nikto_msgs.plugin

一个用perl写的功能强大的cgi漏洞检测程序

#VERSION,1.04
#LASTMOD,03.26.2003  

# versions are loaded from the "server_msgs.db" file, which should be in the plugins directory

# this plugin checks the server version to see if there are any version specific items in the4 server_msgs.db
# this differs from nikto_outdated because that is ONLY checking to see if it is an old version, whereas this
# checks to see if the versions match

# This software is distributed under the terms of the GPL, which should have been received
# with a copy of this software in the "LICENSE.txt" file.

sub nikto_msgs
{
 my %VERSIONS;
 %VERSIONS=load_versions("$NIKTO{plugindir}/server_msgs.db");

 foreach my $VER (keys %VERSIONS)
  {
   if ($TARGETS{$CURRENT_HOST_ID}{ports}{$CURRENT_PORT}{banner} =~ /($VER)/i)  { nprint("+ $1 - $VERSIONS{$VER}");  } 
  }

 return;
}

sub load_versions
{
 my %VERS;
 my $VFILE=$_[0]; 
 open(IN,"<$VFILE") || die nprint("Can't open $VFILE:$!");
 my @file=<IN>;
 close(IN);
 foreach my $line (@file)
 {
  if ($line =~ /^\#/) { next; } # comment
  if ($line =~ /\#/) { $line=~s/\#.*$//; $line=~s/\s+$//; }
  if ($line eq "") { next; }
  my @t=parse_csv($line);
  $VERS{$t[0]}=$t[1];
  nprint("Loaded:$t[0] -- $t[1]","d");
 }
return %VERS;

}

1;