webmailconfig.ini

Linux下面截获以态网数据包！是在内核态下面运行的驱动程序

#define IP_TYPE_WEBMAIL			0X00000002
#define IP_TYPE_FOUND			0X00000004
#define IP_TYPE_LOGON			0X00000008

#define IP_TYPE_BBS			0X00000010

//http_webmail配置项
begin=free.mail.sohu.com
//属性，见上面IP_TYPE_XXXX定义
attr=12
//登陆域名128
host=login.mail.sohu.com
//邮箱后缀48
suffix=@sohu.com
//用户名和密码之间的分割符4
separator=&
//用户名标志12
username=username=
//密码标志12
password=mpass=
//是否加密
cryptogram=1
//登录成功标志24
loginflag=Set-Cookie: SOHUID
//重定位域名标志4*64
location=Location: http://
//重定位域名结束标志必须紧跟location 4*64
locend=/?id=
//收邮件内容标志64
rcflag=GET /control/read?
//收邮件内容标志64
rccontinue=
//收邮件附件标志64
raflag=GET /mpdownload/?
//发邮件内容标志64
scflag=POST /control/post
//发邮件附件标志64
saflag=POST /control/attachment
endup



//http_bbs配置项
begin=bbs.nju.edu.cn
//属性，见上面IP_TYPE_XXXX定义
attr=26
//登陆域名128
host=bbs.nju.edu.cn
//登录用户后缀48
suffix=
//用户名和密码之间的分割符4
separator=&
//用户名标志12
username=id=
//密码标志12
password=pw=
//是否加密
cryptogram=1
//登录成功标志24
loginflag=bbsSetCookie
//重定位域名标志4*64
location=
//重定位域名结束标志必须紧跟location 4*64
locend=
//浏览版面标志64
rcflag=/board?board=
//浏览内容标志64
rccontinue=/bbscon?board
//收邮件附件标志64
raflag=
//发BBS内容标志64
scflag=
//发邮件附件标志64
saflag=
endup


begin=free.mail.163.com
attr=12
host=reg.163.com
suffix=@163.com
separator=&
username=username=
password=password=
cryptogram=1
loginflag=NTES_SESS
location=POST /in.jsp?url=http://
locend=/coremail/fcg/ntesdoor2?
location=Location: http://
locend=/cgi/ldapapp?funcid=main&sid=
rcflag=GET /coremail/fcg/ldmsapp?funcid=readlett
rccontinue=GET /coremail/fcg/ldmsapp?funcid=readpart
raflag=GET /coremail/fcg/ldmsapp/
scflag=POST /coremail/cgi/attachfapps?
saflag=
endup



begin=vip.sohu.com
attr=12
host=vip.sohu.com
suffix=@vip.sohu.com
separator=&
username=username=
password=passwd=
cryptogram=1
loginflag=Set-Cookie: SOHUPP
location=Location: http://
locend=/control/main
rcflag=GET /control/read?
rccontinue=
raflag=GET /mpdownload/?
scflag=POST /control/post
saflag=POST /control/attachment
endup


begin=passport.sohu.com
attr=8
host=passport.sohu.com
suffix=@sohu.com
separator=&
username=uid=
password=passwd=
cryptogram=1
loginflag=Set-Cookie: SOHUPP
location=Location: http://
endup

begin=vip.sina.com.cn
attr=10
host=vip.sina.com.cn
suffix=@vip.sina.com.cn
separator=&
username=user=
password=pass=
cryptogram=1
loginflag=HTTP/1.1 302 Found
location=Location: http://
locend=
rcflag=GET /cgi-bin/mail/rdMail.cgi?tmb
rccontinue=
raflag=GET /cgi-bin/mail/attachment.cgi
scflag=POST /cgi-bin/mail/sendmsg.cgi
saflag=
endup


begin=free.sina.com
attr=12
host=mail.sina.com.cn
suffix=@sina.com
separator=&
username=u=
password=psw=
cryptogram=1
loginflag=HTTP/1.1 302 Found
location=Location: http://
locend=/cgi/index.php
rcflag=POST /cgi/rdmail.php
rccontinue=
raflag=GET /cgi/download_att.php
scflag=POST /cgi/sendmail.php
addlist=POST /cgi/addr_memberlist
saflag=
endup

begin=188
attr=12
host=reg.mail.188.com
suffix=@188.com
separator=&
username=&user=
password=pass=
cryptogram=1
loginflag=HTTP/1.1 302 Found
location=Location: http://
locend=/coremail/fcg/ldapapp?funcid=main&sid=
rcflag=GET /coremail/fcg/ldmsapp?funcid=readlett
rccontinue=GET /coremail/fcg/ldmsapp?funcid=readpart
raflag=GET /coremail/fcg/ldmsapp/
scflag=POST /coremail/cgi/attachfapps?
saflag=
endup


begin=126
attr=12
host=entry.126.com
suffix=@126.com
separator=&
username=&user=
password=pass=
cryptogram=1
loginflag=HTTP/1.1 302 Found
location=Location: http://
locend=/coremail/fcg/ldapapp?funcid=main&sid=
rcflag=GET /coremail/fcg/ldmsapp?funcid=readlett
rccontinue=GET /coremail/fcg/ldmsapp?funcid=readpart
raflag=GET /coremail/fcg/ldmsapp/
scflag=POST /coremail/cgi/attachfapps?
saflag=
endup

begin=hotmail
attr=4
host=www.hotmail.msn.com
suffix=@hotmail.com
separator=
username=
password=
cryptogram=1
loginflag=HTTP/1.1 302 Found
location=Location: http://
locend=/cgi-bin/HoTMaiL?
rcflag=GET /cgi-bin/getmsg
rccontinue=
raflag=GET /cgi-bin/saferd
scflag=POST /cgi-bin/premail
saflag=POST /cgi-bin/doattach
endup

begin=freemail.eyou.com
attr=2
host=freemail.eyou.com
suffix=@eyou.com
separator=
username=
password=
cryptogram=1
loginflag=HTTP/1.1 302 Found
location=Location: http://
locend=
rcflag=GET /readmail.php?
rccontinue=GET /letter_content.php?
raflag=GET /attach.php
scflag=POST /email.php HTTP/1.1
saflag=POST /upload.php HTTP/1.1
endup


begin=freemail5.eyou.com
attr=2
host=freemail5.eyou.com
suffix=@eyou.com
separator=
username=
password=
cryptogram=1
loginflag=HTTP/1.1 302 Found
location=Location: http://
locend=
rcflag=GET /readmail.php?
rccontinue=GET /letter_content.php?
raflag=GET /attach.php
scflag=POST /email.php HTTP/1.1
saflag=POST /upload.php HTTP/1.1
endup

begin=mail.eyou.com
attr=2
host=mail.eyou.com
suffix=@eyou.com
separator=
username=
password=
cryptogram=1
loginflag=HTTP/1.1 302 Found
location=Location: http://
locend=
rcflag=GET /readmail.php?
rccontinue=GET /letter_content.php?
raflag=GET /attach.php
scflag=POST /email.php HTTP/1.1
saflag=POST /upload.php HTTP/1.1
endup

begin=yahoo.com.cn
attr=4
host=mail.yahoo.com
suffix=@yahoo.com.cn
separator=
username=
password=
cryptogram=1
loginflag=HTTP/1.1 302 Found
location=Location: http://
locend=/ym/login?.rand=
rcflag=GET /ym/ShowLetter?
rccontinue=
raflag=GET /ym/ShowLetter/
scflag=POST /ym/Compose?YY=
saflag=ym/Attachments?YY=
endup

begin=yahoo.com.cn
attr=4
host=login.bjs.yahoo.com
suffix=@yahoo.com.cn
separator=
username=
password=
cryptogram=1
loginflag=HTTP/1.1 302 Found
location=Location: http://
locend=/ym/login?.rand=
rcflag=GET /ym/ShowLetter?
rccontinue=
raflag=GET /ym/ShowLetter/
scflag=POST /ym/Compose?YY=
saflag=ym/Attachments?YY=
endup


begin=yahoo.com.cn
attr=2
host=attach.cnb.mail.yahoo.com
suffix=@yahoo.com.cn
separator=
username=
password=
cryptogram=1
loginflag=HTTP/1.1 302 Found
location=Location: http://
locend=
rcflag=
rccontinue=
raflag=
scflag=
saflag=ym/Attachments?YY=
endup

begin=mail.google.com
//属性，见上面IP_TYPE_XXXX定义
attr=2
//登陆域名128
host=mail.google.com
//邮箱后缀48
suffix=@gmail.com
//登录成功标志24
loginflag=Set-Cookie: GX=
//收邮件内容标志64
rcflag=&view=cv&
//收邮件附件标志64
raflag=GET /mail/?view=att
//发邮件内容标志64
scflag=&cmid=
endup

begin=mail.qq.com
attr=12
host=mail.qq.com
suffix=@qq.com
separator=&
username=u=
password=p=
cryptogram=1
loginflag=Set-Cookie:qqmail_sid
location=http://
locend=/cgi-bin/login
rcflag=GET /cgi-bin/readmail
raflag=GET /cgi-bin/download
scflag=POST /cgi-bin/compose_send
saflag=POST /cgi-bin/compose_attach
endup

//wangyi config
//begin=freemail.china.com
//attr=10
//host=freemail.china.com
//suffix=@Mail.China.Com
//separator=&
//username=LoginName=
//password=passwd=
//cryptogram=1
//loginflag=Cookie: AIMCSession=
//rcflag=GET /extend/gb/std
//raflag=GET /coremail/fcg/ldmsapp/
//scflag=POST /extend/gb/std
//saflag=POST /extend/gb/std
//endup


begin=usa.com
attr=12
host=mail01.mail.com
suffix=@usa.com
separator=&
username=login=
password=password=
cryptogram=1
loginflag=Set-Cookie: ob_cookies=
location=location: http://
locend=/scripts/common/home.main?
rcflag=GET /scripts/mail/read.mail?
rccontinue=
raflag=GET /getattach/
scflag=POST /scripts/mail/Outblaze.mail
saflag=
endup


begin=mail.china.com
attr=10
host=freemail.china.com
suffix=@mail.china.com
separator=&
username=LoginName=
password=passwd=
cryptogram=1
loginflag=Set-Cookie: AIMCCOOKIES=
location=
locend=
rcflag=GET /extend/gb/std/
rccontinue=
raflag=GET /extend/gb/std/
scflag=POST /extend/gb/std/
saflag=
endup

begin=wm1.url.com.tw
attr=10
host=wm1.url.com.tw
separator=&
username=username=
password=secretkey=
cryptogram=1
loginflag=Set-Cookie: key=
rcflag=GET /src/read_body.php?
raflag=GET /src/download.php?
scflag=POST /src/compose.php
endup

begin=wm2.url.com.tw
attr=10
host=wm2.url.com.tw
separator=&
username=username=
password=secretkey=
cryptogram=1
loginflag=Set-Cookie: key=
rcflag=GET /src/read_body.php?
raflag=GET /src/download.php?
scflag=POST /src/compose.php
endup

begin=wm3.url.com.tw
attr=10
host=wm3.url.com.tw
separator=&
username=username=
password=secretkey=
cryptogram=1
loginflag=Set-Cookie: key=
rcflag=GET /src/read_body.php?
raflag=GET /src/download.php?
scflag=POST /src/compose.php
endup

begin=wm4.url.com.tw
attr=10
host=wm4.url.com.tw
separator=&
username=username=
password=secretkey=
cryptogram=1
loginflag=Set-Cookie: key=
rcflag=GET /src/read_body.php?
raflag=GET /src/download.php?
scflag=POST /src/compose.php
endup

begin=wm5.url.com.tw
attr=10
host=wm5.url.com.tw
separator=&
username=username=
password=secretkey=
cryptogram=1
loginflag=Set-Cookie: key=
rcflag=GET /src/read_body.php?
raflag=GET /src/download.php?
scflag=POST /src/compose.php
endup

begin=wm6.url.com.tw
attr=10
host=wm6.url.com.tw