Plugins Development

Jump to bottom Edit New page

bcoles edited this page Jan 26, 2011 · 4 revisions

Development Tools

A number of tools are provided with WhatWeb in the ./plugin-development/ directory to simplify plugin creation and testing :

wget-alexa-top-1m (Download and extract the Alexa top one million domains in newline format)
wget-list (Downloads each URL's html and headers into the current directory)
find-common-stuff (Helper for plugin research - identify common tags, paths / quoted text in tags, link text)
get-pattern (Page Pattern Generator - Feed a url - Get its tag pattern that's ready to use in your plugin)
wikipedia-top-1000.txt (Top 1,000 domains linked from Wikipedia)
alexa-top-100.txt (Top 100 Alexa domain
alexa-top-1000.txt (Top 1,000 Alexa domains)

Unallocated

Proposed tools for WhatWeb plugin development and automation :

nikto-2-whatweb (convert nikto db_tests to whatweb compatible plugin)
metasploit-2-whatweb (convert metasploit web check to whatweb compatible plugin)
wafp-2-whatweb

Allocated

bcoles

whatweb-to-metasploit

Pre-requisites : CVE arrays in WhatWeb plugins for reporting

Description : Search Metasploit for the CVE and parse the URL for exploitation.