Code Monkey home page Code Monkey logo

d4n155's Introduction

OWASP D4N155

made-with-bash GPLv3 license OWASP project

It's an information security audit tool that creates intelligent wordlists based on the content of the target page.

asciicast

Help us, See some calculations used

Ongoing projects 👷: D4N155 in docker 🎁, Web API D4N155 ☁️, Telegram bot 🤖

Install

Need to: Python3.6, Bash (GNU Bourne-Again SHell), Go

Optional: Git

Source

git clone https://github.com/owasp/D4N155.git
cd D4N155
pip3 install -r requirements.txt
bash main

Or whithout git

wget -qO- https://github.com/owasp/D4N155/archive/master.zip | bsdtar -xf-
cd D4N155-master
pip3 install -r requirements.txt
bash main

Docker

In image:

FROM docker.pkg.github.com/owasp/d4n155/d4n155:latest

Cli:

docker pull docker.pkg.github.com/owasp/d4n155/d4n155:latest
docker run -it d4n155

Manual

    D4N155: Tool for smart audit security

    Usage: bash main <option> <value>
    All options are optionals

    Options:
	-w, --wordlist	<url|ip>	Make the smartwordlist based in informations
					on website.
	-t, --targets	<file>  	Make the smart-wordlist based in your passed
					source informations in urls.
	-b, --based	<file>		Analyze texts to generate the
					custom wordlist
	-r, --rate	<time>		Defines time interval between requests
	-o, --output	<file>		For to store the all wordlist.
  	-?a, --aggressive      Aggressive reading with headless
	-h, --help			Show this mensage.

     Value: <url | ip | source | file | time>
	URL				URL target, example: scanme.nmap.org
	IP				IP address
	TIME				Time, example: 2.5. I.e: 00:00:02:30.. 0 are default
	FILE				File, for save the result, get urls or using in
					wordlist

d4n155's People

Contributors

fedeb95 avatar julioliraup avatar matholiveira91 avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

d4n155's Issues

invalid format in printf

There are some strings that break the printf command in read.sh file.
image
As a result of the following error, the wordlists file was not created.
error

Output File WC "No such file or directory"

Hi again!
Now im trying to run the script with the folowing params (based on the previous issue) and found that the script does not output a wordlist, instead it throws some bash errors on "no such file or directory" when trying to do the wc/cat command.

$ sudo bash main -t some-file.txt
(...)
             [ OWASP D4N155 ]

Targets inputed in   some-file.txt  
⣷ Make operations panic: open reports/db/wordlist.blob.txt: no such file or directory

⣾ Make operations ]:
main.check(...)
	/home/kali/HackTheWorld/experiments/D4N155/modules/GoMutation.go:13
main.main()
	/home/kali/HackTheWorld/experiments/D4N155/modules/GoMutation.go:92 +0xd0c
⣾ Make operations  Wordlist has been saved in
./reports/wordlist/wordlist.txt
wc: reports/db/wordlist.blob.txt: No such file or directory
wc: reports/db/wordlist.blob.txt: No such file or directory
cat: reports/wordlist/wordlist.txt: No such file or directory
[ ✔ ] The file has been saved in
  	→ report-custom.html 

Is there any way to bypass this?

leet applied on all final content

hi, I've seen that leet is applied only to the upper case letters of the original list of words you supply with -b parameter. Shouldn't it leet all final combinations of words and add them to the final list, also exchanging lowercase letters with numbers?

I can work of this if needed. Otherwise I'll just work on making further processing from the generated wordlist.

HTTPS Support

I'm trying to scan sites with https and it's prompting the following:

1) Make wordlist tradicional                                                                                       
2) Make wordlist aggressive
D4N155%#~> 2
[ ✔ ] Gecko file exists
Target is: https://twitter.com/sm4rtk1dz                            
Time interval in seconds (Default: -1): 
 Beginning attack, with Google indexations
Finalized search to httpstwitter.comsm4rtk1dz, database
has been saved in reports/db/httpstwitter.comsm4rtk1dz.txt
Reading urls content 0-0

Traceback (most recent call last):
  File "modules/read.py", line 22, in <module>
    print(aggressive_read(target))
  File "modules/read.py", line 10, in aggressive_read
    driver.get(f'http://{url}')
  File "/home/kali/.local/lib/python3.8/site-packages/selenium/webdriver/remote/webdriver.py", line 333, in get
    self.execute(Command.GET, {'url': url})
  File "/home/kali/.local/lib/python3.8/site-packages/selenium/webdriver/remote/webdriver.py", line 321, in execute
    self.error_handler.check_response(response)
  File "/home/kali/.local/lib/python3.8/site-packages/selenium/webdriver/remote/errorhandler.py", line 242, in check_response
    raise exception_class(message, screen, stacktrace)
selenium.common.exceptions.InvalidArgumentException: Message: Malformed URL: http:// is not a valid URL.

:.........................................[ ✔ ]
⣻ Make operations 
 Wordlist has been saved in
→ reports/wordlist/httpstwitter.comsm4rtk1dz.wordlist.txt                                                          
[ ✔ ] The file has been saved in
        → report-httpstwitter.html 

anyone knows how can I solve this? or if it's actually intended to scan Social media.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.