intrigue-ident 0.9.9 → 0.31

data/checks/http/squarespace.rb

@@ -1,41 +0,0 @@
-module Intrigue
-module Ident
-module Check
-class Squarespace < Intrigue::Ident::Check::Base
-
-  def generate_checks(url)
-    [
-      {
-        :type => "fingerprint",
-        :category => "service",
-        :tags => ["SaaS", "CMS"],
-        :vendor => "Squarespace",
-        :product => "Squarespace",
-        :match_details => "server header",
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content =>  /^Server: Squarespace$/i,
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "service",
-        :tags => ["SaaS", "CMS"],
-        :vendor => "Squarespace",
-        :product => "Squarespace",
-        :match_details => "squarespace missing page",
-        :version => nil,
-        :match_type => :content_body,
-        :match_content =>  /<h1>400 Bad Request<\/h1>[\n\s]+<p id=\"status-page\">/im,
-        :paths => ["#{url}"],
-        :inference => false,
-        :hide => true
-      }
-    ]
-  end
-
-end
-end
-end
-end

data/checks/http/stackpath.rb

@@ -1,29 +0,0 @@
-module Intrigue
-module Ident
-module Check
-class StackPath < Intrigue::Ident::Check::Base
-
-  def generate_checks(url)
-    [
-      {
-        :type => "fingerprint",
-        :category => "service",
-        :tags => ["CDN", "WAF"],
-        :vendor => "StackPath",
-        :product => "NetDNA",
-        :references => ["https://www.stackpath.com/products/cdn/"],
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content =>  /^server:\ NetDNA-cache\/[\d\.]{1,}$/,
-        :dynamic_version => lambda { |x| 
-          _first_header_capture(x,/^server:\ NetDNA-cache\/[\d\.]{1,}$/i) },
-        :hide => false,
-        :paths => ["#{url}"],
-        :inference => true
-      }
-    ]
-  end
-end
-end
-end
-end

data/checks/http/stibo_systems.rb

@@ -1,35 +0,0 @@
-module Intrigue
-module Ident
-module Check
-class StiboSystems < Intrigue::Ident::Check::Base
-
-  def generate_checks(url)
-    [
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Application Server"],
-        :vendor => "STIBO Systems",
-        :product =>"STEP",
-        :match_details =>"page title ",
-        :version => nil,
-        :references => [],
-        :dynamic_version => lambda { |x|
-          _first_body_capture(x,/<span id=\"versionname\">(.*)<\/span/i)
-        },
-        :dynamic_update => lambda { |x|
-          _first_body_capture(x,/<span id=\"versionfull\">(.*)<\/span/i)
-        },
-        :match_type => :content_title,
-        :match_content =>  /STEP by STIBO Systems/i,
-        :examples => ["<title>winc-prod-azure - STEP by STIBO Systems</title>"],
-        :paths => ["#{url}"],
-        :inference => true  # no CPEs on 20190310
-      }
-    ]
-  end
-
-end
-end
-end
-end

data/checks/http/subrion.rb

@@ -1,29 +0,0 @@
-module Intrigue
-module Ident
-module Check
-class SubrionCMS < Intrigue::Ident::Check::Base
-
-  def generate_checks(url)
-    [
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["CMS"],
-        :vendor => "Subrion",
-        :product => "Subrion CMS",
-        :references => ["https://subrion.org/"],
-        :version => nil,
-        :match_type => :content_body,
-        :match_content => /Subrion CMS/i,
-        :match_details => "Header match",
-        :hide => false,
-        :paths => ["#{url}"],
-        :inference => true
-      }
-    ]
-  end
-
-end
-end
-end
-end

data/checks/http/symantec.rb

@@ -1,27 +0,0 @@
-module Intrigue
-module Ident
-module Check
-class Symantec < Intrigue::Ident::Check::Base
-
-  def generate_checks(url)
-    [
-      {
-        :type => "fingerprint",
-        :category => "service",
-        :tags => ["Security","Javascript"],
-        :vendor =>"Symantec",
-        :product =>"Norton Secured Seal",
-        :references => ["https://www.websecurity.symantec.com/install-norton-secured-seal"],
-        :match_details =>"security seal",
-        :match_type => :content_body,
-        :match_content => /seal\.verisign\.com\/getseal\?host_name=/i,
-        :paths => ["#{url}"],
-        :inference => false
-      }
-    ]
-  end
-
-end
-end
-end
-end

data/checks/http/synacor.rb

@@ -1,26 +0,0 @@
-module Intrigue
-module Ident
-module Check
-class Synacor < Intrigue::Ident::Check::Base
-
-  def generate_checks(url)
-    [
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Productivity","COTS"],
-        :vendor =>"Synacor",
-        :product =>"Zimbra Collaboration Suite",
-        :match_details =>"login page for zimbra",
-        :match_type => :content_title,
-        :match_content =>  /Zimbra Web Client Sign In/i,
-        :paths => ["#{url}"],
-        :inference => false
-      }
-    ]
-  end
-
-end
-end
-end
-end

data/checks/http/tableau_software.rb

@@ -1,42 +0,0 @@
-module Intrigue
-module Ident
-module Check
-class Tableau < Intrigue::Ident::Check::Base
-
-  def generate_checks(url)
-    [
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Database", "COTS"],
-        :vendor => "TableauSoftware",
-        :product => "Tableau Server",
-        :match_details => "server Header",
-        :version => nil,
-        :references => [],
-        :match_type => :content_headers,
-        :match_content =>  /server: Tableau/i,
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Database","COTS"],
-        :vendor => "TableauSoftware",
-        :product => "Tableau Server",
-        :match_details => "Tableau Server - unique string",
-        :version => nil,
-        :references => ["https://community.tableau.com/thread/165653"],
-        :match_type => :content_body,
-        :match_content =>  /<meta name="vizportal-config" data-buildId=/i,
-        :paths => ["#{url}"],
-        :inference => false
-      }
-    ]
-  end
-
-end
-end
-end
-end

data/checks/http/telerik.rb

@@ -1,46 +0,0 @@
-module Intrigue
-module Ident
-module Check
-class Telerik < Intrigue::Ident::Check::Base
-
-  def generate_checks(url)
-    [
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Web Framework"],
-        :vendor => "Telerik",
-        :product => "Sitefinity CMS",
-        :match_details => "Telerik Sitefinity is an ASP.NET 2.0-based Content Management System (CMS)",
-        :url => "https://www.sitefinity.com/",
-        :version => nil,
-        :match_type => :content_body,
-        :match_content =>  /Telerik.Sitefinity.Resources/,
-        :dynamic_version => lambda { |x|  
-          _first_body_capture x, /Version=([\d\.]+),/ },
-        :paths => ["#{url}"],
-        :inference => true
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Database","COTS"],
-        :vendor => "Telerik",
-        :product => "Sitefinity CMS",
-        :match_details => "Detect Telerik via a meta generator tag",
-        :url => "https://www.sitefinity.com/",
-        :version => nil,
-        :match_type => :content_body,
-        :match_content =>  /<meta\ name=\"Generator\"\ content=\"Sitefinity/,
-        :dynamic_version => lambda { |x| 
-          _first_body_capture x, /<meta name=\"Generator\" content=\"Sitefinity ([\d\.]+).*\ \/>/ },
-        :paths => ["#{url}"],
-        :inference => true
-      }
-    ]
-  end
-
-end
-end
-end
-end

data/checks/http/tengine.rb

@@ -1,29 +0,0 @@
-module Intrigue
-module Ident
-module Check
-class Tengine < Intrigue::Ident::Check::Base
-
-  def generate_checks(url)
-    [
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Web Server"],
-        :vendor => "Taobao",
-        :product => "Tengine",
-        :references => ["https://tengine.taobao.org/"],
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content =>  /^server:\ Tengine\/{0,1}(\d{1,}\.\d{1,}\.\d{1,}){0,1}|unknown|Aserver$/i,
-        :dynamic_version => lambda { |x| 
-          _first_header_capture(x,/^server:\ Tengine\/{0,1}(\d{1,}\.\d{1,}\.\d{1,}){0,1}|unknown|Aserver$/i) },
-        :hide => false,
-        :paths => ["#{url}"],
-        :inference => true
-      }
-    ]
-  end
-end
-end
-end
-end

data/checks/http/tibco.rb

@@ -1,57 +0,0 @@
-module Intrigue
-module Ident
-module Check
-class Tibco < Intrigue::Ident::Check::Base
-
-  def generate_checks(url)
-    [
-      {
-        :type => "fingerprint",
-        :category => "service",
-        :tags => ["API"],
-        :vendor =>"TIBCO",
-        :product =>"Mashery",
-        :match_details =>"server header",
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content => /^server: Mashery Proxy$/i,
-        :paths => ["#{url}"],
-        :inference => false
-      }, 
-      {
-        :type => "fingerprint",
-        :category => "service",
-        :tags => ["API"],
-        :vendor =>"TIBCO",
-        :product =>"Mashery",
-        :match_details =>"unique header",
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content => /^x-mashery-error-code:.*$/i,
-        :paths => ["#{url}"],
-        :inference => false
-      }, 
-      {
-        :type => "fingerprint",
-        :category => "service",
-        :tags => ["Analytics", "COTS"],
-        :vendor =>"TIBCO",
-        :product =>"Spotfire Server",
-        :match_details =>"server header",
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content => /^server: TIBCO Spotfire Server$/i,
-        :paths => ["#{url}"],
-        :inference => false
-      }
-      
-    ]
-  end
-
-end
-end
-end
-end
-
-
-

data/checks/http/townnews.rb

@@ -1,33 +0,0 @@
-module Intrigue
-module Ident
-module Check
-class TownNews < Intrigue::Ident::Check::Base
-
-  def generate_checks(url)
-    [
-=begin     
-      # Currently match_content too loose, also no point in inference if we dont' have a version
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["CMS"],
-        :vendor => "TownNews",
-        :product => "BLOX CMS",
-        :references => ["https://townnews.com/"],
-        :version => nil,
-        :match_type => :content_body,
-        :match_content => /BLOX Content Management System/i,
-        :dynamic_version => nil,
-        :match_details => "footer match",
-        :hide => false,
-        :paths => ["#{url}"],
-        :inference => true
-      }
-=end
-      ]
-  end
-
-end
-end
-end
-end

data/checks/http/tridium.rb

@@ -1,28 +0,0 @@
-
-module Intrigue
-module Ident
-module Check
-class Tridium < Intrigue::Ident::Check::Base
-
-  def generate_checks(url)
-    [
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Administrative", "Networking"],
-        :vendor =>"Tridium",
-        :product =>"Niagara",
-        :match_details =>"cookie",
-        :version => nil,
-        :match_type => :content_cookies,
-        :match_content => /niagara_session=/i,
-        :paths => ["#{url}"],
-        :inference => false
-      }
-    ]
-  end
-
-end
-end
-end
-end

data/checks/http/twiki.rb

@@ -1,27 +0,0 @@
-module Intrigue
-module Ident
-module Check
-class Twiki < Intrigue::Ident::Check::Base
-
-  def generate_checks(url)
-    [
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["COTS"],
-        :vendor => "Twiki",
-        :product =>"Twiki",
-        :match_details =>"",
-        :version => nil,
-        :match_type => :content_cookies,
-        :match_content =>  /TWIKISID/,
-        :paths => ["#{url}"],
-        :inference => true
-      },
-    ]
-  end
-
-end
-end
-end
-end