ekultek
|
e69e116e81
|
moved the browser setup into it's own class, saves some space in the selenium search file
|
2017-11-24 21:55:31 -06:00 |
|
ekultek
|
7f62266474
|
minor update to excluded websites exts and the excluded sites while parsing
|
2017-11-24 11:11:49 -06:00 |
|
ekultek
|
c5ab6b005b
|
had t ocreate a disclaimer because someone was an idiot
|
2017-11-24 08:45:58 -06:00 |
|
ekultek
|
d38732ecf2
|
new md5sums for the edited files
|
2017-11-24 07:03:31 -06:00 |
|
ekultek
|
6f62049eb8
|
optimization for the time it takes to load the program, should be quicker now, created a search for public PGP keys will take your sites domain and search for any public PGP keys it can find, renamed some files to make more sense
|
2017-11-22 15:07:24 -06:00 |
|
ekultek
|
2f250a5a2d
|
update to the gist lookup search, multiple regexs will be tried in order to further try and discover some information
|
2017-11-21 12:39:51 -06:00 |
|
ekultek
|
d875092c6c
|
patch for an issue where the webdriver will not load, will now check if you have 127.0.0.1 localhost in your /etc/hosts file and add it if it is not there (issue #161)
|
2017-11-21 11:49:11 -06:00 |
|
ekultek
|
acc89fdac3
|
bumped version number for the new WAF scripts
|
2017-11-20 20:01:43 -06:00 |
|
ekultek
|
2d88e64404
|
created 7 new WAF scripts for firewall detection (issue #142)
|
2017-11-20 20:00:45 -06:00 |
|
ekultek
|
52af437fe4
|
moved shutdown, startup, and prompt to lib.core.common due to how much they are used
|
2017-11-20 14:27:08 -06:00 |
|
ekultek
|
9eca1950cb
|
created constants of all the log filenames, adjusted files accordingly
|
2017-11-20 14:04:11 -06:00 |
|
ekultek
|
fd4c89ffb8
|
created a common.py file and drafted write_to_log_file into it, also created an HTTP_HEADER class that will be used instead of repeating myself, fixed everything accordingly
|
2017-11-20 11:43:27 -06:00 |
|
ekultek
|
7d8727b9df
|
patch for an issue where it will claim the driver is not in your PATH, will now specify where the driver is located (issue #159)
|
2017-11-18 09:52:40 -06:00 |
|
ekultek
|
8b57b6c1cf
|
patch for an issue where the latest firefox release would not allow you to run Zeus. Is now compatible with Firefox version 51-57 (issue #157)
|
2017-11-18 07:51:25 -06:00 |
|
ekultek
|
d75bb85955
|
created a Github Gist searching tool that will search 3 pages of Gists (usually around 500 links) and create a regex for the found URL, from there it will search through all the Gists and save any of them that have a match (issue #153)
|
2017-11-16 13:29:24 -06:00 |
|
ekultek
|
08f1f83b74
|
patch for a permissions issue, will tell you to run as sudo now (issue #155)
|
2017-11-16 09:16:58 -06:00 |
|
ekultek
|
8b3a776af4
|
patch for an issue where the program would fail due to firefox and geckodriver not liking eachother (issue #154, issue #151), also patches an issue with the admin panel where it would write to a file no matter what happened (issue #152)
|
2017-11-16 07:34:09 -06:00 |
|
ekultek
|
95e6ab3c70
|
better patch for issue #151, will accept strings as browser versions now
|
2017-11-15 09:09:47 -06:00 |
|
ekultek
|
ab93e7a46d
|
patch for an issue where if your firefox fails to run it will not let you install Zeus, will now prompt you for your firefox browser version instead of failing (issue #151)
|
2017-11-15 08:43:41 -06:00 |
|
ekultek
|
7747c7fb8e
|
patch for an issue where if your firefox fails to run it will not let you install Zeus, will now prompt you for your firefox browser version instead of failing (issue #151)
|
2017-11-15 08:42:47 -06:00 |
|
ekultek
|
25b72314e7
|
created a --show-success flag that will output the success of the dork depending on how many links have been found with it
|
2017-11-15 07:23:36 -06:00 |
|
ekultek
|
f759247ae3
|
new checksums for the changed files
|
2017-11-14 19:40:58 -06:00 |
|
ekultek
|
6f6663b453
|
added a new header to the check to see if they have protection against MITM attacks (Public-Key-Pins)
|
2017-11-14 19:40:21 -06:00 |
|
ekultek
|
1fd3f281e7
|
updates to cloudflare, sucuri WAF scripts, added AWS waf script (issue #142)
|
2017-11-14 16:07:26 -06:00 |
|
ekultek
|
beaa69f7af
|
added a few new WAF scripts (issue #142) squid proxy IDS, cloudfront, minor updates to modsecurity
|
2017-11-14 13:54:52 -06:00 |
|
ekultek
|
5df541f8b4
|
new checksums for the changed files
|
2017-11-14 12:55:18 -06:00 |
|
ekultek
|
55b1285809
|
multiple tamper scripts now implemented (issue #149), checks if the status code is a 404 before saying it's XSS vulnerable (issue #147)
|
2017-11-14 11:46:14 -06:00 |
|
ekultek
|
10987c4e14
|
can now search multiple pages with a random dork using the -r flag (issue #146)
|
2017-11-14 11:15:02 -06:00 |
|
ekultek
|
f820f7ec7a
|
new md5sums for the changed files
|
2017-11-13 20:46:51 -06:00 |
|
ekultek
|
5d9de51a57
|
minor edit to a dork that had unicode in it
|
2017-11-13 20:43:13 -06:00 |
|
ekultek
|
2639eeadef
|
updated modsecurity and created a new waf scripts for wordfence
|
2017-11-13 14:35:46 -06:00 |
|
ekultek
|
d4c1e2dc1c
|
patch for an issue where the firefox profile would fail, will now specify the binary path if you hit this error (issue #143)
|
2017-11-13 09:48:02 -06:00 |
|
ekultek
|
f2cad88415
|
initial push for issue #142, created a few WAF scripts to detect, will also save the fingerprint of the WAF script if the protection is declared to be generic
|
2017-11-12 19:13:00 -06:00 |
|
ekultek
|
1eb861ae16
|
patch for a reported issue (private) where if there are no URL's left it will keep going until it hits the max page, will now stop
|
2017-11-11 16:30:03 -06:00 |
|
ekultek
|
cec5a4c7c5
|
will now save discovered cookies to a log file
|
2017-11-11 16:02:34 -06:00 |
|
ekultek
|
77bc6dc956
|
multiple page searching no longer requires Google's API, you can now perform as many requests as you want and get as many links as you want as long as it does not go over 500 pages. Removed a couple dependencies that needed to be there for Google's API
|
2017-11-11 15:11:06 -06:00 |
|
ekultek
|
22f622b549
|
new checksums for the edited files
|
2017-11-11 10:44:06 -06:00 |
|
ekultek
|
0046932f60
|
moved intel AMT bypass code to the deprecated folder and added it to the gitignore
|
2017-11-11 10:42:17 -06:00 |
|
ekultek
|
d4d6630f59
|
patches an error where if you are unable to retrieve the headers it will fail, will not just output that it is unable to retreive the headers (issue #141)
|
2017-11-11 06:25:33 -06:00 |
|
ekultek
|
b35f8afe3b
|
is now able to parse sqlmap configuration files, so if you have a saved conf file from sqlmap that you like to use, you can use it here with the --sqlmap-conf flag
|
2017-11-10 14:30:01 -06:00 |
|
ekultek
|
7747f58700
|
patch for a privatley reported issue where enumerating a certain file would only allow you to run the latest log file, no matter what file was passed, will now allow you to run any file you want and if nothing is passed will run the latest log file
|
2017-11-10 13:32:06 -06:00 |
|
ekultek
|
7eb4e8bbf4
|
new checksums for the files, removed intel from the checksum
|
2017-11-10 11:04:49 -06:00 |
|
ekultek
|
150ebef721
|
will now save all headers to the log file
|
2017-11-09 14:40:23 -06:00 |
|
ekultek
|
4ac02a8ff1
|
patch for a reported issue where saving the files would save over the important logs, such as url-log-1 -> url-log(1), blackwidow-log-1 -> blackwidow-log(1) (privatley reported)
|
2017-11-09 10:57:51 -06:00 |
|
ekultek
|
49cfc78d9e
|
patch for an issue where I rolled back a search setting
|
2017-11-09 08:31:29 -06:00 |
|
ekultek
|
f8623a59ea
|
edited the checksums for the files
|
2017-11-09 08:27:02 -06:00 |
|
ekultek
|
4e46a2a953
|
new checksums for the edited files
|
2017-11-08 20:04:16 -06:00 |
|
ekultek
|
856e38b970
|
while writing to a log file, if the file is already present, it will now write to a seperate file with the duplicate number in it, IE www.google.com-clickjacking.html will be www.google.com(1).html, www.google.com(2).html, etc.. (issue #140)
|
2017-11-08 14:00:31 -06:00 |
|
ekultek
|
b5ca0225b6
|
created a header check whilst running attacks. if a protection header is found in the headers found, it will prompt you and warn you
|
2017-11-07 14:52:57 -06:00 |
|
ekultek
|
46930fd19c
|
patch for a reported issue (private) will now successfully search through the ports that may contain the AMT exploitable bypass
|
2017-11-07 12:22:53 -06:00 |
|
ekultek
|
c59e987435
|
edited the checksums to match the new data
|
2017-11-07 11:56:12 -06:00 |
|
ekultek
|
b28fd3eac4
|
minor edits to most information, some updates to intel scans verbosity, comment edits to sqlmap
|
2017-11-06 12:25:53 -06:00 |
|
ekultek
|
0ea3597462
|
moved all files into a specified directory, text under text, html under html
|
2017-11-04 09:09:54 -05:00 |
|
ekultek
|
25e674d4b7
|
patch for an issue where the attacks would fail due to non-extracted webcache URLs
|
2017-11-04 08:25:30 -05:00 |
|
ekultek
|
90ba39f3ed
|
patch for an issue where if the site refuses connection it would keep trying to crawl it (issue #134)
|
2017-11-03 09:49:58 -05:00 |
|
ekultek
|
69fd18d5a5
|
you are now able to use Tor to do the searching by passing the --tor flag, the firefox browser settings will mimic the tor browser settings and you will be able to connect via Tor, be careful, Google does not like Tor. You will also be able to connect to Tor to do the parsing
|
2017-11-02 10:27:08 -05:00 |
|
ekultek
|
3bced94e70
|
minor update for a privately reported issue, where the HTML would display the site in a small scroll box, will not display as the full site
|
2017-11-02 09:24:23 -05:00 |
|
ekultek
|
bc335fa2d3
|
created a clickjacking scanner that will test a page for an X-Frame-Options header, if the header is not there, then it will create a basic HTML page with that URL as an iframe
|
2017-11-01 21:48:58 -05:00 |
|
ekultek
|
b26d29108c
|
fixes an issue where the geckodriver will not connect, usually means something happened during the installation of it, will now attempt to re-install the geckodriver (issue #132)
|
2017-11-01 10:07:15 -05:00 |
|
ekultek
|
e85c13b2b8
|
minor update to the search.py file, X-Forwarded instead of X-Forward
|
2017-10-31 14:11:05 -05:00 |
|
ekultek
|
da22c7db7f
|
updated the md5sum with the newest MD5 hashes
|
2017-10-31 13:22:58 -05:00 |
|
ekultek
|
fec7935d42
|
forgot to update the version number
|
2017-10-31 09:49:35 -05:00 |
|
ekultek
|
99575425f1
|
fixes an issue where if you run in verbose mode with whois lookup it will error out if certain information is not found (issue #128), it will now display the JSON data if you run in verbose mode
|
2017-10-31 09:47:49 -05:00 |
|
ekultek
|
04cd49e722
|
added some new URL's to the skip schema, edited the DDG link to the HTML link, made sure that the URL is not just a protocol before adding to the file
|
2017-10-29 11:46:36 -05:00 |
|
ekultek
|
6030774303
|
a patch for a reported issue (private) where if the found sitemap already exists, it would error out. will not just write as plain text and warn you that it probably already exists, also fixes an issue where found admin pages where not saved to a log file, and finally moved the sitemap.xml and robots.txt searches to a single function
|
2017-10-29 11:00:28 -05:00 |
|
ekultek
|
182e588774
|
patched a privately reported issue that would not allow you to run the blackwidow crawler behind a proxy, forgot a space in the README file
|
2017-10-28 16:53:13 -05:00 |
|
ekultek
|
f75cabb876
|
added a new requirement BeautifulSoup, fixed the crawler will pull all links with an 'a' tag and descriptor of 'href', bumped version number
|
2017-10-28 16:28:18 -05:00 |
|
ekultek
|
0c8d4f9bf7
|
edited the default user agent so it will reflect the best practices of user agent strings (reference https://docs.developer.amazonservices.com/en_US/dev_guide/DG_UserAgentHeader.html)
|
2017-10-28 15:49:10 -05:00 |
|
ekultek
|
94a37a2b30
|
removed some things from the checksum file that aren't needed, fixed the directory list on the README file
|
2017-10-28 15:03:22 -05:00 |
|
ekultek
|
073361339b
|
bumped the version number and edited the checksums to match the new updates
|
2017-10-28 08:25:13 -05:00 |
|
ekultek
|
b18e017d77
|
removed unicode characters out of the dorks and payloads file
|
2017-10-28 08:24:30 -05:00 |
|
ekultek
|
5e227c9c97
|
removed unicode characters out of the dorks and payloads file
|
2017-10-28 08:24:23 -05:00 |
|
ekultek
|
ecf067b6bb
|
patch for unicode errors, it appears that selenium isn't formatted to handle unicode errors (as far as I can tell) so the dork that causes the error will be skipped (issue #125)
|
2017-10-27 17:14:08 -05:00 |
|
ekultek
|
6ba7231e82
|
splitting the shell commands via shlex will make the commands more secure, and able to avoid most shell injection instances
|
2017-10-25 16:32:27 -05:00 |
|
ekultek
|
bdcc28b412
|
you are now successfully able to launch the sqlmap API automatically using the --auto flag (issue #58)
|
2017-10-25 13:26:20 -05:00 |
|
ekultek
|
c7fedc0165
|
fixed the nmap issues, it will run now it will also install itself if it's not there. working on sqlmap autostart (still). moved the function to create sqlmap and nmap arguments to settings.py. created two new scripts (one is still a work in progess)
|
2017-10-24 01:22:21 -05:00 |
|
ekultek
|
dc401de304
|
removed some md5sum's that are not needed
|
2017-10-23 22:38:13 -05:00 |
|
ekultek
|
626654e496
|
edited the checksum to reflect the changes in the files
|
2017-10-23 22:27:18 -05:00 |
|
ekultek
|
a06371aa72
|
fixes an issue with unicode errors from XSS payloads (issue #124)
|
2017-10-23 14:11:03 -05:00 |
|
ekultek
|
242219ac8f
|
moved the search engine configuration to the settings file
|
2017-10-23 13:41:43 -05:00 |
|
ekultek
|
d590ca22db
|
patch for an issue where when a proxy is passed without the protocol it will create an issue (issue #118), also fixes an issue with the sqlmap arguments you no longer need to pass 'true' or 'false' it will do it automatically for you (issue #123)
|
2017-10-22 19:59:31 -05:00 |
|
ekultek
|
977564ae62
|
minor update where running through a file or dork would not allow you to parse webcache or pull all URLs, also updated some whois lookup info
|
2017-10-21 16:59:43 -05:00 |
|
ekultek
|
e2287391c3
|
created a whois lookup search. Will either display it in human readable form with the correct flags, or save the found information to a log file
|
2017-10-21 10:16:16 -05:00 |
|
ekultek
|
d813e70ac1
|
edited the way that the patch ID is displayed, will now pull the ID from origin/master
|
2017-10-21 08:45:19 -05:00 |
|
ekultek
|
b2ff3da457
|
the auto fix for program install error was in the wrong spot (issue #115), moved to correct spot. should work fine now
|
2017-10-19 18:30:17 -05:00 |
|
ekultek
|
02a9f54544
|
created two new flags, one for parsing webcache, another for pulling all URLs. This will also produce more results per search.
|
2017-10-18 13:04:09 -05:00 |
|
ekultek
|
fddeb7b774
|
patches issue where zeus will only install one geckodriver version if your version is under 54 (issue #108)
|
2017-10-18 10:01:33 -05:00 |
|
ekultek
|
a7abcb58c0
|
updated the dorks, they should work better now
|
2017-10-18 09:50:33 -05:00 |
|
ekultek
|
a17b2745d9
|
must pass a checksum verification before you can create a github issue
|
2017-10-17 15:12:32 -05:00 |
|
ekultek
|
c7071d3f18
|
adding a checksum for a verification that will be taking place in the next push
|
2017-10-17 14:51:39 -05:00 |
|
ekultek
|
ea884a8138
|
some updates that include a script to re-install a dependency that tends to fail, and fix a proxy configuration issue
|
2017-10-17 09:05:10 -05:00 |
|
ekultek
|
6383abf69a
|
patch for an issue where to many sessions would be open, will now auto clean the sessions (issue #92)
|
2017-10-13 10:06:57 -05:00 |
|
ekultek
|
c35fddb4ce
|
just cleaning up the parameters a little bit, not as messy now
|
2017-10-12 11:59:59 -05:00 |
|
ekultek
|
799b6baba0
|
created some new extenstions and a threading flag for the admin panel finder
|
2017-10-11 17:47:18 -05:00 |
|
ekultek
|
90d3798a93
|
created an XSS scanner for issue #8
|
2017-09-26 12:56:35 -05:00 |
|
ekultek
|
36259f3a12
|
created an admin page finder for the found URL's
|
2017-09-20 17:19:20 -05:00 |
|
ekultek
|
47561c3aab
|
added the ability to create arguments for nmap
|
2017-09-18 15:25:42 -05:00 |
|
ekultek
|
115054b5e1
|
created a new flag for random dork searching
|
2017-09-09 08:36:05 -05:00 |
|
ekultek
|
5432fdd15b
|
initial release of Zeus - Advanced dork scanner
|
2017-09-07 12:54:16 -05:00 |
|