BlindElephant Web Application Fingerprinter

[clshack]

Utile per capire di che versione di cms si tratta ;)

un esempio di output:

Code Select Expand


backbox@backbox:~/blindelephant/src/blindelephant$ python BlindElephant.py http://www.clshack.it wordpress -w


Code Select Expand


Loaded /home/backbox/blindelephant/src/blindelephant/dbs/wordpress.pkl with 167 versions, 599 differentiating paths, and 239 version groups.
Starting BlindElephant fingerprint for version of wordpress at http://www.clshack.it

Hit http://www.clshack.it/readme.html
File produced no match. Error: Retrieved file doesn't match known fingerprint. 47f2439f171f0abaa9094a9179bdb684

Hit http://www.clshack.it/wp-includes/js/tinymce/tiny_mce.js
Possible versions based on result: 2.9, 2.9.1, 2.9.1-beta1, 2.9.1-beta1-IIS, 2.9.1-IIS, 2.9.1-RC1, 2.9.1-RC1-IIS, 2.9.2, 2.9.2-IIS, 2.9-beta-1, 2.9-beta-1-IIS, 2.9-beta-2, 2.9-beta-2-IIS, 2.9-IIS, 2.9-RC1, 2.9-RC1-IIS, 3.0, 3.0.1, 3.0.1-IIS, 3.0-beta1, 3.0-beta1-IIS, 3.0-beta2, 3.0-beta2-IIS, 3.0-IIS, 3.0-RC1, 3.0-RC1-IIS, 3.0-RC2, 3.0-RC2-IIS, 3.0-RC3, 3.0-RC3-IIS

Hit http://www.clshack.it/wp-includes/js/autosave.js
Possible versions based on result: 3.0, 3.0.1, 3.0.1-IIS, 3.0-IIS, 3.0-RC1, 3.0-RC1-IIS, 3.0-RC2, 3.0-RC2-IIS, 3.0-RC3, 3.0-RC3-IIS

Hit http://www.clshack.it/wp-includes/js/swfupload/handlers.js
Possible versions based on result: 3.0, 3.0.1, 3.0.1-IIS, 3.0-IIS, 3.0-RC1, 3.0-RC1-IIS, 3.0-RC2, 3.0-RC2-IIS, 3.0-RC3, 3.0-RC3-IIS

Hit http://www.clshack.it/wp-includes/js/tinymce/themes/advanced/about.htm
Possible versions based on result: 2.9, 2.9.1, 2.9.1-beta1, 2.9.1-beta1-IIS, 2.9.1-IIS, 2.9.1-RC1, 2.9.1-RC1-IIS, 2.9.2, 2.9.2-IIS, 2.9-beta-1, 2.9-beta-1-IIS, 2.9-beta-2, 2.9-beta-2-IIS, 2.9-IIS, 2.9-RC1, 2.9-RC1-IIS, 3.0, 3.0.1, 3.0.1-IIS, 3.0-beta1, 3.0-beta1-IIS, 3.0-beta2, 3.0-beta2-IIS, 3.0-IIS, 3.0-RC1, 3.0-RC1-IIS, 3.0-RC2, 3.0-RC2-IIS, 3.0-RC3, 3.0-RC3-IIS

Hit http://www.clshack.it/wp-includes/js/tinymce/themes/advanced/link.htm
Possible versions based on result: 2.9, 2.9.1, 2.9.1-beta1, 2.9.1-beta1-IIS, 2.9.1-IIS, 2.9.1-RC1, 2.9.1-RC1-IIS, 2.9.2, 2.9.2-IIS, 2.9-beta-1, 2.9-beta-1-IIS, 2.9-beta-2, 2.9-beta-2-IIS, 2.9-IIS, 2.9-RC1, 2.9-RC1-IIS, 3.0, 3.0.1, 3.0.1-IIS, 3.0-beta1, 3.0-beta1-IIS, 3.0-beta2, 3.0-beta2-IIS, 3.0-IIS, 3.0-RC1, 3.0-RC1-IIS, 3.0-RC2, 3.0-RC2-IIS, 3.0-RC3, 3.0-RC3-IIS

Hit http://www.clshack.it/wp-includes/js/tinymce/themes/advanced/source_editor.htm
Possible versions based on result: 2.9, 2.9.1, 2.9.1-beta1, 2.9.1-beta1-IIS, 2.9.1-IIS, 2.9.1-RC1, 2.9.1-RC1-IIS, 2.9.2, 2.9.2-IIS, 2.9-beta-1, 2.9-beta-1-IIS, 2.9-beta-2, 2.9-beta-2-IIS, 2.9-IIS, 2.9-RC1, 2.9-RC1-IIS, 3.0, 3.0.1, 3.0.1-IIS, 3.0-beta1, 3.0-beta1-IIS, 3.0-beta2, 3.0-beta2-IIS, 3.0-IIS, 3.0-RC1, 3.0-RC1-IIS, 3.0-RC2, 3.0-RC2-IIS, 3.0-RC3, 3.0-RC3-IIS

Hit http://www.clshack.it/wp-includes/js/tinymce/plugins/inlinepopups/editor_plugin.js
Possible versions based on result: 2.9, 2.9.1, 2.9.1-beta1, 2.9.1-beta1-IIS, 2.9.1-IIS, 2.9.1-RC1, 2.9.1-RC1-IIS, 2.9.2, 2.9.2-IIS, 2.9-beta-1, 2.9-beta-1-IIS, 2.9-beta-2, 2.9-beta-2-IIS, 2.9-IIS, 2.9-RC1, 2.9-RC1-IIS, 3.0, 3.0.1, 3.0.1-IIS, 3.0-beta1, 3.0-beta1-IIS, 3.0-beta2, 3.0-beta2-IIS, 3.0-IIS, 3.0-RC1, 3.0-RC1-IIS, 3.0-RC2, 3.0-RC2-IIS, 3.0-RC3, 3.0-RC3-IIS

Hit http://www.clshack.it/wp-includes/js/tinymce/themes/advanced/image.htm
Possible versions based on result: 2.9, 2.9.1, 2.9.1-beta1, 2.9.1-beta1-IIS, 2.9.1-IIS, 2.9.1-RC1, 2.9.1-RC1-IIS, 2.9.2, 2.9.2-IIS, 2.9-beta-1, 2.9-beta-1-IIS, 2.9-beta-2, 2.9-beta-2-IIS, 2.9-IIS, 2.9-RC1, 2.9-RC1-IIS, 3.0, 3.0.1, 3.0.1-IIS, 3.0-beta1, 3.0-beta1-IIS, 3.0-beta2, 3.0-beta2-IIS, 3.0-IIS, 3.0-RC1, 3.0-RC1-IIS, 3.0-RC2, 3.0-RC2-IIS, 3.0-RC3, 3.0-RC3-IIS

Hit http://www.clshack.it/wp-includes/js/tinymce/themes/advanced/color_picker.htm
Possible versions based on result: 2.9, 2.9.1, 2.9.1-beta1, 2.9.1-beta1-IIS, 2.9.1-IIS, 2.9.1-RC1, 2.9.1-RC1-IIS, 2.9.2, 2.9.2-IIS, 2.9-beta-1, 2.9-beta-1-IIS, 2.9-beta-2, 2.9-beta-2-IIS, 2.9-IIS, 2.9-RC1, 2.9-RC1-IIS, 3.0, 3.0.1, 3.0.1-IIS, 3.0-beta1, 3.0-beta1-IIS, 3.0-beta2, 3.0-beta2-IIS, 3.0-IIS, 3.0-RC1, 3.0-RC1-IIS, 3.0-RC2, 3.0-RC2-IIS, 3.0-RC3, 3.0-RC3-IIS

Hit http://www.clshack.it/wp-includes/js/tinymce/themes/advanced/anchor.htm
Possible versions based on result: 2.9, 2.9.1, 2.9.1-beta1, 2.9.1-beta1-IIS, 2.9.1-IIS, 2.9.1-RC1, 2.9.1-RC1-IIS, 2.9.2, 2.9.2-IIS, 2.9-beta-1, 2.9-beta-1-IIS, 2.9-beta-2, 2.9-beta-2-IIS, 2.9-IIS, 2.9-RC1, 2.9-RC1-IIS, 3.0, 3.0.1, 3.0.1-IIS, 3.0-beta1, 3.0-beta1-IIS, 3.0-beta2, 3.0-beta2-IIS, 3.0-IIS, 3.0-RC1, 3.0-RC1-IIS, 3.0-RC2, 3.0-RC2-IIS, 3.0-RC3, 3.0-RC3-IIS

Hit http://www.clshack.it/wp-includes/js/tinymce/themes/advanced/charmap.htm
Possible versions based on result: 2.9, 2.9.1, 2.9.1-beta1, 2.9.1-beta1-IIS, 2.9.1-IIS, 2.9.1-RC1, 2.9.1-RC1-IIS, 2.9.2, 2.9.2-IIS, 2.9-beta-1, 2.9-beta-1-IIS, 2.9-beta-2, 2.9-beta-2-IIS, 2.9-IIS, 2.9-RC1, 2.9-RC1-IIS, 3.0, 3.0.1, 3.0.1-IIS, 3.0-beta1, 3.0-beta1-IIS, 3.0-beta2, 3.0-beta2-IIS, 3.0-IIS, 3.0-RC1, 3.0-RC1-IIS, 3.0-RC2, 3.0-RC2-IIS, 3.0-RC3, 3.0-RC3-IIS

Hit http://www.clshack.it/wp-content/themes/default/style.css
File produced no match. Error: Retrieved file doesn't match known fingerprint. 7699a34254b6a040aa300d50d7b7d359

Hit http://www.clshack.it/wp-includes/js/tinymce/themes/advanced/editor_template.js
Possible versions based on result: 2.8, 2.8.1, 2.8.1-beta1, 2.8.1-beta2, 2.8.1-IIS, 2.8.1-RC1, 2.8.2, 2.8.2-IIS, 2.8.3, 2.8.3-IIS, 2.8.4, 2.8.4-IIS, 2.8.4a-IIS, 2.8.4b-IIS, 2.8.5, 2.8.5-beta1, 2.8.5-IIS, 2.8.6, 2.8.6-beta1, 2.8.6-beta1-IIS, 2.8.6-IIS, 2.8-beta1, 2.8-beta2, 2.8-IIS, 2.8-RC1, 2.9, 2.9.1, 2.9.1-beta1, 2.9.1-beta1-IIS, 2.9.1-IIS, 2.9.1-RC1, 2.9.1-RC1-IIS, 2.9.2, 2.9.2-IIS, 2.9-beta-1, 2.9-beta-1-IIS, 2.9-beta-2, 2.9-beta-2-IIS, 2.9-IIS, 2.9-RC1, 2.9-RC1-IIS, 3.0, 3.0.1, 3.0.1-IIS, 3.0-beta1, 3.0-beta1-IIS, 3.0-beta2, 3.0-beta2-IIS, 3.0-IIS, 3.0-RC1, 3.0-RC1-IIS, 3.0-RC2, 3.0-RC2-IIS, 3.0-RC3, 3.0-RC3-IIS

Hit http://www.clshack.it/wp-includes/js/tinymce/plugins/wordpress/editor_plugin.js
Possible versions based on result: 2.9, 2.9.1, 2.9.1-beta1, 2.9.1-beta1-IIS, 2.9.1-IIS, 2.9.1-RC1, 2.9.1-RC1-IIS, 2.9.2, 2.9.2-IIS, 2.9-beta-2, 2.9-beta-2-IIS, 2.9-IIS, 2.9-RC1, 2.9-RC1-IIS, 3.0, 3.0.1, 3.0.1-IIS, 3.0-beta1, 3.0-beta1-IIS, 3.0-beta2, 3.0-beta2-IIS, 3.0-IIS, 3.0-RC1, 3.0-RC1-IIS, 3.0-RC2, 3.0-RC2-IIS, 3.0-RC3, 3.0-RC3-IIS

ver_list before winnowing:
3.0.1
3.0-IIS
3.0.1-IIS
3.0-RC1-IIS
3.0
3.0-RC2
3.0-RC3
3.0-RC1
3.0-RC2-IIS
3.0-RC3-IIS


for ver: 3.0.1  len winnow_paths: 0    max_paths: 15
for ver: 3.0-IIS  len winnow_paths: 3    max_paths: 15
for ver: 3.0.1-IIS  len winnow_paths: 8    max_paths: 15
for ver: 3.0-RC1-IIS  len winnow_paths: 11    max_paths: 15
for ver: 3.0  len winnow_paths: 14    max_paths: 15
Hit http://www.clshack.it/wp-content/themes/twentyten/screenshot.png
Possible versions based on result: 3.0, 3.0.1, 3.0.1-IIS, 3.0-IIS, 3.0-RC3, 3.0-RC3-IIS

winnow eliminated a version... repicking
Hit http://www.clshack.it/wp-includes/js/jquery/ui.core.js
Possible versions based on result: 3.0, 3.0.1, 3.0.1-IIS, 3.0-IIS

winnow eliminated a version... repicking
Hit http://www.clshack.it/wp-content/themes/twentyten/languages/twentyten.pot
Possible versions based on result: 3.0.1, 3.0.1-IIS

winnow eliminated a version... repicking
Hit http://www.clshack.it/wp-content/themes/twentyten/style.css
Possible versions based on result: 3.0.1, 3.0.1-IIS

Hit http://www.clshack.it/wp-content/themes/twentyten/editor-style.css
Possible versions based on result: 3.0.1, 3.0.1-IIS

Hit http://www.clshack.it/wp-content/themes/twentyten/languages/twentyten.pot
Possible versions based on result: 3.0.1, 3.0.1-IIS

Hit http://www.clshack.it/wp-content/themes/twentyten/screenshot.png
Possible versions based on result: 3.0, 3.0.1, 3.0.1-IIS, 3.0-IIS, 3.0-RC3, 3.0-RC3-IIS

Hit http://www.clshack.it/wp-includes/js/jquery/ui.core.js
Possible versions based on result: 3.0, 3.0.1, 3.0.1-IIS, 3.0-IIS

Hit http://www.clshack.it/wp-content/themes/twentyten/screenshot.png
Possible versions based on result: 3.0, 3.0.1, 3.0.1-IIS, 3.0-IIS, 3.0-RC3, 3.0-RC3-IIS

Hit wp-includes/js/jquery/ui.core.js
Possible versions based on result: 3.0, 3.0.1, 3.0.1-IIS, 3.0-IIS

Hit t/wp-content/themes/twentyten/languages/twentyten.pot
Possible versions based on result: 3.0.1, 3.0.1-IIS

Hit wp-content/themes/twentyten/languages/twentyten.pot
Possible versions based on result: 3.0.1, 3.0.1-IIS

Hit /wp-content/themes/twentyten/editor-style.css
Possible versions based on result: 3.0.1, 3.0.1-IIS

Hit wp-content/themes/twentyten/screenshot.png
Possible versions based on result: 3.0, 3.0.1, 3.0.1-IIS, 3.0-IIS, 3.0-RC3, 3.0-RC3-IIS

Hit wp-content/themes/twentyten/languages/twentyten.pot
Possible versions based on result: 3.0.1, 3.0.1-IIS


Fingerprinting resulted in:
3.0.1
3.0.1-IIS


Best Guess: 3.0.1



Potrebbe essere utile ;)

Sito ufficiale:
http://blindelephant.sourceforge.net/

[raffaele]

si, molto interessante ;)