# frozen_string_literal: true ## # This file is part of WhatWeb and may be subject to # redistribution and commercial restrictions. Please see the WhatWeb # web site for more information on licensing and terms of use. # http://www.morningstarsecurity.com/research/whatweb ## WhatWeb::Plugin.define "BEA-WebLogic-Server" do @author = "Brendan Coles " # 2011-09-14 @version = "0.1" @description = "BEA WebLogic Server is an enterprise-ready Java EE application server that supports the deployment of mission-critical applications in a robust, secure, highly available, and scalable environment." @website = "http://download.oracle.com/docs/cd/E13222_01/wls/docs100/index.html" # ShodanHQ results as at 2011-09-14 # # 2,000 for WebLogic # 98 for WebLogic Temporary Patch # Google results as at 2011-09-14 # # 26 for intitle:"Default BEA WebLogic Server Web Server Index Page" # Dorks # @dorks = [ 'intitle:"Default BEA WebLogic Server Web Server Index Page"' ] # Matches # @matches = [ # Title { text: 'Default BEA WebLogic Server Web Server Index Page' }, { text: 'Default BEA WebLogic Server Web Server Index Page' }, # Version Detection # Heading { version: /

BEA WebLogic Server ([^\s]+)™<\/h1>/ }, # Version Detection # HTTP Server Header { search: "headers[server]", version: /^WebLogic( WebLogic)?( Server)? (.+) [\d]{2}\/[\d]{2}\/[\d]{4}/, offset: 2 }, { search: "headers[server]", version: /^WebLogic WebLogic (Temporary .+) [\d]{2}\/[\d]{2}\/[\d]{4}/ }, { search: "headers[server]", version: /^WebLogic Server (.+) [A-Z][a-z]{2} [A-Z][a-z]{2} [\d]{1,2} [\d]{2}:[\d]{2}:[\d]{2}/ }, ] end