新增Webanalyzer模块

data/rules/fofa/.NET.json

@@ -0,0 +1,11 @@
+{
+    "name": ".NET",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "content=\"Visual Basic .NET 7.1"
+        }
+    ]
+}

data/rules/fofa/08cms.json

@@ -0,0 +1,15 @@
+{
+    "name": "08cms",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "content=\"08CMS"
+        },
+        {
+            "search": "body",
+            "text": "typeof(_08cms)"
+        }
+    ]
+}

data/rules/fofa/1024 CMS.json

@@ -0,0 +1,15 @@
+{
+    "name": "1024 CMS",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "Powered by 1024 CMS"
+        },
+        {
+            "search": "body",
+            "text": "content=\"1024 CMS"
+        }
+    ]
+}

data/rules/fofa/1024cms.json

@@ -0,0 +1,15 @@
+{
+    "name": "1024cms",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "Powered by 1024 CMS"
+        },
+        {
+            "search": "body",
+            "text": "generator\" content=\"1024 CMS (c)"
+        }
+    ]
+}

data/rules/fofa/171cms.json

@@ -0,0 +1,15 @@
+{
+    "name": "171cms",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "content=\"171cms"
+        },
+        {
+            "search": "title",
+            "regexp": "171cms"
+        }
+    ]
+}

data/rules/fofa/1und1.json

@@ -0,0 +1,11 @@
+{
+    "name": "1und1",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "/shop/catalog/browse?sessid="
+        }
+    ]
+}

data/rules/fofa/25yi.json

@@ -0,0 +1,15 @@
+{
+    "name": "25yi",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "Powered by 25yi"
+        },
+        {
+            "search": "body",
+            "text": "css/25yi.css"
+        }
+    ]
+}

data/rules/fofa/2z project.json

@@ -0,0 +1,11 @@
+{
+    "name": "2z project",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "Generator\" content=\"2z project"
+        }
+    ]
+}

data/rules/fofa/313自助建站.json

@@ -0,0 +1,11 @@
+{
+    "name": "313\u81ea\u52a9\u5efa\u7ad9",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "313CMS"
+        }
+    ]
+}

data/rules/fofa/360webfacil_360WebManager.json

@@ -0,0 +1,20 @@
+{
+    "name": "360webfacil_360WebManager",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "publico/template/"
+        },
+        {
+            "search": "body",
+            "text": "zonapie"
+        },
+        {
+            "search": "body",
+            "text": "360WebManager Software"
+        }
+    ],
+    "condition": "(0 and 1) or 2"
+}

data/rules/fofa/360主机卫士.json

@@ -0,0 +1,11 @@
+{
+    "name": "360\u4e3b\u673a\u536b\u58eb",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "X-Safe-Firewall"
+        }
+    ]
+}

data/rules/fofa/360企业版.json

@@ -0,0 +1,11 @@
+{
+    "name": "360\u4f01\u4e1a\u7248",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "360EntInst"
+        }
+    ]
+}

data/rules/fofa/360站长平台.json

@@ -0,0 +1,11 @@
+{
+    "name": "360\u7ad9\u957f\u5e73\u53f0",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "360-site-verification"
+        }
+    ]
+}

data/rules/fofa/360网站卫士.json

@@ -0,0 +1,11 @@
+{
+    "name": "360\u7f51\u7ad9\u536b\u58eb",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "360wzb"
+        }
+    ]
+}

data/rules/fofa/360网站卫士常用前端公共库.json

@@ -0,0 +1,15 @@
+{
+    "name": "360\u7f51\u7ad9\u536b\u58eb\u5e38\u7528\u524d\u7aef\u516c\u5171\u5e93",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "libs.useso.com"
+        },
+        {
+            "search": "body",
+            "text": "libs.useso.com"
+        }
+    ]
+}

data/rules/fofa/360网站安全检测.json

@@ -0,0 +1,11 @@
+{
+    "name": "360\u7f51\u7ad9\u5b89\u5168\u68c0\u6d4b",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "webscan.360.cn/status/pai/hash"
+        }
+    ]
+}

data/rules/fofa/3COM NBX.json

@@ -0,0 +1,15 @@
+{
+    "name": "3COM NBX",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "title",
+            "regexp": "NBX NetSet"
+        },
+        {
+            "search": "body",
+            "text": "splashTitleIPTelephony"
+        }
+    ]
+}

data/rules/fofa/3COM_NBX.json

@@ -0,0 +1,20 @@
+{
+    "name": "3COM_NBX",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "title",
+            "regexp": "NBX NetSet"
+        },
+        {
+            "search": "headers",
+            "text": "Alternates"
+        },
+        {
+            "search": "body",
+            "text": "NBX"
+        }
+    ],
+    "condition": "0 or (1 and 2)"
+}

data/rules/fofa/3dcart.json

@@ -0,0 +1,23 @@
+{
+    "name": "3dcart",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "powered by 3dcart"
+        },
+        {
+            "search": "headers",
+            "text": "3dvisit"
+        },
+        {
+            "search": "body",
+            "text": "<!--START: 3dcart stats-->"
+        },
+        {
+            "search": "headers",
+            "text": "X-Powered-By: 3DCART"
+        }
+    ]
+}

data/rules/fofa/4D.json

@@ -0,0 +1,11 @@
+{
+    "name": "4D",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "Server:4D"
+        }
+    ]
+}

data/rules/fofa/4images.json

@@ -0,0 +1,24 @@
+{
+    "name": "4images",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "powered by 4images"
+        },
+        {
+            "search": "headers",
+            "text": "4images_"
+        },
+        {
+            "search": "body",
+            "text": "Copyright"
+        },
+        {
+            "search": "body",
+            "text": "4homepages.de"
+        }
+    ],
+    "condition": "0 or 1 or (2 and 3)"
+}

data/rules/fofa/51la.json

@@ -0,0 +1,11 @@
+{
+    "name": "51la",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "js.users.51.la"
+        }
+    ]
+}

data/rules/fofa/51yes.json

@@ -0,0 +1,11 @@
+{
+    "name": "51yes",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "51yes.com/click.aspx"
+        }
+    ]
+}

data/rules/fofa/53客服.json

@@ -0,0 +1,11 @@
+{
+    "name": "53\u5ba2\u670d",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "tb.53kf.com/code/"
+        }
+    ]
+}

data/rules/fofa/68 Classifieds.json

@@ -0,0 +1,16 @@
+{
+    "name": "68 Classifieds",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "powered by"
+        },
+        {
+            "search": "body",
+            "text": "68 Classifieds"
+        }
+    ],
+    "condition": "0 and 1"
+}

data/rules/fofa/6kbbs.json

@@ -0,0 +1,15 @@
+{
+    "name": "6kbbs",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "Powered by 6kbbs"
+        },
+        {
+            "search": "body",
+            "text": "generator\" content=\"6KBBS"
+        }
+    ]
+}

data/rules/fofa/74cms.json

@@ -0,0 +1,28 @@
+{
+    "name": "74cms",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "content=\"74cms.com"
+        },
+        {
+            "search": "body",
+            "text": "content=\"\u9a91\u58ebCMS"
+        },
+        {
+            "search": "body",
+            "text": "Powered by <a href=\"http://www.74cms.com/\""
+        },
+        {
+            "search": "body",
+            "text": "/templates/default/css/common.css"
+        },
+        {
+            "search": "body",
+            "text": "selectjobscategory"
+        }
+    ],
+    "condition": "0 or 1 or 2 or (3 and 4)"
+}

data/rules/fofa/78oa.json

@@ -0,0 +1,23 @@
+{
+    "name": "78oa",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "/resource/javascript/system/runtime.min.js"
+        },
+        {
+            "search": "body",
+            "text": "license.78oa.com"
+        },
+        {
+            "search": "title",
+            "regexp": "78oa"
+        },
+        {
+            "search": "body",
+            "text": "src=\"/module/index.php"
+        }
+    ]
+}

data/rules/fofa/ABO.CMS.json

@@ -0,0 +1,11 @@
+{
+    "name": "ABO.CMS",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "ABO.CMS"
+        }
+    ]
+}

data/rules/fofa/ABO_CMS.json

@@ -0,0 +1,11 @@
+{
+    "name": "ABO_CMS",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "a-powered-by"
+        }
+    ]
+}

data/rules/fofa/ACSNO网络探针.json

@@ -0,0 +1,11 @@
+{
+    "name": "ACSNO\u7f51\u7edc\u63a2\u9488",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "title",
+            "regexp": "\u63a2\u9488\u7ba1\u7406\u4e0e\u6d4b\u8bd5\u7cfb\u7edf-\u767b\u5f55\u754c\u9762"
+        }
+    ]
+}

data/rules/fofa/ACTi.json

@@ -0,0 +1,15 @@
+{
+    "name": "ACTi",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "title",
+            "regexp": "Web Configurator"
+        },
+        {
+            "search": "body",
+            "text": "ACTi Corporation All Rights Reserved"
+        }
+    ]
+}

data/rules/fofa/AChecker Web accessibility evaluation tool.json

@@ -0,0 +1,15 @@
+{
+    "name": "AChecker Web accessibility evaluation tool",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "content=\"AChecker is a Web accessibility"
+        },
+        {
+            "search": "title",
+            "regexp": "Checker : Web Accessibility Checker"
+        }
+    ]
+}

data/rules/fofa/ADTRAN-Device.json

@@ -0,0 +1,15 @@
+{
+    "name": "ADTRAN-Device",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "ADTRAN"
+        },
+        {
+            "search": "headers",
+            "text": "NetVanta"
+        }
+    ]
+}

data/rules/fofa/ADXStudio CMS.json

@@ -0,0 +1,19 @@
+{
+    "name": "ADXStudio CMS",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "Powered by Adxstudio"
+        },
+        {
+            "search": "body",
+            "text": "poweredbyadx.png"
+        },
+        {
+            "search": "headers",
+            "text": "anonprofile"
+        }
+    ]
+}

data/rules/fofa/AD_RS设备.json

@@ -0,0 +1,11 @@
+{
+    "name": "AD_RS\u8bbe\u5907",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "AD_RS_COOKIE"
+        }
+    ]
+}

data/rules/fofa/AIDeX.json

@@ -0,0 +1,20 @@
+{
+    "name": "AIDeX",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "aidex"
+        },
+        {
+            "search": "body",
+            "text": "Powered by"
+        },
+        {
+            "search": "body",
+            "text": "http://www.aidex.de/"
+        }
+    ],
+    "condition": "0 or (1 and 2)"
+}

data/rules/fofa/AJA-Video-Converter.json

@@ -0,0 +1,11 @@
+{
+    "name": "AJA-Video-Converter",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "eParamID_SWVersion"
+        }
+    ]
+}

data/rules/fofa/ALCASAR.json

@@ -0,0 +1,11 @@
+{
+    "name": "ALCASAR",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "valoriserDiv5"
+        }
+    ]
+}

data/rules/fofa/AM4SS.json

@@ -0,0 +1,15 @@
+{
+    "name": "AM4SS",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "Powered by am4ss"
+        },
+        {
+            "search": "body",
+            "text": "am4ss.css"
+        }
+    ]
+}

data/rules/fofa/AMR-WinControl.json

@@ -0,0 +1,11 @@
+{
+    "name": "AMR-WinControl",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "AMR_WinControl"
+        }
+    ]
+}

data/rules/fofa/ANECMS.json

@@ -0,0 +1,11 @@
+{
+    "name": "ANECMS",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "content=\"Erwin Aligam - ealigam@gmail.com"
+        }
+    ]
+}

data/rules/fofa/AOLserver.json

@@ -0,0 +1,11 @@
+{
+    "name": "AOLserver",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "AOLserver"
+        }
+    ]
+}

data/rules/fofa/AP-Router.json

@@ -0,0 +1,11 @@
+{
+    "name": "AP-Router",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "title",
+            "regexp": "AP Router New Generation"
+        }
+    ]
+}

data/rules/fofa/APC-UPS-Management-Card.json

@@ -0,0 +1,15 @@
+{
+    "name": "APC-UPS-Management-Card",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "APC Management Card"
+        },
+        {
+            "search": "body",
+            "text": "class=\"apclogo\""
+        }
+    ]
+}

data/rules/fofa/APC_Management.json

@@ -0,0 +1,15 @@
+{
+    "name": "APC_Management",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "APC Management Card"
+        },
+        {
+            "search": "body",
+            "text": "This object on the APC Management Web Server is protected"
+        }
+    ]
+}

data/rules/fofa/ARN01154U4.json

@@ -0,0 +1,11 @@
+{
+    "name": "ARN01154U4",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "ARN01154U4"
+        }
+    ]
+}

data/rules/fofa/ARRIS-Touchstone-Router.json

@@ -0,0 +1,20 @@
+{
+    "name": "ARRIS-Touchstone-Router",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "Copyright"
+        },
+        {
+            "search": "body",
+            "text": "ARRIS Group"
+        },
+        {
+            "search": "body",
+            "text": "/arris_style.css"
+        }
+    ],
+    "condition": "(0 and 1) or 2"
+}

data/rules/fofa/ASP-Nuke.json

@@ -0,0 +1,15 @@
+{
+    "name": "ASP-Nuke",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "CONTENT=\"ASP-Nuke"
+        },
+        {
+            "search": "body",
+            "text": "content=\"ASPNUKE"
+        }
+    ]
+}

data/rules/fofa/ASP.NET MVC.json

@@ -0,0 +1,11 @@
+{
+    "name": "ASP.NET MVC",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "Aspnetmvc"
+        }
+    ]
+}

data/rules/fofa/ASP.NET Version.json

@@ -0,0 +1,11 @@
+{
+    "name": "ASP.NET Version",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "X-Aspnet-Version"
+        }
+    ]
+}

data/rules/fofa/ASP.NET.json

@@ -0,0 +1,11 @@
+{
+    "name": "ASP.NET",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "X-Powered-By: ASP.NET"
+        }
+    ]
+}

data/rules/fofa/ASP.json

@@ -0,0 +1,11 @@
+{
+    "name": "ASP",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "X-Powered-By: ASP"
+        }
+    ]
+}

data/rules/fofa/ASPCMS.json

@@ -0,0 +1,19 @@
+{
+    "name": "ASPCMS",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "title",
+            "regexp": "Powered by ASPCMS"
+        },
+        {
+            "search": "body",
+            "text": "content=\"ASPCMS"
+        },
+        {
+            "search": "body",
+            "text": "/inc/AspCms_AdvJs.asp"
+        }
+    ]
+}

data/rules/fofa/ASPThai_Net-Webboard.json

@@ -0,0 +1,11 @@
+{
+    "name": "ASPThai_Net-Webboard",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "ASPThai.Net Webboard"
+        }
+    ]
+}

data/rules/fofa/ASPilot-Cart.json

@@ -0,0 +1,15 @@
+{
+    "name": "ASPilot-Cart",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "content=\"Pilot Cart"
+        },
+        {
+            "search": "body",
+            "text": "/pilot_css_default.css"
+        }
+    ]
+}

data/rules/fofa/ASProxy.json

@@ -0,0 +1,15 @@
+{
+    "name": "ASProxy",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "Surf the web invisibly using ASProxy power"
+        },
+        {
+            "search": "body",
+            "text": "btnASProxyDisplayButton"
+        }
+    ]
+}

data/rules/fofa/ASUS_RTAC66U.json

@@ -0,0 +1,15 @@
+{
+    "name": "ASUS_RTAC66U",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "RT-AC66U"
+        },
+        {
+            "search": "headers",
+            "text": "RT-AC66U"
+        }
+    ]
+}

data/rules/fofa/ATutor elearning.json

@@ -0,0 +1,19 @@
+{
+    "name": "ATutor elearning",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "content=\"ATutor"
+        },
+        {
+            "search": "headers",
+            "text": "ATutorID"
+        },
+        {
+            "search": "body",
+            "text": "ATutor.course"
+        }
+    ]
+}

data/rules/fofa/AV-Arcade.json

@@ -0,0 +1,11 @@
+{
+    "name": "AV-Arcade",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "Powered by <a href=\"http://www.avscripts.net/avarcade/"
+        }
+    ]
+}

data/rules/fofa/AVCON6.json

@@ -0,0 +1,19 @@
+{
+    "name": "AVCON6",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "filename=AVCON6Setup.exe"
+        },
+        {
+            "search": "title",
+            "regexp": "AVCON6\u7cfb\u7edf\u7ba1\u7406\u5e73\u53f0"
+        },
+        {
+            "search": "body",
+            "text": "language_dispose.action"
+        }
+    ]
+}

data/rules/fofa/AVTech-Video-Web-Server.json

@@ -0,0 +1,19 @@
+{
+    "name": "AVTech-Video-Web-Server",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "title",
+            "regexp": "--- VIDEO WEB SERVER ---"
+        },
+        {
+            "search": "body",
+            "text": "/AV732E/setup.exe"
+        },
+        {
+            "search": "headers",
+            "text": "Server: AV-TECH"
+        }
+    ]
+}

data/rules/fofa/AWStats网站日志分析工具.json

@@ -0,0 +1,15 @@
+{
+    "name": "AWStats\u7f51\u7ad9\u65e5\u5fd7\u5206\u6790\u5de5\u5177",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "content=\"AWStats"
+        },
+        {
+            "search": "body",
+            "text": "Created by awstats"
+        }
+    ]
+}

data/rules/fofa/Aardvark Topsites.json

@@ -0,0 +1,16 @@
+{
+    "name": "Aardvark Topsites",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "Powered by"
+        },
+        {
+            "search": "body",
+            "text": "Aardvark Topsites"
+        }
+    ],
+    "condition": "0 and 1"
+}

data/rules/fofa/Abyss.json

@@ -0,0 +1,11 @@
+{
+    "name": "Abyss",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "Server: Abyss"
+        }
+    ]
+}

data/rules/fofa/Accellion Secure File Transfer.json

@@ -0,0 +1,15 @@
+{
+    "name": "Accellion Secure File Transfer",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "sfcurl=deleted;"
+        },
+        {
+            "search": "body",
+            "text": "Secured by Accellion"
+        }
+    ]
+}

data/rules/fofa/Access-Control.json

@@ -0,0 +1,11 @@
+{
+    "name": "Access-Control",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "Access-Control-Allow-Methods"
+        }
+    ]
+}

data/rules/fofa/Accordion Content script.json

@@ -0,0 +1,11 @@
+{
+    "name": "Accordion Content script",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "ddaccordion.js"
+        }
+    ]
+}

data/rules/fofa/Acidcat CMS.json

@@ -0,0 +1,19 @@
+{
+    "name": "Acidcat CMS",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "Powered by Acidcat CMS"
+        },
+        {
+            "search": "body",
+            "text": "Start Acidcat CMS footer information"
+        },
+        {
+            "search": "body",
+            "text": "/css/admin_import.css"
+        }
+    ]
+}

data/rules/fofa/Acidcat_CMS.json

@@ -0,0 +1,15 @@
+{
+    "name": "Acidcat_CMS",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "Start Acidcat CMS footer information"
+        },
+        {
+            "search": "body",
+            "text": "Powered by Acidcat CMS"
+        }
+    ]
+}

data/rules/fofa/Acme embeddable HTTP server.json

@@ -0,0 +1,11 @@
+{
+    "name": "Acme embeddable HTTP server",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "Server: Acme"
+        }
+    ]
+}

data/rules/fofa/ActiveHTML.json

@@ -0,0 +1,11 @@
+{
+    "name": "ActiveHTML",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "ActiveHTML"
+        }
+    ]
+}

data/rules/fofa/AdSubtract proxy.json

@@ -0,0 +1,11 @@
+{
+    "name": "AdSubtract proxy",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "AdSubtract "
+        }
+    ]
+}

data/rules/fofa/AdaptCMS.json

@@ -0,0 +1,20 @@
+{
+    "name": "AdaptCMS",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "powered by"
+        },
+        {
+            "search": "body",
+            "text": "AdaptCMS"
+        },
+        {
+            "search": "headers",
+            "text": "adaptcms"
+        }
+    ],
+    "condition": "(0 and 1) or 2"
+}

data/rules/fofa/Adblock.json

@@ -0,0 +1,11 @@
+{
+    "name": "Adblock",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "X-Adblock-Key"
+        }
+    ]
+}

data/rules/fofa/Adcon Telemetry Gateway.json

@@ -0,0 +1,15 @@
+{
+    "name": "Adcon Telemetry Gateway",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "addUPI"
+        },
+        {
+            "search": "body",
+            "text": "Adcon Telemetry GmbH;"
+        }
+    ]
+}

data/rules/fofa/Adiscon_LogAnalyzer.json

@@ -0,0 +1,20 @@
+{
+    "name": "Adiscon_LogAnalyzer",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "title",
+            "regexp": "Adiscon LogAnalyzer"
+        },
+        {
+            "search": "body",
+            "text": "Adiscon LogAnalyzer"
+        },
+        {
+            "search": "body",
+            "text": "Adiscon GmbH"
+        }
+    ],
+    "condition": "0 or (1 and 2)"
+}

data/rules/fofa/Adobe Connect.json

@@ -0,0 +1,15 @@
+{
+    "name": "Adobe Connect",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "/common/scripts/showContent.js"
+        },
+        {
+            "search": "headers",
+            "text": "BREEZESESSION="
+        }
+    ]
+}

data/rules/fofa/Adobe-Flash.json

@@ -0,0 +1,19 @@
+{
+    "name": "Adobe-Flash",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "/x-shockwave-flash"
+        },
+        {
+            "search": "body",
+            "text": "/go/getflashplayer"
+        },
+        {
+            "search": "body",
+            "text": "embedswf"
+        }
+    ]
+}

data/rules/fofa/Adobe_ CQ5.json

@@ -0,0 +1,11 @@
+{
+    "name": "Adobe_ CQ5",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "_jcr_content"
+        }
+    ]
+}

data/rules/fofa/Adobe_GoLive.json

@@ -0,0 +1,11 @@
+{
+    "name": "Adobe_GoLive",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "generator\" content=\"Adobe GoLive"
+        }
+    ]
+}

data/rules/fofa/Adobe_RoboHelp.json

@@ -0,0 +1,11 @@
+{
+    "name": "Adobe_RoboHelp",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "generator\" content=\"Adobe RoboHelp"
+        }
+    ]
+}

data/rules/fofa/Advanced Electron Forum.json

@@ -0,0 +1,19 @@
+{
+    "name": "Advanced Electron Forum",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "Powered By AEF"
+        },
+        {
+            "search": "headers",
+            "text": "aefsid"
+        },
+        {
+            "search": "body",
+            "text": "content=\"aef"
+        }
+    ]
+}

data/rules/fofa/Advanced-Image-Hosting-Script.json

@@ -0,0 +1,20 @@
+{
+    "name": "Advanced-Image-Hosting-Script",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "Powered by"
+        },
+        {
+            "search": "body",
+            "text": "yabsoft.com"
+        },
+        {
+            "search": "body",
+            "text": "Welcome to install AIHS Script"
+        }
+    ],
+    "condition": "(0 and 1) or 2"
+}

data/rules/fofa/Advantech-WebAccess.json

@@ -0,0 +1,19 @@
+{
+    "name": "Advantech-WebAccess",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "/bw_templete1.dwt"
+        },
+        {
+            "search": "body",
+            "text": "/broadweb/WebAccessClientSetup.exe"
+        },
+        {
+            "search": "body",
+            "text": "/broadWeb/bwuconfig.asp"
+        }
+    ]
+}

data/rules/fofa/Aethra_Telecommunications_Operating_System.json

@@ -0,0 +1,11 @@
+{
+    "name": "Aethra_Telecommunications_Operating_System",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "atos"
+        }
+    ]
+}

data/rules/fofa/AfterLogic-WebMail.json

@@ -0,0 +1,15 @@
+{
+    "name": "AfterLogic-WebMail",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "title",
+            "regexp": "AfterLogic WebMail Pro"
+        },
+        {
+            "search": "headers",
+            "text": "PHPWEBMAILSESSID"
+        }
+    ]
+}

data/rules/fofa/AiCart.json

@@ -0,0 +1,11 @@
+{
+    "name": "AiCart",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "APP_authenticate"
+        }
+    ]
+}

data/rules/fofa/Aicache.json

@@ -0,0 +1,11 @@
+{
+    "name": "Aicache",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "X-Aicache"
+        }
+    ]
+}

data/rules/fofa/AirLink_modem.json

@@ -0,0 +1,11 @@
+{
+    "name": "AirLink_modem",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "Modem@AirLink.com"
+        }
+    ]
+}

data/rules/fofa/AirOS.json

@@ -0,0 +1,15 @@
+{
+    "name": "AirOS",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "AIROS_SESSIONID"
+        },
+        {
+            "search": "headers",
+            "text": "cookiechecker?uri="
+        }
+    ]
+}

data/rules/fofa/AirTiesRouter.json

@@ -0,0 +1,11 @@
+{
+    "name": "AirTiesRouter",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "title",
+            "regexp": "Airties"
+        }
+    ]
+}

data/rules/fofa/AirvaeCommerce.json

@@ -0,0 +1,11 @@
+{
+    "name": "AirvaeCommerce",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "E-Commerce Shopping Cart Software"
+        }
+    ]
+}

data/rules/fofa/Akamai.json

@@ -0,0 +1,11 @@
+{
+    "name": "Akamai",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "X-Akamai-Transformed"
+        }
+    ]
+}

data/rules/fofa/Akiva-WebBoard.json

@@ -0,0 +1,15 @@
+{
+    "name": "Akiva-WebBoard",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "Powered by WebBoard"
+        },
+        {
+            "search": "headers",
+            "text": "webboard="
+        }
+    ]
+}

data/rules/fofa/Aladdin-HASP-License-Manager.json

@@ -0,0 +1,11 @@
+{
+    "name": "Aladdin-HASP-License-Manager",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "HASP"
+        }
+    ]
+}

data/rules/fofa/AllNewsManager_NET.json

@@ -0,0 +1,16 @@
+{
+    "name": "AllNewsManager_NET",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "Powered by"
+        },
+        {
+            "search": "body",
+            "text": "AllNewsManager"
+        }
+    ],
+    "condition": "0 and 1"
+}

data/rules/fofa/Allegro-Software-RomPager.json

@@ -0,0 +1,11 @@
+{
+    "name": "Allegro-Software-RomPager",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "headers",
+            "text": "Allegro-Software-RomPager"
+        }
+    ]
+}

data/rules/fofa/Allomani.json

@@ -0,0 +1,15 @@
+{
+    "name": "Allomani",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "content=\"Allomani"
+        },
+        {
+            "search": "body",
+            "text": "Programmed By Allomani"
+        }
+    ]
+}

data/rules/fofa/AlloyUI.json

@@ -0,0 +1,11 @@
+{
+    "name": "AlloyUI",
+    "author": "fofa",
+    "version": "0.1.0",
+    "matches": [
+        {
+            "search": "body",
+            "text": "cdn.alloyui.com"
+        }
+    ]
+}