THC Investigate Introduction

This documentation provides an overview of the functionality offered by the thc_in module.

THC Investigate is a comprehensive tool designed to identify a wide range of frameworks present on a target website.

Interface Parameters:

1. URL: The URL of the target website.
2. Sources: The frameworks to identify.

ModGlue Variables:

1. $_CONTEXT['thc_in']['results']: (array) The frameworks detected.
2. $_CONTEXT['thc_in']['conclusion']: (boolean) Indicates if any frameworks were found (true) or not (false).
3. $_CONTEXT['thc_in']['continue']: (boolean) Determines whether to continue the search when no patterns are found.
4. $_CONTEXT['thc_in']['items']: (int) The number of frameworks to test.
5. $_CONTEXT['thc_in']['filedata']: (string) The result of the curl execution.
6. $_CONTEXT['thc_in']['find']: (array) Pairs of framework and method names from the data.php module file.
7. $_CONTEXT['thc_in']['resultstostring']: (string) A full report on the scan results.

Resource Settings:

• Time Limit: Uses PHP default.
• Memory Limit: Uses PHP default.

Dependencies:

cURL

Expanding THC Investigate:

THC Investigate's functionality can be extended by adding new frameworks to data.php and detection patterns to investigate.php, both located in the module's root folder. When adding a new category, you must also create a new method.

To notify Carnivore of a new category, modify the data.php file in the module's root folder:

$_CONTEXT['thc_in']['find'][0] = array("CMSes", "DetectCMS");

• CMSes: This entry adds the option to the index interface.
• DetectCMS: The method in investigate.php containing detection patterns for CMSes.

To add patterns to existing categories, simply update the investigate.php file.

Known Issues:

No known issues at this time.