Re: NSE - Sitecore version detection

[Hani Benhabiles <kroosec () gmail com>]

On 09/03/2012 10:56 PM, Jesper Kückelhahn wrote:
> Hi,
>
> I'm a happy nmap user and really appreciate all the hard work that is
> put into this nice piece of software.
>
> As I'd like to give a little back to the community, I thought I'd start
> by writing some scripts for the NSE. I've attached the script here, as I
> haven't found any other place for this. Is this the right place for such
> submissions ?
>
> The attached script extracts Sitecore (CMS) version. Output example:
>
> 80/tcp open  http
> | http-sitecore-version:
> |_  6.4.1 (rev. 110621)
>
> Any comments and improvement suggestions are very welcome.
>
> Sorry if this gets double posted, I never used a mailing list before.
>
>
>
> - Jesper
>
>
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://seclists.org/nmap-dev/
Hi Jesper,

Your wish to give back to the community is very appreciated. However, 
for a task such as fingerprinting a web application, you may want to 
take a look at http-enum scripts (and nselib/data/http-fingerprints.lua 
file) which is used specifically for regrouping fingerprints for 
differents CMS and web applications instead of having a script for each 
CMS/app. It would be better suited to add the fingerprints there.

Cheers,
Hani.

--
Hani Benhabiles

Twitter: https://twitter.com/#!/kroosec
Blog: http://kroosec.blogspot.com

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/