Sha256: 4cad69517a41c58039540a92d527ec4eb537b0cc12fc815140f834b0a43dcc66
Contents?: true
Size: 1.25 KB
Versions: 6
Compression:
Stored size: 1.25 KB
Contents
# frozen_string_literal: true
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
WhatWeb::Plugin.define "SonicWALL-Firewall" do
@author = "Brendan Coles <bcoles@gmail.com>" # 2011-08-25
@version = "0.1"
@description = "SonicWALL Firewall device"
@website = "http://www.sonicwall.com/us/products/Network_Security.html"
# Google results as at 2011-08-05 #
# 554 for intitle:"SonicWALL - Authentication" +Username +Password +Language
# ShodanHQ results as at 2011-03-13 #
# 124,518 for SonicWALL -VPN
# Dorks #
@dorks = [
'intitle:"SonicWALL - Authentication" "Username" "Password" "Language"'
]
# Matches #
@matches = [
# HTTP Server Header
{ search: "headers[server]", regexp: /^SonicWALL$/ },
# Detect if sslvpn option is allowed
{ url: "/auth1.html", module: /<div align="right">Click <a href="sslvpn" onClick="top\.location\.href='sslvpn'";>here<\/a> for (sslvpn) login/ },
# Firmware Version Detection
{ url: "/auth1.html", firmware: /<link href="swl_login-([^"]+)\.css" rel="stylesheet" type="text\/css">/ },
]
end
Version data entries
6 entries across 6 versions & 1 rubygems