mirror of
https://github.com/urbanadventurer/WhatWeb
synced 2026-06-21 14:12:19 +00:00
urbanadventurer
44 lines
1.6 KiB
Ruby
44 lines
1.6 KiB
Ruby
##
|
|
# This file is part of WhatWeb and may be subject to
|
|
# redistribution and commercial restrictions. Please see the WhatWeb
|
|
# web site for more information on licensing and terms of use.
|
|
# https://www.morningstarsecurity.com/research/whatweb
|
|
##
|
|
Plugin.define do
|
|
name "CloudFlare"
|
|
authors [
|
|
"Aung Khant <http://yehg.net/> & David P Robinson <david@intruder.io>", # 2011-02-04
|
|
"Andrew Horton", # v0.2 # 2016-04-23 # Moved patterns from passive function to matches[]. Change plugin name captilization.
|
|
"David P Robinson <david@intruder.io>", # v0.3 # 2016-05-10 # Added regex to detect CloudFlare email address protection feature.
|
|
]
|
|
version "0.3"
|
|
description "CloudFlare is a content delivery network. Its features include DDoS protection and Web Application Firewall functionality"
|
|
website "https://www.cloudflare.com/"
|
|
|
|
# Google results as at 2011-04-12 #
|
|
# 14 for "Performance & Security by Cloudflare"
|
|
|
|
# Dorks #
|
|
dorks [
|
|
'"Performance & Security by Cloudflare"'
|
|
]
|
|
|
|
|
|
|
|
# Matches #
|
|
matches [
|
|
|
|
{:name => 'access restricted iframe', :text => '<iframe frameborder="0" width="100%" height="100%" src="http://anti-virus.cloudflare.com/cdn-cgi/anti-virus-challenge?h='},
|
|
|
|
{:name => 'footer', :text => ' Performance & Security by <a id="FooterCloudFlare" href="https://www.cloudflare.com" target="_blank">CloudFlare</a>'},
|
|
|
|
{:search=>"headers[server]", :regexp => /cloudflare\-nginx/, :name=>"server header" },
|
|
|
|
{:search=>"headers[set-cookie]", :regexp => /__cfduid/, :name=>"__cfduid cookie" },
|
|
|
|
{:name => "email address protection", :regexp => /\/cdn-cgi\/l\/email-protection#[a-f0-9]{36}/ }
|
|
|
|
]
|
|
|
|
end
|