# frozen_string_literal: true

##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
WhatWeb::Plugin.define "DLI-LPC" do
  @author = "Brendan Coles <bcoles@gmail.com>" # 2011-07-15
  @version = "0.1"
  @description = "Digital Loggers Inc remote switch with built-in web server for remote reboot and power control"
  @website = "http://www.digital-loggers.com/lpc.html"

  # Defaults Settings #
  # IP: 192.168.0.100
  # Username: admin
  # Password: 1234

  # Manuals #
  # http://www.digital-loggers.com/lpcman.pdf
  # http://www.digital-loggers.com/lpc2man.pdf
  # http://www.digital-loggers.com/lpc3man.pdf

  # ShodanHQ results as at 2011-07-15 #
  # 1,583 for DLILPC

  # Matches #
  @matches = [

    # Title
    { text: '<title>Power Controller </title>' },

    # Form
    { text: '<FORM NAME="login" ID="login" ACTION="/login.tgi" METHOD=post>' },
    { text: '<FORM NAME="secin" ID="secin" ACTION="/login.tgi" METHOD=post>' },

    # h1 warning
    { text: '<tr><td align=center><h1>Warning: Insecure Authentication</h1></td></tr>' },

    # Submitbtn
    { text: '<TD><INPUT onClick="calcResponse(); return false;" TYPE="Submit" NAME="Submitbtn" VALUE="OK">' },

  ]

  # Passive #
  def passive(target)
    m = []

    # DLILPC Cookie
    m << { name: "DLILPC Cookie" } if target.headers["set-cookie"] =~ /DLILPC=""; Version=[\d]+; Max-Age=[\d]+; Path=/

    # Return passive matches
    m
  end
end