1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# https://morningstarsecurity.com/research/whatweb
##
Plugin.define do
name "crossdomain_xml"
authors [
"Brendan Coles <bcoles@gmail.com>", # 2011-01-09
]
version "0.1"
description "This plugin extracts allowed domain from crossdomain.xml"
# 61 results for ext:xml "allow-access-from domain" inurl:"crossdomain.xml"
# Matches #
matches [
# Default text
{ :text=>'<cross-domain-policy>', :path=>"crossdomain.xml" },
{ :text=>'<site-control permitted-cross-domain-policies="none"/>', :string=>"none", :module=>"Permit", :path=>"crossdomain.xml" },
# Extract allowed domains
{ :string=>/<allow-access-from domain="([^"]+)"/, :path=>"crossdomain.xml", :module=>"Allow" },
]
end
|
