Issue 5 in webapplicationfingerprinter: Product identifying problem

0 views
Skip to first unread message

webapplicatio...@googlecode.com

unread,
Feb 4, 2010, 10:13:59 AM2/4/10
to webapplicatio...@googlegroups.com
Status: New
Owner: ----
Labels: Type-Defect Priority-Medium

New issue 5 by he...@nerv.fi: Product identifying problem
http://code.google.com/p/webapplicationfingerprinter/issues/detail?id=5

What steps will reproduce the problem?
1. ./wafp.rb http://bemasc.net/wordpress/
2. ./wafp.rb -p 'wordpress' http://bemasc.net/wordpress/

What is the expected output? What do you see instead?

This is what i see:

fgeek@shell:~/wafp-0.01-26c3$ ./wafp.rb http://bemasc.net/wordpress/
Collecting and fetching the files we need to identify the product ...
...........................................................................
...........................................................................
...........................................................................
...........................................................................
...........................................................................
...........................................................................
...........................................................................
...........................................................................
..............................................................
WARNING: The auto product identification was not able to identify the
product on the WARNING: targeted site. You can make use of the --any
option or guess the product WARNING: yourself and add -p paramater.

This is what should happen automatically without inserting p -flag:

fgeek@shell:~/wafp-0.01-26c3$ ./wafp.rb -p 'wordpress'
http://bemasc.net/wordpress/
Collecting the files we need to fetch ...
Fetching needed files (#833), calculating checksums and storing the results
to the database:
...........................................................................
...........................................................................
...........................................................................
...........................................................................
...........................................................................
...........................................................................
...........................................................................
...........................................................................
...........................................................................
...........................................................................
...........................................................................
........
Checking gathered/stored checksums (#833) against the selected product
(wordpress) versions (#130) checksums:
...........................................................................
.......................................................

found the following matches (limited to 10):
+-------------------------------------------------------------+
wordpress-2.1-RC1 0 / 237 (0.00%)
wordpress-2.7 0 / 346 (0.00%)
wordpress-2.0.10-RC2 0 / 176 (0.00%)
wordpress-2.1.1 0 / 234 (0.00%)
wordpress-2.7.1-beta1 0 / 346 (0.00%)
wordpress-2.6-beta3 0 / 308 (0.00%)
wordpress-2.0.11 0 / 176 (0.00%)
wordpress-2.1-RC2 0 / 233 (0.00%)
wordpress-2.0.10-RC3 0 / 176 (0.00%)
wordpress-2.1.2 0 / 234 (0.00%)
+-------------------------------------------------------------+
WAFP 0.01-26c3 - - - - - - - - - http://mytty.org/wafp/

What version of the product are you using? On what operating system?
- wafp-0.01-26c3
- GNU/Linux Debian 5.0.4 (stable)

Please provide any additional information below.

I also tested without /wordpress/-part. This is the first site, which
doesn't work without p -flag.

--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

webapplicatio...@googlecode.com

unread,
Feb 4, 2010, 10:19:21 AM2/4/10
to webapplicatio...@googlegroups.com
Updates:
Status: Accepted
Owner: richard.sammet
Labels: -Priority-Medium Priority-High

Comment #1 on issue 5 by richard.sammet: Product identifying problem
http://code.google.com/p/webapplicationfingerprinter/issues/detail?id=5

Hi Henri,

thanks for submitting this bug! Have you tried the wafp.rb from the TRUNK
also?

http://webapplicationfingerprinter.googlecode.com/svn/trunk/wafp.rb

please download this file and replace the one from version 0.01-26c3.

And I would kindly ask you to came back and report if that works for you or
not.


Thanks and greetings,
Richard

webapplicatio...@googlecode.com

unread,
Feb 6, 2010, 10:24:53 AM2/6/10
to webapplicatio...@googlegroups.com

Comment #2 on issue 5 by he...@nerv.fi: Product identifying problem
http://code.google.com/p/webapplicationfingerprinter/issues/detail?id=5

This is what I get with the SVN-version:

fgeek@foo:~/webapplicationfingerprinter-read-only$ ./wafp.rb
http://bemasc.net/
ERROR: ./wafp.rb is already running!
ERROR: If it is not, you can remove the PID file (/tmp/wafp.rb.pid) by hand.
ERROR: PLEASE DO NOT START WAFP MULTIPLE TIMES WITH THE SAME DB ON THE SAME
MACHINE!
fgeek@foo:~/webapplicationfingerprinter-read-only$ rm /tmp/wafp.rb.pid
fgeek@foo:~/webapplicationfingerprinter-read-only$ ./wafp.rb
http://bemasc.net/


Collecting and fetching the files we need to identify the product ...
.....................................................................................
.....................................................................................
.....................................................................................
.....................................................................................
.....................................................................................
..........

WARNING: request for "/install/schemas/index.htm" timed out for 3 times!
WARNING: an error occoured while generating the md5sum of path =
/install/schemas/index.htm!
../wafp.rb:561:in `check': undefined method `[]' for nil:NilClass
(NoMethodError)
from ./wafp.rb:560:in `each_index'
from ./wafp.rb:560:in `check'
from ./wafp.rb:333:in `identify_product'
from ./wafp.rb:330:in `each'
from ./wafp.rb:330:in `identify_product'
from ./wafp.rb:814:in `main'
from ./wafp.rb:865

webapplicatio...@googlecode.com

unread,
Feb 6, 2010, 10:28:54 AM2/6/10
to webapplicatio...@googlegroups.com

Comment #3 on issue 5 by he...@nerv.fi: Product identifying problem
http://code.google.com/p/webapplicationfingerprinter/issues/detail?id=5

I keep getting this error with the SVN-version:

fgeek@foo:~/svn-wafp$ ./wafp.rb http://bemasc.net/

webapplicatio...@googlecode.com

unread,
Feb 6, 2010, 10:53:22 AM2/6/10
to webapplicatio...@googlegroups.com

Comment #4 on issue 5 by richard.sammet: Product identifying problem
http://code.google.com/p/webapplicationfingerprinter/issues/detail?id=5

Hi Henri,

are you sure that you are using the wafp version from the TRUNK??? what is
the md5sum
of your local file?

$ md5sum wafp.rb
b4a50cdb33f9209a43b1f8090b761cde wafp.rb

I just tried what you did with that latest version from the svn trunk:

$ ./wafp.rb http://bemasc.net/wordpress/
Collecting and fetching the files we need to identify the product ...
....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
Identified Product: wordpress (140.00 %)
Collecting the files we need to fetch ...
Fetching needed files (#833), calculating checksums and storing the results
to the
database:
.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
Checking gathered/stored checksums (#833) against the selected product
(wordpress)
versions (#130) checksums:
..................................................................................................................................

found the following matches (limited to 10):
+-------------------------------------------------------------+
wordpress-2.9 471 / 473 (99.58%)
wordpress-2.9.1-beta1 469 / 473 (99.15%)
wordpress-2.9-RC1 461 / 473 (97.46%)
wordpress-2.9-beta-2 444 / 473 (93.87%)
wordpress-2.9-beta-1 424 / 473 (89.64%)
wordpress-2.8.6-beta1 359 / 450 (79.78%)
wordpress-2.8.6 359 / 450 (79.78%)
wordpress-2.8.4 358 / 450 (79.56%)
wordpress-2.8.5 358 / 450 (79.56%)
wordpress-2.8.3 358 / 450 (79.56%)
+-------------------------------------------------------------+
WAFP 0.01-26c3 - - - - - - - - - http://mytty.org/wafp/


what is your ruby version?


greetings,
richard

webapplicatio...@googlecode.com

unread,
Feb 6, 2010, 12:07:33 PM2/6/10
to webapplicatio...@googlegroups.com

Comment #5 on issue 5 by he...@nerv.fi: Product identifying problem
http://code.google.com/p/webapplicationfingerprinter/issues/detail?id=5

SVN-version seems to work if the URL is <http://bemasc.net/wordpress/> and
doesn't
work when using <http://bemasc.net/>. I beleive we can close this one.

webapplicatio...@googlecode.com

unread,
Feb 6, 2010, 12:42:14 PM2/6/10
to webapplicatio...@googlegroups.com
Updates:
Status: Fixed

Comment #6 on issue 5 by richard.sammet: Product identifying problem
http://code.google.com/p/webapplicationfingerprinter/issues/detail?id=5

Hi Henri,

the "problem" that wafp is not working when running it against
<http://bemasc.net/>
is, that it just don't know where the webapp (wordpress) is located. In
this case the
new branch I am working on might fix it. Because <http://bemasc.net/>
perfoms a 302
location redirect to <http://bemasc.net/wordpress/>.

But this change is by far not completed...

For now I will close this issue...

Thanks for reporting it...
Richard

Reply all
Reply to author
Forward
0 new messages