whopper 0.5.9 → 0.7.0

package/dist/signatures/technologies/power_cms.js

@@ -0,0 +1,51 @@
+import { movableTypeSignature } from "./movable_type.js";
+import { perlSignature } from "./perl.js";
+// PowerCMS is an Alfasado CMS built on top of Movable Type, so it shares the
+// mt.cgi admin script and mt-static asset path with MT. Detection keys off the
+// PowerCMS-specific plugin static path to tell it apart from plain MT, and the
+// active mt.cgi admin probe captures the version from the admin footer when
+// available (best-effort; admin pages are not always reachable).
+const adminPageRegexes = [
+    // Admin footer version text, e.g. "PowerCMS version 5.43" / "PowerCMS 4.46".
+    // Version-bearing patterns come first so the version is captured when present.
+    // PowerCMS version numbers have irregular precision (2.0493 / 4.46 / 5.43),
+    // so accept an arbitrary number of dot-separated groups.
+    "PowerCMS version ([0-9]+(?:\\.[0-9]+)*)", // v5 footer
+    "PowerCMS ([0-9]+(?:\\.[0-9]+)*)", // v4 footer
+    // v6/v7 dropped the product-name prefix and show just "version 6.83". This
+    // bare fallback is intentionally last so v4/v5 still match the prefixed forms
+    // above (first-hit-wins), limiting its blast radius to v6/v7 pages. Requiring
+    // at least one dot avoids picking up single-token "version 3" style noise, and
+    // the leading \b prevents matching words that merely end in "version"
+    // (e.g. "Subversion 1.14.2").
+    "\\bversion ([0-9]+\\.[0-9]+(?:\\.[0-9]+)*)", // v6/v7 footer
+    "/mt-static/plugins/PowerCMS/", // PowerCMS-specific marker, confirms even without a version
+];
+const activeRules = [
+    "/mt.cgi?__mode=logout", // root install (common)
+    "/mt/mt.cgi?__mode=logout",
+    "/cgi-bin/mt/mt.cgi?__mode=logout",
+    "/blog/mt.cgi?__mode=logout",
+].map((path) => ({ path, bodyRegexes: adminPageRegexes }));
+// Detects PowerCMS from the PowerCMS-specific plugin static path on public
+// pages, then confirms/extracts the version via the mt.cgi admin probe. When
+// PowerCMS is detected, Movable Type is excluded from the output to avoid the
+// underlying MT being reported alongside the actual product.
+export const powerCmsSignature = {
+    name: "PowerCMS",
+    description: "PowerCMS is a Movable Type-based content management system by Alfasado Inc.",
+    cpe: "cpe:/a:alfasado:powercms", // CPE 2.2
+    rule: {
+        confidence: "high",
+        urls: [
+            "/mt-static/plugins/PowerCMS/", // distinguishes PowerCMS from plain Movable Type
+        ],
+        bodies: [
+            "/mt-static/plugins/PowerCMS/", // same path referenced inline in public HTML
+        ],
+    },
+    activeRules,
+    excludes: [movableTypeSignature.name], // PowerCMS supersedes the underlying Movable Type
+    impliedSoftwares: [perlSignature.name], // PowerCMS is a Perl application (like MT)
+};
+//# sourceMappingURL=power_cms.js.map

package/dist/signatures/technologies/power_cms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"power_cms.js","sourceRoot":"","sources":["../../../src/signatures/technologies/power_cms.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,6EAA6E;AAC7E,+EAA+E;AAC/E,+EAA+E;AAC/E,4EAA4E;AAC5E,iEAAiE;AACjE,MAAM,gBAAgB,GAAG;IACvB,6EAA6E;IAC7E,+EAA+E;IAC/E,4EAA4E;IAC5E,yDAAyD;IACzD,yCAAyC,EAAE,YAAY;IACvD,iCAAiC,EAAE,YAAY;IAC/C,2EAA2E;IAC3E,8EAA8E;IAC9E,8EAA8E;IAC9E,+EAA+E;IAC/E,sEAAsE;IACtE,8BAA8B;IAC9B,4CAA4C,EAAE,eAAe;IAC7D,8BAA8B,EAAE,4DAA4D;CAC7F,CAAC;AAEF,MAAM,WAAW,GAAiB;IAChC,uBAAuB,EAAE,wBAAwB;IACjD,0BAA0B;IAC1B,kCAAkC;IAClC,4BAA4B;CAC7B,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;AAE3D,2EAA2E;AAC3E,6EAA6E;AAC7E,8EAA8E;AAC9E,6DAA6D;AAC7D,MAAM,CAAC,MAAM,iBAAiB,GAAc;IAC1C,IAAI,EAAE,UAAU;IAChB,WAAW,EACT,6EAA6E;IAC/E,GAAG,EAAE,0BAA0B,EAAE,UAAU;IAC3C,IAAI,EAAE;QACJ,UAAU,EAAE,MAAM;QAClB,IAAI,EAAE;YACJ,8BAA8B,EAAE,iDAAiD;SAClF;QACD,MAAM,EAAE;YACN,8BAA8B,EAAE,6CAA6C;SAC9E;KACF;IACD,WAAW;IACX,QAAQ,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,kDAAkD;IACzF,gBAAgB,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,2CAA2C;CACpF,CAAC"}

package/dist/signatures/technologies/power_cms.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=power_cms.test.d.ts.map

package/dist/signatures/technologies/power_cms.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"power_cms.test.d.ts","sourceRoot":"","sources":["../../../src/signatures/technologies/power_cms.test.ts"],"names":[],"mappings":""}

package/dist/signatures/technologies/power_cms.test.js

@@ -0,0 +1,83 @@
+import { describe, it, expect } from "vitest";
+import { matchString } from "../../analyzer/match.js";
+import { powerCmsSignature } from "./power_cms.js";
+import { movableTypeSignature } from "./movable_type.js";
+describe("powerCmsSignature", () => {
+    describe("rule (passive, public-facing marker)", () => {
+        const urls = powerCmsSignature.rule?.urls ?? [];
+        const bodies = powerCmsSignature.rule?.bodies ?? [];
+        it("matches the PowerCMS plugin static path in URLs", () => {
+            const url = "https://example.com/mt-static/plugins/PowerCMS/css/style.css";
+            expect(urls.some((r) => matchString(url, r).hit)).toBe(true);
+        });
+        it("matches the PowerCMS plugin static path inline in HTML", () => {
+            const html = '<link rel="stylesheet" href="/mt-static/plugins/PowerCMS/x.css">';
+            expect(bodies.some((r) => matchString(html, r).hit)).toBe(true);
+        });
+        it("does not match a plain Movable Type asset path", () => {
+            const url = "https://example.com/mt-static/themes-base/blog.css";
+            expect(urls.some((r) => matchString(url, r).hit)).toBe(false);
+        });
+    });
+    describe("activeRules (mt.cgi admin probe)", () => {
+        const rules = powerCmsSignature.activeRules ?? [];
+        it("probes the root and common install dirs with logout mode", () => {
+            expect(rules.map((r) => r.path)).toEqual([
+                "/mt.cgi?__mode=logout",
+                "/mt/mt.cgi?__mode=logout",
+                "/cgi-bin/mt/mt.cgi?__mode=logout",
+                "/blog/mt.cgi?__mode=logout",
+            ]);
+        });
+        it("extracts the version from the 'PowerCMS version X.Y' footer", () => {
+            const regex = rules[0].bodyRegexes.find((r) => r.includes("PowerCMS version"));
+            const result = matchString("<p>PowerCMS version 5.43</p>", regex);
+            expect(result.hit).toBe(true);
+            expect(result.version).toBe("5.43");
+        });
+        it("extracts the version from the 'PowerCMS X.Y' footer", () => {
+            const result = rules[0].bodyRegexes
+                .map((r) => matchString("Powered by PowerCMS 4.46", r))
+                .find((r) => r.hit);
+            expect(result.hit).toBe(true);
+            expect(result.version).toBe("4.46");
+        });
+        it("extracts the version from the v6/v7 'version X.Y' footer (no product prefix)", () => {
+            const result = rules[0].bodyRegexes
+                .map((r) => matchString("<p>version 6.83</p>", r))
+                .find((r) => r.hit);
+            expect(result.hit).toBe(true);
+            expect(result.version).toBe("6.83");
+        });
+        it("does not pick up a single-token 'version 3' as a version", () => {
+            const bare = rules[0].bodyRegexes.find((r) => r === "\\bversion ([0-9]+\\.[0-9]+(?:\\.[0-9]+)*)");
+            expect(matchString("requires version 3", bare).hit).toBe(false);
+        });
+        it("does not match a word that merely ends in 'version' (e.g. Subversion)", () => {
+            const bare = rules[0].bodyRegexes.find((r) => r === "\\bversion ([0-9]+\\.[0-9]+(?:\\.[0-9]+)*)");
+            expect(matchString("Subversion 1.14.2", bare).hit).toBe(false);
+        });
+        it("extracts irregular-precision versions (e.g. 2.0493)", () => {
+            const result = rules[0].bodyRegexes
+                .map((r) => matchString("PowerCMS 2.0493", r))
+                .find((r) => r.hit);
+            expect(result.version).toBe("2.0493");
+        });
+        it("confirms PowerCMS via the plugin path even without a version", () => {
+            const regex = rules[0].bodyRegexes.find((r) => r.includes("/mt-static/plugins/PowerCMS/"));
+            const result = matchString('<img src="/mt-static/plugins/PowerCMS/logo.png">', regex);
+            expect(result.hit).toBe(true);
+            expect(result.version).toBeUndefined();
+        });
+    });
+    it("uses the Alfasado PowerCMS CPE 2.2 identifier", () => {
+        expect(powerCmsSignature.cpe).toBe("cpe:/a:alfasado:powercms");
+    });
+    it("excludes Movable Type so only PowerCMS is reported", () => {
+        expect(powerCmsSignature.excludes).toContain(movableTypeSignature.name);
+    });
+    it("implies Perl as the underlying runtime", () => {
+        expect(powerCmsSignature.impliedSoftwares).toContain("Perl");
+    });
+});
+//# sourceMappingURL=power_cms.test.js.map

package/dist/signatures/technologies/power_cms.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"power_cms.test.js","sourceRoot":"","sources":["../../../src/signatures/technologies/power_cms.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;QACpD,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC;QAEpD,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,GAAG,GACP,8DAA8D,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;YAChE,MAAM,IAAI,GACR,kEAAkE,CAAC;YACrE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,GAAG,GAAG,oDAAoD,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAChD,MAAM,KAAK,GAAG,iBAAiB,CAAC,WAAW,IAAI,EAAE,CAAC;QAElD,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;YAClE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;gBACvC,uBAAuB;gBACvB,0BAA0B;gBAC1B,kCAAkC;gBAClC,4BAA4B;aAC7B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7C,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAC9B,CAAC;YACH,MAAM,MAAM,GAAG,WAAW,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;YAClE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW;iBACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,0BAA0B,EAAE,CAAC,CAAC,CAAC;iBACtD,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAE,CAAC;YACvB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;YACtF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW;iBACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC;iBACjD,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAE,CAAC;YACvB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;YAClE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC,IAAI,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,4CAA4C,CACzD,CAAC;YACH,MAAM,CAAC,WAAW,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;YAC/E,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC,IAAI,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,4CAA4C,CACzD,CAAC;YACH,MAAM,CAAC,WAAW,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW;iBACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;iBAC7C,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAE,CAAC;YACvB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;YACtE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7C,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC,CAC1C,CAAC;YACH,MAAM,MAAM,GAAG,WAAW,CACxB,kDAAkD,EAClD,KAAK,CACN,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/signatures/technologies/thinkphp.d.ts

@@ -0,0 +1,3 @@
+import type { Signature } from "../_types.js";
+export declare const thinkPhpSignature: Signature;
+//# sourceMappingURL=thinkphp.d.ts.map

package/dist/signatures/technologies/thinkphp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"thinkphp.d.ts","sourceRoot":"","sources":["../../../src/signatures/technologies/thinkphp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAG9C,eAAO,MAAM,iBAAiB,EAAE,SAuC/B,CAAC"}

package/dist/signatures/technologies/thinkphp.js

@@ -0,0 +1,41 @@
+import { phpSignature } from "./php.js";
+export const thinkPhpSignature = {
+    name: "ThinkPHP",
+    description: "ThinkPHP is an open-source PHP framework with an MVC structure, developed and maintained by Shanghai Topthink. It is widely used in China.",
+    cpe: "cpe:/a:thinkphp:thinkphp",
+    rule: {
+        confidence: "high",
+        headers: {
+            // ThinkPHP advertises itself via X-Powered-By. The version is usually
+            // absent but captured when present (e.g. "ThinkPHP/6.0.12").
+            "x-powered-by": "thinkphp/?(\\d+\\.\\d+\\.\\d+)?",
+        },
+        cookies: {
+            // Page-trace cookie exposed when debug / page trace is enabled.
+            thinkphp_show_page_trace: "",
+        },
+        bodies: [
+            // Distinctive framework banner emitted by older ThinkPHP versions
+            // (2.x/3.x), e.g. `ThinkPHP</a><sup>3.1.3</sup> { Fast & Simple OOP PHP
+            // Framework }`. The version is captured from the adjacent <sup> tag when
+            // present, and the banner still matches (version-less) when it is not.
+            // Body matching runs against raw response text with no HTML-entity
+            // decoding, so accept both the literal "&" and the "&amp;" entity form.
+            "(?:<sup>(\\d+\\.\\d+\\.\\d+)</sup>[\\s{]*)?Fast &(?:amp;)? Simple OOP PHP Framework",
+            // Debug exception page footer emitted by newer versions (5.1 / 6 / 8).
+            // The footer template renders `App::version()` (the full VERSION
+            // constant), e.g. `ThinkPHP</a> <span>V6.0.13</span>`. Requiring three
+            // numeric groups means the major-only welcome page ("ThinkPHP V6") is
+            // never captured, so no inaccurate major-only CPE is produced. The
+            // template puts a newline / indentation between </a> and <span>, so allow
+            // whitespace with \s*.
+            "ThinkPHP</a>\\s*<span>\\s*V(\\d+\\.\\d+\\.\\d+)",
+            // Framework source paths leaked on debug / exception pages (TP5.x).
+            "/thinkphp/library/think/",
+            // Default welcome page shown by fresh installs (V5 / V6 / V8, ...).
+            "ThinkPHP\\s*V[3-8]",
+        ],
+    },
+    impliedSoftwares: [phpSignature.name],
+};
+//# sourceMappingURL=thinkphp.js.map

package/dist/signatures/technologies/thinkphp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"thinkphp.js","sourceRoot":"","sources":["../../../src/signatures/technologies/thinkphp.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,MAAM,CAAC,MAAM,iBAAiB,GAAc;IAC1C,IAAI,EAAE,UAAU;IAChB,WAAW,EACT,4IAA4I;IAC9I,GAAG,EAAE,0BAA0B;IAC/B,IAAI,EAAE;QACJ,UAAU,EAAE,MAAM;QAClB,OAAO,EAAE;YACP,sEAAsE;YACtE,6DAA6D;YAC7D,cAAc,EAAE,iCAAiC;SAClD;QACD,OAAO,EAAE;YACP,gEAAgE;YAChE,wBAAwB,EAAE,EAAE;SAC7B;QACD,MAAM,EAAE;YACN,kEAAkE;YAClE,wEAAwE;YACxE,yEAAyE;YACzE,uEAAuE;YACvE,mEAAmE;YACnE,wEAAwE;YACxE,qFAAqF;YACrF,uEAAuE;YACvE,iEAAiE;YACjE,uEAAuE;YACvE,sEAAsE;YACtE,mEAAmE;YACnE,0EAA0E;YAC1E,uBAAuB;YACvB,iDAAiD;YACjD,oEAAoE;YACpE,0BAA0B;YAC1B,oEAAoE;YACpE,oBAAoB;SACrB;KACF;IACD,gBAAgB,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC;CACtC,CAAC"}

package/dist/signatures/technologies/thinkphp.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=thinkphp.test.d.ts.map

package/dist/signatures/technologies/thinkphp.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"thinkphp.test.d.ts","sourceRoot":"","sources":["../../../src/signatures/technologies/thinkphp.test.ts"],"names":[],"mappings":""}

package/dist/signatures/technologies/thinkphp.test.js

@@ -0,0 +1,132 @@
+import { describe, it, expect } from "vitest";
+import { applySignature } from "../../analyzer/apply.js";
+import { thinkPhpSignature } from "./thinkphp.js";
+function createMockContext(overrides = {}) {
+    return {
+        browser: {},
+        page: {},
+        urls: [],
+        responses: [],
+        cookies: [],
+        javascriptVariables: {},
+        timeoutMs: 30000,
+        timeoutOccurred: false,
+        ...overrides,
+    };
+}
+function createMockResponse(overrides = {}) {
+    return {
+        url: "https://example.com",
+        host: "example.com",
+        isFirstParty: true,
+        status: 200,
+        headers: { "content-type": "text/html" },
+        body: "",
+        ...overrides,
+    };
+}
+describe("thinkPhpSignature", () => {
+    it("detects ThinkPHP from the X-Powered-By header", () => {
+        const context = createMockContext({
+            responses: [
+                createMockResponse({
+                    headers: { "content-type": "text/html", "x-powered-by": "ThinkPHP" },
+                }),
+            ],
+        });
+        const detection = applySignature(context, thinkPhpSignature);
+        expect(detection?.name).toBe("ThinkPHP");
+    });
+    it("captures the version from X-Powered-By when present", () => {
+        const context = createMockContext({
+            responses: [
+                createMockResponse({
+                    headers: {
+                        "content-type": "text/html",
+                        "x-powered-by": "ThinkPHP/6.0.12",
+                    },
+                }),
+            ],
+        });
+        const detection = applySignature(context, thinkPhpSignature);
+        expect(detection?.evidences?.some((e) => e.version === "6.0.12")).toBe(true);
+    });
+    it("detects ThinkPHP from the default welcome page body", () => {
+        const context = createMockContext({
+            responses: [
+                createMockResponse({ body: "<h1>:)</h1><p> ThinkPHP V6<br/></p>" }),
+            ],
+        });
+        const detection = applySignature(context, thinkPhpSignature);
+        expect(detection?.name).toBe("ThinkPHP");
+    });
+    it("detects ThinkPHP from the legacy framework banner marker", () => {
+        const context = createMockContext({
+            responses: [
+                createMockResponse({
+                    body: "<!-- Fast & Simple OOP PHP Framework -->",
+                }),
+            ],
+        });
+        const detection = applySignature(context, thinkPhpSignature);
+        expect(detection?.name).toBe("ThinkPHP");
+    });
+    it("captures the version from the legacy framework banner", () => {
+        const context = createMockContext({
+            responses: [
+                createMockResponse({
+                    body: "ThinkPHP</a><sup>3.1.3</sup> { Fast & Simple OOP PHP Framework } -- [ WE CAN DO IT JUST THINK ]",
+                }),
+            ],
+        });
+        const detection = applySignature(context, thinkPhpSignature);
+        expect(detection?.evidences?.some((e) => e.version === "3.1.3")).toBe(true);
+    });
+    it("detects the legacy banner marker with an HTML-encoded ampersand", () => {
+        const context = createMockContext({
+            responses: [
+                createMockResponse({
+                    body: "<!-- Fast &amp; Simple OOP PHP Framework -->",
+                }),
+            ],
+        });
+        const detection = applySignature(context, thinkPhpSignature);
+        expect(detection?.name).toBe("ThinkPHP");
+    });
+    it("captures the full version from the debug exception page footer", () => {
+        const context = createMockContext({
+            responses: [
+                createMockResponse({
+                    body: '<a href="http://www.thinkphp.cn">ThinkPHP</a>\n        <span>V6.0.13</span>',
+                }),
+            ],
+        });
+        const detection = applySignature(context, thinkPhpSignature);
+        expect(detection?.evidences?.some((e) => e.version === "6.0.13")).toBe(true);
+    });
+    it("does not capture a major-only version from the welcome page", () => {
+        const context = createMockContext({
+            responses: [
+                createMockResponse({ body: "<h1>:)</h1><p> ThinkPHP V6<br/></p>" }),
+            ],
+        });
+        const detection = applySignature(context, thinkPhpSignature);
+        expect(detection?.name).toBe("ThinkPHP");
+        expect(detection?.evidences?.some((e) => e.version)).toBeFalsy();
+    });
+    it("detects ThinkPHP from the page-trace cookie", () => {
+        const context = createMockContext({
+            cookies: [
+                {
+                    name: "thinkphp_show_page_trace",
+                    value: "0|0",
+                    host: "example.com",
+                    isFirstParty: true,
+                },
+            ],
+        });
+        const detection = applySignature(context, thinkPhpSignature);
+        expect(detection?.name).toBe("ThinkPHP");
+    });
+});
+//# sourceMappingURL=thinkphp.test.js.map

package/dist/signatures/technologies/thinkphp.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"thinkphp.test.js","sourceRoot":"","sources":["../../../src/signatures/technologies/thinkphp.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD,SAAS,iBAAiB,CACxB,YAA6D,EAAE;IAE/D,OAAO;QACL,OAAO,EAAE,EAAwB;QACjC,IAAI,EAAE,EAAqB;QAC3B,IAAI,EAAE,EAAE;QACR,SAAS,EAAE,EAAE;QACb,OAAO,EAAE,EAAE;QACX,mBAAmB,EAAE,EAAE;QACvB,SAAS,EAAE,KAAK;QAChB,eAAe,EAAE,KAAK;QACtB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,YAA+B,EAAE;IAC3D,OAAO;QACL,GAAG,EAAE,qBAAqB;QAC1B,IAAI,EAAE,aAAa;QACnB,YAAY,EAAE,IAAI;QAClB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE;QACxC,IAAI,EAAE,EAAE;QACR,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,OAAO,GAAG,iBAAiB,CAAC;YAChC,SAAS,EAAE;gBACT,kBAAkB,CAAC;oBACjB,OAAO,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE;iBACrE,CAAC;aACH;SACF,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAC7D,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,OAAO,GAAG,iBAAiB,CAAC;YAChC,SAAS,EAAE;gBACT,kBAAkB,CAAC;oBACjB,OAAO,EAAE;wBACP,cAAc,EAAE,WAAW;wBAC3B,cAAc,EAAE,iBAAiB;qBAClC;iBACF,CAAC;aACH;SACF,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAC7D,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CACpE,IAAI,CACL,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,OAAO,GAAG,iBAAiB,CAAC;YAChC,SAAS,EAAE;gBACT,kBAAkB,CAAC,EAAE,IAAI,EAAE,qCAAqC,EAAE,CAAC;aACpE;SACF,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAC7D,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,OAAO,GAAG,iBAAiB,CAAC;YAChC,SAAS,EAAE;gBACT,kBAAkB,CAAC;oBACjB,IAAI,EAAE,0CAA0C;iBACjD,CAAC;aACH;SACF,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAC7D,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,OAAO,GAAG,iBAAiB,CAAC;YAChC,SAAS,EAAE;gBACT,kBAAkB,CAAC;oBACjB,IAAI,EAAE,iGAAiG;iBACxG,CAAC;aACH;SACF,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAC7D,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,OAAO,GAAG,iBAAiB,CAAC;YAChC,SAAS,EAAE;gBACT,kBAAkB,CAAC;oBACjB,IAAI,EAAE,8CAA8C;iBACrD,CAAC;aACH;SACF,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAC7D,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,OAAO,GAAG,iBAAiB,CAAC;YAChC,SAAS,EAAE;gBACT,kBAAkB,CAAC;oBACjB,IAAI,EAAE,6EAA6E;iBACpF,CAAC;aACH;SACF,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAC7D,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CACpE,IAAI,CACL,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,OAAO,GAAG,iBAAiB,CAAC;YAChC,SAAS,EAAE;gBACT,kBAAkB,CAAC,EAAE,IAAI,EAAE,qCAAqC,EAAE,CAAC;aACpE;SACF,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAC7D,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,OAAO,GAAG,iBAAiB,CAAC;YAChC,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,0BAA0B;oBAChC,KAAK,EAAE,KAAK;oBACZ,IAAI,EAAE,aAAa;oBACnB,YAAY,EAAE,IAAI;iBACW;aAChC;SACF,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAC7D,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "whopper",
-  "version": "0.5.9",
+  "version": "0.7.0",
   "description": "Whopper is a CLI tool that discovers and detects web technologies used on websites.",
   "scripts": {
     "build": "tsc -p tsconfig.json",