ekultek
|
d258803efc
|
moved the run attacks function to the settings file
|
2017-11-09 08:26:29 -06:00 |
|
ekultek
|
888a3e4bdd
|
batch enabled on most attacks, intel AMT bypass scanner will be deprecated by version 1.2 will show a deprecation warning when run
|
2017-11-08 20:04:02 -06:00 |
|
ekultek
|
856e38b970
|
while writing to a log file, if the file is already present, it will now write to a seperate file with the duplicate number in it, IE www.google.com-clickjacking.html will be www.google.com(1).html, www.google.com(2).html, etc.. (issue #140)
|
2017-11-08 14:00:31 -06:00 |
|
ekultek
|
b5ca0225b6
|
created a header check whilst running attacks. if a protection header is found in the headers found, it will prompt you and warn you
|
2017-11-07 14:52:57 -06:00 |
|
ekultek
|
46930fd19c
|
patch for a reported issue (private) will now successfully search through the ports that may contain the AMT exploitable bypass
|
2017-11-07 12:22:53 -06:00 |
|
ekultek
|
55836461ea
|
added a --time-sec flag for the whois search, also caught an exception from whois
|
2017-11-07 11:58:29 -06:00 |
|
ekultek
|
a90ebd4dca
|
fix some grammer errors, edited the usage to better reflect the program, swapped around some imports to make it look better
|
2017-11-04 09:14:37 -05:00 |
|
ekultek
|
25e674d4b7
|
patch for an issue where the attacks would fail due to non-extracted webcache URLs
|
2017-11-04 08:25:30 -05:00 |
|
ekultek
|
69fd18d5a5
|
you are now able to use Tor to do the searching by passing the --tor flag, the firefox browser settings will mimic the tor browser settings and you will be able to connect via Tor, be careful, Google does not like Tor. You will also be able to connect to Tor to do the parsing
|
2017-11-02 10:27:08 -05:00 |
|
ekultek
|
bc335fa2d3
|
created a clickjacking scanner that will test a page for an X-Frame-Options header, if the header is not there, then it will create a basic HTML page with that URL as an iframe
|
2017-11-01 21:48:58 -05:00 |
|
ekultek
|
3bc428dbd9
|
created a new flag called --x-forward that will add a header to the request called 'X-Forwarded-From' with three random IP addresses
|
2017-10-31 13:19:31 -05:00 |
|
ekultek
|
99575425f1
|
fixes an issue where if you run in verbose mode with whois lookup it will error out if certain information is not found (issue #128), it will now display the JSON data if you run in verbose mode
|
2017-10-31 09:47:49 -05:00 |
|
ekultek
|
6030774303
|
a patch for a reported issue (private) where if the found sitemap already exists, it would error out. will not just write as plain text and warn you that it probably already exists, also fixes an issue where found admin pages where not saved to a log file, and finally moved the sitemap.xml and robots.txt searches to a single function
|
2017-10-29 11:00:28 -05:00 |
|
ekultek
|
ecf067b6bb
|
patch for unicode errors, it appears that selenium isn't formatted to handle unicode errors (as far as I can tell) so the dork that causes the error will be skipped (issue #125)
|
2017-10-27 17:14:08 -05:00 |
|
ekultek
|
6ba7231e82
|
splitting the shell commands via shlex will make the commands more secure, and able to avoid most shell injection instances
|
2017-10-25 16:32:27 -05:00 |
|
ekultek
|
bdcc28b412
|
you are now successfully able to launch the sqlmap API automatically using the --auto flag (issue #58)
|
2017-10-25 13:26:20 -05:00 |
|
ekultek
|
c7fedc0165
|
fixed the nmap issues, it will run now it will also install itself if it's not there. working on sqlmap autostart (still). moved the function to create sqlmap and nmap arguments to settings.py. created two new scripts (one is still a work in progess)
|
2017-10-24 01:22:21 -05:00 |
|
ekultek
|
f6888b59af
|
moved the find running opts function to settings, cleaning out the zeus.py file
|
2017-10-23 22:26:16 -05:00 |
|
ekultek
|
242219ac8f
|
moved the search engine configuration to the settings file
|
2017-10-23 13:41:43 -05:00 |
|
ekultek
|
d590ca22db
|
patch for an issue where when a proxy is passed without the protocol it will create an issue (issue #118), also fixes an issue with the sqlmap arguments you no longer need to pass 'true' or 'false' it will do it automatically for you (issue #123)
|
2017-10-22 19:59:31 -05:00 |
|
ekultek
|
977564ae62
|
minor update where running through a file or dork would not allow you to parse webcache or pull all URLs, also updated some whois lookup info
|
2017-10-21 16:59:43 -05:00 |
|
ekultek
|
e2287391c3
|
created a whois lookup search. Will either display it in human readable form with the correct flags, or save the found information to a log file
|
2017-10-21 10:16:16 -05:00 |
|
ekultek
|
b2ff3da457
|
the auto fix for program install error was in the wrong spot (issue #115), moved to correct spot. should work fine now
|
2017-10-19 18:30:17 -05:00 |
|
ekultek
|
02a9f54544
|
created two new flags, one for parsing webcache, another for pulling all URLs. This will also produce more results per search.
|
2017-10-18 13:04:09 -05:00 |
|
ekultek
|
1c24a4b4af
|
some minor edits done to the prorgam, grammar fixes, moved some functions, edited some things, nothing to major or important
|
2017-10-17 13:33:40 -05:00 |
|
ekultek
|
ea884a8138
|
some updates that include a script to re-install a dependency that tends to fail, and fix a proxy configuration issue
|
2017-10-17 09:05:10 -05:00 |
|
ekultek
|
a909ac6c74
|
updating some doc strings, will be updating them more in time. just wanted to go ahead and start on them for now
|
2017-10-16 10:03:35 -05:00 |
|
ekultek
|
21398eaf8a
|
patches an issue where the target refuses the connection (issue #97), also creates a way to run against the IP addresses of the hostname instead
|
2017-10-14 07:47:50 -05:00 |
|
ekultek
|
24cdc14e9e
|
minor patch to catch the geckodriver error, happens when firefox is not compatible (issue #94)
|
2017-10-13 13:15:46 -05:00 |
|
ekultek
|
6383abf69a
|
patch for an issue where to many sessions would be open, will now auto clean the sessions (issue #92)
|
2017-10-13 10:06:57 -05:00 |
|
ekultek
|
b380c6e7c4
|
added a catch for the max retries error, along with how to bypass it, good luck
|
2017-10-12 18:55:29 -05:00 |
|
ekultek
|
a05c26e376
|
patch for an issue where you could not run the enumerate file flag (-f)
|
2017-10-12 18:05:19 -05:00 |
|
ekultek
|
c35fddb4ce
|
just cleaning up the parameters a little bit, not as messy now
|
2017-10-12 11:59:59 -05:00 |
|
ekultek
|
c008f93d16
|
multi-threading is broken, working on a fix, for now DO NOT use it
|
2017-10-12 10:43:13 -05:00 |
|
ekultek
|
799b6baba0
|
created some new extenstions and a threading flag for the admin panel finder
|
2017-10-11 17:47:18 -05:00 |
|
ekultek
|
859ea19c44
|
minor update to the initial fix for issue #58, supressing help until that part is done
|
2017-10-11 14:39:01 -05:00 |
|
ekultek
|
e9f5b82d05
|
initial push for an issue (#58) where it would not auto start sqlmap, lots more work to be done so make sure you start the sqlmap server before the process
|
2017-10-11 14:36:34 -05:00 |
|
ekultek
|
92a5b44548
|
patch for using Bing as the search engine, Bing apparently was not implemented, sorry
|
2017-10-10 19:41:17 -05:00 |
|
ekultek
|
9d97a6765a
|
created five new tamper scripts for XSS payloads
|
2017-10-10 17:59:01 -05:00 |
|
ekultek
|
80d9565585
|
files edited to reflect the move of the settings, errors, and tamper scripts folders
|
2017-10-10 17:01:13 -05:00 |
|
ekultek
|
f9577d0365
|
edited so that the file to be read from depends on the command you use instead of defaulting to URL_LOG
|
2017-10-08 08:21:17 -05:00 |
|
ekultek
|
4188c2c37c
|
fixes issue where it tries to run the attacks no matter what happens (issue #54)
|
2017-10-08 07:47:01 -05:00 |
|
ekultek
|
3a3a1ed2a8
|
edited the README with a demo video
|
2017-10-07 10:19:33 -05:00 |
|
ekultek
|
4456a07bf1
|
created a function to get rid of some code duplication
|
2017-10-07 09:32:27 -05:00 |
|
ekultek
|
671e77b984
|
patch for issue #49, bo longer need to restart the sqlmap API each iteration
|
2017-10-07 08:09:16 -05:00 |
|
ekultek
|
97b620aef4
|
initial fix for issue #49, still more work to be done
|
2017-10-05 21:21:51 -05:00 |
|
ekultek
|
45ccafdb09
|
edited so that the user agent will always default to Zeus's user agent if none is provided
|
2017-10-03 14:52:48 -05:00 |
|
ekultek
|
94dac1c2bc
|
added the ability to search multiple pages of Google (issue #4)
|
2017-10-03 11:19:16 -05:00 |
|
ekultek
|
0162ee134d
|
added prompt for when an error occurs, 'y' will create an auto issue for you
|
2017-10-02 12:11:09 -05:00 |
|
ekultek
|
4cf72fc97b
|
patch for issue #22, will not shutdown if the provided URL is not valid with an error message instead of throwing an exception
|
2017-10-01 08:06:03 -05:00 |
|