mirror of
https://github.com/urbanadventurer/WhatWeb
synced 2026-06-21 14:12:19 +00:00
Andrew Horton
29aa301273
Changelog:
* Updated version from 0.5.5 to 0.6.1
* Improved SSL/TLS security with comprehensive cipher suite support (TLSv1, TLSv1.1, TLSv1.2, SSLv3, SSLv2)
- Added SSL_ATTRIBUTES constant for verify_mode
- Replaced dynamic SSL parameter collection with explicit SSLContext configuration
- Set verify_mode to VERIFY_NONE for maximum compatibility
- Enabled negotiation of all SSL/TLS versions including legacy SSLv2/SSLv3
* Enhanced HTTPS connection handling with optimized verification settings
- Cleared minimum version restrictions and disabled protocol exclusion flags
- Added fallback handling for different OpenSSL configurations
* Added dual-protocol feature: simple hostnames (without paths or ports) are now scanned using both HTTP and HTTPS protocols
- Automatically creates and tests both HTTP and HTTPS versions of simple hostnames
- Shows informational message when dual-protocol scanning is performed
- Intelligently detects and avoids duplicate URL scanning with redirect handling
* Added robust input validation and error handling
- Automatically aborts processing after 10 consecutive parsing errors
- Prevents wasted resources when processing invalid data sources
- Provides helpful error messages to guide users in troubleshooting input issues
- Handles various error cases including malformed URLs and non-URL input data
* Improved dependency management with Bundler group support
- Reorganized Gemfile with proper optional group definitions for mongo and rchardet
- Added clear installation instructions for optional dependencies
- Set explicit version constraints for test dependencies
- Added support for older Bundler versions through GEMFILE_GROUPS environment variable
* Expanded documentation for optional dependencies
- Added detailed installation instructions for MongoDB support
- Added clear steps for character set detection configuration
- Provided combined installation commands for all optional features
- Improved explanation of performance implications
This release introduces three new search contexts for plugin authors to use:
- uri.path
- uri.query
- uri.extension
An example of how to use this is from the PHP plugin.
```
{ :name=>"File extension", :regexp=>/^(php|phtml|php3|php4|php5|phps)$/, :search=>"uri.extension" }
```
* #311 - JSON Logging fails... UTF-8 can't modify frozen String (@juananpe)
* Refactored Helper::convert_to_utf8. Droped Ruby 2.0 support (@urbanadventurer)
* Added new search contexts for plugins: uri.path, uri.query, uri.extension (@urbanadventurer)
* Plex Media Server (@urbanadventurer)
* Meta-Facebook-Infrastructure (@urbanadventurer)
* Netflix-Platform (@urbanadventurer)
* VKontakte-Platform (@urbanadventurer)
* Distributed-Tracing (@urbanadventurer)
* Modern-Security-Headers (@urbanadventurer)
* Baidu-Platform (@urbanadventurer)
* Alibaba-Aliyun (@urbanadventurer)
* Weibo-Platform (@urbanadventurer)
* Adobe-Flash (@urbanadventurer)
* ASP_NET (@urbanadventurer)
* ColdFusion (@urbanadventurer)
* Drupal (@gboddin)
* Java (@urbanadventurer)
* Perl (@urbanadventurer)
* PHP (@urbanadventurer)
* Python (@urbanadventurer)
* Ruby (@urbanadventurer)
* TYPO3 (@definity)
* WordPress (@juananpe)
* Shopify (enhanced HTTP header detection) (@urbanadventurer)
* CloudFlare (enhanced with CF-RAY and other headers) (@urbanadventurer)
* CloudFront (renamed to Amazon-CloudFront and enhanced) (@urbanadventurer)
* Tengine Web Server (added Alibaba-specific headers) (@urbanadventurer)
* Content-Security-Policy (added modern CSP headers) (@urbanadventurer)
* Azure (renamed to Microsoft-Azure and enhanced) (@urbanadventurer)
112 lines
3.2 KiB
Ruby
112 lines
3.2 KiB
Ruby
# Copyright 2009 to 2025 Andrew Horton and Brendan Coles
|
|
#
|
|
# This file is part of WhatWeb.
|
|
#
|
|
# WhatWeb is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 2 of the License, or
|
|
# at your option) any later version.
|
|
#
|
|
# WhatWeb is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with WhatWeb. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
class HTTP_Status
|
|
# return HTTP status code as a string
|
|
def self.code(number)
|
|
number = number.to_s
|
|
|
|
abort('HTTP_Status must be initialized') unless @status_codes
|
|
|
|
if @status_codes[number]
|
|
@status_codes[number]
|
|
else
|
|
'Unassigned'
|
|
end
|
|
end
|
|
|
|
# Status code list from:
|
|
# https://raw.githubusercontent.com/Mr-Pi/httpStatusCodes/master/priv/http-status-codes-1.csv
|
|
def self.initialize
|
|
@status_codes = {}
|
|
|
|
text = "
|
|
100,Continue,[RFC2616]
|
|
101,Switching Protocols,[RFC2616]
|
|
102,Processing,[RFC2518]
|
|
103-199,Unassigned,
|
|
200,OK,[RFC2616]
|
|
201,Created,[RFC2616]
|
|
202,Accepted,[RFC2616]
|
|
203,Non-Authoritative Information,[RFC2616]
|
|
204,No Content,[RFC2616]
|
|
205,Reset Content,[RFC2616]
|
|
206,Partial Content,[RFC2616]
|
|
207,Multi-Status,[RFC4918]
|
|
208,Already Reported,[RFC5842]
|
|
209-225,Unassigned,
|
|
226,IM Used,[RFC3229]
|
|
227-299,Unassigned,
|
|
300,Multiple Choices,[RFC2616]
|
|
301,Moved Permanently,[RFC2616]
|
|
302,Found,[RFC2616]
|
|
303,See Other,[RFC2616]
|
|
304,Not Modified,[RFC2616]
|
|
305,Use Proxy,[RFC2616]
|
|
306,Reserved,[RFC2616]
|
|
307,Temporary Redirect,[RFC2616]
|
|
308,Permanent Redirect,[RFC-reschke-http-status-308-07]
|
|
309-399,Unassigned,
|
|
400,Bad Request,[RFC2616]
|
|
401,Unauthorized,[RFC2616]
|
|
402,Payment Required,[RFC2616]
|
|
403,Forbidden,[RFC2616]
|
|
404,Not Found,[RFC2616]
|
|
405,Method Not Allowed,[RFC2616]
|
|
406,Not Acceptable,[RFC2616]
|
|
407,Proxy Authentication Required,[RFC2616]
|
|
408,Request Timeout,[RFC2616]
|
|
409,Conflict,[RFC2616]
|
|
410,Gone,[RFC2616]
|
|
411,Length Required,[RFC2616]
|
|
412,Precondition Failed,[RFC2616]
|
|
413,Request Entity Too Large,[RFC2616]
|
|
414,Request-URI Too Long,[RFC2616]
|
|
415,Unsupported Media Type,[RFC2616]
|
|
416,Requested Range Not Satisfiable,[RFC2616]
|
|
417,Expectation Failed,[RFC2616]
|
|
422,Unprocessable Entity,[RFC4918]
|
|
423,Locked,[RFC4918]
|
|
424,Failed Dependency,[RFC4918]
|
|
425,Unassigned,
|
|
426,Upgrade Required,[RFC2817]
|
|
427,Unassigned,
|
|
428,Precondition Required,[RFC6585]
|
|
429,Too Many Requests,[RFC6585]
|
|
430,Unassigned,
|
|
431,Request Header Fields Too Large,[RFC6585]
|
|
432-499,Unassigned,
|
|
500,Internal Server Error,[RFC2616]
|
|
501,Not Implemented,[RFC2616]
|
|
502,Bad Gateway,[RFC2616]
|
|
503,Service Unavailable,[RFC2616]
|
|
504,Gateway Timeout,[RFC2616]
|
|
505,HTTP Version Not Supported,[RFC2616]
|
|
506,Variant Also Negotiates (Experimental),[RFC2295]
|
|
507,Insufficient Storage,[RFC4918]
|
|
508,Loop Detected,[RFC5842]
|
|
509,Unassigned,
|
|
510,Not Extended,[RFC2774]
|
|
511,Network Authentication Required,[RFC6585]
|
|
512-599,Unassigned,
|
|
"
|
|
text.scan(/^([0-9]+),([^,]+)/).each do |k, v|
|
|
@status_codes[k] = v
|
|
end
|
|
end
|
|
end
|