1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
# Version 0.2
# removed :probability & :name
##
Plugin.define "MailSiteExpress" do
author "Andrew Horton"
version "0.2"
description "Webmail in ASP. Versions < 6.1.2 insecure http://marc.info/?l=bugtraq&m=113053680631151&w=2 - Homepage: http://www.mailsite.com/products/express-webmail-server.asp"
# <!-- This software is copyright 1999, 2000 Rockliffe systems, Inc. -->
# <!-- default.asp ver. 4.5.6 -->
# <title>MailSite Express</title>
# <font face="arial" size="1">MailSite Express <br> version 4.5.6</font>
# version 6
# <b>MailSite <em>Express</em> Login</b>
# onSubmit="OpenExpress(document.ExpressLogin)"
# 24 for intitle:"MailSite Express" "MailSite Express Login"
# Dorks #
dorks [
'intitle:"MailSite Express" "MailSite Express Login"'
]
# Examples #
examples %w|
202.37.232.199
webmail.oasisonline.com
www.itsmail.ca/its/
mail.roar.net.nz/express/
mail.seiu99.net
www.cmda.com.ve/content/correo_content.html
|
# Matches #
matches [
{:text=>'<title>MailSite Express</title>' },
{:regexp=>/<font face="arial" size="1">MailSite Express <br> version [0-9\.]+<\/font>/ },
{:certainty=>50, :regexp=>/<!-- This software is copyright [0-9 ,\.]+ Rockliffe systems, Inc. -->/ },
{:text=>'<b>MailSite <em>Express</em> Login</b>' },
{:text=>'onSubmit="OpenExpress(document.ExpressLogin)"' }
]
end
|
