Всем привет! ...и так начнем, что же нам нужно?
1.Python 2.7 (
)
2.d0rk3er.py - сам скрипт (
)
После того как вы все уже скачали и поставили открываем консоль и запускаем наш скрипт
python /Users/familiaima/Desktop/darkd0rk3r.py
или
py /Users/familiaima/Desktop/darkd0rk3r.py
После запуска скрита он предложит вам выбрать по каким доменам искать:
Сhoose your target: вводите число 1,2 или 3
1.Все домены
2.Balcan(al', 'bg', 'ro', 'gr', 'rs', 'hr','tr', 'ba', 'mk', 'mv', 'me')
3.TLD('xxx','edu', 'gov', 'mil','biz', 'cat', 'com', 'int','net', 'org', 'pro', 'tel', 'aero', 'asia','coop', 'info', 'jobs', 'mobi', 'name', 'museum', 'travel')
Посмотреть вложение 20193
Далее вам нужно будет ввести дорку по которой он будет искать. В моем случае это news.php?id=
После он попросит ввести кол-во пакетов , у меня оно равно 25.
Ну и в самом конце нужно указать сколько страниц будем проверить на одном домене, у меня равно 15.
Нажимаем enter и ждем!
Посмотреть вложение 20194
И так когда он закончит вам покажется следующее меню
Посмотреть вложение 20195
Выбираете что именно вам нужно и тестируете..
0.Выход
1.Sqli тест
2.Sql авто тест
3.LFI-RCI тесты
4.Xss тест
5.SQLI and LFI -RCI тест
6.SQLI and XSS тест
7.LFI-RCI and XSS тест
8.SQLI,LFI-RCI and XSS тест
9.Сохранить валидные url
10.Показать валидные url
11.Показать последнее сканирование
12.Новое сканирование
Пример теста #6
Посмотреть вложение 20196
файл где были найден уязвимости:
p.s. знаю что с русским у меня не очень но я не русский и думаю вы меня простите
Дорки для поиска
PHP:
index.php?id=
trainers.php?id=
buy.php?category=
article.php?ID=
play_old.php?id=
declaration_more.php?decl_id=
pageid=
games.php?id=
page.php?file=
newsDetail.php?id=
gallery.php?id=
article.php?id=
show.php?id=
staff_id=
newsitem.php?num=
readnews.php?id=
top10.php?cat=
historialeer.php?num=
reagir.php?num=
Stray-Questions-View.php?num=
forum_bds.php?num=
game.php?id=
view_product.php?id=
newsone.php?id=
sw_comment.php?id=
news.php?id=
avd_start.php?avd=
event.php?id=
product-item.php?id=
sql.php?id=
news_view.php?id=
select_biblio.php?id=
humor.php?id=
aboutbook.php?id=
ogl_inet.php?ogl_id=
fiche_spectacle.php?id=
communique_detail.php?id=
sem.php3?id=
kategorie.php4?id=
news.php?id=
index.php?id=
faq2.php?id=
show_an.php?id=
preview.php?id=
loadpsb.php?id=
opinions.php?id=
spr.php?id=
pages.php?id=
announce.php?id=
clanek.php4?id=
participant.php?id=
download.php?id=
main.php?id=
review.php?id=
chappies.php?id=
read.php?id=
prod_detail.php?id=
viewphoto.php?id=
article.php?id=
person.php?id=
productinfo.php?id=
showimg.php?id=
view.php?id=
website.php?id=
hosting_info.php?id=
gallery.php?id=
rub.php?idr=
view_faq.php?id=
artikelinfo.php?id=
detail.php?ID=
index.php?=
profile_view.php?id=
category.php?id=
publications.php?id=
fellows.php?id=
downloads_info.php?id=
prod_info.php?id=
shop.php?do=part&id=
productinfo.php?id=
collectionitem.php?id=
band_info.php?id=
product.php?id=
releases.php?id=
ray.php?id=
produit.php?id=
pop.php?id=
shopping.php?id=
productdetail.php?id=
post.php?id=
viewshowdetail.php?id=
clubpage.php?id=
memberInfo.php?id=
section.php?id=
theme.php?id=
page.php?id=
shredder-categories.php?id=
tradeCategory.php?id=
product_ranges_view.php?ID=
shop_category.php?id=
transcript.php?id=
channel_id=
item_id=
newsid=
trainers.php?id=
news-full.php?id=
news_display.php?getid=
index2.php?option=
readnews.php?id=
top10.php?cat=
newsone.php?id=
event.php?id=
product-item.php?id=
sql.php?id=
aboutbook.php?id=
preview.php?id=
loadpsb.php?id=
pages.php?id=
material.php?id=
clanek.php4?id=
announce.php?id=
chappies.php?id=
read.php?id=
viewapp.php?id=
viewphoto.php?id=
rub.php?idr=
galeri_info.php?l=
review.php?id=
iniziativa.php?in=
curriculum.php?id=
labels.php?id=
story.php?id=
look.php?ID=
newsone.php?id=
aboutbook.php?id=
material.php?id=
opinions.php?id=
announce.php?id=
rub.php?idr=
galeri_info.php?l=
tekst.php?idt=
newscat.php?id=
newsticker_info.php?idn=
rubrika.php?idr=
rubp.php?idr=
offer.php?idf=
art.php?idm=
title.php?id=
(0x3a,version
(@version,0x3a,databse)
(user,0x3a,pass)
+union+select+ from
+union+select+ pass
+union+select+ SHOP
+union+select+ admin
index.php?id=
trainers.php?id=
buy.php?category=
article.php?ID=
play_old.php?id=
declaration_more.php?decl_id=
pageid=
games.php?id=
page.php?file=
newsDetail.php?id=
gallery.php?id=
article.php?id=
show.php?id=
staff_id=
newsitem.php?num=
readnews.php?id=
top10.php?cat=
historialeer.php?num=
reagir.php?num=
Stray-Questions-View.php?num=
forum_bds.php?num=
game.php?id=
view_product.php?id=
newsone.php?id=
sw_comment.php?id=
news.php?id=
avd_start.php?avd=
event.php?id=
product-item.php?id=
sql.php?id=
news_view.php?id=
select_biblio.php?id=
humor.php?id=
aboutbook.php?id=
ogl_inet.php?ogl_id=
fiche_spectacle.php?id=
communique_detail.php?id=
sem.php3?id=
kategorie.php4?id=
news.php?id=
index.php?id=
faq2.php?id=
show_an.php?id=
preview.php?id=
loadpsb.php?id=
opinions.php?id=
spr.php?id=
pages.php?id=
announce.php?id=
clanek.php4?id=
participant.php?id=
download.php?id=
main.php?id=
review.php?id=
chappies.php?id=
read.php?id=
prod_detail.php?id=
viewphoto.php?id=
article.php?id=
person.php?id=
productinfo.php?id=
showimg.php?id=
view.php?id=
website.php?id=
hosting_info.php?id=
gallery.php?id=
rub.php?idr=
view_faq.php?id=
artikelinfo.php?id=
detail.php?ID=
index.php?=
profile_view.php?id=
category.php?id=
publications.php?id=
fellows.php?id=
downloads_info.php?id=
prod_info.php?id=
shop.php?do=part&id=
productinfo.php?id=
collectionitem.php?id=
band_info.php?id=
product.php?id=
releases.php?id=
ray.php?id=
produit.php?id=
pop.php?id=
shopping.php?id=
productdetail.php?id=
post.php?id=
viewshowdetail.php?id=
clubpage.php?id=
memberInfo.php?id=
section.php?id=
theme.php?id=
page.php?id=
shredder-categories.php?id=
tradeCategory.php?id=
product_ranges_view.php?ID=
shop_category.php?id=
transcript.php?id=
channel_id=
item_id=
newsid=
trainers.php?id=
news-full.php?id=
news_display.php?getid=
index2.php?option=
readnews.php?id=
top10.php?cat=
newsone.php?id=
event.php?id=
product-item.php?id=
sql.php?id=
aboutbook.php?id=
preview.php?id=
loadpsb.php?id=
pages.php?id=
material.php?id=
clanek.php4?id=
announce.php?id=
chappies.php?id=
read.php?id=
viewapp.php?id=
viewphoto.php?id=
rub.php?idr=
galeri_info.php?l=
review.php?id=
iniziativa.php?in=
curriculum.php?id=
labels.php?id=
story.php?id=
look.php?ID=
newsone.php?id=
aboutbook.php?id=
material.php?id=
opinions.php?id=
announce.php?id=
rub.php?idr=
galeri_info.php?l=
tekst.php?idt=
newscat.php?id=
newsticker_info.php?idn=
rubrika.php?idr=
rubp.php?idr=
offer.php?idf=
art.php?idm=
title.php?id=
recruit_details.php?id=
index.php?cPath=
CVV:
cat.asp?cat=
productlist.asp?catalogid=
Category.asp?category_id=
Category.cfm?category_id=
category.asp?cid=
category.cfm?cid=
category.asp?cat=
category.cfm?cat=
category.asp?id=
index.cfm?pageid=
category.asp?catid=
Category.asp?c=
Category.cfm?c=
productlist.cfm?catalogid=
productlist.asp?catalogid=
viewitem.asp?catalogid=
viewitem.cfm?catalogid=
catalog.cfm?catalogId=
catalog.asp?catalogId=
department.cfm?dept=
department.asp?dept=
itemdetails.cfm?catalogId=
itemdetails.asp?catalogId=
product_detail.asp?catalogid=
product_detail.cfm?catalogid=
product_list.asp?catalogid=
product_list.cfm?catalogid=
ShowProduct.cfm?CatID=
ShowProduct.asp?CatID=
search_results.cfm?txtsearchParamCat=
search_results.asp?txtsearchParamCat=
itemdetails.cfm?catalogId=
itemdetails.asp?catalogId=
store-page.cfm?go=
store-page.asp?go=
Detail.cfm?CatalogID=
Detail.asp?CatalogID=
browse.cfm?category_id=
view.cfm?category_id=
products.cfm?category_id=
index.cfm?Category_ID=
detail.cfm?id=
category.cfm?id=
showitems.cfm?category_id=
ViewProduct.asp?PID=
ViewProduct.cfm?PID=
shopdisplayproducts.asp?catalogid=
shopdisplayproducts.cfn?catalogid=
displayproducts.cfm?category_id=
displayproducts.asp?category_id=
DisplayProducts.asp?prodcat=
DisplayProducts.cfm?prodcat=x
productDetail.cfm?ProductID=
products.php?subcat_id=
showitem.cfm?id=21
productdetail.cfm?pid=
default.cfm?action=46
products_accessories.asp?CatId=
Store_ViewProducts.asp?Cat=
category.cfm?categoryID=
category.asp?category=
tepeecart.cfm?shopid=
view_product.asp?productID=
ProductDetails.asp?prdId=12
products.cfm?ID=
detail.asp?product_id=
product_detail.asp?product_id=
products.php?subcat_id=
product.php?product_id=
view_product.cfm?productID=
product_details.asp?prodid=
shopdisplayproducts.cfm?id=
displayproducts.cfm?id=
ASP:
.asp?bookID=
.asp?cart=
.asp?cartID=
.asp?catalogid=
.asp?category_list=
.asp?CategoryID=
.asp?catID=
.asp?cid=
.asp?code_no=
.asp?code=
.asp?designer=
.asp?framecode=
.asp?id=
.asp?idcategory=
.asp?idproduct=
.asp?intCatalogID=
.asp?intProdId=
.asp?item_id=
.asp?item=
.asp?itemID=
.asp?maingroup=
.asp?misc=
.asp?newsid=
.asp?order_id=
.asp?p=
.asp?pid=
.asp?ProdID=
.asp?product_id=
.asp?product=
.asp?productid=
.asp?showtopic=
.asp?Sku=
.asp?storeid=
.asp?style_id=
.asp?StyleID=
.asp?userID=
about.asp?cartID=
accinfo.asp?cartId=
acclogin.asp?cartID=
add.asp?bookid=
add_cart.asp?num=
addcart.asp?
addItem.asp
add-to-cart.asp?ID=
addToCart.asp?idProduct=
addtomylist.asp?ProdId=
adminEditProductFields.asp?intProdID=
advSearch_h.asp?idCategory=
affiliate.asp?ID=
affiliate-agreement.cfm?storeid=
affiliates.asp?id=
ancillary.asp?ID=
archive.asp?id=
article.asp?id=
aspx?PageID
basket.asp?id=
Book.asp?bookID=
book_list.asp?bookid=
book_view.asp?bookid=
BookDetails.asp?ID=
browse.asp?catid=
browse_item_details.asp
Browse_Item_Details.asp?Store_Id=
buy.asp?
buy.asp?bookid=
bycategory.asp?id=
cardinfo.asp?card=
cart.asp?action=
cart.asp?cart_id=
cart.asp?id=
cart_additem.asp?id=
cart_validate.asp?id=
cartadd.asp?id=
cat.asp?iCat=
catalog.asp
catalog.asp?CatalogID=
catalog_item.asp?ID=
catalog_main.asp?catid=
category.asp
category.asp?catid=
category_list.asp?id=
categorydisplay.asp?catid=
checkout.asp?cartid=
checkout.asp?UserID=
checkout_confirmed.asp?order_id=
checkout1.asp?cartid=
comersus_listCategoriesAndProducts.asp?idCategory =
comersus_optEmailToFriendForm.asp?idProduct=
comersus_optReviewReadExec.asp?idProduct=
comersus_viewItem.asp?idProduct=
comments_form.asp?ID=
contact.asp?cartId=
content.asp?id=
customerService.asp?TextID1=
default.asp?catID=
description.asp?bookid=
details.asp?BookID=
details.asp?Press_Release_ID=
details.asp?Product_ID=
details.asp?Service_ID=
display_item.asp?id=
displayproducts.asp
downloadTrial.asp?intProdID=
emailproduct.asp?itemid=
emailToFriend.asp?idProduct=
events.asp?ID=
faq.asp?cartID=
faq_list.asp?id=
faqs.asp?id=
feedback.asp?title=
freedownload.asp?bookid=
fullDisplay.asp?item=
getbook.asp?bookid=
GetItems.asp?itemid=
giftDetail.asp?id=
help.asp?CartId=
home.asp?id=
index.asp?cart=
index.asp?cartID=
index.asp?ID=
info.asp?ID=
item.asp?eid=
item.asp?item_id=
item.asp?itemid=
item.asp?model=
item.asp?prodtype=
item.asp?shopcd=
item_details.asp?catid=
item_list.asp?maingroup
item_show.asp?code_no=
itemDesc.asp?CartId=
itemdetail.asp?item=
itemdetails.asp?catalogid=
learnmore.asp?cartID=
links.asp?catid=
list.asp?bookid=
List.asp?CatID=
listcategoriesandproducts.asp?idCategory=
modline.asp?id=
myaccount.asp?catid=
news.asp?id=
order.asp?BookID=
order.asp?id=
order.asp?item_ID=
OrderForm.asp?Cart=
page.asp?PartID=
payment.asp?CartID=
pdetail.asp?item_id=
powersearch.asp?CartId=
price.asp
privacy.asp?cartID=
prodbycat.asp?intCatalogID=
prodetails.asp?prodid=
prodlist.asp?catid=
product.asp?bookID=
product.asp?intProdID=
product_info.asp?item_id=
productDetails.asp?idProduct=
productDisplay.asp
productinfo.asp?item=
productlist.asp?ViewType=Category&CategoryID=
productpage.asp
products.asp?ID=
products.asp?keyword=
products_category.asp?CategoryID=
products_detail.asp?CategoryID=
productsByCategory.asp?intCatalogID=
prodView.asp?idProduct=
promo.asp?id=
promotion.asp?catid=
pview.asp?Item=
resellers.asp?idCategory=
results.asp?cat=
savecart.asp?CartId=
search.asp?CartID=
searchcat.asp?search_id=
Select_Item.asp?id=
Services.asp?ID=
shippinginfo.asp?CartId=
shop.asp?a=
shop.asp?action=
shop.asp?bookid=
shop.asp?cartID=
shop_details.asp?prodid=
shopaddtocart.asp
shopaddtocart.asp?catalogid=
shopbasket.asp?bookid=
shopbycategory.asp?catid=
shopcart.asp?title=
shopcreatorder.asp
shopcurrency.asp?cid=
shopdc.asp?bookid=
shopdisplaycategories.asp
shopdisplayproduct.asp?catalogid=
shopdisplayproducts.asp
shopexd.asp
shopexd.asp?catalogid=
shopping_basket.asp?cartID=
shopprojectlogin.asp
shopquery.asp?catalogid=
shopremoveitem.asp?cartid=
shopreviewadd.asp?id=
shopreviewlist.asp?id=
ShopSearch.asp?CategoryID=
shoptellafriend.asp?id=
shopthanks.asp
shopwelcome.asp?title=
show_item.asp?id=
show_item_details.asp?item_id=
showbook.asp?bookid=
showStore.asp?catID=
shprodde.asp?SKU=
specials.asp?id=
store.asp?id=
store_bycat.asp?id=
store_listing.asp?id=
Store_ViewProducts.asp?Cat=
store-details.asp?id=
storefront.asp?id=
storefronts.asp?title=
storeitem.asp?item=
StoreRedirect.asp?ID=
subcategories.asp?id=
tek9.asp?
template.asp?Action=Item&pid=
topic.asp?ID=
tuangou.asp?bookid=
type.asp?iType=
updatebasket.asp?bookid=
updates.asp?ID=
view.asp?cid=
view_cart.asp?title=
view_detail.asp?ID=
viewcart.asp?CartId=
viewCart.asp?userID=
viewCat_h.asp?idCategory=
viewevent.asp?EventID=
viewitem.asp?recor=
viewPrd.asp?idcategory=
ViewProduct.asp?misc=
voteList.asp?item_ID=
whatsnew.asp?idCategory=
WsAncillary.asp?ID=
WsPages.asp?ID=
Мы вновь вернули telegram чат форуму, вступайте, общайтесь, задавайте любые вопросы как администрации, так и пользователям!