diff --git a/nselib/data/http-fingerprints.lua b/nselib/data/http-fingerprints.lua index 72aa7cda8..f9e4777db 100644 --- a/nselib/data/http-fingerprints.lua +++ b/nselib/data/http-fingerprints.lua @@ -4,6 +4,8 @@ -- o Jason H. (@jhaddix) for helping out with a whole pile of fingerprints he's -- collected -- o Bob Dooling +-- o Robert Rowley for the awesome open source cms and README checks +-- http://www.irvineunderground.org -- -- This file is released under the Nmap license; see: -- http://nmap.org/book/man-legal.html @@ -1156,6 +1158,139 @@ table.insert(fingerprints, { } }) +------------------------------------------------ +---- Open Source CMS checks ---- +------------------------------------------------ + +-- Broad wordpress version identification +table.insert(fingerprints, { + category='cms', + probes={ + {path='/wp-login.php'}, + {path='/wordpress/wp-login.php'}, + {path='/blog/wp-login.php'}, + {path='/weblog/wp-login.php'} + }, + matches={ + {match='ver=20080708', output='WordPress 2.6.x found'}, + {match='ver=20081210', output='WordPress 2.7.x found'}, + {match='ver=20090514', output='WordPress 2.8.x found'}, + {match='ver=20091217', output='WordPress 2.9.x found'}, + {match='ver=20100601', output='WordPress 3.0.x found'}, + {output='Wordpress login page.'} + } +}) + +-- ZenCart version detection +table.insert(fingerprints, { + category='cms', + probes={ + {path='/docs/'}, + {path='/store/docs/'}, + {path='/zencart/docs/'}, + {path='/cart/docs/'} + }, + matches={ + {match='.*">Changelog for v(%d-%..-) %(changed files%)', output='ZenCart, version \\1'} + } +}) + +-- Broad phpBB versions +table.insert(fingerprints, { + category='cms', + probes={ + {path='/docs/CHANGELOG.html'}, + {path='/forum/docs/CHANGELOG.html'}, + {path='/forums/docs/CHANGELOG.html'}, + {path='/board/docs/CHANGELOG.html'}, + {path='/boards/docs/CHANGELOG.html'} + }, + matches={ + {match='Changes since (%d-%..-)', output='phpBB version slightly newer than \\1'}, + {match='Pligg Content Management System%s*