BlindElephant Web Application Fingerprinter

Time 2020-07-01 07:04:32

Web Name: BlindElephant Web Application Fingerprinter

WebSite: http://blindelephant.sourceforge.net

ID:15679

Keywords:

Web,BlindElephant,Fingerprinter,

Description:

Installation:Installation is only required if you plan to use BlindElephant as a library. Make sure that your python installation has distutils, and then do:cd blindelephant/srcsudo python setup.py install(Windows users, omit sudo)Example Usage (Command Line):setup.py will have placed BlindElephant.py in your /usr/local/bin dir. $ BlindElephant.py Usage: BlindElephant.py [options] url appNameOptions: -h, --help show this help message and exit -p PLUGINNAME, --pluginName=PLUGINNAME Fingerprint version of plugin (should apply to web app given in appname) -s, --skip Skip fingerprinting webpp, just fingerprint plugin -n NUMPROBES, --numProbes=NUMPROBES Number of files to fetch (more may increase accuracy). Default: 15 -w, --winnow If more than one version are returned, use winnowing to attempt to narrow it down (up to numProbes additional requests). -l, --list List supported webapps and pluginsUse "guess" as app or plugin name to attempt to attempt todiscover which supported apps/plugins are installed.$ python BlindElephant.py http://laws.qualys.com movabletypeLoaded /usr/local/lib/python2.6/dist-packages/blindelephant/dbs/movabletype.pkl with 96 versions, 2229 differentiating paths, and 209 version groups.Starting BlindElephant fingerprint for version of movabletype at http://laws.qualys.com Fingerprinting resulted in:4.22-en4.22-en-COM4.23-en4.23-en-COMBest Guess: 4.23-en-COMExample Usage (Library):$python>>> from blindelephant.Fingerprinters import WebAppFingerprinter>>> #Construct the fingerprinter>>> #use default logger pointing to console; can pass "logger" arg to change output>>> fp = WebAppFingerprinter("http://laws.qualys.com", "movabletype")>>> #do the fingerprint; data becomes available as instance vars>>> fp.fingerprint()(same as above)>>> print "Possible versions:", fp.ver_listPossible versions: [LooseVersion ('4.22-en'), LooseVersion ('4.22-en-COM'), LooseVersion ('4.23-en'), LooseVersion ('4.23-en-COM')]>>> print "Max possible version: ", fp.best_guessMax possible version: 4.23-en-COMThe Static File Fingerprinting Approach in One PictureOther Projects Like This Sucuri Static File Fingerprinting tool: Initial web-based proof of concept for the static file approach WAFP: The Web Application FingerPrinter: Ruby implementation of the static file concept (fetches all possible static files) Morningstar Security WhatWeb: Hybrid approach supporting a huge variety of remote technologies. Primarily regex based, but uses static files to differentiate versions of some apps.ContactAuthor: Patrick Thomas pthomas .at. qualys /dot/ com pst .at. coffeetocode /dot/ net

TAGS:Web BlindElephant Fingerprinter 

<<< Thank you for your visit >>>

Hot Websites