Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add egale eye networks fingerprint #235

Merged

Conversation

ssikdar-r7
Copy link
Contributor

@ssikdar-r7 ssikdar-r7 commented Jun 14, 2019

Description

This PR adds HTML TITLE fingerprints for Eagle Eye Networks for their Cloud Video Surveillance System. ( https://www.een.com/product/cloud-vms-system-overview/ )

Motivation and Context

For example for /:

$ curl -sk  https://<redacted host>/ 
<!doctype html>

<html lang="en">
<head>
    <meta charset="utf-8">

    <title>Web Local Display Unauthorized</title>
    <meta name="description" content="Bridge local login error">
    <meta name="author" content="EagleEyeNetworks">
    <link rel="icon" href="_images/favicon.ico" />
    <link rel="stylesheet" href="_css/error_style.css">
    <link rel="stylesheet" href="_css/bootstrap.min.css">
</head>

<body>
    <div align="center" class="container">
         <img src="_images/logo_large.png"/>
         <hr>
         <p class="red">The user name and password that you have entered are incorrect.</p>
    </div> 
</body>
</html>

Similarly for index.html:

$ curl -sk  https://<redacted host>/index.html | perl -l -0777 -ne 'print $1 if /<title.*?>\s*(.*?)\s*<\/title/si'
Eagle Eye Networks (Local)

How Has This Been Tested?

$ curl -sk  https://<redacted host>/index.html | perl -l -0777 -ne 'print $1 if /<title.*?>\s*(.*?)\s*<\/title/si' | ./bin/recog_match ./xml/html_title.xml
MATCH: {"matched"=>"EagleEyeNetworks to manage IoT cameras home webpage", "hw.product"=>"Cloud Video Surveillance System", "hw.vendor"=>"Eagle Eye Networks", "service.protocol"=>"", "fingerprint_db"=>"html_title", "data"=>"Eagle Eye Networks (Local)"}
$ curl -sk  https://<redacted host>/ | perl -l -0777 -ne 'print $1 if /<title.*?>\s*(.*?)\s*<\/title/si' | ./bin/recog_match ./xml/html_title.xml
MATCH: {"matched"=>"EagleEyeNetworks to manage IoT cameras unauthorized webpage", "hw.product"=>"Cloud Video Surveillance System", "hw.vendor"=>"Eagle Eye Networks", "service.protocol"=>"", "fingerprint_db"=>"html_title", "data"=>"Web Local Display Unauthorized"}

Types of changes

  • New feature (non-breaking change which adds functionality)
    ( its a change to html_title.xml )

Checklist:

  • [ not required] I have updated the documentation accordingly (or changes are not required).
  • [not required ] I have added tests to cover my changes (or new tests are not required).
  • [X ] All new and existing tests passed.
9 scenarios (9 passed)
20 steps (20 passed)
0m12.480s

@ssikdar-r7 ssikdar-r7 requested a review from jhart-r7 June 14, 2019 14:42
@ssikdar-r7 ssikdar-r7 marked this pull request as ready for review June 14, 2019 14:45
xml/html_title.xml Outdated Show resolved Hide resolved
xml/html_title.xml Outdated Show resolved Hide resolved
xml/html_title.xml Outdated Show resolved Hide resolved
xml/html_title.xml Outdated Show resolved Hide resolved
@tsellers-r7 tsellers-r7 merged commit 70d4814 into rapid7:master Feb 26, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants