search

openbullet / OpenBullet2

OpenBullet reinvented
https://docs.openbullet.dev/
MIT License
1.66k stars 457 forks source link

web project/config ui builder #756

Open hastalamuerte opened 2 years ago

hastalamuerte commented 2 years ago

Hello.

Is it possible to made a easy web config/project builder , based on selenium or chromium ? I wrote it cause cant video (on forum) " how to build it by yourself" is deleted from tube

For users without coding expirience)

Example

Button on web panel - web builder(?) ---> Opens browser window with additional tab where you mark login and pass fields. ---> then you enter Hit/Right combination and openbullet read response and detect user session ---> (Possible) you enter wrong creds and Ob compare right/wrong resp. ----> When you done - you press button "create config/project" ----> Easy)

That ui (gui) builder will be very helpful

then maybe add some other feauters like captcha filed marking (for xevil and etc) waf/cloud bypassing

thanks

hastalamuerte commented 2 years ago

There is login pre recoder in Acunetix , awvs 14. Its extra simple and good looking. Maybe that example can be useful.

it record user actions. Allow to add a manual intervention in browser window (It can be helpful in captcha solving without xevil etc.. little captcha window- for hard hand mode)))))

in one of steps it detect that user is logged in session.

Also i found video how to make project. For me its easy to pay someone for ))) so maybe i can safe some money in future, and other script kiddies like me)

openbullet commented 2 years ago

Hello, this will take a lot of effort to implement. I suggest using BAS or some other software that can already do this. Anyways it's a nice suggestion, I will leave the issue open. спасибо )))

hastalamuerte commented 1 year ago

Hello, this will take a lot of effort to implement. I suggest using BAS or some other software that can already do this. Anyways it's a nice suggestion, I will leave the issue open. спасибо )))

Thanks , i hope when it will come time to implement OB2, it functional will be in progress.

Here is how it made in acunetix, it just login sequence recorder. But logic i think in same https://m.youtube.com/watch?v=uWx4M7rPrX0 More info https://www.acunetix.com/blog/docs/scanning-authenticated-web-assets-login-sequence-recorder/

I think its possible to use selenium, chromium headless or something like that.. not shure. Detection of session(hit) can be cheked by status codes or page comparsion , or url compr. Idk, just "imagine" 🫠

Best regards!