simple_whatweb 0.1.0

data/lib/whatweb/plugins/ipeer.rb

@@ -0,0 +1,44 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "iPeer" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2012-08-25
+  @version = "0.1"
+  @description = "iPeer - a web-based platform/database independent application to develop and deliver peer evaluations - Requires PHP"
+  @website = "http://ipeer.ctlt.ubc.ca/trac"
+
+  # ShodanHQ results as at 2012-08-25 #
+  # 2 for 2 for loginout/login IPEER
+
+  # Google results as at 2012-08-25 #
+  # 26 for "Powered by iPeer and TeamMaker - Created by UBC and Rose-Hulman"
+  # 20 for intitle:"iPeer V2 with TeamMaker"
+
+  # Dorks #
+  @dorks = [
+    '"Powered by iPeer and TeamMaker - Created by UBC and Rose-Hulman"',
+    'intitle:"iPeer V2 with TeamMaker"'
+  ]
+
+  # Matches #
+  @matches = [
+
+    # Login Page # Title # Version Detection
+    { version: /<title>iPeer V(\d) with TeamMaker<\/title>/ },
+
+    # Login Page # Footer
+    { text: '<h1 align="center"><span class="footer">Powered by iPeer and TeamMaker - Created by UBC and Rose-Hulman</span></h1>' },
+
+    # Login Page # Version Detection
+    { version: /<span class="bannerText"><span style='font-size: 120%;'>([^<]+)<\/span>&nbsp;&nbsp;with TeamMaker<\/span><\/td>/ },
+
+    # Cookie # IPEER
+    { search: "headers[set-cookie]", regexp: /IPEER=[^;]+;/ },
+
+  ]
+end

data/lib/whatweb/plugins/ipmate-router.rb

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "IPMATE-Router" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2011-03-07
+  @version = "0.1"
+  @description = "IPMATE router [Japanese] - http://www.ntt-east.co.jp/"
+
+  # ShodanHQ results as at 2011-03-07 #
+  # 1 for IPMATE
+
+  # Matches #
+  @matches = [
+
+    # Default title
+    { text: '<TITLE>Welcome to IPMATE</TITLE>' },
+
+    # Logo
+    { url: "/images/ipmate_logo.gif", md5: "8d16375ac9c6c0fc1c27c0183dfda573" },
+
+  ]
+
+  # Passive #
+  def passive(target)
+    m = []
+
+    # HTTP Server Header
+    m << { model: "1300RD" } if target.headers["server"] =~ /^IPMATE 1300RD$/
+
+    # Return passive matches
+    m
+  end
+end

data/lib/whatweb/plugins/ipswitch-imail.rb

@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+# Version 0.2 # 2016-04-20 # Andrew Horton
+# Moved patterns from passive function to matches[]
+##
+WhatWeb::Plugin.define "Ipswitch-IMail" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2011-03-24
+  @version = "0.2"
+  @description = "IMail Server matches the capabilities of Exchange without the maintenance headache or hefty price tag. From install assistance to unlimited tech support, IMail delivers your complete messaging solution."
+  @website = "http://www.imailserver.com/"
+
+  # ShodanHQ results as at 2011-03-24 #
+  # 5,802 for Ipswitch-IMail
+
+  @matches = [
+
+    { regexp: /^Ipswitch-IMail/, search: "headers[server]" },
+    # Version Detection # HTTP Server Header
+    { version: /^Ipswitch-IMail\/([\d\.]+)$/, search: "headers[server]" },
+
+  ]
+end

data/lib/whatweb/plugins/iptime-router.rb

@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "ipTIME-Router" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2011-03-19
+  @version = "0.1"
+  @description = "ipTIME Rrouter [Korean] - developed by EFM Networks"
+  @website = "http://www.iptime.co.kr/~iptime/prd.php?pf=3"
+
+  # Google results as at 2011-03-19 #
+  # 103 for intitle:"EFM Networks ipTIME" +Version
+
+  # Matches #
+  @matches = [
+
+    # Model Detection # Title
+    { model: /<head><title>EFM Networks ipTIME ([A-Z0-9]+)<\/title>/ },
+    { model: /<head><title>EFM networks - ipTIME ([A-Z0-9]+)<\/title>/ },
+
+    # IP Detection
+    { url: "/login/login.cgi", string: /([\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3})<\/span><br>[\s]*<span class=item_text><b>Version [\d\.]+<\/b><\/span>/ },
+
+    # Firmware Detection
+    { url: "/login/login.cgi", firmware: /(No IP|[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3}\.[\d]{1,3})<\/span><br>[\s]*<span class=item_text><b>(F\/W )?Version ([\d\.]+)<\/b><\/span>/, offset: 2 },
+
+  ]
+end

data/lib/whatweb/plugins/iqeye-netcam.rb

@@ -0,0 +1,30 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+# Version 0.3 #
+# Updated model detection
+##
+# Version 0.2 #
+# Updated version detection
+##
+WhatWeb::Plugin.define "IQeye-Netcam" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2010-07-11
+  @version = "0.3"
+  @description = "IQeye netcam web interface"
+
+  # Google rsults as at 2010-07-11 #
+  # 5 for intitle:"IQeye302 | IQeye303 | IQeye601 | IQeye602 | IQeye603" intitle:"Live Images"
+
+  # Matches #
+  @matches = [
+
+    # Model detection # Default title
+    { model: /<title>IQeye([^:]+): Live Images[^<]*<\/title>/i },
+
+  ]
+end

data/lib/whatweb/plugins/irealty.rb

@@ -0,0 +1,42 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "iRealty" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2010-08-08
+  @version = "0.1"
+  @description = "iRealty is an advanced flexible php real estate software and CMS with open source code."
+  @website = "http://www.irealtysoft.com/"
+
+  # 52 results for "powered by iRealty" @ 2010-08-08
+
+  # Dorks #
+  @dorks = [
+    '"powered by iRealty"'
+  ]
+
+  @matches = [
+
+    { text: 'Powered by <a href="http://www.irealty.com/" title="iRealty"> iRealty </a>' },
+
+    { text: '<a target="_blank" href="http://www.irealtysoft.com/">- Powered by iRealty</a>' },
+
+    { text: 'Powered by <a target="_blank" title="iRealty &mdash; Real Estate Listing Software" href="http://www.irealtysoft.com/">iRealty</a>,' },
+
+    { text: 'Powered by <a target="_blank" title="iRealty &mdash; Real Estate Listing Software" href="http://www.worksforweb.com/products/iRealty/">iRealty</a>,' },
+
+  ]
+
+  # Match PHPSESSID%28_%29 cookie
+  def passive(target)
+    m = []
+
+    m << { name: "iRealty PHPSESSID%28_%29 cookie" } if target.headers["set-cookie"] =~ /^PHPSESSID%28_%29=[a-z0-9]{32}/
+
+    m
+  end
+end

data/lib/whatweb/plugins/isc-scada-service.rb

@@ -0,0 +1,75 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "ISC-SCADA-Service" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2010-11-01
+  @version = "0.1"
+  @description = "ISC SCADA Service"
+
+  # 2 ShodanHQ results for "Server: ISC SCADA Service HTTPserv" @ 2010-11-01
+
+  # Passive #
+  def passive(target)
+    m = []
+
+    # Check HTTP Server
+    if /ISC SCADA Service HTTPserv:00001/.match?(target.headers["server"])
+
+      # HTTP Server Header
+      m << { name: "HTTP Server Header" }
+
+      # Default Title
+      m << { text: "<title>ISC SCADA</title>" }
+
+      # Default frame message
+      m << { text: '<p>To take full advantage of this web-interface, you must use a frame compatible browser.</p>' }
+
+      # Default Logo
+      m << { md5: "3f0d5432fc1a54d284d17939431acf8a", url: "/gif/top.gif" }
+
+      # Firmware # /html/info.htm
+      m << { url: "/html/info.htm", firmware: target.body.scan(/<td bgcolor="#b4c0cb"><b>&nbsp;Firmware Version&nbsp;<\/b><\/td>[\r\n\s]*<td bgcolor="#f1eee9"> ([\d\.]+) &nbsp;<\/td>/).flatten } if target.body =~ /<td bgcolor="#b4c0cb"><b>&nbsp;Firmware Version&nbsp;<\/b><\/td>[\r\n\s]*<td bgcolor="#f1eee9"> ([\d\.]+) &nbsp;<\/td>/
+
+      # Version # /html/info.htm
+      m << { url: "/html/info.htm", version: target.body.scan(/<td bgcolor="#b4c0cb"><b>&nbsp;Script Version&nbsp;<\/b><\/td>[\r\n\s]*<td bgcolor="#f1eee9"> ([\d\.]+) &nbsp;<\/td>/).flatten } if target.body =~ /<td bgcolor="#b4c0cb"><b>&nbsp;Script Version&nbsp;<\/b><\/td>[\r\n\s]*<td bgcolor="#f1eee9"> ([\d\.]+) &nbsp;<\/td>/
+
+      # MAC Address # /html/info.htm
+      m << { url: "/html/info.htm", string: target.body.scan(/<TD bgcolor="#b4c0cb"><b>&nbsp;MAC-adresse&nbsp;<\/b><\/TD>[\r\n\s]*<TD bgcolor="#f1eee9"> ([^<]+)<\/TD>/).flatten } if target.body =~ /<TD bgcolor="#b4c0cb"><b>&nbsp;MAC-adresse&nbsp;<\/b><\/TD>[\r\n\s]*<TD bgcolor="#f1eee9"> ([^<]+)<\/TD>/
+
+    end
+
+    m
+  end
+
+  # Aggressive #
+  def aggressive(target)
+    m = []
+
+    # Check Server
+    if /ISC SCADA Service HTTPserv:00001/.match?(target.headers["server"])
+
+      # HTTP Server Header
+      m << { name: "HTTP Server Header" }
+
+      url = URI.join(target.uri.to_s, "/html/info.htm").to_s
+      new_target = WhatWeb::Target.new(url)
+
+      # Firmware # /html/info.htm
+      m << { url: "/html/info.htm", firmware: new_target.body.scan(/<td bgcolor="#b4c0cb"><b>&nbsp;Firmware Version&nbsp;<\/b><\/td>[\r\n\s]*<td bgcolor="#f1eee9"> ([\d\.]+) &nbsp;<\/td>/).flatten } if new_target.body =~ /<td bgcolor="#b4c0cb"><b>&nbsp;Firmware Version&nbsp;<\/b><\/td>[\r\n\s]*<td bgcolor="#f1eee9"> ([\d\.]+) &nbsp;<\/td>/
+
+      # Version # /html/info.htm
+      m << { url: "/html/info.htm", version: new_target.body.scan(/<td bgcolor="#b4c0cb"><b>&nbsp;Script Version&nbsp;<\/b><\/td>[\r\n\s]*<td bgcolor="#f1eee9"> ([\d\.]+) &nbsp;<\/td>/).flatten } if new_target.body =~ /<td bgcolor="#b4c0cb"><b>&nbsp;Script Version&nbsp;<\/b><\/td>[\r\n\s]*<td bgcolor="#f1eee9"> ([\d\.]+) &nbsp;<\/td>/
+
+      # MAC Address # /html/info.htm
+      m << { url: "/html/info.htm", string: new_target.body.scan(/<TD bgcolor="#b4c0cb"><b>&nbsp;MAC-adresse&nbsp;<\/b><\/TD>[\r\n\s]*<TD bgcolor="#f1eee9"> ([^<]+)<\/TD>/).flatten } if new_target.body =~ /<TD bgcolor="#b4c0cb"><b>&nbsp;MAC-adresse&nbsp;<\/b><\/TD>[\r\n\s]*<TD bgcolor="#f1eee9"> ([^<]+)<\/TD>/
+
+    end
+
+    m
+  end
+end

data/lib/whatweb/plugins/iscripts-cybermatch.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "iScripts-CyberMatch" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2010-07-11
+  @version = "0.1"
+  @description = "iScripts CyberMatch is an open source online dating software with features like background check ,chat alerts, integrated payment system etc."
+  @website = "http://www.iscripts.com/cybermatch/"
+
+  # 26 results for "powered by iScripts CyberMatch" "A premium product from iScripts.com" @ 2010-07-11
+
+  # Dorks #
+  @dorks = [
+    '"powered by iScripts CyberMatch" "A premium product from iScripts.com"'
+  ]
+
+  @matches = [
+
+    { regexp: /    <td width="[\d]+%" align="left" class="footer">Powered by <a href="http:\/\/www.iscripts.com\/cybermatch\/" target="_blank">iScripts Cybermatch<\/a> . A premium product from <a href="http:\/\/www.iscripts.com" target="_blank">iScripts.com<\/a><\/td>/ },
+
+  ]
+end

data/lib/whatweb/plugins/iscripts-easysnaps.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "iScripts-EasySnaps" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2010-07-11
+  @version = "0.1"
+  @description = "iScripts EasySnaps is an open source image hosting script."
+  @website = "http://www.iscripts.com/gallery/"
+
+  # 20 results for "powered by iScripts EasySnaps" "A premium product from iScripts.com" @ 2010-07-11
+
+  # Dorks #
+  @dorks = [
+    '"powered by iScripts EasySnaps" "A premium product from iScripts.com"'
+  ]
+
+  @matches = [
+
+    { text: '          <td height="25" align="center" bgcolor="#000000">Powered by <a href="http://www.iscripts.com/gallery/" target="_blank">iScripts EasySnaps</a>. A premium product from <a href="http://www.iscripts.com/" target="_blank">iScripts.com</a>' },
+
+  ]
+end

data/lib/whatweb/plugins/iscripts-multicart.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "iScripts-MultiCart" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2010-07-11
+  @version = "0.1"
+  @description = "iScripts MultiCart is a multi vendor shopping cart with a single backend."
+  @website = "http://www.iscripts.com/multicart/"
+
+  # 110 results for "powered by iScripts MultiCart" @ 2010-07-11
+
+  # Dorks #
+  @dorks = [
+    '"powered by iScripts MultiCart"'
+  ]
+
+  # Exampels #
+
+  @matches = [
+
+    { regexp: /Powered by <a href="http:\/\/iscripts.com\/multicart"[\ target="_blank"]*><font color="#[a-zA-Z0-9]{6}"><b>iScripts Multicart<\/b><\/font><\/a>. A premium product from <a href="http:\/\/www.iscripts.com" class="" target="_blank"><font color="#[a-zA-Z0-9]{6}"><b>iScripts.com<\/b><\/font><\/a><\/div>/ },
+
+  ]
+end

data/lib/whatweb/plugins/iscripts-reservelogic.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "iScripts-ReserveLogic" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2010-07-11
+  @version = "0.1"
+  @description = "iScripts ReserveLogic offers an online web based reservation system for the hospitality industry for service providers."
+  @website = "http://www.iscripts.com/reservelogic/"
+
+  # 10 results for "powered by iScripts ReserveLogic" @ 2010-07-11
+
+  # Dorks #
+  @dorks = [
+    '"powered by iScripts ReserveLogic"'
+  ]
+
+  @matches = [
+
+    { text: 'Powered by <a href="http://www.iscripts.com/reservelogic/" target="_blank">iScripts ReserveLogic</a> . A premium product from <a href="http://www.iscripts.com" target="_blank">iScripts.com</a></td>' },
+
+  ]
+end

data/lib/whatweb/plugins/iscripts-socialware.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "iScripts-SocialWare" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2010-07-11
+  @version = "0.1"
+  @description = "iScripts SocialWare is an open source social networking script with customizable features like blogs, albums, gift shop, classifieds ,chat, storefront etc."
+  @website = "http://www.iscripts.com/socialware/"
+
+  # 82 results for "powered by iScripts SocialWare" "A premium product from iScripts.com" @ 2010-07-11
+
+  # Dorks #
+  @dorks = [
+    '"powered by iScripts SocialWare" "A premium product from iScripts.com"'
+  ]
+
+  @matches = [
+
+    { text: "var loginWindow=window.open('http://www.meebo.com','ChatRoom','top=5 ,left=5,toolbars=no,maximize=no,resize=no,width=500,height=478,location=no,directories=no,scrollbars=yes,border=thin,caption=no');" },
+
+    { text: '          <td align="right">Powered by <a href="http://www.iscripts.com/socialware/" target="_blank">iScripts SocialWare</a> . A premium product from <a href="http://www.iscripts.com" target="_blank">iScripts.com</a></td>' },
+
+  ]
+end

data/lib/whatweb/plugins/isolsoft-support-center.rb

@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "Isolsoft-Support-Center" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2011-06-25
+  @version = "0.1"
+  @description = "Support Center is a fully automated Help Desk solution."
+  @website = "http://www.isolsoft.com/"
+
+  # 115 for "Powered by: Support Center"
+  #  53 for "Powered by: Support Center" inurl:kb.php
+
+  # Dorks #
+  @dorks = [
+    '"Powered by: Support Center"'
+  ]
+
+  # Matches #
+  @matches = [
+
+    # javascript warning
+    { text: '<strong><font color="#FF0000">Warning! This heldesk requires a browser with javascript ' },
+
+    # HTML Comment
+    { text: '<!-- Copyright Line: Unauthorized removal can void license -->' },
+
+    # Version Detection # Powered by text
+    { version: /<p align="center"><font size="1">Powered by: Support Center v([^<^\s]+)<br>/ },
+
+  ]
+end