mirror of
https://github.com/urbanadventurer/WhatWeb
synced 2026-06-21 14:12:19 +00:00
urbanadventurer
59 lines
1.9 KiB
Ruby
59 lines
1.9 KiB
Ruby
##
|
|
# This file is part of WhatWeb and may be subject to
|
|
# redistribution and commercial restrictions. Please see the WhatWeb
|
|
# web site for more information on licensing and terms of use.
|
|
# https://www.morningstarsecurity.com/research/whatweb
|
|
##
|
|
Plugin.define do
|
|
name "BASE"
|
|
authors [
|
|
"Brendan Coles <bcoles@gmail.com>", # 2011-12-05
|
|
]
|
|
version "0.1"
|
|
description "Basic Analysis and Security Engine (BASE) - front end for the snort IDS system."
|
|
website "http://base.secureideas.net/"
|
|
|
|
# Google as at 2011-12-05 #
|
|
# 8 for "The following pages will prompt you for set up information to finish the install of BASE." intitle:"Basic Analysis and Security Engine (BASE)"
|
|
# 7 for intitle:"Basic Analysis and Security Engine (BASE)" "Built on ACID by Roman Danyliw" "Login" "Password"
|
|
|
|
# Dorks #
|
|
dorks [
|
|
'"The following pages will prompt you for set up information to finish the install of BASE." intitle:"Basic Analysis and Security Engine (BASE)"',
|
|
'intitle:"Basic Analysis and Security Engine (BASE)" "Built on ACID by Roman Danyliw" "Login" "Password"'
|
|
]
|
|
|
|
|
|
|
|
# Matches #
|
|
matches [
|
|
|
|
# ./setup/*.php # HTML Comment
|
|
{ :text=>'<!-- Basic Analysis and Security Engine (BASE) -->' },
|
|
|
|
# ./setup/*.php # HTML Comment # Version Detection
|
|
{ :version=>/<!-- Basic Analysis and Security Engine \(BASE\) ([\d\.]+ \([^\)]+\)) -->/ },
|
|
|
|
]
|
|
|
|
# Passive #
|
|
passive do
|
|
m=[]
|
|
|
|
# ./setup/index.php # PHP Version Detection
|
|
if @body =~ /<tr><td class="setupKey" width="50%">Config Writeable:<\/td><td class="setupValue"><font color='#(336600|FF0000)'>(Yes|No)<\/font><\/td<\/tr>[\s]+<tr><td class="setupKey" width="50%">PHP Version:<\/td><td class="setupValue"><font color='#336600'>([^<]+)<\/font><\/td<\/tr>/
|
|
m << { :string=>"PHP/#{$3}" }
|
|
end
|
|
|
|
# ./help/base_setup_help.php # Version and Path Detection
|
|
if @body =~ /<!-- BASE_path = (.+)[\s]+BASE_urlpath = \/.*[\s]+BASE_VERSION = (.+)[\s]+-->/
|
|
m << { :filepath=>"#{$1}" }
|
|
m << { :version =>"#{$2}" }
|
|
end
|
|
|
|
# Return passive matches
|
|
m
|
|
end
|
|
end
|
|
|