diff --git a/CHANGELOG b/CHANGELOG index 1ded166e9..8a15c82fa 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,6 +1,6 @@ # Nmap Changelog ($Id$); -*-text-*- -o [NSE] Updated fingerprints for script http-default-accounts with 16 new +o [NSE] Updated fingerprints for script http-default-accounts with 17 new fingerprints. 4 fingerprints have been broadened to cover more variants. [nnposter] diff --git a/nselib/data/http-default-accounts-fingerprints.lua b/nselib/data/http-default-accounts-fingerprints.lua index 1e272b5a3..c72212f84 100644 --- a/nselib/data/http-default-accounts-fingerprints.lua +++ b/nselib/data/http-default-accounts-fingerprints.lua @@ -321,6 +321,30 @@ table.insert(fingerprints, { end }) +table.insert(fingerprints, { + -- Version 9.2 + name = "WebLogic Server Console 9.x", + category = "web", + paths = { + {path = "/console/"} + }, + target_check = function (host, port, path, response) + local loc = response.header["location"] or "" + return response.status == 302 + and loc:find("/console/login/LoginForm%.jsp;") + end, + login_combos = { + {username = "weblogic", password = "weblogic"} + }, + login_check = function (host, port, path, user, pass) + local req = http_post_simple(host, port, + url.absolute(path, "j_security_check"), nil, + {j_username=user,j_password=pass,j_character_encoding="UTF-8"}) + local loc = req.header["location"] or "" + return req.status == 302 and loc:find("/console;") + end +}) + table.insert(fingerprints, { -- Version 4.1.31, 6.0.24, 7.0.54 name = "Apache Tomcat",