add plugin: F5 FirePass

BloodyMouth · Apr 17, 2015 · de6b256 · de6b256
1 parent 0c88d9c
commit de6b256
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 15 deletions.
diff --git a/wafw00f/main.py b/wafw00f/main.py
@@ -276,20 +276,6 @@ def isf5trafficshield(self):
             return True
         return False
 
-    def isf5firepass(self):
-        detected = False
-        if self.matchheader(('Location', '\/my\.logon\.php3')) and self.matchcookie('^VHOST'):
-            return True
-        elif self.matchcookie('^MRHSession') and (self.matchcookie('^VHOST') or self.matchcookie('^uRoamTestCookie')):
-            return True
-        elif self.matchcookie('^MRHSession') and (self.matchcookie('^MRHCId') or self.matchcookie('^MRHIntranetSession')):
-            return True
-        elif self.matchcookie('^uRoamTestCookie') or self.matchcookie('^VHOST'):
-            return True
-        else:
-            return False
-
-
     def matchcookie(self, match):
         """
         a convenience function which calls matchheader
@@ -335,7 +321,6 @@ def ismodsecuritypositive(self):
 
     wafdetections = dict()
     # easy ones
-    wafdetections['F5 FirePass'] = isf5firepass
     wafdetections['F5 Trafficshield'] = isf5trafficshield
     # lil bit more complex
     #wafdetections['BeeWare'] = isbeeware

diff --git a/wafw00f/plugins/f5firepass.py b/wafw00f/plugins/f5firepass.py
@@ -0,0 +1,18 @@
+#!/usr/bin/env python
+
+
+NAME = 'F5 FirePass'
+
+
+def is_waf(self):
+    detected = False
+    if self.matchheader(('Location', '\/my\.logon\.php3')) and self.matchcookie('^VHOST'):
+        return True
+    elif self.matchcookie('^MRHSession') and (self.matchcookie('^VHOST') or self.matchcookie('^uRoamTestCookie')):
+        return True
+    elif self.matchcookie('^MRHSession') and (self.matchcookie('^MRHCId') or self.matchcookie('^MRHIntranetSession')):
+        return True
+    elif self.matchcookie('^uRoamTestCookie') or self.matchcookie('^VHOST'):
+        return True
+    else:
+        return False