mirror of
https://github.com/urbanadventurer/WhatWeb
synced 2026-06-21 14:12:19 +00:00
urbanadventurer
45 lines
1.3 KiB
Ruby
45 lines
1.3 KiB
Ruby
##
|
|
# This file is part of WhatWeb and may be subject to
|
|
# redistribution and commercial restrictions. Please see the WhatWeb
|
|
# web site for more information on licensing and terms of use.
|
|
# https://www.morningstarsecurity.com/research/whatweb
|
|
##
|
|
Plugin.define do
|
|
name "POST-Parameters"
|
|
authors [
|
|
"Brendan Coles <bcoles@gmail.com>", # 2011-04-10
|
|
]
|
|
version "0.1"
|
|
description "This plugin extracts the form post URL as well as all 'id' and 'name' parameters from <input>, <select> and <textarea> elements inside <form> elements which use the POST method. It cannot detect POST parameters used by asynchronous javascript. - More Info: http://en.wikipedia.org/wiki/POST_%28HTTP%29"
|
|
|
|
|
|
|
|
# Matches #
|
|
matches [
|
|
|
|
# URL Detection
|
|
{ :string=>/<form[^>]+action[\s]*=[\s]*["']([^'^"]+)[^>]+method[\s]*=[\s]*["']post["'][^>]*>/ },
|
|
{ :string=>/<form[^>]+method[\s]*=[\s]*["']post["'][^>]+action[\s]*=[\s]*["']([^'^"]+)[^>]*>/ },
|
|
|
|
]
|
|
|
|
# Passive #
|
|
passive do
|
|
m=[]
|
|
|
|
# Form Detection
|
|
if @body =~ /<form[^>]+method[\s]*=[\s]*["']post["'][^>]*>.+<\/form>/im
|
|
|
|
@body.scan(/<form[^>]+method[\s]*=[\s]*["']post["'][^>]*>(.+)<\/form>/im).to_s.scan(/<(input|select|textarea)[^>]+(name|id)[\s]*=[\s]*["']([^'^"]+)[^>]*>/i).each do |p|
|
|
m << { :module=>p[2] }
|
|
end
|
|
|
|
end
|
|
|
|
# Return passive matches
|
|
m
|
|
end
|
|
|
|
end
|
|
|