-
Notifications
You must be signed in to change notification settings - Fork 906
Plugins Development
bcoles edited this page Jan 26, 2011
·
4 revisions
A number of tools are provided with WhatWeb in the ./plugin-development/ directory to simplify plugin creation and testing :
- wget-alexa-top-1m (Download and extract the Alexa top one million domains in newline format)
- wget-list (Downloads each URL's html and headers into the current directory)
- find-common-stuff (Helper for plugin research - identify common tags, paths / quoted text in tags, link text)
- get-pattern (Page Pattern Generator - Feed a url - Get its tag pattern that's ready to use in your plugin)
- wikipedia-top-1000.txt (Top 1,000 domains linked from Wikipedia)
- alexa-top-100.txt (Top 100 Alexa domain
- alexa-top-1000.txt (Top 1,000 Alexa domains)
Proposed tools for WhatWeb plugin development and automation :
- nikto-2-whatweb (convert nikto db_tests to whatweb compatible plugin)
- metasploit-2-whatweb (convert metasploit web check to whatweb compatible plugin)
- wafp-2-whatweb
bcoles
- whatweb-to-metasploit
Pre-requisites : CVE arrays in WhatWeb plugins for reporting
Description : Search Metasploit for the CVE and parse the URL for exploitation.