# frozen_string_literal: true
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
WhatWeb::Plugin.define "imperva-securesphere" do
@author = "Aung Khant " # 2012-02-12
@version = "0.1"
@description = "Imperva SecureSphere - http://www.impervaguard.com/SecureSphere-Platform.asp"
# Matches #
@matches = [
{ name: 'HTML Body', text: '
SecureSphere - Default' },
{ name: 'HTML Body', text: 'SecureSphere includes software developed by Oracle Corporation. | ' },
{ name: 'HTML Body', text: 'src="/SecureSphere/scripts/infra/ActiveRequests.js">' },
{ name: 'HTML Body', text: 'src="/SecureSphere/scripts/infra/Mprv.js">' },
{ name: 'HTML Body', text: 'src="/SecureSphere/scripts/infra/SessionUtils.js">' },
{ name: 'Location Header', search: "headers[location]", regexp: /SecureSphere\/secsphLogin\.jsp/ }
]
# Aggressive #
def aggressive(target)
m = []
url = URI.join(target.uri.to_s, 'SecureSphere/secsphLogin.jsp').to_s
new_target = WhatWeb::Target.new(url)
if new_target.status == 200
if /SecureSphere includes software developed by Oracle Corporation\.<\/font><\/td><\/tr>/.match?(new_target.body)
m << { name: "HTML Body (CM2)" }
end
end
m
end
end
|