1## 2# This file is part of WhatWeb and may be subject to 3# redistribution and commercial restrictions. Please see the WhatWeb 4# web site for more information on licensing and terms of use. 5# http://www.morningstarsecurity.com/research/whatweb 6## 7Plugin.define "ionCube-Loader" do 8author "Brendan Coles <bcoles@gmail.com>" # 2011-06-05 9version "0.1" 10description "ionCube Loader handles the reading and execution of ionCube encoded PHP files at run time." 11website "http://www.ioncube.com/loaders.php" 12# More info: http://en.wikipedia.org/wiki/IonCube 13 14# Google results as at 2011-06-05 # 15# 147 for inurl:"loader-wizard.php" ext:php intitle:"ionCube Loader Wizard" 16 17# Dorks # 18dorks [ 19'inurl:"loader-wizard.php" ext:php intitle:"ionCube Loader Wizard"' 20] 21 22 23 24# Matches # 25matches [ 26 27# GHDB # filename and title 28{ :certainty=>75, :ghdb=>'inurl:"loader-wizard.php" filetype:php intitle:"ionCube Loader Wizard"' }, 29 30# Logo HTML 31{ :text=>'<img src="?page=logo" alt="ionCube logo">' }, 32 33# Updated version link 34{ :text=>'<h2>ionCube Loader Wizard</h2><p class="alert">An updated version of this Wizard script is available <a href="http://loaders.ioncube.com/">here</a>.</p>' }, 35 36# Version Detection # Already installed message 37{ :version=>/<p>The ionCube Loader ([^\s]+) is already installed but it is an old version\. It is recommended that the Loader be updated to the latest version/ }, 38{ :version=>/<p>The ionCube Loader ([^\s]+) is already installed and encoded files should run without problems.<\/p>/ }, 39 40# Wizard Module # Version Detection # Copyright footer 41{ :module=>/<div id="footer">Copyright ionCube Ltd\. 2002-20[\d]{2} \| (Loader Wizard version [^\s]+) / }, 42 43# div id="loading" 44{ :text=>'<div id="loading"><script type="text/javascript">document.write(\'<p>Initialising<br>ionCube Loader Wizard<br><span id="status"></span></p>\');</script>' }, 45 46] 47 48end 49 50