WAFP (Web Application Finger Printer) ist ein Open Source Tool, das Dateien von einem definierten Web-Server downloaded und deren Checksumme gegen eine mitgelieferte SQLite3 Datenbank vergleicht. Auf diese Weise kann man mittlerweile über 600 verschiedene detaillierte Versionsnummern von Web-Applikationen herausfinden.
Beispiel:
r-o-f:~/.../wafp.rb http://www.root-on-fire.com
Collecting and fetching the files we need to identify the product ...
........................................................................................................................................................
Identified Product: wordpress (120.00 %)
Collecting the files we need to fetch ...
Fetching needed files (#833), calculating checksums and storing the results to the database:
..........................................................................................................................................................
Checking gathered/stored checksums (#833) against the selected product (wordpress) versions (#130) checksums:
....................................................................................................................................
found the following matches (limited to 10):
+-------------------------------------------------------------+
wordpress-2.8.6-beta1 446 / 450 (99.11%)
wordpress-2.8.6 446 / 450 (99.11%)
wordpress-2.8.4 444 / 450 (98.67%)
wordpress-2.8.5 444 / 450 (98.67%)
wordpress-2.8.5-beta1 444 / 450 (98.67%)
wordpress-2.8.3 444 / 450 (98.67%)
wordpress-2.8.2 443 / 450 (98.44%)
wordpress-2.8.1-RC1 443 / 450 (98.44%)
wordpress-2.8.1 443 / 450 (98.44%)
wordpress-2.8.1-beta2 874 / 900 (97.11%)
+-------------------------------------------------------------+
WAFP 0.01-26c3 - - - - - - - - - http://mytty.org/wafp/
Collecting and fetching the files we need to identify the product ...
........................................................................................................................................................
Identified Product: wordpress (120.00 %)
Collecting the files we need to fetch ...
Fetching needed files (#833), calculating checksums and storing the results to the database:
..........................................................................................................................................................
Checking gathered/stored checksums (#833) against the selected product (wordpress) versions (#130) checksums:
....................................................................................................................................
found the following matches (limited to 10):
+-------------------------------------------------------------+
wordpress-2.8.6-beta1 446 / 450 (99.11%)
wordpress-2.8.6 446 / 450 (99.11%)
wordpress-2.8.4 444 / 450 (98.67%)
wordpress-2.8.5 444 / 450 (98.67%)
wordpress-2.8.5-beta1 444 / 450 (98.67%)
wordpress-2.8.3 444 / 450 (98.67%)
wordpress-2.8.2 443 / 450 (98.44%)
wordpress-2.8.1-RC1 443 / 450 (98.44%)
wordpress-2.8.1 443 / 450 (98.44%)
wordpress-2.8.1-beta2 874 / 900 (97.11%)
+-------------------------------------------------------------+
WAFP 0.01-26c3 - - - - - - - - - http://mytty.org/wafp/
Homepage: http://mytty.org/wafp/
Präsentation von Richard Sammet auf dem 26C3: hier
