filetype:txt & intext:"email=" & intext:"pass=" & intext:"charset_test="

Usage: plecost-0.2.2-9-beta.py [options] [ URL | [-l num] -G]


Google search options:
    -l num    : Limit number of results for each plugin in google.
    -G        : Google search mode
    
Options:
    -n        : Number of plugins to use (Default all - more than 7000).
    -c        : Check plugins only with CVE associated.
    -R file   : Reload plugin list. Use -n option to control the size (This take several minutes)
    -o file   : Output file. (Default "output.txt")
    -i file   : Input plugin list. (Need to start the program)
    -s time   : Min sleep time between two probes. Time in seconds. (Default 10)
    -M time   : Max sleep time between two probes. Time in seconds. (Default 20)
    -t num    : Number of threads. (Default 1)
    -h        : Display help. (More info: http://iniqua.com/labs/) 

Examples:

  * Reload first 5 plugins list:
    	plecost -R plugins.txt -n 5
  * Search vulnerable sites for first 5 plugins:
        plecost -n 5 -G -i plugins.txt
  * Search plugins with 20 threads, sleep time between 12 and 30 seconds for www.example.com:
        plecost -i plugin_list.txt -s 12 -M 30 -t 20 -o results.txt www.example.com

root@TioSam:~# cd /pentest/web/fimap
root@TioSam:/pentest/web/fimap# ls
baseClass.py   baseTools.pyc     config      crawler.py   fimap.py        language.py   massScan.pyc         plugins    report.pyc      targetScanner.py
baseClass.pyc  codeinjector.py   config.py   crawler.pyc  googleScan.py   language.pyc  plugininterface.py   README     singleScan.py   targetScanner.pyc
baseTools.py   codeinjector.pyc  config.pyc  doc          googleScan.pyc  massScan.py   plugininterface.pyc  report.py  singleScan.pyc  xgoogle
root@TioSam:/pentest/web/fimap# python fimap.py
fimap v.08.1 by Iman Karim - Automatic LFI/RFI scanner and exploiter
Use -h for some help.
root@TioSam:/pentest/web/fimap#

<!-- PHP -->

phpinfo();

<!-- ENDPHP -->

http://www.site.com/faq.php

root@bt:~# cd /pentest/web/proxystrike
root@bt:/pentest/web/proxystrike# ls
attacker.py    crllr.py      LICENSES       plugins         TextParser.pyc
attacker.pyc   crllr.pyc     mainform.py    Proxynet.py     tools
consoleNg.py   __init__.py   mainform.pyc   Proxynet.pyc    webanalyzer.py
consoleNg.pyc  injector.py   mainform.ui    proxystrike.py  webanalyzer.pyc
console.py     injector.pyc  mainGUI.py     README
console.pyc    injector.ui   mainGUI.pyc    reqresp.py
crawler.py     iSearch.py    paConsole.py   reqresp.pyc
crawler.pyc    iSearch.pyc   paConsole.pyc  TextParser.py
root@bt:/pentest/web/proxystrike# python proxystrike.py

root@TioSam:~# cd Desktop
root@TioSam:~/Desktop# cd uniscan6.0
root@TioSam:~/Desktop/uniscan6.0# ls
CHANGELOG.txt  DB         index.php  RCE     Uniscan         uniscan.log
cookies.lwp    Directory  LFI        report  uniscan.conf    uniscan.pl
c.txt          Files      Plugins    RFI     uniscan_gui.pl
root@TioSam:~/Desktop/uniscan6.0# perl uniscan_gui.pl

root@bt:~# cd Desktop
root@bt:~/Desktop# unzip juuso-BozoCrack-4a55c97.zip
Archive:  juuso-BozoCrack-4a55c97.zip
4a55c971dfde938ca5acd56226965d18893bf23c
   creating: juuso-BozoCrack-4a55c97/
  inflating: juuso-BozoCrack-4a55c97/README.md  
  inflating: juuso-BozoCrack-4a55c97/bozocrack.rb  
root@bt:~/Desktop#

root@bt:~# cd /pentest/passwords
root@bt:/pentest/passwords# ls
cewl     findmyhash       john                     oclhashcat-lite  sucrack
chntpw   hashcat          juuso-BozoCrack-4a55c97  pack             wce
cmospwd  hashcat-gui      keimpx                   patator          wordlists
crunch   hashcat-utils    oclhashcat               pipal
cupp     hash-identifier  oclhashcat+              sipcrack
root@bt:/pentest/passwords# cd juuso-BozoCrack-4a55c97
root@bt:/pentest/passwords/juuso-BozoCrack-4a55c97# ls
bozocrack.rb  md5.txt  README.md
root@bt:/pentest/passwords/juuso-BozoCrack-4a55c97# ruby bozocrack.rb md5.txt
Loaded 1 unique hashes
200ceb26807d6bf99fd6f4f0d1ca54d4:administrator
root@bt:/pentest/passwords/juuso-BozoCrack-4a55c97#

mkdir -p /pentest/enumeration/google/goohost/

cd /pentest/enumeration/google/goohost

wget http://dl.dropbox.com/u/10761700/goohost.sh

chmod +x goohost.sh

Usage: ./goohost.sh -t domain.tld [-m <host|ip|mail> -p <1-20> -v]
./goohost.sh -m ip -t fbi.gov

./goohost.sh -m host -t fbi.gov

./goohost.sh -m mail -t fbi.gov

pentest - enumeration - google - goohost - report....