1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
# Version 0.2 # 2011-01-07 #
# Updated version detection
##
Plugin.define "Axigen-Mail-Server" do
author "Brendan Coles <bcoles@gmail.com>" # 2010-09-17
version "0.2"
description "Axigen is an integrated email, calendaring & collaboration platform, masterfully built on our unique Linux mail server technology, for increased speed & security. - homepage: http://www.axigen.com/"
# Google results as at 2010-09-17 #
# 67 for "powered by Axigen Mail Server"
# Dorks #
dorks [
'"powered by Axigen Mail Server"'
]
# Examples #
examples %w|
194.105.7.2:8000
mail.realtyweb.net
mail.conpoint.com
box.exent.it
oxy.pub.ro:8000
www.axigenmail.com
www.mbox4me.com
www.el-meu-correu.com
www.elmeucorreu.com
www.mbhmail.nl
mail.mediasat.ro
mail.keytown.com
webmail.uachurchonline.net
mail.atumo.se
webmail.osim.ro
radioquintessenz.de:8080
webmail.iie.es
webmail.loxley.co.th
my126.org
mail.jasoneng.com.hk:81
mail.nordtroms.net
samaphone.net
mail.ttaf.com.hk
www.fodor.com.ro
bnmw.nl
webmail.multimedia.cz
mail.oratech.com.tr:2080
webmail.velpitar.ro
mail.fon.edu.mk
webmail.comune.forli.fc.it
mail.mediahertz.it
axigen.cmss-oz.cz
mail.mofidu.ac.ir
webmail.axen.se
mail.bonicom.cz
www.stampq.lv:9001
albaniaonline.net
pop3.interclan.net
pop3.nckcn.com
interclan.net
correopersonal.es
mi-correo.es
mail.arquinetmty.com
|
# Matches #
matches [
# Login redirect page # Javascript
{ :text=>' top.opener.location.href="/?login=";' },
# Powered by text
{ :text=>'<div>Powered by <a href="http://www.axigen.com" target="_blank" class="gray">Axigen Mail Server</a></div>' },
# Powered by text
{ :text=>'Powered by <a href="http://www.axigen.com/" target="_blank">Axigen Mail Server</a>' },
# "Javascript required" HTML
{ :text=>'<div class="nojsContainer"><h1>In order to access AXIGEN Webmail, <br />you must enable Javascript in your browser!</h1></div>' },
# Version Detection # Default title
{ :version=>/<title>AXIGEN Webmail - v([\d\.]+)<\/title>/ },
]
# Passive #
def passive
m=[]
# Version Detection # Powered by text
# Tested versions: 7.3.1, 7.3.2, 7.3.3, 7.4.0, 7.4.2, 7.5.0, 7.5.0.30.1
if @body =~ /<p>Powered by <a href="http:\/\/www.axigen.com[\/]*" target="_blank">Axigen Mail Server<\/a><\/p>[\s\r\n]*<p>Version ([\d\.]+)<\/p>/
m << { :version=>@body.scan(/<p>Version ([\d\.]+)<\/p>/)[0][0] }
end
m
end
end
|
