1## 2# This file is part of WhatWeb and may be subject to 3# redistribution and commercial restrictions. Please see the WhatWeb 4# web site for more information on licensing and terms of use. 5# http://www.morningstarsecurity.com/research/whatweb 6## 7# Version 0.2 # 2016-04-18 # Andrew Horton 8# Replaced passive function with match for cookies 9## 10Plugin.define "AfterLogic-WebMail-Pro" do 11author "Brendan Coles <bcoles@gmail.com>" # 2011-05-20 12version "0.2" 13description "AfterLogic WebMail Pro is a webmail front-end for your existing POP3/IMAP mail server." 14website "http://www.afterlogic.com/mailbee/webmail-pro.asp" 15 16# ShodanHQ results as at 2011-05-20 # 17# 226 for PHPWEBMAILSESSID 18 19# Google results as at 2011-05-20 # 20# 94 for "Powered by AfterLogic WebMail Pro" intitle:"AfterLogic WebMail Pro" 21 22# Dorks # 23dorks [ 24'"Powered by AfterLogic WebMail Pro" intitle:"AfterLogic WebMail Pro"' 25] 26 27 28 29# Matches # 30matches [ 31 32# Powered by link 33{ :text=>'Powered by <a href="http://www.afterlogic.com/products/webmail-pro" target="_blank">AfterLogic WebMail Pro</a><br />' }, 34 35# Version Detection # HTML Comment 36{ :version=>/AfterLogic Corporation<\/a>\s?<\/div>\s+<\/body>\s<\/html>\s<!--\s?([\d\.]+)\s?-->/ }, 37{ :version=>/AfterLogic Corporation<\/a>\s?<\/div>\s+<!--\s?([\d\.]+)\s?-->\s<\/body>\s<\/html>/ }, 38 39# PHPWEBMAILSESSID cookie 40{ :name=>"PHPWEBMAILSESSID cookie", :search=>"headers[set-cookie]", :regexp=>/^PHPWEBMAILSESSID=[^;]+;/ }, 41 42# PHPWMADMINSESSID cookie 43{ :name=>"PHPWMADMINSESSID cookie", :search=>"headers[set-cookie]", :regexp=>/^PHPWEBMAILSESSID=[^;]+;/ }, 44] 45 46end 47 48