midfp

Initialization

fingerprints.db

@@ -0,0 +1,37 @@
+Apple Mail 2.930;/^[0-9A-F]{8}\-([0-9A-F]{4}\-){3}[0-9A-F]{12}\@.+$/
+Claws Mail 3.x;/^(199[0-9]|20\d{2})(0[1-9]|1[0-2])([0-2][1-9]|3[0-1])([0-1][0-9]|2[0-3])([0-6][0-9]){2}\.[0-9a-f]{8}\@.+$/
+CrossPoint v3.12;/^\w{11}\@.+$/
+Envios v2;/^[0-9a-f]{32}\@.+$/
+Evolution 2.26.1;/^\d{10}\.\d{4}\.\d\.camel\@.+$/
+Forte Agent 1.5;/^[0-9a-f]{8}\.\d{9}\@.+$/
+Forte Agent 1.7;/^[0-9a-f]{8}\.\d{9}\@.+$/
+Forte Agent 1.8;/^([0-9a-z]{6}\$[0-9a-z]{3}\$[0-9])|([0-9a-z]{34})\@.+$/
+Forte Agent 1.91;/^[0-9a-z]{34}\@.+$/
+Forte Agent 1.92;/^[0-9a-z]{34}\@.+$/
+Forte Agent 1.93 (Deutsch);/^[0-9a-f]{8}\.\d{9}\@.+$/
+Forte Agent 1.93 (English);/^[0-9a-z]{34}\@.+$/
+Forte Agent 2;/^[0-9a-z]{34}\@.+$/
+Forte Agent 3;/^[0-9a-z]{34}\@.+$/
+Forte Agent 4;/^[0-9a-z]{34}\@.+$/
+Forte Agent 5;/^[0-9a-z]{34}\@.+$/
+Forte Free Agent 1.11;/^[0-9a-f]{8}\.\d{7}\@.+$/
+Forte Free Agent 1.21;/^[0-9a-f]{8}\.\d{9}\@.+$/
+Forte Free Agent 2;/^[0-9a-z]{34}\@.+$/
+Forte Free Agent 3;/^[0-9a-z]{34}\@.+$/
+MicroPlanet Gravity v2;/^MPG\.[0-9a-z]{22}\@.+$/
+Microsoft CDO for Exchange 2000;/^[0-9A-F]{32}\@.+$/
+Microsoft CDO for Windows 2000;/^[0-9A-F]{32}\@.+$/
+Microsoft Office Outlook 10;/^([0-9a-f]{8}|[0-9a-f]{12})(\$[0-9a-z]{8}){2}\@.+$/
+Microsoft Office Outlook 11;/^([0-9A-F]{32})|(([0-9a-f]{8}\$){2}[0-9a-f]{8})\@.+$/
+Microsoft Office Outlook 12;/^\d{14}\.[a-z]{9,11}\@.+$/
+Microsoft Outlook Express 4.71.2173.0;/^([0-9a-f]{8}\$){2}[0-9a-z]{8}\@.+$/
+Microsoft Outlook Express 5.5;/^[0-9a-f]{8}\$[0|1]\$\d{5}\$[0-9a-f]{8}\@.+$/
+Microsoft Outlook Express 6;/^([0-9a-f]{8}|[0-9a-f]{12})(\$[0-9a-z]{8}){2}\@.+$/
+Mozilla Thunderbird 2.0;/^[0-9A-F]{8}\.\d{7}\@.+$/
+StrongMail Enterprise 4.1;/^\d{10}\.\d{5}\@.+$/
+Sylpheed 2.5.0;/^\d{14}\.[0-9a-f]{8}\..+\@.+$/
+The Bat! v2.00;/^\d{9}\.\d{14}\@.+$/
+The Bat! v2.01;/^([0-9A-F]{24,25})|(\d{8,10}\.\d{14}\@.+)$/
+The Bat! v2.10.03;/^\d{9}\.\d{14}\@.+$/
+The Bat! v3.5.25;/^\d{9}\.\d{14}\@.+$/
+The Bat! v3.99;/^\d{9}\.20[01]\d(0\d|1[0-2])(0[1-9]|[12]\d)([01]\d|2[0-3])([1-5]\d)\@.+$/

frmAbout.frm

@@ -0,0 +1,117 @@
+VERSION 5.00
+Begin VB.Form frmAbout 
+   BorderStyle     =   4  'Fixed ToolWindow
+   Caption         =   "About midfp"
+   ClientHeight    =   2190
+   ClientLeft      =   30
+   ClientTop       =   285
+   ClientWidth     =   4950
+   Icon            =   "frmAbout.frx":0000
+   LinkTopic       =   "Form1"
+   MaxButton       =   0   'False
+   MinButton       =   0   'False
+   ScaleHeight     =   2190
+   ScaleWidth      =   4950
+   ShowInTaskbar   =   0   'False
+   StartUpPosition =   1  'CenterOwner
+   Begin VB.CommandButton cmdOkay 
+      Cancel          =   -1  'True
+      Caption         =   "&Okay"
+      Height          =   372
+      Left            =   1920
+      TabIndex        =   1
+      Top             =   1680
+      Width           =   1092
+   End
+   Begin VB.Frame Frame1 
+      Height          =   1332
+      Left            =   120
+      TabIndex        =   0
+      Top             =   120
+      Width           =   4695
+      Begin VB.Label lblProjectWebsite 
+         AutoSize        =   -1  'True
+         Caption         =   "http://www.computec.ch"
+         BeginProperty Font 
+            Name            =   "MS Sans Serif"
+            Size            =   8.25
+            Charset         =   0
+            Weight          =   400
+            Underline       =   -1  'True
+            Italic          =   0   'False
+            Strikethrough   =   0   'False
+         EndProperty
+         ForeColor       =   &H00FF0000&
+         Height          =   195
+         Left            =   1080
+         MouseIcon       =   "frmAbout.frx":0CCA
+         MousePointer    =   99  'Custom
+         TabIndex        =   4
+         ToolTipText     =   "Visit web site"
+         Top             =   840
+         Width           =   3495
+      End
+      Begin VB.Label lblDeveloperName 
+         Caption         =   "(c) 2009-2010 by Marc Ruef"
+         Height          =   255
+         Left            =   1080
+         TabIndex        =   3
+         Top             =   600
+         Width           =   3495
+      End
+      Begin VB.Label lblApplicationName 
+         Caption         =   "midfp"
+         BeginProperty Font 
+            Name            =   "MS Sans Serif"
+            Size            =   8.25
+            Charset         =   0
+            Weight          =   700
+            Underline       =   0   'False
+            Italic          =   0   'False
+            Strikethrough   =   0   'False
+         EndProperty
+         Height          =   255
+         Left            =   1080
+         TabIndex        =   2
+         Top             =   360
+         Width           =   3495
+      End
+      Begin VB.Image imgLogo 
+         Appearance      =   0  'Flat
+         BorderStyle     =   1  'Fixed Single
+         Height          =   510
+         Left            =   240
+         MouseIcon       =   "frmAbout.frx":0FD4
+         MousePointer    =   99  'Custom
+         Picture         =   "frmAbout.frx":12DE
+         ToolTipText     =   "Web Server Fingerprinting"
+         Top             =   360
+         Width           =   510
+      End
+   End
+End
+Attribute VB_Name = "frmAbout"
+Attribute VB_GlobalNameSpace = False
+Attribute VB_Creatable = False
+Attribute VB_PredeclaredId = True
+Attribute VB_Exposed = False
+Option Explicit
+
+Private Sub cmdOkay_Click()
+    Unload Me
+End Sub
+
+Private Sub Form_Load()
+    Me.Caption = "About " & APP_NAME
+    lblApplicationName.Caption = APP_NAME
+    lblProjectWebsite.Caption = APP_WEBSITE_URL
+End Sub
+
+Private Sub imgLogo_Click()
+    Call OpenProjectWebsite
+End Sub
+
+Private Sub lblProjectWebsite_Click()
+    Call OpenProjectWebsite
+End Sub
+

frmMain.frm

@@ -0,0 +1,147 @@
+VERSION 5.00
+Begin VB.Form frmMain 
+   Caption         =   "midfp"
+   ClientHeight    =   4170
+   ClientLeft      =   165
+   ClientTop       =   735
+   ClientWidth     =   7455
+   Icon            =   "frmMain.frx":0000
+   LinkTopic       =   "Form1"
+   ScaleHeight     =   4170
+   ScaleWidth      =   7455
+   StartUpPosition =   3  'Windows Default
+   Begin VB.Frame Frame2 
+      Caption         =   "Results"
+      Height          =   2895
+      Left            =   120
+      TabIndex        =   4
+      Top             =   1200
+      Width           =   7215
+      Begin VB.TextBox txtResults 
+         Appearance      =   0  'Flat
+         BackColor       =   &H80000000&
+         BorderStyle     =   0  'None
+         Height          =   2415
+         Left            =   120
+         Locked          =   -1  'True
+         MultiLine       =   -1  'True
+         TabIndex        =   2
+         Text            =   "frmMain.frx":0CCA
+         Top             =   360
+         Width           =   6975
+      End
+   End
+   Begin VB.Frame Frame1 
+      Caption         =   "Message-ID"
+      Height          =   855
+      Left            =   120
+      TabIndex        =   3
+      Top             =   240
+      Width           =   7215
+      Begin VB.TextBox txtMessageId 
+         Height          =   285
+         Left            =   120
+         MaxLength       =   512
+         TabIndex        =   0
+         Top             =   360
+         Width           =   4575
+      End
+      Begin VB.CommandButton cmdAnalyze 
+         Caption         =   "&Analyze"
+         Default         =   -1  'True
+         Height          =   375
+         Left            =   6000
+         TabIndex        =   1
+         Top             =   240
+         Width           =   1095
+      End
+   End
+   Begin VB.Menu mnuFile 
+      Caption         =   "&File"
+      Begin VB.Menu mnuFileNewItem 
+         Caption         =   "&New"
+         Shortcut        =   ^N
+      End
+      Begin VB.Menu mnuFileSep1 
+         Caption         =   "-"
+      End
+      Begin VB.Menu mnuFileExitItem 
+         Caption         =   "E&xit"
+         Shortcut        =   ^Q
+      End
+   End
+   Begin VB.Menu mnuHelp 
+      Caption         =   "&Help"
+      Begin VB.Menu mnuHelpAboutItem 
+         Caption         =   "&About"
+         Shortcut        =   {F1}
+      End
+   End
+End
+Attribute VB_Name = "frmMain"
+Attribute VB_GlobalNameSpace = False
+Attribute VB_Creatable = False
+Attribute VB_PredeclaredId = True
+Attribute VB_Exposed = False
+Option Explicit
+
+Private Sub cmdAnalyze_Click()
+    txtResults = midfp(txtMessageId.Text)
+End Sub
+
+Private Function midfp(ByRef sMid As String, Optional ByRef sDatabase As String)
+    Dim sFingerprintDb() As String
+    Dim iFingerprintDbCount As Integer
+    Dim i As Integer
+    Dim sResults As String
+
+    Dim myRegExp As RegExp
+    Dim myMatches As MatchCollection
+    Dim myMatch As Match
+    Dim sFingerprintDbEntry() As String
+
+    If (LenB(sDatabase) = 0) Then
+        sDatabase = "fingerprints.db"
+    End If
+
+    sFingerprintDb = Split(ReadFile(App.Path & "/" & sDatabase), vbLf, , vbBinaryCompare)
+    iFingerprintDbCount = UBound(sFingerprintDb)
+
+    Set myRegExp = New RegExp
+    myRegExp.IgnoreCase = False
+    myRegExp.Global = True
+
+    For i = 0 To iFingerprintDbCount
+        If (InStrB(1, sFingerprintDb(i), ";", vbBinaryCompare)) Then
+            sFingerprintDbEntry = Split(sFingerprintDb(i), ";", , vbBinaryCompare)
+            myRegExp.Pattern = Mid(sFingerprintDbEntry(1), 2, Len(sFingerprintDbEntry(1)) - 2)
+
+            If (myRegExp.Test(sMid) = True) Then
+                sResults = sResults & "* " & sFingerprintDbEntry(0) & vbCrLf
+            End If
+        End If
+    Next i
+
+    If (LenB(sResults) = 0) Then
+        sResults = "Unknown implementation."
+    End If
+
+    midfp = sResults
+End Function
+
+Private Sub Form_Load()
+    Me.Caption = APP_NAME
+End Sub
+
+Private Sub mnuFileExitItem_Click()
+    Unload Me
+End Sub
+
+Private Sub mnuFileNewItem_Click()
+    Me.txtMessageId.Text = vbNullString
+    Me.txtResults.Text = vbNullString
+End Sub
+
+Private Sub mnuHelpAboutItem_Click()
+    frmAbout.Show vbModal, frmMain
+End Sub

midfp.vbp

@@ -0,0 +1,43 @@
+Type=Exe
+Reference=*\G{3F4DACA7-160D-11D2-A8E9-00104B365C9F}#5.5#0#..\..\..\..\..\Windows\SysWOW64\vbscript.dll\3#Microsoft VBScript Regular Expressions 5.5
+Form=frmMain.frm
+Module=modConfig; modConfig.bas
+Module=modFileHandling; modFileHandling.bas
+Form=frmAbout.frm
+Module=modBrowserCall; modBrowserCall.bas
+IconForm="frmMain"
+Startup="frmMain"
+HelpFile=""
+Title="midfp"
+ExeName32="midfp.exe"
+Command32=""
+Name="midfp"
+HelpContextID="0"
+CompatibleMode="0"
+MajorVer=1
+MinorVer=0
+RevisionVer=3
+AutoIncrementVer=1
+ServerSupportFiles=0
+VersionComments="http://www.computec.ch/mruef/"
+VersionCompanyName="computec.ch"
+VersionFileDescription="Message-ID Fingerprinting"
+VersionLegalCopyright="(c) 2009-2010 by Marc Ruef"
+VersionLegalTrademarks="General Public License (GPL)"
+VersionProductName="midfp"
+CompilationType=0
+OptimizationType=0
+FavorPentiumPro(tm)=0
+CodeViewDebugInfo=0
+NoAliasing=0
+BoundsCheck=0
+OverflowCheck=0
+FlPointCheck=0
+FDIVCheck=0
+UnroundedFP=0
+StartMode=0
+Unattended=0
+Retained=0
+ThreadPerObject=0
+MaxNumberOfThreads=1
+DebugStartupOption=0

midfp.vbw

@@ -0,0 +1,5 @@
+frmMain = 174, 108, 1448, 786, , 22, 22, 1296, 700, C
+modConfig = 110, 110, 1384, 788, 
+modFileHandling = 132, 132, 1406, 810, C
+frmAbout = 176, 176, 1450, 854, , 154, 154, 1428, 832, C
+modBrowserCall = 330, 330, 1604, 1008, 

modBrowserCall.bas

@@ -0,0 +1,8 @@
+Attribute VB_Name = "modBrowserCall"
+Option Explicit
+
+Public Declare Function ShellExecute Lib "Shell32" Alias "ShellExecuteA" (ByVal hwnd As Long, ByVal lpOperation As String, ByVal lpFile As String, ByVal lpParameters As String, ByVal lpDirectory As String, ByVal nShowCmd As Long) As Long
+
+Public Sub OpenProjectWebsite()
+    Call ShellExecute(frmMain.hwnd, "Open", APP_WEBSITE_URL, "", App.Path, 1)
+End Sub

modConfig.bas

@@ -0,0 +1,5 @@
+Attribute VB_Name = "modConfig"
+Option Explicit
+
+Public Const APP_NAME As String = "midfp 1.0win32"
+Public Const APP_WEBSITE_URL As String = "http://www.computec.ch/mruef/"

modFileHandling.bas

@@ -0,0 +1,14 @@
+Attribute VB_Name = "modFileHandling"
+Option Explicit
+
+Public Function ReadFile(ByRef sFileName As String) As String
+    Dim sFileContent As String
+
+    If (Dir$(sFileName, 16) <> "") Then
+        Open sFileName For Input As #1
+            sFileContent = Input(LOF(1), #1)
+        Close
+    End If
+
+    ReadFile = sFileContent
+End Function