Uniscan On Backtrack

Hello Friends, In this post I will show how to use 'uniscan' a small but powerful web-vulnerability scanner on Backtrack

If you do-not have 'uniscan', you can install it by typing 'apt-get install uniscan'

Steps:

root@bt:~# locate uniscan
/pentest/web/uniscan
[Outputs ommited]

'locate' command used to find the directory path to 'uniscan'
root@bt:~# cd /pentest/web/uniscan/
root@bt:/pentest/web/uniscan# ./uniscan.pl

###############################
# Uniscan project             #
# http://www.uniscan.com.br/  #
###############################
V. 5.3


New version 5.4 is avaliable                                                     
More details in http://www.uniscan.com.br/

                                     
OPTIONS:
        -h      help
        -u      <url> example: https://www.example.com/
        -f      <file> list of url's
        -b      Uniscan go to background
        -q      Enable Directory checks
        -w      Enable File checks
        -e      Enable robots.txt check
        -d      Enable Dynamic checks
        -s      Enable Static checks
        -r      Enable Stress checks
        -i      <dork> Bing search

usage:
[1] perl ./uniscan.pl -u http://www.example.com/ -qweds
[2] perl ./uniscan.pl -f sites.txt -bqweds
[3] perl ./uniscan.pl -i uniscan
[4] perl ./uniscan.pl -i "ip:xxx.xxx.xxx.xxx"
[5] perl ./uniscan.pl -u https://www.example.com/ -r


Now if you have a Target Address or IP, the simplest way to scan is:
root@bt:/pentest/web/uniscan# ./uniscan.pl -u http://target.com/ -qedws

The keys are defined in the options..



This scan takes sometimes, once the scanning is done, it will automatically reveal the vulnerabilities found.

Thats all for this post.

Stay Tuned For More.

Feel Free To Leave A Comment If Our Article has Helped You, Support Us By Making A Small Contribution, Thank You!

Read more

Ck_pyShell Version 1.1

Ck_pyShell Version 1.1

Tool Name: Ck_pyShell
Version: 1.1
Coder: Subir Sutradhar
Release: Beta
Download Link: Click Here

Description:
A Multipurpose Tool For Pen-Testing Coded With Python. Uses Various User Agents To Fuzz The Requesting URL for All Purpose. Can Detect Proxy Settings and connect via Proxy Automatically If Any Found! Version 1.1 Has Added Features, Supports Tab Completion Of Commands and More Utilities Programmed.

'color' command has been removed as it does not work with Windows OS Properly

COMPATIBILITY:
Any Windows OS

Ck_pyShell ver 1.1

FEATURES:

1. SQL Injection Vulnerability Scanner
2. XSS Vulnerability Scanner
3. Hash Making and Cracking
4. Admin Login Page Finder
5. Port Scanner
6. LAN DoS Attacker
7. Ping Utility
8. FTP Login Bruteforce
9. Network Scanner For Live Hosts
10. TCP/UDP Flooder
11. BlindSQL Injector [This is Still Being Coded, This Release Can get the Tables And Columns And Database Version]

USAGE:

For "Help" Type Help From The Main Prompt

Download Link: Click Here

For Any illegal Usage Of This Tool, No One Is Held Responsible.

Be Efficient And Have Fun!

"Feel Free To Share, But Do Not Forget To Refer The Main Source"

For Any Bugs, Suggestions and Feedback:
Leave a Comment, or
Email Me: whiskeyl@ymail.com, or
Contact: Computer Korner

"KNOWLEDGE IS POWER"

Feel Free To Leave A Comment

If Our Article has Helped You, Support Us By Making A Small Contribution, Thank You!

Read more

Ck_pyShell Version 1.0

Help Menu

The Main Launch

Tool : Ck_pyShell Version 1.0
Release: Bug Testing
Coder: Subir Sutradhar
Download Link: Click Here

Version Upgraded To 1.1
Click Here

Description:
A Multipurpose Tool For Pen-Testing Purpose Coded With Python. Uses Various User Agents To Fuzz The Requesting URL for All Purpose. Can Detect Proxy Settings and connect via Proxy Automatically If Any Found!

Compatibility:
Any Windows Platform

Features:
1. SQL Injection Vulnerability Scanner
2. XSS Vulnerability Scanner
3. Hash Making and Cracking
4. Admin Login Page Finder
5. Port Scanner
6. LAN DoS Attacker
7. Ping Utility




Usage
For "Help" Type Help From The Main Prompt

1. cls - Clears The Screen
2. reset - Flush The Screen and reset
3. ping - To Ping an IP or URL
4. portscan - Launches PortScanner Utility
5. dos - Launches LAN DoS Attacker
6. findhim - Launches Admin Finder(Upgraded From the Last Release)
7. xss - Launches XSS Scanner Utility
8. sqlscan - Launches SQL Injection Scanner
9. ckhash - Launches Ck Hash Utility
10. ver - Check the Version

Download Link: Click Here

"Ck_pyShell Powered By Python"

Note: The Tool Has Been Coded For Security Analysts, And Will Be Developed More.

For Any illegal Usage Of This Tool, No One Is Held Responsible.

Be Efficient And Have Fun!

"Feel Free To Share, But Do Not Forget To Refer The Main Source"

For Any Bugs, Suggestions and Feedback:
Leave a Comment, or
Email Me: whiskeyl@ymail.com, or
Contact: Computer Korner

"KNOWLEDGE IS POWER"
Version Upgraded To 1.1
Click Here

Feel Free To Leave A Comment

If Our Article has Helped You, Support Us By Making A Small Contribution, Thank You!

Read more

Admin Login Page Finder [FIND HIM]

FindHim - Version 2.1 (The Admin Finder)
Coded By: Subir Sutradhar
OS: Windows/Linux

Download Link : Click Here
GUI Version For Windows : Click Here
For Linux : Click Here




Download Link : Click Here
GUI Version For Windows : Click Here
For Linux : Click Here

Usage Demo Video : www.youtube.com/watch?v=CKAdminFinder

Description:
Helps To Find Out the Admin Login Page Of A Given Website

__Change Log__:
Added Guessing Scheme, To Give Info About Website Source Code Scheme And Directory Paths which can be used with "SET URI <directory>" if needed


Usage:

1. You Need To Set The Target First, Ex: set target www.example.com
2. If You Want The Tool To Search From A Specific Directory, You Have To Set It
   Ex: set uri test (In Most Cases You Would Not Need This)
3. If You Want To Set A Specific Time Out, Set it (Default Set To 5.0)
   Ex: set timeout 1.0 (Lower Than Default Might Result In Connection Timed Out)
   In Most Cases You Will Not Need It
4. You Need To Set A Scheme, like php, asp, cgi,  etc. (Default is Set To html)
   Ex: set scheme php
5. To Check The Options set; show options
6. To Start The Find Him Engine: find
7. Ctrl+C To Abort Finding; To Exit The Tool: quit
8. To Set A Custom Admin Paths: set paths usercustom.txt
   (Check The usercustom.txt in the folder for format)
9. To Get the Help Option: help
10. To Guess the Scheme: guess scheme

Thanks To All Those Who Supported Us.

If You Like Using It, Please Do Share It.

For Any Suggestions, Please Leave A Comment.

Contact: c0d3gray[AT]gmail[DOT]com

EARLIER RELEASES :

Download Link: Click Here


Download Link : Click Here

Feel Free To Leave A Comment

If Our Article has Helped You, Support Us By Making A Small Contribution, Thank You!

Read more

DoS Python Script - ParalyZer_V1.0

CK - Subir aKa Whiskey

Name: ParalyZer
Version: 1.0
Coder: Whiskey
Description: Launch A Denial Of Service Attack On Server

Python Script:
Click Here

Our Python Blog:
www.pythonwayz.com

Feel Free To Leave A Comment

If Our Article has Helped You, Support Us By Making A Small Contribution, Thank You!

Read more