whopper 0.5.7 → 0.6.0

package/dist/signatures/technologies/movable_type.js

@@ -0,0 +1,56 @@
+import { perlSignature } from "./perl.js";
+// Probe common install dirs for the mt.cgi admin page. The logout mode avoids
+// the redirect to mt-update.cgi on installs that need updating. Each probe
+// mirrors the three admin-page markers (MT v2/v3/v4); the version-bearing
+// patterns come first so the version is captured when available.
+const adminPageRegexes = [
+    '/mt\\.js\\?v=([0-9]+(?:\\.[0-9]+)*)', // version (MT v4)
+    // version (MT v2.x / v3.x). Capture from the first digit up to the next tag
+    // so non-numeric suffixes (e.g. "3.36-ja" on Japanese editions) are kept
+    // without greedily spanning later </b> tags.
+    "<b>Version ([0-9][^<]*)</b>",
+    "<title>MOVABLE TYPE", // MT v2 marker
+    'mt\\.cgi"><img alt="Movable Type"', // MT v3 marker
+    "Movable Type</title>", // MT v4 marker
+];
+const activeRules = [
+    "/mt.cgi?__mode=logout", // root install (common)
+    "/mt/mt.cgi?__mode=logout",
+    "/cgi-bin/mt/mt.cgi?__mode=logout",
+    "/blog/mt.cgi?__mode=logout",
+].map((path) => ({ path, bodyRegexes: adminPageRegexes }));
+// Detects Movable Type from public-facing pages (generator meta tag, mt-static
+// assets) and, once detected, confirms/extracts the version via the mt.cgi
+// admin page probed by the active rules above.
+export const movableTypeSignature = {
+    name: "Movable Type",
+    description: "Movable Type is a weblog publishing system written in Perl by Six Apart.",
+    cpe: "cpe:/a:sixapart:movable_type", // CPE 2.2
+    rule: {
+        // Passive markers that appear on public-facing pages, so detection (and the
+        // active mt.cgi probe, which only runs for already-detected technologies)
+        // can fire without hitting the admin login page.
+        confidence: "high",
+        urls: [
+            "/mt-static/", // default StaticWebPath, referenced by public templates
+        ],
+        bodies: [
+            // generator meta tag emitted by the default templates, e.g.
+            // <meta name="generator" content="Movable Type Pro 7.9.1" />.
+            // Anchored to a literal <meta tag so escaped examples (&lt;meta ...) in
+            // articles about MT don't match; accepts single or double quotes like the
+            // other generator signatures. The trailing optional group captures the
+            // version when present.
+            "<meta[^>]+name=[\"']generator[\"'][^>]+content=[\"']Movable Type[^\"'0-9]*([0-9]+(?:\\.[0-9]+)*)?",
+            'mt\\.cgi"><img alt="Movable Type"', // admin marker, specific enough for passive use
+            // Versioned mt.js asset, e.g. src="/mt-static/mt.js?v=7.9.7". On the admin
+            // page this is often the only detection + version source (the mt-static
+            // URL rule may miss it when subresources aren't captured). No trailing
+            // delimiter so single/double quotes and extra query params all work.
+            '/mt\\.js\\?v=([0-9]+(?:\\.[0-9]+)*)',
+        ],
+    },
+    activeRules,
+    impliedSoftwares: [perlSignature.name], // Movable Type is a Perl CGI application
+};
+//# sourceMappingURL=movable_type.js.map

package/dist/signatures/technologies/movable_type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"movable_type.js","sourceRoot":"","sources":["../../../src/signatures/technologies/movable_type.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,8EAA8E;AAC9E,2EAA2E;AAC3E,0EAA0E;AAC1E,iEAAiE;AACjE,MAAM,gBAAgB,GAAG;IACvB,qCAAqC,EAAE,kBAAkB;IACzD,4EAA4E;IAC5E,yEAAyE;IACzE,6CAA6C;IAC7C,6BAA6B;IAC7B,qBAAqB,EAAE,eAAe;IACtC,mCAAmC,EAAE,eAAe;IACpD,sBAAsB,EAAE,eAAe;CACxC,CAAC;AAEF,MAAM,WAAW,GAAiB;IAChC,uBAAuB,EAAE,wBAAwB;IACjD,0BAA0B;IAC1B,kCAAkC;IAClC,4BAA4B;CAC7B,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;AAE3D,+EAA+E;AAC/E,2EAA2E;AAC3E,+CAA+C;AAC/C,MAAM,CAAC,MAAM,oBAAoB,GAAc;IAC7C,IAAI,EAAE,cAAc;IACpB,WAAW,EACT,0EAA0E;IAC5E,GAAG,EAAE,8BAA8B,EAAE,UAAU;IAC/C,IAAI,EAAE;QACJ,4EAA4E;QAC5E,0EAA0E;QAC1E,iDAAiD;QACjD,UAAU,EAAE,MAAM;QAClB,IAAI,EAAE;YACJ,aAAa,EAAE,wDAAwD;SACxE;QACD,MAAM,EAAE;YACN,4DAA4D;YAC5D,8DAA8D;YAC9D,wEAAwE;YACxE,0EAA0E;YAC1E,uEAAuE;YACvE,wBAAwB;YACxB,mGAAmG;YACnG,mCAAmC,EAAE,gDAAgD;YACrF,2EAA2E;YAC3E,wEAAwE;YACxE,uEAAuE;YACvE,qEAAqE;YACrE,qCAAqC;SACtC;KACF;IACD,WAAW;IACX,gBAAgB,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,yCAAyC;CAClF,CAAC"}

package/dist/signatures/technologies/movable_type.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=movable_type.test.d.ts.map

package/dist/signatures/technologies/movable_type.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"movable_type.test.d.ts","sourceRoot":"","sources":["../../../src/signatures/technologies/movable_type.test.ts"],"names":[],"mappings":""}

package/dist/signatures/technologies/movable_type.test.js

@@ -0,0 +1,114 @@
+import { describe, it, expect } from "vitest";
+import { matchString } from "../../analyzer/match.js";
+import { movableTypeSignature } from "./movable_type.js";
+describe("movableTypeSignature", () => {
+    describe("rule (passive, public-facing markers)", () => {
+        const bodies = movableTypeSignature.rule?.bodies ?? [];
+        const urls = movableTypeSignature.rule?.urls ?? [];
+        const generatorRegex = bodies.find((r) => r.includes("generator"));
+        it("matches the generator meta tag without a version", () => {
+            const html = '<meta name="generator" content="Movable Type" />';
+            const result = matchString(html, generatorRegex);
+            expect(result.hit).toBe(true);
+            expect(result.version).toBeUndefined();
+        });
+        it("extracts the version from the generator meta tag", () => {
+            const html = '<meta name="generator" content="Movable Type Pro 7.9.1" />';
+            const result = matchString(html, generatorRegex);
+            expect(result.hit).toBe(true);
+            expect(result.version).toBe("7.9.1");
+        });
+        it("matches a single-quoted generator meta tag", () => {
+            const html = "<meta name='generator' content='Movable Type Pro 7.9.1' />";
+            const result = matchString(html, generatorRegex);
+            expect(result.hit).toBe(true);
+            expect(result.version).toBe("7.9.1");
+        });
+        it("matches mt-static asset URLs", () => {
+            const url = "https://example.com/mt-static/themes-base/blog.css";
+            expect(urls.some((r) => matchString(url, r).hit)).toBe(true);
+        });
+        it("matches the admin image marker", () => {
+            const html = '<a href="mt.cgi"><img alt="Movable Type" src="logo.png">';
+            expect(bodies.some((r) => matchString(html, r).hit)).toBe(true);
+        });
+        it("extracts the version from the mt-static mt.js asset reference", () => {
+            const verRegex = bodies.find((r) => r.includes("mt\\.js"));
+            const result = matchString('<script src="/mt-static/mt.js?v=7.9.7"></script>', verRegex);
+            expect(result.hit).toBe(true);
+            expect(result.version).toBe("7.9.7");
+        });
+        it("extracts the mt.js version regardless of quoting or trailing params", () => {
+            const verRegex = bodies.find((r) => r.includes("mt\\.js"));
+            const singleQuoted = matchString("<script src='/mt-static/mt.js?v=7.9.7'></script>", verRegex);
+            expect(singleQuoted.version).toBe("7.9.7");
+            const extraParams = matchString('"/mt-static/mt.js?v=7.9.7&cb=1"', verRegex);
+            expect(extraParams.version).toBe("7.9.7");
+        });
+        it("does not match an escaped generator example quoted in an article", () => {
+            const html = 'Movable Type emits &lt;meta name="generator" ' +
+                'content="Movable Type 7"&gt; in the head.';
+            expect(bodies.some((r) => matchString(html, r).hit)).toBe(false);
+        });
+        it("does not match an unrelated page", () => {
+            const html = '<html><head><title>Some Blog</title>' +
+                '<meta name="generator" content="WordPress 6.5" /></head></html>';
+            expect(bodies.some((r) => matchString(html, r).hit)).toBe(false);
+        });
+    });
+    describe("activeRules (mt.cgi admin probe)", () => {
+        const rules = movableTypeSignature.activeRules ?? [];
+        it("probes the root and common install dirs with logout mode", () => {
+            expect(rules.map((r) => r.path)).toEqual([
+                "/mt.cgi?__mode=logout",
+                "/mt/mt.cgi?__mode=logout",
+                "/cgi-bin/mt/mt.cgi?__mode=logout",
+                "/blog/mt.cgi?__mode=logout",
+            ]);
+        });
+        it("detects the MT v2, v3 and v4 admin-page markers", () => {
+            const regexes = rules[0].bodyRegexes;
+            const v2 = "<html><head><title>MOVABLE TYPE</title></head></html>";
+            const v3 = '<a href="mt.cgi"><img alt="Movable Type" src="x">';
+            const v4 = "<title>Sign in | Movable Type</title>";
+            for (const html of [v2, v3, v4]) {
+                expect(regexes.some((r) => matchString(html, r).hit)).toBe(true);
+            }
+        });
+        it("extracts the version from the mt.js asset reference", () => {
+            const regex = rules[0].bodyRegexes.find((r) => r.includes("mt\\.js"));
+            const result = matchString('src="/mt.js?v=5.2.6"', regex);
+            expect(result.hit).toBe(true);
+            expect(result.version).toBe("5.2.6");
+        });
+        it("extracts the version from the 'Version x.y' marker (MT v2/v3)", () => {
+            const regex = rules[0].bodyRegexes.find((r) => r.includes("Version"));
+            const result = matchString("<b>Version 3.2</b>", regex);
+            expect(result.hit).toBe(true);
+            expect(result.version).toBe("3.2");
+        });
+        it("keeps a non-numeric version suffix (e.g. Japanese editions)", () => {
+            const regex = rules[0].bodyRegexes.find((r) => r.includes("Version"));
+            const result = matchString("<b>Version 3.36-ja</b>", regex);
+            expect(result.hit).toBe(true);
+            expect(result.version).toBe("3.36-ja");
+        });
+        it("does not over-capture across multiple <b> tags", () => {
+            const regex = rules[0].bodyRegexes.find((r) => r.includes("Version"));
+            const result = matchString("<b>Version 3.2</b> x <b>y</b>", regex);
+            expect(result.hit).toBe(true);
+            expect(result.version).toBe("3.2");
+        });
+        it("does not match an unrelated response", () => {
+            const probe = rules[0];
+            expect(probe.bodyRegexes.some((r) => matchString("<html>not mt</html>", r).hit)).toBe(false);
+        });
+    });
+    it("uses the Six Apart Movable Type CPE 2.2 identifier", () => {
+        expect(movableTypeSignature.cpe).toBe("cpe:/a:sixapart:movable_type");
+    });
+    it("implies Perl as the underlying runtime", () => {
+        expect(movableTypeSignature.impliedSoftwares).toContain("Perl");
+    });
+});
+//# sourceMappingURL=movable_type.test.js.map

package/dist/signatures/technologies/movable_type.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"movable_type.test.js","sourceRoot":"","sources":["../../../src/signatures/technologies/movable_type.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;QACrD,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;QACnD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAE,CAAC;QAEpE,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,MAAM,IAAI,GAAG,kDAAkD,CAAC;YAChE,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YACjD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,MAAM,IAAI,GACR,4DAA4D,CAAC;YAC/D,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YACjD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,MAAM,IAAI,GACR,4DAA4D,CAAC;YAC/D,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YACjD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;YACtC,MAAM,GAAG,GAAG,oDAAoD,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,MAAM,IAAI,GAAG,0DAA0D,CAAC;YACxE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;YACvE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAE,CAAC;YAC5D,MAAM,MAAM,GAAG,WAAW,CACxB,kDAAkD,EAClD,QAAQ,CACT,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;YAC7E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAE,CAAC;YAC5D,MAAM,YAAY,GAAG,WAAW,CAC9B,kDAAkD,EAClD,QAAQ,CACT,CAAC;YACF,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3C,MAAM,WAAW,GAAG,WAAW,CAAC,iCAAiC,EAAE,QAAQ,CAAC,CAAC;YAC7E,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;YAC1E,MAAM,IAAI,GACR,+CAA+C;gBAC/C,2CAA2C,CAAC;YAC9C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;YAC1C,MAAM,IAAI,GACR,sCAAsC;gBACtC,iEAAiE,CAAC;YACpE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAChD,MAAM,KAAK,GAAG,oBAAoB,CAAC,WAAW,IAAI,EAAE,CAAC;QAErD,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;YAClE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;gBACvC,uBAAuB;gBACvB,0BAA0B;gBAC1B,kCAAkC;gBAClC,4BAA4B;aAC7B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC;YACtC,MAAM,EAAE,GAAG,uDAAuD,CAAC;YACnE,MAAM,EAAE,GAAG,mDAAmD,CAAC;YAC/D,MAAM,EAAE,GAAG,uCAAuC,CAAC;YACnD,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;gBAChC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnE,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAE,CAAC;YACxE,MAAM,MAAM,GAAG,WAAW,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;YAC1D,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;YACvE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAE,CAAC;YACxE,MAAM,MAAM,GAAG,WAAW,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAE,CAAC;YACxE,MAAM,MAAM,GAAG,WAAW,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;YAC5D,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAE,CAAC;YACxE,MAAM,MAAM,GAAG,WAAW,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;YACnE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YACxB,MAAM,CACJ,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CACzE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/signatures/technologies/power_cms.d.ts

@@ -0,0 +1,3 @@
+import type { Signature } from "../_types.js";
+export declare const powerCmsSignature: Signature;
+//# sourceMappingURL=power_cms.d.ts.map

package/dist/signatures/technologies/power_cms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"power_cms.d.ts","sourceRoot":"","sources":["../../../src/signatures/technologies/power_cms.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAc,SAAS,EAAE,MAAM,cAAc,CAAC;AAqC1D,eAAO,MAAM,iBAAiB,EAAE,SAiB/B,CAAC"}

package/dist/signatures/technologies/power_cms.js

@@ -0,0 +1,51 @@
+import { movableTypeSignature } from "./movable_type.js";
+import { perlSignature } from "./perl.js";
+// PowerCMS is an Alfasado CMS built on top of Movable Type, so it shares the
+// mt.cgi admin script and mt-static asset path with MT. Detection keys off the
+// PowerCMS-specific plugin static path to tell it apart from plain MT, and the
+// active mt.cgi admin probe captures the version from the admin footer when
+// available (best-effort; admin pages are not always reachable).
+const adminPageRegexes = [
+    // Admin footer version text, e.g. "PowerCMS version 5.43" / "PowerCMS 4.46".
+    // Version-bearing patterns come first so the version is captured when present.
+    // PowerCMS version numbers have irregular precision (2.0493 / 4.46 / 5.43),
+    // so accept an arbitrary number of dot-separated groups.
+    "PowerCMS version ([0-9]+(?:\\.[0-9]+)*)", // v5 footer
+    "PowerCMS ([0-9]+(?:\\.[0-9]+)*)", // v4 footer
+    // v6/v7 dropped the product-name prefix and show just "version 6.83". This
+    // bare fallback is intentionally last so v4/v5 still match the prefixed forms
+    // above (first-hit-wins), limiting its blast radius to v6/v7 pages. Requiring
+    // at least one dot avoids picking up single-token "version 3" style noise, and
+    // the leading \b prevents matching words that merely end in "version"
+    // (e.g. "Subversion 1.14.2").
+    "\\bversion ([0-9]+\\.[0-9]+(?:\\.[0-9]+)*)", // v6/v7 footer
+    "/mt-static/plugins/PowerCMS/", // PowerCMS-specific marker, confirms even without a version
+];
+const activeRules = [
+    "/mt.cgi?__mode=logout", // root install (common)
+    "/mt/mt.cgi?__mode=logout",
+    "/cgi-bin/mt/mt.cgi?__mode=logout",
+    "/blog/mt.cgi?__mode=logout",
+].map((path) => ({ path, bodyRegexes: adminPageRegexes }));
+// Detects PowerCMS from the PowerCMS-specific plugin static path on public
+// pages, then confirms/extracts the version via the mt.cgi admin probe. When
+// PowerCMS is detected, Movable Type is excluded from the output to avoid the
+// underlying MT being reported alongside the actual product.
+export const powerCmsSignature = {
+    name: "PowerCMS",
+    description: "PowerCMS is a Movable Type-based content management system by Alfasado Inc.",
+    cpe: "cpe:/a:alfasado:powercms", // CPE 2.2
+    rule: {
+        confidence: "high",
+        urls: [
+            "/mt-static/plugins/PowerCMS/", // distinguishes PowerCMS from plain Movable Type
+        ],
+        bodies: [
+            "/mt-static/plugins/PowerCMS/", // same path referenced inline in public HTML
+        ],
+    },
+    activeRules,
+    excludes: [movableTypeSignature.name], // PowerCMS supersedes the underlying Movable Type
+    impliedSoftwares: [perlSignature.name], // PowerCMS is a Perl application (like MT)
+};
+//# sourceMappingURL=power_cms.js.map

package/dist/signatures/technologies/power_cms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"power_cms.js","sourceRoot":"","sources":["../../../src/signatures/technologies/power_cms.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,6EAA6E;AAC7E,+EAA+E;AAC/E,+EAA+E;AAC/E,4EAA4E;AAC5E,iEAAiE;AACjE,MAAM,gBAAgB,GAAG;IACvB,6EAA6E;IAC7E,+EAA+E;IAC/E,4EAA4E;IAC5E,yDAAyD;IACzD,yCAAyC,EAAE,YAAY;IACvD,iCAAiC,EAAE,YAAY;IAC/C,2EAA2E;IAC3E,8EAA8E;IAC9E,8EAA8E;IAC9E,+EAA+E;IAC/E,sEAAsE;IACtE,8BAA8B;IAC9B,4CAA4C,EAAE,eAAe;IAC7D,8BAA8B,EAAE,4DAA4D;CAC7F,CAAC;AAEF,MAAM,WAAW,GAAiB;IAChC,uBAAuB,EAAE,wBAAwB;IACjD,0BAA0B;IAC1B,kCAAkC;IAClC,4BAA4B;CAC7B,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;AAE3D,2EAA2E;AAC3E,6EAA6E;AAC7E,8EAA8E;AAC9E,6DAA6D;AAC7D,MAAM,CAAC,MAAM,iBAAiB,GAAc;IAC1C,IAAI,EAAE,UAAU;IAChB,WAAW,EACT,6EAA6E;IAC/E,GAAG,EAAE,0BAA0B,EAAE,UAAU;IAC3C,IAAI,EAAE;QACJ,UAAU,EAAE,MAAM;QAClB,IAAI,EAAE;YACJ,8BAA8B,EAAE,iDAAiD;SAClF;QACD,MAAM,EAAE;YACN,8BAA8B,EAAE,6CAA6C;SAC9E;KACF;IACD,WAAW;IACX,QAAQ,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,kDAAkD;IACzF,gBAAgB,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,2CAA2C;CACpF,CAAC"}

package/dist/signatures/technologies/power_cms.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=power_cms.test.d.ts.map

package/dist/signatures/technologies/power_cms.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"power_cms.test.d.ts","sourceRoot":"","sources":["../../../src/signatures/technologies/power_cms.test.ts"],"names":[],"mappings":""}

package/dist/signatures/technologies/power_cms.test.js

@@ -0,0 +1,83 @@
+import { describe, it, expect } from "vitest";
+import { matchString } from "../../analyzer/match.js";
+import { powerCmsSignature } from "./power_cms.js";
+import { movableTypeSignature } from "./movable_type.js";
+describe("powerCmsSignature", () => {
+    describe("rule (passive, public-facing marker)", () => {
+        const urls = powerCmsSignature.rule?.urls ?? [];
+        const bodies = powerCmsSignature.rule?.bodies ?? [];
+        it("matches the PowerCMS plugin static path in URLs", () => {
+            const url = "https://example.com/mt-static/plugins/PowerCMS/css/style.css";
+            expect(urls.some((r) => matchString(url, r).hit)).toBe(true);
+        });
+        it("matches the PowerCMS plugin static path inline in HTML", () => {
+            const html = '<link rel="stylesheet" href="/mt-static/plugins/PowerCMS/x.css">';
+            expect(bodies.some((r) => matchString(html, r).hit)).toBe(true);
+        });
+        it("does not match a plain Movable Type asset path", () => {
+            const url = "https://example.com/mt-static/themes-base/blog.css";
+            expect(urls.some((r) => matchString(url, r).hit)).toBe(false);
+        });
+    });
+    describe("activeRules (mt.cgi admin probe)", () => {
+        const rules = powerCmsSignature.activeRules ?? [];
+        it("probes the root and common install dirs with logout mode", () => {
+            expect(rules.map((r) => r.path)).toEqual([
+                "/mt.cgi?__mode=logout",
+                "/mt/mt.cgi?__mode=logout",
+                "/cgi-bin/mt/mt.cgi?__mode=logout",
+                "/blog/mt.cgi?__mode=logout",
+            ]);
+        });
+        it("extracts the version from the 'PowerCMS version X.Y' footer", () => {
+            const regex = rules[0].bodyRegexes.find((r) => r.includes("PowerCMS version"));
+            const result = matchString("<p>PowerCMS version 5.43</p>", regex);
+            expect(result.hit).toBe(true);
+            expect(result.version).toBe("5.43");
+        });
+        it("extracts the version from the 'PowerCMS X.Y' footer", () => {
+            const result = rules[0].bodyRegexes
+                .map((r) => matchString("Powered by PowerCMS 4.46", r))
+                .find((r) => r.hit);
+            expect(result.hit).toBe(true);
+            expect(result.version).toBe("4.46");
+        });
+        it("extracts the version from the v6/v7 'version X.Y' footer (no product prefix)", () => {
+            const result = rules[0].bodyRegexes
+                .map((r) => matchString("<p>version 6.83</p>", r))
+                .find((r) => r.hit);
+            expect(result.hit).toBe(true);
+            expect(result.version).toBe("6.83");
+        });
+        it("does not pick up a single-token 'version 3' as a version", () => {
+            const bare = rules[0].bodyRegexes.find((r) => r === "\\bversion ([0-9]+\\.[0-9]+(?:\\.[0-9]+)*)");
+            expect(matchString("requires version 3", bare).hit).toBe(false);
+        });
+        it("does not match a word that merely ends in 'version' (e.g. Subversion)", () => {
+            const bare = rules[0].bodyRegexes.find((r) => r === "\\bversion ([0-9]+\\.[0-9]+(?:\\.[0-9]+)*)");
+            expect(matchString("Subversion 1.14.2", bare).hit).toBe(false);
+        });
+        it("extracts irregular-precision versions (e.g. 2.0493)", () => {
+            const result = rules[0].bodyRegexes
+                .map((r) => matchString("PowerCMS 2.0493", r))
+                .find((r) => r.hit);
+            expect(result.version).toBe("2.0493");
+        });
+        it("confirms PowerCMS via the plugin path even without a version", () => {
+            const regex = rules[0].bodyRegexes.find((r) => r.includes("/mt-static/plugins/PowerCMS/"));
+            const result = matchString('<img src="/mt-static/plugins/PowerCMS/logo.png">', regex);
+            expect(result.hit).toBe(true);
+            expect(result.version).toBeUndefined();
+        });
+    });
+    it("uses the Alfasado PowerCMS CPE 2.2 identifier", () => {
+        expect(powerCmsSignature.cpe).toBe("cpe:/a:alfasado:powercms");
+    });
+    it("excludes Movable Type so only PowerCMS is reported", () => {
+        expect(powerCmsSignature.excludes).toContain(movableTypeSignature.name);
+    });
+    it("implies Perl as the underlying runtime", () => {
+        expect(powerCmsSignature.impliedSoftwares).toContain("Perl");
+    });
+});
+//# sourceMappingURL=power_cms.test.js.map

package/dist/signatures/technologies/power_cms.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"power_cms.test.js","sourceRoot":"","sources":["../../../src/signatures/technologies/power_cms.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;QACpD,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC;QAEpD,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,GAAG,GACP,8DAA8D,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;YAChE,MAAM,IAAI,GACR,kEAAkE,CAAC;YACrE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,GAAG,GAAG,oDAAoD,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAChD,MAAM,KAAK,GAAG,iBAAiB,CAAC,WAAW,IAAI,EAAE,CAAC;QAElD,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;YAClE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;gBACvC,uBAAuB;gBACvB,0BAA0B;gBAC1B,kCAAkC;gBAClC,4BAA4B;aAC7B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7C,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAC9B,CAAC;YACH,MAAM,MAAM,GAAG,WAAW,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;YAClE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW;iBACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,0BAA0B,EAAE,CAAC,CAAC,CAAC;iBACtD,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAE,CAAC;YACvB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;YACtF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW;iBACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC;iBACjD,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAE,CAAC;YACvB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;YAClE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC,IAAI,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,4CAA4C,CACzD,CAAC;YACH,MAAM,CAAC,WAAW,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;YAC/E,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC,IAAI,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,4CAA4C,CACzD,CAAC;YACH,MAAM,CAAC,WAAW,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW;iBACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;iBAC7C,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAE,CAAC;YACvB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;YACtE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7C,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC,CAC1C,CAAC;YACH,MAAM,MAAM,GAAG,WAAW,CACxB,kDAAkD,EAClD,KAAK,CACN,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "whopper",
-  "version": "0.5.7",
+  "version": "0.6.0",
   "description": "Whopper is a CLI tool that discovers and detects web technologies used on websites.",
   "scripts": {
     "build": "tsc -p tsconfig.json",
@@ -10,7 +10,8 @@
     "lint": "eslint . --ext .ts",
     "format": "prettier --write .",
     "test": "vitest run --coverage",
-    "prepublishOnly": "npm run clean && npm run lint && npm test && npm run build",
+    "preversion": "npm run lint && npm test",
+    "prepublishOnly": "npm run clean && npm run build",
     "release": "git push --follow-tags && npm publish",
     "release:patch": "npm version patch && git push --follow-tags && npm publish",
     "release:minor": "npm version minor && git push --follow-tags && npm publish",