Recent changes to dirb-en

dirb-en modified by Maguey

Maguey — Mon, 09 Dec 2013 22:01:52 -0000

--- v3
+++ v4
@@ -1,8 +1,12 @@
 

-Español
+[[img src=https://sourceforge.net/p/maguey/wiki/Home/attachment/LogoMaguey.png height=25% width=25% style=float:right]]
+



-Dirb
+Regresar  Español
+
+dirb
+
 

 Phase(s):

Dirb-en modified by Maguey

Maguey — Thu, 28 Nov 2013 00:15:55 -0000

--- v2
+++ v3
@@ -67,7 +67,7 @@
 
 

-La herramienta muestra la información acerca de la ejecución del escaneo:
+The tool will display the scanning details:

 
 -----------------

@@ -86,7 +86,7 @@
 GENERATED WORDS: 1972

 



-La herramienta comenzará a realizar el escaneo con las palabras cargadas a partir de las listas que se indicaron. Conforme avanzándose ejecuta el escaneo, se mostrará en consola los resultados que va identificando.
+Then, it will begin the scan on the web application using the specified data dictionaries. Based on the scanning process, the tool will displays the results detected.

 
 ---- Scanning URL: 

@@ -96,19 +96,17 @@
     ==> DIRECTORY

 



-Finalmente, muestra un mensaje acerca de las combinaciones de palabras realizadas y el número de recursos encontrados. 
+Finally, the tool will display the scanning results that contain the number of word combinations used and the matching resources founds inside the web application. 

 
 -----------------
 
 DOWNLOADED: 7888 - FOUND: 26
 
 



-Finalmente, los resultados serán exportados dentro de la ubicación especificada.
-
 

 Resources:
-Link: http://ha.ckers.org/fierce/
-Author(s): RSnake
-Contact: http://ha.ckers.org/blog/about/
-License: (C) Copywrite 2006,2007 - By RSnake
+Link:  http://dirb.sf.net 
+Author (s): The Dark Raver
+Contact: darkraver \[at\] open-labs.org
+License: GNU GENERAL PUBLIC LICENSE Version 2

Dirb-en modified by Maguey

Maguey — Thu, 28 Nov 2013 00:08:45 -0000

--- v1
+++ v2
@@ -1,130 +1,109 @@
 

-Español
+Español

-Fierce Domain Scanner
+Dirb
 

 Phase(s):
-Primary: Reconnaissance.
+Primary: Discovery.
 Secondary:  N/A.

 

 Description: 
-Tool that performs detection of domains present on a network trough DNS queries and word dictionaries.
+Tool that performs an automatic web content scan inside an a application by sending and analyzing petitions with the help of a data dictionary, this with the objective of enumerate files and directories present on the web application.

 

 Objective:
 
-Identify domains in relationship with the application.
+
Identify resources present inside the web applications such as: configuration files, administration pages, test pages, etc.
 

 

 Features:
-Supported technologies: Servers and DNS Servers.
+Supported technologies: Web applications (HTTPS/HTTPS).

 Operative mode: Active.

 
-Visualize the application resources.
+Identify resources present inside the web applications such as: configuration files, administration pages, test pages, etc.
 

-Identify domains in relationship with the application.
-
Provides detected domains (IP Addresses) present by:
-
-Provides a pre-loaded word dictionary of common domain names.
-
+
Web content detection.
+
Provides default data dictionaries for several technologies such as apache, SharePoint, tomcat, web logic, etc.
+
Provide a functionality to create custom data dictionaries.
+
Support for proxies with/out authentication.
 
 

 
 Reports:

 Output reports:  ✔
+
Plain text file that saves the following information:
 

-Plain text file with the execution and results of the scan.
+
Scanning configuration options
+
List of resources detected.
 
 

 

 Basic usage:
-Perform a basic scan. The following command initiates a basic scan on a domain.
+Perform a web content scan inside the application. The following command initiates the scan:

-
-./fierce.pl -dns [domain] -file [directory]/fierce.txt
+
+./dirb http://sitio.com/aplicación/ wordlists/common.txt,wordlists/vulns/jrun.txt,wordlists/vulns/apache.txt -X ,.php,.html,.htm -o scan_dirb.txt. 
 



 
 Where:
 

-Domain: Domain to be scanned.
-
Directory: Output directory to export the results.
+
URL: Web application to be scanned.
+
Data dictionaries: Required data dictionaries to be included in the scan.
+
-X: Extension configuration: Comma separated extensions to be include to the data dictionaries word.
+
-o: Export file name.
 
 

-The tool will begin with the detection of the DNS server for the specified domain.
+La herramienta muestra la información acerca de la ejecución del escaneo:

 
-Now logging to /security/fierce.txt

-DNS Servers for domain.com:

-   ns1.domain.com

-   ns2.domain.com

-   ns3.domain.com

+-----------------

+DIRB v2.03    

+By The Dark Raver

+-----------------

+

+OUTPUT_FILE: ./scan_dirb.txt

+START_TIME: Tue Oct 22 16:11:50 2013

+URL_BASE: http://sitio.com/aplicacionWORDLIST_FILES: wordlists/common.txt,wordlists/vulns
/jrun.txt,wordlists/vulns/apache.txt

+OPTION: Fine tunning of NOT_FOUND detection

+EXTENSIONS_LIST: (,.php,.html,.htm) | ()(.php)(.html)(.htm) [NUM = 4]

+

+-----------------

+

+GENERATED WORDS: 1972

 



-Once detected, the tool will begin to gather information for the DNS by performing queries on them (zone transfer) with the objective of detecting the listed domains, all in case these are configured in an insecure way.
+La herramienta comenzará a realizar el escaneo con las palabras cargadas a partir de las listas que se indicaron. Conforme avanzándose ejecuta el escaneo, se mostrará en consola los resultados que va identificando.

 
-Trying zone transfer first...

-   Testing ns1.domain.com

-       Request timed out or transfer not allowed.

-   Testing ns2.domain.com

-       Request timed out or transfer not allowed.

-   Testing ns3.domain.com

-       Request timed out or transfer not allowed.

+---- Scanning URL: 

++ /Home.php         
                      
+    (FOUND: 200 [Ok] - Size: 189)

++ /Images/                     
          
+    ==> DIRECTORY

 



-In case this test fails, the tool will move to detect domains by using a word dictionary (in which are present common domain names).
-The execution time will be on relation to the size of the word dictionary specified within the tool (Now performing n test(s)...). 
+Finalmente, muestra un mensaje acerca de las combinaciones de palabras realizadas y el número de recursos encontrados. 

 
-Now performing 1895 test(s)...

-2xx.xxx.xxx.xxx    administracion.domain.com

-2xx.xxx.xxx.xxx    admin.domain.com

-2xx.xxx.xxx.xxx    atlas.domain.com

-2xx.xxx.xxx.xxx    cache.domain.com

-2xx.xxx.xxx.xxx    cust1.domain.com

+-----------------
 
+DOWNLOADED: 7888 - FOUND: 26
 
 



-Finally, the tool will export the results on the specified location.
-
-Example of results:
-
-
-Now logging to /security/fierce.txt

-DNS Servers for domain.com:

-   ns1.domain.com

-   ns2.domain.com

-   ns3.domain.com

-

-Trying zone transfer first...

-   Testing ns1.domain.com

-       Request timed out or transfer not allowed.

-   Testing ns2.domain.com

-       Request timed out or transfer not allowed.

-   Testing ns3.domain.com

-       Request timed out or transfer not allowed.

-

-Now performing 1895 test(s)...

-2xx.xxx.xxx.xxx    administracion.domain.com

-2xx.xxx.xxx.xxx    admin.domain.com

-2xx.xxx.xxx.xxx    atlas.domain.com

-2xx.xxx.xxx.xxx    cache.domain.com

-2xx.xxx.xxx.xxx    cust1.domain.com

-

-


+Finalmente, los resultados serán exportados dentro de la ubicación especificada.

Dirb-en modified by Maguey

Maguey — Wed, 27 Nov 2013 23:32:21 -0000

Español

Fierce Domain Scanner

Phase(s):

Primary: Reconnaissance.
Secondary: N/A.

Description:

Tool that performs detection of domains present on a network trough DNS queries and word dictionaries.

Objective:

Identify domains in relationship with the application.

Features:

Supported technologies: Servers and DNS Servers.

Operative mode: Active.

Visualize the application resources.

Identify domains in relationship with the application.
Provides detected domains (IP Addresses) present by:
- Provides a pre-loaded word dictionary of common domain names.

Reports:
Output reports: ✔

Plain text file with the execution and results of the scan.

Basic usage:

Perform a basic scan. The following command initiates a basic scan on a domain.

./fierce.pl -dns [domain] -file [directory]/fierce.txt

Where:

Domain: Domain to be scanned.
Directory: Output directory to export the results.

The tool will begin with the detection of the DNS server for the specified domain.

Now logging to /security/fierce.txt
DNS Servers for domain.com:
ns1.domain.com
ns2.domain.com
ns3.domain.com

Once detected, the tool will begin to gather information for the DNS by performing queries on them (zone transfer) with the objective of detecting the listed domains, all in case these are configured in an insecure way.

Trying zone transfer first...
Testing ns1.domain.com
Request timed out or transfer not allowed.
Testing ns2.domain.com
Request timed out or transfer not allowed.
Testing ns3.domain.com
Request timed out or transfer not allowed.

In case this test fails, the tool will move to detect domains by using a word dictionary (in which are present common domain names).
The execution time will be on relation to the size of the word dictionary specified within the tool (Now performing n test(s)...).

Now performing 1895 test(s)...
2xx.xxx.xxx.xxx administracion.domain.com
2xx.xxx.xxx.xxx admin.domain.com
2xx.xxx.xxx.xxx atlas.domain.com
2xx.xxx.xxx.xxx cache.domain.com
2xx.xxx.xxx.xxx cust1.domain.com

Finally, the tool will export the results on the specified location.

Example of results:

Now logging to /security/fierce.txt
DNS Servers for domain.com:
ns1.domain.com
ns2.domain.com
ns3.domain.com

Trying zone transfer first...
Testing ns1.domain.com
Request timed out or transfer not allowed.
Testing ns2.domain.com
Request timed out or transfer not allowed.
Testing ns3.domain.com
Request timed out or transfer not allowed.

Now performing 1895 test(s)...
2xx.xxx.xxx.xxx administracion.domain.com
2xx.xxx.xxx.xxx admin.domain.com
2xx.xxx.xxx.xxx atlas.domain.com
2xx.xxx.xxx.xxx cache.domain.com
2xx.xxx.xxx.xxx cust1.domain.com

Resources:

Link: http://ha.ckers.org/fierce/
Author(s): RSnake
Contact: http://ha.ckers.org/blog/about/
License: (C) Copywrite 2006,2007 - By RSnake