simple_whatweb 0.1.0

data/lib/whatweb/plugins/zen-load-balancer.rb

@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "Zen-Load-Balancer" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2012-09-29
+  @version = "0.1"
+  @description = "Zen Load Balancer is a complete solution for load balancing to provide a high availability for TCP and UDP services and data line communications."
+  @website = "http://www.zenloadbalancer.com/web/"
+
+  # Default Port  # 444 (HTTPS)
+  # Default Login # admin / admin
+
+  # Matches #
+  @matches = [
+
+    # /config/global.conf
+    { url: "/config/global.conf", version: /#version ZEN\s+\$version=\"([^\"]+)"/ },
+
+    # WWW-Authenticate: Basic realm="Zen Load Balancer"
+    { search: "headers[www-authenticate]", text: 'Basic realm="Zen Load Balancer"' },
+
+  ]
+end

data/lib/whatweb/plugins/zend.rb

@@ -0,0 +1,78 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+# Version 0.4 # 2016-04-23 # Andrew Horton
+# Moved patterns from passive function to matches[]
+##
+# Version 3.0 by Andrew Horton
+# new routine for POST requests
+##
+# Version 2.0 by Andrew Horton
+# Added meta generator match and vendor matches. bug fixes. new random string function
+##
+# Version 0.1
+# detection works mainly for default installation state
+# tomatocms is based on zend framework
+##
+WhatWeb::Plugin.define "Zend" do
+  @author = "Aung Khant <http://yehg.net>"
+  @version = "0.4"
+  @description = "Zend PHP Framework (http://framework.zend.com/) and Zend Server (http://zend.com) Detection"
+
+  @matches = [
+    # 2010-10-14
+    # About 1,640,000 results (0.24 seconds)
+    # "Powered by Zend Framework" site:www.survivethedeepend.com/
+    { name: 'GHDB: "Powered by Zend Framework"', certainty: 75, ghdb: '"Powered by Zend Framework"' },
+    { string: 'PoweredBy Image', url: 'images/PoweredBy_ZF.gif', md5: 'eecf384879cde19f8f7f80c768c12295' },
+    { string: 'Zend Logo Small', url: 'images/logo_small.gif', md5: '0f76017aa12a3dcb9cabbff26e37ff5c' },
+    { string: 'Footer Link', text: ' alt="Powered by Zend Framework!" />' },
+
+    { string: 'Null Controller', url: randstr, text: 'controllers/images/PoweredBy_ZF.gif" alt="Powerd by Zend Framework!" />' },
+    { string: 'Null Controller', url: randstr, regexp: /<h1>Controller\/action not found!<\/h1>(\r\n|\n)<p>Controller\/action not found!<\/p>/ },
+    { string: 'Zend_Controller_Dispatcher_Exception', url: randstr, text: '( ! )</span> Zend_Controller_Dispatcher_Exception: Invalid controller specified (application) in' },
+    { string: 'Zend_Controller_Dispatcher_Exception', url: randstr, text: "<b>Fatal error</b>:  Uncaught exception 'Zend_Controller_Dispatcher_Exception" },
+    { string: 'Zend_Controller_Router_Exception', url: randstr, text: "Uncaught exception 'Zend_Controller_Router_Exception' with message 'No route matched the request'" },
+    { string: 'Zend_Controller_Router_Exception', url: randstr, text: "/Zend/Controller/Router/Rewrite.php</b> on line <b>" },
+
+    { version: /<meta name="generator" content="Zend.com CMS ([\d\.]+)"/ },
+    { text: '<meta name="vendor" content="Zend Technologies' },
+
+    # X-Powered-By=Zend Framework
+    # X-Powered-By=Zend Framework 1.10
+    # X-Powered-By: Zend Core/2.5.0
+
+    { regexp: /Zend Framework/, search: "headers[x-powered-by]" },
+    { version: /Zend Framework ([a-zA-Z0-9\.\/\+\-\(\)]+)/, string: "Framework", search: "headers[x-powered-by]" },
+    { version: /Zend Core\/([a-zA-Z0-9\.\/\+\-\(\)]+)/, string: "Core", search: "headers[x-powered-by]" },
+
+    # Server: Zend Core/2.5.0
+    { regexp: /^Zend /, search: "headers[server]" },
+    { version: /Zend Core\/([a-zA-Z0-9\.\/\+\-\(\)]+)/, string: "Core", search: "headers[server]" },
+
+  ]
+
+  def aggressive(target)
+    # when submiting invalid post to valid controller
+    # <h1>Application error!</h1>
+    # <p>An application error occured!</p>
+
+    m = []
+
+    response = HTTP.post(target.uri.to_s, form: { whatweb: true })
+    aggressive_target = WhatWeb::Target.new(target.uri.to_s, response)
+    # open_url
+
+    unless aggressive_target.body.nil?
+      if /<h1>Application error!<\/h1>(\r\n|\n)<p>An application error occured!<\/p>/.match?(aggressive_target.body)
+        m << { string: "Invalid Post Method" }
+      end
+    end
+    m
+  end
+end

data/lib/whatweb/plugins/zenoss-core.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "Zenoss-Core" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2012-01-29
+  @version = "0.1"
+  @description = "Zenoss (Zenoss Core) is an open-source application, server, and network management platform based on the Zope application server."
+  @website = "http://sourceforge.net/projects/zenoss/"
+
+  # Google results as at 2012-01-29 #
+  # 27 for intitle:"Login" inurl:"zport" "Zenoss, Inc." "Version"
+  # 81 for intitle:"Login" "Copyright" "Zenoss, Inc." "Version"
+
+  # Dorks #
+  @dorks = [
+    'intitle:"Login" inurl:"zport" "Zenoss, Inc." "Version"'
+  ]
+
+  # Matches #
+  @matches = [
+
+    # Login Page # Copyright footer # Version Detection
+    { version: /<div id="copyright">[\s]+<p>Copyright &copy; 2005-20[\d]{2} Zenoss, Inc\. \| Version[\s]+<span>([^\s^<]+)<\/span>[\s]+/ },
+
+    # Login Page # favicon HTML
+    { text: '<link rel="shortcut icon" type="image/x-icon" href="/zport/dmd/favicon.ico" />' },
+
+  ]
+end

data/lib/whatweb/plugins/zero-one-technology-print-server.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+# Version 0.2 # 2016-04-23 # Andrew Horton
+# Moved patterns from passive function to matches[]
+##
+WhatWeb::Plugin.define "Zero-One-Technology-Print-Server" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2011-03-14
+  @version = "0.2"
+  @description = "Zero One Technology Print Server - Print servers connect printers directly to the network so that multiple PCs can share them."
+  @website = "http://www.01tech.com/p1-1product.asp?Bid=2"
+
+  # ShodanHQ results as at 2011-03-14 #
+  # 2,579 for ZOT-PS
+
+  @matches = [
+    # HTTP Server Header
+    { regexp: /^ZOT-PS-/, search: "headers[server]" },
+
+    # Version Detection # HTTP Server Header
+    { version: /^ZOT-PS-[\d]+\/(.+)$/, search: "headers[server]" },
+
+  ]
+end

data/lib/whatweb/plugins/zest-web-engine.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+# Version 0.2 #
+# Removed passive function and replaced with :search=>"headers[location]"
+# Added the Powered by the match
+# Added another version match
+##
+WhatWeb::Plugin.define "Zest-Web-Engine" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2011-04-08
+  @version = "0.2"
+  @description = "Zest Web Engine"
+  @website = "http://www.zest-leisure.com/"
+
+  # Google results as at 2011-04-08 #
+  # 83 for inurl:/cgi-bin/web.asp
+
+  # ShodanHQ results as at 2011-04-08 #
+  # 13 for /cgi-bin/web.asp
+
+  # Dorks #
+  @dorks = [
+    'inurl:/cgi-bin/web.asp'
+  ]
+
+  # Matches #
+  @matches = [
+    # Version Detection # Powered by logo+url+text
+    { version: /Powered by the <br \/><img src='http:\/\/www.[^\/]+\/images\/zestlogo\.gif' style='border:0 ; ' alt='Zest Web Engine' \/><br \/>Zest web engine<br \/>V([\d\.]+)<br \/>/ },
+    { search: "headers[location]", text: "/cgi-bin/web.asp?title" },
+    { text: "Powered by the <a href='http://www.zest-leisure.com/'>Zest Web Engine</a>" },
+    { version: /Powered by the <a href='http:\/\/www.zest-leisure.com\/'>Zest Web Engine<\/a>[ ]+V ([0-9\.]+)</ }
+
+  ]
+end

data/lib/whatweb/plugins/zeus-cart.rb

@@ -0,0 +1,42 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+# Version 0.2 # 2011-02-25 #
+# Updated version detection
+##
+WhatWeb::Plugin.define "Zeus-Cart" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2010-08-06
+  @version = "0.2"
+  @description = "Control every facet of your store, from merchandising to promotions and more. There are no limits to creativity with ZeusCart."
+  @website = "http://www.ajsquare.com/AJE-Commerce/product-home.php"
+
+  # Google results as at 2010-08-06 #
+  # 43 for "powered by ZeusCart"
+
+  # Dorks #
+  @dorks = [
+    '"powered by ZeusCart"'
+  ]
+
+  # Matches #
+  @matches = [
+
+    # Install Page # Default install warning message
+    { text: '<img src="images/warning.gif">Warning: Installation directory exists ZEUSCART ROOT DIRECTORY/install. Please remove/rename this directory for security reasons.' },
+
+    # Powered by text
+    { text: 'Powered by <a href="http://www.ajsquare.com/products/ecom/" style="color:#716f6f;" target="_blank">ZeusCart</a>' },
+
+    # Admin Page # Default Title
+    { text: '<title>:: Zeuscart Admin Panel</title>' },
+
+    # Version Detection # Default Title
+    { version: /<title>[\s]+ZeusCart V([\d\.]+)[\s]+<\/title>/ },
+
+  ]
+end

data/lib/whatweb/plugins/zeus-traffic-manager.rb

@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "Zeus-Traffic-Manager" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2011-03-17
+  @version = "0.1"
+  @description = "Zeus Traffic Manager - Application Delivery Controller - allows you to deliver fast, secure and available applications to your users at minimum infrastructure cost across any combination of physical, virtual and cloud infrastructures."
+  @website = "http://www.zeus.com/products/traffic-manager/index.html"
+
+  # ShodanHQ results as at 2011-03-17 #
+  # 8,788 for set-cookie X-Mapping
+
+  # Passive #
+  def passive(target)
+    m = []
+
+    # Set-Cookie # X-Mapping
+    m << { name: "Set-Cookie" } if target.headers["set-cookie"] =~ /^X-Mapping-[a-z]{8}=([A-F\d]{32}|deleted);/
+
+    # Return passive matches
+    m
+  end
+end

data/lib/whatweb/plugins/zeus-web-server.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "Zeus-Web-Server" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2011-03-25
+  @version = "0.1"
+  @description = "Zeus Web Server is the most scalable, high-performance web server software available, underpinning business-critical solutions for the world's leading web hosting, content provider and secure e-commerce companies."
+  @website = "http://www.zeus.com/products/web-server/"
+
+  # ShodanHQ results as at 2011-03-25 #
+  # 7,251 for zeus
+  #    38 for X-Zeus-Mapping
+
+  # Matches #
+  @matches = [
+
+    # HTTP Server Header
+    { search: "headers[server]", regexp: /^Zeus$/ },
+
+    # Version Detection
+    { search: "headers[server]", version: /^Zeus\/(([\d]+)(\.|_)([\d]+))$/ },
+
+  ]
+end

data/lib/whatweb/plugins/zfeeder.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "zFeeder" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2010-08-22
+  @version = "0.1"
+  @description = "check zFeeder if you want to show other's RSS content (news and much more) on your website, wapsite or use it on your PC (or intranet) as a news reader."
+  @website = "http://zvonnews.sourceforge.net/"
+
+  # Google results as at 2010-08-22 #
+  # 319 for "powered by zFeeder"
+  # 148 for "powered by zFeeder" inurl:zfposition|zfcategory
+
+  # Dorks #
+  @dorks = [
+    '"powered by zFeeder" inurl:zfposition|zfcategory'
+  ]
+
+  # Matches #
+  @matches = [
+
+    # From the homepage: please keep the link: "powered by.." or use the logo
+    { text: '<span style="font-family: Verdana, Arial, Helvetica, sans-serif; font-size: xx-small;">powered by <a href="http://zvonnews.sourceforge.net">zFeeder</a></span>' },
+
+  ]
+end

data/lib/whatweb/plugins/zikula.rb

@@ -0,0 +1,44 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "Zikula" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2010-06-12
+  @version = "0.1"
+  @description = "Zikula is a Web Application Toolkit, which allows you to run impressive websites and build powerful online applications."
+  @website = "http://zikula.org"
+
+  # Dorks #
+  @dorks = [
+    '"Powered by Zikula"'
+  ]
+
+  # Matches #
+  @matches = [
+
+    # <meta name="Generator" content="Zikula - www.zikula.org" />
+    # <meta name="generator" content="Zikula Application Framework - http://zikula.de" />
+    # <meta name="Generator" content="Zikula - http://zikula.de" />
+    { name: 'meta generator',
+      text: '<meta name="Generator" content="Zikula - www.zikula.org" />' },
+
+    { name: 'meta generator de',
+      text: '<meta name="Generator" content="Zikula - http://zikula.de" />' },
+
+    { name: 'meta generator - full',
+      text: '<meta name="generator" content="Zikula Application Framework - http://zikula.de" />' },
+
+    # Powered by <a href="http://www.zikula.org">Zikula</a>
+    # <a href="http://community.zikula.org/" title="Powered by Zikula">Zikula</a>
+    { name: 'powered by community text',
+      text: '<a href="http://community.zikula.org/" title="Powered by Zikula">Zikula</a>' },
+
+    { name: 'powered by text',
+      text: 'Powered by <a href="http://www.zikula.org">Zikula</a>' }
+
+  ]
+end

data/lib/whatweb/plugins/zimplit-cms.rb

@@ -0,0 +1,48 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+# Version 0.2 # 2011-03-30 #
+# Updated regex
+##
+WhatWeb::Plugin.define "Zimplit-CMS" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2010-10-11
+  @version = "0.2"
+  @description = "Zimplit CMS: The easiest Open Source Content Management System for small web- and minisites"
+  @website = "http://www.zimplit.com/"
+
+  # Google results as at 2010-10-11 #
+  # 187 for "powered by Zimplit CMS"
+
+  # Dorks #
+  @dorks = [
+    '"powered by Zimplit CMS"'
+  ]
+
+  # Matches #
+  @matches = [
+
+    # Javascript
+    { regexp: /<script[^>]+src="http:\/\/(client\.zimplit|www\.zimplit|zimplit)\.(org|com)\/(users\/publicUser|editor)\/(jquery|ZimgZoomer|ZZMenu)\.js"[^>]*><\/script>/i },
+
+    # Version Detection # Javascript
+    { version: /<script[^>]+src="http:\/\/(client\.zimplit|www\.zimplit|zimplit)\.(org|com)\/users\/publicUser_v([\d\._]+)\/(jquery|ZimgZoomer|ZZMenu)\.js"[^>]*><\/script>/i, offset: 2 },
+
+    # HTML Comment
+    { text: '<!-- YOU ARE ONLY ALLOWED TO HIDE, DELETE OR MODIFY "POWERED BY ZIMPLIT CMS" LINK, IF THE DOMAIN HAS BEEN REGISTERED WITH A COMMERCIAL LICENSE AT WWW.ZIMPLIT.ORG -->' },
+
+    # HTML Comment
+    { text: "<!-- Please don't delete this. You can use this template for free and this is the only way that you can say thanks to me -->" },
+
+    # Powered by text
+    { regexp: /<a[^>]+href="http:\/\/(www\.)?zimplit\.org\/?"[^>]*>Powered(&nbsp;| )by(&nbsp;| )Zimplit(&nbsp;| )CMS<\/a>/i },
+
+    # Powered by text
+    { regexp: /Powered(&nbsp;| )by(&nbsp;| )<A[^>]+href="http:\/\/(www\.)?zimplit\.org\/?"[^>]*>Zimplit(&nbsp;| )CMS<\/A>/i },
+
+  ]
+end

data/lib/whatweb/plugins/zipbox-media.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+##
+# This file is part of WhatWeb and may be subject to
+# redistribution and commercial restrictions. Please see the WhatWeb
+# web site for more information on licensing and terms of use.
+# http://www.morningstarsecurity.com/research/whatweb
+##
+WhatWeb::Plugin.define "ZIPBOX-Media" do
+  @author = "Brendan Coles <bcoles@gmail.com>" # 2011-03-13
+  @version = "0.1"
+  @description = "With ZIPBOX start selling digital music, images, videos, books and more with your own secure online customizable website with credit card processing, file storage and much more."
+  @website = "http://www.zipboxmedia.com/"
+
+  # Google results as at 2011-03-13 #
+  # 34 for "POWERED BY ZIPBOX MEDIA" inurl:"album.php"
+
+  # Dorks #
+  @dorks = [
+    '"POWERED BY ZIPBOX MEDIA" inurl:"album.php"'
+  ]
+
+  # Matches #
+  @matches = [
+
+    # GHDB
+    { certainty: 75, ghdb: '"POWERED BY ZIPBOX MEDIA" inurl:"album.php"' },
+
+    # Powered by text
+    { text: '<a href="http://www.zipboxmedia.com" class="zbm"><img src="/images/zb_rotate_ft.gif" alt="Powered By ZIPBOX Media" border="0" /></a>' },
+
+    # Referral Link
+    { regexp: /<a href="https:\/\/secure.zipboxmedia.com\/signup\/\?referral=[\d]+" class="zbm" title="get your own ZIPBOX Media Store"><img src="\/images\/get_zipbox.gif" alt="Get A ZIPBOX Media Store" border="0" \/><\/a>/ },
+
+    # Load more messages link
+    { regexp: /<h3 style="padding-top:2px; margin:0px; display:none"><a href="javascript:loadMoreMessages\([\d]+\)" id="load_more_messages">Load more messages<\/a><\/h3>/ },
+
+  ]
+end