mirror of
https://github.com/urbanadventurer/WhatWeb
synced 2026-06-21 14:12:19 +00:00
Andrew Horton
51 lines
1.4 KiB
Ruby
51 lines
1.4 KiB
Ruby
##
|
|
# This file is part of WhatWeb and may be subject to
|
|
# redistribution and commercial restrictions. Please see the WhatWeb
|
|
# web site for more information on licensing and terms of use.
|
|
# https://morningstarsecurity.com/research/whatweb
|
|
##
|
|
Plugin.define do
|
|
name "OpenEMR"
|
|
authors [
|
|
"Brendan Coles <bcoles@gmail.com>", # 2011-10-20
|
|
]
|
|
version "0.1"
|
|
description "OpenEMR is a Free and Open Source electronic health records and medical practice management application."
|
|
website "http://www.open-emr.org/"
|
|
|
|
# ShodanHQ results as at 2011-10-20 #
|
|
# 1 for OpenEMR
|
|
|
|
# Google results as at 2011-10-20 #
|
|
# 38 for inurl:"interface/login/login_frame.php" ext:php
|
|
|
|
# Dorks #
|
|
dorks [
|
|
'inurl:"interface/login/login_frame.php" ext:php'
|
|
]
|
|
|
|
|
|
|
|
# Matches #
|
|
matches [
|
|
|
|
# GHDB # URL Pattern
|
|
{ :certainty=>25, :ghdb=>'inurl:interface/login/login_frame.php filetype:php' },
|
|
|
|
# Redirect Page
|
|
{ :regexp=>/<body ONLOAD="javascript:top\.location\.href='interface\/login\/login_frame\.php(\?site=default)?';">/ },
|
|
|
|
# Version Detection # /interface/login/login_title.php
|
|
{ :version=>/type="text\/css">[\s]+<\/head>[\s]+<body class="body_title">[\s]+<span class="title_bar">[^<]+ v([^\s^<]+)<\/span><br>/ },
|
|
|
|
# Login Page # Frameset # HTML Comment
|
|
{ :regexp=>/<!--<frame src="\/[^\/]+\/interface\/login\/filler\.php" name="Filler Bottom" scrolling="no" noresize frameborder="NO">-->/ },
|
|
|
|
# OpenEMR Cookie
|
|
{ :certainty=>75, :search=>"headers[set-cookie]", :regexp=>/OpenEMR=[^\s]+;/ },
|
|
|
|
]
|
|
|
|
end
|
|
|