About

Saturday, April 5, 2014

Ultimate Web Recon (YGN Ethical Hacker Group)

Unknown | 9:20 PM | Best Blogger Tips

http://yehg.net/lab/1m4g35/2_slice.gif 



YGN Ethical Hacker Group က ဖန္တီးထားတဲ့ Ultimate Web Recon ေဆာ့၀ဲလ္ေလး တင္ေပးလိုက္ပါတယ္ခဗ်ာ၊
ကၽြန္ေတာ္တို ့ ျမန္မာႏိုင္ငံရဲ ့ နာမည္ၾကီး ဟက္ကာ ဂရုက ထြက္တဲ့ 
ေဆာ့၀ဲလ္ေတြဆိုေတာ့ ေျပာစရာ မလိုေအာင္ ေကာင္းပါတယ္၊ exploit လုပ္ဖို ့အတြက္ေတာ့
အဖိုးတန္ ရတနာ တစ္ခုလို တန္ဖိုးရိွတဲ့ ေဆာ့၀ဲလ္ျဖစ္ပါတယ္ဗ်ာ၊
 တစ္ခုေတာ့ရိွတယ္ေနာ္ ။ ဒီေဆာ့၀ဲလ္ကို အသံုးျပဳဖို ့ အတြက္
စက္ထဲမွာ Microsoft .NET Framework 4+ အထက္ ရိွရပါမယ္ခဗ်ာ၊

Ultimate Web Recon  


https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhEhUfwaLHRMlpYpypaWvR1SM8xFlx29pB0ymIsxScxN2ND3rHLetLq6hIYRTOI9vPsXr8CyRNC02Qh5nvSPqga1uKYT4RAaKKLCVHU5WvMFDIQx5kEgGRIbjbzft6RaGVhwa0WfvKlCjzR/s1600/Screenshot-0.png


https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBiwW7BBLn49M935JtnhQL9_rKWHyNqgOvHxXU6fvP0Kbn6N5sCEVysuwTUE8TWP0X45oiM8YnpHu0UNTqDFqWqfmp9pcSYcUOGTpBU6mcmCJEj2beL1kCCnpvN-LX-ivU2nQH7z4VC88u/s1600/Screenshot-1.png 


UltimateWebRecon :: Intro

With the prevalence of frame-busting scripts or X-Frame-Options header,  our web-based  Recon page is likely to be unusable soon in the future. So, we've coded a small Windows-based application that does the same.

UltimateWebRecon :: Minimum System Requirement


UltimateWebRecon :: Database Update

- Select Help > Update Database.

UltimateWebRecon :: Program Update

- The application should detect automatically at next launch after database update.

UltimateWebRecon :: Database Structure

The application uses an XML data file reconDb.xml which contains a list of common web resources that we use in our daily penetration testing projects.   You can examine the file's XML tag and attribute structure to add your own favorite URLs under classified categories.  An example goes like this:

<link name="Shodan" value="http://www.shodanhq.com/?q=%s" compatible="yes" ontextfield="" />

compatible (yes|no)  -  If it's set to 'Yes', it means the site is compatible with the IE rendering engine of the  application. And the application will load the site.

ontextfield (string) - text field input ID or name of site page. Once the page is loaded, Query text value of the application will be copied into the site page text field input so that you do not need type it.  This is applicable for those sites that allows only HTTP POST request.  This feature may not be reliable at all times due to time out triggered by long loading time of multiple page elements like js, css, ...etc.all - fill query string in all input text fields.  We may update the application to support POST-based request in the future but not for now.

UltimateWebRecon :: License

Ultimate Web Recon is under Freeware license. Permission is granted for use at your own risk.

UltimateWebRecon :: Legality

To comply with each web site's Terms of Service, the program does not/will not have automated query feature. It is designed to assist in human's manual research and analysis of information to be gathered.
 








0 comments:

Post a Comment

cOmmEnT ေလးမ်ား အားတပ္မက္ပါေသာသူပါခင္ဗ်ာ

ေနာက္ဆံုးတင္ထားတာေလးေတြ

get this widget here