# frozen_string_literal: true ## # This file is part of WhatWeb and may be subject to # redistribution and commercial restrictions. Please see the WhatWeb # web site for more information on licensing and terms of use. # http://www.morningstarsecurity.com/research/whatweb ## # Version 0.2 # 2011-01-07 # # Updated version detection ## WhatWeb::Plugin.define "Axigen-Mail-Server" do @author = "Brendan Coles " # 2010-09-17 @version = "0.2" @description = "Axigen is an integrated email, calendaring & collaboration platform, masterfully built on our unique Linux mail server technology, for increased speed & security." @website = "http://www.axigen.com/" # Google results as at 2010-09-17 # # 67 for "powered by Axigen Mail Server" # Dorks # @dorks = [ '"powered by Axigen Mail Server"' ] # Matches # @matches = [ # Login redirect page # Javascript { text: ' top.opener.location.href="/?login=";' }, # Powered by text { text: '
Powered by Axigen Mail Server
' }, # Powered by text { text: 'Powered by Axigen Mail Server' }, # "Javascript required" HTML { text: '

In order to access AXIGEN Webmail,
you must enable Javascript in your browser!

' }, # Version Detection # Default title { version: /AXIGEN Webmail - v([\d\.]+)<\/title>/ }, ] # Passive # def passive(target) m = [] # Version Detection # Powered by text # Tested versions: 7.3.1, 7.3.2, 7.3.3, 7.4.0, 7.4.2, 7.5.0, 7.5.0.30.1 if /<p>Powered by <a href="http:\/\/www.axigen.com[\/]*" target="_blank">Axigen Mail Server<\/a><\/p>[\s\r\n]*<p>Version ([\d\.]+)<\/p>/.match?(target.body) m << { version: target.body.scan(/<p>Version ([\d\.]+)<\/p>/)[0][0] } end m end end