# frozen_string_literal: true ## # This file is part of WhatWeb and may be subject to # redistribution and commercial restrictions. Please see the WhatWeb # web site for more information on licensing and terms of use. # http://www.morningstarsecurity.com/research/whatweb ## WhatWeb::Plugin.define "Jive-SBS" do @author = "Brendan Coles " # 2011-08-21 @version = "0.1" @description = "The Jive Engage platform apparently combines the most powerful features of community software, collaboration software, social networking software & social media monitoring into the leading Social Business Software (SBS) solution." @website = "http://www.jivesoftware.com/products" # Default Login # # admin:admin # Old versions of Jive stored the password in plain-text # Now hashed passwords are located in table "jiveUser" column "passwordHash" # Default Database Details # # DBA: postgres # Database: sbs # Username: sbs # Password is located in: /usr/local/jive/etc/postgres/.cs-password # To enable remote connections to the database, run the script: /usr/local/jive/bin/dbremote, then restart the application with ./appstop && appstart # Jive-Managed Application Networking # # The default Jive SBS application will work on the following ports: # Application server management TCP 127.0.0.1:9000 # HTTP TCP 127.0.0.1:9001 # AJP TCP 127.0.0.1:9002 # Multicast Cluster UDP/Multicast 224.224.224.224:9003 # Note that managed applications should not be accessed directly via the HTTP 9001 port and it is recommended that a firewall prevent access to that port. Its existence is for troubleshooting and support purposes only and is not intended for production use. # ShodanHQ results as at 2011-08-21 # # 792 for jive.server.info # 667 for x-jsl x-jal # Google results as at 2011-08-21 # # 906 for site:hosted.jivesoftware.com -thread -message # 145 for inurl:"/forgot-username!input.jspa" intitle:"Forgot Username" # 84 for "powered by Jive SBS * community software" # 3 for intitle:"Jive SBS Administration Console" inurl:"/admin/login.jsp" # Dorks # @dorks = [ 'inurl:"/forgot-username!input.jspa" intitle:"Forgot Username"', '"powered by Jive SBS * community software"' ] # Matches # @matches = [ # Login page # Version Detection # Stylesheets { version: // }, { version: // }, # Login page # Skip navigation link { text: 'Skip navigation' }, # Login page # body tag { text: '' }, # Login page # Version Detection # Powered by footer { version: /[^<]+powered by Jive SBS ® ([^\s]+) community software[\s]+<\/a>[\s]+