# frozen_string_literal: true

##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
# Version 0.3 # 2011-03-06 #
# Updated OS detection
##
# Version 0.2 # 2011-01-24 #
# Updated version detection
# Added match for 403 error page
##
WhatWeb::Plugin.define "XAMPP" do
  @author = "Brendan Coles <bcoles@gmail.com>" # 2011-01-21
  @version = "0.3"
  @description = "XAMPP is an easy to install Apache distribution containing MySQL, PHP and Perl. XAMPP is really very easy to install and to use - just download, extract and start."
  @website = "http://www.apachefriends.org/en/xampp.html"

  # ShodanHQ results as at 2011-01-21 #
  # 21,462 for location xampp

  # Google results as at 2011-01-21 #
  # 15 for "You have successfully installed XAMPP on this system!" intitle:"XAMPP Version"
  # 2 image results for inurl:"head-macosx.gif" xampp
  # 3 image results for inurl:"head-windows.gif" xampp

  # Dorks #
  @dorks = [
    '"You have successfully installed XAMPP on this system!" intitle:"XAMPP Version"'
  ]

  # Matches #
  @matches = [

    # Default meta author
    { text: '<meta name="author" content="Kai Oswald Seidler">', certainty: 75 },

    # Version Detection # Default title
    { version: /<title>XAMPP Version ([^\r^\n^<]+)[\s]*<\/title>/ },

    # OS Detection # Default title
    { os: /<title>XAMPP for ([^\r^\n^<]{5,8}) [\d\.a-z]{3,6}[\s]*<\/title>/ },

    # Windows # Default logo
    { url: "img/head-windows.gif", md5: "567ebe64625942cbb8244eca918b06a0", os: "Windows" },

    # Linux # Default logo
    { url: "img/head-linux.jpg", md5: "bca095ec432fe08f90866d2e6c149590", os: "Linux" },

    # Mac OSX # Default logo
    { url: "img/head-macosx.gif", md5: "1fbd850a328026104cd7caa9e3bdaf4e", os: "Mac OSX" },
    { url: "img/head-macosx.gif", md5: "df859a3c31b7ed2b75d78f78889107b2", os: "Mac OSX" },

    # Solaris # Default logo
    { url: "img/head-solaris.gif", md5: "b18490e1a42d7293cbca353100d6d787", os: "Solaris" },

    # 403 Error page
    { text: '<p style="margin-left: 2.6em; font-size: 1.2em; color: red;">New XAMPP security concept:</p>' },

  ]

  # Passive #
  def passive(target)
    m = []

    # HTTP Redirect Location #
    m << { certainty: 25 } if target.headers["location"] =~ /^http:\/\/[\d\.a-z]{1,256}\/xampp\/$/i

    m
  end

  # An aggressive plugin can get more details from :
  # /xampp/start.php  # Operating System
  # /xampp/phpinfo.php  # phpinfo()
  # /xampp/navi.php  # Installed Apps (phpMyAdmin, Webalizer, FileZilla, etc)

  # Aggressive #
  def aggressive(target)
    m = []

    # Extract details from /phpinfo.php
    url = URI.join(target.uri.to_s, "/xampp/phpinfo.php").to_s
    new_target = WhatWeb::Target.new(url)

    # Check if the document is a valid XAMPP phpinfo() page
    if new_target.body =~ /<title>phpinfo\(\)<\/title>/ && new_target.body =~ /XAMPP/i && (new_target.body =~ /<h1 class="p">PHP Version [^<]{3,40}<\/h1>/ || new_target.body =~ /<h1>PHP Version [^<]{3,40}<\/h1>/)

      # Extract PHP Version
      m << { string: "PHP:" + new_target.body.scan(/<h1 class="p">PHP Version ([^<]{3,40})<\/h1>/).flatten.first } if new_target.body =~ /<h1 class="p">PHP Version [^<]{3,40}<\/h1>/
      m << { string: "PHP:" + new_target.body.scan(/<h1>PHP Version ([^<]{3,40})<\/h1>/).flatten.first } if new_target.body =~ /<h1>PHP Version [^<]{3,40}<\/h1>/

      # OS Detection
      m << { os: new_target.body.scan(/<tr><td class="e">System <\/td><td class="v">([^<]{4,256})[\s]?<\/td><\/tr>/).flatten.first } if new_target.body =~ /<tr><td class="e">System <\/td><td class="v">[^<]{4,256}[\s]?<\/td><\/tr>/

    end

    m
  end
end