mirror of
https://github.com/urbanadventurer/WhatWeb
synced 2026-06-21 14:12:19 +00:00
Andrew Horton
70 lines
2.4 KiB
Ruby
70 lines
2.4 KiB
Ruby
##
|
|
# This file is part of WhatWeb and may be subject to
|
|
# redistribution and commercial restrictions. Please see the WhatWeb
|
|
# web site for more information on licensing and terms of use.
|
|
# https://morningstarsecurity.com/research/whatweb
|
|
##
|
|
Plugin.define do
|
|
name "QCubed-Development-Framework"
|
|
authors [
|
|
"Brendan Coles <bcoles@gmail.com>", # 2011-03-14
|
|
]
|
|
version "0.1"
|
|
description "The Qcodo Development Framework is an open-source PHP framework that focuses on freeing developers from unnecessary tedious, mundane coding."
|
|
website "http://www.qcodo.com/"
|
|
|
|
# Google results as at 2011-03-14 #
|
|
# 11 for "qcodo/_devtools/codegen.php" intitle:"Development Framework - Start Page"
|
|
# 100 results for intitle:"PHP Error" "Qcubed Version" "PHP Version"
|
|
|
|
# Dorks #
|
|
dorks [
|
|
'"qcodo/_devtools/codegen.php" intitle:"Development Framework - Start Page"',
|
|
'intitle:"PHP Error" "Qcubed Version" "PHP Version"'
|
|
]
|
|
|
|
|
|
|
|
# Matches #
|
|
matches [
|
|
|
|
# Version Detection
|
|
{ :version=>/<div id="codeVersion">QCubed Development Framework ([^\(]+) \([^\)]+\)<\/div>/ },
|
|
|
|
{ :version=>/<b>PHP Version:<\/b> [^;]+; <b>Zend Engine Version:<\/b> [^;]+; <b>QCubed Version:<\/b> ([^\(]+) \([^\(]+\)<br \/>/ },
|
|
|
|
]
|
|
|
|
# Passive #
|
|
passive do
|
|
m=[]
|
|
|
|
# Detect Title
|
|
if @body =~ /<title>QCubed Development Framework - Start Page<\/title>/
|
|
|
|
# Version Detection
|
|
m << { :version=>@body.scan(/<div class="title_action">QCubed Development Framework ([^\(]+) \([^\)]+\)<\/div>/) } if @body =~ /<div class="title_action">QCubed Development Framework ([^\(]+) \([^\)]+\)<\/div>/
|
|
|
|
# Extract DB Credentials
|
|
if @body =~ /<li>QApplication::\$ServerAddress = "([^"]+)"<\/li><li>QApplication::\$Database\[1\] = array \([\r\n] 'adapter' => '([^']+)',[\r\n] 'server' => '([^']+)',[\r\n] 'port' => '?([^'^,]+)'?,[\r\n] 'database' => '([^']+)',[\r\n] 'username' => '([^']+)',[\r\n] 'password' => '([^']+)',[\r\n] 'profiling' => (false|true),/
|
|
|
|
db=@body.scan(/<li>QApplication::\$ServerAddress = "([^"]+)"<\/li><li>QApplication::\$Database\[1\] = array \([\r\n] 'adapter' => '([^']+)',[\r\n] 'server' => '([^']+)',[\r\n] 'port' => '?([^'^,]+)'?,[\r\n] 'database' => '([^']+)',[\r\n] 'username' => '([^']+)',[\r\n] 'password' => '([^']+)',[\r\n] 'profiling' => (false|true),/)
|
|
|
|
# Database
|
|
m << { :string=>"Database:"+db[0][4] }
|
|
|
|
# Account
|
|
m << { :account=>db[0][5]+":"+db[0][6]+"@"+db[0][2]+":"+db[0][3] }
|
|
|
|
end
|
|
|
|
end
|
|
|
|
# Return passive matches
|
|
m
|
|
|
|
end
|
|
|
|
end
|
|
|