# frozen_string_literal: true ## # This file is part of WhatWeb and may be subject to # redistribution and commercial restrictions. Please see the WhatWeb # web site for more information on licensing and terms of use. # http://www.morningstarsecurity.com/research/whatweb ## WhatWeb::Plugin.define "Oracle-Siebel-CRM" do @author = "Brendan Coles " # 2010-11-01 @version = "0.1" @description = "The world's most complete customer relationship management (CRM) solution, Oracle's Siebel CRM helps organizations differentiate their businesses to achieve maximum top-and bottom-line growth. It delivers a combination of transactional, analytical, and engagement features to manage all customer-facing operations." @website = "http://www.oracle.com/us/products/applications/siebel/index.html" # 3 ShodanHQ results for Set-Cookie: BIGipServerSIEBEL # 8 ShodanHQ results for start.swe # 138 Google results for filetype:swe inurl:start # Dorks # @dorks = [ 'filetype:swe inurl:start' ] @matches = [ # Default Shortcut Icon { md5: "a28ebcac852795fe30d8e99a23d377c1", url: "/favicon.ico", string: "eService" }, # Frameset # Default HTML tag { text: "" }, # Landing page # JavaScript message { text: "

Scripting is used to manage data interactions between the Siebel server/Web Server and the User Interface. This requires JavaScript to be enabled in the web browser

" }, # Error page { text: 'The server you are trying to access is either busy or experiencing difficulties. Please close the Web browser, open a new browser window, and try logging in again.', string: "Temporarily Unavailable" }, # Landing page # Default JavaScript { text: 'alert("Your session timed out because you were idle for too long. Please log in again to resume.\nIf you had a Siebel attachment open, your changes may have been lost. Please save the file locally, close it, and reattach it to the appropriate record.");' }, { text: '' }, # Login page # Default HTML comment { text: '' }, # Landing page # Body onload { text: "", string: "eService" }, # Landing Page # Default JavaScript { text: '' }, ] # Passive # def passive(target) m = [] # Cookies m << { name: "BIGipServerSiebel_EService_Prod Cookie" } if target.headers["set-cookie"] =~ /BIGipServerSiebel_EService_Prod=[\d\.]+;/ m << { name: "BIGipServerSIEBEL Cookie" } if target.headers["set-cookie"] =~ /BIGipServerSIEBEL-80=[\d\.]+;/ m << { name: "_sn Cookie" } if target.headers["set-cookie"] =~ /_sn=[a-zA-Z0-9]{43}_; Version=1; Path=\// # Landing page # Default form HTML m << { string: target.body.scan(/