-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathapache-struts.rb
More file actions
42 lines (29 loc) · 1.46 KB
/
apache-struts.rb
File metadata and controls
42 lines (29 loc) · 1.46 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
# Version 0.2 by Andrew Horton
## added org.apache.struts.action. seen in stack traces and GET/POST request parameter names
Plugin.define "Apache-Struts" do
author "Brendan Coles <bcoles@gmail.com>" # 2012-01-08
version "0.2"
description "The Apache Struts web framework is a free open-source solution for creating Java web applications."
website "https://struts.apache.org/"
# ShodanHQ results as at 2012-01-08 #
# 7 for org.apache.struts
# Matches #
matches [
# Set-Cookie # org.apache.struts.action.LOCALE
{ :search=>"headers[set-cookie]", :regexp=>/org\.apache\.struts\.action\.LOCALE=[^\s]+;/ },
# Set-Cookie # org.apache.struts.*
{ :search=>"headers[set-cookie]", :regexp=>/org\.apache\.struts\.[^\s]+=[^\s]+;/, :certainty=>75 },
# org.apache.struts.action in a local link parameter name
{:search=>"body", :regexp=>/<a\s+href=/proxy/https/github.com/exitmsconfig/-python-/blob/master/Module/WhatWeb/plugins/[%5E>]+org.apache.struts/%7D,%3C/div>
# anywhere in page
{:search=>"all", :version=>2, :text=>'org.apache.struts2', :certainty=>25},
{:search=>"all", :version=>1, :text=>'org.apache.struts.', :certainty=>25},
{:regexp=>/Development mode, or devMode, enables extra\s+debugging behaviors and reports to assist developers. To disable this mode, set:\s+<pre>\s+ struts.devMode=false/, :string=>"Development Mode"}
]
end