Add files via upload

plugins/meta-state.rb

@@ -0,0 +1,27 @@
+##
+# This file is part of Whoknows and may be subject to
+# redistribution and commercial restrictions. Please see the Whoknows
+# web site for more information on licensing and terms of use.
+# https://github.com/krishealty/whoknows
+##
+Plugin.define do
+name "Meta-State"
+authors [
+  "Brendan Coles <[email protected]>", # 2010-10-20
+]
+version "0.1"
+description "This plugin retrieves the state from the meta state tag. This tag is used by the Gigablast search engine."
+
+
+
+# Matches #
+matches [
+
+# Extract state
+{ :string=>/<meta[^>^=]+name[\s]*=[\s]*['|"]?state['|"]?[^>^=]+content[\s]*=[\s]*['|"]?([^'^"^>]+)/i },
+{ :string=>/<meta[^>^=]+content[\s]*=[\s]*['|"]?([^"^'^>]+)[^>^=]+name[\s]*=[\s]*['|"]?state/i },
+
+]
+
+end
+

plugins/meta-zipcode.rb

@@ -0,0 +1,29 @@
+##
+# This file is part of Whoknows and may be subject to
+# redistribution and commercial restrictions. Please see the Whoknows
+# web site for more information on licensing and terms of use.
+# https://github.com/krishealty/whoknows
+##
+Plugin.define do
+name "Meta-Zipcode"
+authors [
+  "Brendan Coles <[email protected]>", # 2010-10-20
+  # v0.2 # 2011-03-31 # Updated regex. 
+]
+version "0.2"
+description "This plugin retrieves the zipcode from the meta zipcode tag. This tag is used by the Gigablast search engine."
+
+
+
+# Matches #
+matches [
+
+# Extract zipcode
+{ :string=>/<meta[^>^=]+name[\s]*=[\s]*['"]?zipcode['"]?[^>^=]+content[\s]*=[\s]*['"]([^'^"^>]+)/i },
+{ :string=>/<meta[^>^=]+content[\s]*=[\s]*['"]([^"^'^>]+)['"][^>^=]+name[\s]*=[\s]*['"]?zipcode['"]?/i },
+
+
+]
+
+end
+

plugins/metinfo.rb

@@ -0,0 +1,42 @@
+##
+# This file is part of Whoknows and may be subject to
+# redistribution and commercial restrictions. Please see the Whoknows
+# web site for more information on licensing and terms of use.
+# https://github.com/krishealty/whoknows
+##
+Plugin.define do
+name "MetInfo"
+authors [
+  "Brendan Coles <[email protected]>", # 2011-02-26
+]
+version "0.1"
+description "MetInfo"
+website "http://www.metinfo.cn/"
+
+# Google results as at 2011-02-26 #
+# 409 for "Powered by MetInfo"
+
+# Dorks #
+dorks [
+'"Powered by MetInfo"'
+]
+
+
+
+# Matches #
+matches [
+
+# Meta Copyright
+{ :regexp=>/<meta name="copyright" content="Copyright 2008-20[\d]{2} MetInfo">/ },
+
+# Meta Author
+{ :regexp=>/<meta name="author" content="[^"]+--Powered by MetInfo">/ },
+
+# Version Detection # Powered by text
+{ :version=>/Powered by <a href="http:\/\/www.MetInfo.cn" target="_blank" title="MetInfo enterprise website manager system"><b>[^<]+<\/b><\/a> ([\d\.]+)/ },
+
+]
+
+end
+
+

plugins/mezzanine.rb

@@ -0,0 +1,25 @@
+##
+# This file is part of Whoknows and may be subject to
+# redistribution and commercial restrictions. Please see the Whoknows
+# web site for more information on licensing and terms of use.
+# https://github.com/krishealty/whoknows
+##
+Plugin.define do
+name "Mezzanine"
+authors [
+  "Bhavin Senjaliya <[email protected]>", # 2016-08-19
+  "Andrew Horton", # v0.2 # 2017-11-27 # Add website, description.
+]
+version "0.2"
+description "Mezzanine is a CMS built using Django."
+website "http://mezzanine.jupo.org/"
+
+# Matches #
+matches [
+
+	# Cookie 
+	{ :regexp => /mezzanine_login_interface/, :name=>"Admin Login Page " },
+
+] 
+
+end

plugins/mgb-opensource-guestbook.rb

@@ -0,0 +1,44 @@
+##
+# This file is part of Whoknows and may be subject to
+# redistribution and commercial restrictions. Please see the Whoknows
+# web site for more information on licensing and terms of use.
+# https://github.com/krishealty/whoknows
+##
+Plugin.define do
+name "MGB-OpenSource-Guestbook"
+authors [
+  "Brendan Coles <[email protected]>", # 2012-07-22
+]
+version "0.1"
+description "MGB OpenSource Guestbook"
+website "http://www.m-gb.org/"
+
+# Google results as at 2012-07-22 #
+# 57 for 'inurl:"mgb/index.php?p="'
+
+# Dorks #
+dorks [
+'inurl:"mgb/index.php?p="'
+]
+
+
+
+# Matches #
+matches [
+
+# Meta Copyright # Year Detection
+{ :string=>/<meta name="copyright" content="MGB OpenSource Guestbook \(C\) Copyright 2004-(20[\d]{2}) by http:\/\/www\.m\-gb\.org\/">/ },
+
+# HTML Comment
+{ :text=>'<!-- If you want to remove this copyright you can do so. But it took and already takes a lot of time to code all this stuff.' },
+
+# td class="entry_info"
+{ :text=>'<td class="entry_info" colspan="3"><a href="email.php?id=denied">' },
+
+# Footer # Year Detection
+{ :string=>/<span class="copyright"><a href="http:\/\/www\.m\-gb\.org\/" title="MGB Homepage" target="_blank">MGB OpenSource Guestbook<\/a> &copy; 2004-(20[\d]{2})<br>/ },
+
+]
+
+end
+

plugins/mhttpd.rb

@@ -0,0 +1,41 @@
+##
+# This file is part of Whoknows and may be subject to
+# redistribution and commercial restrictions. Please see the Whoknows
+# web site for more information on licensing and terms of use.
+# https://github.com/krishealty/whoknows
+##
+Plugin.define do
+name "MHttpd"
+authors [
+  "Brendan Coles <[email protected]>", # 2010-10-23
+  "Andrew Horton", # v0.2 # 2016-04-21 # Moved patterns from passive function to matches[]. 
+]
+version "0.2"
+description "MHTTPD stands for Minimal Hypertext Transport Protocol Daemon. MHTTPD is fast, simple and very small. It supports HTTP GET and POST method (that's all you need for more than 90% of time). It also supports HTTP Basic Authentication. Authentication can be performed by name and password lookup in a text file (userid:Unix_crypted_password) or from A LDAP server directly. And the server can be compiled as a secure server (SSL). The server does not have any configuration file and will not have any. Everything needed is hard coded at the top of the single C file."
+
+# 1017 ShodanHQ results for "Server: mhttpd v"
+# 472 ShodanHQ results for "Meta-HTML-Engine"
+
+matches [
+	# Server # Short
+	{ :regexp=>/[\s]*mhttpd/, :search=>"headers[server]" },
+
+	# Server # Short
+	{ :version=>/[\s]*mhttpd v([\d\.]+)/, :search=>"headers[server]" },
+
+	# Server # Long
+	{ :version=>/[\s]*MHttpd\/([\d\.]+) \([^\;]+; [^\;]+; Meta-HTML\/[\d\.]+\)/, :search=>"headers[server]" },
+
+	# Server # Long
+	{ :module=>/[\s]*MHttpd\/[\d\.]+ \([^\;]+; ([^\;]+); Meta-HTML\/[\d\.]+\)/, :search=>"headers[server]" },
+
+
+	# Meta-HTML-Engine
+	{ :version=>/[\s]*MHttpd\/([\d\.]+) \([^\;]+; [^\;]+; Meta-HTML\/[\d\.]+\)/, :search=>"headers[meta-html-engine]" },
+	{ :module=>/[\s]*MHttpd\/[\d\.]+ \([^\;]+; ([^\;]+); Meta-HTML\/[\d\.]+\)/, :search=>"headers[meta-html-engine]" },
+
+]
+
+
+end
+

plugins/mibew-messenger.rb

@@ -0,0 +1,39 @@
+##
+# This file is part of Whoknows and may be subject to
+# redistribution and commercial restrictions. Please see the Whoknows
+# web site for more information on licensing and terms of use.
+# https://github.com/krishealty/whoknows
+##
+Plugin.define do
+name "Mibew-Messenger"
+authors [
+  "Brendan Coles <[email protected]>", # 2012-02-02
+]
+version "0.1"
+description "Mibew Messenger (also known as Open Web Messenger) is an open-source live support application written in PHP and MySQL."
+website "http://mibew.org/"
+
+# Google results as at 2012-02-02 #
+# 66 for "Mibew Messenger" "2011 mibew.org" intitle:"Mibew Messenger"
+# 51 for "Mibew Messenger" "mibew.org" intitle:"Mibew Messenger" inurl:"operator/restore.php"
+
+# Dorks #
+dorks [
+'"Mibew Messenger" "mibew.org" intitle:"Mibew Messenger" inurl:"operator/restore.php"'
+]
+
+
+
+# Matches #
+matches [
+
+# Copyright Footer # Version Detection
+{ :version=>/<p id="legal"><a href="http:\/\/mibew\.org\/" class="flink">Mibew Messenger<\/a> ([^\s]+) \| \(c\) 20[\d]{2} mibew\.org<\/p>/ },
+
+# div class="empty_inner"
+{ :certainty=>75, :text=>'<div class="empty_inner" style="">&#160;</div>' },
+
+]
+
+end
+

plugins/micro-cms.rb

@@ -0,0 +1,42 @@
+##
+# This file is part of Whoknows and may be subject to
+# redistribution and commercial restrictions. Please see the Whoknows
+# web site for more information on licensing and terms of use.
+# https://github.com/krishealty/whoknows
+##
+Plugin.define do
+name "Micro-CMS"
+authors [
+  "Brendan Coles <[email protected]>", # 2011-02-26
+]
+version "0.1"
+description "Micro CMS"
+website "http://www.micro-cms.com/"
+
+# Google results as at 2011-02-26 #
+# 23 for "Powered by Micro CMS"
+
+# Dorks #
+dorks [
+'"Powered by Micro CMS"'
+]
+
+
+
+# Matches #
+matches [
+
+# Powered by text
+{ :regexp=>/<div class="footer"><div style="float: left;">Powered by <a href="http:\/\/(tpiha.kset.org|www.micro-cms.com)\/">Micro CMS<\/a> \| <a href="/ },
+
+# Simple powered by text
+{ :text=>'Powered by <strong><a href="http://microcms.kset.org/">Micro CMS</a></strong><br />' },
+
+# Admin Page # Default form tag
+{ :certainty=>25, :text=>'" method="post"onsubmit="' },
+
+]
+
+end
+
+

plugins/micro_httpd.rb

@@ -0,0 +1,31 @@
+##
+# This file is part of Whoknows and may be subject to
+# redistribution and commercial restrictions. Please see the Whoknows
+# web site for more information on licensing and terms of use.
+# https://github.com/krishealty/whoknows
+##
+Plugin.define do
+name "micro_httpd"
+authors [
+  "Brendan Coles <[email protected]>", # 2010-10-26
+  # v0.2 # 2011-02-12 # Updated regex match. 
+]
+version "0.2"
+description "micro_httpd is a very small Unix-based HTTP server. It runs from inetd, which means its performance is poor. But for low-traffic sites, it's quite adequate. It implements all the basic features of an HTTP server."
+website "http://www.acme.com/software/micro_httpd/"
+
+# ShodanHQ results as at 2010-10-26 #
+# 957,229 for "server: micro_httpd"
+
+
+
+# Matches #
+matches [
+
+# HTTP Server Header
+{ :search=>"headers[server]", :regexp=>/micro_httpd/i },
+
+]
+
+end
+

plugins/micronet-router.rb

@@ -0,0 +1,33 @@
+##
+# This file is part of Whoknows and may be subject to
+# redistribution and commercial restrictions. Please see the Whoknows
+# web site for more information on licensing and terms of use.
+# https://github.com/krishealty/whoknows
+##
+Plugin.define do
+name "Micronet-Router"
+authors [
+  "Brendan Coles <[email protected]>", # 2012-04-11
+]
+version "0.1"
+description "Micronet Communications Router"
+website "http://www.micronet.com.tw/mod/product/index.php?NodeID=23"
+
+# ShodanHQ results as at 2012-04-11 #
+# 1,394 for RCTTools (SecureSOHO Web configuration Tools)
+
+
+
+# Matches #
+matches [
+
+# Version Detection # HTTP Server Header
+{ :certainty=>75, :search=>"headers[server]", :version=>/^RCTTools \(SecureSOHO Web configuration Tools\) v([^\s]+)$/ },
+
+# /image/iso-8859-1/logo.jpg # SP888B
+{ :url=>"/image/iso-8859-1/logo.jpg", :md5=>"25acf0f5466c0ba42901a0a0b3251f5d", :model=>"SP888B" },
+
+]
+
+end
+

plugins/microsoft-httpapi.rb

@@ -0,0 +1,30 @@
+##
+# This file is part of Whoknows and may be subject to
+# redistribution and commercial restrictions. Please see the Whoknows
+# web site for more information on licensing and terms of use.
+# https://github.com/krishealty/whoknows
+##
+Plugin.define do
+name "Microsoft-HTTPAPI"
+authors [
+  "Brendan Coles <[email protected]>", # 2011-03-13
+  "Andrew Horton", # v0.2 # 2016-04-21 # Moved patterns from passive function to matches[]. 
+]
+version "0.2"
+description "The HTTP Server API enables applications to communicate over HTTP without using Microsoft Internet Information Server (IIS). Applications can register to receive HTTP requests for particular URLs, receive HTTP requests, and send HTTP responses. The HTTP Server API includes SSL support so that applications can exchange data over secure HTTP connections without IIS. It is also designed to work with I/O completion ports."
+website "http://msdn.microsoft.com/en-us/library/aa364510%28v=vs.85%29.aspx"
+
+# ShodanHQ results as at 2011-03-13 #
+# 148,635 for Microsoft-HTTPAPI
+
+matches [
+
+	# HTTP Server Header
+	{ :regexp=>/Microsoft-HTTPAPI/, :search=>"headers[server]" },
+	# Version Detection # HTTP Server Header
+	{ :version=>/Microsoft-HTTPAPI\/(.+)$/, :search=>"headers[server]" },
+
+]
+
+end
+