v3n0m-Scanner / V3n0M-Scanner

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
GNU General Public License v3.0
1.45k stars 406 forks source link

anti stop #22

Closed d4op closed 8 years ago

d4op commented 8 years ago

init some search engine thread using keywords like:

=> crawl dorks using one working proxy -> if some SE like Google blocks you / needle is triggered switch proxy to another

result => v3n0m unstopable.

NovaCygni commented 8 years ago

Proxy list is a avenue Ive been considering, some SE like yahoo blocks can be simply bypassed, I was reading up on http://www.debasish.in/2012/01/bypass-captcha-using-python-and.html and trying to get that working (Mainly for learning purposes) as if stuck in as a Module I can simply pass captchas as/when needed, seeing as sending a free sms message requires a captcha, once thats done I can add a SMS-DDoS attack feature to automate sending thousands of texts at once via online free SMS services. Havnt seen anything like it around so itd be pretty unique and cool.

d4op commented 8 years ago

as it sounds, you are planing to integrate much features, i would only create a tool for recon and exploit like dns (like axfr transferes in addition to dns brute, may search for subs via SE too, anti cloudflare?), gather sqli ,rce, lfi , lfi2rce(your old code was wrong, you compared a hased string which wasnt equal to the clear string lol), known msf exploits. desinging some smooth interface via kibana, crawling via scrapy and adding some scrapy / cluster stuff for running in a cluster, may create a docker image lol :p

ps: where is the OCR engine ?

NovaCygni commented 8 years ago

Well its always been a learning project for me, theres alot of work to be done and learning for me but ill get there. Interfaces designing and so forth isnt really my area, though tbh the idea of advancing the recon is more do-able, theres a few anti-cloudflare features that could be implemented along with general crawling of sites for upload locations and other common flaws.

creedanon commented 8 years ago

Nova havent talked in awhile but if you need help lemme know the project went dormant for a few years

NovaCygni commented 8 years ago

In the age old spirit of how its done, if you feel you can contribute or expand to any aspects feel free to do it, check it then submit, no deadlines no directions really... we all do what we do for free, so work/contribute as/when/what we can.

Sup btw good to see you still around!

NovaCygni commented 8 years ago

Btw the OCR engine im planning to use is tesseracts due to the support, ATM I'm trying to modify and update the cloudflare IP resolver script to see if I can get that working again before trying to improve it. Still a lot of work to do but trying to fit in some py studying and coding time as/when I can.