Contents

# frozen_string_literal: true

##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
WhatWeb::Plugin.define "phpRemoteView" do
  @author = "Brendan Coles <[e-mail]>" # 2011-05-24
  @version = "0.1"
  @description = "phpRemoteView - web backdoor - allows users to browse the filesystem, edit files on the server, execute PHP code, or Shell commands, etc. Works on Windows and Unix servers"
  @website = "http://php.spb.ru/remview/"

  # Google results as at 2011-05-24 #
  # 72 for intitle:"phpRemoteView: " +perms

  # Dorks #
  @dorks = [
    'intitle:"phpRemoteView: " "perms"'
  ]

  # Matches #
  @matches = [

    # Filepath Detection
    { certainty: 75, filepath: /<title>phpRemoteView: ([^<]+)<\/title>/ },

    # Version Detection
    { version: /<font size=1 style='Font: 8pt Verdana'>phpRemoteView &copy; Dmitry Borodin \(version ([\d]{4}-[\d]{2}-[\d]{2})\)<br>/ },

    # Index of HTML
    { certainty: 75, text: "'><font face=fixedsys size=+2>*</font></a><font size=5><b>Index of</b></font>" },

  ]
end

Version data entries

6 entries across 6 versions & 1 rubygems

Version	Path
simple_whatweb-0.4.1	lib/whatweb/plugins/phpremoteview.rb
simple_whatweb-0.4.0	lib/whatweb/plugins/phpremoteview.rb
simple_whatweb-0.3.0	lib/whatweb/plugins/phpremoteview.rb
simple_whatweb-0.2.1	lib/whatweb/plugins/phpremoteview.rb
simple_whatweb-0.2.0	lib/whatweb/plugins/phpremoteview.rb
simple_whatweb-0.1.0	lib/whatweb/plugins/phpremoteview.rb