├── .simplecov ├── test ├── enable_coverage.rb └── plugins │ └── deprecated-plugin-format.rb ├── plugins ├── IpToCountry.csv ├── country-ips.dat ├── genexus.rb ├── newbay_media.rb ├── lithium.rb ├── advance_digitalmg.rb ├── aspforum.rb ├── fusionbb.rb ├── kinja.rb ├── airtiesrouter.rb ├── myzone.rb ├── stackexchange.rb ├── samsung-printer.rb ├── ip.rb ├── openid.rb ├── ocp.rb ├── backbee.rb ├── lightbox.rb ├── tribune.rb ├── gannett.rb ├── trbas.rb ├── dwr.rb ├── windweb.rb ├── anygate.rb ├── crazyegg.rb ├── rvi-camera.rb ├── typekit.rb ├── watson.rb ├── xtra-business-hosting.rb ├── clicky.rb ├── html5.rb ├── ecomat-cms.rb ├── mint.rb ├── dvr-webclient.rb ├── intrasrv.rb ├── teleflora.rb ├── wordfence.rb ├── bing-searchengine.rb ├── jw-player.rb ├── sillysmart.rb ├── php-cake.rb ├── typepad.rb ├── wolfcms.rb ├── wooframework.rb ├── yaf.rb ├── toshiba-printer.rb ├── dublin_core.rb ├── strict-transport-security.rb ├── echo.rb ├── ez-oscommerce.rb ├── litespeed.rb ├── mcclatchy_interactive.rb ├── empirecms.rb ├── brightcove.rb ├── extjs.rb ├── star-network.rb ├── x-vortech-php.rb ├── code_igniter_profiler.rb ├── ee.rb ├── wordpress-supercache.rb ├── laravel.rb ├── webtrends.rb ├── addthis.rb ├── hotaru-cms.rb ├── mezzanine.rb ├── citrix-web-pn-server.rb ├── mobile-joomla.rb ├── proxy-agent.rb ├── pyro-cms.rb ├── aladdin-hasp-license-manager.rb ├── hubspot.rb ├── blogsmithmedia.rb ├── cruxpa.rb ├── sharethis.rb ├── vimeo.rb ├── hp-printer.rb ├── teamviewer.rb ├── frame.rb ├── utorrent.rb ├── weebly.rb ├── deluge-web.rb ├── sailsjs.rb ├── twistedweb.rb ├── web2py.rb ├── world-now.rb ├── 1n1-hosting.rb ├── citrix-confproxy.rb ├── clickmotive.rb ├── embedthis.rb ├── recaptcha.rb ├── blox.rb ├── nucleus.rb ├── essentia-web-server.rb ├── meta-geo.rb ├── cdn-cache-server.rb ├── hikvision.rb ├── qtranslate.rb ├── wpml.rb ├── youtube.rb ├── amazon-elastic-load-balancer.rb ├── ben-ssl.rb ├── clicktale.rb ├── nop-commerce.rb ├── w3mfc.rb ├── x-hacker.rb ├── adxstudio-cms.rb ├── haproxy.rb ├── maxmind-geoip.rb ├── mongrel.rb ├── siemens-router.rb ├── tinyproxy.rb ├── via.rb ├── content-language.rb ├── mapserver-4-windows.rb ├── redirect-location.rb ├── trend-micro.rb ├── amr-wincontrol.rb ├── cougar.rb ├── cscssm.rb ├── laserwash.rb ├── meta-powered-by.rb ├── webiis.rb ├── wordpress-stats.rb ├── edito-cms.rb ├── intrinsyc-deviceweb.rb ├── mason.rb ├── toshiba-network-camera.rb ├── facebook-plugin.rb ├── mcafee-secure.rb ├── moonfruit.rb ├── xavante.rb ├── cgi-backdoor.rb ├── commerce-builder.rb ├── emc-networker.rb ├── motorito.rb ├── google-talk-chatback.rb ├── pantheon.rb ├── whizzy-cms.rb ├── adsubtract.rb ├── demandware.rb ├── footprint.rb ├── freenac.rb ├── google-maps.rb ├── tinybb.rb ├── azure.rb ├── controlstar-scada.rb ├── flir-ax8.rb ├── profense-firewall.rb ├── proxy-authenticate.rb ├── quickweb.rb ├── restlet-framework.rb ├── speakker.rb ├── svn.rb ├── wp-slimstat.rb ├── 4d.rb ├── abo.cms.rb ├── abyss-web-server.rb ├── chance-i-divis-dvr.rb ├── extplorer.rb ├── falcon-web-server.rb ├── rcttools.rb ├── xenforo.rb ├── blazix.rb ├── cl-http.rb ├── comanche.rb ├── cups.rb ├── iqeye-netcam.rb ├── kampyle.rb ├── xeneo-web-server.rb ├── akamai-global-host.rb ├── edgeprism.rb ├── fnord.rb ├── kandidat-cms.rb ├── sagem-router.rb ├── velazquez.rb ├── access-control-allow-methods.rb ├── astaro-end-user-portal.rb ├── avaya-aura-utility-server.rb ├── fbi-takedown-notice.rb ├── meta-author.rb ├── mno-go-search.rb ├── allow.rb ├── bad-behaviour-anti-spam-plugin.rb ├── craftcms.rb ├── netboard.rb ├── packetwave.rb ├── powerdns.rb ├── perfectone-voip-phone.rb ├── roxen.rb ├── savant.rb ├── applet.rb ├── ericsson-tv-web-server.rb ├── redshop.rb ├── rutorrent.rb ├── website-tonight.rb ├── x-powered-by-header.rb ├── amdsoft.rb ├── baap-mobile-version.rb ├── envision.rb ├── gordano-messaging-suite.rb ├── ibm-internet-connection-server.rb ├── ourdisclaimer.rb ├── sitecore.rb ├── david-webbox.rb ├── netbox.rb ├── nginx.rb ├── smodcms.rb ├── socorro.rb ├── sonicwall-ssl-vpn.rb ├── tealeaf.rb ├── cpcommerce.rb ├── netapp-nas.rb ├── powerschool.rb ├── spring-framework.rb ├── vmware-horizon.rb ├── wordpress-mobile-pack.rb ├── fujitsu-infoprovider-pro.rb ├── wix.rb ├── alcatel-lucent-omniswitch.rb ├── apache-cocoon.rb ├── dynamicweb.rb └── keyfocus-webserver.rb ├── icons ├── whatweb_icon32x32.png ├── whatweb_icon256x256.png └── whatweb_icon_48x48.png ├── INSTALL.md ├── .travis.yml ├── plugin-development ├── charset-test-list.txt ├── alexa-top-10.txt └── wget-list ├── lib ├── logging │ ├── jsonverbose.rb │ └── object.rb └── whatweb │ └── version.rb ├── plugins-disabled ├── length.rb ├── html-comments.rb ├── md5.rb ├── meta-keywords.rb ├── shortcut-icon.rb ├── meta-contact.rb ├── meta-description.rb ├── google-webmaster-verify.rb ├── content-type.rb ├── address.rb ├── script-urls.rb ├── meta-state.rb ├── http-headers.rb ├── frame-urls.rb ├── meta-city.rb ├── rss_feed.rb ├── meta-country.rb ├── atom_feed.rb └── meta-zipcode.rb ├── .rubocop.yml └── my-plugins └── plugin-tutorial-4.rb /.simplecov: -------------------------------------------------------------------------------- 1 | SimpleCov.start do 2 | end 3 | -------------------------------------------------------------------------------- /test/enable_coverage.rb: -------------------------------------------------------------------------------- 1 | require 'simplecov' 2 | -------------------------------------------------------------------------------- /plugins/IpToCountry.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/githubmaidou/WhatWeb/master/plugins/IpToCountry.csv -------------------------------------------------------------------------------- /plugins/country-ips.dat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/githubmaidou/WhatWeb/master/plugins/country-ips.dat -------------------------------------------------------------------------------- /icons/whatweb_icon32x32.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/githubmaidou/WhatWeb/master/icons/whatweb_icon32x32.png -------------------------------------------------------------------------------- /icons/whatweb_icon256x256.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/githubmaidou/WhatWeb/master/icons/whatweb_icon256x256.png -------------------------------------------------------------------------------- /icons/whatweb_icon_48x48.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/githubmaidou/WhatWeb/master/icons/whatweb_icon_48x48.png -------------------------------------------------------------------------------- /INSTALL.md: -------------------------------------------------------------------------------- 1 | # INSTALL 2 | 3 | Visit https://github.com/urbanadventurer/WhatWeb/wiki/Installation for installation instructions. 4 | -------------------------------------------------------------------------------- /.travis.yml: -------------------------------------------------------------------------------- 1 | language: ruby 2 | rvm: 3 | - 2.0 4 | - 2.1 5 | - 2.2 6 | - 2.3 7 | - 2.4 8 | script: 9 | - bundle exec rake all -------------------------------------------------------------------------------- /plugin-development/charset-test-list.txt: -------------------------------------------------------------------------------- 1 | www.amazon.co.jp 2 | www.pravda.ru 3 | www.118114.cn 4 | 360.cn 5 | www.cntv.cn 6 | fastpic.ru 7 | http://www.columbia.edu/~fdc/utf8/ 8 | 9 | -------------------------------------------------------------------------------- /plugin-development/alexa-top-10.txt: -------------------------------------------------------------------------------- 1 | google.com 2 | youtube.com 3 | tmall.com 4 | qq.com 5 | baidu.com 6 | facebook.com 7 | sohu.com 8 | login.tmall.com 9 | taobao.com 10 | yahoo.com 11 | -------------------------------------------------------------------------------- /lib/logging/jsonverbose.rb: -------------------------------------------------------------------------------- 1 | 2 | # This is not JSON compliant as a list 3 | class LoggingJSONVerbose < Logging 4 | def out(target, status, results) 5 | # brutal and simple 6 | $semaphore.synchronize do 7 | @f.puts JSON.fast_generate([target, status, results]) 8 | end 9 | end 10 | end 11 | -------------------------------------------------------------------------------- /lib/logging/object.rb: -------------------------------------------------------------------------------- 1 | class LoggingObject < Logging 2 | def out(target, status, results) 3 | $semaphore.synchronize do 4 | @f.puts "Identifying: #{target}" 5 | @f.puts "HTTP-Status: #{status}" 6 | @f.puts results.pretty_inspect unless results.empty? 7 | @f.puts 8 | end 9 | end 10 | end 11 | -------------------------------------------------------------------------------- /plugins/genexus.rb: -------------------------------------------------------------------------------- 1 | 2 | ## 3 | Plugin.define do 4 | name "GeneXus" 5 | authors [ 6 | "Daniel Maldonado", 7 | ] 8 | version "0.1" 9 | description "GeneXus is a tool for agile development." 10 | website "http://caceriadespammers.com.ar" 11 | 12 | matches [ 13 | {:text=>""}, 14 | ] 15 | 16 | end 17 | -------------------------------------------------------------------------------- /plugins/newbay_media.rb: -------------------------------------------------------------------------------- 1 | ## 2 | Plugin.define do 3 | name "NewBayMediaWebsite" 4 | authors [ 5 | "Elias Dorneles", 6 | ] 7 | version "0.1" 8 | description "Identifies a news website by New Bay Media" 9 | 10 | matches [ 11 | { 12 | :name => "CSS class used for the menus", 13 | :regexp => /nice-menu-menu-newbay-media-websites/ 14 | } 15 | ] 16 | end 17 | 18 | -------------------------------------------------------------------------------- /test/plugins/deprecated-plugin-format.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | # 7 | Plugin.define "Deprecated-Plugin-Format" do 8 | author "Andrew Horton" 9 | description "Tests the deprecated plugin format for WhatWeb version < 0.5.0." 10 | 11 | end 12 | -------------------------------------------------------------------------------- /plugins-disabled/length.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Len" 9 | authors [ 10 | "Andrew Horton", 11 | ] 12 | version "0.1" 13 | description "The length of the HTML body" 14 | 15 | 16 | passive do 17 | [{:string=>@body.size}] 18 | end 19 | 20 | end 21 | 22 | -------------------------------------------------------------------------------- /plugins/lithium.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Lithium" 9 | authors [ 10 | "Mateusz Golewski", 11 | ] 12 | version "0.1" 13 | description "A Lithium forum engine." 14 | 15 | matches [ 16 | 17 | {:name=>"BODY id element", 18 | :regexp=>/]+id="lia-body"/}, 19 | 20 | ] 21 | 22 | end 23 | -------------------------------------------------------------------------------- /plugins/advance_digitalmg.rb: -------------------------------------------------------------------------------- 1 | ## 2 | Plugin.define do 3 | name "AdvanceDigital" 4 | authors [ 5 | "Elias Dorneles", 6 | "Andrew Horton", # v0.2 # 2019-07-10 # Added website field. 7 | ] 8 | version "0.2" 9 | description "Identifies a news website by Advance Digital MG network" 10 | website "https://www.advancelocal.com/" 11 | matches [ 12 | { 13 | :name => "link to user agreement that it's present in the footer", 14 | :regexp => /href="http:\/\/www.advance.net\/advancedigitalUserAgreementPP\/#opt_out.*Ad Choices/ 15 | } 16 | ] 17 | end 18 | 19 | -------------------------------------------------------------------------------- /plugins/aspforum.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "ASPForum" 9 | authors [ 10 | "Mateusz Golewski", 11 | ] 12 | version "0.1" 13 | description "Kind of ASP forum." 14 | 15 | matches [ 16 | 17 | {:version=>/]+id="FORUMS_FORUM_GROUP_V([\d_]+)/, :name=>"version" }, 18 | 19 | ] 20 | 21 | end 22 | -------------------------------------------------------------------------------- /plugins/fusionbb.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "FusionBB" 9 | authors [ 10 | "Claudio Salazar", 11 | ] 12 | version "0.1" 13 | description "FusionBB is a PHP forum." 14 | 15 | matches [ 16 | 17 | {:version=>/FusionBB™ Version (\d+\.?\d+?)/, :name=>"version" }, 18 | 19 | ] 20 | 21 | end 22 | -------------------------------------------------------------------------------- /.rubocop.yml: -------------------------------------------------------------------------------- 1 | AllCops: 2 | Exclude: 3 | - 'addons/*' 4 | - 'test/**/*' 5 | TargetRubyVersion: 2.5 6 | 7 | Metrics/AbcSize: 8 | Enabled: false 9 | Metrics/BlockLength: 10 | Enabled: false 11 | Metrics/ClassLength: 12 | Enabled: false 13 | Metrics/LineLength: 14 | Enabled: false 15 | Metrics/MethodLength: 16 | Enabled: false 17 | Metrics/PerceivedComplexity: 18 | Enabled: false 19 | Metrics/CyclomaticComplexity: 20 | Enabled: false 21 | Style/FrozenStringLiteralComment: 22 | Enabled: false 23 | Style/SafeNavigation: 24 | Enabled: false 25 | -------------------------------------------------------------------------------- /plugins/kinja.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Kinja" 9 | authors [ 10 | "Sigit Dewanto", 11 | ] 12 | version "0.1" 13 | description "Kinja is Gawker Media's discussion platform." 14 | 15 | matches [ 16 | { :name=>"X-Kinja Header", :regexp=>/^$/, :search=>"headers[x-kinja]" } 17 | ] 18 | 19 | 20 | end 21 | -------------------------------------------------------------------------------- /plugin-development/wget-list: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | AGENT="Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.12) Gecko/2009070811 Ubuntu/9.04 (jaunty) Firefox/3.0.12" 4 | 5 | if [ -z $1 ]; then 6 | echo "Usage: $0 " 7 | echo "downloads each URL's html and headers into the current directory" 8 | exit 9 | fi 10 | 11 | 12 | for i in `cat $1` ; do 13 | u=$i; f=`echo $i | sed 's/http:\/\///g' | sed 's/\//-/g'` 14 | # wget -U "$AGENT" -t 2 -O $f.html $u 15 | # curl -A "$AGENT" -I $u > $f.meta 16 | curl -A "$AGENT" -k -i $u > $f.http 17 | done 18 | 19 | -------------------------------------------------------------------------------- /plugins/airtiesrouter.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "AirTiesRouter" 9 | authors [ 10 | "Andrew Horton", 11 | ] 12 | version "0.1" 13 | description "AirTies Wireless Router" 14 | website "http://www.airties.com/" 15 | 16 | 17 | matches [ 18 | {:version=>/Airties ([^<]+)</} 19 | ] 20 | 21 | end 22 | 23 | -------------------------------------------------------------------------------- /plugins/myzone.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "MyZone" 9 | authors [ 10 | "Andrew Horton", 11 | ] 12 | version "0.1" 13 | description "Mobile 3G WiFi Rrouter" 14 | website "www.netcomm.com.au" 15 | 16 | 17 | matches [ 18 | {:regexp=>/<title>MyZone<\/title>.*www\.netcomm\.com\.au/m} 19 | ] 20 | 21 | end 22 | 23 | -------------------------------------------------------------------------------- /plugins/stackexchange.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "StackExchange" 9 | authors [ 10 | "Mateusz Golewski", 11 | ] 12 | version "0.1" 13 | description "StackExchange family Q&A forums." 14 | 15 | matches [ 16 | 17 | {:name=>"StackExchange.init() call", 18 | :regexp=>/StackExchange.init/}, 19 | 20 | ] 21 | 22 | end 23 | -------------------------------------------------------------------------------- /plugins/samsung-printer.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Samsung-Printer" 9 | authors [ 10 | "Andrew Horton", 11 | ] 12 | version "0.1" 13 | description "Samsung. SyncThru Web Service - Embedded Web Server" 14 | 15 | 16 | 17 | matches [ 18 | {:text=>'var debugMode = ("$$GSI_TCPIP_IP_ADDR$$".indexOf(".")' } 19 | ] 20 | 21 | end 22 | 23 | -------------------------------------------------------------------------------- /plugins/ip.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "IP" 9 | authors [ 10 | "Andrew Horton", 11 | # v0.2 # added - unless @ip.empty? 12 | ] 13 | version "0.2" 14 | description "IP address of the target, if available." 15 | 16 | passive do 17 | m=[] 18 | 19 | m << {:string=>@ip } unless @ip.nil? or @ip.empty? 20 | m 21 | end 22 | 23 | end 24 | 25 | -------------------------------------------------------------------------------- /plugins/openid.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "OpenID" 9 | authors [ 10 | "Caleb Anderson", 11 | ] 12 | version "0.1" 13 | description "openid detection" 14 | 15 | 16 | 17 | matches [ 18 | {:name=>"openid", 19 | :regexp=>/<link [^>]*rel=['"](openid\.server|openid\.delegate)['"][^>]*>/i 20 | }, 21 | 22 | ] 23 | 24 | 25 | end 26 | 27 | 28 | -------------------------------------------------------------------------------- /plugins/ocp.rb: -------------------------------------------------------------------------------- 1 | ## 2 | Plugin.define do 3 | name "Open Commerce Platform" 4 | authors [ 5 | "Claudio Salazar <csalazar at spect dot cl>", 6 | "Andrew Horton", # v0.2 # 2019-07-10 # Added website field. 7 | ] 8 | version "0.2" 9 | description "Open Commerce Platform™ (OCP) is the industry-leading direct commerce platform for business-to-consumer, business-to-business, mobile, order management, and call center commerce solutions." 10 | website "http://www.micros-fidelio.eu/en/Solutions/Products-N-Z/OCP-Open-Commerce-Platform.aspx" 11 | 12 | matches [ 13 | {:regexp=>/\/js\/ocpsdk\/base.js/ } 14 | ] 15 | 16 | end -------------------------------------------------------------------------------- /plugins/backbee.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "BackBee" 9 | authors [ 10 | "Guillaume Delacour <gui@iroqwa.org>", # 2016-04-22 11 | ] 12 | version "0.1" 13 | description "BackBee is an open source Content Management System (CMS)" 14 | 15 | # Matches # 16 | matches [ 17 | { :certainty=>100, :text=>'<div id="bb5-site-wrapper">' }, 18 | ] 19 | 20 | end 21 | -------------------------------------------------------------------------------- /plugins/lightbox.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Lightbox" 9 | authors [ 10 | "Andrew Horton", 11 | # v0.2 # removed :probability & :name 12 | ] 13 | version "0.2" 14 | description "Javascript for nice image popups" 15 | 16 | # identifying strings 17 | 18 | matches [ 19 | {:regexp=>/<script [^>]*(lightbox[^>]*.js)[^>]*/}, 20 | ] 21 | 22 | 23 | end 24 | -------------------------------------------------------------------------------- /plugins/tribune.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "TribuneNews" 9 | authors [ 10 | "Shuai Lin", 11 | ] 12 | version "0.1" 13 | description "TribuneNews is a news website engine for sites of Tribune Newspaper." 14 | 15 | matches [ 16 | 17 | { :text=> '<a href="http://www.tribune.com/" target="_parent">A Tribune Newspaper website</a>' } 18 | 19 | ] 20 | 21 | end 22 | -------------------------------------------------------------------------------- /plugins/gannett.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Gannett" 9 | authors [ 10 | "Eugene Amirov", 11 | ] 12 | version "0.1" 13 | description "Gannett websites" 14 | 15 | matches [ 16 | { 17 | :name=>"Favicon", 18 | :regexp=>/<link rel="shortcut icon" href="http:\/\/www.gannett-cdn.com\/sites\/[A-Za-z0-9_-]+\/images\/favicon.png">/ 19 | }, 20 | ] 21 | 22 | end 23 | -------------------------------------------------------------------------------- /plugins/trbas.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Trbas" 9 | authors [ 10 | "Sigit Dewanto", 11 | ] 12 | version "0.1" 13 | description "Trbas is a news website engine for sites of Tribune Newspaper, used by mcall.com, chicagotribune.com and latimes.com" 14 | 15 | matches [ 16 | 17 | { :text=> '<link rel="stylesheet" href="http://www.trbas.com' } 18 | 19 | ] 20 | 21 | end 22 | -------------------------------------------------------------------------------- /plugins/dwr.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "dwr" 9 | authors [ 10 | "Aung Khant <http://yehg.net/>", # 2012-02-12 11 | ] 12 | version "0.1" 13 | description "Direct Web Remoting - http://directwebremoting.org" 14 | 15 | 16 | 17 | # Matches # 18 | matches [ 19 | {:name=>'HTML Body',:text=>'/dwr/engine.js\'>'}, 20 | {:name=>'HTML Body',:text=>'/dwr/engine.js">'} 21 | ] 22 | 23 | end 24 | -------------------------------------------------------------------------------- /plugins/windweb.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "WindWeb" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2010-10-26 11 | ] 12 | version "0.1" 13 | description "WindWeb Webserver" 14 | 15 | # About 21746 ShodanHQ results for "server: WindWeb" @ 2010-10-26 16 | 17 | matches [ 18 | { :version => /^WindWeb\/([^\s]+)$/, :search => "headers[server]" } 19 | ] 20 | 21 | end 22 | 23 | -------------------------------------------------------------------------------- /plugins-disabled/html-comments.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "HTML-Comments" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2010-10-20 11 | ] 12 | version "0.1" 13 | description "This plugin extracts the HTML comments from the HTML source." 14 | 15 | 16 | 17 | # Matches # 18 | matches [ 19 | 20 | # Get HTML comments 21 | { :string=>/<!--([^>]+)-->/ }, 22 | 23 | ] 24 | 25 | end 26 | 27 | -------------------------------------------------------------------------------- /plugins/anygate.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "AnyGate" 9 | authors [ 10 | "Andrew Horton", 11 | ] 12 | version "0.1" 13 | description "Korean home wifi/router device" 14 | website "http://www.anygate.co.kr/" 15 | 16 | 17 | matches [ 18 | {:url=>'/index.asp', :text=>'<title>AnyGate' }, 19 | {:url=>'/index.asp', :text=>"사용자 암호가 설정되어 있지 않습니다.", :string=>"No Password"} 20 | ] 21 | 22 | end 23 | 24 | -------------------------------------------------------------------------------- /plugins/crazyegg.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "CrazyEgg" 9 | authors [ 10 | "Peter van der Laan", 11 | ] 12 | version "0.1" 13 | description "Visualizes where your visitors click" 14 | website "http://www.crazyegg.com/" 15 | 16 | matches [ 17 | 18 | # HTML 19 | { :text=>"cetrk.com" }, 20 | { :account=>/dnn506yrbagrg\.cloudfront\.net\/pages\/scripts\/(\d+\/\d+)/} 21 | 22 | ] 23 | 24 | end 25 | 26 | -------------------------------------------------------------------------------- /plugins/rvi-camera.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "RVI-Camera" 9 | authors [ 10 | "Andrew Horton", 11 | ] 12 | version "0.1" 13 | 14 | description "RVI Camera Monitoring System. H.264 IP Web Camera" 15 | 16 | matches [ 17 | {:text=>'Скачать файл установки OCX   <a href="xdview.exe">', :url=>'/login.asp' }, 18 | {:text=>'<Meta name="Author" Content="hhdigital">'} 19 | 20 | ] 21 | 22 | end 23 | 24 | -------------------------------------------------------------------------------- /plugins/typekit.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Typekit" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2011-04-17 11 | ] 12 | version "0.1" 13 | description "JavaScript font manager" 14 | website "http://typekit.com/" 15 | 16 | 17 | 18 | # Matches # 19 | matches [ 20 | 21 | # JavaScript Source 22 | { :regexp=>/<script [^>]*src=["'][^>]*use\.typekit\.com/i }, 23 | 24 | ] 25 | 26 | end 27 | 28 | 29 | -------------------------------------------------------------------------------- /plugins/watson.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Watson-Router" 9 | authors [ 10 | "Andrew Horton", 11 | ] 12 | version "0.1" 13 | description "Home Router. Default username/password is admin/admin" 14 | website "http://www.schmid-telecom.com/" 15 | 16 | 17 | matches [ 18 | {:text=>"<TITLE>Watson Management Console" }, 19 | {:text=>""} 20 | ] 21 | 22 | end 23 | 24 | -------------------------------------------------------------------------------- /plugins/xtra-business-hosting.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "XtraBusinessHosting" 9 | authors [ 10 | "Andrew Horton", 11 | # v0.2 # removed :certainty=>100 & :name, convert :regexp to :text 12 | ] 13 | version "0.2" 14 | description "Hosting at Xtra.co.nz" 15 | 16 | 17 | #Xtra Business: Web Hosting 18 | 19 | matches [ 20 | {:text=>'Xtra Business: Web Hosting' } 21 | ] 22 | 23 | end 24 | 25 | -------------------------------------------------------------------------------- /plugins/clicky.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Clicky" 9 | authors [ 10 | "Brendan Coles ", # 2012-04-07 11 | ] 12 | version "0.1" 13 | description "Clicky - Real Time Web Analytics" 14 | website "https://www.getclicky.com/" 15 | 16 | 17 | 18 | # Matches # 19 | matches [ 20 | 21 | # JavaScript 22 | { :regexp=>/]+src=["'](https?:)?\/\/static\.getclicky\.com/i }, 23 | 24 | ] 25 | 26 | end 27 | 28 | -------------------------------------------------------------------------------- /plugins/html5.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "HTML5" 9 | authors [ 10 | "Andrew Horton", 11 | # v0.2 # removed :probability. 12 | ] 13 | version "0.2" 14 | description "HTML version 5, detected by the doctype declaration" 15 | 16 | 17 | 18 | 19 | # Matches # 20 | matches [ 21 | 22 | { :regexp=>//i }, 23 | { :string=>"applicationCache", :regexp=>/]* manifest=/ }, 24 | 25 | ] 26 | 27 | end 28 | 29 | -------------------------------------------------------------------------------- /plugins/ecomat-cms.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Ecomat-CMS" 9 | authors [ 10 | "Brendan Coles ", # 2011-02-27 11 | ] 12 | version "0.1" 13 | description "Ecomat CMS" 14 | website "http://www.ecomat.ch/" 15 | 16 | 17 | 18 | # Matches # 19 | matches [ 20 | 21 | # Version Detection # Meta Generator 22 | { :version=>// }, 23 | 24 | ] 25 | 26 | end 27 | 28 | 29 | -------------------------------------------------------------------------------- /plugins/mint.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Mint" 9 | authors [ 10 | "Brendan Coles ", # 2011-04-15 11 | ] 12 | version "0.1" 13 | description "Mint is an extensible, self-hosted web site analytics program" 14 | website "http://www.haveamint.com/" 15 | 16 | 17 | 18 | # Matches # 19 | matches [ 20 | 21 | # JavaScript Source 22 | { :regexp=>/} }, 18 | 19 | { :text=> 'miAppControler contains master settings that can be used to quickly disable' } 20 | 21 | ] 22 | 23 | end 24 | -------------------------------------------------------------------------------- /plugins/empirecms.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Empire-CMS" 9 | authors [ 10 | "Brendan Coles ", # 2010-08-04 11 | ] 12 | version "0.1" 13 | description "Open source CMS" 14 | website "http://www.phome.net/" 15 | 16 | # 371 results for "powered by EmpireCMS" @ 2010-08-04 17 | 18 | # Dorks # 19 | dorks [ 20 | '"powered by EmpireCMS"' 21 | ] 22 | 23 | 24 | 25 | matches [ 26 | 27 | { :text=>' - Powered by EmpireCMS' }, 28 | 29 | ] 30 | 31 | end 32 | 33 | -------------------------------------------------------------------------------- /plugins/brightcove.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Brightcove" 9 | authors [ 10 | "Peter van der Laan", # 2014-08-22 11 | ] 12 | version "0.1" 13 | description "Brightcove Inc., a leading global provider of cloud services for video, offers a family of products that revolutionize the way organizations deliver video experiences." 14 | website "https://www.brightcove.com/" 15 | 16 | matches [ 17 | {:regexp=>/goku\.brightcove\.com|admin\.brightcove\.com\/js/}, 18 | ] 19 | 20 | end 21 | 22 | -------------------------------------------------------------------------------- /plugins/extjs.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "ExtJS" 9 | authors [ 10 | "Brendan Coles ", # 2011-04-15 11 | ] 12 | version "0.1" 13 | description "Ext JS is a cross-browser JavaScript library for building rich internet applications." 14 | website "http://www.sencha.com/products/extjs/" 15 | 16 | 17 | 18 | # Matches # 19 | matches [ 20 | 21 | # JavaScript Source 22 | { :regexp=>/' }, 23 | 24 | # /jape/ellipsis.xml 25 | { :url=>"/jape/ellipsis.xml", :md5=>"9639763b8c7f8caef097be4f3ffe5106" }, 26 | 27 | ] 28 | 29 | end 30 | 31 | -------------------------------------------------------------------------------- /plugins/avaya-aura-utility-server.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Avaya-Aura-Utility-Server" 9 | authors [ 10 | "Brendan Coles ", # 2012-08-26 11 | ] 12 | version "0.1" 13 | description "Avaya Aura Utility Server" 14 | website "http://www.avaya.com/" 15 | 16 | 17 | 18 | # Matches # 19 | matches [ 20 | 21 | # / # span class="vmsTitle" 22 | { :text=>'Avaya Aura™ Utility Server' }, 23 | 24 | # / # help link 25 | { :text=>'
", # 2011-02-29 11 | ] 12 | version "0.1" 13 | description "This plugin detects instances of the joint Department of Justice, FBI and IPR Center take down notice." 14 | website "http://fbi.gov/" 15 | 16 | 17 | 18 | # Matches # 19 | matches [ 20 | 21 | # / # Takedown Notice Page 22 | { :md5=>"dc0743cd718f16198a72a501ae37fd9a" }, 23 | { :md5=>"89a9a91804802c42fcc3aadbfaff0e55" }, 24 | 25 | # /banner.jpg 26 | { :url=>"/banner.jpg", :md5=>"5d1d926064c1a4a427100a5833d47dfd" }, 27 | 28 | ] 29 | 30 | end 31 | 32 | -------------------------------------------------------------------------------- /plugins/meta-author.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Meta-Author" 9 | authors [ 10 | "Brendan Coles ", # 2010-10-14 11 | ] 12 | version "0.1" 13 | description "This plugin retrieves the author name from the meta name tag - info: http://www.webmarketingnow.com/tips/meta-tags-uncovered.html#author" 14 | 15 | 16 | 17 | # Matches # 18 | matches [ 19 | 20 | # Get author's name 21 | { :string=>/^=]+name[\s]*=[\s]*['"]?author['"]?[^>^=]+content[\s]*=[\s]*['"]([^'^"^>]+)/i }, 22 | { :string=>/^=]+content[\s]*=[\s]*['"]([^"^'^>]+)['"][^>^=]+name[\s]*=[\s]*['"]?author['"]?/i }, 23 | 24 | ] 25 | 26 | end 27 | 28 | -------------------------------------------------------------------------------- /plugins/mno-go-search.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "MnoGoSearch" 9 | authors [ 10 | "Andrew Horton", 11 | # v0.2 # remove :certainty, :name and vulnerability description. 12 | # v0.3 # changed âo .{3}. 13 | ] 14 | version "0.3" 15 | description "mnoGoSearch is an opensource website search engine. Homepage http://www.mnogosearch.org" 16 | 17 | # Dorks # 18 | dorks [ 19 | '"Powered by mnoGoSearch"' 20 | ] 21 | 22 | 23 | 24 | # Matches # 25 | matches [ 26 | 27 | {:regexp=>/Powered by mnoGoSearch .{3} free web search engine software/}, 28 | {:certainty=>75, :regexp=>/mnoGoSearch:/}, 29 | 30 | ] 31 | 32 | 33 | end 34 | 35 | -------------------------------------------------------------------------------- /plugins/allow.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Allow" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2010-11-01 11 | ] 12 | version "0.1" 13 | description "This plugin retrieves the allowed methods from the HTTP Allow header. - More info: http://en.wikipedia.org/wiki/List_of_HTTP_header_fields" 14 | 15 | # 83 ShodanHQ results for "Allow: PUT" @ 2010-11-01 16 | # About 255 ShodanHQ results for "Allow: DELETE" @ 2010-11-01 17 | 18 | 19 | # Passive # 20 | passive do 21 | m=[] 22 | 23 | # Allow HTTP Header 24 | m << { :module=>@headers["allow"].to_s } unless @headers["allow"].nil? 25 | 26 | m 27 | 28 | end 29 | 30 | end 31 | 32 | -------------------------------------------------------------------------------- /plugins/bad-behaviour-anti-spam-plugin.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "BadBehaviourAntiSpamPlugin" 9 | authors [ 10 | "Bhavin Senjaliya <bhavin.senjaliya@gmail.com>", # 2016-08-19 11 | "Andrew Horton", # v0.2 # 2017-11-27 # Add website and update description. 12 | ] 13 | version "0.2" 14 | description "Bad Behaviour Anti-Spam Plug-in that supports many PHP projects including phpBB, MediaWiki and Wordpress." 15 | website "http://bad-behavior.ioerror.us/" 16 | 17 | # Matches # 18 | matches [ 19 | 20 | # Cookie 21 | { :search => "headers[set-cookie]", :regexp => /bb2_screener_/, :name=>"bb2_screener_ cookie" }, 22 | 23 | ] 24 | 25 | end 26 | -------------------------------------------------------------------------------- /plugins/craftcms.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "CraftCMS" 9 | authors [ 10 | "Bhavin Senjaliya <bhavin.senjaliya@gmail.com>", # 2016-08-19 11 | "Andrew Horton", # v0.2 # 2017-11-27 # Added website. Cleaned up. 12 | ] 13 | version "0.2" 14 | description "Craft CMS" 15 | website "http://craftcms.com/" 16 | 17 | # Matches # 18 | matches [ 19 | 20 | # HTTP Server Header 21 | { :text => '<a id="poweredby" href="http://craftcms.com/" title="Powered by Craft CMS">', :name => "Admin-Login-Page"}, 22 | # Cookie 23 | { :search => "headers[set-cookie]", :regexp => /CraftSessionId/, :name=>"CraftSessionId cookie" }, 24 | 25 | ] 26 | 27 | end 28 | -------------------------------------------------------------------------------- /plugins/netboard.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "netboard" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2011-04-17 11 | ] 12 | version "0.1" 13 | description "netboard forum" 14 | 15 | # 70 for inurl:cgi-sys/netboard.cgi ext:cgi 16 | 17 | # Dorks # 18 | dorks [ 19 | 'inurl:cgi-sys/netboard.cgi ext:cgi' 20 | ] 21 | 22 | 23 | 24 | # Matches # 25 | matches [ 26 | 27 | # URL pattern 28 | { :ghdb=>'inurl:"cgi-sys/netboard.cgi" filetype:cgi' }, 29 | 30 | # Form tags 31 | { :text=>'<td><form method=post action="netboard.cgi">' }, 32 | { :text=>'<td><form method=post action=netboard.cgi>' }, 33 | 34 | ] 35 | 36 | end 37 | 38 | 39 | -------------------------------------------------------------------------------- /plugins/packetwave.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "PacketWave" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2012-05-11 11 | ] 12 | version "0.1" 13 | description "Some sort of wireless broadband contraption from Aperto Networks" 14 | website "http://www.apertonet.com/products/pmax_productline.html" 15 | 16 | # ShodanHQ results as at 2011-05-11 # 17 | # 73 for PacketWave 18 | 19 | 20 | 21 | # Matches # 22 | matches [ 23 | 24 | # input button # goto 25 | { :text=>'<td bgcolor="#cccccc" colspan=2 align="center"><input type="button" name="goto" value="Log On" onClick="encode_submit(this.form)">' }, 26 | 27 | ] 28 | 29 | end 30 | 31 | -------------------------------------------------------------------------------- /plugins/powerdns.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "PowerDNS" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2011-05-20 11 | ] 12 | version "0.1" 13 | description "PowerDNS is a high performance, non-BIND nameserver written in c++" 14 | website "http://www.powerdns.com/" 15 | 16 | # ShodanHQ results as at 2011-05-20 # 17 | # 12 for PowerDNS 18 | 19 | 20 | 21 | # Passive # 22 | passive do 23 | m=[] 24 | 25 | # WWW-Authenticate: Basic realm="PowerDNS" 26 | m << { :name=>"WWW-Authenticate realm" } if @headers["www-authenticate"] =~ /^Basic realm="PowerDNS"$/ 27 | 28 | # Return passive matches 29 | m 30 | end 31 | 32 | end 33 | 34 | -------------------------------------------------------------------------------- /plugins/perfectone-voip-phone.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Perfectone-VOIP-Phone" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2011-09-14 11 | ] 12 | version "0.1" 13 | description "Perfectone VOIP phone" 14 | website "http://www.perfectone.nl/" 15 | 16 | 17 | 18 | # Matches # 19 | matches [ 20 | 21 | { :text=>'<body OnLoad="JavaScript:document.loginform.user.focus();">' }, 22 | { :text=>'<p style="margin-top: 5px"><font face="Arial"><input type=submit value=\'Login\' onClick="return saveChanges()">' }, 23 | { :text=>'<font face="Arial" color="#FFFFFF"><b>Login VoIP</b></font></i></td> </tr>' }, 24 | 25 | ] 26 | 27 | end 28 | 29 | -------------------------------------------------------------------------------- /plugins/roxen.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Roxen" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2011-04-17 11 | ] 12 | version "0.1" 13 | description "Roxen WebServer is a full-featured open-source web server distributed under the GPL license." 14 | website "http://www.roxen.com/products/webserver/" 15 | 16 | # ShodanHQ results as at 2011-04-17 # 17 | # 1,051 for Roxen 18 | 19 | 20 | 21 | # Matches # 22 | matches [ 23 | 24 | # HTTP Server Header 25 | { :search=>"headers[server]", :regexp=>/^Roxen$/ }, 26 | 27 | # Version Detection 28 | { :search=>"headers[server]", :version=>/^Roxen\/([^\s]+)$/ }, 29 | 30 | ] 31 | 32 | end 33 | 34 | -------------------------------------------------------------------------------- /plugins/savant.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Savant" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2011-08-06 11 | ] 12 | version "0.1" 13 | description "Savant is a freeware open source web server that runs on Windows 9x, ME, NT, 2000, and XP." 14 | website "http://savant.sourceforge.net/" 15 | 16 | # ShodanHQ results as at 2011-08-06 # 17 | # 65 for Savant 18 | 19 | 20 | 21 | # Passive # 22 | passive do 23 | m=[] 24 | 25 | # Version Detection # HTTP Server Header 26 | if @headers["server"] =~ /^Savant\/([^\s]+)$/ 27 | m << { :version=>"#{$1}" } 28 | end 29 | 30 | # Return passive matches 31 | m 32 | end 33 | end 34 | 35 | -------------------------------------------------------------------------------- /plugins-disabled/meta-country.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Meta-Country" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2010-10-20 11 | # v0.2 # 2011-03-31 # Updated regex. 12 | ] 13 | version "0.2" 14 | description "This plugin retrieves the country from the meta country tag. This tag is used by the Gigablast search engine." 15 | 16 | 17 | 18 | # Matches # 19 | matches [ 20 | 21 | # Extract country 22 | { :string=>/<meta[^>^=]+name[\s]*=[\s]*['"]?country[^>^=]+content[\s]*=[\s]*['"]?([^'^"^>]+)/i }, 23 | { :string=>/<meta[^>^=]+content[\s]*=[\s]*['"]?([^"^'^>]+)[^>^=]+name[\s]*=[\s]*['"]?country/i }, 24 | 25 | ] 26 | 27 | end 28 | 29 | -------------------------------------------------------------------------------- /plugins/applet.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Applet" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2010-10-15 11 | # v0.2 # 2011-01-07 # Updated URL extraction method. 12 | ] 13 | version "0.2" 14 | description "This plugin detects instances of applet HTML elements and retrieves the URL from the code parameter." 15 | website "http://en.wikipedia.org/wiki/Java_applet" 16 | 17 | # Google results as at 2010-10-15 # 18 | # 183 for "this site requires java" 19 | 20 | 21 | 22 | # Matches # 23 | matches [ 24 | 25 | # Extract Code 26 | { :string=>/<applet[^>]+code[\s]*=[\s]*["|']?([^\s^>^"^']+)[^>]*>/i }, 27 | 28 | ] 29 | 30 | end 31 | 32 | -------------------------------------------------------------------------------- /plugins/ericsson-tv-web-server.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Ericsson-TV-Web-Server" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2011-05-30 11 | ] 12 | version "0.1" 13 | description "Ericsson Integrated Receiver Decoders - web interface" 14 | website "http://www.ericsson.com/ourportfolio/products/integrated-receiver-decoders?nav=fgb_101_348|fgb_101_749" 15 | 16 | # ShodanHQ results as at 2011-05-30 # 17 | # 5 for Ericsson Television Web server 18 | 19 | 20 | 21 | # Matches # 22 | matches [ 23 | 24 | # HTTP Server Header 25 | { :search=>"headers[server ]", :regexp=>/^Ericsson Television Web server$/ }, 26 | 27 | ] 28 | 29 | end 30 | 31 | -------------------------------------------------------------------------------- /plugins/redshop.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "RedShop" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2010-10-12 11 | ] 12 | version "0.1" 13 | description "ASP Powered shopping cart software [Chinese]" 14 | website "http://www.rednetcms.com/redshop/" 15 | 16 | # 1 result for "Powered by Redshop" @ 2010-10-12 17 | 18 | 19 | matches [ 20 | 21 | # Powered by text 22 | { :text=>'Powered by:<a href="http://www.rednetcms.com/redshop" target="_blank">Redshop</a>' }, 23 | 24 | # Default CSS # CSS file in the images folder o_0 25 | { :text=>'<link href="images/redcms.css" rel="stylesheet" type="text/css" />' }, 26 | 27 | ] 28 | 29 | end 30 | 31 | -------------------------------------------------------------------------------- /plugins/rutorrent.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "ruTorrent" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2011-05-13 11 | ] 12 | version "0.1" 13 | description "ruTorrent is a front-end for the popular Bittorrent client rTorrent." 14 | website "http://code.google.com/p/rutorrent/" 15 | 16 | # ShodanHQ results as at 2011-05-13 # 17 | # 62 for ruTorrent 18 | 19 | 20 | 21 | # Passive # 22 | passive do 23 | m=[] 24 | 25 | # WWW-Authenticate realm 26 | m << { :name=>"WWW-Authenticate realm" } if @headers["www-authenticate"] =~ /^Basic realm="My ruTorrent web site"$/ 27 | 28 | # Return passive matches 29 | m 30 | end 31 | 32 | end 33 | 34 | -------------------------------------------------------------------------------- /plugins/website-tonight.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "WebsiteTonight" 9 | authors [ 10 | "Bhavin Senjaliya <bhavin.senjaliya@gmail.com>", # 2016-08-19 11 | "Andrew Horton", # v0.2 # 2017-11-27 # Added website and updated description. 12 | ] 13 | version "0.2" 14 | description "Website Tonight CMS from GoDaddy" 15 | website "https://www.godaddy.com/websites/website-builder" 16 | # https://products.secureserver.net/products/website_tonight/producttourpl/index.html 17 | 18 | # Matches # 19 | matches [ 20 | 21 | # Cookie 22 | { :search => "headers[set-cookie]", :regexp => /dps_site_id/, :name=>"dps_site_id cookie" }, 23 | 24 | ] 25 | 26 | end 27 | -------------------------------------------------------------------------------- /plugins/x-powered-by-header.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "X-Powered-By" 9 | authors [ 10 | "Andrew Horton", 11 | # v0.2 # removed :certainty=>100. 12 | # v0.3 # 2011-04-02 # Updated regex. 13 | ] 14 | version "0.3" 15 | description "X-Powered-By HTTP header" 16 | 17 | # ShodanHQ results as at 2011-04-02 # 18 | # 7,122,968 for x-powered-by 19 | 20 | 21 | 22 | # Passive # 23 | passive do 24 | m=[] 25 | 26 | # X-Powered-By Headers 27 | unless @headers["x-powered-by"].nil? 28 | m << { :name=>"x-powered-by string", :string=>@headers["x-powered-by"] } 29 | end 30 | 31 | # Return passive matches 32 | m 33 | end 34 | 35 | end 36 | 37 | 38 | -------------------------------------------------------------------------------- /plugins/amdsoft.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "AMDSoFT" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2011-06-21 11 | ] 12 | version "0.1" 13 | description "CMS [Iranian]" 14 | website "http://www.iranfairit.com/main/index.aspx" 15 | 16 | # Google results as at 2011-06-21 # 17 | # 50 for "Powered by AMDSoFT" ext:aspx 18 | 19 | # Dorks # 20 | dorks [ 21 | '"Powered by AMDSoFT" ext:aspx' 22 | ] 23 | 24 | 25 | 26 | # Matches # 27 | matches [ 28 | 29 | # Powered by link 30 | { :regexp=>/style="color: aliceblue"><span style="color: gray">Powered\s+by<\/span> <\/span><a href="http:\/\/www\.iranfairit\.com">/ }, 31 | 32 | ] 33 | 34 | end 35 | 36 | -------------------------------------------------------------------------------- /plugins/baap-mobile-version.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "BAAP-Mobile-Version" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2011-08-29 11 | ] 12 | version "0.1" 13 | description "The BAAP Mobile Version is a complete toolkit to help mobilize your WordPress site." 14 | website "http://wordpress.org/extend/plugins/baap-mobile-version/" 15 | 16 | # ShodanHQ results as at 2011-08-29 # 17 | # 3 for X-Mobilized-By: BAAP Mobile 18 | 19 | 20 | 21 | # Matches # 22 | matches [ 23 | 24 | # Version Detection # X-Mobilized-By Header 25 | { :search=>"headers[x-mobilized-by]", :version=>/^BAAP Mobile Version ([^\s]+)$/ }, 26 | 27 | ] 28 | 29 | end 30 | 31 | -------------------------------------------------------------------------------- /plugins/envision.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "enVision" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2012-03-24 11 | ] 12 | version "0.1" 13 | description "Content Interface Corp enVision - interactive WYSIWYG layout editor" 14 | website "http://www.contentinterface.com/index.php?option=com_content&task=view&id=14&Itemid=26" 15 | 16 | # ShodanHQ results as at 2012-03-24 # 17 | # 5 for Content Interface Corp enVision 18 | 19 | 20 | 21 | # Matches # 22 | matches [ 23 | 24 | # Version Detection # HTTP Server Header 25 | { :search=>"headers[server]", :version=>/^Content Interface Corp - enVision ([^\s]+)/ }, 26 | 27 | ] 28 | 29 | end 30 | 31 | -------------------------------------------------------------------------------- /plugins/gordano-messaging-suite.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Gordano-Messaging-Suite" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2011-08-20 11 | ] 12 | version "0.1" 13 | description "Gordano WebMail Server web interface" 14 | website "http://gordano.com/products/webmail.htm" 15 | 16 | # ShodanHQ results as at 2011-08-20 # 17 | # 1,344 for Gordano Messaging Suite 18 | # 18 for Gordano -Messaging 19 | 20 | 21 | 22 | # Matches # 23 | matches [ 24 | 25 | # Version Detection # HTTP Server Header 26 | { :search=>"headers[server]", :version=>/^Gordano (Messaging Suite )?Web Server v([^\s]+)$/, :offset=>1 }, 27 | 28 | ] 29 | 30 | end 31 | 32 | -------------------------------------------------------------------------------- /plugins/ibm-internet-connection-server.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "IBM-Internet-Connection-Server" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2011-06-07 11 | "Andrew Horton", # v0.2 # 2016-04-20 # Moved patterns from passive function to matches[]. 12 | ] 13 | version "0.2" 14 | description "IBM Internet Connection Server - Homepage [offline] : http://www.ics.raleigh.ibm.com" 15 | 16 | # ShodanHQ results as at 2011-06-07 # 17 | # 3 for ibm internet connection server -IBM_HTTP_Server 18 | 19 | matches [ 20 | 21 | { :version=>/^IBM Internet Connection Server\/([^\s]+)$/, :search=>"headers[server]" }, 22 | 23 | ] 24 | 25 | end 26 | 27 | -------------------------------------------------------------------------------- /plugins/ourdisclaimer.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "OurDisclaimer" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2010-10-14 11 | ] 12 | version "0.1" 13 | description "OurDisclaimer.com - Third party disclaimer service." 14 | website "http://ourdisclaimer.com/" 15 | 16 | # 59 results for inurl:"ourdisclaimer.com/?i=" @ 2010-10-14 17 | 18 | 19 | matches [ 20 | 21 | # Get URL # Link & Image method 22 | { :version=>/<a[^>]+href[\s]*=[\s]*"http:\/\/ourdisclaimer.com\/\?i=([^\"]+)/i }, 23 | 24 | # Get URL # Iframe method 25 | { :version=>/<iframe[^>]+src[\s]*=[\s]*"http:\/\/ourdisclaimer.com\/\?i=([^\"]+)/i }, 26 | 27 | ] 28 | 29 | end 30 | 31 | -------------------------------------------------------------------------------- /plugins/sitecore.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "SiteCore" 9 | authors [ 10 | "Bhavin Senjaliya <bhavin.senjaliya@gmail.com>", # 2016-08-19 11 | "Andrew Horton", # v0.2 # 2017-11-27 # Updated description. Added website.. 12 | ] 13 | version "0.2" 14 | description "Sitecore a .NET CMS, ecommerce, and digital marketing platform." 15 | website "http://www.sitecore.net/" 16 | 17 | # Matches # 18 | matches [ 19 | 20 | # Cookie 21 | { :search => "headers[set-cookie]", :regexp => /^SC_ANALYTICS_/, :name=>"SC_ANALYTICS_ cookie" }, 22 | { :search => "headers[set-cookie]", :regexp => /^sc_expview/, :name=>"sc_expview cookie" }, 23 | 24 | ] 25 | 26 | end 27 | -------------------------------------------------------------------------------- /plugins-disabled/atom_feed.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "AtomFeed" 9 | authors [ 10 | "Caleb Anderson", 11 | ] 12 | version "0.1" 13 | description "Atom feed detection" 14 | 15 | 16 | 17 | matches [ 18 | {:name=>"atom link type", 19 | :regexp=>/<link .*?type=["']application\/atom\+xml["'].*?>/im 20 | }, 21 | 22 | ] 23 | 24 | 25 | passive do 26 | m=[] 27 | re=/<link .*?type=["']application\/atom\+xml["'].*?>/im #" 28 | if @body =~ re 29 | link=@body.scan(re).first 30 | url=link.scan(/href=["'](.*?)["']/i).first.first rescue nil 31 | end 32 | 33 | m<<{:name=>"atom link",:string=>url} unless url.nil? 34 | m 35 | end 36 | 37 | end 38 | 39 | 40 | -------------------------------------------------------------------------------- /plugins/david-webbox.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "David-WebBox" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2011-08-27 11 | ] 12 | version "0.1" 13 | description "David WebBox is a remote data storage center." 14 | website "http://www.tobit.com/davidfx/access/" 15 | 16 | # ShodanHQ results as at 2011-08-27 # 17 | # 9,486 for David-WebBox 18 | 19 | # Google results as at 2011-08-27 # 20 | # 14 for intitle:"David InfoCenter Web" 21 | 22 | 23 | 24 | # Matches # 25 | matches [ 26 | 27 | # Version Detection # HTTP Server Header 28 | { :search=>"headers[server]", :version=>/^David-WebBox\/([^\s]+ \([^\)]+\))$/ }, 29 | 30 | ] 31 | 32 | end 33 | 34 | -------------------------------------------------------------------------------- /plugins/netbox.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "NetBox" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2011-03-14 11 | "Andrew Horton", # v0.2 # 2016-04-21 # Moved patterns from passive function to matches[]. 12 | ] 13 | version "0.2" 14 | description "NetBox HTTP server [Chinese]" 15 | website "http://www.netbox.cn/" 16 | 17 | # ShodanHQ results as at 2011-03-14 # 18 | # 1,778 for NetBox -realm 19 | 20 | matches [ 21 | # HTTP Server Header 22 | { :regexp=>/^NetBox/, :search=>"headers[server]" }, 23 | # Version Detection # HTTP Server Header 24 | { :version=>/^NetBox Version (.+)$/, :search=>"headers[server]" }, 25 | 26 | ] 27 | 28 | end 29 | 30 | -------------------------------------------------------------------------------- /plugins/nginx.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "nginx" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2011-03-13 11 | ] 12 | version "0.1" 13 | description "Nginx (Engine-X) is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server." 14 | website "http://nginx.net/" 15 | 16 | # ShodanHQ results as at 2011-03-13 # 17 | # 289,545 for nginx 18 | 19 | 20 | 21 | # Matches # 22 | matches [ 23 | 24 | # HTTP Server Header 25 | { :search=>"headers[server]", :regexp=>/^nginx$/ }, 26 | 27 | # Version Detection 28 | { :search=>"headers[server]", :version=>/^nginx\/([^\s]+).*$/ }, 29 | 30 | ] 31 | 32 | end 33 | 34 | -------------------------------------------------------------------------------- /plugins/smodcms.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "SmodCMS" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2010-08-16 11 | ] 12 | version "0.1" 13 | description "SmodCMS" 14 | website "http://www.smod.pl/" 15 | 16 | # 13 results for "powered by SmodCMS" @ 2010-08-16 17 | 18 | # Dorks # 19 | dorks [ 20 | '"powered by SmodCMS"' 21 | ] 22 | 23 | 24 | 25 | matches [ 26 | 27 | { :text=>'<meta name="Generator" content="SmodCMS" />' }, 28 | { :text=>'<meta name="Authoring_Tool" content="SmodCMS // www.smod.pl" />' }, 29 | 30 | { :regexp=>/[P|p]+owered by <a href="http:\/\/www.smod.pl[\/]+"[^>]+>SmodCMS[\s]*<\/a>/ }, 31 | 32 | ] 33 | 34 | 35 | end 36 | 37 | -------------------------------------------------------------------------------- /plugins/socorro.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Socorro" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2011-08-07 11 | ] 12 | version "0.1" 13 | description "A server for collecting, processing, and displaying crash reports from clients using the Breakpad libraries" 14 | website "code.google.com/p/socorro/" 15 | 16 | # Google resutls as at 2011-08-07 # 17 | # 26 for "Powered by Socorro" 18 | 19 | # Dorks # 20 | dorks [ 21 | '"Powered by Socorro"' 22 | ] 23 | 24 | 25 | 26 | # Matches # 27 | matches [ 28 | 29 | # Powered by link 30 | { :text=>'Powered by <a href="http://code.google.com/p/socorro/">Socorro</a>' }, 31 | 32 | ] 33 | 34 | end 35 | 36 | -------------------------------------------------------------------------------- /plugins/sonicwall-ssl-vpn.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "SonicWALL-SSL-VPN" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2011-03-13 11 | ] 12 | version "0.1" 13 | description "SonicWALL SSL-VPN Portal provides secure Internet access for remote users to log in and access private network resources via SSL-VPN technology. " 14 | website "http://www.sonicwall.com/" 15 | 16 | # ShodanHQ results as at 2011-03-13 # 17 | # 11,960 for SonicWALL SSL-VPN Web Server 18 | 19 | 20 | 21 | # Matches # 22 | matches [ 23 | 24 | # HTTP Server Header 25 | { :search=>"headers[server]", :regexp=>/^SonicWALL SSL-VPN Web Server\.?$/ }, 26 | 27 | ] 28 | 29 | end 30 | 31 | -------------------------------------------------------------------------------- /plugins/tealeaf.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "TeaLeaf" 9 | authors [ 10 | "Bhavin Senjaliya <bhavin.senjaliya@gmail.com>", # 2016-08-19 11 | "Andrew Horton", # v0.2 # 2017-11-27 # Added website and updated description. 12 | ] 13 | version "0.2" 14 | description "Tealeaf is a Customer Experience Management system now owned by IBM." 15 | website "https://www.ibm.com/customer-engagement/tealeaf" 16 | 17 | # Matches # 18 | matches [ 19 | 20 | # Cookie 21 | { :search => "headers[set-cookie]", :regexp => /^TLTSID/, :name=>"TLTSID cookie" }, 22 | { :search => "headers[set-cookie]", :regexp => /^TLTUID/, :name=>"TLTUID cookie" }, 23 | 24 | ] 25 | 26 | end 27 | -------------------------------------------------------------------------------- /plugins/cpcommerce.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "cpCommerce" 9 | authors [ 10 | "Brendan Coles <bcoles@gmail.com>", # 2010-08-14 11 | ] 12 | version "0.1" 13 | description "Web shopping cart" 14 | website "http://cpcommerce.org/" 15 | 16 | # 58 results for "powered by cpCommerce" @ 2010-08-14 17 | 18 | 19 | matches [ 20 | 21 | { :text=>' Powered by cpCommerce' }, 22 | { :text=>' <title>cpCommerce by Matthew Wilkin' }, 23 | { :text=>'Powered by cpCommerce.' }, 24 | { :text=>'Powered by cpCommerce.' }, 25 | 26 | ] 27 | 28 | end 29 | 30 | -------------------------------------------------------------------------------- /plugins/netapp-nas.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "NetApp-NAS" 9 | authors [ 10 | "Brendan Coles ", # 2011-03-13 11 | ] 12 | version "0.1" 13 | description "NetApp network-attached storage solutions and a unified storage architecture can help solve your file-storage challenges and lower your costs." 14 | website "http://www.netapp.com/us/products/protocols/nas/nas.html" 15 | 16 | # ShodanHQ results as at 2011-03-13 # 17 | # 1,485 for NetApp -NetCache 18 | 19 | 20 | 21 | # Matches # 22 | matches [ 23 | 24 | # HTTP Server Header # Version Detection 25 | { :search=>"headers[server]", :version=>/^NetApp\/(.+)$/ }, 26 | 27 | ] 28 | 29 | end 30 | 31 | -------------------------------------------------------------------------------- /plugins/powerschool.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "PowerSchool" 9 | authors [ 10 | "Brendan Coles ", # 2011-04-08 11 | ] 12 | version "0.1" 13 | description "PowerSchool is the fastest-growing, most widely used web-based student information system, supporting more than 8.5 million students in 50 states and over 50 countries." 14 | website "http://www.pearsonschoolsystems.com/products/powerschool/" 15 | 16 | # ShodanHQ results as at 2011-04-08 # 17 | # 3,328 for PowerSchool 18 | 19 | 20 | 21 | # Matches # 22 | matches [ 23 | 24 | # HTTP Server Header 25 | { :search=>"headers[server]", :regexp=>/^PowerSchool$/ }, 26 | 27 | ] 28 | 29 | end 30 | 31 | -------------------------------------------------------------------------------- /plugins/spring-framework.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Spring-Framework" 9 | authors [ 10 | "Brendan Coles ", # 2011-09-12 11 | ] 12 | version "0.1" 13 | description "Spring Framework is an open source application framework for the Java platform." 14 | website "http://www.springsource.org/" 15 | 16 | # ShodanHQ results as at 2011-09-12 # 17 | # 20 for springframework 18 | 19 | 20 | 21 | # Matches # 22 | matches [ 23 | 24 | # org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE Cookie 25 | { :search=>"headers[set-cookie]", :text=>'org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=' }, 26 | 27 | ] 28 | 29 | end 30 | 31 | -------------------------------------------------------------------------------- /plugins/vmware-horizon.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "VMware-Horizon" 9 | authors [ 10 | "Max Davitt", # v0.1 # 2021-01-07 # Created plugin 11 | ] 12 | version "0.1" 13 | description "VMware Horizon is a modern platform for secure delivery of virtual desktops and apps across the hybrid cloud, from the market leader in software-defined data center and digital workspaces." 14 | website "https://www.vmware.com/products/horizon.html" 15 | 16 | matches [ 17 | { :name => "title", :certainty => 75, :text => "VMware Horizon" }, 18 | { :name => "info", :url => "/portal/info.jsp", :version => /\"clientVersion\":\"([\d\.]+)\"/ } 19 | ] 20 | 21 | end 22 | -------------------------------------------------------------------------------- /plugins/wordpress-mobile-pack.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "WordPress-Mobile-Pack" 9 | authors [ 10 | "Brendan Coles ", # 2011-08-29 11 | ] 12 | version "0.1" 13 | description "The WordPress Mobile Pack is a complete toolkit to help mobilize your WordPress site." 14 | website "http://wordpress.org/extend/plugins/wordpress-mobile-pack/" 15 | 16 | # ShodanHQ results as at 2011-08-29 # 17 | # 802 for X-Mobilized-By Wordpress 18 | 19 | 20 | 21 | # Matches # 22 | matches [ 23 | 24 | # Version Detection # X-Mobilized-By Header 25 | { :search=>"headers[x-mobilized-by]", :version=>/^WordPress Mobile Pack ([^\s]+)$/ }, 26 | 27 | ] 28 | 29 | end 30 | 31 | -------------------------------------------------------------------------------- /plugins-disabled/meta-zipcode.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Meta-Zipcode" 9 | authors [ 10 | "Brendan Coles ", # 2010-10-20 11 | # v0.2 # 2011-03-31 # Updated regex. 12 | ] 13 | version "0.2" 14 | description "This plugin retrieves the zipcode from the meta zipcode tag. This tag is used by the Gigablast search engine." 15 | 16 | 17 | 18 | # Matches # 19 | matches [ 20 | 21 | # Extract zipcode 22 | { :string=>/^=]+name[\s]*=[\s]*['"]?zipcode['"]?[^>^=]+content[\s]*=[\s]*['"]([^'^"^>]+)/i }, 23 | { :string=>/^=]+content[\s]*=[\s]*['"]([^"^'^>]+)['"][^>^=]+name[\s]*=[\s]*['"]?zipcode['"]?/i }, 24 | 25 | 26 | ] 27 | 28 | end 29 | 30 | -------------------------------------------------------------------------------- /plugins/fujitsu-infoprovider-pro.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Fujitsu-InfoProvider-Pro" 9 | authors [ 10 | "Brendan Coles ", # 2011-02-24 11 | ] 12 | version "0.1" 13 | description "Fujitsu-InfoProvider-Pro web server" 14 | website "http://software.fujitsu.com" 15 | 16 | # ShodanHQ results as at 2011-02-24 # 17 | # 188 for Fujitsu-InfoProvider-Pro 18 | 19 | 20 | 21 | # Matches # 22 | matches [ 23 | 24 | # HTTP Server Header 25 | { :search=>"headers[server]", :regexp=>/Fujitsu-InfoProvider-Pro/ }, 26 | 27 | # Version Detection 28 | { :search=>"headers[server]", :version=>/Fujitsu-InfoProvider-Pro\/[V]?([^ ]+) / }, 29 | 30 | ] 31 | 32 | end 33 | 34 | -------------------------------------------------------------------------------- /plugins/wix.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Wix" 9 | authors [ 10 | "Bhavin Senjaliya ", # 2016-08-19 11 | "Andrew Horton", # v0.2 # 2017-11-27 # Description and website. 12 | ] 13 | version "0.2" 14 | description "Wix is a cloud based website builder." 15 | website "http://www.wix.com/" 16 | 17 | # Matches # 18 | matches [ 19 | 20 | # Cookie 21 | { :search => "headers[set-cookie]", :regexp => /_wixAB3/, :name=>"_wixAB3 cookie" }, 22 | { :search => "headers[set-cookie]", :regexp => /^hs\s/, :name=>"hs cookie" }, 23 | { :search => "headers[set-cookie]", :regexp => /svSession/, :name=>"svSession cookie" }, 24 | 25 | ] 26 | 27 | end 28 | -------------------------------------------------------------------------------- /plugins/alcatel-lucent-omniswitch.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Alcatel-Lucent-Omniswitch" 9 | authors [ 10 | "Brendan Coles ", # 2010-07-15 11 | "Andrew Horton", # v0.2 # 2019-07-10 # Added website field. 12 | ] 13 | version "0.2" 14 | description "Alcatel Lucent's Omniswitch" 15 | website "https://www.al-enterprise.com/en/products/switches" 16 | # Default login: admin/switch 17 | 18 | # 1 result for intitle:"Webview+Logon+Page" @ 2010-07-15 19 | 20 | 21 | matches [ 22 | 23 | {:text=>'Webview Logon Page' }, 24 | 25 | {:text=>'document.write(errMsg==""?" ":("Error - " + errMsg));' } 26 | 27 | ] 28 | 29 | end 30 | 31 | -------------------------------------------------------------------------------- /plugins/apache-cocoon.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "Apache-Cocoon" 9 | authors [ 10 | "Brendan Coles ", # 2011-02-24 11 | "Andrew Horton", # v0.2 # 2016-04-19 # Replaced passive function with match for server header. 12 | ] 13 | version "0.2" 14 | description "Apache Cocoon is a Spring-based framework (since version 2.2 of Cocoon) built around the concepts of separation of concerns and component-based development." 15 | website "http://cocoon.apache.org/" 16 | 17 | # ShodanHQ results as at 2011-02-24 # 18 | # 707 for X-Cocoon-Version 19 | 20 | matches [ 21 | 22 | { :version=>/^(.*)$/ ,:search=>"headers[x-cocoon-version]" }, 23 | 24 | ] 25 | 26 | end 27 | -------------------------------------------------------------------------------- /plugins/dynamicweb.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "DynamicWeb" 9 | authors [ 10 | "Guillaume Delacour ", # 2017-04-15 11 | ] 12 | version "0.1" 13 | description "Dynamicweb is the All-In-One Platform for Content Management, Ecommerce, Digital Marketing and Integration." 14 | website "https://dynamicweb.com/" 15 | 16 | # Matches # 17 | matches [ 18 | # Version in Meta Generator 19 | { :version=>/100, :regexp=>/\(c\) 1999-(20[\d]{2}) Dynamicweb Software A\/S/ }, 22 | # Set-Cookie 23 | { :certainty=>75, :search=>"headers[set-cookie]", :regexp=>/Dynamicweb/ }, 24 | ] 25 | end 26 | -------------------------------------------------------------------------------- /plugins/keyfocus-webserver.rb: -------------------------------------------------------------------------------- 1 | ## 2 | # This file is part of WhatWeb and may be subject to 3 | # redistribution and commercial restrictions. Please see the WhatWeb 4 | # web site for more information on licensing and terms of use. 5 | # https://morningstarsecurity.com/research/whatweb 6 | ## 7 | Plugin.define do 8 | name "KeyFocus-WebServer" 9 | authors [ 10 | "Brendan Coles ", # 2011-04-08 11 | ] 12 | version "0.1" 13 | description "KeyFocus Web Server is a free HTTP Server that can host an unlimited number of web sites." 14 | website "http://www.keyfocus.net/kfws/" 15 | 16 | # ShodanHQ results as at 2011-04-08 # 17 | # 753 for KFWebServer 18 | 19 | 20 | 21 | # Matches # 22 | matches [ 23 | 24 | # HTTP Server Header 25 | { :search=>"headers[server]", :regexp=>/^KFWebServer$/ }, 26 | 27 | # Version Detection 28 | { :search=>"headers[server]", :version=>/^KFWebServer\/([\d\.]+)/ }, 29 | 30 | ] 31 | 32 | end 33 | 34 | --------------------------------------------------------------------------------