m4dh4v45b1n 0.1.0 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ba59c07a48e3d2552f540859c29b99d41f1ea76e70580ed0f771c26933ac46f7
-  data.tar.gz: 53a2324e3df1109f04eeb7b2aa3973b65eff3df065be1c96b25a73fd4081099a
+  metadata.gz: ac621bf718d7d18d53ceeca5c9fb9cc761d3fa5e1e8acf18e7527ada6aeb64d8
+  data.tar.gz: 9811e42117ea21817cd79dd9bf682c2802ba20739eaf2d0d4b9bfb27a53588bb
 SHA512:
-  metadata.gz: a550e17a8aff3355a7d7af2b97518d11b2500d9cb0c819a94e977d3d3559b1c1fc573f09af9552bfba77ea8970d00ebc396e639002d7bccabdeebe549035bf0b
-  data.tar.gz: 1b77e9edf3a57367c2aa01fd87502ad7be33ff553e23367096568e47733f94cee1468a5c6d33729662065ec1ceb1e28e3be8ff3c6e571591ae604368956e1371
+  metadata.gz: 447ced475276b94e666415ff58759f3732383f8747a197c4b5c9cb620f651863832904beddab8b3c39d6d29149ff19b33ab441546be53204b88a99a44575a872
+  data.tar.gz: fecdef0ac6f57a67dbd36b44bedeb4291ee10fef61969fb3b87bd87a63ad6ca17e2b6416943e0d5a58a3b5788af35add572c201cbbe356b53a11337e588d4681

data/bin/enum-subdomain.rb

@@ -9,6 +9,9 @@ def  main
   OptionParser.new do |optp|
     optp.banner = "\nUsage: enum-subdomain.rb [-h] [-v] [-w DICT] [-t MAXTHREAD] [-T TIMEOUT] [-o OUT] DOMAIN
 des: enumarate subdomain with randomize dns. (#{VERSION})
+ability: Once It get the subdomain via R(dns).
+         It never enumarate again if you don't use '-C' flag.
+         The data logs under ~/.cache/enum-subdomain/.
 Eg: enum-subdomain.rb -v example.com\n\n"
     optp.program_name = "enum-subdomain"
     optp.summary_width = 14
@@ -30,6 +33,16 @@ Eg: enum-subdomain.rb -v example.com\n\n"
     optp.on('-o OUTPUT', "Append output to the file.")do|f|
       init.out = f
     end
+    optp.on('-c', "Show cached subdomain and exit.") do|f|
+      init.show_cache = true
+    end
+    optp.on('-C', "Ignore cached subdomain and enumarate again.")do |c|
+      init.show_cache_without_d = false
+      init.show_new = false
+    end
+    optp.on('-n', "Hide cached subdomain and show only new.") do |n|
+      init.show_new = false
+    end
     optp.on('-h', '--help', "Print this help banner.") do |h|
       puts optp
       exit

data/bin/fuzz-web-dir.rb

@@ -7,8 +7,9 @@ require 'optparse'
 def  main
   init = Fuzz_web_dir::new()
   OptionParser.new do |optp|
-    optp.banner = "\nUsage: fuzz_web_dir.rb [-h] [-w DICT] [-t MAXTHREAD] [..] URL
+    optp.banner = "\nUsage: fuzz-web-dir.rb [-h] [-w DICT] [-t MAXTHREAD] [..] URL
 des: Directory fuzzer. (#{VERSION})
+recomended: ruby-3.x.x otherwise it won't work properly.
 Eg: fuzz-web-dir.rb -e php,txt --hc 303,404  https://example.com\n\n"
     optp.program_name = "fuzz-web-dir"
     optp.summary_width = 15

data/bin/m4dh4v45b1n.rb

@@ -5,7 +5,7 @@ require 'm4dh4v45b1n'
 print "
 script
   ├── enum
-  │    ├── enum-wordpress.rb
+  │    ├── enum-wordpress-user.rb
   │    └── enum-subdomain.rb
   ├── exploit
   ├── scan
@@ -15,7 +15,12 @@ script
 dict
   ├── dirs.txt
   └── subdomain.txt
+recomended
+  ├── ruby-3.x.x
+  └── linux based (if works fine on other os just leave it)
 other
-  ├── (#{VERSION})
-  └── Madhava-mng
+  ├── version
+  │     └── (#{VERSION})
+  └── author
+        └── Madhava-mng
 "

data/lib/m4dh4v45b1n/enum-subdomain.rb

@@ -5,6 +5,7 @@ require 'resolv'
 require 'resolv-replace'
 
 
+
 NAME_SERVERS = {
   "Cloudflare": ['1.1.1.1', '1.0.0.1'],
   "Google": ['8.8.8.8', '8.8.4.4'],
@@ -14,17 +15,45 @@ NAME_SERVERS = {
 
 TIME_OUT = 1
 MAX_THREAD = 25
-WORDLIST = Gem::path[1]+"/gems/m4dh4v45b1n-#{VERSION}/dict/subdomain.txt"
 
+def wordlist
+  Gem::path.map do |p|
+    if File.exist? p+"/gems/m4dh4v45b1n-#{VERSION}/dict/subdomain.txt"
+      return p+"/gems/m4dh4v45b1n-#{VERSION}/dict/subdomain.txt"
+    end
+  end
+  puts "enum-subdomain.rb: Unable to deduct default wordlist use -w"
+  exit
+end
+def cache_subdomain
+  if !ENV["HOME"].nil?
+    if !File.exist? ENV["HOME"]+"/.cache"
+      Dir::mkdir ENV["HOME"]+"/.cache"
+    end
+    if !File.exist? ENV["HOME"]+"/.cache/enum-subdomain"
+      Dir::mkdir ENV["HOME"]+"/.cache/enum-subdomain"
+    end
+    if File.exist? ENV["HOME"]+"/.cache/enum-subdomain"
+      return ENV["HOME"]+"/.cache/enum-subdomain"
+    end
+  end
+  return nil
+end
+
+CACHE = cache_subdomain
+WORDLIST = wordlist
 
 class Subdomain_enum
-  attr_accessor :target, :wordlist, :timeout, :max_thread, :out, :verbose
+  attr_accessor :target, :wordlist, :timeout, :max_thread, :out, :verbose,:cache_file,:show_cache, :show_cache_without_d,:show_new
   def initialize
     @timeout = TIME_OUT
     @max_thread = MAX_THREAD
     @wordlist = WORDLIST
     @verbose = false
     @outb=""
+    @show_cache = false
+    @show_new = true
+    @show_cache_without_d = true
   end
   def loader(list)
     return Resolv::DefaultResolver.replace_resolvers([
@@ -54,6 +83,9 @@ class Subdomain_enum
   def print_domain(domain)
     response = get_domain(domain)
     if response.length > 0
+      if !CACHE.nil?
+        @cache_file.write("#{domain.gsub(@target, "\x7")}")
+      end
       if @verbose
         puts "\e[32m#{domain}\e[0m :#{response.join("\e[2m/\e[0m")}"
       else
@@ -64,7 +96,37 @@ class Subdomain_enum
       end
     end
   end
+  def check_cache_domain
+    if !CACHE.nil?
+      if !File.file? CACHE+"/#{@target}.cache"
+        File.open(CACHE+"/#{@target}.cache", "a")
+      else
+        File.open(CACHE+"/#{@target}.cache") do |f|
+          data_ = f.read.split("\x7")
+          data_ = data_.uniq
+          data_.map do |s|
+            if @show_new
+              if @show_cache
+                $stdout.print s+target+"\n"
+              else
+                puts "\e[32m#{s+@target}\e[0m"
+              end
+            end
+          end
+          File.open(CACHE+"/#{@target}.cache", "w") do |f2|
+            f2.write(data_.join("\x7"))
+          end
+          return data_.map {|a| a[0,a.length-1] }
+        end
+      end
+    end
+    return []
+  end
   def brut
+    already_have = check_cache_domain
+    if @show_cache
+      exit
+    end
     if Resolv.getaddresses(@target).length == 0
       print "enum-subdomain.rb: #{@target}:Unreachable.\nDo you wana exit ? "
       tmp = STDIN.gets.chomp
@@ -72,19 +134,33 @@ class Subdomain_enum
         exit
       end
     end
+    if !CACHE.nil?
+      @cache_file = File.open(CACHE+"/#{@target}.cache", "a")
+    end
     if @out
       @out = File.open(@out, "w")
     end
-    File.open(@wordlist).readlines.map do |line|
+    wordlist_ = File.open(@wordlist).readlines.uniq
+    if @show_cache_without_d
+      already_have.map do |a|
+        wordlist_.delete(a)
+      end
+    end
+    wordlist_.map do |line|
       Thread::new do
-        print_domain(
-          [line.chomp, @target.strip].join(".")
-        )
+        if !already_have.include? line.chomp
+          print_domain(
+            [line.chomp, @target.strip].join(".")
+          )
+        end
       end
       sleep 0.03
       while Thread::list.length > @max_thread;end
     end
     while Thread::list.length > 1;end
+    if Thread::list.length == 1
+      sleep 0.6
+    end
   end
 end
 

data/lib/m4dh4v45b1n/fuzz-web-dir.rb

@@ -2,10 +2,18 @@ require_relative 'version'
 require_relative 'rand-util'
 require 'json'
 require 'net/http';
-
-FUZZ_WEB_DIR_DICT= Gem::path[1]+"/gems/m4dh4v45b1n-#{VERSION}/dict/dirs.txt"
+def wordlist
+  Gem::path.map do |p|
+    if File.exist? p+"/gems/m4dh4v45b1n-#{VERSION}/dict/dirs.txt"
+      return p+"/gems/m4dh4v45b1n-#{VERSION}/dict/dirs.txt"
+    end
+  end
+  puts "fuzz-web-dir.rb: Unable to deduct default wordlist use -w"
+  exit
+end
+FUZZ_WEB_DIR_DICT= wordlist
 FUZZ_WEB_DIR_HIDE_CODE=['404']
-FUZZ_WEB_DIR_EXT = ['php', 'txt', 'html']
+FUZZ_WEB_DIR_EXT = ['php', 'txt', 'html', 'xml']
 FUZZ_WEB_DIR_HEADER = '{}'
 FUZZ_WEB_DIR_TIMEOUT = 1    # SECONDS
 FUZZ_WEB_DIR_MAX_THREAD = 24

data/lib/m4dh4v45b1n/version.rb

@@ -1,2 +1,2 @@
 # frozen_string_literal: true
-VERSION = "0.1.0"
+VERSION = "0.1.2"

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: m4dh4v45b1n
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.2
 platform: ruby
 authors:
 - Madhava-mng
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2021-06-29 00:00:00.000000000 Z
+date: 2021-07-04 00:00:00.000000000 Z
 dependencies: []
 description: Developed for POC not harm to any one.
 email: