simple_whatweb 0.1.0

data/lib/whatweb/plugins/php.rb

@@ -0,0 +1,89 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+# Version 0.6 # 2016-04-23 # Andrew Horton
+# Moved patterns from passive function to matches[]
+##
+# Version 0.5 # 2011-08-23 # Andrew Horton
+##
+# Version 0.4 # 2011-05-25 # Brendan Coles <bcoles@gmail.com>
+# Merged php-error plugin and PHP plugin
+# Added aggressive version detection using PHP credits page
+# Added detection for "PHP Warning" HTTP header
+##
+# Version 0.3 # 2011-03-26 # Brendan Coles <bcoles@gmail.com>
+# Added module detection
+##
+# Version 0.2 # 2011-01-19 # Brendan Coles <bcoles@gmail.com>
+# Updated regex matches
+##
+WhatWeb::Plugin.define "PHP" do
+  @author = "Andrew Horton & Brendan Coles" # 2010-10-26
+  @version = "0.6"
+  @description = "PHP is a widely-used general-purpose scripting language that is especially suited for Web development and can be embedded into HTML. This plugin identifies PHP errors, modules and versions and extracts the local file path and username if present."
+  @website = "http://www.php.net/"
+
+  # ShodanHQ results as at 2011-05-25 #
+  # 5,345,848 for "server: PHP"
+  # 3,565,299 for "X-Powered-By: PHP"
+  # 189 for php-warning
+  # 30 for Error parsing on line
+
+  # Google results as at 2011-05-25 #
+  # 478 for PHP warning|error "in /home/*.php on line" ext:php -forum
+  # 463 for warning|error PHP inurl:error_log "in /home/*.php on line"
+  # 33 for PHP warning|error "in C:\Documents and Settings\*.php on line" ext:php -forum
+
+  # Dorks #
+  @dorks = [
+    'PHP warning|error "in /home/*.php on line" ext:php -forum',
+    'warning|error PHP inurl:error_log "in /home/*.php on line"'
+  ]
+
+  # Matches #
+  @matches = [
+
+    # Aggressive # Version Detection # Credits Page
+    { url: "/?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000", version: /<tr class="h"><th colspan="2">PHP (\d) Authors<\/th><\/tr>/ },
+    { url: "/?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000", version: /<tr class="h"><th>PHP ([\d\.]+) Quality Assurance Team<\/th><\/tr>/ },
+
+    # PHP-Error # Extract local file path
+    { filepath: /<b>(Warning|Fatal error)<\/b>: .* in <b>([^<]+)<\/b> on line <b>[0-9]+<\/b><br \/>/, offset: 1 },
+
+    # PHP-Error # Extract username from unix style file path
+    { account: /<b>(Warning|Fatal error)<\/b>: .* in <b>\/home\/([^<^\/]+)\/[^<]*<\/b> on line <b>[0-9]+<\/b><br \/>/, offset: 1 },
+
+    # PHP-Error # Extract username from windows style file path
+    { account: /<b>(Warning|Fatal error)<\/b>: .* in <b>[A-Z]{1}:\\(Documents and Settings|Users)\\([^<^\\]+)\\[^<]*<\/b> on line <b>[0-9]+<\/b><br \/>/i, offset: 2 },
+
+    # HTTP # Server # Version Detection
+    { version: /[^\r^\n]*PHP\/([^\s^\r^\n]+)/, search: "headers[server]" },
+
+    # HTTP # Server # Module Detection
+    { module: /[^\r^\n]*PHP\/[^\s^\r^\n]+ with (Hardening-Patch|Suhosin-Patch)/, search: "headers[server]" },
+
+    # HTTP # X-Powered-By
+    { version: /[^\r^\n]*PHP\/([^\s^\r^\n]+)/, search: "headers[x-powered-by]" },
+
+    # HTTP # X-Powered-By # Module Detection
+    { module: /[^\r^\n]*PHP\/[^\s^\r^\n]+ with (Hardening-Patch|Suhosin-Patch)/, search: "headers[x-powered-by]" },
+
+    # PHP Error # PHP HTTP Header
+    { regexp: /^Error parsing (.+) on line [\d]+$/, search: "headers[php]" },
+
+    # Local Filethpath Detection # PHP HTTP Header
+    { filepath: /^Error parsing (.+) on line [\d]+$/, search: "headers[php]" },
+
+    # Account Detection # PHP HTTP Header
+    { filepath: /^Error parsing \/home\/([^\/]+)\/.+ on line [\d]+$/, search: "headers[php]" },
+
+    # PHP Warning Header
+    { name: "PHP Warning Header", regexp: //, search: "headers[php warning]" },
+
+  ]
+end

data/lib/whatweb/plugins/php121.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "PHP121" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2010-12-28
+  @version = "0.1"
+  @description = "PHP121 is a web based instant messenger - written entirely in PHP. This means that it will work in any browser on any operating system including Windows and Linux, anywhere! If traditional messaging programs like MSN Messenger or Yahoo! Messenger are blocked at your school or workplace, PHP121 will still work."
+
+  # 112 results for "Powered by PHP121" @ 2010-12-28
+
+  # Dorks #
+  @dorks = [
+    '"Powered by PHP121"'
+  ]
+
+  @matches = [
+
+    # Default title
+    { text: '<title>PHP121 - Please login or register</title>' },
+    { text: '<title>PHP121 - New User</title>' },
+
+    # Version detection # Powered by footer
+    { version: /<center>Powered by <a target="_blank" style="TEXT-DECORATION: none; COLOR: #000066; FONT-SIZE: 10px" href="http:\/\/www.php121.com"><U>PHP121<\/U><\/a> v([\d\.]+)<\/center>/ },
+
+  ]
+end

data/lib/whatweb/plugins/phpatm.rb

@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "phpATM" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2011-04-22
+  @version = "0.1"
+  @description = "phpATM (PHP Advanced Transfer Manager) is a free, open source, PHP based Upload and Download manager. But unlike most other of its kind it stores the data in flat text files and therefore does not require a database like MySQL installed on the web server."
+  @website = "http://phpatm.org/"
+
+  # 304 for "Powered by phpATM"
+  # 91 for "Powered by phpATM" inurl:"viewer_bottom.php"
+
+  # Dorks #
+  @dorks = [
+    '"Powered by phpATM" inurl:"viewer_bottom.php"'
+  ]
+
+  # Matches #
+  @matches = [
+
+    # Frameserv
+    { text: '<frame name="viewer_bottom" src="viewer_bottom.php?file=' },
+
+    # Version Detection # Powered by footer
+    { version: /<div id="phpatm">(<br>)?<a href="http:\/\/phpatm\.org\/" target="_blank" title="Powered by PHP Advanced Transfer Manager v([^"]+)">Powered by phpATM<\/a><br><\/div>/, offset: 1 },
+
+  ]
+end

data/lib/whatweb/plugins/phpbazar.rb

@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "phpBazar" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2011-01-29
+  @version = "0.1"
+  @description = "PHP3/PHP4/mySql Classified AD and/or Matchmaking"
+  @website = "http://www.smartisoft.com/"
+
+  # Google results as at 2011-01-29 #
+  # 12 for intitle:"phpBazar-AdminPanel" -intitle
+
+  # Dorks #
+  @dorks = [
+    'intitle:"phpBazar-AdminPanel" -intitle'
+  ]
+
+  # Matches #
+  @matches = [
+
+    # Default Title
+    { text: "<title>phpBazar-AdminPanel</title>", module: "Admin Page" },
+
+    # Default login message
+    { text: "<br>Login to phpBazar with Admin- or Moderator-Level & use the Administration-Functions! ->" },
+
+    # Version Detection # Footer text
+    { version: /<p><div class="footer">phpBazar Ver. ([\d\.]+) &copy 2001\-[\d]{4} by <a href="http:\/\/www.smartisoft.com[\/]?" target="_blank">SmartISoft<\/a><\/div>/ },
+
+  ]
+end

data/lib/whatweb/plugins/phpbb.rb

@@ -0,0 +1,145 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+# Version 0.3 #
+# Fixed Changelog version detection now prefixed with >
+##
+# Version 0.2 #
+# remove :certainty and :name, change :regexp to :text
+##
+WhatWeb::Plugin.define "phpBB" do
+  @author = "Andrew Horton"
+  @version = "0.3"
+  @description = "phpBB is a free forum"
+  @website = "http://phpbb.org/"
+
+  # Dorks #
+  @dorks = [
+    '"Powered by phpBB"'
+  ]
+
+  #
+  # Set-Cookie: phpbb2mysql_data=a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bs%3A0%3A%22%22%3Bs%3A6%3A%22userid%22%3Bi%3A-1%3B%7D; expires=Monday, 22-Nov-10 12:21:54 GMT; path=/
+  # Set-Cookie: phpbb2mysql_sid=8e6085bf4b138a7576f3701370e4d2b3; path=/
+  #
+  # Set-Cookie: ghfv3_u=1; expires=Mon, 22-Nov-2010 12:22:08 GMT; path=/; domain=.globalhardstyle.com; HttpOnly
+  # Set-Cookie: ghfv3_k=; expires=Mon, 22-Nov-2010 12:22:08 GMT; path=/; domain=.globalhardstyle.com; HttpOnly
+  # Set-Cookie: ghfv3_sid=77a3fe24f8b5c3327c6bdcf11e6a51dd; expires=Mon, 22-Nov-2010 12:22:08 GMT; path=/; domain=.globalhardstyle.com; HttpOnly
+  #
+  # Set-Cookie: phpbb3_bzhya_u=1; expires=Mon, 22-Nov-2010 12:20:58 GMT; path=/; domain=.sgscwelisten.com; HttpOnly
+  # Set-Cookie: phpbb3_bzhya_k=; expires=Mon, 22-Nov-2010 12:20:58 GMT; path=/; domain=.sgscwelisten.com; HttpOnly
+  # Set-Cookie: phpbb3_bzhya_sid=1148a65e6041640b22c3b16044125469; expires=Mon, 22-Nov-2010 12:20:58 GMT; path=/; domain=.sgscwelisten.com; HttpOnly
+
+  # Matches #
+  @matches = [
+
+    { text: '<!-- link rel="stylesheet" href="templates/subSilver/subSilver.css' },
+    { text: '/images/logo_phpBB.gif', certainty: 75 },
+    { text: 'We request you retain the full copyright notice below including the link to www.phpbb.com.' },
+
+    { name: "Powered by...",
+      regexp: /Powered by <a href="http:\/\/www.phpbb.com\/"( target="_phpbb")?( class="copyright")?>phpBB<\/a>[ ]+&copy;[ 0-9,\.]+ phpBB Group/ },
+
+    # Powered by <a href="http://www.phpbb.com/" target="_phpbb">phpBB</a>  &copy; phpBB Group<br />
+    # Powered by <a href="http://www.phpbb.com/">phpBB</a> &copy; 2000, 2002, 2005, 2007 phpBB Group
+    # Powered by <a href="http://www.phpbb.com/" target="_phpbb" class="copyright">phpBB</a>  &copy; 2001, 2002 phpBB Group
+    # Powered by <a href="http://www.phpbb.com/" target="_phpbb" class="copyright">phpBB</a> &copy; 2001, 2005 phpBB Group
+
+    { name: "folder icons",
+      regexp: /<td width="20" align="center"><img src="[^"]+images\/folder_new_big.gif" alt="New posts"\/><\/td>/ }, # "
+
+    { name: "In total there are x users online ::",
+      regexp: /In total there are <b>[0-9]+<\/b> users online :: [0-9]+ Registered, [0-9]+ Hidden and [0-9]+ Guests/ },
+
+    # Version Detection # Cookie
+    { search: "headers[set-cookie]", version: /phpbb([\d])mysql_(data=a%3A|sid=[a-f\d]{32};)/ },
+
+  ]
+
+  # Passive #
+  def passive(target)
+    m = []
+
+    if /([^ ]+)_u=1; expires/.match?(target.headers["set-cookie"])
+      p = target.headers["set-cookie"].scan(/([^ ]+)_u=1; expires/).flatten.first
+      m << { name: "phpbb3 _u, _k, _sid cookies", version: "3" } if target.headers["set-cookie"] =~ /#{p}_u=.*#{p}_k=.*#{p}_sid=[0-9a-z]{32}/
+    end
+
+    # Return passive matches
+    m
+  end
+
+  # Aggressive #
+  def aggressive(target)
+    m = []
+
+    url = URI.join(target.uri.to_s, "docs/CHANGELOG.html").to_s
+    new_target = WhatWeb::Target.new(url)
+
+    unless new_target.body.nil?
+      # /docs/CHANGELOG.html
+      # <li><a href="#v303">Changes since 3.0.3</a></li>
+      # <li><a href="#2018">Changes since 2.0.18</a></li>
+      if /<li><a href="[^"]+">Changes since ([0-9\.]+)<\/a><\/li>/.match?(new_target.body)
+        v = new_target.body.scan(/<li><a href="[^"]+">Changes since ([0-9\.]+)<\/a><\/li>/).flatten.first
+        m << { name: "phpbb changelog", version: ">" + v }
+      end
+    end
+
+    # Return aggressive matches
+    m
+  end
+end
+
+#
+# MD5 Hash Reference #
+#
+# { :md5=>'3a3a98deb01ca9a41d60d0cd30f61e22', :version=>'2.0.4', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'d469f1cee34e4fb55f265bec0f0c14a8', :version=>'2.0.5', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'5905fc107b1a68762ac0d06c0fecc7b9', :version=>'2.0.6', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'7e9a7f6fb9aa3fc3debbdc09ca1941de', :version=>'2.0.7', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'d0406ed8e5cf4bd82192f3c88bb7fcd2', :version=>'2.0.8', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'734f0ecaeb1dc40ce64c1af60d082dcc', :version=>'2.0.8a', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'603328ab56f740a8eba90d435132da9f', :version=>'2.0.9', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'6dca72f720e5fd098e33e06ff7617bc2', :version=>'2.0.10', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'1e11b01aac9fe84682596d2fa38c9265', :version=>'2.0.11', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'7262663177c2cb9440a3250989de1847', :version=>'2.0.12', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'11771948789983e496646c12eb2709e6', :version=>'2.0.13', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'bd9d2285839fb7e15a556f0ba2f7ae2c', :version=>'2.0.14', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'d636b63d299cbfb2948450e80d5be7d6', :version=>'2.0.15', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'d4d2f1e38096a4b32e22dff57773c62d', :version=>'2.0.16', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'bb29b25a9734d10328f970001f0295b3', :version=>'2.0.17', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'3058647f25b2d3d4804cd8e3e69a938f', :version=>'2.0.18', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'4880b1bc3a16771e934b7f69b4d87f2e', :version=>'2.0.19', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'b90c8f20ebfb920cc9ac332b60960cef', :version=>'2.0.20', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'90520361b651f583853fc7058fe10256', :version=>'2.0.21', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'4f1e462f7da7df826a07d1cf0faae4ae', :version=>'2.0.22', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'3eba9db5133b98df8a54abc55be34307', :version=>'2.0.23', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'e60f14eba6d00d56956c16f8a94ca140', :version=>'3.0-B5', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'e60f14eba6d00d56956c16f8a94ca140', :version=>'3.0-RC1', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'565c3b1933cda61295e54c1f141ef8b7', :version=>'3.0-RC2', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'f3f30e22403564e99e64d09f7f731dea', :version=>'3.0-RC3', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'63b9c4065b2aabda328a1c9b0677f986', :version=>'3.0-RC4', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'3d7aed030411838411a91ae4fcd213e4', :version=>'3.0-RC5', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'074417fdfca31a8d7349c88e8081d8cd', :version=>'3.0-RC6', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'2e139da54418cd096405d58e049bffd9', :version=>'3.0-RC7', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'e7de4c40a4fbf920aa0ef8d935564ed2', :version=>'3.0-RC8', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'dc1866d542cfcfface533b024ac3da77', :version=>'3.0.0', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'cfa612fc182916fd76467cce11c2e708', :version=>'3.0.1', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'fe1e7b8f3fc448ebfb7b2c1c5ec1e2d7', :version=>'3.0.1-RC1', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'59d04c38f084936b68551a0acccd3ea2', :version=>'3.0.2', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'f8b7389f4d5e61d0041430b5986378e2', :version=>'3.0.2-RC1', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'59d04c38f084936b68551a0acccd3ea2', :version=>'3.0.2-RC2', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'f4a6893faa9918962db5858f8b96c600', :version=>'3.0.3', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'f4a6893faa9918962db5858f8b96c600', :version=>'3.0.3-RC1', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'d638931f610f6a7073cf7bb43bf6370f', :version=>'3.0.4', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'d638931f610f6a7073cf7bb43bf6370f', :version=>'3.0.4-RC1', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'931e4dd982451b9baf4dbfa3a6d6da4e', :version=>'3.0.5', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'0fdcbb67c9773f490d3f0691a6dd4db9', :version=>'3.0.5-RC1', :path=>'docs/CHANGELOG.html' },
+# { :md5=>'aedf28d7599038cf0b07e9404c69ffca', :version=>'3.0.6', :path=>'docs/CHANGELOG.html' },
+#

data/lib/whatweb/plugins/phpcityportal.rb

@@ -0,0 +1,42 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "PHPCityportal" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2011-12-07
+  @version = "0.1"
+  @description = "PHPCityportal - build your own business portal - Requires PHP and MySQL"
+  @website = "http://phpcityportal.com/"
+
+  # Google results as at 2011-12-07 #
+  # 28 for "Powered by PHPCityPortal.com" inurl:"login.php"
+
+  # Dorks #
+  @dorks = [
+    '"Powered by PHPCityPortal.com" inurl:"login.php"'
+  ]
+
+  # Matches #
+  @matches = [
+
+    # Meta Author
+    { certainty: 75, text: '<meta name="author" content="Cr8Soft" />' },
+
+    # Powered by link
+    { text: '<center><a href="http://phpcityportal.com">Powered by PHPCityPortal.com</a></center><p>' },
+
+    # Powered by link # Older Versions
+    { text: '<center><a href="http://www.phpcityportal.com/index.php">Powered by PHPCityPortal.com</a></center>' },
+
+    # frm_login_left
+    { text: '<form id="frm_login_left" name="frm_login_left" action="includes/check_user.php" method="post">' },
+
+    # frm_login_left # Older Versions
+    { text: '<form id="frm_login_left" name="frm_login_left" action="includes/check_user.php.inc" method="post">' },
+
+  ]
+end

data/lib/whatweb/plugins/phpcollab.rb

@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "phpCollab" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2011-04-17
+  @version = "0.1"
+  @description = "phpCollab is an open source internet-enabled system for use in projects that require collaboration over the internet."
+  @website = "http://www.php-collab.org/"
+
+  # Google results as at 2011-04-17 #
+  # 10 for "PhpCollab" inurl:/general/login.php
+
+  # Dorks #
+  @dorks = [
+    '"PhpCollab" inurl:/general/login.php'
+  ]
+
+  # Matches #
+  @matches = [
+
+    # Version Detection # HTML Comment
+    { version: /^<!-- Powered by PhpCollab v([\d\.]+) \/\/-->$/ },
+
+    # Version Detection # footer text
+    { version: /^<p id="footer">PhpCollab v([\d\.]+)[\s]*<\/p>$/ },
+
+  ]
+end

data/lib/whatweb/plugins/phpcow.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "PHPCow" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2011-03-16
+  @version = "0.1"
+  @description = "PHPCow news publishing content management system - Homepage [offline] : http://www.phpcow.com/"
+
+  # Google results as at 2011-03-16 #
+  # 129 for "powered by PHPCow.com"
+
+  # Dorks #
+  @dorks = [
+    '"powered by PHPCow.com"'
+  ]
+
+  # Matches #
+  @matches = [
+
+    # Powered by link
+    # $395 to remove the "Powered by PHPCOW" (unconfirmed)
+    { text: '<b>Powered by</b>: <a href="http://www.phpcow.com" target="_blank" style="color: #000000">PHPCow.com</a>' },
+    { text: '<b>Powered by</b>: <a href="http://www.phpcow.com" target="_blank" style="color: #000000" title="PHPCow news publishing script, content management system">PHPCow.com</a>' },
+
+    # Meta Description
+    { text: '<meta name="Description" content="PHPCow news publishing content management system" />' },
+
+    # Meta Keywords
+    { text: '<meta name="Keywords" content="phpcow, news publishing, article publishing, cms" />' },
+
+  ]
+end