Method: #HiveMail

Defined in:
lib/whatweb/plugins/hivemail.rb

#HiveMail ⇒ Object

This file is part of WhatWeb and may be subject to redistribution and commercial restrictions. Please see the WhatWeb web site for more information on licensing and terms of use. www.morningstarsecurity.com/research/whatweb



9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
 
# File 'lib/whatweb/plugins/hivemail.rb', line 9

WhatWeb::Plugin.define "HiveMail" do
  @author = "Brendan Coles <[email protected]>" # 2012-08-24
  @version = "0.1"
  @description = "HiveMail - PHP Webmail Portal Script - Hompage: http://www.hivemail.com/"

  # ShodanHQ results as at 2012-08-24 #
  # 5 for hivesession

  # Google results as at 2012-08-24 #
  # 52 for "You are not logged in" "Forgot your password" "Choose a skin"
  #  1 for intitle:"Database Error in HiveMail"

  # Dorks #
  @dorks = [
    '"You are not logged in" "Forgot your password" "Choose a skin"'
  ]

  # Matches #
  @matches = [

    # Error Page # Title
    { text: '<title>Database Error in HiveMail&trade;</title>' },

    # Login Page # Version Detection # JavaScript
    { version: /\/\/ myaccounts holds the userpics\s+myaccounts = '[^']*';\s+recaptcha_global = "[^"]+";\s+hiveversion = "v([^"]+)";/ },

    # Login Page # input field
    { text: '<input type="text" class="validate[ajax[ajaxUserCall]] input" name="answer" id="answer" />' },

    # Login Page # Meta Product # Version Detection
    { version: /<meta name="product" content="Hivemail v([^"]+)">/ },

    # hivesession Cookie
    { search: "headers[set-cookie]", regexp: /hivesession=/ },

  ]
end