-
Notifications
You must be signed in to change notification settings - Fork 23
/
课时22 其他途径.txt
executable file
·241 lines (161 loc) · 7.11 KB
/
课时22 其他途径.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
课时22 其他途径
╋━━━━━━━━━━━━━━━━━━━╋
┃其他途径 ┃
┃ 社交网络 ┃
┃ 工商注册 ┃
┃ 新闻组/论坛 ┃
┃ 招聘网站 ┃
┃ http://www.archive.org/web/web.php ┃
╋━━━━━━━━━━━━━━━━━━━╋
╋━━━━━━━━━━━━━━━━━━━━━━━━━╋
┃个人专属的密码字典 ┃
┃ 按个人信息生成其专属的密码字典 ┃
┃ CUPP------Common User Password Profiler ┃
┃ git clone http://github.com/Mebus/cupp.git ┃
┃ python cup.py -i ┃
╋━━━━━━━━━━━━━━━━━━━━━━━━━╋
apt-get install cupp //kali工具包木有这个工具
root@kali:~# git clone http://github.com/Mebus/cupp.git
正克隆到 'cupp'...
remote: Counting objects: 31, done.
remote: Total 31 (delta 0), reused 0 (delta 0), pack-reused 31
展开对象中: 100% (31/31), 完成.
检查连接... 完成。
root@kali:~# ls
cupp test wydomain 模板 图片 下载 桌面
sina.xml vmware-tools-distrib 公共 视频 文档 音乐
root@kali:~# cd cupp/
root@kali:~/cupp# ls
cupp.cfg cupp.py docs README.md
root@kali:~/cupp# apt-get install cup
正在读取软件包列表... 完成
正在分析软件包的依赖关系树
正在读取状态信息... 完成
下列【新】软件包将被安装：
cup
升级了 0 个软件包，新安装了 1 个软件包，要卸载 0 个软件包，有 0 个软件包未被升级。
需要下载 120 kB 的软件包。
解压缩后会消耗掉 242 kB 的额外空间。
获取：1 http://http.kali.org/kali/ sana/main cup all 0.11a+20060608-3 [120 kB]
下载 120 kB，耗时 21秒 (5,490 B/s)
正在选中未选择的软件包 cup。
(正在读取数据库 ... 系统当前共安装有 337358 个文件和目录。)
正准备解包 .../cup_0.11a+20060608-3_all.deb ...
正在解包 cup (0.11a+20060608-3) ...
正在处理用于 man-db (2.7.0.2-5) 的触发器 ...
正在设置 cup (0.11a+20060608-3) ...
root@kali:~/cupp# cat README.md
# cupp.py - Common User Passwords Profiler
## About
The most common form of authentication is the combination of a username
and a password or passphrase. If both match values stored within a locally
stored table, the user is authenticated for a connection. Password strength is
a measure of the difficulty involved in guessing or breaking the password
through cryptographic techniques or library-based automated testing of
alternate values.
A weak password might be very short or only use alphanumberic characters,
making decryption simple. A weak password can also be one that is easily
guessed by someone profiling the user, such as a birthday, nickname, address,
name of a pet or relative, or a common word such as God, love, money or password.
That is why CUPP has born, and it can be used in situations like legal
penetration tests or forensic crime investigations.
## Options
Usage: cupp.py [OPTIONS]
-h this menu
-i Interactive questions for user password profiling
-w Use this option to profile existing dictionary,
or WyD.pl output to make some pwnsauce :)
-l Download huge wordlists from repository
-a Parse default usernames and passwords directly from Alecto DB.
Project Alecto uses purified databases of Phenoelit and CIRT which where merged and enhanced.
-v Version of the program
## Configuration
CUPP has configuration file cupp.cfg with instructions.
## License
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or
any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
See 'docs/LICENSE' for more information.
## Author
Muris Kurgas aka j0rgan
http://www.remote-exploit.org
http://www.azuzi.me
## Contributors
Bosko Petrovic aka bolexxx
http://www.offensive-security.com
http://www.bolexxx.net
root@kali:~/cupp# python cupp.py -i //按个人信息生成其专属的密码字典
[+] Insert the informations about the victim to make a dictionary
[+] If you don't know all the info, just hit enter when asked! ;)
> First Name: fanghong
> Surname:
> Nickname: yuanfh
> Birthdate (DDMMYYYY): 01011990
> Partners) name: aaaa
> Partners) nickname: aa
> Partners) birthdate (DDMMYYYY): 01011949
> Child's name: bbbb
> Child's nickname: bb
> Child's birthdate (DDMMYYYY): 01012000
> Pet's name: xiaoqiang
> Company name: sina
> Do you want to add some key words about the victim? Y/[N]: Y
> Do you want to add special chars at the end of words? Y/[N]: Y
> Do you want to add some random numbers at the end of words? Y/[N]Y
> Leet mode? (i.e. leet = 1337) Y/[N]: 007
[+] Now making a dictionary...
[+] Sorting list and removing duplicates...
[+] Saving dictionary to fanghong.txt, counting 4304 words.
[+] Now load your pistolero with fanghong.txt and shoot! Good luck!
root@kali:~/cupp# more fanghong.txt
╋━━━━━━━━╋
┃METADATA ┃
┃ Exif图片信息 ┃
┃ foca ┃
╋━━━━━━━━╋
root@kali:~# exif
exifautotran exiftool
root@kali:~# exiftool w.jpg
root@kali:~# exiftool p.jpg
╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤╤
Foca是款西班牙同僚开发的信息收集安全利器,主要对DNS和metadata元数据扫描分析还不错,Vul扫描似乎不太给力。官网猛戳这里：https://www.elevenpaths.com/labstools/foca/index.html
一、 说明（Description）：
FOCA主要是个检查和扫描文件的元数据及隐藏信息的信息收集工具。这些文件可以是在网页上的，FOCA能下载并分析它们。
文件分析可以是多种多样的，最常见的Microsoft Office文件，Open Office或PDF文件，甚至还可以分析Adobe InDesign或者SVG文件。
FOCA可以使用是谷歌，Bing和Exalead等搜索引擎来搜寻下载相关文件；通过剥落这些文件的信息，攻击者可以获取文件上传者的机器名，操作系统及相关软件安装路径和版本等信息。
二、 功能（Functionality）：
站内搜索（Web Search）
DNS搜索(DNS Search)
IP解析(IP resolution)
PTR扫描(PTR Scanning)
IP反查(Bing IP)
常规攻击(Common names)
DNS预测(DNS Prediction)
Robtex
三、 特征（Characteristics）：
Metadata extraction.
Network analysis.
DNS Snooping.
Search for common files.
Juicy files.
Proxies search.
Technologies identification.
Fingerprinting.
Leaks.
Backups search.
Error forcing.
Open directories search.
四、 下载（Download）：
下载请猛戳这里 FOCA final version 3.4
https://www.elevenpaths.com/downloads/FocaPro.zip
╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧╧