snackhack2 0.6.5 → 0.6.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cda044a6c9ae56812b5742965caa204d3e32d8fe9dee0857806cefd45d058e4e
-  data.tar.gz: 6f6b5a0c249afdd9691070f481fcaa756721d599b5bf7f1f68909a54c30211f1
+  metadata.gz: b016f87e2b46dc87ffab71256f1b5880f3db8b1bf16ccbc35bbe7aeeb0e7fe26
+  data.tar.gz: 1a9accfc1fe6f09c5d3e5f624eeeb032441f0fac9a25523c0b08f8b34c9963da
 SHA512:
-  metadata.gz: 62c3e1c33052a126536a6c3b2708f2f15acd1a4adbb2d26df1f3ad9ba639c1e55308034872391fc179736e0ad9899c3f633a3273e7217ac5a547ced717f389b9
-  data.tar.gz: 43943cb44a33159f5fdd31650e8322355882ceb46ce4049ad6e17d900e6bd74e35d83989a205f0a3379c303233ed3359c5abf774fd9fc164fceb4ca763af5e40
+  metadata.gz: ce184f5769d385950ebc9a5824f4788398cf301544eacc0dd59a7b2bd64e100f0b4816db9807e307287e8ef89085d18168a575f9b620177dd3bdac53916bcf49
+  data.tar.gz: 82efd660a7495c292a45c527cc9e937e73b143c00fb8e36800be34544c9447f3864f07f1d137d351ab2acd70aa126f8d2ace81080acd79cfcbba61a1b6350a54

data/lib/snackhack2/bannergrabber.rb

@@ -8,24 +8,18 @@ module Snackhack2
     def initialize(port: 443, save_file: true)
       @site    = site
       @port    = port
-      @headers = Snackhack2.get(@site).headers
       @save_file = save_file
     end
 
-    def site
-      # @site.gsub('https://', '')
-    end
-
     def run
       nginx
       apache2
       wordpress
-      headers
     end
-
+    def headers
+      @headers = Snackhack2.get(@site).headers
+    end
     def nginx
-      return unless @headers['server'].match(/nginx/)
-
       puts "[+] Server is running NGINX... Now checking if #{File.join(@site, 'nginx_status')} is valid..."
       nginx = Snackhack2.get(File.join(@site, 'nginx_status'))
       if nginx.code == 200
@@ -37,20 +31,25 @@ module Snackhack2
 
     def curl
       servers = ''
+      # rus the curl command to get the headers of the given site. 
       cmd = `curl -s -I #{@site.gsub('https://', '')}`
+      # extracts the server header from the curl results
       version = cmd.split('Server: ')[1].split("\n")[0].strip
       if @save_file
         servers += version.to_s
       else
         puts "Banner: #{cmd.split('Server: ')[1].split("\n")[0]}"
       end
+
+      # saves the results if '@save_file' is set to true.
       Snackhack2.file_save(@site, 'serverversion', servers) if @save_file
     end
 
     def apache2
-      if @headers['server'].match(/Apache/)
+      if headers['server'].match(/Apache/)
         puts "[+] Server is running Apache2... Now checking #{File.join(@site, 'server-status')}..."
         apache = Snackhack2.get(File.join(@site, 'server-status'))
+        # status code 200 means the request was successful.
         if apache.code == 200
           puts "Check #{@site}/server-status"
         else
@@ -67,16 +66,89 @@ module Snackhack2
 
       puts "[+] Wordpress found [+]\n\n\n"
     end
-
-    def headers
-      h = Snackhack2.get(@site).headers
-      puts "[+] Server Version: #{h['server']}..."
+    def types
+      {
+        "cloudflare": [ "cf-cache-status", "cf-ray", "cloudflare"],
+        "aws CloudFront": [ "X-Amz-Cf-Pop", "X-Amz-Cf-Id", "CloudFront", "x-amz-cf-pop", "x-amz-cf-id", "cloudfront.net"] 
+      }
     end
+    def find_headers
+      # make a request to the site and grab the headers. 
+      Snackhack2.get(@site).headers
+    end
+    def cloudflare(print_status: true)
+      # the purpose of this method is to 
+      # check to see if a site has 
+      # cloudflare in the headers
+
+      cf_status = false
+      cf_count  = 0
+
+      # access the 'types' hash to get the cloudflare strings. 
+      cf = types[:"cloudflare"]
 
+      # make a single get request to the site defined at '@site'
+      find_headers.each do |k,v|
+        # if the key is in the array cf
+        if cf.include?(k)
+          cf_status = true
+          cf_count += 1
+        end
+      end
+      if print_status
+        # cf_status[0] : the status if cloudflare was found
+        # cf_count[1]  : the number of found elements in the 'cloudflare' hash. 
+        return [cf_status, cf_count]
+      else
+        if cf_status
+          puts "Cloudflare was found. The count is: #{cf_count}"
+        else
+          puts "Cloudflare was NOT found. The count is #{cf_count}"
+        end
+      end
+    end
+    def detect_header(return_status: true)
+      # stores the data found in 
+      # the headers.
+      data = {}
+      # loops through the hash stored in the 'types' method.
+      # the t_k is the KEY of the hash
+      # the t_v is the VALUE of the hash.
+      types.each do |t_k, t_v|
+        # make a single get request to the site 
+        # to get the headers.
+        find_headers.each do |fh_k, fh_v|
+          # Get the keys from the 'types' method
+          # which is basicly a hash
+          type_key = t_k
+          # uses the key of the 'types' hash 
+          # to see if includes the string found in 'fh_k'
+          if types[type_key].include?(fh_k)
+            if data.has_key?(type_key)
+              data[type_key] <<  fh_k
+            else
+              data[type_key] = [fh_k]
+            end
+          end
+        end
+      end
+      if return_status
+        return data
+      else
+        data.each do |k,v|
+          puts "K:#{k}"
+          puts "V: #{v}"
+        end
+      end
+    end
     def server
       @headers['server']
     end
 
     attr_reader :site
-  end
+    private :find_headers
+  end  
 end
+# to do: instead of doing mutiple methods for each type of
+# header make one method that is dynamic...
+# and can do different ones

data/lib/snackhack2/phishing_tlds.rb

@@ -1,7 +1,7 @@
 # frozen_string_literal: true
 
 module Snackhack2
-  class PhishingData
+    class PhishingData
     def domains
         [
            ".com",
@@ -44,154 +44,244 @@ module Snackhack2
            ".work"
         ]
     end
+    def domain_keywords
+      [
+        "connect",
+        "corp",
+        "duo",
+        "help",
+        "he1p",
+        "helpdesk",
+        "helpnow",
+        "info",
+        "internal",
+        "mfa",
+        "my",
+        "okta",
+        "onelogin",
+        "schedule",
+        "service",
+        "servicedesk",
+        "servicenow",
+        "rci",
+        "rsa",
+        "sso",
+        "ssp",
+        "support",
+        "usa",
+        "vpn",
+        "work",
+        "dev",
+        "workspace",
+        "it",
+        "ops",
+        "hr",
+        "login",
+        "secure"
+      ]
+    end
   private :domains
 end
-    class PhishingTlds < PhishingData
-      attr_reader :site
-      def initialize
-          @site = site
+class PhishingTlds < PhishingData
+  attr_reader :site
+  def initialize
+      @site = site
+  end
+  def domain_split
+    # This method splits up the value block_given
+    # given in @site by the period. Which is used
+    # by 'remove_tlds' method to remove the TLDs
+     @site.split(".")
+  end
+  def site=(s)
+      @site = s
+  end
+  def remove_tlds
+    # this method function is to remove
+    # the TLDs from the @site. For Example
+    # it will remove .org, .com 
+    
+    ds = domain_split
+    
+    # remove ".com" (last element in array)
+    ds.pop
+    
+    # returns the domain w/o the tlds
+    ds
+  end
+  def check_domains(array: true)
+    # The function of this method is to
+    # check if the given domains are valid or not. 
+    # By valid I mean resolvable and active. 
+    
+    
+    # if domains is set to true, this array will hold the domains 
+    domains_out = []
+    
+    # build the list of domains
+    generated_tlds = change_tld
+    
+    valid_domains = []
+    not_valid_domains = []
+    
+    generated_tlds.each do |domain|
+      # if array is true; add the domains to array
+      if array
+        domains_out << domain
+      else
+        # if array is false print out the domains
+        puts domain
       end
-      def domain_split
-        # This method splits up the value block_given
-        # given in @site by the period. Which is used
-        # by 'remove_tlds' method to remove the TLDs
-         @site.split(".")
+      domains_out if array
+    end
+  end
+  def remove_letters(array_out: true)
+    # This method will remove letters that 
+    # occur more than once. For example:
+    # google.com would become goggle.com
+    
+    # store the letter count in a hash. 
+    letter_count = {}
+    
+    ds = remove_tlds
+    
+    # Creates an array with each character being
+    # stored in a element. It will loop through the array 
+    # and figure out the number of occurrences for each character
+    ds.shift.split(//).each do |letter|
+      if letter_count.has_key?(letter)
+          letter_count[letter] += 1
+      else
+          letter_count[letter] = 1
       end
-      def site=(s)
-          @site = s
+    end
+    
+    # After it creates the hash with the character and 
+    # the number of time it cocures. This method 
+    # will loop through the hash and check to see
+    # if the value is greater than 1. If it is then the key ( the letter)
+    # is added to the array named 'letters_with_more_than_one'
+    letters_with_more_than_one = []
+    letter_count.each do |key, value|
+      if value > 1
+          letters_with_more_than_one << key
       end
-      def remove_tlds
-        # this method function is to remove
-        # the TLDs from the @site. For Example
-        # it will remove .org, .com 
-        
-        ds = domain_split
-        
-        # remove ".com" (last element in array)
-        ds.pop
-        
-        # returns the domain w/o the tlds
-        ds
+    end
+    
+    
+    ds = remove_tlds
+    new_ds = ds.shift
+    
+    # the final array with the duplicates letters removed
+    remove_letters_out = []
+    
+    # Loops through the 'letters_with_more_than_one'
+    # array and uses 'sub' to remove the occurence
+    # of one of the letters
+    letters_with_more_than_one.each do |l|
+        # removes only first character ( l )
+        remove_letters_out <<  new_ds.sub(l, "")
+        # removes ALL chracters ( l )
+        remove_letters_out <<  new_ds.gsub(l, "")
+    end
+    
+    domains_with_tlds = []
+    # adding the TLDS to the 'remove_letter_out' array
+    domains.each do |d|
+      remove_letters_out.each do |rl|
+        # adds the words ( rl ) and the TLDS ( d )
+        # to the domains_with_tld array.
+        domains_with_tlds << "#{rl}#{d}"
       end
-      def check_domains(array: true)
-        # The function of this method is to
-        # check if the given domains are valid or not. 
-        # By valid I mean resolvable and active. 
-        
-        
-        # if domains is set to true, this array will hold the domains 
-        domains_out = []
-        
-        # build the list of domains
-        generated_tlds = change_tld
-        
-        valid_domains = []
-        not_valid_domains = []
-        
-        generated_tlds.each do |domain|
-          # if array is true; add the domains to array
-          if array
-            domains_out << domain
-          else
-            # if array is false print out the domains
-            puts domain
-          end
-          domains_out if array
+    end
+    if array_out
+        domains_with_tlds
+    else
+       # will print the contents of the array
+       # instead of returning the array
+       domains_with_tlds.each  { |a| puts a }
+    end
+  end
+  def combosquatting
+    # where the generated domains will be located.
+    results = []
+    
+    # get the domain_keywords array from the PhishingData class.
+    keywords = domain_keywords
+    
+    prefixes = ["-", ".", "--"]
+    ds = remove_tlds
+    # this will generate the 'new_domain' with the keywords
+    # as a prefix
+    prefixes.each do |pre|
+      ds.each do |domain|
+        keywords.each do |key|
+          new_domain = "#{key}#{pre}#{domain}"
+          results << new_domain
         end
       end
-      def remove_letters(array_out: true)
-        # This method will remove letters that 
-        # occur more than once. For example:
-        # google.com would become goggle.com
-        
-        # store the letter count in a hash. 
-        letter_count = {}
-        
-        ds = remove_tlds
-        
-        # Creates an array with each character being
-        # stored in a element. It will loop through the array 
-        # and figure out the number of occurrences for each character
-        ds.shift.split(//).each do |letter|
-          if letter_count.has_key?(letter)
-              letter_count[letter] += 1
-          else
-              letter_count[letter] = 1
-          end
-        end
-        
-        # After it creates the hash with the character and 
-        # the number of time it cocures. This method 
-        # will loop through the hash and check to see
-        # if the value is greater than 1. If it is then the key ( the letter)
-        # is added to the array named 'letters_with_more_than_one'
-        letters_with_more_than_one = []
-        letter_count.each do |key, value|
-          if value > 1
-              letters_with_more_than_one << key
-          end
-        end
-        
-        
-        ds = remove_tlds
-        new_ds = ds.shift
-        
-        # the final array with the duplicates letters removed
-        remove_lettters_out = []
-        
-        # Loops through the 'letters_with_more_than_one'
-        # array and uses 'sub' to remove the occurence
-        # of one of the letters
-        letters_with_more_than_one.each do |l|
-            remove_lettters_out <<  new_ds.sub(l, "")
-        end
-        
-        if array_out
-            remove_lettters_out
-        else
-           # will print the contents of the array
-           # instead of returning the array
-           remove_lettters_out.each  { |a| puts a }
+    end
+    suffixes = ["-", ".", "--"]
+    # this will generate the 'new_domain' with the keywords
+    # as a suffixes
+    suffixes.each do |suf|
+      ds.each do |domain|
+        keywords.each do |key|
+          new_domain = "#{domain}#{suf}#{key}"
+          results << new_domain
         end
       end
-      def change_tld(no_tld: true)
-        # This method will take the inputted site in @site and 
-        # remove the TLDs and add a new TLDs to the domain. 
-        # its uses the 'domain' method in the PhishingData class
-        # which has an array of a bunch of different tlds. 
-        
+    end
+    final_results = []
+    
+    # Loops through the domains array in the PhishingData class
+    domains.each do |tlds|
+      results.each do |r|
+        new_domain = "#{r}#{tlds}"
+        final_results << new_domain
+      end
+    end
+    final_results
+  end
+  def change_tld(no_tld: true)
+    # This method will take the inputted site in @site and 
+    # remove the TLDs and add a new TLDs to the domain. 
+    # its uses the 'domain' method in the PhishingData class
+    # which has an array of a bunch of different tlds. 
+    
+  
+    # if the @site does not have a tlds
+    if no_tld
+      new_domains = []
+      # loop through the tlds
+      domains.each do |d|
+        # combine the inputed @site
+        # and the tlds 
+        new_domains << "#{@site}#{d}"
+      end
+      new_domains
+    else
+      # If the @site does have a TLDs.
       
-        # if the @site does not have a tlds
-        if no_tld
-          new_domains = []
-          # loop through the tlds
-          domains.each do |d|
-            # combine the inputed @site
-            # and the tlds 
-            new_domains << "#{@site}#{d}"
-          end
-          new_domains
-        else
-          # If the @site does have a TLDs.
-          
-          # this is where the final results
-          # are stored. 
-          list_of_domains = []
-          
-          # removes .com, .org, etc
-          ds = remove_tlds
-        
-          # join the elements together
-          ds = ds.join(".")
-          
-          # loops through the tlds
-          domains.each do |tlds|
-              # adds the new domains to the array
-              list_of_domains <<  ds + tlds
-          end
-        list_of_domains
-        end
+      # this is where the final results
+      # are stored. 
+      list_of_domains = []
+      
+      # removes .com, .org, etc
+      ds = remove_tlds
+    
+      # join the elements together
+      ds = ds.join(".")
+      
+      
+      # loops through the tlds
+      domains.each do |tlds|
+          # adds the new domains to the array
+          list_of_domains <<  ds + tlds
       end
-      private :remove_tlds, :domain_split
+    list_of_domains
     end
+  end
+  private :remove_tlds, :domain_split
+  end
 end

data/lib/snackhack2/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Snackhack2
-  VERSION = '0.6.5'
+  VERSION = '0.6.6'
 end

data/lib/snackhack2.rb

@@ -2,7 +2,7 @@
 
 require 'uri'
 require 'httparty'
-
+=begin
 require_relative 'snackhack2/version'
 require_relative 'snackhack2/bannergrabber'
 require_relative 'snackhack2/wordpress'
@@ -36,6 +36,12 @@ require_relative 'snackhack2/ssrf'
 require_relative 'snackhack2/dns'
 require_relative 'snackhack2/CVE-2017-9841'
 require_relative 'snackhack2/phishing_tlds'
+=end
+Dir.glob(File.join(File.dirname(__FILE__), "snackhack2", "*")).each do |file|
+  unless File.directory?(file)
+    require_relative file
+  end
+end
 module Snackhack2
   UA = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36'
   def self.read_serverversion
@@ -57,10 +63,17 @@ module Snackhack2
     end
   end
 
-  def self.file_save(site, type, content, ip: false)
-    hostname = URI.parse(site).host
-    File.open("#{hostname}_#{type}.txt", 'w+') { |file| file.write(content) }
-    puts "[+] Saving file to #{hostname}_#{type}.txt..."
+  def self.file_save(site, type, content, ip: false, host: true)
+    if host
+      hostname = URI.parse(site).host
+      File.open("#{hostname}_#{type}.txt", 'w+') { |file| file.write(content) }
+      puts "[+] Saving file to #{hostname}_#{type}.txt..."
+    else
+      File.open("#{site}_#{type}.txt", 'w+') { |file| file.write(content) }
+      puts "[+] Saving file to #{site}_#{type}.txt..."
+    end
+    
+    
   end
 
   def self.get(site)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: snackhack2
 version: !ruby/object:Gem::Version
-  version: 0.6.5
+  version: 0.6.6
 platform: ruby
 authors:
 - mike
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-10-08 00:00:00.000000000 Z
+date: 2025-10-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: httparty