Underc0de

Buenas underc0ders

En esta ocasion me gustaria recomendar una herramienta para la automatizacion del descubrimiento de vulnerabilidades en aplicaciones web. V3n0m.


Descripcion:
V3n0m es una hgerramienta gratuita y de codigo abierto. Evolucionada desde el scanner de baltazar (baltazar's scanner), ha sido adaptado y evolucionado incluyendo que mejoran su usabilidad y optimizan su funcionamiento. Este escanner es mayormente un software experimental.
Esta herramienta es capaz de detectar varios tipos de vulnerabilidades, usando como base dorks (tiene una base de datos de 14mil).
(https://raw.githubusercontent.com/v3n0m-Scanner/V3n0M-Scanner/master/src/AnimatedDemo.gif)

Las funcionalidades que tiene a dia de hoy son:
Cloudflare Resolver[Cloudbuster]
Metasploit Modules Scans[To be released]
LFI->RCE and XSS Scanning[LFI->RCE & XSS]
SQL Injection Vuln Scanner[SQLi]
Extremely Large D0rk Target Lists
AdminPage Finding
Toxin Vulnerable FTPs Scanner
DNS BruteForcer
Python 3.6 Asyncio based scanning

Proceso de instalacion
git clone https://github.com/v3n0m-Scanner/V3n0M-Scanner.git
cd V3n0M-Scanner/
python3 setup.py install --user

Requisitos previos:
Ubuntu: sudo apt-get install python3-bs4
Kali: apt-get install python3-dev apt-get install python-dev

Mensaje de ayuda de los desarrolladores:
root@bt:~# python3 v3n0m.py

Now you may follow the simple prompts.

[0x100] Choose your target (domain) :
        Example : .com
        AND
        it is necessary to add you can also use a specific website (www.example.com)

[0x200] Choose the number of random dorks (0 for all.. may take awhile!) :
        Example : 0 = This will choose all of the XSS, File Inclusion, RCE and SQLi dorks

[0x300] Choose the number of threads :
        Example : 50

[0x400] Enter the number of pages to search through :
        Example : 50

    The program will print out your desired settings and start searching.
    It then creates files for the collected and valid URLs for later.
    It takes a while to scan because it utilizes either TOR, which you can specify
    if you wish to do so, or regular HTTP requests over a long period of time.

    After a while, it will feed you the percentage of the scan until completion.
    At this point, it will have saved the valid URLs in the files it created earlier.
    The program utilizes over 10k dorks now, be careful how you use them!
    Enjoy. :]
                                                            ~/ Dev Team

Saludos