1##
2# This file is part of WhatWeb and may be subject to
3# redistribution and commercial restrictions. Please see the WhatWeb
4# web site for more information on licensing and terms of use.
5# http://www.morningstarsecurity.com/research/whatweb
6##
7Plugin.define "ionCube-Loader" do
8author "Brendan Coles <bcoles@gmail.com>" # 2011-06-05
9version "0.1"
10description "ionCube Loader handles the reading and execution of ionCube encoded PHP files at run time."
11website "http://www.ioncube.com/loaders.php"
12# More info: http://en.wikipedia.org/wiki/IonCube
13
14# Google results as at 2011-06-05 #
15# 147 for inurl:"loader-wizard.php" ext:php intitle:"ionCube Loader Wizard"
16
17# Dorks #
18dorks [
19'inurl:"loader-wizard.php" ext:php intitle:"ionCube Loader Wizard"'
20]
21
22
23
24# Matches #
25matches [
26
27# GHDB # filename and title
28{ :certainty=>75, :ghdb=>'inurl:"loader-wizard.php" filetype:php intitle:"ionCube Loader Wizard"' },
29
30# Logo HTML
31{ :text=>'<img src="?page=logo" alt="ionCube logo">' },
32
33# Updated version link
34{ :text=>'<h2>ionCube Loader Wizard</h2><p class="alert">An updated version of this Wizard script is available <a href="http://loaders.ioncube.com/">here</a>.</p>' },
35
36# Version Detection # Already installed message
37{ :version=>/<p>The ionCube Loader ([^\s]+) is already installed but it is an old version\. It is recommended that the Loader be updated to the latest version/ },
38{ :version=>/<p>The ionCube Loader ([^\s]+) is already installed and encoded files should run without problems.<\/p>/ },
39
40# Wizard Module # Version Detection # Copyright footer
41{ :module=>/<div id="footer">Copyright ionCube Ltd\. 2002-20[\d]{2} \| (Loader Wizard version [^\s]+) / },
42
43# div id="loading"
44{ :text=>'<div id="loading"><script type="text/javascript">document.write(\'<p>Initialising<br>ionCube Loader Wizard<br><span id="status"></span></p>\');</script>' },
45
46]
47
48end
49
50