1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
Plugin.define "The-Amazing-Little-Poll" do
author "Brendan Coles <bcoles@gmail.com>" # 2012-06-04
version "0.1"
description "The Amazing Little Poll is a very simple php polling script. - Homepage: http://www.mr-corner.com/LittlePoll/index.html"
# ShodanHQ results as at 2012-06-04 #
# 35 for pollidcookie votingstep
# Google results as at 2012-06-04 #
# 11 for intitle:"Little Poll Admin Center" "The Amazing Little Poll Admin Center"
# Dorks #
dorks [
'intitle:"Little Poll Admin Center" "The Amazing Little Poll Admin Center"'
]
# Matches #
matches [
# ./lp_admin.php # Admin Page # h1 Heading # Version Detection
{ :version=>/<h1>The Amazing Little Poll Admin Center v([^<]+)<\/h1>/ },
# ./lp_admin.php # Admin Page # Form
{ :text=>'<form action="lp_admin.php" method="post" name="form0">Admin Password:<input type="hidden" name="adminstep" value="1"><input type="Password" name="pwd" size="20"><br><input type="Submit" value="OK"></form>' },
# ./lp_settings.inc # Password Detection
{ :url=>"lp_settings.inc", :string=>/\/\/ Change this password so no one else can access the lp_admin\.php via the web\s+\$pwd="([^"]+)";/ },
# Set-Cookie # pollidcookie
{ :search=>"headers[set-cookie]", :regexp=>/pollidcookie=/ },
]
end
|
