Re: New script http-drupal-fingerprint

[Paulino Calderon <paulino () calderonpale com>]

On 07/06/2011 05:29 PM, Hani Benhabiles wrote:
> I've attached a patch that adds some Joomla signatures (as well as 
> moving already committed Drupal signatures to CMS part of the file).
>
> On Tue, Jul 5, 2011 at 12:36 AM, Paulino Calderon 
> <paulino () calderonpale com <mailto:paulino () calderonpale com>> wrote:
>
>     On 07/04/2011 02:06 PM, Hani Benhabiles wrote:
>
>         Hey Henri,
>
>         Sorry for being late, I've been busy for the last couple of
>         weeks. Djalal
>         reminded me of this one.
>         I've attached a patch that adds them to http-fingerprints.lua
>
>         Hani.
>
>         On Tue, May 10, 2011 at 9:20 PM, Henri
>         Doreau<henri.doreau () greenbone net
>         <mailto:henri.doreau () greenbone net>>wrote:
>
>
>             Hi Hani,
>
>             thanks for putting some effort in this. I have read your
>             script and I
>             think that these signatures should preferably be added to
>             http-fingerprints (see nselib/data/http-fingerprints.lua)
>             for our
>             general purpose http-enum.nse script.
>
>             The fingerprints file is well documented and it shouldn't
>             be too
>             difficult to add your Drupal signatures to it. Feel free
>             to ask for
>             guidance on this list if necessary.
>
>             Regards.
>
>             --
>             Henri Doreau |  Greenbone Networks GmbH  |
>             http://www.greenbone.net
>             Neuer Graben 17, 49074 Osnabrueck, Germany | AG
>             Osnabrueck, HR B 202460
>             Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner
>
>
>
>
>
>
>         _______________________________________________
>         Sent through the nmap-dev mailing list
>         http://cgi.insecure.org/mailman/listinfo/nmap-dev
>         Archived at http://seclists.org/nmap-dev/
>
>
>     Thanks! They look good, I've commited these signatures and another
>     one for Arris routers in r24624.
>
>     Cheers.
>
>     -- 
>     Paulino Calderón Pale
>     Web: http://calderonpale.com
>     Twitter: http://www.twitter.com/paulinocaIderon
>
>     _______________________________________________
>     Sent through the nmap-dev mailing list
>     http://cgi.insecure.org/mailman/listinfo/nmap-dev
>     Archived at http://seclists.org/nmap-dev/
>
>
>
>
> --
> M. Hani Benhabiles
> Twitter: @kroosec


Thanks for submitting this. You had an invalid entry:

> table.insert(fingerprints, {
>     category='cms',
>     probes={
>         {path='/htaccess.txt'}
>         {path='/templates/system/css/toolbar.css'}
>         {path='/templates/beez/css/template_rtl.css'}
>     },
>     matches={
>         {match='Joomla!', output='Joomla!'}
>     }
> })

I've fixed this, added your fingerprints and also included some new ones 
for Cisco, Airaya and Cirronet routers in r24779.

Cheers.

--
Paulino Calderón Pale
Web: http://calderonpale.com
Twitter: http://www.twitter.com/paulinocaIderon

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/