m4dh4v45b1n 0.2.0 → 0.2.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6e6280209d2b172f88c5e8f0c505cb2f2b5a91c6184ff6b942d7482e1634ab52
-  data.tar.gz: 1a5b08e7c6faa78e56194cc40c356fded1063ff1f64835f5866391b6bfccb080
+  metadata.gz: 0e5d58ee3c04f3b84349c34ae8d7d307f87eed26a77b7f0407074fe7a144849d
+  data.tar.gz: e945d8aaea8f21a740c0694759885f86b410862231b3c9257e3634e0bbb9f3a8
 SHA512:
-  metadata.gz: cb1531739ae7dbedb1d444ce64a0ac9e7d5098438154c12297189cd510da93e97d62c67a00aa2fd084b20cf1693205a0680ff53ca92f114aa15dfb96c3a8d83c
-  data.tar.gz: 789511ad0a0f8c3ea6f660947d63154933f50218524830ad175e6a53f733bb50ad0baee227560cedf312465f168910f79beafc70108ac177859633953967b27a
+  metadata.gz: d31b7b60d8040acbb4e8cc72c9ed2898a11143351672334cf1ee52b819ec38ea983ef7552239231460cd64c6ff0487b7a94545b86f07c36383e278eeeff71e2d
+  data.tar.gz: fc8bdeacb2856ce4896f2d5f03d60c3e6a5cf9670ee49ee87f4f6d05839b018e08bc659111818cc56ed99592a4ed50a6b5f2d0907a12aa24144358f75210c211

data/bin/fuzz-web-dir.rb

@@ -10,63 +10,69 @@ def  main
     optp.banner = "\nUsage: fuzz-web-dir.rb [-h] [-w DICT] [-t MAXTHREAD] [..] URL
 des: Directory fuzzer. (#{VERSION})
 recomended: ruby-3.x.x otherwise it won't work properly.
-Eg: fuzz-web-dir.rb -e php,txt --hc 303,404  https://example.com
-    fuzz-web-dir.rb -u http://example.com/api/v2/ -D proxy/list.txt -H '{\"foo\":\"bar\"}'\n\n"
+Eg: fuzz-web-dir.rb -e php,txt --hs 303,404  https://example.com
+    fuzz-web-dir.rb -u http://example.com/ -w num.txt -H '{\"foo\":\"bar\"}'\n\n"
     optp.program_name = "fuzz-web-dir"
-    optp.summary_width = 15
+    optp.summary_width = 12
     optp.program_name = "fuzz-web-dir"
     optp.version = VERSION
 
-    optp.on('-w WORDLIST', "Use custom wordlist. (default:#{FUZZ_WEB_DIR_DICT})") do |w|
+    optp.on('-w FILE', "Use custom wordlist. ","(default:#{FUZZ_WEB_DIR_DICT})\n") do |w|
       init.dict = w
     end
-    optp.on('-e EXT', "Add extension.Use comma for multiple value. (default:txt,php,html,xml") do |w|
+    optp.on('-e EXT', "Add extension.","Use comma for multiple value.", "(default:txt,php,html,xml") do |w|
       init.ext = w.split(',')
     end
-    optp.on('-p PAUSE', Float, 'Pause the fuzz for N second.') do |p|
+    optp.on('-E', "Dissable extension search.") do |e|
+      init.use_ext = false
+    end
+    optp.on('-p INT', Float, 'Pause the fuzz for N second.') do |p|
       init.wait = p
     end
-    optp.on('-d' , "Enable decoy for evate the fire wall. add #{FUZZ_WEB_DIR_PROXY_FILE} for default decoy list. x.x.x.x:p format.") do |d|
+    optp.on('-d' , "Enable decoy for evate the fire wall.","add #{FUZZ_WEB_DIR_PROXY_FILE},","for default decoy list. x.x.x.x:p format.") do |d|
       init.decoy = true
     end
-    optp.on('-D DECOY' , "Use decoy file.") do |d|
+    optp.on('-D FILE' , "Use decoy file.") do |d|
       init.decoy = true
       init.pfile = d
     end
-    optp.on('-n', 'Run decoy with out checking it. It may affect the result.') do
+    optp.on('-n', 'Run decoy with out checking it.',"It may affect the result.\n") do
       init.check = false
     end
-    optp.on('-t MAXTHREAD', Integer, "Maximum concurrency. (default:#{FUZZ_WEB_DIR_MAX_THREAD})") do |t|
+    optp.on('-f', "Follow redirection") do |f|
+      init.follow = true
+    end
+    optp.on('-t INT', Integer, "Maximum concurrency. (default:#{FUZZ_WEB_DIR_MAX_THREAD})\n") do |t|
       init.max_thread = t
     end
-    optp.on('-T TIMEOUT', Float, "Set time out for each try. (default:#{FUZZ_WEB_DIR_TIMEOUT}s)") do|t|
+    optp.on('-T INT', Float, "Set time out for each try. (default:#{FUZZ_WEB_DIR_TIMEOUT}s)\n") do|t|
       init.timeout = t
     end
-    optp.on('-u URL', "Target url.")do|u|
+    optp.on('-u URL', "Target url or specify without -u flag.\n")do|u|
       init.url = u
     end
-    optp.on('-o OUTPUT', "Write output to the file.")do|f|
+    optp.on('-o FILE', "Write output to the file.")do|f|
       init.out = f
     end
-    optp.on('-H HEAD', 'Add header in json format with in apostrophy. eg:\'{"key":29}\' .') do |h|
+    optp.on('-H HEAD', 'Add header in json format with in apostrophy.',' eg:\'{"key":29}\' .') do |h|
       init.header = h
     end
-    optp.on('-s STATUS', '--hs', "Hide status code. Use comma for multiple value. (default:404)") do |hc|
+    optp.on('-s INT', '--hs', "Hide status code. Use comma for multiple value. ","(default:404)") do |hc|
       init.hide_code = hc.split(',')
     end
-    optp.on('-c CHARS', '--hc', "Hide No.Of.Chars. Use comma for multiple value. ") do |hc|
+    optp.on('-c INT', '--hc', "Hide No.Of.Chars. Use comma for multiple value. ") do |hc|
       init.hide_char = hc.split(',').map {|e| e.to_i}
     end
-    optp.on('-l LINES', '--hl', "Hide No.of.Lines. Use comma for multiple value. ") do |hc|
+    optp.on('-l INT', '--hl', "Hide No.of.Lines. Use comma for multiple value. ") do |hc|
       init.hide_line = hc.split(',').map {|e| e.to_i}
     end
-    optp.on('-S STATUS', '--ss', "Show status code. Use comma for multiple value.") do |hc|
+    optp.on('-S INT', '--ss', "Show status code. Use comma for multiple value.") do |hc|
       init.show_code = hc.split(',')
     end
-    optp.on('-C CHARS', '--sc', "Show No.Of.Chars. Use comma for multiple value. ") do |hc|
+    optp.on('-C INT', '--sc', "Show No.Of.Chars. Use comma for multiple value. ") do |hc|
       init.show_char = hc.split(',').map {|e| e.to_i}
     end
-    optp.on('-L LINES', '--sl', "Show No.of.Lines. Use comma for multiple value. ") do |hc|
+    optp.on('-L INT', '--sl', "Show No.of.Lines. Use comma for multiple value. ") do |hc|
       init.show_line = hc.split(',').map {|e| e.to_i}
     end
     optp.on('-h', '--help', "Print this help banner.") do |h|

data/bin/recon-passive-subdomain.rb

@@ -1,3 +1,5 @@
+#!/bin/env ruby
+
 require 'sdcd'
 require 'digest'
 require 'net/http'
@@ -29,16 +31,39 @@ URLS = [
     "SDCD",
     "@",
     ","
+  ],
+  [
+    "https://raw.githubusercontent.com/cyb3r-mafia/subdomains/main/assets4/<SDCD>.sdcd",
+    "URL",
+    "SHA1",
+    "SDCD",
+    "@",
+    ","
+  ],
+  [
+    "https://raw.githubusercontent.com/cyb3r-mafia/subdomains/main/assets5/<SDCD>.sdcd",
+    "URL",
+    "SHA1",
+    "SDCD",
+    "@",
+    ","
+  ],
+  [
+    "https://raw.githubusercontent.com/cyb3r-mafia/subdomains/main/assets6/<SDCD>.sdcd",
+    "URL",
+    "SHA1",
+    "SDCD",
+    "@",
+    ","
   ]
 ]
 
 SORCE_DEPTH = 1
-SDCD_DIR = []
 CONFIG_FILE = ENV["HOME"] + "/.s-pasive.conf"
 
 tmp = []
-
-
+tmp2 = []
+src = ''
 
 
 if !File.exist? CONFIG_FILE
@@ -58,7 +83,16 @@ if File.exist? CONFIG_FILE
   File.open(CONFIG_FILE, "r") do |f|
     f.readlines.map do |l|
       if !l.start_with? "#"
-        tmp.append(l.chop.split(" "))
+        val  = l.chop.split(" ")
+        if val[1] == "URL"
+          tmp.append(val)
+          src += "\e[34;1m🌐 #{val[0]}\e[0m\n"
+        elsif val[1] == "DIR"
+          src +=  "\e[34;1m  #{val[0]}\e[0m\n"
+          tmp2.append(val)
+        else
+          src += "\e[31;1m✘ #{l}\e[0m\n"
+        end
       end
     end
   end
@@ -67,6 +101,8 @@ else
 end
 
 SDCD_URL_DIR = tmp
+SDCD_DIR = tmp2
+SRC = src
 
 class ReconSubdomain
 
@@ -96,33 +132,32 @@ class ReconSubdomain
     @sdcd_dir.map do |templet|
       if @source_depth != 0
         if templet[-3] == "SDCD" and templet[1] == "DIR"
-            hash = hashit(templet[-4], @domain)
-        end
-        @depth.times do |d|
-          if d > 0
-            hash = hashit(templet[-4], @domain + d.to_s)
-          end
-          path = templet[0].gsub("<SDCD>", hash)
-          puts "\e[34;1m[•] #{path}\e[0m"
-          if File.exist? path
-            puts "\n\e[32m[+] Data Found at depth\e[0m #{d}.\n\n"
-            sdcd_dict = SDCD::new.read(path)
-            sdcd_dict[@domain].map do |us_data|
-              ips,sdomain = us_data.split(templet[-2])
-              if !@notin.include? sdomain
-                @notin.append(sdomain)
-                puts "[+] \e[36;1m#{sdomain}\e[0m  |\e[2;1m#{ips.gsub(templet[-1],"\e[0m|\e[2;1m")}\e[0m|"
-                if !@out.nil?
-                  File.open(@out, "a") do |l|
-                    l.write(sdomain + "\n")
+          hash = hashit(templet[-4], @domain)
+          @depth.times do |d|
+            if d > 0
+              hash = hashit(templet[-4], @domain + d.to_s)
+            end
+            path = templet[0].gsub("<SDCD>", hash)
+            if File.exist? path
+              puts "\n\e[32m[+] Data Found at depth\e[0m #{d}.\n\n"
+              sdcd_dict = SDCD::new.read(path)
+              sdcd_dict[@domain].map do |us_data|
+                ips,sdomain = us_data.split(templet[-2])
+                if !@notin.include? sdomain
+                  @notin.append(sdomain)
+                  puts "[\e[32;1m+\e[0m] \e[36;1m#{sdomain}\e[0m  |\e[2;1m#{ips.gsub(templet[-1],"\e[0m|\e[2;1m")}\e[0m|"
+                  if !@out.nil?
+                    File.open(@out, "a") do |l|
+                      l.write(sdomain + "\n")
+                    end
                   end
                 end
+                if @max_res == @notin.length
+                  exit
+                end
               end
-              if @max_res == @notin.length
-                exit
-              end
+              @source_depth -= 1
             end
-            @source_depth -= 1
           end
         end
       end
@@ -145,7 +180,6 @@ class ReconSubdomain
               hash = hashit(templet[-4], @domain + d.to_s)
             end
             url = templet[0].gsub("<SDCD>", hash)
-            puts "\e[1;34m[•] #{url}\e[0m"
             req = Net::HTTP::get_response(URI url)
             if req.code == '200'
               puts "\n\e[32m[+] Data Found at depth\e[0m #{d}.\n\n"
@@ -154,7 +188,7 @@ class ReconSubdomain
                 ips,sdomain = us_data.split(templet[-2])
                 if !@notin.include? sdomain
                   @notin.append(sdomain)
-                  puts "[+] \e[36;1m#{sdomain}\e[0m  |\e[2;1m#{ips.gsub(templet[-1],"\e[0m|\e[2;1m")}\e[0m|"
+                  puts "[\e[32;1m+\e[0m] \e[36;1m#{sdomain}\e[0m  |\e[2;1m#{ips.gsub(templet[-1],"\e[0m|\e[2;1m")}\e[0m|"
                   if !@out.nil?
                     File.open(@out, "a") do |l|
                       l.write(sdomain + "\n")
@@ -211,6 +245,7 @@ willing to read my code. :) (#{VERSION})\n\n"
     init.domain = ARGV[-1]
   end
   if !init.domain.nil?
+    puts SRC
     init.scan
   else
     puts "Usage: recon-passive-subdomain.rb [ARG] DOMAIN\n use --help for more info."

data/lib/m4dh4v45b1n/fuzz-web-dir.rb

@@ -14,7 +14,7 @@ def wordlist
 end
 FUZZ_WEB_DIR_DICT= wordlist
 FUZZ_WEB_DIR_HIDE_CODE=['404']
-FUZZ_WEB_DIR_EXT = ['php', 'txt', 'html', 'xml']
+FUZZ_WEB_DIR_EXT = ['php', 'txt', 'html', 'db']
 FUZZ_WEB_DIR_HEADER = '{}'
 FUZZ_WEB_DIR_TIMEOUT = 3    # SECONDS
 FUZZ_WEB_DIR_MAX_THREAD = 24
@@ -32,7 +32,7 @@ var.max_thread = 24
 var.ext = ['php','txt']
 =end
 class Fuzz_web_dir
-  attr_accessor :url,:dict,:hide_code,:hide_line,:hide_char,:show_code,:show_line,:show_char,:timeout,:max_thread,:ext,:out,:wait,:proxy,:decoy,:last_decoy, :pfile,:check,:header
+  attr_accessor :url,:dict,:hide_code,:hide_line,:hide_char,:show_code,:show_line,:show_char,:timeout,:max_thread,:ext,:out,:wait,:proxy,:decoy,:last_decoy, :pfile,:check,:header,:follow,:use_ext
   def initialize()
     @dict = FUZZ_WEB_DIR_DICT
     @hide_code = FUZZ_WEB_DIR_HIDE_CODE
@@ -48,12 +48,15 @@ class Fuzz_web_dir
     @wait = FUZZ_WEB_DIR_WAIT
     @decoy = false
     @check = true
+    @follow = false
+    @use_ext = true
     @last_decoy = ''
     @pfile = FUZZ_WEB_DIR_PROXY_FILE
   end
   def show_result(url_, try_ = 5)
     begin
       @header['User-Agent'] = rand_user_agent
+      protocol = URI(url_).scheme
       if @decoy
         proxy_ = @last_decoy
         loop do
@@ -92,7 +95,6 @@ class Fuzz_web_dir
       if (@show_code.include? code_);put_it = true;end
       if (@show_char.include? char_);put_it = true;end
       if (@show_line.include? line_);put_it = true;end
-      #if (code_ == '301' and char_ == 0 and line_ == 0);url_ += "/";end
       if put_it
         finally_ = "\r\e[32m#{url_}\e[0m  lines:\e[33m#{line_}\e[0m chrs:\e[35m#{char_}\e[0m status:\e[36m#{code_}\e[0m"
         if !res_.header['Location'].nil?
@@ -104,6 +106,13 @@ class Fuzz_web_dir
           @out.write(url_ + "\n")
         end
       end
+      if (@follow and !res_.header["Location"].nil?)
+        tmp = res_.header["Location"]
+        if URI.extract(tmp).length == 0
+          tmp = url_.sub(URI(url_).path, tmp)
+        end
+        show_result(tmp, try_)
+      end
     rescue (Errno::ECONNREFUSED) => e
       print "\r#{' '*50}\r> retrying#{'.'* try_}\r"
       if (try_ != 0)
@@ -141,22 +150,23 @@ class Fuzz_web_dir
     end
   end
   def print_status(key,  val)
-    puts "\e[32m#{key.upcase}\e[0m: #{val}."
+    puts "\e[32m#{key.capitalize.ljust(24).gsub(" ",".").gsub("_", " ")}\e[0m: #{val}"
   end
   def print_status_all
     [
       ["target", @url],
-      ["dict", @dict],
-      ["ext", @ext[0,@ext.length-1].map{|e| e[1,e.length]}],
+      ["dictnary", @dict],
+      ["file_extension", @ext[0,@ext.length-1].map{|e| e[1,e.length]}],
       ["header", @header],
       ["User-agent", "random"],
+      ["Follow_redirection", @follow],
       ["Timeout", "#{@timeout}s"],
-      ["max-thread", @max_thread],
-      ["pause", "#{@wait}s"],
-      ["hide /status/line/char", "#{@hide_code}/#{@hide_line}/#{@hide_char}"],
-      ["show /status/line/char", "#{@show_code}/#{@show_line}/#{@show_char}"],
-      ["output", @out],
-      ["decoy-proxy",
+      ["maximum_thread", @max_thread],
+      ["pause_request in second", "#{@wait}s"],
+      ["hide_[/status/line/char]", "#{@hide_code}/#{@hide_line}/#{@hide_char}"],
+      ["show_[/status/line/char]", "#{@show_code}/#{@show_line}/#{@show_char}"],
+      ["output_file", @out],
+      ["decoy_proxy",
        if !@proxy.nil?
          @proxy.length
        else
@@ -170,8 +180,12 @@ class Fuzz_web_dir
     if @url[-1] != '/'
       @url += '/'
     end
-    @ext = @ext.map {|i| '.'+i }
-    @ext.append("")
+    if @use_ext
+      @ext = @ext.map {|i| '.'+i }
+      @ext.append("")
+    else
+      @ext = [""]
+    end
     @header = JSON::parse(@header)
     if @decoy
       @proxy = Pr0xy.new.get_proxies(@pfile,  @check)
@@ -184,6 +198,7 @@ class Fuzz_web_dir
   end
   def fuzz
     check_it
+    count = 0
     # read dict file
     File::open(@dict, "r") do |line|
       while true
@@ -193,6 +208,7 @@ class Fuzz_web_dir
             begin
               Timeout::timeout(@timeout) do
                 if string_line[0] != "#"
+                  count+= 1
                   show_result(@url+URI::encode_www_form_component(string_line.chomp+ext))
                 end
               end
@@ -204,9 +220,10 @@ class Fuzz_web_dir
           while Thread::list.length > @max_thread;end
           sleep(0.01 + @wait)
         end
-        if string_line.length < 20
-          print "\r#{' '*55}\r> #{string_line.chomp}\r"
+        if string_line.length > 20
+          string_line = string_line[0,18] + "…"
         end
+        print "\r#{' '*55}\r> #{string_line.chomp}\r"
       end
     end
   end

data/lib/m4dh4v45b1n/version.rb

@@ -1,2 +1,2 @@
 # frozen_string_literal: true
-VERSION = "0.2.0"
+VERSION = "0.2.4"

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: m4dh4v45b1n
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.2.4
 platform: ruby
 authors:
 - Madhava-mng
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2021-07-27 00:00:00.000000000 Z
+date: 2021-08-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: sdcd