Add Adminer fingerprints (#411)

rapid7 · Feb 16, 2022 · e354654 · e354654
2 parents cca1210 + d958bc8
commit e354654
Show file tree

Hide file tree

Showing 5 changed files with 29 additions and 1 deletion.
diff --git a/identifiers/service_product.txt b/identifiers/service_product.txt
@@ -20,6 +20,7 @@ Active Directory Controller
 Active Intelligence Engine
 ActiveMQ
 AdGuard Home
+Adminer
 AirTunes
 Airflow
 Alteon Web Switch

diff --git a/identifiers/vendor.txt b/identifiers/vendor.txt
@@ -36,6 +36,7 @@ Accelerated Technology
 AdGuard
 Adaptec
 AdminDroid
+Adminer
 Adobe
 Adtran
 Aerohive

diff --git a/xml/favicons.xml b/xml/favicons.xml
@@ -1970,4 +1970,12 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:phpmyadmin:phpmyadmin:-"/>
   </fingerprint>
 
+  <fingerprint pattern="^ded14e8b701325c527da56f86b5d5616$">
+    <description>Adminer database management tool</description>
+    <example>ded14e8b701325c527da56f86b5d5616</example>
+    <param pos="0" name="service.vendor" value="Adminer"/>
+    <param pos="0" name="service.product" value="Adminer"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:adminer:adminer:-"/>
+  </fingerprint>
+
 </fingerprints>
diff --git a/xml/html_title.xml b/xml/html_title.xml
@@ -3730,7 +3730,7 @@
     <param pos="0" name="service.product" value="Covenant"/>
   </fingerprint>
 
-  <fingerprint pattern="^Login | CALDERA$">
+  <fingerprint pattern="^Login \| CALDERA$">
     <description>MITRE CALDERA C2 framework</description>
     <example>Login | CALDERA</example>
     <param pos="0" name="service.vendor" value="MITRE"/>
@@ -3754,4 +3754,12 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:phpmyadmin:phpmyadmin:{service.version}"/>
   </fingerprint>
 
+  <fingerprint pattern="^Login - Adminer$">
+    <description>Adminer database management tool</description>
+    <example>Login - Adminer</example>
+    <param pos="0" name="service.vendor" value="Adminer"/>
+    <param pos="0" name="service.product" value="Adminer"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:adminer:adminer:-"/>
+  </fingerprint>
+
 </fingerprints>
diff --git a/xml/http_cookies.xml b/xml/http_cookies.xml
@@ -679,6 +679,16 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:phpmyadmin:phpmyadmin:-"/>
   </fingerprint>
 
+  <fingerprint pattern="^(adminer_(?:sid|key))=">
+    <description>Adminer database management tool</description>
+    <example cookie="adminer_sid">adminer_sid=6580f6449f9572f817ec99600bc619d2; path=/; HttpOnly</example>
+    <example cookie="adminer_key">adminer_key=b8eebd6de0deabc8b30c26a67e01c5b9; path=/; HttpOnly; SameSite=lax</example>
+    <param pos="1" name="cookie"/>
+    <param pos="0" name="service.vendor" value="Adminer"/>
+    <param pos="0" name="service.product" value="Adminer"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:adminer:adminer:-"/>
+  </fingerprint>
+
   <!--
         Ignore various cookies that are very generic cookies for session IDs
         that are not necessarily indicative of any particular
-Original file line number
+Diff line change
@@ Expand Up / @@ -36,6 +36,7 @@ Accelerated Technology @@
     AdGuard
     Adaptec
     AdminDroid
+    Adminer
     Adobe
     Adtran
     Aerohive
@@ Expand Down @@