mirror of
https://github.com/urbanadventurer/WhatWeb
synced 2026-06-21 14:12:19 +00:00
Andrew Horton
104 lines
3.5 KiB
Ruby
104 lines
3.5 KiB
Ruby
##
|
|
# This file is part of WhatWeb and may be subject to
|
|
# redistribution and commercial restrictions. Please see the WhatWeb
|
|
# web site for more information on licensing and terms of use.
|
|
# https://morningstarsecurity.com/research/whatweb
|
|
##
|
|
Plugin.define do
|
|
name "XAMPP"
|
|
authors [
|
|
"Brendan Coles <bcoles@gmail.com>", # 2011-01-21
|
|
# v0.2 # 2011-01-24 # Updated version detection. Added match for 403 error page.
|
|
# v0.3 # 2011-03-06 # Updated OS detection.
|
|
"Andrew Horton", # v0.4 # 2019-07-10 # Fix warning: character class has duplicated range
|
|
]
|
|
version "0.4"
|
|
description "XAMPP is an easy to install Apache distribution containing MySQL, PHP and Perl. XAMPP is really very easy to install and to use - just download, extract and start."
|
|
website "http://www.apachefriends.org/en/xampp.html"
|
|
|
|
# ShodanHQ results as at 2011-01-21 #
|
|
# 21,462 for location xampp
|
|
|
|
# Google results as at 2011-01-21 #
|
|
# 15 for "You have successfully installed XAMPP on this system!" intitle:"XAMPP Version"
|
|
# 2 image results for inurl:"head-macosx.gif" xampp
|
|
# 3 image results for inurl:"head-windows.gif" xampp
|
|
|
|
# Dorks #
|
|
dorks [
|
|
'"You have successfully installed XAMPP on this system!" intitle:"XAMPP Version"'
|
|
]
|
|
|
|
|
|
|
|
# Matches #
|
|
matches [
|
|
|
|
# Default meta author
|
|
{ :text=>'<meta name="author" content="Kai Oswald Seidler">', :certainty=>75 },
|
|
|
|
# Version Detection # Default title
|
|
{ :version=>/<title>XAMPP Version ([^\r\n<]+)[\s]*<\/title>/ },
|
|
|
|
# OS Detection # Default title
|
|
{ :os=>/<title>XAMPP for ([^\r\n<]{5,8}) [\d\.a-z]{3,6}[\s]*<\/title>/ },
|
|
|
|
# Windows # Default logo
|
|
{ :url=>"img/head-windows.gif", :md5=>"567ebe64625942cbb8244eca918b06a0", :os=>"Windows" },
|
|
|
|
# Linux # Default logo
|
|
{ :url=>"img/head-linux.jpg", :md5=>"bca095ec432fe08f90866d2e6c149590", :os=>"Linux" },
|
|
|
|
# Mac OSX # Default logo
|
|
{ :url=>"img/head-macosx.gif", :md5=>"1fbd850a328026104cd7caa9e3bdaf4e", :os=>"Mac OSX" },
|
|
{ :url=>"img/head-macosx.gif", :md5=>"df859a3c31b7ed2b75d78f78889107b2", :os=>"Mac OSX" },
|
|
|
|
# Solaris # Default logo
|
|
{ :url=>"img/head-solaris.gif", :md5=>"b18490e1a42d7293cbca353100d6d787", :os=>"Solaris" },
|
|
|
|
# 403 Error page
|
|
{ :text=>'<p style="margin-left: 2.6em; font-size: 1.2em; color: red;">New XAMPP security concept:</p>' },
|
|
|
|
]
|
|
|
|
# Passive #
|
|
passive do
|
|
m=[]
|
|
|
|
# HTTP Redirect Location #
|
|
m << { :certainty=>25 } if @headers["location"] =~ /^http:\/\/[\d\.a-z]{1,256}\/xampp\/$/i
|
|
|
|
m
|
|
end
|
|
|
|
# An aggressive plugin can get more details from :
|
|
# /xampp/start.php # Operating System
|
|
# /xampp/phpinfo.php # phpinfo()
|
|
# /xampp/navi.php # Installed Apps (phpMyAdmin, Webalizer, FileZilla, etc)
|
|
|
|
# Aggressive #
|
|
aggressive do
|
|
m=[]
|
|
|
|
# Extract details from /phpinfo.php
|
|
target = URI.join(@base_uri.to_s,"/xampp/phpinfo.php").to_s
|
|
status,url,ip,body,headers=open_target(target)
|
|
|
|
# Check if the document is a valid XAMPP phpinfo() page
|
|
if body =~ /<title>phpinfo\(\)<\/title>/ and body =~ /XAMPP/i and (body =~ /<h1 class="p">PHP Version [^<]{3,40}<\/h1>/ or body =~ /<h1>PHP Version [^<]{3,40}<\/h1>/)
|
|
|
|
# Extract PHP Version
|
|
m << { :string=>"PHP:"+body.scan(/<h1 class="p">PHP Version ([^<]{3,40})<\/h1>/).flatten.first } if body =~ /<h1 class="p">PHP Version [^<]{3,40}<\/h1>/
|
|
m << { :string=>"PHP:"+body.scan(/<h1>PHP Version ([^<]{3,40})<\/h1>/).flatten.first } if body =~ /<h1>PHP Version [^<]{3,40}<\/h1>/
|
|
|
|
# OS Detection
|
|
m << { :os=>body.scan(/<tr><td class="e">System <\/td><td class="v">([^<]{4,256})[\s]?<\/td><\/tr>/).flatten.first } if body =~ /<tr><td class="e">System <\/td><td class="v">[^<]{4,256}[\s]?<\/td><\/tr>/
|
|
|
|
end
|
|
|
|
m
|
|
end
|
|
|
|
end
|
|
|