a jak by jsi si tu detekci predstavoval? bez pristupu na server a zdrojovych kodu aplikace, pripadne bez pristupu do databaze "nejsi" schopny jen tak zjistit verzi phpBB fora.
Metoda co ti ukazal .cCuMiNn. je v podstate jedine mozne reseni tveho dotazu.
Muzes si nainstalovat vsechny verze phpBB a porovnavat, jak se meni hodnoty cookies, struktura HTML, CSS styly, javascript knihovny, existence logo_phpBB.gif, pripadne copyright v paticce, nebo prave docs/CHANGELOG.html a jeho checksum.
Jednotlive info jak automaticky detekovat "zname" redakcni systemy muzes najit na webu OWASPU v casti Fingerprint Web Application :
[link]
- - -
Az budes vedet co delas a mit predstavu, jake jsou bezpecnostni zmeny v ruznych verzich, teprve pak si muzes hrat s exploity. Detekci si muzes napsat sam, ve vysledku to vypada nejak takto:
Starting fingerprint for version of phpbb at forum.somesite.com/forum
Hit forum.somesite.com/forum/docs/CHANGELOG.htm l
Possible versions based on result: 3.0.7-PL1
Hit forum.somesite.com/forum/docs/INSTALL.html
Possible versions based on result: 3.0.7-PL1
Hit forum.somesite.com/forum/docs/README.html
Possible versions based on result: 3.0.2, 3.0.3, 3.0.4, 3.0.4-RC1, 3.0.5, 3.0.5-RC1, 3.0.6, 3.0.6-RC1, 3.0.6-RC2, 3.0.6-RC3, 3.0.6-RC4, 3.0.7, 3.0.7-PL1
Hit forum.somesite.com/forum/install/schemas/ms sql_basic.sql
File produced no match. Error: Error code: 404 (Not Found)
Hit forum.somesite.com/forum/install/schemas/ms _access_primer.zip
File produced no match. Error: Error code: 404 (Not Found)
Hit forum.somesite.com/forum/install/schemas/my sql_basic.sql
File produced no match. Error: Error code: 404 (Not Found)
Hit forum.somesite.com/forum/install/schemas/po stgres_basic.sql
File produced no match. Error: Error code: 404 (Not Found)
Hit forum.somesite.com/forum/install/schemas/ms sql_schema.sql
File produced no match. Error: Error code: 404 (Not Found)
Hit forum.somesite.com/forum/install/schemas/po stgres_schema.sql
File produced no match. Error: Error code: 404 (Not Found)
Hit forum.somesite.com/forum/install/schemas/sc hema_data.sql
File produced no match. Error: Error code: 404 (Not Found)
Hit forum.somesite.com/forum/docs/FAQ.html
Possible versions based on result: 3.0.5, 3.0.5-RC1, 3.0.6, 3.0.6-RC1, 3.0.6-RC2, 3.0.6-RC3, 3.0.6-RC4, 3.0.7, 3.0.7-PL1
Hit forum.somesite.com/forum/docs/AUTHORS
Possible versions based on result: 3.0.7, 3.0.7-PL1
Hit forum.somesite.com/forum/contrib/README.htm l
File produced no match. Error: Error code: 404 (Not Found)
Hit forum.somesite.com/forum/templates/subSilve r/admin/board_config_body.tpl
File produced no match. Error: Error code: 404 (Not Found)
Hit forum.somesite.com/forum/install/schemas/or acle_schema.sql
File produced no match. Error: Error code: 404 (Not Found)
Fingerprinting resulted in:
3.0.7-PL1
Best Guess: 3.0.7-PL1 (odpovědět) |