sonar.js
sonar.js copied to clipboard
Schema Redesign
Updated JSON schema to remove ambiguity around what constitutes a "fingerprint," and allow for us to more easily add more attributes:
Single "Fingerprint" Object
{
"name": "ASUS RT-N66U",
"created": "2015-09-07 01:02:10.229153",
"resources": ["/images/New_ui/asustitle.png","/images/loading.gif","/images/alertImg.png","/images/New_ui/networkmap/line_one.png","/images/New_ui/networkmap/lock.png","/images/New_ui/networkmap/line_two.png","/index_style.css","/form_style.css","/NM_style.css","/other.css"],
}
- name is a string
- created is a UTC timestamp when the fingerprint was created
- resources is a list of strings, which are the paths of web resources we're going to attempt to scan for
List of Fingerprints
[
{
"name": "ASUS RT-N66U",
"created": "2015-09-07 01:02:10.229153",
"resources": ["/images/New_ui/asustitle.png","/images/loading.gif","/images/alertImg.png","/images/New_ui/networkmap/line_one.png","/images/New_ui/networkmap/lock.png","/images/New_ui/networkmap/line_two.png","/index_style.css","/form_style.css","/NM_style.css","/other.css"],
},
{
"name": "Linksys WRT54G",
"created": "2015-08-07 01:02:10.229153",
"resources": ["/UILinksys.gif","/UI_10.gif","/UI_07.gif","/UI_06.gif","/UI_03.gif","/UI_02.gif","/UI_Cisco.gif","/style.css"],
},
]
+1 for the new schema. An fingerprint object would allow the fingerprint to be more flexible like specifying IP addresses or ranges for a fingerprint, this could be useful for #10. It could also by used to specify the device is only accessible over https or to add a separate version field to help automate post discovery actions like exploitation.
[
{
"name": "Some device",
"version": "1.2.3",
"created": "2015-09-07 01:02:10.229153",
"resources": ["/someresource.css"],
"address": ["192.168.1.1"],
"protocol": "https",
},
]
Yep this is a good idea - I'll start coding on it today (thanks @moloch-- and @x0e-foobar)
Changed scheme to reflect what @moloch-- suggested, will add more functionality for things such as protocol and address soon :smile:
Google Chrome fingerprint generator update should be approval in an hour or two.
Adding a version is also a very good idea