recog-intrigue 2.3.7
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +7 -0
- data/.github/ISSUE_TEMPLATE/bug_report.md +37 -0
- data/.github/ISSUE_TEMPLATE/feature_request.md +17 -0
- data/.github/ISSUE_TEMPLATE/fingerprint_request.md +27 -0
- data/.github/PULL_REQUEST_TEMPLATE +24 -0
- data/.gitignore +14 -0
- data/.rbenv-gemset +1 -0
- data/.rspec +3 -0
- data/.ruby-gemset +1 -0
- data/.ruby-version +1 -0
- data/.travis.yml +25 -0
- data/.yardopts +1 -0
- data/CONTRIBUTING.md +171 -0
- data/COPYING +23 -0
- data/Gemfile +10 -0
- data/LICENSE +7 -0
- data/README.md +85 -0
- data/Rakefile +22 -0
- data/bin/recog_export +81 -0
- data/bin/recog_match +55 -0
- data/bin/recog_standardize +118 -0
- data/bin/recog_verify +64 -0
- data/cpe-remap.yaml +134 -0
- data/features/data/failing_banners_fingerprints.xml +20 -0
- data/features/data/matching_banners_fingerprints.xml +23 -0
- data/features/data/multiple_banners_fingerprints.xml +32 -0
- data/features/data/no_tests.xml +3 -0
- data/features/data/sample_banner.txt +2 -0
- data/features/data/successful_tests.xml +18 -0
- data/features/data/tests_with_failures.xml +20 -0
- data/features/data/tests_with_warnings.xml +17 -0
- data/features/match.feature +36 -0
- data/features/support/aruba.rb +3 -0
- data/features/support/env.rb +6 -0
- data/features/verify.feature +48 -0
- data/identifiers/README.md +47 -0
- data/identifiers/os_architecture.txt +20 -0
- data/identifiers/os_device.txt +52 -0
- data/identifiers/os_family.txt +160 -0
- data/identifiers/os_product.txt +199 -0
- data/identifiers/service_family.txt +185 -0
- data/identifiers/service_product.txt +255 -0
- data/identifiers/software_class.txt +26 -0
- data/identifiers/software_family.txt +91 -0
- data/identifiers/software_product.txt +333 -0
- data/identifiers/vendor.txt +405 -0
- data/lib/recog.rb +4 -0
- data/lib/recog/db.rb +78 -0
- data/lib/recog/db_manager.rb +31 -0
- data/lib/recog/fingerprint.rb +280 -0
- data/lib/recog/fingerprint/regexp_factory.rb +56 -0
- data/lib/recog/fingerprint/test.rb +18 -0
- data/lib/recog/formatter.rb +51 -0
- data/lib/recog/match_reporter.rb +77 -0
- data/lib/recog/matcher.rb +94 -0
- data/lib/recog/matcher_factory.rb +14 -0
- data/lib/recog/nizer.rb +347 -0
- data/lib/recog/verifier.rb +39 -0
- data/lib/recog/verifier_factory.rb +13 -0
- data/lib/recog/verify_reporter.rb +86 -0
- data/lib/recog/version.rb +3 -0
- data/misc/convert_mysql_err +61 -0
- data/misc/order.xsl +17 -0
- data/recog-intrigue.gemspec +45 -0
- data/requirements.txt +2 -0
- data/spec/data/best_os_match_1.yml +17 -0
- data/spec/data/best_os_match_2.yml +17 -0
- data/spec/data/best_service_match_1.yml +17 -0
- data/spec/data/smb_native_os.txt +25 -0
- data/spec/data/test_fingerprints.xml +36 -0
- data/spec/data/verification_fingerprints.xml +86 -0
- data/spec/data/whitespaced_fingerprint.xml +5 -0
- data/spec/lib/fingerprint_self_test_spec.rb +174 -0
- data/spec/lib/recog/db_spec.rb +98 -0
- data/spec/lib/recog/fingerprint/regexp_factory_spec.rb +73 -0
- data/spec/lib/recog/fingerprint_spec.rb +112 -0
- data/spec/lib/recog/formatter_spec.rb +69 -0
- data/spec/lib/recog/match_reporter_spec.rb +91 -0
- data/spec/lib/recog/nizer_spec.rb +330 -0
- data/spec/lib/recog/verify_reporter_spec.rb +113 -0
- data/spec/spec_helper.rb +82 -0
- data/update_cpes.py +186 -0
- data/xml/apache_modules.xml +1911 -0
- data/xml/apache_os.xml +273 -0
- data/xml/architecture.xml +36 -0
- data/xml/dns_versionbind.xml +761 -0
- data/xml/fingerprints.xsd +128 -0
- data/xml/ftp_banners.xml +1553 -0
- data/xml/h323_callresp.xml +603 -0
- data/xml/hp_pjl_id.xml +358 -0
- data/xml/html_title.xml +1630 -0
- data/xml/http_cookies.xml +411 -0
- data/xml/http_servers.xml +3195 -0
- data/xml/http_wwwauth.xml +595 -0
- data/xml/imap_banners.xml +245 -0
- data/xml/ldap_searchresult.xml +711 -0
- data/xml/mdns_device-info_txt.xml +1796 -0
- data/xml/mdns_workstation_txt.xml +15 -0
- data/xml/mysql_banners.xml +1649 -0
- data/xml/mysql_error.xml +871 -0
- data/xml/nntp_banners.xml +82 -0
- data/xml/ntp_banners.xml +1223 -0
- data/xml/operating_system.xml +629 -0
- data/xml/pop_banners.xml +499 -0
- data/xml/rsh_resp.xml +76 -0
- data/xml/rtsp_servers.xml +76 -0
- data/xml/sip_banners.xml +359 -0
- data/xml/sip_user_agents.xml +221 -0
- data/xml/smb_native_lm.xml +62 -0
- data/xml/smb_native_os.xml +662 -0
- data/xml/smtp_banners.xml +1690 -0
- data/xml/smtp_debug.xml +39 -0
- data/xml/smtp_ehlo.xml +49 -0
- data/xml/smtp_expn.xml +82 -0
- data/xml/smtp_help.xml +157 -0
- data/xml/smtp_mailfrom.xml +20 -0
- data/xml/smtp_noop.xml +44 -0
- data/xml/smtp_quit.xml +29 -0
- data/xml/smtp_rcptto.xml +25 -0
- data/xml/smtp_rset.xml +26 -0
- data/xml/smtp_turn.xml +26 -0
- data/xml/smtp_vrfy.xml +89 -0
- data/xml/snmp_sysdescr.xml +6507 -0
- data/xml/snmp_sysobjid.xml +430 -0
- data/xml/ssh_banners.xml +1968 -0
- data/xml/telnet_banners.xml +1595 -0
- data/xml/x11_banners.xml +232 -0
- data/xml/x509_issuers.xml +134 -0
- data/xml/x509_subjects.xml +1268 -0
- metadata +304 -0
data/xml/pop_banners.xml
ADDED
@@ -0,0 +1,499 @@
|
|
1
|
+
<?xml version="1.0" encoding="UTF-8"?>
|
2
|
+
<fingerprints matches="pop3.banner" protocol="pop3" database_type="service" preference="0.90">
|
3
|
+
<!--
|
4
|
+
POP3 greeting messages (part of the banner after the status indicator +OK or -ERR) are
|
5
|
+
matched against these patterns to fingerprint POP3 servers.
|
6
|
+
-->
|
7
|
+
<fingerprint pattern="^([^ ]+) +Cyrus POP3 v(\d+\.\d+.*)-OS X(?: Server)? ([\d\.]+).* server ready">
|
8
|
+
<description>OSX Cyrus POP</description>
|
9
|
+
<example host.domain="8.8.8.8" service.version="2.3.8" os.version="10.5">8.8.8.8 Cyrus POP3 v2.3.8-OS X Server 10.5: 9A562 server ready <1999107648.1324502155@8.8.8.8></example>
|
10
|
+
<param pos="0" name="service.vendor" value="Carnegie Mellon University"/>
|
11
|
+
<param pos="0" name="service.family" value="Cyrus MTA"/>
|
12
|
+
<param pos="0" name="service.product" value="Cyrus POP"/>
|
13
|
+
<param pos="2" name="service.version"/>
|
14
|
+
<param pos="0" name="os.vendor" value="Apple"/>
|
15
|
+
<param pos="0" name="os.family" value="Mac OS X"/>
|
16
|
+
<param pos="0" name="os.product" value="Mac OS X"/>
|
17
|
+
<param pos="3" name="os.version"/>
|
18
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:{os.version}"/>
|
19
|
+
<param pos="1" name="host.domain"/>
|
20
|
+
</fingerprint>
|
21
|
+
<fingerprint pattern="^([^ ]+) +Cyrus POP3 v([\d\.]+)">
|
22
|
+
<description>CMU Cyrus POP</description>
|
23
|
+
<example host.domain="foo" service.version="2.3">foo Cyrus POP3 v2.3</example>
|
24
|
+
<example host.domain="foo" service.version="2.3.14">foo Cyrus POP3 v2.3.14 server ready <13087751828270990591.1301068892@foo></example>
|
25
|
+
<param pos="0" name="service.vendor" value="Carnegie Mellon University"/>
|
26
|
+
<param pos="0" name="service.family" value="Cyrus MTA"/>
|
27
|
+
<param pos="0" name="service.product" value="Cyrus POP"/>
|
28
|
+
<param pos="2" name="service.version"/>
|
29
|
+
<param pos="1" name="host.domain"/>
|
30
|
+
</fingerprint>
|
31
|
+
<fingerprint pattern="^Lotus Notes POP3 server version X[^ ]+ ready on .*$">
|
32
|
+
<description>IBM Lotus Notes/Domino</description>
|
33
|
+
<example>Lotus Notes POP3 server version X2.0 ready on foo/bar.</example>
|
34
|
+
<param pos="0" name="service.vendor" value="IBM"/>
|
35
|
+
<param pos="0" name="service.family" value="Lotus Domino"/>
|
36
|
+
<param pos="0" name="service.product" value="Lotus Domino"/>
|
37
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_domino:-"/>
|
38
|
+
</fingerprint>
|
39
|
+
<fingerprint pattern="^Lotus Notes POP3 server version Release ([^ ]+) ready on .*$">
|
40
|
+
<description>IBM Lotus Notes/Domino - Release variant</description>
|
41
|
+
<example service.version="8.5.1FP5">Lotus Notes POP3 server version Release 8.5.1FP5 ready on foo/US.</example>
|
42
|
+
<param pos="0" name="service.vendor" value="IBM"/>
|
43
|
+
<param pos="0" name="service.family" value="Lotus Domino"/>
|
44
|
+
<param pos="0" name="service.product" value="Lotus Domino"/>
|
45
|
+
<param pos="1" name="service.version"/>
|
46
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_domino:{service.version}"/>
|
47
|
+
</fingerprint>
|
48
|
+
<fingerprint pattern="^Qpopper \(version (\d+\.\d+\.\d+), modified by Sphera Technologies\) at (.+) starting\..*$">
|
49
|
+
<description>Qpopper with Sphera mods</description>
|
50
|
+
<example>Qpopper (version 4.0.3, modified by Sphera Technologies) at domain starting. <xxx@domain></example>
|
51
|
+
<param pos="0" name="service.vendor" value="Sphera"/>
|
52
|
+
<param pos="0" name="service.family" value="Qpopper"/>
|
53
|
+
<param pos="0" name="service.product" value="Qpopper"/>
|
54
|
+
<param pos="1" name="service.version"/>
|
55
|
+
<param pos="2" name="host.domain"/>
|
56
|
+
</fingerprint>
|
57
|
+
<fingerprint pattern="^Qpopper \(version (\d+\.\d+\.\d+)-mysql-(.+)\) at (.+) starting\..*$">
|
58
|
+
<description>Qpopper with MySQL auth module</description>
|
59
|
+
<example>Qpopper (version 4.0.3-mysql-0.13) at domain starting. <xxx@domain></example>
|
60
|
+
<param pos="0" name="service.vendor" value="Qualcomm"/>
|
61
|
+
<param pos="0" name="service.family" value="Qpopper"/>
|
62
|
+
<param pos="0" name="service.product" value="Qpopper"/>
|
63
|
+
<param pos="1" name="service.version"/>
|
64
|
+
<param pos="0" name="service.component.family" value="qpopper-mysql"/>
|
65
|
+
<param pos="0" name="service.component.product" value="qpopper-mysql"/>
|
66
|
+
<param pos="2" name="service.component.version"/>
|
67
|
+
<param pos="3" name="host.domain"/>
|
68
|
+
</fingerprint>
|
69
|
+
<fingerprint pattern="(?i)^Qpop(?:per)? \(version ([\d\.]+)\) at (.+)(?: starting\.)?.*$">
|
70
|
+
<description>Qpopper missing version info</description>
|
71
|
+
<example>Qpopper (version 4.0.16) at foo.example.com</example>
|
72
|
+
<example>QPOP (version 2.53) at domain starting. <xxx@domain></example>
|
73
|
+
<example>Qpopper (version 4.0.3) at domain starting. <xxx@domain></example>
|
74
|
+
<param pos="0" name="service.vendor" value="Qualcomm"/>
|
75
|
+
<param pos="0" name="service.family" value="Qpopper"/>
|
76
|
+
<param pos="0" name="service.product" value="Qpopper"/>
|
77
|
+
<param pos="1" name="service.version"/>
|
78
|
+
<param pos="2" name="host.domain"/>
|
79
|
+
</fingerprint>
|
80
|
+
<fingerprint pattern="^QPOP \(version (.*)\) at (.+) starting\..*$">
|
81
|
+
<description>Qpopper with missing version info</description>
|
82
|
+
<example>QPOP (version ?) at domain starting. <xxx@domain></example>
|
83
|
+
<param pos="0" name="service.vendor" value="Qualcomm"/>
|
84
|
+
<param pos="0" name="service.family" value="Qpopper"/>
|
85
|
+
<param pos="0" name="service.product" value="Qpopper"/>
|
86
|
+
<param pos="1" name="qpopper.version"/>
|
87
|
+
<param pos="2" name="host.domain"/>
|
88
|
+
</fingerprint>
|
89
|
+
<fingerprint pattern="^Microsoft Exchange Server 2003 POP3 server version (\d+\.\d+\.\d+\.\d+) (.+) ready.$">
|
90
|
+
<description>Microsoft Exchange Server 2003</description>
|
91
|
+
<example>Microsoft Exchange Server 2003 POP3 server version 6.5.6944.0 (host) ready.</example>
|
92
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
93
|
+
<param pos="0" name="service.family" value="Exchange Server"/>
|
94
|
+
<param pos="0" name="service.product" value="Exchange 2003 Server"/>
|
95
|
+
<param pos="1" name="service.version"/>
|
96
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:microsoft:exchange_server:{service.version}"/>
|
97
|
+
<param pos="2" name="host.name"/>
|
98
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
99
|
+
<param pos="0" name="os.family" value="Windows"/>
|
100
|
+
<param pos="0" name="os.product" value="Windows"/>
|
101
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
102
|
+
</fingerprint>
|
103
|
+
<fingerprint pattern="^Microsoft Exchange 2000 POP3 server version (\d+\.\d+\.\d+\.\d+) (.+) ready.$">
|
104
|
+
<description>Microsoft Exchange Server 2000</description>
|
105
|
+
<example>Microsoft Exchange 2000 POP3 server version 6.0.6603.0 (host) ready.</example>
|
106
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
107
|
+
<param pos="0" name="service.family" value="Exchange Server"/>
|
108
|
+
<param pos="0" name="service.product" value="Exchange 2000 Server"/>
|
109
|
+
<param pos="1" name="service.version"/>
|
110
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:microsoft:exchange_server:{service.version}"/>
|
111
|
+
<param pos="2" name="host.name"/>
|
112
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
113
|
+
<param pos="0" name="os.family" value="Windows"/>
|
114
|
+
<param pos="0" name="os.product" value="Windows"/>
|
115
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
116
|
+
</fingerprint>
|
117
|
+
<fingerprint pattern="^Microsoft Exchange POP3 server version (\d+\.\d+\.\d+\.\d+) ready$">
|
118
|
+
<description>Microsoft Exchange Server</description>
|
119
|
+
<example>Microsoft Exchange POP3 server version 5.5.2654.50 ready</example>
|
120
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
121
|
+
<param pos="0" name="service.family" value="Exchange Server"/>
|
122
|
+
<param pos="0" name="service.product" value="Exchange Server"/>
|
123
|
+
<param pos="1" name="service.version"/>
|
124
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:microsoft:exchange_server:{service.version}"/>
|
125
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
126
|
+
<param pos="0" name="os.family" value="Windows"/>
|
127
|
+
<param pos="0" name="os.product" value="Windows"/>
|
128
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
129
|
+
</fingerprint>
|
130
|
+
<fingerprint pattern="^Microsoft Windows POP3 Service Version 1.0 <.+@(.+)> ready.$">
|
131
|
+
<description>Microsoft POP3 Services on Windows 2003</description>
|
132
|
+
<example>Microsoft Windows POP3 Service Version 1.0 <xxx@host> ready.</example>
|
133
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
134
|
+
<param pos="0" name="service.family" value="E-mail Services"/>
|
135
|
+
<param pos="0" name="service.product" value="E-mail Services"/>
|
136
|
+
<param pos="1" name="host.name"/>
|
137
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
138
|
+
<param pos="0" name="os.family" value="Windows"/>
|
139
|
+
<param pos="0" name="os.product" value="Windows Server 2003"/>
|
140
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
|
141
|
+
</fingerprint>
|
142
|
+
<fingerprint pattern="^Microsoft Exchange Server 2007 POP3 service ready\.?$">
|
143
|
+
<description>Microsoft Exchange Server 2007</description>
|
144
|
+
<example>Microsoft Exchange Server 2007 POP3 service ready</example>
|
145
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
146
|
+
<param pos="0" name="service.family" value="Exchange Server"/>
|
147
|
+
<param pos="0" name="service.product" value="Exchange 2007 Server"/>
|
148
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:microsoft:exchange_server:-"/>
|
149
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
150
|
+
<param pos="0" name="os.family" value="Windows"/>
|
151
|
+
<param pos="0" name="os.product" value="Windows"/>
|
152
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
153
|
+
</fingerprint>
|
154
|
+
<fingerprint pattern="^The? Microsoft Exchange POP3 service is ready\.?$">
|
155
|
+
<description>Microsoft Exchange Server, generic</description>
|
156
|
+
<example>The Microsoft Exchange POP3 service is ready.</example>
|
157
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
158
|
+
<param pos="0" name="service.family" value="Exchange Server"/>
|
159
|
+
<param pos="0" name="service.product" value="Exchange Server"/>
|
160
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:microsoft:exchange_server:-"/>
|
161
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
162
|
+
<param pos="0" name="os.family" value="Windows"/>
|
163
|
+
<param pos="0" name="os.product" value="Windows"/>
|
164
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
165
|
+
</fingerprint>
|
166
|
+
<fingerprint pattern="^[dD]ovecot (?:DA )?ready\.(?: <.+@(.+)>)?$">
|
167
|
+
<description>Dovecot Secure POP Server</description>
|
168
|
+
<param pos="0" name="service.family" value="Dovecot"/>
|
169
|
+
<param pos="0" name="service.product" value="Dovecot"/>
|
170
|
+
<param pos="1" name="host.name"/>
|
171
|
+
</fingerprint>
|
172
|
+
<fingerprint pattern="^(\S+) Zimbra POP3 server ready\.?$">
|
173
|
+
<description>VMware Zimbra POP</description>
|
174
|
+
<example host.name="foo.bar">foo.bar Zimbra POP3 server ready</example>
|
175
|
+
<param pos="0" name="service.vendor" value="VMware"/>
|
176
|
+
<param pos="0" name="service.product" value="Zimbra"/>
|
177
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:vmware:zimbra_desktop:-"/>
|
178
|
+
<param pos="1" name="host.name"/>
|
179
|
+
</fingerprint>
|
180
|
+
<fingerprint pattern="^(\S+) Zimbra (\S+) POP3 server ready\.?$">
|
181
|
+
<description>VMware Zimbra POP with version</description>
|
182
|
+
<example host.name="foo.bar">foo.bar Zimbra 7.0.0_GA_3079 POP3 server ready</example>
|
183
|
+
<param pos="0" name="service.vendor" value="VMware"/>
|
184
|
+
<param pos="0" name="service.product" value="Zimbra"/>
|
185
|
+
<param pos="2" name="service.version"/>
|
186
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:vmware:zimbra_desktop:{service.version}"/>
|
187
|
+
<param pos="1" name="host.name"/>
|
188
|
+
</fingerprint>
|
189
|
+
<fingerprint pattern="^(?:S?POP3? server ready |Hello there.? )?<.*@([^>]+)>$">
|
190
|
+
<description>Generic masked POP3 server</description>
|
191
|
+
<example>POP3 server ready <58c29ae4-7316-429e-8109-060444ab1a28@foo.example.com></example>
|
192
|
+
<example><84427.1298535083@foo.example.com></example>
|
193
|
+
<param pos="1" name="host.name"/>
|
194
|
+
</fingerprint>
|
195
|
+
<fingerprint pattern="^ApplePasswordServer ([\d\.]+) password">
|
196
|
+
<description>Apple Open Directory</description>
|
197
|
+
<example>ApplePasswordServer 10.6.0.0 password server at 10.2.90.228 ready.</example>
|
198
|
+
<example>ApplePasswordServer 10.5.0.1 password serv</example>
|
199
|
+
<param pos="0" name="service.vendor" value="Apple"/>
|
200
|
+
<param pos="0" name="service.product" value="Open Directory"/>
|
201
|
+
<param pos="0" name="os.vendor" value="Apple"/>
|
202
|
+
<param pos="0" name="os.family" value="Mac OS X"/>
|
203
|
+
<param pos="0" name="os.product" value="Mac OS X"/>
|
204
|
+
<param pos="1" name="os.version"/>
|
205
|
+
<param pos="0" name="os.certainty" value="0.5"/>
|
206
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:{os.version}"/>
|
207
|
+
</fingerprint>
|
208
|
+
<fingerprint pattern="^TCPIP POP server V\d\.\d\S-\S{3}, OpenVMS V(\d\.\d-\d)(?:\s+\S+)?\s+at\s+(\S+), .*$">
|
209
|
+
<description>TCP/IP Services for OpenVMS POP server</description>
|
210
|
+
<example os.version="7.3-2" host.name="example.com">TCPIP POP server V5.4J-15A, OpenVMS V7.3-2 Alpha at example.com, up since 2015-02-12 08:44:53 20400434.2</example>
|
211
|
+
<param pos="0" name="service.family" value="OpenVMS"/>
|
212
|
+
<param pos="0" name="service.product" value="TCPIP POP server"/>
|
213
|
+
<param pos="0" name="service.vendor" value="HP"/>
|
214
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
215
|
+
<param pos="0" name="os.family" value="OpenVMS"/>
|
216
|
+
<param pos="0" name="os.product" value="OpenVMS"/>
|
217
|
+
<param pos="1" name="os.version"/>
|
218
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:hp:openvms:{os.version}"/>
|
219
|
+
<param pos="2" name="host.name"/>
|
220
|
+
</fingerprint>
|
221
|
+
<fingerprint pattern="^Hello there\.$">
|
222
|
+
<description>Courier MTA POP</description>
|
223
|
+
<example>Hello there.</example>
|
224
|
+
<param pos="0" name="service.vendor" value="Double Precision"/>
|
225
|
+
<param pos="0" name="service.family" value="Courier MTA"/>
|
226
|
+
<param pos="0" name="service.product" value="Courier POP"/>
|
227
|
+
</fingerprint>
|
228
|
+
<fingerprint pattern="^CMailServer ([\d\.]+) POP3 Service Ready$">
|
229
|
+
<description>CMailServer</description>
|
230
|
+
<example service.version="5.0.0">CMailServer 5.0.0 POP3 Service Ready</example>
|
231
|
+
<param pos="0" name="service.product" value="CMailServer"/>
|
232
|
+
<param pos="0" name="service.vendor" value="Youngzsoft"/>
|
233
|
+
<param pos="0" name="os.family" value="Windows"/>
|
234
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
235
|
+
<param pos="1" name="service.version"/>
|
236
|
+
</fingerprint>
|
237
|
+
<fingerprint pattern="^POP3 Bigfoot v(\d\.\d) server ready$">
|
238
|
+
<description>POP3 Bigfoot server</description>
|
239
|
+
<example service.version="1.0">POP3 Bigfoot v1.0 server ready</example>
|
240
|
+
<param pos="0" name="service.vendor" value="Bigfoot"/>
|
241
|
+
<param pos="0" name="service.family" value="Bigfoot Email Tools"/>
|
242
|
+
<param pos="0" name="service.product" value="Bigfoot Email Tools"/>
|
243
|
+
<param pos="1" name="service.version"/>
|
244
|
+
</fingerprint>
|
245
|
+
<fingerprint pattern="^CCProxy ([\d.]+) POP3 Service Ready$">
|
246
|
+
<description>CCProxy POP3 server</description>
|
247
|
+
<example service.version="8.0">CCProxy 8.0 POP3 Service Ready</example>
|
248
|
+
<example service.version="2010">CCProxy 2010 POP3 Service Ready</example>
|
249
|
+
<example service.version="6.4.2">CCProxy 6.4.2 POP3 Service Ready</example>
|
250
|
+
<param pos="0" name="service.vendor" value="Youngzsoft"/>
|
251
|
+
<param pos="0" name="service.family" value="CCProxy"/>
|
252
|
+
<param pos="0" name="service.product" value="CCProxy"/>
|
253
|
+
<param pos="1" name="service.version"/>
|
254
|
+
</fingerprint>
|
255
|
+
<fingerprint pattern="^POP3 on WinWebMail \[([\d.]+)\] ready\.$">
|
256
|
+
<description>WinWebmail POP3</description>
|
257
|
+
<example service.version="1.1.1.1">POP3 on WinWebMail [1.1.1.1] ready.</example>
|
258
|
+
<param pos="0" name="service.product" value="WinWebMail"/>
|
259
|
+
<param pos="0" name="service.vendor" value="Ma Jian"/>
|
260
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
261
|
+
<param pos="0" name="os.family" value="Windows"/>
|
262
|
+
<param pos="0" name="os.product" value="Windows"/>
|
263
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
264
|
+
<param pos="1" name="service.version"/>
|
265
|
+
</fingerprint>
|
266
|
+
<fingerprint pattern="^BlackJumboDog \(Version ([\d\.]+)\) ready$">
|
267
|
+
<description>BlackJumboDog</description>
|
268
|
+
<example service.version="5.7.5.0">BlackJumboDog (Version 5.7.5.0) ready</example>
|
269
|
+
<param pos="0" name="service.vendor" value="SapporoWorks"/>
|
270
|
+
<param pos="0" name="service.product" value="BlackJumboDog"/>
|
271
|
+
<param pos="0" name="os.family" value="Windows"/>
|
272
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
273
|
+
<param pos="0" name="os.product" value="Windows"/>
|
274
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
275
|
+
<param pos="1" name="service.version"/>
|
276
|
+
</fingerprint>
|
277
|
+
<!--
|
278
|
+
; Mandrake 8.1 - uses UW IMAP
|
279
|
+
; +OK POP3 mandrake81-f540k v2000.70mdk server ready
|
280
|
+
// wu-imap?
|
281
|
+
// +OK POP3 pytha434.rsjp.net 2004.89w server ready
|
282
|
+
// +OK POP3 cctlaser.com 2004.89s server ready
|
283
|
+
// +OK POP3 [158.122.12.70] v2003.83mdk server ready
|
284
|
+
// +OK POP3 [161.58.53.189] 2006b.94 server ready
|
285
|
+
// +OK POP3 [192.168.0.250] v2000.70rh server ready
|
286
|
+
|
287
|
+
; Lotus Domino - NOTE: POP versions do not map to Domino version
|
288
|
+
// +OK Lotus Notes POP3 server version X2.0 ready <0015521D.86257321.0000081C.00000008@Atlas/AgileTek> on Atlas/AgileTek.
|
289
|
+
( call ?j_popPatterns add
|
290
|
+
"^\\+OK Lotus Notes POP3 server version ([^ ]*) ready on ([^\\.]*)\\.$" )
|
291
|
+
( call ?j_popNames add "Lotus-Domino" )
|
292
|
+
|
293
|
+
// +OK alquilerpc.com.mx POP3 Server (Version 1.020h) ready.
|
294
|
+
|
295
|
+
// Ipswitch IMail
|
296
|
+
// +OK X1 NT-POP3 Server geneseenet06 (IMail 8.22 45450-1)
|
297
|
+
|
298
|
+
// +OK X1 POP3 Mail Server
|
299
|
+
|
300
|
+
// +OK server POP3 server (DeskNow POP3 Server 1.0) ready
|
301
|
+
|
302
|
+
// +OK <1185161310.3352@goto15028.com> [XMail 1.24 POP3 Server] service ready; Mon, 23 Jul 2007 11:28:30 +0800
|
303
|
+
|
304
|
+
// +OK IdeaPop3Server v0.50 ready.
|
305
|
+
|
306
|
+
// +OK qxztmail POP3 server (STD Ymailserver v1.8 POP3) ready
|
307
|
+
|
308
|
+
// +OK blue.forest-green.lan POP3 server (JAMES POP3 Server 2.2.0) ready
|
309
|
+
|
310
|
+
// +OK xxx CMailServer 5.2 POP3 Service Ready
|
311
|
+
|
312
|
+
// +OK iac3 Solstice (tm) Internet Mail Server (tm) POP3 2.0 at Mon, 23 Jul 2007 20:08:02 -0500 (CDT)
|
313
|
+
|
314
|
+
// +OK Gordano Messaging Suite POP3 server ready
|
315
|
+
// +OK Gordano Messaging Suite POP3 server ready <13501095613509@hollandcanadaline.com>
|
316
|
+
|
317
|
+
// +OK unitechna.lt Merak 8.9.1 POP3 Sun, 22 Jul 2007 23:16:25 +0300 <20070722231625@unitechna.lt>
|
318
|
+
|
319
|
+
|
320
|
+
// +OK Cubic Circle's v1.31 1998/05/13 POP3 ready <0c9300004104a246@www.dvdld.co.za>
|
321
|
+
|
322
|
+
// +OK Welcome to MailEnable POP3 Server
|
323
|
+
|
324
|
+
// +OK GroupWise POP3 server ready
|
325
|
+
|
326
|
+
// +OK POP3 AnalogX Proxy 4.14 (Release) ready.
|
327
|
+
|
328
|
+
// +OK lojack.com.ar POP MDaemon 9.6.0 ready <MDAEMON-F200707232110.AA1001241MD4604@lojack.com.ar>
|
329
|
+
|
330
|
+
// +OK DBMAIL pop3 server ready to rock <4393e6301f984e87ad7cdc766595c78f@mx>
|
331
|
+
|
332
|
+
// +OK POP3 Welcome to vm-pop3d 1.1.6 <83532.1185400462@romeo.hostlab.nl>
|
333
|
+
|
334
|
+
// +OK Solid POP3 server ready
|
335
|
+
|
336
|
+
// +OK ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.8.9)
|
337
|
+
|
338
|
+
// +OK POP3 titan [cppop 20.0] at [207.150.171.34]
|
339
|
+
|
340
|
+
// +OK ModusMail POP3 Server-NOTF 4.2.425.4 Ready <42760712.1185328354.283@gbso.net>
|
341
|
+
|
342
|
+
// +OK DPOP Version number supressed.
|
343
|
+
|
344
|
+
// +OK XPOP3 0.0.1 server ready
|
345
|
+
|
346
|
+
-ERR (Proxy) connect error:socket error:No route to host
|
347
|
+
-ERR No permission
|
348
|
+
-ERR sorry, POP server too busy right now. Try again later.
|
349
|
+
-ERR This IP is not configured for POP3 service. Please contact Allstream at 1-888-655-7670.
|
350
|
+
+OK
|
351
|
+
+OK
|
352
|
+
+OK <0bdec6022085d6c34a0e48bb77bf8cf3@juno.thinkburst.com>
|
353
|
+
+OK <869521546.23059@mail.tecedge.net>, POP3 server ready.
|
354
|
+
+OK host CMailServer 5.2 POP3 Service Ready
|
355
|
+
+OK 2net.com POP MDaemon 7.2.0 ready <MDAEMON-F200707241631.AA3131578MD3019@2net.com>
|
356
|
+
+OK alakhan.kz POP MDaemon 6.8.4 ready <MDAEMON-F200707231617.AA1715437MD3489@alakhan.kz>
|
357
|
+
+OK alquilerpc.com.mx POP3 Server (Version 1.020h) ready.
|
358
|
+
+OK ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.8.9)
|
359
|
+
+OK blue.forest-green.lan POP3 server (JAMES POP3 Server 2.2.0) ready
|
360
|
+
+OK canoeregatta.org POP3 Server (Version 1.020h) ready.
|
361
|
+
+OK codebase.com.au POP MDaemon 9.6.1 ready <MDAEMON-F200707220122.AA2235837MD8039@codebase.com.au>
|
362
|
+
+OK Cubic Circle's v1.31 1998/05/13 POP3 ready <0c9300004104a246@www.dvdld.co.za>
|
363
|
+
+OK DBMAIL pop3 server ready to rock <4393e6301f984e87ad7cdc766595c78f@mx>
|
364
|
+
+OK ddc.lv POP MDaemon 9.0.4 ready <MDAEMON-F200707221319.AA1908942MD2984@ddc.lv>
|
365
|
+
+OK DPOP Version number supressed.
|
366
|
+
+OK Gordano Messaging Suite POP3 server ready
|
367
|
+
+OK Gordano Messaging Suite POP3 server ready <13501095613509@hollandcanadaline.com>
|
368
|
+
+OK Gordano Messaging Suite POP3 server ready <17142725297473@nefonline.de>
|
369
|
+
+OK GroupWise POP3 server ready
|
370
|
+
+OK Hello there. <4405.1185250906@localhost.localdomain>
|
371
|
+
+OK iac3 Solstice (tm) Internet Mail Server (tm) POP3 2.0 at Mon, 23 Jul 2007 20:08:02 -0500 (CDT)
|
372
|
+
+OK IdeaPop3Server v0.50 ready.
|
373
|
+
+OK justkidsmagazine.com POP3 Server (Version 1.020h) ready.
|
374
|
+
+OK lojack.com.ar POP MDaemon 9.6.0 ready <MDAEMON-F200707232110.AA1001241MD4604@lojack.com.ar>
|
375
|
+
+OK Lotus Notes POP3 server version X2.0 ready <0015521D.86257321.0000081C.00000008@Atlas/AgileTek> on Atlas/AgileTek.
|
376
|
+
+OK mail.inter-ecom.com MERAK 3.00.120 POP3 Fri, 20 Jul 2007 23:01:52 -0700 <20070720230152@mail.inter-ecom.com>
|
377
|
+
+OK ModusMail POP3 Server-NOTF 4.2.425.4 Ready <42760712.1185328354.283@gbso.net>
|
378
|
+
+OK myflock.christianwebhost.com POP3 Server (Version 1.020h) ready.
|
379
|
+
+OK pchomehouston.com POP3 Server (Version 1.020h) ready.
|
380
|
+
+OK POP server version 2.53 ready from w2k1332
|
381
|
+
+OK POP3 [158.122.12.70] v2003.83mdk server ready
|
382
|
+
+OK POP3 [161.58.53.189] 2006b.94 server ready
|
383
|
+
+OK POP3 [192.168.0.250] v2000.70rh server ready
|
384
|
+
+OK POP3 [193.203.43.90] 2004.89 server ready
|
385
|
+
+OK POP3 [199.236.35.240] v2000.70 server ready
|
386
|
+
+OK POP3 [199.236.46.233] v2000.70 server ready
|
387
|
+
+OK POP3 [216.17.96.200] 2004.89 server ready
|
388
|
+
+OK POP3 [220.111.0.198] v2000.70 server ready
|
389
|
+
+OK POP3 [60.43.204.115] v2000.70 server ready
|
390
|
+
+OK POP3 [61.126.32.231] v2000.70 server ready
|
391
|
+
+OK POP3 [66.49.140.201] v2003.83rh server ready
|
392
|
+
+OK POP3 [89.110.105.178] 2004.89 server ready
|
393
|
+
+OK POP3 [89.110.111.108] 2004.89 server ready
|
394
|
+
+OK POP3 [89.110.120.59] 2004.89 server ready
|
395
|
+
+OK POP3 [89.110.123.169] 2004.89 server ready
|
396
|
+
+OK POP3 [89.110.88.248] 2004.89 server ready
|
397
|
+
+OK POP3 220-130-130-112.HINET-IP.hinet.net v2000.70 server ready
|
398
|
+
+OK POP3 AnalogX Proxy 4.14 (Release) ready.
|
399
|
+
+OK POP3 artfulssoul.com v2001.78rh server ready
|
400
|
+
+OK POP3 bibliotake.nl v2001.78rh server ready
|
401
|
+
+OK POP3 blog.celebkings.com v2003.83rh server ready
|
402
|
+
+OK POP3 bureau25.ns.utoronto.ca 2006f.96 server ready
|
403
|
+
+OK POP3 cctlaser.com 2004.89s server ready
|
404
|
+
+OK POP3 creditsuisseplm.tempdomainname.com 2004.89s server ready
|
405
|
+
+OK POP3 energypress.com 2004.89 server ready
|
406
|
+
+OK POP3 ez3 [cppop 20.0] at [64.119.173.146]
|
407
|
+
+OK POP3 frankscenterinc.com 2004.89 server ready
|
408
|
+
+OK POP3 fred08.tempdomainname.com 2004.89s server ready
|
409
|
+
+OK POP3 giantkangaroo.com v2003.83rh server ready
|
410
|
+
+OK POP3 host [cppop 20.0] at [66.45.252.61]
|
411
|
+
+OK POP3 host62 [cppop 20.0] at [216.120.237.62]
|
412
|
+
+OK POP3 hypolite.com v2001.78rh server ready
|
413
|
+
+OK POP3 juma [cppop 20.0] at [140.99.39.68]
|
414
|
+
+OK POP3 ksblist.com v2003.83rh server ready
|
415
|
+
+OK POP3 lakegeorgedaycare.com 2004.89s server ready
|
416
|
+
+OK POP3 localhost server ready
|
417
|
+
+OK POP3 localhost 2004.89 server ready
|
418
|
+
+OK POP3 localhost v2000.69hw server ready
|
419
|
+
+OK POP3 localhost v2001.78rh server ready
|
420
|
+
+OK POP3 monki.net v2003.83rh server ready
|
421
|
+
+OK POP3 nativeamericanlinks.com v2001.78rh server ready
|
422
|
+
+OK POP3 ns.skymarkgroup.com v2001.78rh server ready
|
423
|
+
+OK POP3 oliveiradressage.com v2003.83rh server ready
|
424
|
+
+OK POP3 pegasus [cppop 20.0] at [64.235.240.105]
|
425
|
+
+OK POP3 pytha434.rsjp.net 2004.89w server ready
|
426
|
+
+OK POP3 qwiknet.com 2004.89 server ready
|
427
|
+
+OK POP3 rrm82.fastlinknet.com v2003.83rh server ready
|
428
|
+
+OK POP3 saruman [cppop 20.0] at [82.136.60.52]
|
429
|
+
+OK POP3 scitechlicensing.com v2003.83rh server ready
|
430
|
+
+OK POP3 server-p002 [cppop 19.0] at [217.26.51.207]
|
431
|
+
+OK POP3 server [cppop 20.0] at [72.249.45.83]
|
432
|
+
+OK POP3 server [cppop 21.0] at [216.227.223.68]
|
433
|
+
+OK POP3 server ready
|
434
|
+
+OK POP3 server ready QuickMail Pro Server for Mac 3.0.2 <9a937c2c@192.168.0.254>
|
435
|
+
+OK POP3 taiwanjohnson.com.tw v2001.78rh server ready
|
436
|
+
+OK POP3 telesto [cppop 20.0] at [209.123.140.118]
|
437
|
+
+OK POP3 titan [cppop 20.0] at [207.150.171.34]
|
438
|
+
+OK POP3 top [cppop 21.0] at [70.87.244.140]
|
439
|
+
+OK POP3 txsunset.com v2001.78rh server ready
|
440
|
+
+OK POP3 umb.bankersacademy.com 2004.89s server ready
|
441
|
+
+OK POP3 unrealfactory.com v2003.83rh server ready
|
442
|
+
+OK POP3 venus [cppop 20.0] at [216.54.232.223]
|
443
|
+
+OK POP3 vitalmoment.com v4.47 server ready
|
444
|
+
+OK POP3 vps [cppop 21.0] at [207.58.145.19]
|
445
|
+
+OK POP3 web1 [cppop 21.0] at [72.9.237.53]
|
446
|
+
+OK POP3 Welcome to vm-pop3d 1.1.6 <83532.1185400462@romeo.hostlab.nl>
|
447
|
+
+OK POP3 Welcome to vm-pop3d 1.1.7f-DA-2
|
448
|
+
+OK POP3 wirelessintro [cppop 20.0] at [72.18.130.64]
|
449
|
+
+OK POP3 www.boomingusedautoparts.com 2006b.94 server ready
|
450
|
+
+OK POP3 www.happytails2u.com 2004.89 server ready
|
451
|
+
+OK POP3 www.homebasedwizard.com 2004.89 server ready
|
452
|
+
+OK POP3 www.webmail.imperioe.com 2004.89 server ready
|
453
|
+
+OK qxztmail POP3 server (STD Ymailserver v1.8 POP3) ready
|
454
|
+
+OK Radish (Version 3.0.0-b021) ready
|
455
|
+
+OK ready
|
456
|
+
+OK ready <11514.1185210732@freedom.concept69.de>
|
457
|
+
+OK ready <14026.1184992338@s076-129.ub.firstserver.ne.jp>
|
458
|
+
+OK ready <16013.1185110479@p1.in11.squarestart.ne.jp>
|
459
|
+
+OK ready <1602.1185138403@p10084207.pureserver.de>
|
460
|
+
+OK ready <17391.1185103166@www.e-shci.org>
|
461
|
+
+OK ready <17638.1185005363@o6.s023v.squarestart.ne.jp>
|
462
|
+
+OK ready <21400.1185465572@q7.s036v.smilestart.ne.jp>
|
463
|
+
+OK ready <2964.1185086744@nissan-forksaitama.co.jp>
|
464
|
+
+OK ready <9704.1185097132@h9.s011v.squarestart.ne.jp>
|
465
|
+
+OK recvmail/he.net POP3 Server
|
466
|
+
+OK refinanceloanjones.com POP3 Server (Version 1.020h) ready.
|
467
|
+
+OK samare.it POP MDaemon 6.8.5 ready <MDAEMON-F200707220351.AA513460MD5338@samare.it>
|
468
|
+
+OK server POP3 server (DeskNow POP3 Server 1.0) ready
|
469
|
+
+OK silexaviacion.com POP3 Server (Version 1.020h) ready.
|
470
|
+
+OK simple-photography.com POP3 Server (Version 1.020h) ready.
|
471
|
+
+OK Solid POP3 server ready
|
472
|
+
+OK studiovisuals.com POP3 Server (Version 1.020h) ready.
|
473
|
+
+OK themeekermall.com POP3 Server (Version 1.020h) ready.
|
474
|
+
+OK unitechna.lt Merak 8.9.1 POP3 Sun, 22 Jul 2007 23:16:25 +0300 <20070722231625@unitechna.lt>
|
475
|
+
+OK Welcome to MailEnable POP3 Server
|
476
|
+
+OK X1 NT-POP3 Server 2436681011.monstercommercesites.com (IMail 7.15 560907-1)
|
477
|
+
+OK X1 NT-POP3 Server Calvin-Serv (IMail 8.22 1107-1)
|
478
|
+
+OK X1 NT-POP3 Server chealsea.com.cn (IMail 8.15 16990-1)
|
479
|
+
+OK X1 NT-POP3 Server dedicated (IMail 9.03 34585-1)
|
480
|
+
+OK X1 NT-POP3 Server exfast114 (IMail 8.10 1204-1)
|
481
|
+
+OK X1 NT-POP3 Server exfast114 (IMail 8.10 548-1)
|
482
|
+
+OK X1 NT-POP3 Server geneseenet06 (IMail 8.22 45450-1)
|
483
|
+
+OK X1 NT-POP3 Server karunrolling.com (IMail 9.10 33410-4)
|
484
|
+
+OK X1 NT-POP3 Server mail.domainebuilders.com (IMail 8.15 562966-2)
|
485
|
+
+OK X1 NT-POP3 Server mail.ectorumc.org (IMail 8.21 421362-1)
|
486
|
+
+OK X1 NT-POP3 Server mail.oecmail2.com (IMail 9.10 135441-3)
|
487
|
+
+OK X1 NT-POP3 Server mail.saturnofdc.com (IMail 7.13 214871-3)
|
488
|
+
+OK X1 NT-POP3 Server ph18.pennyhost.com (IMail 8.22 325883-2)
|
489
|
+
+OK X1 NT-POP3 Server wddx002.wddx.net (IMail 8.15 60353-2)
|
490
|
+
+OK X1 NT-POP3 Server webgistix.com (IMail 8.05 161161-1)
|
491
|
+
+OK X1 POP3 Mail Server
|
492
|
+
+OK XPOP3 0.0.1 server ready
|
493
|
+
220 axigen slmail mdaemon mailserver
|
494
|
+
// apparently this is a P3Scan Proxy bug
|
495
|
+
// http://lists.freebsd.org/pipermail/freebsd-ports/2004-May/012400.html
|
496
|
+
Oops, that would loop!
|
497
|
+
|
498
|
+
-->
|
499
|
+
</fingerprints>
|