search

epsylon / ufonet

UFONet - Denial of Service Toolkit
https://ufonet.03c8.net
2.22k stars 610 forks source link

Dorks, search engine improvement and -t dorks.txt improvement #7

Closed stuffresearch closed 8 years ago

stuffresearch commented 8 years ago

Hi Psy,

I have testing from last 3 days exhaustively to ensure that tool is compliance about is supposed to perform.

The way as the tool perform searches using engines must be improved. For example using api`s from searches engines.

Also, during dorks validation ( -t option ) need better improvement, because the tool is removing valid entries.

Just trying to help a better improvement of your tool which as very cool.

Thank you for all support (:

Regards,

epsylon commented 8 years ago

Hi again, knightgats! I will take a look to your suggestions. Thanks for share it. Parameter: "t" is used to "tests" zombies not for dorking but I understand whats your reference about. Actually it uses a really simple verification code that as you said probably can be better implemented. For example, now is checking with a static injection code to verify that the "open redirect" is happening and probably to complement it with some heuristic methods is a good idea. Best regards,

stuffresearch commented 8 years ago

You welcome mate ! Count on me for anything you need.

Thanks

:*

epsylon commented 8 years ago

Btw, to use an external API (for dorking) is not secure. Is not a good idea to provide IDs, fingerprints and metadata to Big Data IT search engines...So, I am not agree with that suggestion.

UFONet is a really nice ninja tool, so think about it. Take a look to the code more in deep and try to send better suggestions...

Thanks for your support (love).

;-)