fingerprinter 0.1.5 → 0.1.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8f6821303bf8854c4b159cc1038bfb08af71d170b07a24e19376f49f88bba6ee
-  data.tar.gz: edd7faad955013acf5c94e897e4994e340baafc493c3f2c1bfccdb2bf7558f7c
+  metadata.gz: bc97915b45277081abb4d06cbd9463bc82b214be082bec3aaa0af5655f28026d
+  data.tar.gz: 782347d3a249269a1c543f1c94230e88b9183b2bf3a310b10c7df4a9ee73f3f7
 SHA512:
-  metadata.gz: 711d27cdd3329f07e6e24daa9400e36a8e8f62c6467870c0dc0309ed75bd1aa9713aaede490b9c882e91e1e69d8b9ccb0c20077f6e42a00353b03db685483078
-  data.tar.gz: 49b065930036587200a211e12337e67bd6a61643e0101c9e2ddb860bc5454542ce74fb33557a4ac830dfa27159410ea2317eee8f751ed49848265a8bc4834bb0
+  metadata.gz: fe3aef3a9410d4a932e8b12b3f57a51c0d4286ebe006b5f6d53146231e0537b9874f35237c51c88ce324d54382d0a0de8bd48db3de9c0b826c4728f3aa23946d
+  data.tar.gz: 04e0164fe28d9ada0ad3d2095bc12b1bfa66d2447ed2ef8748b747391403acd6f3bd130bce371105fb8dd28be0a22c2ae974e68d5de5eb49fb7be95c663d68a5

data/lib/fingerprinter/technologies/softwares/servicenow.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+# ServiceNow Detection
+class ServiceNow < Fingerprinter::Technologies
+  HEADERS_REGEX = {
+    'server' => /ServiceNow/,
+    'set-cookie' => /glide_user/
+  }.freeze
+
+  BODY_CONTENT_REGEX = [
+    /About ServiceNow/
+  ].freeze
+
+  def self.run(data)
+    return unless response_headers_check(data[:response], HEADERS_REGEX) || 
+                    title_detection(data[:doc], 'ServiceNow') || 
+                    whole_body_check(data[:response], BODY_CONTENT_REGEX)
+
+    'ServiceNow'
+  end
+end

data/lib/fingerprinter.rb

@@ -8,6 +8,11 @@ module Fingerprinter
   Dir[File.join(__dir__, 'fingerprinter', 'core/*.rb')].sort.each { |file| require file }
   Dir[File.join(__dir__, 'fingerprinter', 'utilities/*.rb')].sort.each { |file| require file }
 
+  EXCLUSIONS = %w[pass.diod.orange.com].freeze
+  WILDCARDS = [
+    ['Application is not available', 'The application is currently not serving requests at this endpoint']
+  ].freeze
+
   def self.http_client
     @http_client ||= HttpClient.new
   end
@@ -32,10 +37,13 @@ module Fingerprinter
 
     def run(urls)
       urls.each do |url|
+        next if EXCLUSIONS.any? { |exclusion| url.match?(exclusion) }
+
         response = get_response(url)
         next unless response
+        next if wildcard?(response)
 
-        url = Utilities::Urls.up_to_port(response.effective_url)
+        url = effective_url(response, url)
   
         responses = response.redirections
         responses << response
@@ -55,6 +63,13 @@ module Fingerprinter
 
     private
 
+    def wildcard?(response)
+      response_body = response.body
+      WILDCARDS.any? do |patterns|
+        patterns.all? { |pattern| response_body&.include?(pattern) }
+      end
+    end
+
     def get_response(url)
       response = nil
       3.times do
@@ -67,19 +82,31 @@ module Fingerprinter
       if stream_error?(response)
         return
       elsif timeout_without_scheme?(url, response)
-        url = "https://#{url}"
+        url = normalize_url(url)
         return get_response(url)
       end
       return if response&.code == 0
-      return response if same_scope?(url, response)
+      return response if response.redirections.empty? || same_scope?(url, response)
 
       response.redirections.first
     end
 
+    def effective_url(response, url)
+      effective_url = Utilities::Urls.up_to_port(response.effective_url)
+      effective_url.nil? ? normalize_url(url) : effective_url
+    end
+
+    def normalize_url(url)
+      url.start_with?('http') ? url : "https://#{url}"
+    end
+
     def same_scope?(url, response)
-      url = "https://#{url}" unless url.start_with?('http')
+      url = normalize_url(url)
+
+      base_host = Utilities::Urls.uri_parse(url)&.host
+      response_host = Utilities::Urls.uri_parse(response&.effective_url)&.host
 
-      Utilities::Urls.uri_parse(url)&.host == Utilities::Urls.uri_parse(response&.effective_url)&.host
+      base_host == response_host || 'www.' + base_host == response_host
     end
 
     def stream_error?(response)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: fingerprinter
 version: !ruby/object:Gem::Version
-  version: 0.1.5
+  version: 0.1.7
 platform: ruby
 authors:
 - Joshua MARTINELLE
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-07-11 00:00:00.000000000 Z
+date: 2024-07-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: concurrent-ruby
@@ -68,6 +68,7 @@ files:
 - lib/fingerprinter/technologies/softwares/apache_ofbiz.rb
 - lib/fingerprinter/technologies/softwares/f5_next_central_manager.rb
 - lib/fingerprinter/technologies/softwares/nexus_repository.rb
+- lib/fingerprinter/technologies/softwares/servicenow.rb
 - lib/fingerprinter/technologies/softwares/tinyproxy.rb
 - lib/fingerprinter/utilities/kb.rb
 - lib/fingerprinter/utilities/parser.rb