@@ -29,28 +29,6 @@ def initialize
29
29
)
30
30
end
31
31
32
-
33
- #
34
- # Checks loginbackground.jpg for Cold Fusion 10. This is a patch to be able to detect
35
- # Cold Fusion 10 correctly. We haven't been able to replace fingerprint(), because we
36
- # don't have all the MD5s for loginbackground.jpg, not to mention some versions don't
37
- # actually have it.
38
- #
39
- def cf10?
40
- res = send_request_cgi ( {
41
- 'uri' => '/CFIDE/administrator/images/loginbackground.jpg' ,
42
- 'method' => 'GET'
43
- } )
44
-
45
- # Not the response we want at all, then let's assume it's not cf10
46
- return false if not res or res . code . to_i != 200
47
-
48
- jpg_md5 = Rex ::Text . md5 ( res . body )
49
- return true if jpg_md5 == 'a4c81b7a6289b2fc9b36848fa0cae83c'
50
-
51
- false
52
- end
53
-
54
32
def fingerprint ( response )
55
33
56
34
if ( response . headers . has_key? ( 'Server' ) )
@@ -75,16 +53,15 @@ def fingerprint(response)
75
53
out = nil
76
54
77
55
78
-
79
56
if ( response . body =~ />\s *Version:\s *(.*)<\/ strong\> <br\s \/ / )
80
57
v = $1
81
58
out = ( v =~ /^6/ ) ? "Adobe ColdFusion MX6 #{ v } " : "Adobe ColdFusion MX7 #{ v } "
82
59
elsif ( response . body =~ /<meta name=\" Author\" content=\" Copyright 1995\- 2012 Adobe/ and response . body =~ /Administrator requires a browser that supports frames/ )
83
60
out = "Adobe ColdFusion MX7"
84
61
elsif ( response . body =~ /<meta name=\" Author\" content=\" Copyright \( c\) 1995\- 2006 Adobe/ )
85
62
out = "Adobe ColdFusion 8"
86
- elsif cf10?
87
- # Must check for Cold Fusion 10 before 9 to avoid FP
63
+ elsif ( response . body =~ /<meta name= \" Author \" content= \" Copyright \( c \) 1995 \- 2010 Adobe/ and
64
+ response . body =~ /1997 \- 2012 Adobe Systems Incorporated and its licensors/ )
88
65
out = "Adobe ColdFusion 10"
89
66
elsif ( response . body =~ /<meta name=\" Author\" content=\" Copyright \( c\) 1995\- 2010 Adobe/ or
90
67
response . body =~ /<meta name=\" Author\" content=\" Copyright \( c\) 1995\- 2009 Adobe Systems\, Inc\. All rights reserved/ )
0 commit comments