recog-intrigue 2.3.7

Sign up to get free protection for your applications and to get access to all the features.
Files changed (130) hide show
  1. checksums.yaml +7 -0
  2. data/.github/ISSUE_TEMPLATE/bug_report.md +37 -0
  3. data/.github/ISSUE_TEMPLATE/feature_request.md +17 -0
  4. data/.github/ISSUE_TEMPLATE/fingerprint_request.md +27 -0
  5. data/.github/PULL_REQUEST_TEMPLATE +24 -0
  6. data/.gitignore +14 -0
  7. data/.rbenv-gemset +1 -0
  8. data/.rspec +3 -0
  9. data/.ruby-gemset +1 -0
  10. data/.ruby-version +1 -0
  11. data/.travis.yml +25 -0
  12. data/.yardopts +1 -0
  13. data/CONTRIBUTING.md +171 -0
  14. data/COPYING +23 -0
  15. data/Gemfile +10 -0
  16. data/LICENSE +7 -0
  17. data/README.md +85 -0
  18. data/Rakefile +22 -0
  19. data/bin/recog_export +81 -0
  20. data/bin/recog_match +55 -0
  21. data/bin/recog_standardize +118 -0
  22. data/bin/recog_verify +64 -0
  23. data/cpe-remap.yaml +134 -0
  24. data/features/data/failing_banners_fingerprints.xml +20 -0
  25. data/features/data/matching_banners_fingerprints.xml +23 -0
  26. data/features/data/multiple_banners_fingerprints.xml +32 -0
  27. data/features/data/no_tests.xml +3 -0
  28. data/features/data/sample_banner.txt +2 -0
  29. data/features/data/successful_tests.xml +18 -0
  30. data/features/data/tests_with_failures.xml +20 -0
  31. data/features/data/tests_with_warnings.xml +17 -0
  32. data/features/match.feature +36 -0
  33. data/features/support/aruba.rb +3 -0
  34. data/features/support/env.rb +6 -0
  35. data/features/verify.feature +48 -0
  36. data/identifiers/README.md +47 -0
  37. data/identifiers/os_architecture.txt +20 -0
  38. data/identifiers/os_device.txt +52 -0
  39. data/identifiers/os_family.txt +160 -0
  40. data/identifiers/os_product.txt +199 -0
  41. data/identifiers/service_family.txt +185 -0
  42. data/identifiers/service_product.txt +255 -0
  43. data/identifiers/software_class.txt +26 -0
  44. data/identifiers/software_family.txt +91 -0
  45. data/identifiers/software_product.txt +333 -0
  46. data/identifiers/vendor.txt +405 -0
  47. data/lib/recog.rb +4 -0
  48. data/lib/recog/db.rb +78 -0
  49. data/lib/recog/db_manager.rb +31 -0
  50. data/lib/recog/fingerprint.rb +280 -0
  51. data/lib/recog/fingerprint/regexp_factory.rb +56 -0
  52. data/lib/recog/fingerprint/test.rb +18 -0
  53. data/lib/recog/formatter.rb +51 -0
  54. data/lib/recog/match_reporter.rb +77 -0
  55. data/lib/recog/matcher.rb +94 -0
  56. data/lib/recog/matcher_factory.rb +14 -0
  57. data/lib/recog/nizer.rb +347 -0
  58. data/lib/recog/verifier.rb +39 -0
  59. data/lib/recog/verifier_factory.rb +13 -0
  60. data/lib/recog/verify_reporter.rb +86 -0
  61. data/lib/recog/version.rb +3 -0
  62. data/misc/convert_mysql_err +61 -0
  63. data/misc/order.xsl +17 -0
  64. data/recog-intrigue.gemspec +45 -0
  65. data/requirements.txt +2 -0
  66. data/spec/data/best_os_match_1.yml +17 -0
  67. data/spec/data/best_os_match_2.yml +17 -0
  68. data/spec/data/best_service_match_1.yml +17 -0
  69. data/spec/data/smb_native_os.txt +25 -0
  70. data/spec/data/test_fingerprints.xml +36 -0
  71. data/spec/data/verification_fingerprints.xml +86 -0
  72. data/spec/data/whitespaced_fingerprint.xml +5 -0
  73. data/spec/lib/fingerprint_self_test_spec.rb +174 -0
  74. data/spec/lib/recog/db_spec.rb +98 -0
  75. data/spec/lib/recog/fingerprint/regexp_factory_spec.rb +73 -0
  76. data/spec/lib/recog/fingerprint_spec.rb +112 -0
  77. data/spec/lib/recog/formatter_spec.rb +69 -0
  78. data/spec/lib/recog/match_reporter_spec.rb +91 -0
  79. data/spec/lib/recog/nizer_spec.rb +330 -0
  80. data/spec/lib/recog/verify_reporter_spec.rb +113 -0
  81. data/spec/spec_helper.rb +82 -0
  82. data/update_cpes.py +186 -0
  83. data/xml/apache_modules.xml +1911 -0
  84. data/xml/apache_os.xml +273 -0
  85. data/xml/architecture.xml +36 -0
  86. data/xml/dns_versionbind.xml +761 -0
  87. data/xml/fingerprints.xsd +128 -0
  88. data/xml/ftp_banners.xml +1553 -0
  89. data/xml/h323_callresp.xml +603 -0
  90. data/xml/hp_pjl_id.xml +358 -0
  91. data/xml/html_title.xml +1630 -0
  92. data/xml/http_cookies.xml +411 -0
  93. data/xml/http_servers.xml +3195 -0
  94. data/xml/http_wwwauth.xml +595 -0
  95. data/xml/imap_banners.xml +245 -0
  96. data/xml/ldap_searchresult.xml +711 -0
  97. data/xml/mdns_device-info_txt.xml +1796 -0
  98. data/xml/mdns_workstation_txt.xml +15 -0
  99. data/xml/mysql_banners.xml +1649 -0
  100. data/xml/mysql_error.xml +871 -0
  101. data/xml/nntp_banners.xml +82 -0
  102. data/xml/ntp_banners.xml +1223 -0
  103. data/xml/operating_system.xml +629 -0
  104. data/xml/pop_banners.xml +499 -0
  105. data/xml/rsh_resp.xml +76 -0
  106. data/xml/rtsp_servers.xml +76 -0
  107. data/xml/sip_banners.xml +359 -0
  108. data/xml/sip_user_agents.xml +221 -0
  109. data/xml/smb_native_lm.xml +62 -0
  110. data/xml/smb_native_os.xml +662 -0
  111. data/xml/smtp_banners.xml +1690 -0
  112. data/xml/smtp_debug.xml +39 -0
  113. data/xml/smtp_ehlo.xml +49 -0
  114. data/xml/smtp_expn.xml +82 -0
  115. data/xml/smtp_help.xml +157 -0
  116. data/xml/smtp_mailfrom.xml +20 -0
  117. data/xml/smtp_noop.xml +44 -0
  118. data/xml/smtp_quit.xml +29 -0
  119. data/xml/smtp_rcptto.xml +25 -0
  120. data/xml/smtp_rset.xml +26 -0
  121. data/xml/smtp_turn.xml +26 -0
  122. data/xml/smtp_vrfy.xml +89 -0
  123. data/xml/snmp_sysdescr.xml +6507 -0
  124. data/xml/snmp_sysobjid.xml +430 -0
  125. data/xml/ssh_banners.xml +1968 -0
  126. data/xml/telnet_banners.xml +1595 -0
  127. data/xml/x11_banners.xml +232 -0
  128. data/xml/x509_issuers.xml +134 -0
  129. data/xml/x509_subjects.xml +1268 -0
  130. metadata +304 -0
@@ -0,0 +1,499 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <fingerprints matches="pop3.banner" protocol="pop3" database_type="service" preference="0.90">
3
+ <!--
4
+ POP3 greeting messages (part of the banner after the status indicator +OK or -ERR) are
5
+ matched against these patterns to fingerprint POP3 servers.
6
+ -->
7
+ <fingerprint pattern="^([^ ]+) +Cyrus POP3 v(\d+\.\d+.*)-OS X(?: Server)? ([\d\.]+).* server ready">
8
+ <description>OSX Cyrus POP</description>
9
+ <example host.domain="8.8.8.8" service.version="2.3.8" os.version="10.5">8.8.8.8 Cyrus POP3 v2.3.8-OS X Server 10.5: 9A562 server ready &lt;1999107648.1324502155@8.8.8.8&gt;</example>
10
+ <param pos="0" name="service.vendor" value="Carnegie Mellon University"/>
11
+ <param pos="0" name="service.family" value="Cyrus MTA"/>
12
+ <param pos="0" name="service.product" value="Cyrus POP"/>
13
+ <param pos="2" name="service.version"/>
14
+ <param pos="0" name="os.vendor" value="Apple"/>
15
+ <param pos="0" name="os.family" value="Mac OS X"/>
16
+ <param pos="0" name="os.product" value="Mac OS X"/>
17
+ <param pos="3" name="os.version"/>
18
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:{os.version}"/>
19
+ <param pos="1" name="host.domain"/>
20
+ </fingerprint>
21
+ <fingerprint pattern="^([^ ]+) +Cyrus POP3 v([\d\.]+)">
22
+ <description>CMU Cyrus POP</description>
23
+ <example host.domain="foo" service.version="2.3">foo Cyrus POP3 v2.3</example>
24
+ <example host.domain="foo" service.version="2.3.14">foo Cyrus POP3 v2.3.14 server ready &lt;13087751828270990591.1301068892@foo&gt;</example>
25
+ <param pos="0" name="service.vendor" value="Carnegie Mellon University"/>
26
+ <param pos="0" name="service.family" value="Cyrus MTA"/>
27
+ <param pos="0" name="service.product" value="Cyrus POP"/>
28
+ <param pos="2" name="service.version"/>
29
+ <param pos="1" name="host.domain"/>
30
+ </fingerprint>
31
+ <fingerprint pattern="^Lotus Notes POP3 server version X[^ ]+ ready on .*$">
32
+ <description>IBM Lotus Notes/Domino</description>
33
+ <example>Lotus Notes POP3 server version X2.0 ready on foo/bar.</example>
34
+ <param pos="0" name="service.vendor" value="IBM"/>
35
+ <param pos="0" name="service.family" value="Lotus Domino"/>
36
+ <param pos="0" name="service.product" value="Lotus Domino"/>
37
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_domino:-"/>
38
+ </fingerprint>
39
+ <fingerprint pattern="^Lotus Notes POP3 server version Release ([^ ]+) ready on .*$">
40
+ <description>IBM Lotus Notes/Domino - Release variant</description>
41
+ <example service.version="8.5.1FP5">Lotus Notes POP3 server version Release 8.5.1FP5 ready on foo/US.</example>
42
+ <param pos="0" name="service.vendor" value="IBM"/>
43
+ <param pos="0" name="service.family" value="Lotus Domino"/>
44
+ <param pos="0" name="service.product" value="Lotus Domino"/>
45
+ <param pos="1" name="service.version"/>
46
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_domino:{service.version}"/>
47
+ </fingerprint>
48
+ <fingerprint pattern="^Qpopper \(version (\d+\.\d+\.\d+), modified by Sphera Technologies\) at (.+) starting\..*$">
49
+ <description>Qpopper with Sphera mods</description>
50
+ <example>Qpopper (version 4.0.3, modified by Sphera Technologies) at domain starting. &lt;xxx@domain&gt;</example>
51
+ <param pos="0" name="service.vendor" value="Sphera"/>
52
+ <param pos="0" name="service.family" value="Qpopper"/>
53
+ <param pos="0" name="service.product" value="Qpopper"/>
54
+ <param pos="1" name="service.version"/>
55
+ <param pos="2" name="host.domain"/>
56
+ </fingerprint>
57
+ <fingerprint pattern="^Qpopper \(version (\d+\.\d+\.\d+)-mysql-(.+)\) at (.+) starting\..*$">
58
+ <description>Qpopper with MySQL auth module</description>
59
+ <example>Qpopper (version 4.0.3-mysql-0.13) at domain starting. &lt;xxx@domain&gt;</example>
60
+ <param pos="0" name="service.vendor" value="Qualcomm"/>
61
+ <param pos="0" name="service.family" value="Qpopper"/>
62
+ <param pos="0" name="service.product" value="Qpopper"/>
63
+ <param pos="1" name="service.version"/>
64
+ <param pos="0" name="service.component.family" value="qpopper-mysql"/>
65
+ <param pos="0" name="service.component.product" value="qpopper-mysql"/>
66
+ <param pos="2" name="service.component.version"/>
67
+ <param pos="3" name="host.domain"/>
68
+ </fingerprint>
69
+ <fingerprint pattern="(?i)^Qpop(?:per)? \(version ([\d\.]+)\) at (.+)(?: starting\.)?.*$">
70
+ <description>Qpopper missing version info</description>
71
+ <example>Qpopper (version 4.0.16) at foo.example.com</example>
72
+ <example>QPOP (version 2.53) at domain starting. &lt;xxx@domain&gt;</example>
73
+ <example>Qpopper (version 4.0.3) at domain starting. &lt;xxx@domain&gt;</example>
74
+ <param pos="0" name="service.vendor" value="Qualcomm"/>
75
+ <param pos="0" name="service.family" value="Qpopper"/>
76
+ <param pos="0" name="service.product" value="Qpopper"/>
77
+ <param pos="1" name="service.version"/>
78
+ <param pos="2" name="host.domain"/>
79
+ </fingerprint>
80
+ <fingerprint pattern="^QPOP \(version (.*)\) at (.+) starting\..*$">
81
+ <description>Qpopper with missing version info</description>
82
+ <example>QPOP (version ?) at domain starting. &lt;xxx@domain&gt;</example>
83
+ <param pos="0" name="service.vendor" value="Qualcomm"/>
84
+ <param pos="0" name="service.family" value="Qpopper"/>
85
+ <param pos="0" name="service.product" value="Qpopper"/>
86
+ <param pos="1" name="qpopper.version"/>
87
+ <param pos="2" name="host.domain"/>
88
+ </fingerprint>
89
+ <fingerprint pattern="^Microsoft Exchange Server 2003 POP3 server version (\d+\.\d+\.\d+\.\d+) (.+) ready.$">
90
+ <description>Microsoft Exchange Server 2003</description>
91
+ <example>Microsoft Exchange Server 2003 POP3 server version 6.5.6944.0 (host) ready.</example>
92
+ <param pos="0" name="service.vendor" value="Microsoft"/>
93
+ <param pos="0" name="service.family" value="Exchange Server"/>
94
+ <param pos="0" name="service.product" value="Exchange 2003 Server"/>
95
+ <param pos="1" name="service.version"/>
96
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:exchange_server:{service.version}"/>
97
+ <param pos="2" name="host.name"/>
98
+ <param pos="0" name="os.vendor" value="Microsoft"/>
99
+ <param pos="0" name="os.family" value="Windows"/>
100
+ <param pos="0" name="os.product" value="Windows"/>
101
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
102
+ </fingerprint>
103
+ <fingerprint pattern="^Microsoft Exchange 2000 POP3 server version (\d+\.\d+\.\d+\.\d+) (.+) ready.$">
104
+ <description>Microsoft Exchange Server 2000</description>
105
+ <example>Microsoft Exchange 2000 POP3 server version 6.0.6603.0 (host) ready.</example>
106
+ <param pos="0" name="service.vendor" value="Microsoft"/>
107
+ <param pos="0" name="service.family" value="Exchange Server"/>
108
+ <param pos="0" name="service.product" value="Exchange 2000 Server"/>
109
+ <param pos="1" name="service.version"/>
110
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:exchange_server:{service.version}"/>
111
+ <param pos="2" name="host.name"/>
112
+ <param pos="0" name="os.vendor" value="Microsoft"/>
113
+ <param pos="0" name="os.family" value="Windows"/>
114
+ <param pos="0" name="os.product" value="Windows"/>
115
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
116
+ </fingerprint>
117
+ <fingerprint pattern="^Microsoft Exchange POP3 server version (\d+\.\d+\.\d+\.\d+) ready$">
118
+ <description>Microsoft Exchange Server</description>
119
+ <example>Microsoft Exchange POP3 server version 5.5.2654.50 ready</example>
120
+ <param pos="0" name="service.vendor" value="Microsoft"/>
121
+ <param pos="0" name="service.family" value="Exchange Server"/>
122
+ <param pos="0" name="service.product" value="Exchange Server"/>
123
+ <param pos="1" name="service.version"/>
124
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:exchange_server:{service.version}"/>
125
+ <param pos="0" name="os.vendor" value="Microsoft"/>
126
+ <param pos="0" name="os.family" value="Windows"/>
127
+ <param pos="0" name="os.product" value="Windows"/>
128
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
129
+ </fingerprint>
130
+ <fingerprint pattern="^Microsoft Windows POP3 Service Version 1.0 &lt;.+@(.+)&gt; ready.$">
131
+ <description>Microsoft POP3 Services on Windows 2003</description>
132
+ <example>Microsoft Windows POP3 Service Version 1.0 &lt;xxx@host&gt; ready.</example>
133
+ <param pos="0" name="service.vendor" value="Microsoft"/>
134
+ <param pos="0" name="service.family" value="E-mail Services"/>
135
+ <param pos="0" name="service.product" value="E-mail Services"/>
136
+ <param pos="1" name="host.name"/>
137
+ <param pos="0" name="os.vendor" value="Microsoft"/>
138
+ <param pos="0" name="os.family" value="Windows"/>
139
+ <param pos="0" name="os.product" value="Windows Server 2003"/>
140
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
141
+ </fingerprint>
142
+ <fingerprint pattern="^Microsoft Exchange Server 2007 POP3 service ready\.?$">
143
+ <description>Microsoft Exchange Server 2007</description>
144
+ <example>Microsoft Exchange Server 2007 POP3 service ready</example>
145
+ <param pos="0" name="service.vendor" value="Microsoft"/>
146
+ <param pos="0" name="service.family" value="Exchange Server"/>
147
+ <param pos="0" name="service.product" value="Exchange 2007 Server"/>
148
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:exchange_server:-"/>
149
+ <param pos="0" name="os.vendor" value="Microsoft"/>
150
+ <param pos="0" name="os.family" value="Windows"/>
151
+ <param pos="0" name="os.product" value="Windows"/>
152
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
153
+ </fingerprint>
154
+ <fingerprint pattern="^The? Microsoft Exchange POP3 service is ready\.?$">
155
+ <description>Microsoft Exchange Server, generic</description>
156
+ <example>The Microsoft Exchange POP3 service is ready.</example>
157
+ <param pos="0" name="service.vendor" value="Microsoft"/>
158
+ <param pos="0" name="service.family" value="Exchange Server"/>
159
+ <param pos="0" name="service.product" value="Exchange Server"/>
160
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:exchange_server:-"/>
161
+ <param pos="0" name="os.vendor" value="Microsoft"/>
162
+ <param pos="0" name="os.family" value="Windows"/>
163
+ <param pos="0" name="os.product" value="Windows"/>
164
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
165
+ </fingerprint>
166
+ <fingerprint pattern="^[dD]ovecot (?:DA )?ready\.(?: &lt;.+@(.+)&gt;)?$">
167
+ <description>Dovecot Secure POP Server</description>
168
+ <param pos="0" name="service.family" value="Dovecot"/>
169
+ <param pos="0" name="service.product" value="Dovecot"/>
170
+ <param pos="1" name="host.name"/>
171
+ </fingerprint>
172
+ <fingerprint pattern="^(\S+) Zimbra POP3 server ready\.?$">
173
+ <description>VMware Zimbra POP</description>
174
+ <example host.name="foo.bar">foo.bar Zimbra POP3 server ready</example>
175
+ <param pos="0" name="service.vendor" value="VMware"/>
176
+ <param pos="0" name="service.product" value="Zimbra"/>
177
+ <param pos="0" name="service.cpe23" value="cpe:/a:vmware:zimbra_desktop:-"/>
178
+ <param pos="1" name="host.name"/>
179
+ </fingerprint>
180
+ <fingerprint pattern="^(\S+) Zimbra (\S+) POP3 server ready\.?$">
181
+ <description>VMware Zimbra POP with version</description>
182
+ <example host.name="foo.bar">foo.bar Zimbra 7.0.0_GA_3079 POP3 server ready</example>
183
+ <param pos="0" name="service.vendor" value="VMware"/>
184
+ <param pos="0" name="service.product" value="Zimbra"/>
185
+ <param pos="2" name="service.version"/>
186
+ <param pos="0" name="service.cpe23" value="cpe:/a:vmware:zimbra_desktop:{service.version}"/>
187
+ <param pos="1" name="host.name"/>
188
+ </fingerprint>
189
+ <fingerprint pattern="^(?:S?POP3? server ready |Hello there.? )?&lt;.*@([^&gt;]+)&gt;$">
190
+ <description>Generic masked POP3 server</description>
191
+ <example>POP3 server ready &lt;58c29ae4-7316-429e-8109-060444ab1a28@foo.example.com&gt;</example>
192
+ <example>&lt;84427.1298535083@foo.example.com&gt;</example>
193
+ <param pos="1" name="host.name"/>
194
+ </fingerprint>
195
+ <fingerprint pattern="^ApplePasswordServer ([\d\.]+) password">
196
+ <description>Apple Open Directory</description>
197
+ <example>ApplePasswordServer 10.6.0.0 password server at 10.2.90.228 ready.</example>
198
+ <example>ApplePasswordServer 10.5.0.1 password serv</example>
199
+ <param pos="0" name="service.vendor" value="Apple"/>
200
+ <param pos="0" name="service.product" value="Open Directory"/>
201
+ <param pos="0" name="os.vendor" value="Apple"/>
202
+ <param pos="0" name="os.family" value="Mac OS X"/>
203
+ <param pos="0" name="os.product" value="Mac OS X"/>
204
+ <param pos="1" name="os.version"/>
205
+ <param pos="0" name="os.certainty" value="0.5"/>
206
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:{os.version}"/>
207
+ </fingerprint>
208
+ <fingerprint pattern="^TCPIP POP server V\d\.\d\S-\S{3}, OpenVMS V(\d\.\d-\d)(?:\s+\S+)?\s+at\s+(\S+), .*$">
209
+ <description>TCP/IP Services for OpenVMS POP server</description>
210
+ <example os.version="7.3-2" host.name="example.com">TCPIP POP server V5.4J-15A, OpenVMS V7.3-2 Alpha at example.com, up since 2015-02-12 08:44:53 20400434.2</example>
211
+ <param pos="0" name="service.family" value="OpenVMS"/>
212
+ <param pos="0" name="service.product" value="TCPIP POP server"/>
213
+ <param pos="0" name="service.vendor" value="HP"/>
214
+ <param pos="0" name="os.vendor" value="HP"/>
215
+ <param pos="0" name="os.family" value="OpenVMS"/>
216
+ <param pos="0" name="os.product" value="OpenVMS"/>
217
+ <param pos="1" name="os.version"/>
218
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:openvms:{os.version}"/>
219
+ <param pos="2" name="host.name"/>
220
+ </fingerprint>
221
+ <fingerprint pattern="^Hello there\.$">
222
+ <description>Courier MTA POP</description>
223
+ <example>Hello there.</example>
224
+ <param pos="0" name="service.vendor" value="Double Precision"/>
225
+ <param pos="0" name="service.family" value="Courier MTA"/>
226
+ <param pos="0" name="service.product" value="Courier POP"/>
227
+ </fingerprint>
228
+ <fingerprint pattern="^CMailServer ([\d\.]+) POP3 Service Ready$">
229
+ <description>CMailServer</description>
230
+ <example service.version="5.0.0">CMailServer 5.0.0 POP3 Service Ready</example>
231
+ <param pos="0" name="service.product" value="CMailServer"/>
232
+ <param pos="0" name="service.vendor" value="Youngzsoft"/>
233
+ <param pos="0" name="os.family" value="Windows"/>
234
+ <param pos="0" name="os.vendor" value="Microsoft"/>
235
+ <param pos="1" name="service.version"/>
236
+ </fingerprint>
237
+ <fingerprint pattern="^POP3 Bigfoot v(\d\.\d) server ready$">
238
+ <description>POP3 Bigfoot server</description>
239
+ <example service.version="1.0">POP3 Bigfoot v1.0 server ready</example>
240
+ <param pos="0" name="service.vendor" value="Bigfoot"/>
241
+ <param pos="0" name="service.family" value="Bigfoot Email Tools"/>
242
+ <param pos="0" name="service.product" value="Bigfoot Email Tools"/>
243
+ <param pos="1" name="service.version"/>
244
+ </fingerprint>
245
+ <fingerprint pattern="^CCProxy ([\d.]+) POP3 Service Ready$">
246
+ <description>CCProxy POP3 server</description>
247
+ <example service.version="8.0">CCProxy 8.0 POP3 Service Ready</example>
248
+ <example service.version="2010">CCProxy 2010 POP3 Service Ready</example>
249
+ <example service.version="6.4.2">CCProxy 6.4.2 POP3 Service Ready</example>
250
+ <param pos="0" name="service.vendor" value="Youngzsoft"/>
251
+ <param pos="0" name="service.family" value="CCProxy"/>
252
+ <param pos="0" name="service.product" value="CCProxy"/>
253
+ <param pos="1" name="service.version"/>
254
+ </fingerprint>
255
+ <fingerprint pattern="^POP3 on WinWebMail \[([\d.]+)\] ready\.$">
256
+ <description>WinWebmail POP3</description>
257
+ <example service.version="1.1.1.1">POP3 on WinWebMail [1.1.1.1] ready.</example>
258
+ <param pos="0" name="service.product" value="WinWebMail"/>
259
+ <param pos="0" name="service.vendor" value="Ma Jian"/>
260
+ <param pos="0" name="os.vendor" value="Microsoft"/>
261
+ <param pos="0" name="os.family" value="Windows"/>
262
+ <param pos="0" name="os.product" value="Windows"/>
263
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
264
+ <param pos="1" name="service.version"/>
265
+ </fingerprint>
266
+ <fingerprint pattern="^BlackJumboDog \(Version ([\d\.]+)\) ready$">
267
+ <description>BlackJumboDog</description>
268
+ <example service.version="5.7.5.0">BlackJumboDog (Version 5.7.5.0) ready</example>
269
+ <param pos="0" name="service.vendor" value="SapporoWorks"/>
270
+ <param pos="0" name="service.product" value="BlackJumboDog"/>
271
+ <param pos="0" name="os.family" value="Windows"/>
272
+ <param pos="0" name="os.vendor" value="Microsoft"/>
273
+ <param pos="0" name="os.product" value="Windows"/>
274
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
275
+ <param pos="1" name="service.version"/>
276
+ </fingerprint>
277
+ <!--
278
+ ; Mandrake 8.1 - uses UW IMAP
279
+ ; +OK POP3 mandrake81-f540k v2000.70mdk server ready
280
+ // wu-imap?
281
+ // +OK POP3 pytha434.rsjp.net 2004.89w server ready
282
+ // +OK POP3 cctlaser.com 2004.89s server ready
283
+ // +OK POP3 [158.122.12.70] v2003.83mdk server ready
284
+ // +OK POP3 [161.58.53.189] 2006b.94 server ready
285
+ // +OK POP3 [192.168.0.250] v2000.70rh server ready
286
+
287
+ ; Lotus Domino - NOTE: POP versions do not map to Domino version
288
+ // +OK Lotus Notes POP3 server version X2.0 ready <0015521D.86257321.0000081C.00000008@Atlas/AgileTek> on Atlas/AgileTek.
289
+ ( call ?j_popPatterns add
290
+ "^\\+OK Lotus Notes POP3 server version ([^ ]*) ready on ([^\\.]*)\\.$" )
291
+ ( call ?j_popNames add "Lotus-Domino" )
292
+
293
+ // +OK alquilerpc.com.mx POP3 Server (Version 1.020h) ready.
294
+
295
+ // Ipswitch IMail
296
+ // +OK X1 NT-POP3 Server geneseenet06 (IMail 8.22 45450-1)
297
+
298
+ // +OK X1 POP3 Mail Server
299
+
300
+ // +OK server POP3 server (DeskNow POP3 Server 1.0) ready
301
+
302
+ // +OK <1185161310.3352@goto15028.com> [XMail 1.24 POP3 Server] service ready; Mon, 23 Jul 2007 11:28:30 +0800
303
+
304
+ // +OK IdeaPop3Server v0.50 ready.
305
+
306
+ // +OK qxztmail POP3 server (STD Ymailserver v1.8 POP3) ready
307
+
308
+ // +OK blue.forest-green.lan POP3 server (JAMES POP3 Server 2.2.0) ready
309
+
310
+ // +OK xxx CMailServer 5.2 POP3 Service Ready
311
+
312
+ // +OK iac3 Solstice (tm) Internet Mail Server (tm) POP3 2.0 at Mon, 23 Jul 2007 20:08:02 -0500 (CDT)
313
+
314
+ // +OK Gordano Messaging Suite POP3 server ready
315
+ // +OK Gordano Messaging Suite POP3 server ready <13501095613509@hollandcanadaline.com>
316
+
317
+ // +OK unitechna.lt Merak 8.9.1 POP3 Sun, 22 Jul 2007 23:16:25 +0300 <20070722231625@unitechna.lt>
318
+
319
+
320
+ // +OK Cubic Circle's v1.31 1998/05/13 POP3 ready <0c9300004104a246@www.dvdld.co.za>
321
+
322
+ // +OK Welcome to MailEnable POP3 Server
323
+
324
+ // +OK GroupWise POP3 server ready
325
+
326
+ // +OK POP3 AnalogX Proxy 4.14 (Release) ready.
327
+
328
+ // +OK lojack.com.ar POP MDaemon 9.6.0 ready <MDAEMON-F200707232110.AA1001241MD4604@lojack.com.ar>
329
+
330
+ // +OK DBMAIL pop3 server ready to rock <4393e6301f984e87ad7cdc766595c78f@mx>
331
+
332
+ // +OK POP3 Welcome to vm-pop3d 1.1.6 <83532.1185400462@romeo.hostlab.nl>
333
+
334
+ // +OK Solid POP3 server ready
335
+
336
+ // +OK ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.8.9)
337
+
338
+ // +OK POP3 titan [cppop 20.0] at [207.150.171.34]
339
+
340
+ // +OK ModusMail POP3 Server-NOTF 4.2.425.4 Ready <42760712.1185328354.283@gbso.net>
341
+
342
+ // +OK DPOP Version number supressed.
343
+
344
+ // +OK XPOP3 0.0.1 server ready
345
+
346
+ -ERR (Proxy) connect error:socket error:No route to host
347
+ -ERR No permission
348
+ -ERR sorry, POP server too busy right now. Try again later.
349
+ -ERR This IP is not configured for POP3 service. Please contact Allstream at 1-888-655-7670.
350
+ +OK
351
+ +OK
352
+ +OK <0bdec6022085d6c34a0e48bb77bf8cf3@juno.thinkburst.com>
353
+ +OK <869521546.23059@mail.tecedge.net>, POP3 server ready.
354
+ +OK host CMailServer 5.2 POP3 Service Ready
355
+ +OK 2net.com POP MDaemon 7.2.0 ready <MDAEMON-F200707241631.AA3131578MD3019@2net.com>
356
+ +OK alakhan.kz POP MDaemon 6.8.4 ready <MDAEMON-F200707231617.AA1715437MD3489@alakhan.kz>
357
+ +OK alquilerpc.com.mx POP3 Server (Version 1.020h) ready.
358
+ +OK ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.8.9)
359
+ +OK blue.forest-green.lan POP3 server (JAMES POP3 Server 2.2.0) ready
360
+ +OK canoeregatta.org POP3 Server (Version 1.020h) ready.
361
+ +OK codebase.com.au POP MDaemon 9.6.1 ready <MDAEMON-F200707220122.AA2235837MD8039@codebase.com.au>
362
+ +OK Cubic Circle's v1.31 1998/05/13 POP3 ready <0c9300004104a246@www.dvdld.co.za>
363
+ +OK DBMAIL pop3 server ready to rock <4393e6301f984e87ad7cdc766595c78f@mx>
364
+ +OK ddc.lv POP MDaemon 9.0.4 ready <MDAEMON-F200707221319.AA1908942MD2984@ddc.lv>
365
+ +OK DPOP Version number supressed.
366
+ +OK Gordano Messaging Suite POP3 server ready
367
+ +OK Gordano Messaging Suite POP3 server ready <13501095613509@hollandcanadaline.com>
368
+ +OK Gordano Messaging Suite POP3 server ready <17142725297473@nefonline.de>
369
+ +OK GroupWise POP3 server ready
370
+ +OK Hello there. <4405.1185250906@localhost.localdomain>
371
+ +OK iac3 Solstice (tm) Internet Mail Server (tm) POP3 2.0 at Mon, 23 Jul 2007 20:08:02 -0500 (CDT)
372
+ +OK IdeaPop3Server v0.50 ready.
373
+ +OK justkidsmagazine.com POP3 Server (Version 1.020h) ready.
374
+ +OK lojack.com.ar POP MDaemon 9.6.0 ready <MDAEMON-F200707232110.AA1001241MD4604@lojack.com.ar>
375
+ +OK Lotus Notes POP3 server version X2.0 ready <0015521D.86257321.0000081C.00000008@Atlas/AgileTek> on Atlas/AgileTek.
376
+ +OK mail.inter-ecom.com MERAK 3.00.120 POP3 Fri, 20 Jul 2007 23:01:52 -0700 <20070720230152@mail.inter-ecom.com>
377
+ +OK ModusMail POP3 Server-NOTF 4.2.425.4 Ready <42760712.1185328354.283@gbso.net>
378
+ +OK myflock.christianwebhost.com POP3 Server (Version 1.020h) ready.
379
+ +OK pchomehouston.com POP3 Server (Version 1.020h) ready.
380
+ +OK POP server version 2.53 ready from w2k1332
381
+ +OK POP3 [158.122.12.70] v2003.83mdk server ready
382
+ +OK POP3 [161.58.53.189] 2006b.94 server ready
383
+ +OK POP3 [192.168.0.250] v2000.70rh server ready
384
+ +OK POP3 [193.203.43.90] 2004.89 server ready
385
+ +OK POP3 [199.236.35.240] v2000.70 server ready
386
+ +OK POP3 [199.236.46.233] v2000.70 server ready
387
+ +OK POP3 [216.17.96.200] 2004.89 server ready
388
+ +OK POP3 [220.111.0.198] v2000.70 server ready
389
+ +OK POP3 [60.43.204.115] v2000.70 server ready
390
+ +OK POP3 [61.126.32.231] v2000.70 server ready
391
+ +OK POP3 [66.49.140.201] v2003.83rh server ready
392
+ +OK POP3 [89.110.105.178] 2004.89 server ready
393
+ +OK POP3 [89.110.111.108] 2004.89 server ready
394
+ +OK POP3 [89.110.120.59] 2004.89 server ready
395
+ +OK POP3 [89.110.123.169] 2004.89 server ready
396
+ +OK POP3 [89.110.88.248] 2004.89 server ready
397
+ +OK POP3 220-130-130-112.HINET-IP.hinet.net v2000.70 server ready
398
+ +OK POP3 AnalogX Proxy 4.14 (Release) ready.
399
+ +OK POP3 artfulssoul.com v2001.78rh server ready
400
+ +OK POP3 bibliotake.nl v2001.78rh server ready
401
+ +OK POP3 blog.celebkings.com v2003.83rh server ready
402
+ +OK POP3 bureau25.ns.utoronto.ca 2006f.96 server ready
403
+ +OK POP3 cctlaser.com 2004.89s server ready
404
+ +OK POP3 creditsuisseplm.tempdomainname.com 2004.89s server ready
405
+ +OK POP3 energypress.com 2004.89 server ready
406
+ +OK POP3 ez3 [cppop 20.0] at [64.119.173.146]
407
+ +OK POP3 frankscenterinc.com 2004.89 server ready
408
+ +OK POP3 fred08.tempdomainname.com 2004.89s server ready
409
+ +OK POP3 giantkangaroo.com v2003.83rh server ready
410
+ +OK POP3 host [cppop 20.0] at [66.45.252.61]
411
+ +OK POP3 host62 [cppop 20.0] at [216.120.237.62]
412
+ +OK POP3 hypolite.com v2001.78rh server ready
413
+ +OK POP3 juma [cppop 20.0] at [140.99.39.68]
414
+ +OK POP3 ksblist.com v2003.83rh server ready
415
+ +OK POP3 lakegeorgedaycare.com 2004.89s server ready
416
+ +OK POP3 localhost server ready
417
+ +OK POP3 localhost 2004.89 server ready
418
+ +OK POP3 localhost v2000.69hw server ready
419
+ +OK POP3 localhost v2001.78rh server ready
420
+ +OK POP3 monki.net v2003.83rh server ready
421
+ +OK POP3 nativeamericanlinks.com v2001.78rh server ready
422
+ +OK POP3 ns.skymarkgroup.com v2001.78rh server ready
423
+ +OK POP3 oliveiradressage.com v2003.83rh server ready
424
+ +OK POP3 pegasus [cppop 20.0] at [64.235.240.105]
425
+ +OK POP3 pytha434.rsjp.net 2004.89w server ready
426
+ +OK POP3 qwiknet.com 2004.89 server ready
427
+ +OK POP3 rrm82.fastlinknet.com v2003.83rh server ready
428
+ +OK POP3 saruman [cppop 20.0] at [82.136.60.52]
429
+ +OK POP3 scitechlicensing.com v2003.83rh server ready
430
+ +OK POP3 server-p002 [cppop 19.0] at [217.26.51.207]
431
+ +OK POP3 server [cppop 20.0] at [72.249.45.83]
432
+ +OK POP3 server [cppop 21.0] at [216.227.223.68]
433
+ +OK POP3 server ready
434
+ +OK POP3 server ready QuickMail Pro Server for Mac 3.0.2 <9a937c2c@192.168.0.254>
435
+ +OK POP3 taiwanjohnson.com.tw v2001.78rh server ready
436
+ +OK POP3 telesto [cppop 20.0] at [209.123.140.118]
437
+ +OK POP3 titan [cppop 20.0] at [207.150.171.34]
438
+ +OK POP3 top [cppop 21.0] at [70.87.244.140]
439
+ +OK POP3 txsunset.com v2001.78rh server ready
440
+ +OK POP3 umb.bankersacademy.com 2004.89s server ready
441
+ +OK POP3 unrealfactory.com v2003.83rh server ready
442
+ +OK POP3 venus [cppop 20.0] at [216.54.232.223]
443
+ +OK POP3 vitalmoment.com v4.47 server ready
444
+ +OK POP3 vps [cppop 21.0] at [207.58.145.19]
445
+ +OK POP3 web1 [cppop 21.0] at [72.9.237.53]
446
+ +OK POP3 Welcome to vm-pop3d 1.1.6 <83532.1185400462@romeo.hostlab.nl>
447
+ +OK POP3 Welcome to vm-pop3d 1.1.7f-DA-2
448
+ +OK POP3 wirelessintro [cppop 20.0] at [72.18.130.64]
449
+ +OK POP3 www.boomingusedautoparts.com 2006b.94 server ready
450
+ +OK POP3 www.happytails2u.com 2004.89 server ready
451
+ +OK POP3 www.homebasedwizard.com 2004.89 server ready
452
+ +OK POP3 www.webmail.imperioe.com 2004.89 server ready
453
+ +OK qxztmail POP3 server (STD Ymailserver v1.8 POP3) ready
454
+ +OK Radish (Version 3.0.0-b021) ready
455
+ +OK ready
456
+ +OK ready <11514.1185210732@freedom.concept69.de>
457
+ +OK ready <14026.1184992338@s076-129.ub.firstserver.ne.jp>
458
+ +OK ready <16013.1185110479@p1.in11.squarestart.ne.jp>
459
+ +OK ready <1602.1185138403@p10084207.pureserver.de>
460
+ +OK ready <17391.1185103166@www.e-shci.org>
461
+ +OK ready <17638.1185005363@o6.s023v.squarestart.ne.jp>
462
+ +OK ready <21400.1185465572@q7.s036v.smilestart.ne.jp>
463
+ +OK ready <2964.1185086744@nissan-forksaitama.co.jp>
464
+ +OK ready <9704.1185097132@h9.s011v.squarestart.ne.jp>
465
+ +OK recvmail/he.net POP3 Server
466
+ +OK refinanceloanjones.com POP3 Server (Version 1.020h) ready.
467
+ +OK samare.it POP MDaemon 6.8.5 ready <MDAEMON-F200707220351.AA513460MD5338@samare.it>
468
+ +OK server POP3 server (DeskNow POP3 Server 1.0) ready
469
+ +OK silexaviacion.com POP3 Server (Version 1.020h) ready.
470
+ +OK simple-photography.com POP3 Server (Version 1.020h) ready.
471
+ +OK Solid POP3 server ready
472
+ +OK studiovisuals.com POP3 Server (Version 1.020h) ready.
473
+ +OK themeekermall.com POP3 Server (Version 1.020h) ready.
474
+ +OK unitechna.lt Merak 8.9.1 POP3 Sun, 22 Jul 2007 23:16:25 +0300 <20070722231625@unitechna.lt>
475
+ +OK Welcome to MailEnable POP3 Server
476
+ +OK X1 NT-POP3 Server 2436681011.monstercommercesites.com (IMail 7.15 560907-1)
477
+ +OK X1 NT-POP3 Server Calvin-Serv (IMail 8.22 1107-1)
478
+ +OK X1 NT-POP3 Server chealsea.com.cn (IMail 8.15 16990-1)
479
+ +OK X1 NT-POP3 Server dedicated (IMail 9.03 34585-1)
480
+ +OK X1 NT-POP3 Server exfast114 (IMail 8.10 1204-1)
481
+ +OK X1 NT-POP3 Server exfast114 (IMail 8.10 548-1)
482
+ +OK X1 NT-POP3 Server geneseenet06 (IMail 8.22 45450-1)
483
+ +OK X1 NT-POP3 Server karunrolling.com (IMail 9.10 33410-4)
484
+ +OK X1 NT-POP3 Server mail.domainebuilders.com (IMail 8.15 562966-2)
485
+ +OK X1 NT-POP3 Server mail.ectorumc.org (IMail 8.21 421362-1)
486
+ +OK X1 NT-POP3 Server mail.oecmail2.com (IMail 9.10 135441-3)
487
+ +OK X1 NT-POP3 Server mail.saturnofdc.com (IMail 7.13 214871-3)
488
+ +OK X1 NT-POP3 Server ph18.pennyhost.com (IMail 8.22 325883-2)
489
+ +OK X1 NT-POP3 Server wddx002.wddx.net (IMail 8.15 60353-2)
490
+ +OK X1 NT-POP3 Server webgistix.com (IMail 8.05 161161-1)
491
+ +OK X1 POP3 Mail Server
492
+ +OK XPOP3 0.0.1 server ready
493
+ 220 axigen slmail mdaemon mailserver
494
+ // apparently this is a P3Scan Proxy bug
495
+ // http://lists.freebsd.org/pipermail/freebsd-ports/2004-May/012400.html
496
+ Oops, that would loop!
497
+
498
+ -->
499
+ </fingerprints>