1## 2# This file is part of WhatWeb and may be subject to 3# redistribution and commercial restrictions. Please see the WhatWeb 4# web site for more information on licensing and terms of use. 5# http://www.morningstarsecurity.com/research/whatweb 6## 7Plugin.define "Google-Search-Appliance" do 8author "Brendan Coles <bcoles@gmail.com>" # 2011-09-16 9version "0.1" 10description "The Google Search Appliance (GSA) is a piece of hardware that corporations install on-premise so that employees can search enterprise data." 11website "http://www.google.com/enterprise/search/gsa.html" 12 13# ShodanHQ results as at 2011-09-16 # 14# 4 for EnterpriseController 15# 2 for GSE EnterpriseController 16 17# Google results as at 2011-09-16 # 18# 19 for inurl:"EnterpriseController" -code 19 20 21 22# Matches # 23matches [ 24 25{ :text=>'<font face=arial,sans-serif size=-1>If you are an end user looking for a Google search service on your network, please ask your system administrator for the URL of the search service.<p>' }, 26 27# HTTP Server Header 28{ :certainty=>75, :search=>"headers[server]", :regexp=>/^GSE$/ }, 29 30# Location Header 31{ :certainty=>75, :search=>"headers[location]", :regexp=>/^\/EnterpriseController/ }, 32 33# About Google Search Appliance 34{ :text=>'<tr id="TopBar"><td id="TopBarName">About Google Search Appliance</td></tr></table></td></tr></table>' }, 35 36# Welcome to the Google Search Appliance! 37{ :text=>'<tr id="TopBar"><td id="TopBarName">Welcome to the Google Search Appliance!</td></tr></table></td></tr></table>' }, 38 39# Welcome to the Google Mini! 40{ :text=>'<tr id="TopBar"> <td id="TopBarName"> Welcome to the Google Mini! </td> </tr> </table>' }, 41 42# Version Detection # /EnterpriseController?actionType=about 43{ :version=>/<\/font>[\s]+<br><br>[\s]+<font face="arial,sans-serif">System Version:[\s]+([^\s]+)[\s]+<\/font>[\s]+<br><br>[\s]+<font face="arial,sans-serif">Appliance ID:/ }, 44 45] 46 47end 48 49