Lusca-Web-Proxy-Cache.rb

##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
Plugin.define "Lusca-Web-Proxy-Cache" do
author "Brendan Coles <bcoles@gmail.com>" # 2011-05-31
version "0.1"
description "Lusca Web/Proxy Cache - Lusca is a fork of the Squid-2 development tree. The Lusca project aims to fix the shortcomings in the Squid-2 codebase whilst maintaining the the Squid-2 functionality and stability. Like its predecessor, Lusca supports the majority of HTTP/1.0 and HTTP/1.1 protocol and caching constructs including ETag/Variant entities. Among other things, it supports HTTP content load balancing, fail over, intelligent request/reply routing, high performance memory and disk caching, an overly-flexible access control system, support for both high performance forward and reverse proxy modes. It supports a variety of clustering protocols, including ICPv2, ICPv3, CARP and HTCP for both clustering and control. Lusca supports Cisco WCCPv2 interception in both software and hardware forwarding modes. Homepage: http://www.lusca.org/"

# ShodanHQ results as at 2011-05-31 #
# 4,889 for Lusca
#   331 for Lusca -HEAD

# Examples #
examples %w|
189.87.66.25
190.221.0.81
189.87.69.40
189.87.68.75
189.87.68.104
189.87.66.43
189.87.68.71
202.181.93.21
|

# Matches #
matches [

# HTTP Server Header
{ :search=>"headers[server]", :regexp=>/^Lusca$/ },

# Version Detection
{ :search=>"headers[server]", :version=>/^Lusca\/LUSCA_HEAD-([^\s]+)$/ },

]

end