1##
2# This file is part of WhatWeb and may be subject to
3# redistribution and commercial restrictions. Please see the WhatWeb
4# web site for more information on licensing and terms of use.
5# http://www.morningstarsecurity.com/research/whatweb
6##
7Plugin.define "imperva-securesphere" do
8author "Aung Khant <http://yehg.net/>" # 2012-02-12
9version "0.1"
10description "Imperva SecureSphere - http://www.impervaguard.com/SecureSphere-Platform.asp"
11
12
13
14# Matches #
15matches [
16{:name=>'HTML Body',:text=>'<title>SecureSphere - Default</title>'},
17{:name=>'HTML Body',:text=>'<td><font class="gray-text-small">SecureSphere includes software developed by Oracle Corporation.</font></td></tr>'},
18{:name=>'HTML Body',:text=>'src="/SecureSphere/scripts/infra/ActiveRequests.js">'},
19{:name=>'HTML Body',:text=>'src="/SecureSphere/scripts/infra/Mprv.js"></script>'},
20{:name=>'HTML Body',:text=>'src="/SecureSphere/scripts/infra/SessionUtils.js">'},
21{:name=>'Location Header', :search=>"headers[location]", :regexp=>/SecureSphere\/secsphLogin\.jsp/}
22]
23
24# Aggressive #
25def aggressive
26	m=[]
27	target = URI.join(@base_uri.to_s,'SecureSphere/secsphLogin.jsp').to_s
28	status,url,ip,body,headers=open_target(target)
29	if status == 200
30
31		if body =~ /<td><font class="gray\-text\-small">SecureSphere includes software developed by Oracle Corporation\.<\/font><\/td><\/tr>/
32			m << {:name => "HTML Body (CM2)"}
33		end
34
35	end
36
37	m
38end
39
40end
41