Mensajes

Un simple programa para manejar los procesos en Windows.

Código (ruby) [Seleccionar] Expandir


#!usr/bin/ruby
#ManProcess 0.1
#Coded By Doddy H

require "win32ole"

def head()
  print "\n\n-- == Man Process 0.1 == --\n\n"
end

def copyright()
  print "\n\n(C) Doddy Hackman 2012\n\n"
  exit(1)
end

def retor()
  print "\n\n[+] Press any key to continue\n\n"
  gets.chomp
end

while 1
  head()
  print "1 - Show Process\n"
  print "2 - Close Process\n"
  print "3 - Exit\n\n\n"
  print "[+] Option : "
  op = gets.chomp
  if op == "1"
    print "\n\n[+] Getting process...\n\n"
    nave = WIN32OLE.connect("winmgmts://")
    pro = nave.ExecQuery("select * from win32_process")
    pro.each do |po|
      print "[+] Name : ",po.Caption," [+] PID : ",po.ProcessId,"\n"
    end
    retor()

  elsif op == "2"
    print "\n\n[+] Name : "
    name = gets.chomp
    k = WIN32OLE.connect("winmgmts://")
    control = k.ExecQuery("select * from Win32_process where name='#{name}'")
    control.each do |pro|
      pro.Terminate
    end
    print "\n\n[+] Process Closed\n\n"
    gets.chomp
  elsif op == "3"
    copyright()
  else
    print "\n\n[-] Bad Option\n\n"
    retor()
  end
end


# The End ?


Un simple codigo para convertir texto a hex.

Código (ruby) [Seleccionar] Expandir


#!usr/bin/ruby
#Hex Converter 0.1
#Coded By Doddy H

def head()
  print "\n -- == Hex Converter 0.1 == --\n"
end

def copyright()
  print "\n\n(C) Doddy Hackman 2012\n\n"
  exit(1)
end

def sintax()
  print "\n\n[+] ruby hex.rb <text>\n"
end

def encodehex(texto)
  return "0x"+(texto.unpack('H*')[0])
end

def hex(texto)
  print "\n\n[+] Text : #{texto}\n"
  print "[+] Result : "+encodehex(texto)+"\n\n"
end

texto = ARGV[0]

head()
if !texto
  sintax()
else
  hex(texto)
end
copyright()

# The End ?


Un buscador de google , con la opcion de poder hacer un scanner SQLI en las paginas encontradas.

Código (ruby) [Seleccionar] Expandir


#!usr/bin/ruby
#Google Search 0.3
#Coded By Doddy H

require "net/http"

def toma(web)
  return Net::HTTP.get_response(URI.parse(web)).body
end

def openwords(file)
  if File.file?(file)
    print "[+] Opening file\n\n"
    ar = File.open(file)
    lineas = ar.readlines
    ar.close
    print "[+] Number of words : ",lineas.length,"\n\n"
    return lineas
  else
    print "[-] Error opening file\n"
  end
end

def head()
  print "
  @@@@                     @           @@@                        @   
@    @                    @          @   @                       @   
@                         @          @                           @   
@        @@@   @@@   @@@@ @  @@@     @       @@@   @@@  @@  @@@  @ @@
@  @@@  @   @ @   @ @   @ @ @   @     @@@   @   @     @ @  @   @ @@  @
@    @  @   @ @   @ @   @ @ @@@@@        @  @@@@@  @@@@ @  @     @   @
@    @  @   @ @   @ @   @ @ @            @  @     @   @ @  @     @   @
@   @@  @   @ @   @ @   @ @ @   @    @   @  @   @ @   @ @  @   @ @   @
  @@@ @   @@@   @@@   @@@@ @  @@@      @@@    @@@   @@@@ @   @@@  @   @
                         @                                             
                     @@@@                                             
                     
                     

                     "
end

def retor()
  print "\n\n[+] Press any key to continue\n\n"
  gets.chomp
  menu()
end


def copyright()
  print "\n\n(C) Doddy Hackman 2012\n\n"
  exit(1)
end

def about()
  print "
 
This program was written by Doddy in the summer of 2012, I will not take responsibility for any misuse that can be given to the program was written only for educational purposes.
Any questions or suggestions please contact me my mail lepuke [at] hotmail.com
 
  "

end


def googlear(string,cantidad)
  print "\n\n[+] Searching ....\n\n"
  string = string.sub(/ /,"+")
  contador = 0
  guardo = []
  for i in ("1"..cantidad)
    contador+=10
    url = "http://www.google.com.ar/search?hl=&q=#{string}&start=#{contador}"
    code = toma(url)
    links = URI::extract(code)
    links.each do |link|
      if link=~/cache:(.*?):(.*?)\+/
        guardo.push($2)
      end
    end
  end
  guardo = guardo.uniq
  print "\n\n[+] Pages Count : ",guardo.length,"\n\n"
  return guardo
end

def savefile(file,text)
   save = File.open(file, "a")
   save.puts text+"\n"
   save.close
end

def menu()
  head()
  print "\n\n1 - Search in google\n"
  print "2 - Scan SQLI\n"
  print "3 - About\n"
  print "4 - Exit"
  print "\n\n[Option] : "
  op = gets.chomp
 
  if op == "1"
    print "\n\n[+] String : "
    string = gets.chomp
    print "\n\n[+] Pages : "
    pages = gets.chomp
    total = googlear(string,pages)
    total.each do |to|
      print "[Link] : ",to,"\n"
      savefile(string+".txt",to)
    end
    retor()
   
  elsif op=="2"
    print "\n\n[+] File : "
    fi = gets.chomp
    paginas = openwords(fi)
    print "[+] Scanning ..\n\n\n"
    paginas.each do |pag|
      pag = pag.chomp
      if pag=~/(.*)=(.*)/
        final = $1+"="
        code = toma(final+"1+and+1=0+union+select+1--")
        if code=~/The used SELECT statements have a different number of columns/
          print "[SQLI] : "+final+"\n"
        end
      end
    end
    print "\n\n[+] Finished\n\n"
    retor()
 
  elsif op =="3"
    about()
    gets.chomp
    menu()
   
  elsif op=="4"
    copyright()
  else
   menu()   
  end
end

menu()

# The End ?



Un localizador de IP.

Código (ruby) [Seleccionar] Expandir


#!usr/bin/ruby
#IP Locator 0.1
#Coded By Doddy H

require "net/http"
require "resolv"

def uso
  print "\n[+] iplocator.rb <site>\n"
end

def toma(web)
  return Net::HTTP.get_response(URI.parse(web)).body
end
 
def head()
  print "\n\n -- == IP Locator 0.1 == --\n\n"
end

def copyright()
   print "\n\n\n(C) Doddy Hackman 2012\n\n"
   exit(1)
end

target = ARGV[0]

head()
if !target
  uso()
else
  ip = Resolv.getaddress(target)
  web = "http://www.melissadata.com/lookups/iplocation.asp?ipaddress="+ip
  print "\n\n[+] Getting info\n\n\n"
  code = toma(web)
  if code=~/City<\/td><td align=(.*)><b>(.*)<\/b><\/td>/
    print "[+] City : "+$2+"\n";
  end
  if code=~/Country<\/td><td align=(.*)><b>(.*)<\/b><\/td>/
    print "[+] Country : "+$2+"\n";
  end
  if code=~/State or Region<\/td><td align=(.*)><b>(.*)<\/b><\/td>/
     print "[+] State or Region : "+$2+"\n";
  end
end

copyright()

# The End ?


Un simple programa para hacer Spam en un canal de IRC.

Código (ruby) [Seleccionar] Expandir


#!usr/bin/ruby
#IRC Spam 0.2
#Coded By Doddy H

$nicks = ["ruben","negro jose","rasputin","juancho"]
$spam = ["hola","chau","hasta","nunca"]

def head()
  print "\n\n == -- IRC Spam 0.2 -- ==\n\n"
end

def uso()
  print "\n[+] Sintax : #{$0} <host> <channel>\n"
end

def copyright()
  print "\n\n(C) Doddy Hackman 2012\n\n"
end

def load(host,canal)
  begin
    irc = TCPSocket.open(host,6667)
  rescue
    print "\n\n[-] Error\n\n"
  else
    nick_azar = $nicks[rand($nicks.size)]
    irc.print "NICK "+nick_azar+"\r\n"
    irc.print "USER "+nick_azar+" 1 1 1 1\r\n"
    irc.print "JOIN #{canal}\r\n"
    print "\n\n[+] Online\n\n"
    while 1
      code = irc.recv(666)

      if (code=~/PING (.*)/)
        irc.print "PONG #{$1}\n"
      end
      print "\n[+] The party started\n"
      while 1
        sleep(60) # 1 minute
        texto = $spam[rand($spam.size)]
        irc.print "PRIVMSG #{canal} #{texto}\n"
      end
    end
  end
end

head()

host = ARGV[0]
canal = ARGV[1]

if !host and !canal
  uso()
else
  load(host,canal)
end

copyright()

# ¿ The End ?



Nueva version de este buscador de panel administracion.

Código (ruby) [Seleccionar] Expandir


#!usr/bin/ruby
#PanelControl 0.2
#Coded By Doddy H

panels = ['admin/admin.asp','admin/login.asp','admin/index.asp','admin/admin.aspx','admin/login.aspx','admin/index.aspx','admin/webmaster.asp','admin/webmaster.aspx','asp/admin/index.asp','asp/admin/index.aspx','asp/admin/admin.asp','asp/admin/admin.aspx','asp/admin/webmaster.asp','asp/admin/webmaster.aspx','admin/','login.asp','login.aspx','admin.asp','admin.aspx','webmaster.aspx','webmaster.asp','login/index.asp','login/index.aspx','login/login.asp','login/login.aspx','login/admin.asp','login/admin.aspx','administracion/index.asp','administracion/index.aspx','administracion/login.asp','administracion/login.aspx','administracion/webmaster.asp','administracion/webmaster.aspx','administracion/admin.asp','administracion/admin.aspx','php/admin/','admin/admin.php','admin/index.php','admin/login.php','admin/system.php','admin/ingresar.php','admin/administrador.php','admin/default.php','administracion/','administracion/index.php','administracion/login.php','administracion/ingresar.php','administracion/admin.php','administration/','administration/index.php','administration/login.php','administrator/index.php','administrator/login.php','administrator/system.php','system/','system/login.php','admin.php','login.php','administrador.php','administration.php','administrator.php','admin1.html','admin1.php','admin2.php','admin2.html','yonetim.php','yonetim.html','yonetici.php','yonetici.html','adm/','admin/account.php','admin/account.html','admin/index.html','admin/login.html','admin/home.php','admin/controlpanel.html','admin/controlpanel.php','admin.html','admin/cp.php','admin/cp.html','cp.php','cp.html','administrator/','administrator/index.html','administrator/login.html','administrator/account.html','administrator/account.php','administrator.html','login.html','modelsearch/login.php','moderator.php','moderator.html','moderator/login.php','moderator/login.html','moderator/admin.php','moderator/admin.html','moderator/','account.php','account.html','controlpanel/','controlpanel.php','controlpanel.html','admincontrol.php','admincontrol.html','adminpanel.php','adminpanel.html','admin1.asp','admin2.asp','yonetim.asp','yonetici.asp','admin/account.asp','admin/home.asp','admin/controlpanel.asp','admin/cp.asp','cp.asp','administrator/index.asp','administrator/login.asp','administrator/account.asp','administrator.asp','modelsearch/login.asp','moderator.asp','moderator/login.asp','moderator/admin.asp','account.asp','controlpanel.asp','admincontrol.asp','adminpanel.asp','fileadmin/','fileadmin.php','fileadmin.asp','fileadmin.html','administration.html','sysadmin.php','sysadmin.html','phpmyadmin/','myadmin/','sysadmin.asp','sysadmin/','ur-admin.asp','ur-admin.php','ur-admin.html','ur-admin/','Server.php','Server.html','Server.asp','Server/','wp-admin/','administr8.php','administr8.html','administr8/','administr8.asp','webadmin/','webadmin.php','webadmin.asp','webadmin.html','administratie/','admins/','admins.php','admins.asp','admins.html','administrivia/','Database_Administration/','WebAdmin/','useradmin/','sysadmins/','admin1/','system-administration/','administrators/','pgadmin/','directadmin/','staradmin/','ServerAdministrator/','SysAdmin/','administer/','LiveUser_Admin/','sys-admin/','typo3/','panel/','cpanel/','cPanel/','cpanel_file/','platz_login/','rcLogin/','blogindex/','formslogin/','autologin/','support_login/','meta_login/','manuallogin/','simpleLogin/','loginflat/','utility_login/','showlogin/','memlogin/','members/','login-redirect/','sub-login/','wp-login/','login1/','dir-login/','login_db/','xlogin/','smblogin/','customer_login/','UserLogin/','login-us/','acct_login/','admin_area/','bigadmin/','project-admins/','phppgadmin/','pureadmin/','sql-admin/','radmind/','openvpnadmin/','wizmysqladmin/','vadmind/','ezsqliteadmin/','hpwebjetadmin/','newsadmin/','adminpro/','Lotus_Domino_Admin/','bbadmin/','vmailadmin/','Indy_admin/','ccp14admin/','irc-macadmin/','banneradmin/','sshadmin/','phpldapadmin/','macadmin/','administratoraccounts/','admin4_account/','admin4_colon/','radmind-1/','Super-Admin/','AdminTools/','cmsadmin/','SysAdmin2/','globes_admin/','cadmins/','phpSQLiteAdmin/','navSiteAdmin/','server_admin_small/','logo_sysadmin/','server/','database_administration/','power_user/','system_administration/','ss_vms_admin_sm/']

require "net/http"

def uso
  print "\n[+] panelcontol.rb <site>\n"
end

def toma(web)
  return Net::HTTP.get_response(web)
end

def savefile(file,text)
   save = File.open(file, "a")
   save.puts text+"\n"
   save.close
end

def head()
  print "\n\n -- == Panel Control 0.2 == --\n\n"
end

def copyright()
   print "\n\n\n(C) Doddy Hackman 2012\n\n"
   exit(1)
end

def fin()
   print "\n\n[+] Scan Finished\n"
end

web = ARGV[0]

head()
if !web
  uso()
else
  print "\n[+] Starting the scan...\n\n\n"
  panels.each do |panel|
    begin
      code = toma(URI.parse(web+"/"+panel))
    rescue
      fin()
      copyright()
    end
    case code
      when Net::HTTPSuccess
        print "[Link] : "+web+"/"+panel+"\n"
        savefile("panels-logs.txt",web+"/"+panel)
      end
    end
  fin()   
end

copyright()

# The End ?


Un buscador de DNS.

Código (ruby) [Seleccionar] Expandir


#!usr/bin/ruby
#Fuzz DNS 0.3
#Coded By Doddy H

paths = ['www','www1','www2','www3','ftp','ns','mail','3com','aix','apache','back','bind','boreder','bsd','business','chains','cisco','content','corporate','cpv','dns','domino','dominoserver','download','e-mail','e-safe','email','esafe','external','extranet','firebox','firewall','front','fw','fw0','fwe','fw-1','firew','gate','gatekeeper','gateway','gauntlet','group','help','hop','hp','hpjet','hpux','http','https','hub','ibm','ids','info','inside','internal','internet','intranet','ipfw','irix','jet','list','lotus','lotusdomino','lotusnotes','lotusserver','mailfeed','mailgate','mailgateway','mailgroup','mailhost','maillist','mailpop','mailrelay','mimesweeper','ms','msproxy','mx','nameserver','news','newsdesk','newsfeed','newsgroup','newsroom','newsserver','nntp','notes','noteserver','notesserver','nt','outside','pix','pop','pop3','pophost','popmail','popserver','print','printer','private','proxy','proxyserver','public','qpop','raptor','read','redcreek','redhat','route','router','scanner','screen','screening','ecure','seek','smail','smap','smtp','smtpgateway','smtpgw','solaris','sonic','spool','squid','sun','sunos','suse','switch','transfer','trend','trendmicro','vlan','vpn','wall','web','webmail','webserver','webswitch','win2000','win2k','upload','file','fileserver','storage','backup','share','core','gw','wingate','main','noc','home','radius','security','access','dmz','domain','sql','mysql','mssql','postgres','db','database','imail','imap','exchange','sendmail','louts','test','logs','stage','staging','dev','devel','ppp','chat','irc','eng','admin','unix','linux','windows','apple','hp-ux','bigip','pc']
#paths = ['www']

require "net/http"

def uso
 print "\n[+] fuzzdns.rb <domain>\n"
end

def toma(web)
  return Net::HTTP.get_response(web)
end

def savefile(file,text)
 save = File.open(file, "a")
 save.puts text+"\n"
 save.close
end

def head()
 print "\n\n -- == Fuzz DNS 0.3 == --\n\n"
end

def copyright()
  print "\n\n\n(C) Doddy Hackman 2012\n\n"
  exit(1)
end

def fin()
  print "\n\n[+] Scan Finished\n"
end

web = ARGV[0]

head()
if !web
 uso()
else
 print "\n[+] Starting the scan...\n\n\n"
 paths.each do |path|
   begin
     code = toma(URI.parse("http://"+path+"."+web))
   rescue
     fin()
     copyright()
   end
   case code
     when Net::HTTPSuccess
       print "[Link] : "+"http://"+path+"."+web+"\n"
       savefile("dns-logs.txt","http://"+path+"."+web)
     end
   end
 fin()    
end

copyright()

# The End ?


Un buscador de servidores FTP que tengan habilitado el usuario anonymous.

Código (ruby) [Seleccionar] Expandir


#!usr/bin/ruby
#FTP Scan 0.1
#Coded By Doddy H

require "net/ftp"

def openwords(file)
  if File.file?(file)
    print "\n[+] Opening file\n\n"
    ar = File.open(file)
    lineas = ar.readlines
    ar.close
    print "[+] Number of words : ",lineas.length,"\n\n"
    return lineas
  else
    print "[-] Error opening file\n"
  end
end

def savefile(file,text)
  save = File.open(file, "a")
  save.puts text+"\n"
  save.close
end

def sintax()
  print "\n[+] ruby ftpscan.rb <file>\n"
end

def head()
  print "\n-- == FTP Scan 0.1 == --\n\n"
end

def copyright()
  print "\n\n(C) Doddy Hackman 2012\n"
  exit(1)
end

file = ARGV[0]

head()

if !file
  sintax()
else
  paginas = openwords(file)
  print "\n[+] Scanning ...\n\n"
  paginas.each do |pag|
    pag = pag.chomp
    target = URI.parse(pag)
    begin
    ftp =Net::FTP.new(target.host,"anonymous","test@hotmail.com")
    rescue Net::FTPPermError
    else
      print "[+] Anonymous Found : "+target.host+"\n";
      savefile("ftp-logs.txt",target.host)
    end
  end
  print "\n\n[+] Scan Finished\n\n"
end

copyright()

# The End ?


Un buscador de texto , sirve para encontrar archivos que contengan cierto patron.

Código (ruby) [Seleccionar] Expandir


#!usr/bin/ruby
#FinderText 0.1
#Coded By Doddy H

def openwords(file)
  if File.file?(file)
    ar = File.open(file)
    lineas = ar.readlines
    ar.close
    return lineas
  end
end

def escalar(dir,text)
  files = Dir.new(dir).entries
  files.each do |file|
    if File.file?(dir+"/"+file)
      contador = 0
      words = openwords(dir+"/"+file)
      words.each do |word|
      word = word.chomp
      contador+=1
      if word=~/#{text}/
        parteuno = dir+"/"+file
        patron = File.basename(__FILE__)
        if not parteuno=~/#{patron}/
          print "[+] File Found : "+dir+"/"+file+" in line #{contador}\n"
        end       
      end
    end
    else
      if file != "." and file != ".." and file != File.basename(__FILE__)
        escalar(dir+"/"+file,text)
      end
    end
  end
end

def sintax()
  print "\n[+] sintax : ruby findertext.rb <directory> <text>\n"
end

def head()
  print "\n-- == FinderText 0.1 == --\n\n"
end

def copyright()
  print "\n\n(C) Doddy Hackman 2012\n\n"
end

head()

dir = ARGV[0]
text = ARGV[1]

if !dir and !text
  sintax()
else
  print "\n[+] Starting the search\n\n\n"
  escalar(dir,text)
  print "\n\n[+] Finished\n\n"
end

copyright()
   
# The End ?


Un buscador de shells de forma local.

Código (ruby) [Seleccionar] Expandir


#!usr/bin/ruby
#FinderShells 0.1
#Coded By Doddy H

$textos = ["C99Shell","r57shell","DxShell","HiddenShell","~ Andr3a92 ~ Sh3ll ~","CShell","Dark Shell","GsC SheLL","N3fa5t1cA Sh3ll","ONBOOMSHELL",
"StAkeR ~ Shell","MoDDeD By KinG-InFeT","31337 Shel"]

def openwords(file)
  if File.file?(file)
    ar = File.open(file)
    lineas = ar.readlines
    ar.close
    return lineas
  end
end

def escalar(dir)
  files = Dir.new(dir).entries
  files.each do |file|
    if File.file?(dir+"/"+file)
      contador = 0
      words = openwords(dir+"/"+file)
      words.each do |word|
      word = word.chomp
      contador+=1
      $textos.each do |text|
        if word=~/#{text}/
          parteuno = dir+"/"+file
          patron = File.basename(__FILE__)
          if not parteuno=~/#{patron}/
            print "[+] Shell Found : "+dir+"/"+file+" in line #{contador}\n"
          end
        end
      end     
    end
    else
      if file != "." and file != ".."
        escalar(dir+"/"+file)
      end
    end
  end
end

def sintax()
  print "\n[+] sintax : ruby findershells.rb <directory>\n"
end

def head()
  print "\n-- == FinderShells 0.1 == --\n\n"
end

def copyright()
  print "\n\n(C) Doddy Hackman 2012\n\n"
end

head()

dir = ARGV[0]

if !dir
  sintax()
else
  print "\n[+] Starting the search\n\n\n"
  escalar(dir)
  print "\n\n[+] Finished\n\n"
end

copyright()
   
# The End ?