1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# https://morningstarsecurity.com/research/whatweb
##
Plugin.define do
name "POST-Parameters"
authors [
"Brendan Coles <bcoles@gmail.com>", # 2011-04-10
]
version "0.1"
description "This plugin extracts the form post URL as well as all 'id' and 'name' parameters from <input>, <select> and <textarea> elements inside <form> elements which use the POST method. It cannot detect POST parameters used by asynchronous javascript. - More Info: http://en.wikipedia.org/wiki/POST_%28HTTP%29"
# Matches #
matches [
# URL Detection
{ :string=>/<form[^>]+action[\s]*=[\s]*["']([^'^"]+)[^>]+method[\s]*=[\s]*["']post["'][^>]*>/ },
{ :string=>/<form[^>]+method[\s]*=[\s]*["']post["'][^>]+action[\s]*=[\s]*["']([^'^"]+)[^>]*>/ },
]
# Passive #
passive do
m=[]
# Form Detection
if @body =~ /<form[^>]+method[\s]*=[\s]*["']post["'][^>]*>.+<\/form>/im
@body.scan(/<form[^>]+method[\s]*=[\s]*["']post["'][^>]*>(.+)<\/form>/im).to_s.scan(/<(input|select|textarea)[^>]+(name|id)[\s]*=[\s]*["']([^'^"]+)[^>]*>/i).each do |p|
m << { :module=>p[2] }
end
end
# Return passive matches
m
end
end
|
