intrigue-ident 0.46 → 0.47

data/lib/checks/hp.rb

@@ -3,7 +3,7 @@ module Ident
 module Check
     class Hp < Intrigue::Ident::Check::Base
 
-      def generate_checks(uri)
+      def generate_checks(url)
         [
           {
             :name => "HP Printer",
@@ -12,7 +12,7 @@ module Check
             :type => :content_headers,
             :content => /server: HP-ChaiSOE\/1.0/i,
             :examples => ["http://69.162.52.20:80"],
-            :paths => ["#{uri}"]
+            :paths => ["#{url}"]
           }
         ]
       end

data/lib/checks/jenkins.rb

@@ -3,7 +3,7 @@ module Ident
 module Check
     class Jenkins < Intrigue::Ident::Check::Base
 
-      def generate_checks(uri)
+      def generate_checks(url)
         [
           { # might need to be its own, but haven't seen it yet outside jenkins
             :name => "Hudson",
@@ -12,7 +12,7 @@ module Check
             :type => :content_headers,
             :content => /x-hudson/i,
             :dynamic_version => lambda { |x| x["details"]["headers"].select{|y| y =~ /x-hudson/}.split(":").last },
-            :paths => ["#{uri}"]
+            :paths => ["#{url}"]
           },
           {
             :name => "Jenkins",
@@ -20,7 +20,7 @@ module Check
             :version => nil,
             :type => :content_headers,
             :content => /X-Jenkins-Session/i,
-            :paths => ["#{uri}"]
+            :paths => ["#{url}"]
           },
           {
             :name => "Jenkins",
@@ -29,7 +29,7 @@ module Check
             :type => :content_headers,
             :content => /x-jenkins/i,
             :dynamic_version => lambda { |x|  x["details"]["headers"].select{|y| y =~ /x-jenkins/}.split(":").last },
-            :paths => ["#{uri}"]
+            :paths => ["#{url}"]
           }
         ]
       end

data/lib/checks/joomla.rb

@@ -3,7 +3,7 @@ module Ident
 module Check
     class Joomla < Intrigue::Ident::Check::Base
 
-      def generate_checks(uri)
+      def generate_checks(url)
         [
           {
             :name => "Joomla!",
@@ -12,7 +12,7 @@ module Check
             :version => nil,
             :content => /files_joomla/i,
             :references => ["https://twitter.com/GreyNoiseIO/status/987547246538391552"],
-            :paths => ["#{uri}/administrator/manifests/files/joomla.xml"]
+            :paths => ["#{url}/administrator/manifests/files/joomla.xml"]
           }
         ]
       end

data/lib/checks/limesuvey.rb

@@ -3,7 +3,7 @@ module Ident
 module Check
     class LimeSurvey < Intrigue::Ident::Check::Base
 
-      def generate_checks(uri)
+      def generate_checks(url)
         [
           {
             :name => "LimeSurvey",
@@ -11,7 +11,7 @@ module Check
             :type => :content_body,
             :version => nil,
             :content => /Donate to LimeSurvey/,
-            :paths => ["#{uri}"]
+            :paths => ["#{url}"]
           }
         ]
       end

data/lib/checks/lithium.rb

@@ -3,7 +3,7 @@ module Ident
 module Check
     class Lithium < Intrigue::Ident::Check::Base
 
-      def generate_checks(uri)
+      def generate_checks(url)
         [
           {
             :name => "Lithum ",
@@ -11,7 +11,7 @@ module Check
             :type => :content_cookies,
             :version => nil,
             :content => /LithiumVisitor/i,
-            :paths => ["#{uri}"]
+            :paths => ["#{url}"]
           },
           {
             :name => "Lithum",
@@ -19,7 +19,7 @@ module Check
             :type => :content_cookies,
             :version => nil,
             :content => /LiSESSIONID/i,
-            :paths => ["#{uri}"]
+            :paths => ["#{url}"]
           }
         ]
       end

data/lib/checks/lotus.rb

@@ -3,7 +3,7 @@ module Ident
 module Check
     class Lotus < Intrigue::Ident::Check::Base
 
-      def generate_checks(uri)
+      def generate_checks(url)
         [
           {
             :name => "Lotus Domino",
@@ -12,7 +12,7 @@ module Check
             :version => nil,
             :content => /server: Lotus-Domino/i,
             :examples => ["https://12.237.144.251:443"],
-            :paths => ["#{uri}"]
+            :paths => ["#{url}"]
           }
         ]
       end

data/lib/checks/magento.rb

@@ -3,7 +3,7 @@ module Ident
 module Check
     class Magento < Intrigue::Ident::Check::Base
 
-      def generate_checks(uri)
+      def generate_checks(url)
         [
           {
             :name => "Magento",
@@ -11,7 +11,7 @@ module Check
             :type => :content_body,
             :version => nil,
             :content => /Mage.Cookies.path/i,
-            :paths => ["#{uri}"]
+            :paths => ["#{url}"]
           }
         ]
       end

data/lib/checks/mcafee.rb

@@ -3,7 +3,7 @@ module Ident
 module Check
     class Mcafee < Intrigue::Ident::Check::Base
 
-      def generate_checks(uri)
+      def generate_checks(url)
         [
           {
             :name => "McAfee EPolicy Orchestrator",
@@ -11,7 +11,7 @@ module Check
             :type => :content_body,
             :version => nil,
             :content => /McAfee Agent Activity Log/i,
-            :paths => ["#{uri}"]
+            :paths => ["#{url}"]
           }
         ]
       end

data/lib/checks/mediawiki.rb

@@ -3,7 +3,7 @@ module Ident
 module Check
     class MediaWiki < Intrigue::Ident::Check::Base
 
-      def generate_checks(uri)
+      def generate_checks(url)
         [
           {
             :name => "MediaWiki",
@@ -11,7 +11,7 @@ module Check
             :type => :content_body,
             :version => nil,
             :content => /<a href="\/\/www.mediawiki.org\/">Powered by MediaWiki<\/a>/,
-            :paths => ["#{uri}"]
+            :paths => ["#{url}"]
           }
         ]
       end
@@ -24,7 +24,7 @@ module Check
 
 =begin
 all_checks = [{
-  :uri => "#{uri}",
+  :url => "#{url}",
   :checklist => [
   {
     :name => "Yoast Wordpress SEO Plugin", # won't be used if we have

data/lib/checks/microsoft.rb

@@ -3,15 +3,59 @@ module Ident
 module Check
     class Microsoft < Intrigue::Ident::Check::Base
 
-      def generate_checks(uri)
+      def generate_checks(url)
         [
+          {
+            :name => "Microsoft ASP.NET",
+            :description => "Microsoft ASP.NET",
+            :version => nil,
+            :type => :content_headers,
+            :content => /x-powered-by: ASP.NET/,
+            :examples => ["http://info.nucor.com:80"],
+            :paths => ["#{url}"]
+          },
           {
             :name => "Microsoft Forefront TMG",
             :description => "Microsoft Forefront Threat Management Gateway",
             :version => nil,
             :type => :content_cookies,
             :content => /<title>Microsoft Forefront TMG/,
-            :paths => ["#{uri}"]
+            :paths => ["#{url}"]
+          },
+          {
+            :name => "Microsoft Forefront TMG",
+            :description => "Microsoft Forefront Threat Management Gateway",
+            :version => nil,
+            :type => :content_headers,
+            :content => /via:\ 1.1\ TMGSRVR/,
+            :paths => ["#{url}"]
+          },
+          {
+            :name => "Microsoft IIS 6.0",
+            :description => "Microsoft IIS 6.0",
+            :version => nil,
+            :type => :content_headers,
+            :content => /server: Microsoft-IIS\/6.0/,
+            :examples => ["http://info.nucor.com:80"],
+            :paths => ["#{url}"]
+          },
+          {
+            :name => "Microsoft IIS 7.0",
+            :description => "Microsoft IIS 7.0",
+            :version => nil,
+            :type => :content_headers,
+            :content => /server: Microsoft-IIS\/7.0/,
+            :examples => ["http://205.145.65.110:80"],
+            :paths => ["#{url}"]
+          },
+          {
+            :name => "Microsoft IIS 7.5",
+            :description => "Microsoft IIS 7.5",
+            :version => nil,
+            :type => :content_headers,
+            :content => /server: Microsoft-IIS\/7.5/,
+            :examples => ["http://168.75.243.138:80"],
+            :paths => ["#{url}"]
           },
           {
             :name => "Microsoft IIS 8.0",
@@ -20,7 +64,16 @@ module Check
             :type => :content_body,
             :content => /<img src=\"iis-8.png\"/,
             :examples => ["http://66.162.2.18:80"],
-            :paths => ["#{uri}"]
+            :paths => ["#{url}"]
+          },
+          {
+            :name => "Microsoft IIS 8.0",
+            :description => "Microsoft IIS 8.0",
+            :version => nil,
+            :type => :content_headers,
+            :content => /server: Microsoft-IIS\/8.0/,
+            :examples => ["http://freightmanager.nucornet.com:80"],
+            :paths => ["#{url}"]
           },
           {
             :name => "Microsoft IIS 8.5",
@@ -29,7 +82,29 @@ module Check
             :type => :content_body,
             :content => /<img src=\"iis-85.png\"/,
             :examples => ["http://103.1.221.151:80"],
-            :paths => ["#{uri}"]
+            :paths => ["#{url}"]
+          },
+          {
+            :name => "Microsoft IIS Unauthorized (403)",
+            :description => "Microsoft IIS Unauthorized",
+            :tags => ["error_page"],
+            :version => nil,
+            :type => :content_body,
+            :hide => true,
+            :content => /Error Code: 403 Forbidden. The server denied the specified Uniform Resource Locator \(URL\)/,
+            :examples => ["http://199.233.74.45:80"],
+            :paths => ["#{url}"]
+          },
+          {
+            :name => "Microsoft IIS Missing Resource (404)",
+            :description => "Microsoft IIS Missing Resource (404)",
+            :tags => ["error_page"],
+            :version => nil,
+            :type => :content_body,
+            :hide => true,
+            :content => /HTTP Error 404. The requested resource is not found./,
+            :examples => ["http://66.162.2.74:80"],
+            :paths => ["#{url}"]
           },
           {
             :name => "Microsoft Outlook Web Access",
@@ -37,8 +112,8 @@ module Check
             :version => nil,
             :type => :content_headers,
             :content => /x-owa-version/,
-            :dynamic_version => lambda { |x|  x["details"]["headers"].select{|y| y =~ /x-owa-version/}.split(":").last },
-            :paths => ["#{uri}"]
+            :dynamic_version => lambda { |x|  x["details"]["headers"].select{|y| y =~ /x-owa-version/}.first.split(":").last },
+            :paths => ["#{url}"]
           },
           {
             :name => "Microsoft Outlook Web Access",
@@ -46,8 +121,11 @@ module Check
             :version => nil,
             :type => :content_body,
             :content => /OwaPage\ =\ ASP.auth_logon_aspx/,
-            :dynamic_version => lambda { |x|  x["details"]["hidden_response_data"].match(/href=\"\/owa\/auth\/(.*)\/themes\/resources\/favicon.ico/).captures.first},
-            :paths => ["#{uri}"]
+            :dynamic_version => lambda { |x|
+              m = x["details"]["hidden_response_data"].match(/href=\"\/owa\/auth\/(.*)\/themes\/resources\/favicon.ico/)
+              return m.captures.first if m
+            },
+            :paths => ["#{url}"]
           },
           {
             :name => "Microsoft Generic Error - 403",
@@ -57,7 +135,7 @@ module Check
             :type => :content_body,
             :hide => true,
             :content => /403 Forbidden. The server denied the specified Uniform Resource Locator (URL)/,
-            :paths => ["#{uri}"]
+            :paths => ["#{url}"]
           },
           {
             :name => "Microsoft Generic Error - 503",
@@ -67,7 +145,7 @@ module Check
             :type => :content_body,
             :hide => true,
             :content => /HTTP Error 503. The service is unavailable./,
-            :paths => ["#{uri}"]
+            :paths => ["#{url}"]
           }
         ]
       end

data/lib/checks/nagios.rb

@@ -3,7 +3,7 @@ module Ident
 module Check
     class Nagios < Intrigue::Ident::Check::Base
 
-      def generate_checks(uri)
+      def generate_checks(url)
         [
           {
             :name => "Nagios",
@@ -11,7 +11,7 @@ module Check
             :version => nil,
             :type => :content_headers,
             :content => /nagios/i,
-            :paths => ["#{uri}"]
+            :paths => ["#{url}"]
           }
         ]
       end

data/lib/checks/nginx.rb

@@ -0,0 +1,24 @@
+module Intrigue
+module Ident
+module Check
+    class Nginx < Intrigue::Ident::Check::Base
+
+      def generate_checks(url)
+        [
+          {
+            :name => "Nginx",
+            :description => "Nginx",
+            :version => nil,
+            :type => :content_headers,
+            :content => /server: nginx/i,
+            :dynamic_version => lambda { |x| x["details"]["headers"].select{|h| h=~/nginx/}.first.split("/").last },
+            :examples => ["https://api.appfire.com:443"],
+            :paths => ["#{url}"]
+          }
+        ]
+      end
+
+    end
+  end
+  end
+  end

data/lib/checks/oracle.rb

@@ -3,7 +3,7 @@ module Ident
 module Check
     class Oracle < Intrigue::Ident::Check::Base
 
-      def generate_checks(uri)
+      def generate_checks(url)
         [
           {
             :name => "Oracle Glassfish",
@@ -15,7 +15,7 @@ module Check
             :hide => true,
             :dynamic_version => lambda { |x| x["details"]["headers"].join("\n").match(/Sun GlassFish Enterprise Server v([\d\.])/).captures[0] },
             :examples => ["http://52.4.12.185/"],
-            :paths => ["#{uri}"]
+            :paths => ["#{url}"]
           },
           {
             :name => "Oracle Glassfish",
@@ -27,7 +27,7 @@ module Check
             :hide => true,
             :dynamic_version => lambda { |x| x["details"]["headers"].join("\n").match(/GlassFish Server Open Source Edition\s+([\d\.]+)$/).captures[0] },
             :examples => ["http://52.2.97.57:80"],
-            :paths => ["#{uri}"]
+            :paths => ["#{url}"]
           }
         ]
       end

data/lib/checks/pardot.rb

@@ -3,7 +3,7 @@ module Ident
 module Check
     class Pardot < Intrigue::Ident::Check::Base
 
-      def generate_checks(uri)
+      def generate_checks(url)
         [
           {
             :name => "Pardot",
@@ -11,7 +11,7 @@ module Check
             :version => nil,
             :type => :content_cookies,
             :content => /pardot/i,
-            :paths => ["#{uri}"]
+            :paths => ["#{url}"]
           }
         ]
       end

data/lib/checks/pfsense.rb

@@ -3,7 +3,7 @@ module Ident
 module Check
     class Pfsense < Intrigue::Ident::Check::Base
 
-      def generate_checks(uri)
+      def generate_checks(url)
         [
           {
             :name => "pfSense Firewall",
@@ -14,7 +14,7 @@ module Check
             :version => nil,
             :type => :content_body,
             :content => /Login to pfSense/,
-            :paths => ["#{uri}"]
+            :paths => ["#{url}"]
           }
         ]
       end