1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# https://morningstarsecurity.com/research/whatweb
##
Plugin.define do
name "VMware-Zimbra"
authors [
"Brendan Coles <bcoles@gmail.com>", # 2011-05-15
]
version "0.1"
description "Zimbra is a next-generation collaboration server that provides organizations greater overall flexibility and simplicity with integrated email, contacts, calendaring, sharing and document management plus mobility and desktop synchronization to users on any computer."
website "http://www.zimbra.com/products/"
# ShodanHQ results as at 2011-05-15 #
# 12,258 for ZM_TEST
# Google results as at 2011-05-15 #
# 9 for "Go offline with Zimbra Desktop" intitle:"Zimbra Web Client Log In"
# Dorks #
dorks [
'"Go offline with Zimbra Desktop" intitle:"Zimbra Web Client Log In"'
]
# Matches #
matches [
# Meta Description
{ :text=>'<meta name="description" content="Zimbra provides open source server and client software for messaging and collaboration. To find out more visit http://www.zimbra.com.">' },
# HTML Comment
{ :text=>'<!--div id="ZLoginAppName">Web Client</div-->' },
# Default Title
{ :text=>'<title>Zimbra Web Client Log In</title>' },
# h1 bannerLink link
{ :text=>'<h1><a href="http://www.zimbra.com/" id="bannerLink" target="_new">' },
# zLoginField
{ :text=>'<td><input id="password" class="zLoginField" name="password" type="password" value="" size="40"/></td>' },
# ZLoginWhatsThis div with ZLoginInfoMessage class
{ :text=>'<div id="ZLoginWhatsThis" class="ZLoginInfoMessage" style="display:none;"><center style="margin-bottom:3px;"><b>Client Types:</b></center>' },
# Legal notice footer
{ :text=>'<div id="ZLoginNotice" class="legalNotice-small"><a target="_new" href="http://www.zimbra.com">Zimbra</a> :: the leader in open source messaging and collaboration ::' },
]
# Passive #
passive do
m=[]
# ZM_TEST Cookie
m << { :name=>"ZM_TEST Cookie" } if @headers["set-cookie"] =~ /ZM_TEST=true/
# Return passive matches
m
end
end
|
