1##
2# This file is part of WhatWeb and may be subject to
3# redistribution and commercial restrictions. Please see the WhatWeb
4# web site for more information on licensing and terms of use.
5# http://www.morningstarsecurity.com/research/whatweb
6##
7Plugin.define "Google-Search-Appliance" do
8author "Brendan Coles <bcoles@gmail.com>" # 2011-09-16
9version "0.1"
10description "The Google Search Appliance (GSA) is a piece of hardware that corporations install on-premise so that employees can search enterprise data."
11website "http://www.google.com/enterprise/search/gsa.html"
12
13# ShodanHQ results as at 2011-09-16 #
14# 4 for EnterpriseController
15# 2 for GSE EnterpriseController
16
17# Google results as at 2011-09-16 #
18# 19 for inurl:"EnterpriseController" -code
19
20
21
22# Matches #
23matches [
24
25{ :text=>'<font face=arial,sans-serif size=-1>If you are an end user looking for a Google search service on your network, please ask your system administrator for the URL of the search service.<p>' },
26
27# HTTP Server Header
28{ :certainty=>75, :search=>"headers[server]", :regexp=>/^GSE$/ },
29
30# Location Header
31{ :certainty=>75, :search=>"headers[location]", :regexp=>/^\/EnterpriseController/ },
32
33# About Google Search Appliance
34{ :text=>'<tr id="TopBar"><td id="TopBarName">About Google Search Appliance</td></tr></table></td></tr></table>' },
35
36# Welcome to the Google Search Appliance!
37{ :text=>'<tr id="TopBar"><td id="TopBarName">Welcome to the Google Search Appliance!</td></tr></table></td></tr></table>' },
38
39# Welcome to the Google Mini!
40{ :text=>'<tr id="TopBar"> <td id="TopBarName">  Welcome to the Google Mini!  </td> </tr> </table>' },
41
42# Version Detection # /EnterpriseController?actionType=about
43{ :version=>/<\/font>[\s]+<br><br>[\s]+<font face="arial,sans-serif">System Version:[\s]+([^\s]+)[\s]+<\/font>[\s]+<br><br>[\s]+<font face="arial,sans-serif">Appliance ID:/ },
44
45]
46
47end
48
49