# frozen_string_literal: true ## # This file is part of WhatWeb and may be subject to # redistribution and commercial restrictions. Please see the WhatWeb # web site for more information on licensing and terms of use. # http://www.morningstarsecurity.com/research/whatweb ## WhatWeb::Plugin.define "imperva-securesphere" do @author = "Aung Khant " # 2012-02-12 @version = "0.1" @description = "Imperva SecureSphere - http://www.impervaguard.com/SecureSphere-Platform.asp" # Matches # @matches = [ { name: 'HTML Body', text: 'SecureSphere - Default' }, { name: 'HTML Body', text: 'SecureSphere includes software developed by Oracle Corporation.' }, { name: 'HTML Body', text: 'src="/SecureSphere/scripts/infra/ActiveRequests.js">' }, { name: 'HTML Body', text: 'src="/SecureSphere/scripts/infra/Mprv.js">' }, { name: 'HTML Body', text: 'src="/SecureSphere/scripts/infra/SessionUtils.js">' }, { name: 'Location Header', search: "headers[location]", regexp: /SecureSphere\/secsphLogin\.jsp/ } ] # Aggressive # def aggressive(target) m = [] url = URI.join(target.uri.to_s, 'SecureSphere/secsphLogin.jsp').to_s new_target = WhatWeb::Target.new(url) if new_target.status == 200 if /SecureSphere includes software developed by Oracle Corporation\.<\/font><\/td><\/tr>/.match?(new_target.body) m << { name: "HTML Body (CM2)" } end end m end end