Visit https://themaildog.com for Professional Email Marketing Service.

Visit https://themaildog.com for Professional Email Marketing Service.


©2012, copyright BLACK BURN

Information Gathering using Metagoofil

Ever wonder what documents from your web site are indexed on Google? Well, a simple running of the metagoofil script and you will see them all. This Python script is located in the /pentest/enumeration/google/metagoofil folder within Backtrack. Here is an example run:

# python ./metagoofil.py -d mydomainname.com -l 100 -t pdf,doc -o results -f results.html

This will search the domain called mydomainname.com for all PDF files and Microsoft Word DOC files, will limit the results to the first 100, will generate a html document showing the results and will download the results (all the actual files) into the results subfolder.

To see all of the options for the script run this: #python ./metagoofil.py

One of the interesting things that the results file shows you is a listing of user names it found within the files.

Run this script on your domain and see what you are exposing to the world.

©2012, copyright BLACK BURN

Clone any site and turn it into Java drive-by – The simple way

Download

You’ll only need one file, client.jar.

Downloading a web page

Well, obviously we have a web page we want to download. In this example I’ll be usinghttp://www.google.com. Right click anywhere on the page and click “save as”. And save it to an empty folder. I’m using Chrome but I know firefox has a similar feature.

Editing the index file

Now open the folder where you saved the file. You’ll see you’ll have a file and a folder. Rename the file from whatever.htm to index.htm and accept any warning you may get.

Now open up index.htm in notepad. Scroll down to the very bottom of the page, make a new line and add this text:

Replace “YOURVIRUSURL” with the link to your .exe virus.

Save and close the file.

Placing the .jar file

Quick step, copy the client.jar you downloaded earlier to the same folder as the index.htm.

That’s it! Upload all of the files in the folder (including the folder “whatever_files”) to a webhost and you are ready!

©2012, copyright BLACK BURN