rapid7 / recog

Pattern recognition for hosts, services, and content
Other
662 stars 195 forks source link

Add Exchange 2007 POP3 Quit Message banner pattern #537

Closed cfleming-R7 closed 1 year ago

cfleming-R7 commented 1 year ago

Description

Add a banner pattern for a quit message for Microsoft Exchange Server 2007

Motivation and Context

We observed a POP3 quit message exposing the underlying service, in this case Microsoft Exchange Server 2007. A pattern has been added to match against that banner

How Has This Been Tested?

Types of changes

Checklist:

mkienow-r7 commented 1 year ago

I don't believe xml/pop_banners.xml is the correct place for quit messages since that is not really the banner. For "SMTP response lines to the QUIT command" we have xml/smtp_quit.xml so this would belong in a new database xml/pop_quit.xml.