New CMS ident checks

intrigueio · Jan 2, 2020 · 594f2a6 · 594f2a6
1 parent 40f4849
commit 594f2a6
Show file tree

Hide file tree

Showing 39 changed files with 1,149 additions and 0 deletions.
diff --git a/.ruby-version b/.ruby-version
@@ -0,0 +1 @@
+2.6.5
diff --git a/checks/http/NetObjects.rb b/checks/http/NetObjects.rb
@@ -0,0 +1,29 @@
+module Intrigue
+module Ident
+module Check
+class KokenCMS< Intrigue::Ident::Check::Base
+
+  def generate_checks(url)
+    [
+      {
+        :type => "fingerprint",
+        :category => "application",
+        :tags => ["CMS"],
+        :vendor => "NetObjects Inc.",
+        :product => "Koken",
+        :references => ["http://koken.me/"],
+        :version => nil,
+        :match_type => :content_body,
+        :match_content => /koken (.*.\d)/i ,
+        :dynamic_version => lambda { |x| _first_body_capture(x, /koken (.*.\d)/i)},
+        :match_details => "header match",
+        :hide => false,
+        :paths => ["#{url}"],
+        :inference => true
+      }
+    ]
+  end
+end
+end
+end
+end
diff --git a/checks/http/Seamless.rb b/checks/http/Seamless.rb
@@ -0,0 +1,30 @@
+module Intrigue
+module Ident
+module Check
+class SeamlessCMS < Intrigue::Ident::Check::Base
+
+  def generate_checks(url)
+    [
+      {
+        :type => "fingerprint",
+        :category => "application",
+        :tags => ["CMS"],
+        :vendor => "SeamlessCMS",
+        :product => "SeamlessCMS",
+        :references => ["https://www.seamlesscms.com/"],
+        :version => nil,
+        :match_type => :content_body,
+        :match_content => /Published by Seamless.CMS.WebUI, (.*.\d)/i,
+        :dynamic_version => lambda { |x| _first_body_capture(x, /Published by Seamless.CMS.WebUI, (.*.\d)/i)},
+        :match_details => "Header match",
+        :hide => false,
+        :paths => ["#{url}"],
+        :inference => true
+      }
+    ]
+  end
+
+end
+end
+end
+end
diff --git a/checks/http/alkacon.rb b/checks/http/alkacon.rb
@@ -0,0 +1,30 @@
+module Intrigue
+module Ident
+module Check
+class Alkacon < Intrigue::Ident::Check::Base
+
+  def generate_checks(url)
+    [
+      {
+        :type => "fingerprint",
+        :category => "application",
+        :tags => ["CMS"],
+        :vendor => "Alkacon",
+        :product => "OpenCMS",
+        :references => [],
+        :version => nil,
+        :match_type => :content_body,
+        :match_content => /Powered by Al Mubda version (\d.*?)<\/a>/i,
+        :dynamic_version => lambda { |x| _first_body_capture(x, /Powered by Al Mubda version (\d.*?)<\/a>/i)},
+        :match_details => "footer match",
+        :hide => false,
+        :paths => ["#{url}"],
+        :inference => true
+      }
+    ]
+  end
+
+end
+end
+end
+end
diff --git a/checks/http/almubdaCMS.rb b/checks/http/almubdaCMS.rb
@@ -0,0 +1,30 @@
+module Intrigue
+module Ident
+module Check
+class AlmubdaCMS < Intrigue::Ident::Check::Base
+
+  def generate_checks(url)
+    [
+      {
+        :type => "fingerprint",
+        :category => "application",
+        :tags => ["CMS"],
+        :vendor => "AlMubda",
+        :product => "Almubda CMS",
+        :references => [],
+        :version => nil,
+        :match_type => :content_body,
+        :match_content => /Powered by Al Mubda version (\d.*?)<\/a>/i,
+        :dynamic_version => lambda { |x| _first_body_capture(x, /Powered by Al Mubda version (\d.*?)<\/a>/i)},
+        :match_details => "footer match",
+        :hide => false,
+        :paths => ["#{url}"],
+        :inference => true
+      }
+    ]
+  end
+
+end
+end
+end
+end
diff --git a/checks/http/beehive.rb b/checks/http/beehive.rb
@@ -0,0 +1,30 @@
+module Intrigue
+module Ident
+module Check
+class Beehive < Intrigue::Ident::Check::Base
+
+  def generate_checks(url)
+    [
+      {
+        :type => "fingerprint",
+        :category => "application",
+        :tags => ["Forum system"],
+        :vendor => "Beehive",
+        :product => "Beehive Forum",
+        :references => ["https://www.beehiveforum.co.uk/"],
+        :version => nil,
+        :match_type => :content_body,
+        :match_content => /Beehive Forum (.*\d)/i,
+        :dynamic_version => lambda { |x|  _first_body_capture(x, /Beehive Forum (.*\d)/i)},
+        :match_details => "header match",
+        :hide => false,
+        :paths => ["#{url}"],
+        :inference => true
+      }
+    ]
+  end
+
+end
+end
+end
+end
diff --git a/checks/http/browsermedia.rb b/checks/http/browsermedia.rb
@@ -0,0 +1,30 @@
+module Intrigue
+module Ident
+module Check
+class BrowserCMS < Intrigue::Ident::Check::Base
+
+  def generate_checks(url)
+    [
+      {
+        :type => "fingerprint",
+        :category => "application",
+        :tags => ["CMS"],
+        :vendor => "BrowserMedia",
+        :product => "BrowserCMS",
+        :references => ["http://www.browsercms.org/"],
+        :version => nil,
+        :match_type => :content_body,
+        :match_content => /BrowserCMS (.*.\d)/i,
+        :dynamic_version => lambda { |x| _first_body_capture(x, /BrowserCMS (.*.\d)/i)},
+        :match_details => "header match",
+        :hide => false,
+        :paths => ["#{url}"],
+        :inference => true
+      }
+    ]
+  end
+
+end
+end
+end
+end
diff --git a/checks/http/cmsimple.rb b/checks/http/cmsimple.rb
@@ -0,0 +1,30 @@
+module Intrigue
+module Ident
+module Check
+class CMSimple < Intrigue::Ident::Check::Base
+
+  def generate_checks(url)
+    [
+      {
+        :type => "fingerprint",
+        :category => "application",
+        :tags => ["CMS"],
+        :vendor => "CMSimple",
+        :product => "CMSimple",
+        :references => ["https://www.cmsimple.fr/"],
+        :version => nil,
+        :match_type => :content_body,
+        :match_content => /CMSimple (.*\d)/i,
+        :dynamic_version => lambda { |x|  _first_body_capture(x, /CMSimple (.*\d)/i)},
+        :match_details => "header match",
+        :hide => false,
+        :paths => ["#{url}"],
+        :inference => true
+      }
+    ]
+  end
+
+end
+end
+end
+end
diff --git a/checks/http/concrete5.rb b/checks/http/concrete5.rb
@@ -0,0 +1,30 @@
+module Intrigue
+module Ident
+module Check
+class Concrete5CMS < Intrigue::Ident::Check::Base
+
+  def generate_checks(url)
+    [
+      {
+        :type => "fingerprint",
+        :category => "application",
+        :tags => ["CMS"],
+        :vendor => "Concrete5",
+        :product => "Concrete5",
+        :references => ["https://www.concrete5.org/"],
+        :version => nil,
+        :match_type => :content_body,
+        :match_content => /concrete5 - (.*\d)/,
+        :dynamic_version => lambda { |x| _first_body_capture(x, /concrete5 - (.*\d)/)},
+        :match_details => "header match",
+        :hide => false,
+        :paths => ["#{url}"],
+        :inference => true
+      }
+    ]
+  end
+
+end
+end
+end
+end
diff --git a/checks/http/contenido.rb b/checks/http/contenido.rb
@@ -0,0 +1,30 @@
+module Intrigue
+module Ident
+module Check
+class ContenidoCMS < Intrigue::Ident::Check::Base
+
+  def generate_checks(url)
+    [
+      {
+        :type => "fingerprint",
+        :category => "application",
+        :tags => ["CMS"],
+        :vendor => "Contenido",
+        :product => "Contenido CMS",
+        :references => ["https://www.contenido.org/"],
+        :version => nil,
+        :match_type => :content_body,
+        :match_content => /contenido (.*.\d)/i,
+        :dynamic_version => lambda { |x| _first_body_capture(x, /contenido (.*.\d)/i)},
+        :match_details => "header match",
+        :hide => false,
+        :paths => ["#{url}"],
+        :inference => true
+      }
+    ]
+  end
+
+end
+end
+end
+end
diff --git a/checks/http/danneo.rb b/checks/http/danneo.rb
@@ -0,0 +1,30 @@
+module Intrigue
+module Ident
+module Check
+class DanneoCMS < Intrigue::Ident::Check::Base
+
+  def generate_checks(url)
+    [
+      {
+        :type => "fingerprint",
+        :category => "application",
+        :tags => ["CMS"],
+        :vendor => "Danneo",
+        :product => "Danneo",
+        :references => ["http://danneo.ru/"],
+        :version => nil,
+        :match_type => :content_body,
+        :match_content => /CMS Danneo (.*.\d)/i,
+        :dynamic_version => lambda { |x| _first_body_capture(x, /CMS Danneo (.*.\d)/i)},
+        :match_details => "header match",
+        :hide => false,
+        :paths => ["#{url}"],
+        :inference => true
+      }
+    ]
+  end
+
+end
+end
+end
+end
diff --git a/checks/http/discourse.rb b/checks/http/discourse.rb
@@ -0,0 +1,30 @@
+module Intrigue
+module Ident
+module Check
+class DiscourseCMS < Intrigue::Ident::Check::Base
+
+  def generate_checks(url)
+    [
+      {
+        :type => "fingerprint",
+        :category => "application",
+        :tags => ["CMS"],
+        :vendor => "Discourse",
+        :product => "Discourse",
+        :references => ["https://www.discourse.org/"],
+        :version => nil,
+        :match_type => :content_body,
+        :match_content => /Discourse (\d....)/,
+        :dynamic_version => lambda { |x| _first_body_capture(x, /Discourse (\d....)/)},
+        :match_details => "header match",
+        :hide => false,
+        :paths => ["#{url}"],
+        :inference => true
+      }
+    ]
+  end
+
+end
+end
+end
+end
diff --git a/checks/http/discuz!.rb b/checks/http/discuz!.rb
@@ -0,0 +1,30 @@
+module Intrigue
+module Ident
+module Check
+class Discuz < Intrigue::Ident::Check::Base
+
+  def generate_checks(url)
+    [
+      {
+        :type => "fingerprint",
+        :category => "application",
+        :tags => ["CMS"],
+        :vendor => "Discuz!",
+        :product => "Discuz!",
+        :references => ["http://www.discuz.net/"],
+        :version => nil,
+        :match_type => :content_body,
+        :match_content => /discuz! (.*\d)/i,
+        :dynamic_version => lambda { |x|  _first_body_capture(x, /discuz! (.*\d)/i)},
+        :match_details => "header match",
+        :hide => false,
+        :paths => ["#{url}"],
+        :inference => true
+      }
+    ]
+  end
+
+end
+end
+end
+end