title: ÐÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸Ðµ Ð¢Ð¾Ð¼Ð¸ÑÑ-Ð¿Ð°ÑÑÐµÑÐ° Ð´Ð»Ñ Ð¸Ð´ÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸ Ð²ÐµÐ± Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ð¹
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° Ð±Ð°ÐºÐ°Ð»Ð°Ð²ÑÐ°
titleType: Subtitle
title: Using Tomita-parser to identify web applications
Creators: name: ÐÐ¾ÑÐ¸ÑÐ¾Ð², ÐÐ½Ð´ÑÐµÐ¹
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2020
Subjects: ÑÐ¸Ð½Ð³ÐµÑÐ¿ÑÐ¸Ð½ÑÐ¸Ð½Ð³
Ð¸Ð´ÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ñ Ð²ÐµÐ±-Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ð¹
Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ðµ Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð¸Ð´ÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸ Ð²ÐµÐ±-Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ð¹
ÑÑÐµÐ´ÑÑÐ²Ð° Ð¸Ð´ÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸ Ð²ÐµÐ±-Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ð¹
Ð¢Ð¾Ð¼Ð¸ÑÐ°-Ð¿Ð°ÑÑÐµÑ
fingerprinting
Web Application Identity
Web Application Identity Research
Web Application Identity Tools
Tomita-parser

description: ÐÐ°Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° Ð¿Ð¾ÑÐ²ÑÑÐµÐ½Ð° Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÑÑÐµÑÑÐ²ÑÑÑÐ¸Ñ Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð¸Ð´ÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸ Ð²ÐµÐ±-Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ð¹. ÐÑÐµÐ³Ð¾ Ð±ÑÐ»Ð¾ Ð²ÑÐ´ÐµÐ»ÐµÐ½Ð¾ 4 Ð¾ÑÐ½Ð¾Ð²Ð½ÑÑ Ð¼ÐµÑÐ¾Ð´Ð° Ð¸Ð´ÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸: ÑÐ±Ð¾Ñ Ð±Ð°Ð½Ð½ÐµÑÐ¾Ð² ÑÐµÑÐ²ÐµÑÐ°, ÑÑÑÐ½Ð¾Ð¹ Ð°Ð½Ð°Ð»Ð¸Ð· ÑÐ¸ÑÑÐµÐ¼Ñ, Ð°ÐºÑÐ¸Ð²Ð½Ð¾Ðµ Ð¸ Ð¿Ð°ÑÑÐ¸Ð²Ð½Ð¾Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ðµ ÑÐµÐ°Ð»Ð¸Ð·Ð°ÑÐ¸Ð¸ Ð¿ÑÐ¾ÑÐ¾ÐºÐ¾Ð»Ð¾Ð², Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ðµ ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ñ ÑÐ°ÑÐ°ÐºÑÐµÑÐ¸ÑÑÐ¸Ðº ÑÐ¸ÑÑÐµÐ¼Ñ Ð¸ Ð¿ÑÐ¾Ð²ÐµÑÐºÐ° Ð´Ð°Ð½Ð½ÑÑ HTML. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½ Ð¼ÐµÑÐ¾Ð´ Ð°Ð²ÑÐ¾Ð¼Ð°ÑÐ¸Ð·Ð°ÑÐ¸Ð¸ ÑÑÑÐ½Ð¾Ð³Ð¾ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð¿ÑÐ¾Ð²ÐµÑÐºÐ¸ Ð´Ð°Ð½Ð½ÑÑ HTML. ÐÑÐ¾Ð¼Ðµ ÑÐ¾Ð³Ð¾, Ð² ÑÐ¾Ð´Ðµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ» ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½ Ð¿ÑÐ¾ÑÐ¾ÑÐ¸Ð¿ ÑÐ¸ÑÑÐµÐ¼Ñ Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ñ Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ð¹ Ð¸ Ð¿Ð»Ð°Ð³Ð¸Ð½Ð¾Ð², Ð¸ÑÐ¿Ð¾Ð»ÑÐ·ÑÑÑÐ¸ÑÑÑ Ð½Ð° Ð²ÐµÐ±-ÑÐµÑÐ²ÐµÑÐµ. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð½ÑÐ¹ Ð¿ÑÐ¾ÑÐ¾ÑÐ¸Ð¿ Ð±ÑÐ» Ð¾ÑÐ½Ð¾Ð²Ð°Ð½ Ð½Ð° Ð¸Ð½ÑÑÑÑÐ¼ÐµÐ½ÑÐµ Ð¢Ð¾Ð¼Ð¸ÑÐ°-Ð¿Ð°ÑÑÐµÑ. Ð ÑÐ°Ð±Ð¾ÑÐµ Ð¿ÑÐµÐ´ÑÑÐ°Ð²Ð»ÐµÐ½Ð¾ Ð¿Ð¾Ð´ÑÐ¾Ð±Ð½Ð¾Ðµ Ð¾Ð¿Ð¸ÑÐ°Ð½Ð¸Ðµ ÑÐ°Ð±Ð¾ÑÑ Ð¿Ð°ÑÑÐµÑÐ° Ð¸ Ð²ÑÐµÑ Ð½ÐµÐ¾Ð±ÑÐ¾Ð´Ð¸Ð¼ÑÑ Ð²ÑÐ¿Ð¾Ð¼Ð¾Ð³Ð°ÑÐµÐ»ÑÐ½ÑÑ ÐºÐ¾Ð¼Ð¿Ð¾Ð½ÐµÐ½ÑÐ¾Ð². ÐÐ° ÑÐ·ÑÐºÐµ Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Python Ð±ÑÐ»Ð° ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð° Ð¾Ð±Ð¾Ð»Ð¾ÑÐºÐ° Ð´Ð»Ñ Ð¿ÑÐ¾Ð²ÐµÐ´ÐµÐ½Ð¸Ñ Ð±Ð¾Ð»ÐµÐµ ÑÑÑÐµÐºÑÐ¸Ð²Ð½Ð¾Ð³Ð¾ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° ÐºÐ¾Ð´Ð° HTML-ÑÑÑÐ°Ð½Ð¸ÑÑ, Ð´ÐµÐ»Ð°ÑÑÐ°Ñ ÐºÐ¾Ð´ Ð±Ð¾Ð»ÐµÐµ ÑÐ´Ð¾Ð±Ð¾ÑÐ¸ÑÐ°ÐµÐ¼ÑÐ¼ Ð´Ð»Ñ Ð¿Ð°ÑÑÐµÑÐ°. ÐÑÐ¾Ð¼Ðµ ÑÐ¾Ð³Ð¾, Ð±ÑÐ»Ð° Ð¿ÑÐ¾Ð¸Ð·Ð²ÐµÐ´ÐµÐ½Ð° Ð¾ÑÐµÐ½ÐºÐ° ÑÑÑÐµÐºÑÐ¸Ð²Ð½Ð¾ÑÑÐ¸ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð½Ð¾Ð³Ð¾ Ð¼ÐµÑÐ¾Ð´Ð°, ÑÐ¾Ð·Ð´Ð°Ð½Ð° Ð²ÑÐ±Ð¾ÑÐºÐ° ÑÐ°Ð¹ÑÐ¾Ð², Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ ÐºÐ¾ÑÐ¾ÑÑÑ Ð¿ÑÐ¾Ð²ÐµÑÑÐ»Ð°ÑÑ ÐºÐ¾ÑÑÐµÐºÑÐ½Ð¾ÑÑÑ ÑÐ°Ð±Ð¾ÑÑ Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ñ. ÐÑÐ¾Ð¸Ð·Ð²ÐµÐ´ÐµÐ½Ð° Ð¾ÑÐµÐ½ÐºÐ° ÑÐºÐ¾ÑÐ¾ÑÑÐ¸ ÑÐ°Ð±Ð¾ÑÑ Ð¿Ð°ÑÑÐµÑÐ° Ð² Ð·Ð°Ð²Ð¸ÑÐ¸Ð¼Ð¾ÑÑÐ¸ Ð¾Ñ ÑÐ°Ð·Ð¼ÐµÑÐ° ÑÐ»Ð¾Ð²Ð°ÑÑ Ð¸ Ð¾Ñ ÑÐ°Ð·Ð¼ÐµÑÐ° Ð¸ÑÑÐ»ÐµÐ´ÑÐµÐ¼Ð¾Ð³Ð¾ ÐºÐ¾Ð´Ð°. ÐÑÐ¾Ð¸Ð·Ð²ÐµÐ´ÐµÐ½Ñ ÑÐ°ÑÑÐµÑÑ ÑÑÐ°ÑÐ¸ÑÑÐ¸ÑÐµÑÐºÐ¸Ñ Ð¾ÑÐ¸Ð±Ð¾Ðº Ð¿ÐµÑÐ²Ð¾Ð³Ð¾ Ð¸ Ð²ÑÐ¾ÑÐ¾Ð³Ð¾ ÑÐ¾Ð´Ð°. Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ Ð±ÑÐ»Ð¸ Ð¿ÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ñ Ð¼ÐµÑÐ¾Ð´Ñ Ð¸Ð´ÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸ Ð²ÐµÐ±-Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ð¹, Ð¿ÑÐµÐ´Ð»Ð¾Ð¶ÐµÐ½Ñ Ð¼ÐµÑÐ¾Ð´Ñ Ð´Ð»Ñ Ð°Ð²ÑÐ¾Ð¼Ð°ÑÐ¸Ð·Ð°ÑÐ¸Ð¸ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° ÐºÐ¾Ð´Ð° HTML-ÑÑÑÐ°Ð½Ð¸ÑÑ. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½ ÑÑÑÐµÐºÑÐ¸Ð²Ð½ÑÐ¹ Ð¸Ð½ÑÑÑÑÐ¼ÐµÐ½Ñ, ÑÐ¿Ð¾ÑÐ¾Ð±Ð½ÑÐ¹ ÑÐ°ÑÐ¿Ð¾Ð·Ð½Ð°Ð²Ð°ÑÑ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·ÑÐµÐ¼ÑÐµ HTTP-ÑÐµÑÐ²ÐµÑÐ°, Ð¿Ð»Ð°Ð³Ð¸Ð½Ñ Ð¸ ÑÐ¸ÑÑÐµÐ¼Ñ ÑÐ¿ÑÐ°Ð²Ð»ÐµÐ½Ð¸Ñ ÑÐ¾Ð´ÐµÑÐ¶Ð¸Ð¼ÑÐ¼.
description: This work is devoted to the study of existing methods of identifying web applications. In total, 4 main methods of identification have been identified: gathering server banners, manual analysis of the system, active and passive study of protocol implementation, study of system specifications and HTML data verification. The method of automating manual analysis of HTML data verification was developed. Besides, in the course of the work was developed a prototype of the system to detect applications and plug-ins used on the web server. The developed prototype was based on Tomita-Parser tool. The work provides a detailed description of the parser and all necessary auxiliary components. In Python programming language, a shell was developed for more efficient HTML page code analysis, making the code more readable for the parser. Besides, the efficiency of the developed method was estimated, a sample of sites was created on the basis of which the correctness of the program work was checked. The speed of the parser's work was estimated depending on the size of the dictionary and the size of the code under study. Calculations of statistical errors of the first and second types are performed. As the result, web-application identification methods were analyzed, methods for automating HTML-page code analysis were offered. An effective tool capable of recognizing HTTP servers, plugins and content management systems in use was developed. â