Merge pull request #158 from shmilylty/dev

Dev

.travis.yml

@@ -54,7 +54,7 @@ jobs:
       os: windows
       language: shell
       before_install:
-        - choco install python --version 3.6.0
+        - choco install python --version 3.6.1
         - python -m pip install --upgrade pip
         - chcp.com 65001
       env:

brute.py

@@ -157,7 +157,7 @@ def gen_subdomains(expression, path):
     """
     Generate subdomains
 
-    :param  str  expression: generate subdomains's expression
+    :param  str  expression: generate subdomains expression
     :param  str  path: path of wordlist
     :return set  subdomains: list of subdomains
     """
@@ -188,7 +188,7 @@ def gen_fuzz_subdomains(expression, rule, fuzzlist):
     """
     Generate subdomains based on fuzz mode
 
-    :param  str  expression: generate subdomains's expression
+    :param  str  expression: generate subdomains expression
     :param  str  rule: regexp rule
     :param  str  fuzzlist: fuzz dictionary
     :return set  subdomains: list of subdomains
@@ -217,7 +217,7 @@ def gen_word_subdomains(expression, path):
     """
     Generate subdomains based on word mode
 
-    :param  str  expression: generate subdomains's expression
+    :param  str  expression: generate subdomains expression
     :param  str  path: path of wordlist
     :return set  subdomains: list of subdomains
     """
@@ -375,14 +375,14 @@ def check_dict():
         exit(0)
 
 
-def gen_result_infos(items, infos, subdomains, ip_times, wc_ips, wc_ttl, bk_cname):
+def gen_result_infos(items, infos, subdomains, ip_times, wc_ips, wc_ttl):
     qname = items.get('name')[:-1]  # 去除最右边的`.`点号
     reason = items.get('status')
     resolver = items.get('resolver')
     data = items.get('data')
     answers = data.get('answers')
     info = dict()
-    cname = list()
+    cnames = list()
     ips = list()
     public = list()
     times = list()
@@ -397,13 +397,14 @@ def gen_result_infos(items, infos, subdomains, ip_times, wc_ips, wc_ttl, bk_cnam
         have_a_record = True
         ttl = answer.get('ttl')
         ttls.append(ttl)
-        cname.append(answer.get('name')[:-1])  # 去除最右边的`.`点号
+        cname = answer.get('name')[:-1]
+        cnames.append(cname)  # 去除最右边的`.`点号
         ip = answer.get('data')
         ips.append(ip)
         public.append(utils.ip_is_public(ip))
         num = ip_times.get(ip)
         times.append(num)
-        isvalid, reason = is_valid_subdomain(ip, ttl, num, wc_ips, wc_ttl, cname, bk_cname)
+        isvalid, reason = is_valid_subdomain(ip, ttl, num, wc_ips, wc_ttl, cname)
         logger.log('TRACE', f'{ip} effective: {isvalid} reason: {reason}')
         is_valid_flags.append(isvalid)
     if not have_a_record:
@@ -413,7 +414,7 @@ def gen_result_infos(items, infos, subdomains, ip_times, wc_ips, wc_ttl, bk_cnam
         info['resolve'] = 1
         info['reason'] = reason
         info['ttl'] = ttls
-        info['cname'] = cname
+        info['cname'] = cnames
         info['ip'] = ips
         info['public'] = public
         info['times'] = times
@@ -454,7 +455,7 @@ def stat_ip_times(result_paths):
     return times
 
 
-def deal_output(output_paths, ip_times, wildcard_ips, wildcard_ttl, bk_cname):
+def deal_output(output_paths, ip_times, wildcard_ips, wildcard_ttl):
     logger.log('INFOR', f'Processing result')
     infos = dict()  # 用来记录所有域名有关信息
     subdomains = list()  # 用来保存所有通过有效性检查的子域
@@ -480,8 +481,7 @@ def deal_output(output_paths, ip_times, wildcard_ips, wildcard_ttl, bk_cname):
                     logger.log('TRACE', f'Processing {line}, {qname} no response')
                     continue
                 infos, subdomains = gen_result_infos(items, infos, subdomains,
-                                                     ip_times, wildcard_ips,
+                                                     ip_times, wildcard_ips, wildcard_ttl)
-                                                     wildcard_ttl, bk_cname)
     return infos, subdomains
 
 
@@ -515,10 +515,11 @@ def check_ip_times(times):
     return False
 
 
-def is_valid_subdomain(ip, ttl, times, wc_ips, wc_ttl, cname, bk_cname):
+def is_valid_subdomain(ip, ttl, times, wc_ips, wc_ttl, cname):
     ip_blacklist = settings.brute_ip_blacklist
-    if cname in bk_cname:
+    cname_blacklist = settings.brute_cname_blacklist
-        return 0, 'cname blacklist' # 有些泛解析会统一解析到一个cname上
+    if cname in cname_blacklist:
+        return 0, 'cname blacklist'  # 有些泛解析会统一解析到一个cname上
     if ip in ip_blacklist:  # 解析ip在黑名单ip则为非法子域
         return 0, 'IP blacklist'
     if all([wc_ips, wc_ttl]):  # 有泛解析记录才进行对比
@@ -583,11 +584,10 @@ class Brute(Module):
     def __init__(self, target=None, targets=None, process=None, concurrent=None,
                  word=False, wordlist=None, recursive=False, depth=None, nextlist=None,
                  fuzz=False, place=None, rule=None, fuzzlist=None, export=True,
-                 alive=True, format='csv', path=None, bk_cname=[]):
+                 alive=True, format='csv', path=None):
         Module.__init__(self)
         self.module = 'Brute'
         self.source = 'Brute'
-        self.bk_cname = bk_cname
         self.target = target
         self.targets = targets
         self.process_num = process or utils.get_process_num()
@@ -716,7 +716,7 @@ class Brute(Module):
                 output_paths.append(output_path)
         ip_times = stat_ip_times(output_paths)
         self.infos, self.subdomains = deal_output(output_paths, ip_times,
-                                                  wildcard_ips, wildcard_ttl, self.bk_cname)
+                                                  wildcard_ips, wildcard_ttl)
         delete_file(dict_path, output_paths)
         end = time.time()
         self.elapse = round(end - start, 1)

common/module.py

@@ -60,7 +60,7 @@ class Module(object):
         self.elapse = round(self.end - self.start, 1)
         logger.log('DEBUG', f'Finished {self.source} module to '
                             f'collect {self.domain}\'s subdomains')
-        logger.log('INFOR', f'The {self.source} module took {self.elapse} seconds '
+        logger.log('INFOR', f'{self.source} module took {self.elapse} seconds '
                             f'found {len(self.subdomains)} subdomains')
         logger.log('DEBUG', f'{self.source} module found subdomains of {self.domain}\n'
                             f'{self.subdomains}')

common/records.py

@@ -1,12 +1,11 @@
 import os
-from sys import stdout
 from collections import OrderedDict
-from contextlib import contextmanager
 from inspect import isclass
 
-from .tablib import tablib
 from sqlalchemy import create_engine, exc, inspect, text
 
+from .tablib import tablib
+
 DATABASE_URL = os.environ.get('DATABASE_URL')
 
 

common/request.py

@@ -94,7 +94,7 @@ def get_html_title(markup):
         return h2.text
 
     h3 = soup.h3
-    if h2:
+    if h3:
         return h3.text
 
     desc = soup.find('meta', attrs={'name': 'description'})

config/setting.py

@@ -60,6 +60,8 @@ enable_fuzz = False  # 是否使用fuzz模式枚举域名
 fuzz_place = None  # 指定爆破的位置 指定的位置用`*`表示 示例：www.*.example.com
 fuzz_rule = None  # fuzz域名的正则 示例：'[a-z][0-9]' 表示第一位是字母 第二位是数字
 brute_ip_blacklist = {'0.0.0.0', '0.0.0.1'}  # IP黑名单 子域解析到IP黑名单则标记为非法子域
+# CNAME黑名单 子域解析到CNAME黑名单则标记为非法子域
+brute_cname_blacklist = {'nonexist.sdo.com', 'shop.taobao.com'}
 ip_appear_maximum = 100  # 多个子域解析到同一IP次数超过100次则标记为非法(泛解析)子域
 
 # 代理设置

data/rules/CNAME

@@ -1 +0,0 @@
-webanalyzer.fatezero.org

data/rules/LICENSE

@@ -1,339 +0,0 @@
-                    GNU GENERAL PUBLIC LICENSE
-                       Version 2, June 1991
-
- Copyright (C) 1989, 1991 Free Software Foundation, Inc.,
- 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
- Everyone is permitted to copy and distribute verbatim copies
- of this license document, but changing it is not allowed.
-
-                            Preamble
-
-  The licenses for most software are designed to take away your
-freedom to share and change it.  By contrast, the GNU General Public
-License is intended to guarantee your freedom to share and change free
-software--to make sure the software is free for all its users.  This
-General Public License applies to most of the Free Software
-Foundation's software and to any other program whose authors commit to
-using it.  (Some other Free Software Foundation software is covered by
-the GNU Lesser General Public License instead.)  You can apply it to
-your programs, too.
-
-  When we speak of free software, we are referring to freedom, not
-price.  Our General Public Licenses are designed to make sure that you
-have the freedom to distribute copies of free software (and charge for
-this service if you wish), that you receive source code or can get it
-if you want it, that you can change the software or use pieces of it
-in new free programs; and that you know you can do these things.
-
-  To protect your rights, we need to make restrictions that forbid
-anyone to deny you these rights or to ask you to surrender the rights.
-These restrictions translate to certain responsibilities for you if you
-distribute copies of the software, or if you modify it.
-
-  For example, if you distribute copies of such a program, whether
-gratis or for a fee, you must give the recipients all the rights that
-you have.  You must make sure that they, too, receive or can get the
-source code.  And you must show them these terms so they know their
-rights.
-
-  We protect your rights with two steps: (1) copyright the software, and
-(2) offer you this license which gives you legal permission to copy,
-distribute and/or modify the software.
-
-  Also, for each author's protection and ours, we want to make certain
-that everyone understands that there is no warranty for this free
-software.  If the software is modified by someone else and passed on, we
-want its recipients to know that what they have is not the original, so
-that any problems introduced by others will not reflect on the original
-authors' reputations.
-
-  Finally, any free program is threatened constantly by software
-patents.  We wish to avoid the danger that redistributors of a free
-program will individually obtain patent licenses, in effect making the
-program proprietary.  To prevent this, we have made it clear that any
-patent must be licensed for everyone's free use or not licensed at all.
-
-  The precise terms and conditions for copying, distribution and
-modification follow.
-
-                    GNU GENERAL PUBLIC LICENSE
-   TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
-
-  0. This License applies to any program or other work which contains
-a notice placed by the copyright holder saying it may be distributed
-under the terms of this General Public License.  The "Program", below,
-refers to any such program or work, and a "work based on the Program"
-means either the Program or any derivative work under copyright law:
-that is to say, a work containing the Program or a portion of it,
-either verbatim or with modifications and/or translated into another
-language.  (Hereinafter, translation is included without limitation in
-the term "modification".)  Each licensee is addressed as "you".
-
-Activities other than copying, distribution and modification are not
-covered by this License; they are outside its scope.  The act of
-running the Program is not restricted, and the output from the Program
-is covered only if its contents constitute a work based on the
-Program (independent of having been made by running the Program).
-Whether that is true depends on what the Program does.
-
-  1. You may copy and distribute verbatim copies of the Program's
-source code as you receive it, in any medium, provided that you
-conspicuously and appropriately publish on each copy an appropriate
-copyright notice and disclaimer of warranty; keep intact all the
-notices that refer to this License and to the absence of any warranty;
-and give any other recipients of the Program a copy of this License
-along with the Program.
-
-You may charge a fee for the physical act of transferring a copy, and
-you may at your option offer warranty protection in exchange for a fee.
-
-  2. You may modify your copy or copies of the Program or any portion
-of it, thus forming a work based on the Program, and copy and
-distribute such modifications or work under the terms of Section 1
-above, provided that you also meet all of these conditions:
-
-    a) You must cause the modified files to carry prominent notices
-    stating that you changed the files and the date of any change.
-
-    b) You must cause any work that you distribute or publish, that in
-    whole or in part contains or is derived from the Program or any
-    part thereof, to be licensed as a whole at no charge to all third
-    parties under the terms of this License.
-
-    c) If the modified program normally reads commands interactively
-    when run, you must cause it, when started running for such
-    interactive use in the most ordinary way, to print or display an
-    announcement including an appropriate copyright notice and a
-    notice that there is no warranty (or else, saying that you provide
-    a warranty) and that users may redistribute the program under
-    these conditions, and telling the user how to view a copy of this
-    License.  (Exception: if the Program itself is interactive but
-    does not normally print such an announcement, your work based on
-    the Program is not required to print an announcement.)
-
-These requirements apply to the modified work as a whole.  If
-identifiable sections of that work are not derived from the Program,
-and can be reasonably considered independent and separate works in
-themselves, then this License, and its terms, do not apply to those
-sections when you distribute them as separate works.  But when you
-distribute the same sections as part of a whole which is a work based
-on the Program, the distribution of the whole must be on the terms of
-this License, whose permissions for other licensees extend to the
-entire whole, and thus to each and every part regardless of who wrote it.
-
-Thus, it is not the intent of this section to claim rights or contest
-your rights to work written entirely by you; rather, the intent is to
-exercise the right to control the distribution of derivative or
-collective works based on the Program.
-
-In addition, mere aggregation of another work not based on the Program
-with the Program (or with a work based on the Program) on a volume of
-a storage or distribution medium does not bring the other work under
-the scope of this License.
-
-  3. You may copy and distribute the Program (or a work based on it,
-under Section 2) in object code or executable form under the terms of
-Sections 1 and 2 above provided that you also do one of the following:
-
-    a) Accompany it with the complete corresponding machine-readable
-    source code, which must be distributed under the terms of Sections
-    1 and 2 above on a medium customarily used for software interchange; or,
-
-    b) Accompany it with a written offer, valid for at least three
-    years, to give any third party, for a charge no more than your
-    cost of physically performing source distribution, a complete
-    machine-readable copy of the corresponding source code, to be
-    distributed under the terms of Sections 1 and 2 above on a medium
-    customarily used for software interchange; or,
-
-    c) Accompany it with the information you received as to the offer
-    to distribute corresponding source code.  (This alternative is
-    allowed only for noncommercial distribution and only if you
-    received the program in object code or executable form with such
-    an offer, in accord with Subsection b above.)
-
-The source code for a work means the preferred form of the work for
-making modifications to it.  For an executable work, complete source
-code means all the source code for all modules it contains, plus any
-associated interface definition files, plus the scripts used to
-control compilation and installation of the executable.  However, as a
-special exception, the source code distributed need not include
-anything that is normally distributed (in either source or binary
-form) with the major components (compiler, kernel, and so on) of the
-operating system on which the executable runs, unless that component
-itself accompanies the executable.
-
-If distribution of executable or object code is made by offering
-access to copy from a designated place, then offering equivalent
-access to copy the source code from the same place counts as
-distribution of the source code, even though third parties are not
-compelled to copy the source along with the object code.
-
-  4. You may not copy, modify, sublicense, or distribute the Program
-except as expressly provided under this License.  Any attempt
-otherwise to copy, modify, sublicense or distribute the Program is
-void, and will automatically terminate your rights under this License.
-However, parties who have received copies, or rights, from you under
-this License will not have their licenses terminated so long as such
-parties remain in full compliance.
-
-  5. You are not required to accept this License, since you have not
-signed it.  However, nothing else grants you permission to modify or
-distribute the Program or its derivative works.  These actions are
-prohibited by law if you do not accept this License.  Therefore, by
-modifying or distributing the Program (or any work based on the
-Program), you indicate your acceptance of this License to do so, and
-all its terms and conditions for copying, distributing or modifying
-the Program or works based on it.
-
-  6. Each time you redistribute the Program (or any work based on the
-Program), the recipient automatically receives a license from the
-original licensor to copy, distribute or modify the Program subject to
-these terms and conditions.  You may not impose any further
-restrictions on the recipients' exercise of the rights granted herein.
-You are not responsible for enforcing compliance by third parties to
-this License.
-
-  7. If, as a consequence of a court judgment or allegation of patent
-infringement or for any other reason (not limited to patent issues),
-conditions are imposed on you (whether by court order, agreement or
-otherwise) that contradict the conditions of this License, they do not
-excuse you from the conditions of this License.  If you cannot
-distribute so as to satisfy simultaneously your obligations under this
-License and any other pertinent obligations, then as a consequence you
-may not distribute the Program at all.  For example, if a patent
-license would not permit royalty-free redistribution of the Program by
-all those who receive copies directly or indirectly through you, then
-the only way you could satisfy both it and this License would be to
-refrain entirely from distribution of the Program.
-
-If any portion of this section is held invalid or unenforceable under
-any particular circumstance, the balance of the section is intended to
-apply and the section as a whole is intended to apply in other
-circumstances.
-
-It is not the purpose of this section to induce you to infringe any
-patents or other property right claims or to contest validity of any
-such claims; this section has the sole purpose of protecting the
-integrity of the free software distribution system, which is
-implemented by public license practices.  Many people have made
-generous contributions to the wide range of software distributed
-through that system in reliance on consistent application of that
-system; it is up to the author/donor to decide if he or she is willing
-to distribute software through any other system and a licensee cannot
-impose that choice.
-
-This section is intended to make thoroughly clear what is believed to
-be a consequence of the rest of this License.
-
-  8. If the distribution and/or use of the Program is restricted in
-certain countries either by patents or by copyrighted interfaces, the
-original copyright holder who places the Program under this License
-may add an explicit geographical distribution limitation excluding
-those countries, so that distribution is permitted only in or among
-countries not thus excluded.  In such case, this License incorporates
-the limitation as if written in the body of this License.
-
-  9. The Free Software Foundation may publish revised and/or new versions
-of the General Public License from time to time.  Such new versions will
-be similar in spirit to the present version, but may differ in detail to
-address new problems or concerns.
-
-Each version is given a distinguishing version number.  If the Program
-specifies a version number of this License which applies to it and "any
-later version", you have the option of following the terms and conditions
-either of that version or of any later version published by the Free
-Software Foundation.  If the Program does not specify a version number of
-this License, you may choose any version ever published by the Free Software
-Foundation.
-
-  10. If you wish to incorporate parts of the Program into other free
-programs whose distribution conditions are different, write to the author
-to ask for permission.  For software which is copyrighted by the Free
-Software Foundation, write to the Free Software Foundation; we sometimes
-make exceptions for this.  Our decision will be guided by the two goals
-of preserving the free status of all derivatives of our free software and
-of promoting the sharing and reuse of software generally.
-
-                            NO WARRANTY
-
-  11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
-FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW.  EXCEPT WHEN
-OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
-PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
-OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
-MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  THE ENTIRE RISK AS
-TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU.  SHOULD THE
-PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
-REPAIR OR CORRECTION.
-
-  12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
-WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
-REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,
-INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING
-OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED
-TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY
-YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
-PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
-POSSIBILITY OF SUCH DAMAGES.
-
-                     END OF TERMS AND CONDITIONS
-
-            How to Apply These Terms to Your New Programs
-
-  If you develop a new program, and you want it to be of the greatest
-possible use to the public, the best way to achieve this is to make it
-free software which everyone can redistribute and change under these terms.
-
-  To do so, attach the following notices to the program.  It is safest
-to attach them to the start of each source file to most effectively
-convey the exclusion of warranty; and each file should have at least
-the "copyright" line and a pointer to where the full notice is found.
-
-    <one line to give the program's name and a brief idea of what it does.>
-    Copyright (C) <year>  <name of author>
-
-    This program is free software; you can redistribute it and/or modify
-    it under the terms of the GNU General Public License as published by
-    the Free Software Foundation; either version 2 of the License, or
-    (at your option) any later version.
-
-    This program is distributed in the hope that it will be useful,
-    but WITHOUT ANY WARRANTY; without even the implied warranty of
-    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-    GNU General Public License for more details.
-
-    You should have received a copy of the GNU General Public License along
-    with this program; if not, write to the Free Software Foundation, Inc.,
-    51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
-
-Also add information on how to contact you by electronic and paper mail.
-
-If the program is interactive, make it output a short notice like this
-when it starts in an interactive mode:
-
-    Gnomovision version 69, Copyright (C) year name of author
-    Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
-    This is free software, and you are welcome to redistribute it
-    under certain conditions; type `show c' for details.
-
-The hypothetical commands `show w' and `show c' should show the appropriate
-parts of the General Public License.  Of course, the commands you use may
-be called something other than `show w' and `show c'; they could even be
-mouse-clicks or menu items--whatever suits your program.
-
-You should also get your employer (if you work as a programmer) or your
-school, if any, to sign a "copyright disclaimer" for the program, if
-necessary.  Here is a sample; alter the names:
-
-  Yoyodyne, Inc., hereby disclaims all copyright interest in the program
-  `Gnomovision' (which makes passes at compilers) written by James Hacker.
-
-  <signature of Ty Coon>, 1 April 1989
-  Ty Coon, President of Vice
-
-This General Public License does not permit incorporating your program into
-proprietary programs.  If your program is a subroutine library, you may
-consider it more useful to permit linking proprietary applications with the
-library.  If this is what you want to do, use the GNU Lesser General
-Public License instead of this License.

data/rules/README.md

@@ -1,134 +0,0 @@
-# webanalyzer rules
-
-[![Build Status](https://travis-ci.org/webanalyzer/rules.svg?branch=build)](https://travis-ci.org/webanalyzer/rules)
-
-通用的指纹识别规则
-
-## 规则编写
-
-### 基础信息
-
-例子:
-
-```json
-{
-    "name": "wordpress",
-    "author": "fate0",
-    "version": "0.1.0",
-    "description": "wordpress 是世界上最为广泛使用的博客系统",
-    "website": "http://www.wordpress.org/",
-    "matches": [],
-    "condition": "0 and (1 and not 2)",
-    "implies": "PHP",
-    "excludes": "Apache"
-}
-```
-
-描述:
-
-| FIELD       | TYPE   | DESCRIPTION  | EXAMPLE                                    | REQUIRED |
-|-------------|--------|--------------|--------------------------------------------|----------|
-| name        | string | 组件名称     | `wordpress`                                | true     |
-| author      | string | 作者名       | `fate0`                                    | false    |
-| version     | string | 插件版本     | `0.1.0`                                    | false    |
-| description | string | 组件描述     | `wordpress 是世界上最为广泛使用的博客系统` | false    |
-| website     | string | 组件网站     | `http://www.wordpress.org/`                | false    |
-| matches     | array  | 规则         | `[{"regexp": "wordpress"}]`                | true     |
-| condition   | string | 规则组合条件 | `0 and (1 and not 2)`                        | false    |
-| implies     | string/array | 依赖的其他组件 | `PHP`                               | false    |
-| excludes    | string/array | 肯定不依赖的其他组件 | `Apache`                       | false    |
-
-
-### 规则信息
-
-例子:
-
-```
-[
-    {
-        "name": "rule name"
-        "search": "all",
-        "text": "wordpress"
-    }
-]
-```
-
-描述:
-
-| FIELD      | TYPE   | DESCRIPTION                                                             | EXAMPLE                            |
-|------------|--------|-------------------------------------------------------------------------|------------------------------------|
-| name       | string | 规则名称                                                                | `rulename`                         |
-| search     | string | 搜索的位置，可选值为 `all`, `headers`, `title`, `body`, `script`, `cookies`, `headers[key]`, `meta[key]`, `cookies[key]`| `body`                              |
-| regexp     | string | 正则表达式                                                              | `wordpress.*`                      |
-| text       | string | 明文搜索                                                                | `wordpress`                        |
-| version    | string | 匹配的版本号                                                            | `0.1`                              |
-| offset     | int    | regexp 中版本搜索的偏移                                                  | `1`                                |
-| certainty  | int    | 确信度                                                                  | `75`                               |
-| md5        | string | 目标文件的 md5 hash 值                                                  | `beb816a701a4cee3c2f586171458ceec` |
-| url        | string | 需要请求的 url                                                          | `/properties/aboutprinter.html`    |
-| status     | int    | 请求 url 的返回状态码，默认是 200                                       | `400`                              |
-
-
-## 返回信息
-
-例子:
-
-```
-[
-    {
-        "name": "4images",
-        "version": "1.1",
-        "certainty": 100,
-        "origin": "custom"
-    }
-]
-```
-
-描述:
-
-| FIELD       | TYPE   | DESCRIPTION  | EXAMPLE                                    | REQUIRED |
-|-------------|--------|--------------|--------------------------------------------|----------|
-| name        | string | 组件名称     | `wordpress`                                | true     |
-| version     | string | 插件版本     | `0.1.0`                                    | false    |
-| certainty     | int  | 确信度         | `75`                | false     |
-| origin     | string | 插件来源     | `custom`                | false    |
-
-
-## 检测逻辑
-
-* 如果 match 中存在 url 字段，plugin 是属于 custom 类型且 `aggression` 开启，则请求 url 获取相关信息
-* 根据 search 字段选取搜索位置
-* 根据 regexp/text 进行文本匹配，或者 status 匹配状态码，或者 md5 匹配 body 的 hash 值
-* 如果 match 中存在 version 就表明规则直接出对应版本，如果存在 offset 就表明需要从 regexp 中匹配出版本
-* 如果 rule 中存在 condition，则根据 condition 判断规则是否匹配，默认每个 match 之间的关系为 `or`
-
-
-## Q & A
-* WhatWeb 的规则如何转换成 webanalyzer 的规则？
-
-可以看下 [tools/whatweb.rb](https://github.com/webanalyzer/rules/blob/build/tools/whatweb.rb) 代码，实际上我这并没有成功转换全部规则，依旧有部分 passive, aggressive 函数规则以及其他规则并没去转换，不过成功转换比例占大多数
-
-* Wappalyzer 的规则如何转换成 webanalyzer 的规则？
-
-可以看下 [tools/wappalyzer.py](https://github.com/webanalyzer/rules/blob/build/tools/wappalyzer.py) 代码，因为 Wappalyzer 的规则本来就是 json 格式，所以比较容易转换，但是依旧有部分字段我没有保留在我的规则中
-
-* 为什么使用 json 作为规则格式？
-
-更通用，即便更换编程语言，也可以继续复用本来的规则
-
-* 如何同步 WhatWeb、Wappalyzer 的规则？
-
-可以看下 [.travis.yml](https://github.com/webanalyzer/rules/blob/build/.travis.yml)，通过 travis-ci 达到每天自动同步规则
-
-* License 为什么是 GPL-2.0 ？
-
-因为 WhatWeb 就是 GPL-2.0，虽然规则没有直接使用 WhatWeb 本身的规则，但是我们的规则是通过 WhatWeb 转换过来的，虽然不确定会不会传染，为了保险起见就设置成和 WhatWeb 一样的 License
-
-
-## 引用
-
-* [WhatWeb 规则](https://github.com/urbanadventurer/WhatWeb)
-* [Wappalyzer 规则](https://github.com/AliasIO/Wappalyzer)
-* [fofa 规则](https://github.com/se55i0n/Webfinger)
-* [webanalyzer.py](https://github.com/webanalyzer/webanalyzer.py)
-* [webanalyzer.go](https://github.com/webanalyzer/webanalyzer.go)

data/rules/VERSION

@@ -1 +0,0 @@
-2020.07.24

data/rules/custom/test.json

@@ -1,4 +0,0 @@
-{
-    "name": "test",
-    "matches": []
-}

data/rules/fofa/.NET.json

@@ -1,11 +0,0 @@
-{
-    "name": ".NET",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "content=\"Visual Basic .NET 7.1"
-        }
-    ]
-}

data/rules/fofa/08cms.json

@@ -1,15 +0,0 @@
-{
-    "name": "08cms",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "content=\"08CMS"
-        },
-        {
-            "search": "body",
-            "text": "typeof(_08cms)"
-        }
-    ]
-}

data/rules/fofa/1024 CMS.json

@@ -1,15 +0,0 @@
-{
-    "name": "1024 CMS",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "Powered by 1024 CMS"
-        },
-        {
-            "search": "body",
-            "text": "content=\"1024 CMS"
-        }
-    ]
-}

data/rules/fofa/1024cms.json

@@ -1,15 +0,0 @@
-{
-    "name": "1024cms",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "Powered by 1024 CMS"
-        },
-        {
-            "search": "body",
-            "text": "generator\" content=\"1024 CMS (c)"
-        }
-    ]
-}

data/rules/fofa/171cms.json

@@ -1,15 +0,0 @@
-{
-    "name": "171cms",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "content=\"171cms"
-        },
-        {
-            "search": "title",
-            "regexp": "171cms"
-        }
-    ]
-}

data/rules/fofa/1und1.json

@@ -1,11 +0,0 @@
-{
-    "name": "1und1",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "/shop/catalog/browse?sessid="
-        }
-    ]
-}

data/rules/fofa/25yi.json

@@ -1,15 +0,0 @@
-{
-    "name": "25yi",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "Powered by 25yi"
-        },
-        {
-            "search": "body",
-            "text": "css/25yi.css"
-        }
-    ]
-}

data/rules/fofa/2z project.json

@@ -1,11 +0,0 @@
-{
-    "name": "2z project",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "Generator\" content=\"2z project"
-        }
-    ]
-}

data/rules/fofa/313自助建站.json

@@ -1,11 +0,0 @@
-{
-    "name": "313\u81ea\u52a9\u5efa\u7ad9",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "313CMS"
-        }
-    ]
-}

data/rules/fofa/360webfacil_360WebManager.json

@@ -1,20 +0,0 @@
-{
-    "name": "360webfacil_360WebManager",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "publico/template/"
-        },
-        {
-            "search": "body",
-            "text": "zonapie"
-        },
-        {
-            "search": "body",
-            "text": "360WebManager Software"
-        }
-    ],
-    "condition": "(0 and 1) or 2"
-}

data/rules/fofa/360主机卫士.json

@@ -1,11 +0,0 @@
-{
-    "name": "360\u4e3b\u673a\u536b\u58eb",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "X-Safe-Firewall"
-        }
-    ]
-}

data/rules/fofa/360企业版.json

@@ -1,11 +0,0 @@
-{
-    "name": "360\u4f01\u4e1a\u7248",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "360EntInst"
-        }
-    ]
-}

data/rules/fofa/360站长平台.json

@@ -1,11 +0,0 @@
-{
-    "name": "360\u7ad9\u957f\u5e73\u53f0",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "360-site-verification"
-        }
-    ]
-}

data/rules/fofa/360网站卫士.json

@@ -1,11 +0,0 @@
-{
-    "name": "360\u7f51\u7ad9\u536b\u58eb",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "360wzb"
-        }
-    ]
-}

data/rules/fofa/360网站卫士常用前端公共库.json

@@ -1,15 +0,0 @@
-{
-    "name": "360\u7f51\u7ad9\u536b\u58eb\u5e38\u7528\u524d\u7aef\u516c\u5171\u5e93",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "libs.useso.com"
-        },
-        {
-            "search": "body",
-            "text": "libs.useso.com"
-        }
-    ]
-}

data/rules/fofa/360网站安全检测.json

@@ -1,11 +0,0 @@
-{
-    "name": "360\u7f51\u7ad9\u5b89\u5168\u68c0\u6d4b",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "webscan.360.cn/status/pai/hash"
-        }
-    ]
-}

data/rules/fofa/3COM NBX.json

@@ -1,15 +0,0 @@
-{
-    "name": "3COM NBX",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "title",
-            "regexp": "NBX NetSet"
-        },
-        {
-            "search": "body",
-            "text": "splashTitleIPTelephony"
-        }
-    ]
-}

data/rules/fofa/3COM_NBX.json

@@ -1,20 +0,0 @@
-{
-    "name": "3COM_NBX",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "title",
-            "regexp": "NBX NetSet"
-        },
-        {
-            "search": "headers",
-            "text": "Alternates"
-        },
-        {
-            "search": "body",
-            "text": "NBX"
-        }
-    ],
-    "condition": "0 or (1 and 2)"
-}

data/rules/fofa/3dcart.json

@@ -1,23 +0,0 @@
-{
-    "name": "3dcart",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "powered by 3dcart"
-        },
-        {
-            "search": "headers",
-            "text": "3dvisit"
-        },
-        {
-            "search": "body",
-            "text": "<!--START: 3dcart stats-->"
-        },
-        {
-            "search": "headers",
-            "text": "X-Powered-By: 3DCART"
-        }
-    ]
-}

data/rules/fofa/4D.json

@@ -1,11 +0,0 @@
-{
-    "name": "4D",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "Server:4D"
-        }
-    ]
-}

data/rules/fofa/4images.json

@@ -1,24 +0,0 @@
-{
-    "name": "4images",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "powered by 4images"
-        },
-        {
-            "search": "headers",
-            "text": "4images_"
-        },
-        {
-            "search": "body",
-            "text": "Copyright"
-        },
-        {
-            "search": "body",
-            "text": "4homepages.de"
-        }
-    ],
-    "condition": "0 or 1 or (2 and 3)"
-}

data/rules/fofa/51la.json

@@ -1,11 +0,0 @@
-{
-    "name": "51la",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "js.users.51.la"
-        }
-    ]
-}

data/rules/fofa/51yes.json

@@ -1,11 +0,0 @@
-{
-    "name": "51yes",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "51yes.com/click.aspx"
-        }
-    ]
-}

data/rules/fofa/53客服.json

@@ -1,11 +0,0 @@
-{
-    "name": "53\u5ba2\u670d",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "tb.53kf.com/code/"
-        }
-    ]
-}

data/rules/fofa/68 Classifieds.json

@@ -1,16 +0,0 @@
-{
-    "name": "68 Classifieds",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "powered by"
-        },
-        {
-            "search": "body",
-            "text": "68 Classifieds"
-        }
-    ],
-    "condition": "0 and 1"
-}

data/rules/fofa/6kbbs.json

@@ -1,15 +0,0 @@
-{
-    "name": "6kbbs",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "Powered by 6kbbs"
-        },
-        {
-            "search": "body",
-            "text": "generator\" content=\"6KBBS"
-        }
-    ]
-}

data/rules/fofa/74cms.json

@@ -1,28 +0,0 @@
-{
-    "name": "74cms",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "content=\"74cms.com"
-        },
-        {
-            "search": "body",
-            "text": "content=\"\u9a91\u58ebCMS"
-        },
-        {
-            "search": "body",
-            "text": "Powered by <a href=\"http://www.74cms.com/\""
-        },
-        {
-            "search": "body",
-            "text": "/templates/default/css/common.css"
-        },
-        {
-            "search": "body",
-            "text": "selectjobscategory"
-        }
-    ],
-    "condition": "0 or 1 or 2 or (3 and 4)"
-}

data/rules/fofa/78oa.json

@@ -1,23 +0,0 @@
-{
-    "name": "78oa",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "/resource/javascript/system/runtime.min.js"
-        },
-        {
-            "search": "body",
-            "text": "license.78oa.com"
-        },
-        {
-            "search": "title",
-            "regexp": "78oa"
-        },
-        {
-            "search": "body",
-            "text": "src=\"/module/index.php"
-        }
-    ]
-}

data/rules/fofa/ABO.CMS.json

@@ -1,11 +0,0 @@
-{
-    "name": "ABO.CMS",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "ABO.CMS"
-        }
-    ]
-}

data/rules/fofa/ABO_CMS.json

@@ -1,11 +0,0 @@
-{
-    "name": "ABO_CMS",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "a-powered-by"
-        }
-    ]
-}

data/rules/fofa/ACSNO网络探针.json

@@ -1,11 +0,0 @@
-{
-    "name": "ACSNO\u7f51\u7edc\u63a2\u9488",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "title",
-            "regexp": "\u63a2\u9488\u7ba1\u7406\u4e0e\u6d4b\u8bd5\u7cfb\u7edf-\u767b\u5f55\u754c\u9762"
-        }
-    ]
-}

data/rules/fofa/ACTi.json

@@ -1,15 +0,0 @@
-{
-    "name": "ACTi",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "title",
-            "regexp": "Web Configurator"
-        },
-        {
-            "search": "body",
-            "text": "ACTi Corporation All Rights Reserved"
-        }
-    ]
-}

data/rules/fofa/AChecker Web accessibility evaluation tool.json

@@ -1,15 +0,0 @@
-{
-    "name": "AChecker Web accessibility evaluation tool",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "content=\"AChecker is a Web accessibility"
-        },
-        {
-            "search": "title",
-            "regexp": "Checker : Web Accessibility Checker"
-        }
-    ]
-}

data/rules/fofa/ADTRAN-Device.json

@@ -1,15 +0,0 @@
-{
-    "name": "ADTRAN-Device",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "ADTRAN"
-        },
-        {
-            "search": "headers",
-            "text": "NetVanta"
-        }
-    ]
-}

data/rules/fofa/ADXStudio CMS.json

@@ -1,19 +0,0 @@
-{
-    "name": "ADXStudio CMS",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "Powered by Adxstudio"
-        },
-        {
-            "search": "body",
-            "text": "poweredbyadx.png"
-        },
-        {
-            "search": "headers",
-            "text": "anonprofile"
-        }
-    ]
-}

data/rules/fofa/AD_RS设备.json

@@ -1,11 +0,0 @@
-{
-    "name": "AD_RS\u8bbe\u5907",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "AD_RS_COOKIE"
-        }
-    ]
-}

data/rules/fofa/AIDeX.json

@@ -1,20 +0,0 @@
-{
-    "name": "AIDeX",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "aidex"
-        },
-        {
-            "search": "body",
-            "text": "Powered by"
-        },
-        {
-            "search": "body",
-            "text": "http://www.aidex.de/"
-        }
-    ],
-    "condition": "0 or (1 and 2)"
-}

data/rules/fofa/AJA-Video-Converter.json

@@ -1,11 +0,0 @@
-{
-    "name": "AJA-Video-Converter",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "eParamID_SWVersion"
-        }
-    ]
-}

data/rules/fofa/ALCASAR.json

@@ -1,11 +0,0 @@
-{
-    "name": "ALCASAR",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "valoriserDiv5"
-        }
-    ]
-}

data/rules/fofa/AM4SS.json

@@ -1,15 +0,0 @@
-{
-    "name": "AM4SS",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "Powered by am4ss"
-        },
-        {
-            "search": "body",
-            "text": "am4ss.css"
-        }
-    ]
-}

data/rules/fofa/AMR-WinControl.json

@@ -1,11 +0,0 @@
-{
-    "name": "AMR-WinControl",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "AMR_WinControl"
-        }
-    ]
-}

data/rules/fofa/ANECMS.json

@@ -1,11 +0,0 @@
-{
-    "name": "ANECMS",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "content=\"Erwin Aligam - ealigam@gmail.com"
-        }
-    ]
-}

data/rules/fofa/AOLserver.json

@@ -1,11 +0,0 @@
-{
-    "name": "AOLserver",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "AOLserver"
-        }
-    ]
-}

data/rules/fofa/AP-Router.json

@@ -1,11 +0,0 @@
-{
-    "name": "AP-Router",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "title",
-            "regexp": "AP Router New Generation"
-        }
-    ]
-}

data/rules/fofa/APC-UPS-Management-Card.json

@@ -1,15 +0,0 @@
-{
-    "name": "APC-UPS-Management-Card",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "APC Management Card"
-        },
-        {
-            "search": "body",
-            "text": "class=\"apclogo\""
-        }
-    ]
-}

data/rules/fofa/APC_Management.json

@@ -1,15 +0,0 @@
-{
-    "name": "APC_Management",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "APC Management Card"
-        },
-        {
-            "search": "body",
-            "text": "This object on the APC Management Web Server is protected"
-        }
-    ]
-}

data/rules/fofa/ARN01154U4.json

@@ -1,11 +0,0 @@
-{
-    "name": "ARN01154U4",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "ARN01154U4"
-        }
-    ]
-}

data/rules/fofa/ARRIS-Touchstone-Router.json

@@ -1,20 +0,0 @@
-{
-    "name": "ARRIS-Touchstone-Router",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "Copyright"
-        },
-        {
-            "search": "body",
-            "text": "ARRIS Group"
-        },
-        {
-            "search": "body",
-            "text": "/arris_style.css"
-        }
-    ],
-    "condition": "(0 and 1) or 2"
-}

data/rules/fofa/ASP-Nuke.json

@@ -1,15 +0,0 @@
-{
-    "name": "ASP-Nuke",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "CONTENT=\"ASP-Nuke"
-        },
-        {
-            "search": "body",
-            "text": "content=\"ASPNUKE"
-        }
-    ]
-}

data/rules/fofa/ASP.NET MVC.json

@@ -1,11 +0,0 @@
-{
-    "name": "ASP.NET MVC",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "Aspnetmvc"
-        }
-    ]
-}

data/rules/fofa/ASP.NET Version.json

@@ -1,11 +0,0 @@
-{
-    "name": "ASP.NET Version",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "X-Aspnet-Version"
-        }
-    ]
-}

data/rules/fofa/ASP.NET.json

@@ -1,11 +0,0 @@
-{
-    "name": "ASP.NET",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "X-Powered-By: ASP.NET"
-        }
-    ]
-}

data/rules/fofa/ASP.json

@@ -1,11 +0,0 @@
-{
-    "name": "ASP",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "X-Powered-By: ASP"
-        }
-    ]
-}

data/rules/fofa/ASPCMS.json

@@ -1,19 +0,0 @@
-{
-    "name": "ASPCMS",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "title",
-            "regexp": "Powered by ASPCMS"
-        },
-        {
-            "search": "body",
-            "text": "content=\"ASPCMS"
-        },
-        {
-            "search": "body",
-            "text": "/inc/AspCms_AdvJs.asp"
-        }
-    ]
-}

data/rules/fofa/ASPThai_Net-Webboard.json

@@ -1,11 +0,0 @@
-{
-    "name": "ASPThai_Net-Webboard",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "ASPThai.Net Webboard"
-        }
-    ]
-}

data/rules/fofa/ASPilot-Cart.json

@@ -1,15 +0,0 @@
-{
-    "name": "ASPilot-Cart",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "content=\"Pilot Cart"
-        },
-        {
-            "search": "body",
-            "text": "/pilot_css_default.css"
-        }
-    ]
-}

data/rules/fofa/ASProxy.json

@@ -1,15 +0,0 @@
-{
-    "name": "ASProxy",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "Surf the web invisibly using ASProxy power"
-        },
-        {
-            "search": "body",
-            "text": "btnASProxyDisplayButton"
-        }
-    ]
-}

data/rules/fofa/ASUS_RTAC66U.json

@@ -1,15 +0,0 @@
-{
-    "name": "ASUS_RTAC66U",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "RT-AC66U"
-        },
-        {
-            "search": "headers",
-            "text": "RT-AC66U"
-        }
-    ]
-}

data/rules/fofa/ATutor elearning.json

@@ -1,19 +0,0 @@
-{
-    "name": "ATutor elearning",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "content=\"ATutor"
-        },
-        {
-            "search": "headers",
-            "text": "ATutorID"
-        },
-        {
-            "search": "body",
-            "text": "ATutor.course"
-        }
-    ]
-}

data/rules/fofa/AV-Arcade.json

@@ -1,11 +0,0 @@
-{
-    "name": "AV-Arcade",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "Powered by <a href=\"http://www.avscripts.net/avarcade/"
-        }
-    ]
-}

data/rules/fofa/AVCON6.json

@@ -1,19 +0,0 @@
-{
-    "name": "AVCON6",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "filename=AVCON6Setup.exe"
-        },
-        {
-            "search": "title",
-            "regexp": "AVCON6\u7cfb\u7edf\u7ba1\u7406\u5e73\u53f0"
-        },
-        {
-            "search": "body",
-            "text": "language_dispose.action"
-        }
-    ]
-}

data/rules/fofa/AVTech-Video-Web-Server.json

@@ -1,19 +0,0 @@
-{
-    "name": "AVTech-Video-Web-Server",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "title",
-            "regexp": "--- VIDEO WEB SERVER ---"
-        },
-        {
-            "search": "body",
-            "text": "/AV732E/setup.exe"
-        },
-        {
-            "search": "headers",
-            "text": "Server: AV-TECH"
-        }
-    ]
-}

data/rules/fofa/AWStats网站日志分析工具.json

@@ -1,15 +0,0 @@
-{
-    "name": "AWStats\u7f51\u7ad9\u65e5\u5fd7\u5206\u6790\u5de5\u5177",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "content=\"AWStats"
-        },
-        {
-            "search": "body",
-            "text": "Created by awstats"
-        }
-    ]
-}

data/rules/fofa/Aardvark Topsites.json

@@ -1,16 +0,0 @@
-{
-    "name": "Aardvark Topsites",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "Powered by"
-        },
-        {
-            "search": "body",
-            "text": "Aardvark Topsites"
-        }
-    ],
-    "condition": "0 and 1"
-}

data/rules/fofa/Abyss.json

@@ -1,11 +0,0 @@
-{
-    "name": "Abyss",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "Server: Abyss"
-        }
-    ]
-}

data/rules/fofa/Accellion Secure File Transfer.json

@@ -1,15 +0,0 @@
-{
-    "name": "Accellion Secure File Transfer",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "sfcurl=deleted;"
-        },
-        {
-            "search": "body",
-            "text": "Secured by Accellion"
-        }
-    ]
-}

data/rules/fofa/Access-Control.json

@@ -1,11 +0,0 @@
-{
-    "name": "Access-Control",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "Access-Control-Allow-Methods"
-        }
-    ]
-}

data/rules/fofa/Accordion Content script.json

@@ -1,11 +0,0 @@
-{
-    "name": "Accordion Content script",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "ddaccordion.js"
-        }
-    ]
-}

data/rules/fofa/Acidcat CMS.json

@@ -1,19 +0,0 @@
-{
-    "name": "Acidcat CMS",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "Powered by Acidcat CMS"
-        },
-        {
-            "search": "body",
-            "text": "Start Acidcat CMS footer information"
-        },
-        {
-            "search": "body",
-            "text": "/css/admin_import.css"
-        }
-    ]
-}

data/rules/fofa/Acidcat_CMS.json

@@ -1,15 +0,0 @@
-{
-    "name": "Acidcat_CMS",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "Start Acidcat CMS footer information"
-        },
-        {
-            "search": "body",
-            "text": "Powered by Acidcat CMS"
-        }
-    ]
-}

data/rules/fofa/Acme embeddable HTTP server.json

@@ -1,11 +0,0 @@
-{
-    "name": "Acme embeddable HTTP server",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "Server: Acme"
-        }
-    ]
-}

data/rules/fofa/ActiveHTML.json

@@ -1,11 +0,0 @@
-{
-    "name": "ActiveHTML",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "ActiveHTML"
-        }
-    ]
-}

data/rules/fofa/AdSubtract proxy.json

@@ -1,11 +0,0 @@
-{
-    "name": "AdSubtract proxy",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "AdSubtract "
-        }
-    ]
-}

data/rules/fofa/AdaptCMS.json

@@ -1,20 +0,0 @@
-{
-    "name": "AdaptCMS",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "powered by"
-        },
-        {
-            "search": "body",
-            "text": "AdaptCMS"
-        },
-        {
-            "search": "headers",
-            "text": "adaptcms"
-        }
-    ],
-    "condition": "(0 and 1) or 2"
-}

data/rules/fofa/Adblock.json

@@ -1,11 +0,0 @@
-{
-    "name": "Adblock",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "X-Adblock-Key"
-        }
-    ]
-}

data/rules/fofa/Adcon Telemetry Gateway.json

@@ -1,15 +0,0 @@
-{
-    "name": "Adcon Telemetry Gateway",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "addUPI"
-        },
-        {
-            "search": "body",
-            "text": "Adcon Telemetry GmbH;"
-        }
-    ]
-}

data/rules/fofa/Adiscon_LogAnalyzer.json

@@ -1,20 +0,0 @@
-{
-    "name": "Adiscon_LogAnalyzer",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "title",
-            "regexp": "Adiscon LogAnalyzer"
-        },
-        {
-            "search": "body",
-            "text": "Adiscon LogAnalyzer"
-        },
-        {
-            "search": "body",
-            "text": "Adiscon GmbH"
-        }
-    ],
-    "condition": "0 or (1 and 2)"
-}

data/rules/fofa/Adobe Connect.json

@@ -1,15 +0,0 @@
-{
-    "name": "Adobe Connect",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "/common/scripts/showContent.js"
-        },
-        {
-            "search": "headers",
-            "text": "BREEZESESSION="
-        }
-    ]
-}

data/rules/fofa/Adobe-Flash.json

@@ -1,19 +0,0 @@
-{
-    "name": "Adobe-Flash",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "/x-shockwave-flash"
-        },
-        {
-            "search": "body",
-            "text": "/go/getflashplayer"
-        },
-        {
-            "search": "body",
-            "text": "embedswf"
-        }
-    ]
-}

data/rules/fofa/Adobe_ CQ5.json

@@ -1,11 +0,0 @@
-{
-    "name": "Adobe_ CQ5",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "_jcr_content"
-        }
-    ]
-}

data/rules/fofa/Adobe_GoLive.json

@@ -1,11 +0,0 @@
-{
-    "name": "Adobe_GoLive",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "generator\" content=\"Adobe GoLive"
-        }
-    ]
-}

data/rules/fofa/Adobe_RoboHelp.json

@@ -1,11 +0,0 @@
-{
-    "name": "Adobe_RoboHelp",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "generator\" content=\"Adobe RoboHelp"
-        }
-    ]
-}

data/rules/fofa/Advanced Electron Forum.json

@@ -1,19 +0,0 @@
-{
-    "name": "Advanced Electron Forum",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "Powered By AEF"
-        },
-        {
-            "search": "headers",
-            "text": "aefsid"
-        },
-        {
-            "search": "body",
-            "text": "content=\"aef"
-        }
-    ]
-}

data/rules/fofa/Advanced-Image-Hosting-Script.json

@@ -1,20 +0,0 @@
-{
-    "name": "Advanced-Image-Hosting-Script",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "Powered by"
-        },
-        {
-            "search": "body",
-            "text": "yabsoft.com"
-        },
-        {
-            "search": "body",
-            "text": "Welcome to install AIHS Script"
-        }
-    ],
-    "condition": "(0 and 1) or 2"
-}

data/rules/fofa/Advantech-WebAccess.json

@@ -1,19 +0,0 @@
-{
-    "name": "Advantech-WebAccess",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "/bw_templete1.dwt"
-        },
-        {
-            "search": "body",
-            "text": "/broadweb/WebAccessClientSetup.exe"
-        },
-        {
-            "search": "body",
-            "text": "/broadWeb/bwuconfig.asp"
-        }
-    ]
-}

data/rules/fofa/Aethra_Telecommunications_Operating_System.json

@@ -1,11 +0,0 @@
-{
-    "name": "Aethra_Telecommunications_Operating_System",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "atos"
-        }
-    ]
-}

data/rules/fofa/AfterLogic-WebMail.json

@@ -1,15 +0,0 @@
-{
-    "name": "AfterLogic-WebMail",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "title",
-            "regexp": "AfterLogic WebMail Pro"
-        },
-        {
-            "search": "headers",
-            "text": "PHPWEBMAILSESSID"
-        }
-    ]
-}

data/rules/fofa/AiCart.json

@@ -1,11 +0,0 @@
-{
-    "name": "AiCart",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "body",
-            "text": "APP_authenticate"
-        }
-    ]
-}

data/rules/fofa/Aicache.json

@@ -1,11 +0,0 @@
-{
-    "name": "Aicache",
-    "author": "fofa",
-    "version": "0.1.0",
-    "matches": [
-        {
-            "search": "headers",
-            "text": "X-Aicache"
-        }
-    ]
-}