>'<h1>This is the Plesk™ default page</h1>' },
{:name=>"h1 plesk link",
:text=>'<h1><a class="product-logo" href="http://www.parallels.com/plesk/" title="Parallels Plesk Panel">Parallels Plesk Panel</a></h1>' },
# Copyright
{:name=>"copyright parallels", :certainty=>25, :regexp=>/© Copyright [\d]{4}\-[\d]{4}, Parallels</ },
# This page generated by plesk
{:regexp=>/This page (was|is) generated by <a href="http:\/\/www\.parallels\.com\/(en\/products\/)?plesk\/">Parallels Plesk Panel<\/a>/ },
{:text=>'This page is autogenerated by <a target="_blank" href="http://www.swsoft.com/en/products/plesk/">Plesk'},
# JavaScript
{ :certainty=>25, :text=>'if (window.plesk_promo.virtuozzo) {' },
# Redirect Page # HTML Comment
{ :url=>"/", :text=>'</html><!--______________________________________________________________________________________________________________________________________________________________________________________________________________________________________________IE error page size limitation______________________________________________________________________________________________________________________________________________________________________________________________________________________________________________-->' },
# Redirect Page # Version Detection # JavaScript
{ :url=>"/", :version=>/<script language="javascript" type="text\/javascript" src="\/javascript\/common\.js\?plesk_version=psa-([^\s^"]+)"\/?>/ },
]
end
|
